- Kernel - mailweb.openeuler.org

[PATCH OLK-6.6] iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
by Zhang Zekun 16 Jul '24

16 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IACKUP ---------------------------------------------- The code is isolated by CONFIG_ARCH_HISI which could also be opened in other platforms . Change the style to identify the hisi platform to minimize the code influence scope. Fixes: 0b84ef37d4f8 ("iommu/arm-smmu-v3: Enable iotlb_sync_map according to SMMU_IIDR") Signed-off-by: Zhang Zekun <zhangzekun11(a)huawei.com> --- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 22 +++++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c index 87f9bed391ec..16217647fd67 100644 --- a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c +++ b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c @@ -141,6 +141,7 @@ struct arm_smmu_ctx_desc quiet_cd = { 0 }; static struct arm_smmu_option_prop arm_smmu_options[] = { { ARM_SMMU_OPT_SKIP_PREFETCH, "hisilicon,broken-prefetch-cmd" }, { ARM_SMMU_OPT_PAGE0_REGS_ONLY, "cavium,cn9900-broken-page1-regspace"}, + { ARM_SMMU_OPT_SYNC_MAP, "hisilicon,broken-prefetch-pgtbl"}, { 0, NULL}, }; @@ -4493,6 +4494,25 @@ static int arm_smmu_device_hw_probe(struct arm_smmu_device *smmu) } #ifdef CONFIG_ACPI +static struct acpi_platform_list arm_smmu_v3_plat_info[] __initdata = { + /* HiSilicon Hip09 Platform */ + {"HISI ", "HIP09 ", 0, ACPI_SIG_IORT, greater_than_or_equal, + "Erratum #162100602", 0}, + {"HISI ", "HIP10 ", 0, ACPI_SIG_IORT, greater_than_or_equal, + "Erratum #162100602", 0}, + {"HISI ", "HIP11 ", 0, ACPI_SIG_IORT, greater_than_or_equal, + "Erratum #162100602", 0}, + { } +}; + +static void acpi_get_hisi_options(struct arm_smmu_device *smmu) +{ + if (acpi_match_platform_list(arm_smmu_v3_plat_info) < 0) + return; + + smmu->options |= ARM_SMMU_OPT_SYNC_MAP; +} + static void acpi_smmu_get_options(u32 model, struct arm_smmu_device *smmu) { switch (model) { @@ -4504,6 +4524,8 @@ static void acpi_smmu_get_options(u32 model, struct arm_smmu_device *smmu) break; } + acpi_get_hisi_options(smmu); + dev_notice(smmu->dev, "option mask 0x%x\n", smmu->options); } -- 2.17.1

2 1

[PATCH OLK-6.6 0/1] kvm : add coda feature
by l00500167 16 Jul '24

16 Jul '24

virtCCA feature l00500167 (1): kvm: add coda feature Signed-off-by: l00500167 <lijunbin4(a)huawei.com> drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h | 14 ++++++++++++++ 1 file changed, 14 insertions(+) -- 2.25.1

2 2

[PATCH OLK-6.6 0/1] kvm : add coda feature
by l00500167 16 Jul '24

16 Jul '24

virtCCA feature l00500167 (1): kvm: add coda feature Signed-off-by: l00500167 <lijunbin4(a)huawei.com> drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h | 14 ++++++++++++++ include/linux/iommu.h | 10 ++++++++++ 2 files changed, 24 insertions(+) -- 2.25.1

2 2

[openeuler:OLK-6.6] BUILD SUCCESS 46ad6f1c27febfee76dfe034d20c531348ebb487
by kernel test robot 16 Jul '24

16 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-6.6 branch HEAD: 46ad6f1c27febfee76dfe034d20c531348ebb487 !9899 ionic: fix use after netif_napi_del() Warning ids grouped by kconfigs: recent_errors |-- arm64-allmodconfig | `-- clang:warning:no-such-include-directory:drivers-infiniband-hw-hiroce3-include-mag |-- arm64-defconfig | `-- drivers-char-virtio_console.c:warning:u-directive-output-may-be-truncated-writing-between-and-bytes-into-a-region-of-size-between-and |-- loongarch-allmodconfig | `-- arch-loongarch-kvm-..-..-..-virt-kvm-kvm_main.c:warning:kvmalloc_array-sizes-specified-with-sizeof-in-the-earlier-argument-and-not-in-the-later-argument |-- loongarch-defconfig | |-- arch-loongarch-kvm-..-..-..-virt-kvm-kvm_main.c:warning:kvmalloc_array-sizes-specified-with-sizeof-in-the-earlier-argument-and-not-in-the-later-argument | `-- drivers-char-virtio_console.c:warning:u-directive-output-may-be-truncated-writing-between-and-bytes-into-a-region-of-size-between-and |-- loongarch-randconfig-001-20240715 | |-- arch-loongarch-kvm-..-..-..-virt-kvm-kvm_main.c:warning:kvmalloc_array-sizes-specified-with-sizeof-in-the-earlier-argument-and-not-in-the-later-argument | `-- drivers-char-virtio_console.c:warning:u-directive-output-may-be-truncated-writing-between-and-bytes-into-a-region-of-size-between-and `-- x86_64-allyesconfig `-- drivers-gpu-drm-amd-amdgpu-..-amdkfd-kfd_topology.c:warning:stack-frame-size-()-exceeds-limit-()-in-kfd_topology_add_device elapsed time: 720m configs tested: 40 configs skipped: 134 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-14.1.0 arm64 defconfig gcc-14.1.0 arm64 randconfig-001-20240715 clang-19 arm64 randconfig-002-20240715 clang-19 arm64 randconfig-003-20240715 clang-19 arm64 randconfig-004-20240715 clang-19 loongarch allmodconfig gcc-14.1.0 loongarch allnoconfig gcc-14.1.0 loongarch defconfig gcc-14.1.0 loongarch randconfig-001-20240715 gcc-14.1.0 loongarch randconfig-002-20240715 gcc-14.1.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240715 clang-18 x86_64 buildonly-randconfig-002-20240715 gcc-13 x86_64 buildonly-randconfig-003-20240715 clang-18 x86_64 buildonly-randconfig-004-20240715 gcc-13 x86_64 buildonly-randconfig-005-20240715 gcc-13 x86_64 buildonly-randconfig-006-20240715 gcc-8 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240715 gcc-9 x86_64 randconfig-002-20240715 gcc-7 x86_64 randconfig-003-20240715 clang-18 x86_64 randconfig-004-20240715 clang-18 x86_64 randconfig-005-20240715 gcc-11 x86_64 randconfig-006-20240715 clang-18 x86_64 randconfig-011-20240715 gcc-12 x86_64 randconfig-012-20240715 clang-18 x86_64 randconfig-013-20240715 clang-18 x86_64 randconfig-014-20240715 gcc-12 x86_64 randconfig-015-20240715 gcc-10 x86_64 randconfig-016-20240715 gcc-10 x86_64 randconfig-071-20240715 gcc-13 x86_64 randconfig-072-20240715 gcc-13 x86_64 randconfig-073-20240715 gcc-13 x86_64 randconfig-074-20240715 gcc-12 x86_64 randconfig-075-20240715 clang-18 x86_64 randconfig-076-20240715 clang-18 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6 0/1] kvm: add coda feature
by l00500167 16 Jul '24

16 Jul '24

virtCCA feature l00500167 (1): kvm: add coda feature Signed-off-by: l00500167 <lijunbin4(a)huawei.com> drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h | 14 ++++++++++++++ include/linux/iommu.h | 9 +++++++++ 2 files changed, 23 insertions(+) -- 2.25.1

2 2

[PATCH OLK-6.6] parisc: Try to fix random segmentation faults in package builds
by Tengda Wu 16 Jul '24

16 Jul '24

From: John David Anglin <dave(a)parisc-linux.org> stable inclusion from stable-v6.6.35 commit 5bf196f1936bf93df31112fbdfb78c03537c07b0 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAD05C CVE: CVE-2024-40918 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 72d95924ee35c8cd16ef52f912483ee938a34d49 upstream. PA-RISC systems with PA8800 and PA8900 processors have had problems with random segmentation faults for many years. Systems with earlier processors are much more stable. Systems with PA8800 and PA8900 processors have a large L2 cache which needs per page flushing for decent performance when a large range is flushed. The combined cache in these systems is also more sensitive to non-equivalent aliases than the caches in earlier systems. The majority of random segmentation faults that I have looked at appear to be memory corruption in memory allocated using mmap and malloc. My first attempt at fixing the random faults didn't work. On reviewing the cache code, I realized that there were two issues which the existing code didn't handle correctly. Both relate to cache move-in. Another issue is that the present bit in PTEs is racy. 1) PA-RISC caches have a mind of their own and they can speculatively load data and instructions for a page as long as there is a entry in the TLB for the page which allows move-in. TLBs are local to each CPU. Thus, the TLB entry for a page must be purged before flushing the page. This is particularly important on SMP systems. In some of the flush routines, the flush routine would be called and then the TLB entry would be purged. This was because the flush routine needed the TLB entry to do the flush. 2) My initial approach to trying the fix the random faults was to try and use flush_cache_page_if_present for all flush operations. This actually made things worse and led to a couple of hardware lockups. It finally dawned on me that some lines weren't being flushed because the pte check code was racy. This resulted in random inequivalent mappings to physical pages. The __flush_cache_page tmpalias flush sets up its own TLB entry and it doesn't need the existing TLB entry. As long as we can find the pte pointer for the vm page, we can get the pfn and physical address of the page. We can also purge the TLB entry for the page before doing the flush. Further, __flush_cache_page uses a special TLB entry that inhibits cache move-in. When switching page mappings, we need to ensure that lines are removed from the cache. It is not sufficient to just flush the lines to memory as they may come back. This made it clear that we needed to implement all the required flush operations using tmpalias routines. This includes flushes for user and kernel pages. After modifying the code to use tmpalias flushes, it became clear that the random segmentation faults were not fully resolved. The frequency of faults was worse on systems with a 64 MB L2 (PA8900) and systems with more CPUs (rp4440). The warning that I added to flush_cache_page_if_present to detect pages that couldn't be flushed triggered frequently on some systems. Helge and I looked at the pages that couldn't be flushed and found that the PTE was either cleared or for a swap page. Ignoring pages that were swapped out seemed okay but pages with cleared PTEs seemed problematic. I looked at routines related to pte_clear and noticed ptep_clear_flush. The default implementation just flushes the TLB entry. However, it was obvious that on parisc we need to flush the cache page as well. If we don't flush the cache page, stale lines will be left in the cache and cause random corruption. Once a PTE is cleared, there is no way to find the physical address associated with the PTE and flush the associated page at a later time. I implemented an updated change with a parisc specific version of ptep_clear_flush. It fixed the random data corruption on Helge's rp4440 and rp3440, as well as on my c8000. At this point, I realized that I could restore the code where we only flush in flush_cache_page_if_present if the page has been accessed. However, for this, we also need to flush the cache when the accessed bit is cleared in ptep_clear_flush_young to keep things synchronized. The default implementation only flushes the TLB entry. Other changes in this version are: 1) Implement parisc specific version of ptep_get. It's identical to default but needed in arch/parisc/include/asm/pgtable.h. 2) Revise parisc implementation of ptep_test_and_clear_young to use ptep_get (READ_ONCE). 3) Drop parisc implementation of ptep_get_and_clear. We can use default. 4) Revise flush_kernel_vmap_range and invalidate_kernel_vmap_range to use full data cache flush. 5) Move flush_cache_vmap and flush_cache_vunmap to cache.c. Handle VM_IOREMAP case in flush_cache_vmap. At this time, I don't know whether it is better to always flush when the PTE present bit is set or when both the accessed and present bits are set. The later saves flushing pages that haven't been accessed, but we need to flush in ptep_clear_flush_young. It also needs a page table lookup to find the PTE pointer. The lpa instruction only needs a page table lookup when the PTE entry isn't in the TLB. We don't atomically handle setting and clearing the _PAGE_ACCESSED bit. If we miss an update, we may miss a flush and the cache may get corrupted. Whether the current code is effectively atomic depends on process control. When CONFIG_FLUSH_PAGE_ACCESSED is set to zero, the page will eventually be flushed when the PTE is cleared or in flush_cache_page_if_present. The _PAGE_ACCESSED bit is not used, so the problem is avoided. The flush method can be selected using the CONFIG_FLUSH_PAGE_ACCESSED define in cache.c. The default is 0. I didn't see a large difference in performance. Signed-off-by: John David Anglin <dave.anglin(a)bell.net> Cc: <stable(a)vger.kernel.org> # v6.6+ Signed-off-by: Helge Deller <deller(a)gmx.de> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Tengda Wu <wutengda2(a)huawei.com> --- arch/parisc/include/asm/cacheflush.h | 15 +- arch/parisc/include/asm/pgtable.h | 27 +- arch/parisc/kernel/cache.c | 413 +++++++++++++++++---------- 3 files changed, 275 insertions(+), 180 deletions(-) diff --git a/arch/parisc/include/asm/cacheflush.h b/arch/parisc/include/asm/cacheflush.h index ba4c05bc24d6..8394718870e1 100644 --- a/arch/parisc/include/asm/cacheflush.h +++ b/arch/parisc/include/asm/cacheflush.h @@ -31,18 +31,17 @@ void flush_cache_all_local(void); void flush_cache_all(void); void flush_cache_mm(struct mm_struct *mm); -void flush_kernel_dcache_page_addr(const void *addr); - #define flush_kernel_dcache_range(start,size) \ flush_kernel_dcache_range_asm((start), (start)+(size)); +/* The only way to flush a vmap range is to flush whole cache */ #define ARCH_IMPLEMENTS_FLUSH_KERNEL_VMAP_RANGE 1 void flush_kernel_vmap_range(void *vaddr, int size); void invalidate_kernel_vmap_range(void *vaddr, int size); -#define flush_cache_vmap(start, end) flush_cache_all() +void flush_cache_vmap(unsigned long start, unsigned long end); #define flush_cache_vmap_early(start, end) do { } while (0) -#define flush_cache_vunmap(start, end) flush_cache_all() +void flush_cache_vunmap(unsigned long start, unsigned long end); void flush_dcache_folio(struct folio *folio); #define flush_dcache_folio flush_dcache_folio @@ -77,17 +76,11 @@ void flush_cache_page(struct vm_area_struct *vma, unsigned long vmaddr, void flush_cache_range(struct vm_area_struct *vma, unsigned long start, unsigned long end); -/* defined in pacache.S exported in cache.c used by flush_anon_page */ -void flush_dcache_page_asm(unsigned long phys_addr, unsigned long vaddr); - #define ARCH_HAS_FLUSH_ANON_PAGE void flush_anon_page(struct vm_area_struct *vma, struct page *page, unsigned long vmaddr); #define ARCH_HAS_FLUSH_ON_KUNMAP -static inline void kunmap_flush_on_unmap(const void *addr) -{ - flush_kernel_dcache_page_addr(addr); -} +void kunmap_flush_on_unmap(const void *addr); #endif /* _PARISC_CACHEFLUSH_H */ diff --git a/arch/parisc/include/asm/pgtable.h b/arch/parisc/include/asm/pgtable.h index 974accac05cd..babf65751e81 100644 --- a/arch/parisc/include/asm/pgtable.h +++ b/arch/parisc/include/asm/pgtable.h @@ -448,14 +448,17 @@ static inline pte_t pte_swp_clear_exclusive(pte_t pte) return pte; } +static inline pte_t ptep_get(pte_t *ptep) +{ + return READ_ONCE(*ptep); +} +#define ptep_get ptep_get + static inline int ptep_test_and_clear_young(struct vm_area_struct *vma, unsigned long addr, pte_t *ptep) { pte_t pte; - if (!pte_young(*ptep)) - return 0; - - pte = *ptep; + pte = ptep_get(ptep); if (!pte_young(pte)) { return 0; } @@ -463,17 +466,10 @@ static inline int ptep_test_and_clear_young(struct vm_area_struct *vma, unsigned return 1; } -struct mm_struct; -static inline pte_t ptep_get_and_clear(struct mm_struct *mm, unsigned long addr, pte_t *ptep) -{ - pte_t old_pte; - - old_pte = *ptep; - set_pte(ptep, __pte(0)); - - return old_pte; -} +int ptep_clear_flush_young(struct vm_area_struct *vma, unsigned long addr, pte_t *ptep); +pte_t ptep_clear_flush(struct vm_area_struct *vma, unsigned long addr, pte_t *ptep); +struct mm_struct; static inline void ptep_set_wrprotect(struct mm_struct *mm, unsigned long addr, pte_t *ptep) { set_pte(ptep, pte_wrprotect(*ptep)); @@ -511,7 +507,8 @@ static inline void ptep_set_wrprotect(struct mm_struct *mm, unsigned long addr, #define HAVE_ARCH_UNMAPPED_AREA_TOPDOWN #define __HAVE_ARCH_PTEP_TEST_AND_CLEAR_YOUNG -#define __HAVE_ARCH_PTEP_GET_AND_CLEAR +#define __HAVE_ARCH_PTEP_CLEAR_YOUNG_FLUSH +#define __HAVE_ARCH_PTEP_CLEAR_FLUSH #define __HAVE_ARCH_PTEP_SET_WRPROTECT #define __HAVE_ARCH_PTE_SAME diff --git a/arch/parisc/kernel/cache.c b/arch/parisc/kernel/cache.c index 393822f16727..f7953b0391cf 100644 --- a/arch/parisc/kernel/cache.c +++ b/arch/parisc/kernel/cache.c @@ -20,6 +20,7 @@ #include <linux/sched.h> #include <linux/sched/mm.h> #include <linux/syscalls.h> +#include <linux/vmalloc.h> #include <asm/pdc.h> #include <asm/cache.h> #include <asm/cacheflush.h> @@ -31,20 +32,31 @@ #include <asm/mmu_context.h> #include <asm/cachectl.h> +#define PTR_PAGE_ALIGN_DOWN(addr) PTR_ALIGN_DOWN(addr, PAGE_SIZE) + +/* + * When nonzero, use _PAGE_ACCESSED bit to try to reduce the number + * of page flushes done flush_cache_page_if_present. There are some + * pros and cons in using this option. It may increase the risk of + * random segmentation faults. + */ +#define CONFIG_FLUSH_PAGE_ACCESSED 0 + int split_tlb __ro_after_init; int dcache_stride __ro_after_init; int icache_stride __ro_after_init; EXPORT_SYMBOL(dcache_stride); +/* Internal implementation in arch/parisc/kernel/pacache.S */ void flush_dcache_page_asm(unsigned long phys_addr, unsigned long vaddr); EXPORT_SYMBOL(flush_dcache_page_asm); void purge_dcache_page_asm(unsigned long phys_addr, unsigned long vaddr); void flush_icache_page_asm(unsigned long phys_addr, unsigned long vaddr); - -/* Internal implementation in arch/parisc/kernel/pacache.S */ void flush_data_cache_local(void *); /* flushes local data-cache only */ void flush_instruction_cache_local(void); /* flushes local code-cache only */ +static void flush_kernel_dcache_page_addr(const void *addr); + /* On some machines (i.e., ones with the Merced bus), there can be * only a single PxTLB broadcast at a time; this must be guaranteed * by software. We need a spinlock around all TLB flushes to ensure @@ -317,6 +329,18 @@ __flush_cache_page(struct vm_area_struct *vma, unsigned long vmaddr, { if (!static_branch_likely(&parisc_has_cache)) return; + + /* + * The TLB is the engine of coherence on parisc. The CPU is + * entitled to speculate any page with a TLB mapping, so here + * we kill the mapping then flush the page along a special flush + * only alias mapping. This guarantees that the page is no-longer + * in the cache for any process and nor may it be speculatively + * read in (until the user or kernel specifically accesses it, + * of course). + */ + flush_tlb_page(vma, vmaddr); + preempt_disable(); flush_dcache_page_asm(physaddr, vmaddr); if (vma->vm_flags & VM_EXEC) @@ -324,46 +348,44 @@ __flush_cache_page(struct vm_area_struct *vma, unsigned long vmaddr, preempt_enable(); } -static void flush_user_cache_page(struct vm_area_struct *vma, unsigned long vmaddr) +static void flush_kernel_dcache_page_addr(const void *addr) { - unsigned long flags, space, pgd, prot; -#ifdef CONFIG_TLB_PTLOCK - unsigned long pgd_lock; -#endif + unsigned long vaddr = (unsigned long)addr; + unsigned long flags; - vmaddr &= PAGE_MASK; + /* Purge TLB entry to remove translation on all CPUs */ + purge_tlb_start(flags); + pdtlb(SR_KERNEL, addr); + purge_tlb_end(flags); + /* Use tmpalias flush to prevent data cache move-in */ preempt_disable(); + flush_dcache_page_asm(__pa(vaddr), vaddr); + preempt_enable(); +} - /* Set context for flush */ - local_irq_save(flags); - prot = mfctl(8); - space = mfsp(SR_USER); - pgd = mfctl(25); -#ifdef CONFIG_TLB_PTLOCK - pgd_lock = mfctl(28); -#endif - switch_mm_irqs_off(NULL, vma->vm_mm, NULL); - local_irq_restore(flags); - - flush_user_dcache_range_asm(vmaddr, vmaddr + PAGE_SIZE); - if (vma->vm_flags & VM_EXEC) - flush_user_icache_range_asm(vmaddr, vmaddr + PAGE_SIZE); - flush_tlb_page(vma, vmaddr); +static void flush_kernel_icache_page_addr(const void *addr) +{ + unsigned long vaddr = (unsigned long)addr; + unsigned long flags; - /* Restore previous context */ - local_irq_save(flags); -#ifdef CONFIG_TLB_PTLOCK - mtctl(pgd_lock, 28); -#endif - mtctl(pgd, 25); - mtsp(space, SR_USER); - mtctl(prot, 8); - local_irq_restore(flags); + /* Purge TLB entry to remove translation on all CPUs */ + purge_tlb_start(flags); + pdtlb(SR_KERNEL, addr); + purge_tlb_end(flags); + /* Use tmpalias flush to prevent instruction cache move-in */ + preempt_disable(); + flush_icache_page_asm(__pa(vaddr), vaddr); preempt_enable(); } +void kunmap_flush_on_unmap(const void *addr) +{ + flush_kernel_dcache_page_addr(addr); +} +EXPORT_SYMBOL(kunmap_flush_on_unmap); + void flush_icache_pages(struct vm_area_struct *vma, struct page *page, unsigned int nr) { @@ -371,13 +393,16 @@ void flush_icache_pages(struct vm_area_struct *vma, struct page *page, for (;;) { flush_kernel_dcache_page_addr(kaddr); - flush_kernel_icache_page(kaddr); + flush_kernel_icache_page_addr(kaddr); if (--nr == 0) break; kaddr += PAGE_SIZE; } } +/* + * Walk page directory for MM to find PTEP pointer for address ADDR. + */ static inline pte_t *get_ptep(struct mm_struct *mm, unsigned long addr) { pte_t *ptep = NULL; @@ -406,6 +431,41 @@ static inline bool pte_needs_flush(pte_t pte) == (_PAGE_PRESENT | _PAGE_ACCESSED); } +/* + * Return user physical address. Returns 0 if page is not present. + */ +static inline unsigned long get_upa(struct mm_struct *mm, unsigned long addr) +{ + unsigned long flags, space, pgd, prot, pa; +#ifdef CONFIG_TLB_PTLOCK + unsigned long pgd_lock; +#endif + + /* Save context */ + local_irq_save(flags); + prot = mfctl(8); + space = mfsp(SR_USER); + pgd = mfctl(25); +#ifdef CONFIG_TLB_PTLOCK + pgd_lock = mfctl(28); +#endif + + /* Set context for lpa_user */ + switch_mm_irqs_off(NULL, mm, NULL); + pa = lpa_user(addr); + + /* Restore previous context */ +#ifdef CONFIG_TLB_PTLOCK + mtctl(pgd_lock, 28); +#endif + mtctl(pgd, 25); + mtsp(space, SR_USER); + mtctl(prot, 8); + local_irq_restore(flags); + + return pa; +} + void flush_dcache_folio(struct folio *folio) { struct address_space *mapping = folio_flush_mapping(folio); @@ -454,50 +514,23 @@ void flush_dcache_folio(struct folio *folio) if (addr + nr * PAGE_SIZE > vma->vm_end) nr = (vma->vm_end - addr) / PAGE_SIZE; - if (parisc_requires_coherency()) { - for (i = 0; i < nr; i++) { - pte_t *ptep = get_ptep(vma->vm_mm, - addr + i * PAGE_SIZE); - if (!ptep) - continue; - if (pte_needs_flush(*ptep)) - flush_user_cache_page(vma, - addr + i * PAGE_SIZE); - /* Optimise accesses to the same table? */ - pte_unmap(ptep); - } - } else { + if (old_addr == 0 || (old_addr & (SHM_COLOUR - 1)) + != (addr & (SHM_COLOUR - 1))) { + for (i = 0; i < nr; i++) + __flush_cache_page(vma, + addr + i * PAGE_SIZE, + (pfn + i) * PAGE_SIZE); /* - * The TLB is the engine of coherence on parisc: - * The CPU is entitled to speculate any page - * with a TLB mapping, so here we kill the - * mapping then flush the page along a special - * flush only alias mapping. This guarantees that - * the page is no-longer in the cache for any - * process and nor may it be speculatively read - * in (until the user or kernel specifically - * accesses it, of course) + * Software is allowed to have any number + * of private mappings to a page. */ - for (i = 0; i < nr; i++) - flush_tlb_page(vma, addr + i * PAGE_SIZE); - if (old_addr == 0 || (old_addr & (SHM_COLOUR - 1)) - != (addr & (SHM_COLOUR - 1))) { - for (i = 0; i < nr; i++) - __flush_cache_page(vma, - addr + i * PAGE_SIZE, - (pfn + i) * PAGE_SIZE); - /* - * Software is allowed to have any number - * of private mappings to a page. - */ - if (!(vma->vm_flags & VM_SHARED)) - continue; - if (old_addr) - pr_err("INEQUIVALENT ALIASES 0x%lx and 0x%lx in file %pD\n", - old_addr, addr, vma->vm_file); - if (nr == folio_nr_pages(folio)) - old_addr = addr; - } + if (!(vma->vm_flags & VM_SHARED)) + continue; + if (old_addr) + pr_err("INEQUIVALENT ALIASES 0x%lx and 0x%lx in file %pD\n", + old_addr, addr, vma->vm_file); + if (nr == folio_nr_pages(folio)) + old_addr = addr; } WARN_ON(++count == 4096); } @@ -587,35 +620,28 @@ extern void purge_kernel_dcache_page_asm(unsigned long); extern void clear_user_page_asm(void *, unsigned long); extern void copy_user_page_asm(void *, void *, unsigned long); -void flush_kernel_dcache_page_addr(const void *addr) -{ - unsigned long flags; - - flush_kernel_dcache_page_asm(addr); - purge_tlb_start(flags); - pdtlb(SR_KERNEL, addr); - purge_tlb_end(flags); -} -EXPORT_SYMBOL(flush_kernel_dcache_page_addr); - static void flush_cache_page_if_present(struct vm_area_struct *vma, - unsigned long vmaddr, unsigned long pfn) + unsigned long vmaddr) { +#if CONFIG_FLUSH_PAGE_ACCESSED bool needs_flush = false; - pte_t *ptep; + pte_t *ptep, pte; - /* - * The pte check is racy and sometimes the flush will trigger - * a non-access TLB miss. Hopefully, the page has already been - * flushed. - */ ptep = get_ptep(vma->vm_mm, vmaddr); if (ptep) { - needs_flush = pte_needs_flush(*ptep); + pte = ptep_get(ptep); + needs_flush = pte_needs_flush(pte); pte_unmap(ptep); } if (needs_flush) - flush_cache_page(vma, vmaddr, pfn); + __flush_cache_page(vma, vmaddr, PFN_PHYS(pte_pfn(pte))); +#else + struct mm_struct *mm = vma->vm_mm; + unsigned long physaddr = get_upa(mm, vmaddr); + + if (physaddr) + __flush_cache_page(vma, vmaddr, PAGE_ALIGN_DOWN(physaddr)); +#endif } void copy_user_highpage(struct page *to, struct page *from, @@ -625,7 +651,7 @@ void copy_user_highpage(struct page *to, struct page *from, kfrom = kmap_local_page(from); kto = kmap_local_page(to); - flush_cache_page_if_present(vma, vaddr, page_to_pfn(from)); + __flush_cache_page(vma, vaddr, PFN_PHYS(page_to_pfn(from))); copy_page_asm(kto, kfrom); kunmap_local(kto); kunmap_local(kfrom); @@ -634,16 +660,17 @@ void copy_user_highpage(struct page *to, struct page *from, void copy_to_user_page(struct vm_area_struct *vma, struct page *page, unsigned long user_vaddr, void *dst, void *src, int len) { - flush_cache_page_if_present(vma, user_vaddr, page_to_pfn(page)); + __flush_cache_page(vma, user_vaddr, PFN_PHYS(page_to_pfn(page))); memcpy(dst, src, len); - flush_kernel_dcache_range_asm((unsigned long)dst, (unsigned long)dst + len); + flush_kernel_dcache_page_addr(PTR_PAGE_ALIGN_DOWN(dst)); } void copy_from_user_page(struct vm_area_struct *vma, struct page *page, unsigned long user_vaddr, void *dst, void *src, int len) { - flush_cache_page_if_present(vma, user_vaddr, page_to_pfn(page)); + __flush_cache_page(vma, user_vaddr, PFN_PHYS(page_to_pfn(page))); memcpy(dst, src, len); + flush_kernel_dcache_page_addr(PTR_PAGE_ALIGN_DOWN(src)); } /* __flush_tlb_range() @@ -677,32 +704,10 @@ int __flush_tlb_range(unsigned long sid, unsigned long start, static void flush_cache_pages(struct vm_area_struct *vma, unsigned long start, unsigned long end) { - unsigned long addr, pfn; - pte_t *ptep; - - for (addr = start; addr < end; addr += PAGE_SIZE) { - bool needs_flush = false; - /* - * The vma can contain pages that aren't present. Although - * the pte search is expensive, we need the pte to find the - * page pfn and to check whether the page should be flushed. - */ - ptep = get_ptep(vma->vm_mm, addr); - if (ptep) { - needs_flush = pte_needs_flush(*ptep); - pfn = pte_pfn(*ptep); - pte_unmap(ptep); - } - if (needs_flush) { - if (parisc_requires_coherency()) { - flush_user_cache_page(vma, addr); - } else { - if (WARN_ON(!pfn_valid(pfn))) - return; - __flush_cache_page(vma, addr, PFN_PHYS(pfn)); - } - } - } + unsigned long addr; + + for (addr = start; addr < end; addr += PAGE_SIZE) + flush_cache_page_if_present(vma, addr); } static inline unsigned long mm_total_size(struct mm_struct *mm) @@ -753,21 +758,19 @@ void flush_cache_range(struct vm_area_struct *vma, unsigned long start, unsigned if (WARN_ON(IS_ENABLED(CONFIG_SMP) && arch_irqs_disabled())) return; flush_tlb_range(vma, start, end); - flush_cache_all(); + if (vma->vm_flags & VM_EXEC) + flush_cache_all(); + else + flush_data_cache(); return; } - flush_cache_pages(vma, start, end); + flush_cache_pages(vma, start & PAGE_MASK, end); } void flush_cache_page(struct vm_area_struct *vma, unsigned long vmaddr, unsigned long pfn) { - if (WARN_ON(!pfn_valid(pfn))) - return; - if (parisc_requires_coherency()) - flush_user_cache_page(vma, vmaddr); - else - __flush_cache_page(vma, vmaddr, PFN_PHYS(pfn)); + __flush_cache_page(vma, vmaddr, PFN_PHYS(pfn)); } void flush_anon_page(struct vm_area_struct *vma, struct page *page, unsigned long vmaddr) @@ -775,34 +778,133 @@ void flush_anon_page(struct vm_area_struct *vma, struct page *page, unsigned lon if (!PageAnon(page)) return; - if (parisc_requires_coherency()) { - if (vma->vm_flags & VM_SHARED) - flush_data_cache(); - else - flush_user_cache_page(vma, vmaddr); + __flush_cache_page(vma, vmaddr, PFN_PHYS(page_to_pfn(page))); +} + +int ptep_clear_flush_young(struct vm_area_struct *vma, unsigned long addr, + pte_t *ptep) +{ + pte_t pte = ptep_get(ptep); + + if (!pte_young(pte)) + return 0; + set_pte(ptep, pte_mkold(pte)); +#if CONFIG_FLUSH_PAGE_ACCESSED + __flush_cache_page(vma, addr, PFN_PHYS(pte_pfn(pte))); +#endif + return 1; +} + +/* + * After a PTE is cleared, we have no way to flush the cache for + * the physical page. On PA8800 and PA8900 processors, these lines + * can cause random cache corruption. Thus, we must flush the cache + * as well as the TLB when clearing a PTE that's valid. + */ +pte_t ptep_clear_flush(struct vm_area_struct *vma, unsigned long addr, + pte_t *ptep) +{ + struct mm_struct *mm = (vma)->vm_mm; + pte_t pte = ptep_get_and_clear(mm, addr, ptep); + unsigned long pfn = pte_pfn(pte); + + if (pfn_valid(pfn)) + __flush_cache_page(vma, addr, PFN_PHYS(pfn)); + else if (pte_accessible(mm, pte)) + flush_tlb_page(vma, addr); + + return pte; +} + +/* + * The physical address for pages in the ioremap case can be obtained + * from the vm_struct struct. I wasn't able to successfully handle the + * vmalloc and vmap cases. We have an array of struct page pointers in + * the uninitialized vmalloc case but the flush failed using page_to_pfn. + */ +void flush_cache_vmap(unsigned long start, unsigned long end) +{ + unsigned long addr, physaddr; + struct vm_struct *vm; + + /* Prevent cache move-in */ + flush_tlb_kernel_range(start, end); + + if (end - start >= parisc_cache_flush_threshold) { + flush_cache_all(); return; } - flush_tlb_page(vma, vmaddr); - preempt_disable(); - flush_dcache_page_asm(page_to_phys(page), vmaddr); - preempt_enable(); + if (WARN_ON_ONCE(!is_vmalloc_addr((void *)start))) { + flush_cache_all(); + return; + } + + vm = find_vm_area((void *)start); + if (WARN_ON_ONCE(!vm)) { + flush_cache_all(); + return; + } + + /* The physical addresses of IOREMAP regions are contiguous */ + if (vm->flags & VM_IOREMAP) { + physaddr = vm->phys_addr; + for (addr = start; addr < end; addr += PAGE_SIZE) { + preempt_disable(); + flush_dcache_page_asm(physaddr, start); + flush_icache_page_asm(physaddr, start); + preempt_enable(); + physaddr += PAGE_SIZE; + } + return; + } + + flush_cache_all(); } +EXPORT_SYMBOL(flush_cache_vmap); +/* + * The vm_struct has been retired and the page table is set up. The + * last page in the range is a guard page. Its physical address can't + * be determined using lpa, so there is no way to flush the range + * using flush_dcache_page_asm. + */ +void flush_cache_vunmap(unsigned long start, unsigned long end) +{ + /* Prevent cache move-in */ + flush_tlb_kernel_range(start, end); + flush_data_cache(); +} +EXPORT_SYMBOL(flush_cache_vunmap); + +/* + * On systems with PA8800/PA8900 processors, there is no way to flush + * a vmap range other than using the architected loop to flush the + * entire cache. The page directory is not set up, so we can't use + * fdc, etc. FDCE/FICE don't work to flush a portion of the cache. + * L2 is physically indexed but FDCE/FICE instructions in virtual + * mode output their virtual address on the core bus, not their + * real address. As a result, the L2 cache index formed from the + * virtual address will most likely not be the same as the L2 index + * formed from the real address. + */ void flush_kernel_vmap_range(void *vaddr, int size) { unsigned long start = (unsigned long)vaddr; unsigned long end = start + size; - if ((!IS_ENABLED(CONFIG_SMP) || !arch_irqs_disabled()) && - (unsigned long)size >= parisc_cache_flush_threshold) { - flush_tlb_kernel_range(start, end); - flush_data_cache(); + flush_tlb_kernel_range(start, end); + + if (!static_branch_likely(&parisc_has_dcache)) + return; + + /* If interrupts are disabled, we can only do local flush */ + if (WARN_ON(IS_ENABLED(CONFIG_SMP) && arch_irqs_disabled())) { + flush_data_cache_local(NULL); return; } - flush_kernel_dcache_range_asm(start, end); - flush_tlb_kernel_range(start, end); + flush_data_cache(); } EXPORT_SYMBOL(flush_kernel_vmap_range); @@ -814,15 +916,18 @@ void invalidate_kernel_vmap_range(void *vaddr, int size) /* Ensure DMA is complete */ asm_syncdma(); - if ((!IS_ENABLED(CONFIG_SMP) || !arch_irqs_disabled()) && - (unsigned long)size >= parisc_cache_flush_threshold) { - flush_tlb_kernel_range(start, end); - flush_data_cache(); + flush_tlb_kernel_range(start, end); + + if (!static_branch_likely(&parisc_has_dcache)) + return; + + /* If interrupts are disabled, we can only do local flush */ + if (WARN_ON(IS_ENABLED(CONFIG_SMP) && arch_irqs_disabled())) { + flush_data_cache_local(NULL); return; } - purge_kernel_dcache_range_asm(start, end); - flush_tlb_kernel_range(start, end); + flush_data_cache(); } EXPORT_SYMBOL(invalidate_kernel_vmap_range); -- 2.34.1

2 1

[PATCH OLK-6.6 0/1] kvm: add coda feature
by l00500167 15 Jul '24

15 Jul '24

virtCCA feature l00500167 (1): kvm: add coda feature Signed-off-by: l00500167 <lijunbin4(a)huawei.com> drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h | 14 ++++++++++++++ include/linux/iommu.h | 9 +++++++++ 2 files changed, 23 insertions(+) -- 2.25.1

2 2

[PATCH OLK-5.10 0/2] CVE-2024-40972
by Yifan Qiao 15 Jul '24

15 Jul '24

Jan Kara (2): ext4: fold quota accounting into ext4_xattr_inode_lookup_create() ext4: do not create EA inode under buffer lock fs/ext4/xattr.c | 154 +++++++++++++++++++++++------------------------- 1 file changed, 73 insertions(+), 81 deletions(-) -- 2.39.2

2 3

[PATCH openEuler-22.03-LTS-SP1 0/2] CVE-2024-40972
by Yifan Qiao 15 Jul '24

15 Jul '24

Jan Kara (2): ext4: fold quota accounting into ext4_xattr_inode_lookup_create() ext4: do not create EA inode under buffer lock fs/ext4/xattr.c | 154 +++++++++++++++++++++++------------------------- 1 file changed, 73 insertions(+), 81 deletions(-) -- 2.39.2

2 3

[PATCH OLK-6.6] drm/komeda: check for error-valued pointer
by Zeng Heng 15 Jul '24

15 Jul '24

From: Amjad Ouled-Ameur <amjad.ouled-ameur(a)arm.com> stable inclusion from stable-v6.6.35 commit 9460961d82134ceda7377b77a3e3e3531b625dfe category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACQYC CVE: CVE-2024-39505 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit b880018edd3a577e50366338194dee9b899947e0 ] komeda_pipeline_get_state() may return an error-valued pointer, thus check the pointer for negative or null value before dereferencing. Fixes: 502932a03fce ("drm/komeda: Add the initial scaler support for CORE") Signed-off-by: Amjad Ouled-Ameur <amjad.ouled-ameur(a)arm.com> Signed-off-by: Maxime Ripard <mripard(a)kernel.org> Link: https://patchwork.freedesktop.org/patch/msgid/20240610102056.40406-1-amjad.… Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/gpu/drm/arm/display/komeda/komeda_pipeline_state.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/gpu/drm/arm/display/komeda/komeda_pipeline_state.c b/drivers/gpu/drm/arm/display/komeda/komeda_pipeline_state.c index f3e744172673..f4e76b46ca32 100644 --- a/drivers/gpu/drm/arm/display/komeda/komeda_pipeline_state.c +++ b/drivers/gpu/drm/arm/display/komeda/komeda_pipeline_state.c @@ -259,7 +259,7 @@ komeda_component_get_avail_scaler(struct komeda_component *c, u32 avail_scalers; pipe_st = komeda_pipeline_get_state(c->pipeline, state); - if (!pipe_st) + if (IS_ERR_OR_NULL(pipe_st)) return NULL; avail_scalers = (pipe_st->active_comps & KOMEDA_PIPELINE_SCALERS) ^ -- 2.25.1

2 1

[PATCH openEuler-22.03-LTS-SP1] drm/komeda: check for error-valued pointer
by Zeng Heng 15 Jul '24

15 Jul '24

From: Amjad Ouled-Ameur <amjad.ouled-ameur(a)arm.com> stable inclusion from stable-v5.10.221 commit bda7cdaeebf57e46c1a488ae7a15f6f264691f59 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACQYC CVE: CVE-2024-39505 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit b880018edd3a577e50366338194dee9b899947e0 ] komeda_pipeline_get_state() may return an error-valued pointer, thus check the pointer for negative or null value before dereferencing. Fixes: 502932a03fce ("drm/komeda: Add the initial scaler support for CORE") Signed-off-by: Amjad Ouled-Ameur <amjad.ouled-ameur(a)arm.com> Signed-off-by: Maxime Ripard <mripard(a)kernel.org> Link: https://patchwork.freedesktop.org/patch/msgid/20240610102056.40406-1-amjad.… Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/gpu/drm/arm/display/komeda/komeda_pipeline_state.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/gpu/drm/arm/display/komeda/komeda_pipeline_state.c b/drivers/gpu/drm/arm/display/komeda/komeda_pipeline_state.c index c3cdf283ecef..6e115782bf89 100644 --- a/drivers/gpu/drm/arm/display/komeda/komeda_pipeline_state.c +++ b/drivers/gpu/drm/arm/display/komeda/komeda_pipeline_state.c @@ -259,7 +259,7 @@ komeda_component_get_avail_scaler(struct komeda_component *c, u32 avail_scalers; pipe_st = komeda_pipeline_get_state(c->pipeline, state); - if (!pipe_st) + if (IS_ERR_OR_NULL(pipe_st)) return NULL; avail_scalers = (pipe_st->active_comps & KOMEDA_PIPELINE_SCALERS) ^ -- 2.25.1

2 1

[PATCH OLK-5.10] drm/komeda: check for error-valued pointer
by Zeng Heng 15 Jul '24

15 Jul '24

From: Amjad Ouled-Ameur <amjad.ouled-ameur(a)arm.com> stable inclusion from stable-v5.10.221 commit bda7cdaeebf57e46c1a488ae7a15f6f264691f59 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACQYC CVE: CVE-2024-39505 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit b880018edd3a577e50366338194dee9b899947e0 ] komeda_pipeline_get_state() may return an error-valued pointer, thus check the pointer for negative or null value before dereferencing. Fixes: 502932a03fce ("drm/komeda: Add the initial scaler support for CORE") Signed-off-by: Amjad Ouled-Ameur <amjad.ouled-ameur(a)arm.com> Signed-off-by: Maxime Ripard <mripard(a)kernel.org> Link: https://patchwork.freedesktop.org/patch/msgid/20240610102056.40406-1-amjad.… Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/gpu/drm/arm/display/komeda/komeda_pipeline_state.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/gpu/drm/arm/display/komeda/komeda_pipeline_state.c b/drivers/gpu/drm/arm/display/komeda/komeda_pipeline_state.c index c3cdf283ecef..6e115782bf89 100644 --- a/drivers/gpu/drm/arm/display/komeda/komeda_pipeline_state.c +++ b/drivers/gpu/drm/arm/display/komeda/komeda_pipeline_state.c @@ -259,7 +259,7 @@ komeda_component_get_avail_scaler(struct komeda_component *c, u32 avail_scalers; pipe_st = komeda_pipeline_get_state(c->pipeline, state); - if (!pipe_st) + if (IS_ERR_OR_NULL(pipe_st)) return NULL; avail_scalers = (pipe_st->active_comps & KOMEDA_PIPELINE_SCALERS) ^ -- 2.25.1

2 1

[PATCH OLK-6.6 0/1] kvm: add cvm coda feature
by l00500167 15 Jul '24

15 Jul '24

virtCCA feature l00500167 (1): kvm: add coda feature Signed-off-by: l00500167 <lijunbin4(a)huawei.com> drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h | 14 ++++++++++++++ include/linux/iommu.h | 4 +++- 2 files changed, 17 insertions(+), 1 deletion(-) -- 2.25.1

2 2

[PATCH openEuler-22.03-LTS-SP1] f2fs: remove clear SB_INLINECRYPT flag in default_options
by Yifan Qiao 15 Jul '24

15 Jul '24

From: Yunlei He <heyunlei(a)oppo.com> stable inclusion from stable-v5.10.221 commit 38a82c8d00638bb642bef787eb1d5e0e4d3b7d71 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACZZP CVE: CVE-2024-40971 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit ac5eecf481c29942eb9a862e758c0c8b68090c33 ] In f2fs_remount, SB_INLINECRYPT flag will be clear and re-set. If create new file or open file during this gap, these files will not use inlinecrypt. Worse case, it may lead to data corruption if wrappedkey_v0 is enable. Thread A: Thread B: -f2fs_remount -f2fs_file_open or f2fs_new_inode -default_options <- clear SB_INLINECRYPT flag -fscrypt_select_encryption_impl -parse_options <- set SB_INLINECRYPT again Signed-off-by: Yunlei He <heyunlei(a)oppo.com> Reviewed-by: Chao Yu <chao(a)kernel.org> Signed-off-by: Jaegeuk Kim <jaegeuk(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Conflicts: fs/f2fs/super.c [Context differences] Signed-off-by: Yifan Qiao <qiaoyifan4(a)huawei.com> --- fs/f2fs/super.c | 2 -- 1 file changed, 2 deletions(-) diff --git a/fs/f2fs/super.c b/fs/f2fs/super.c index fba413ced982..565289233b3b 100644 --- a/fs/f2fs/super.c +++ b/fs/f2fs/super.c @@ -1714,8 +1714,6 @@ static void default_options(struct f2fs_sb_info *sbi) F2FS_OPTION(sbi).compress_ext_cnt = 0; F2FS_OPTION(sbi).bggc_mode = BGGC_MODE_ON; - sbi->sb->s_flags &= ~SB_INLINECRYPT; - set_opt(sbi, INLINE_XATTR); set_opt(sbi, INLINE_DATA); set_opt(sbi, INLINE_DENTRY); -- 2.39.2

2 1

[PATCH OLK-5.10] f2fs: remove clear SB_INLINECRYPT flag in default_options
by Yifan Qiao 15 Jul '24

15 Jul '24

From: Yunlei He <heyunlei(a)oppo.com> stable inclusion from stable-v5.10.221 commit 38a82c8d00638bb642bef787eb1d5e0e4d3b7d71 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACZZP CVE: CVE-2024-40971 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit ac5eecf481c29942eb9a862e758c0c8b68090c33 ] In f2fs_remount, SB_INLINECRYPT flag will be clear and re-set. If create new file or open file during this gap, these files will not use inlinecrypt. Worse case, it may lead to data corruption if wrappedkey_v0 is enable. Thread A: Thread B: -f2fs_remount -f2fs_file_open or f2fs_new_inode -default_options <- clear SB_INLINECRYPT flag -fscrypt_select_encryption_impl -parse_options <- set SB_INLINECRYPT again Signed-off-by: Yunlei He <heyunlei(a)oppo.com> Reviewed-by: Chao Yu <chao(a)kernel.org> Signed-off-by: Jaegeuk Kim <jaegeuk(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Conflicts: fs/f2fs/super.c [Context differences] Signed-off-by: Yifan Qiao <qiaoyifan4(a)huawei.com> --- fs/f2fs/super.c | 2 -- 1 file changed, 2 deletions(-) diff --git a/fs/f2fs/super.c b/fs/f2fs/super.c index 6a214366970c..daa31574acfb 100644 --- a/fs/f2fs/super.c +++ b/fs/f2fs/super.c @@ -1713,8 +1713,6 @@ static void default_options(struct f2fs_sb_info *sbi) F2FS_OPTION(sbi).compress_ext_cnt = 0; F2FS_OPTION(sbi).bggc_mode = BGGC_MODE_ON; - sbi->sb->s_flags &= ~SB_INLINECRYPT; - set_opt(sbi, INLINE_XATTR); set_opt(sbi, INLINE_DATA); set_opt(sbi, INLINE_DENTRY); -- 2.39.2

2 1

[PATCH OLK-6.6 0/2] CVE-2024-40955
by Yifan Qiao 15 Jul '24

15 Jul '24

Baokun Li (2): ext4: avoid overflow when setting values via sysfs ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists() fs/ext4/mballoc.c | 4 ++++ fs/ext4/sysfs.c | 24 ++++++++++++++++++------ 2 files changed, 22 insertions(+), 6 deletions(-) -- 2.39.2

2 3

[PATCH openEuler-1.0-LTS] ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
by Zeng Heng 15 Jul '24

15 Jul '24

From: Raju Rangoju <Raju.Rangoju(a)amd.com> stable inclusion from stable-v4.19.317 commit 435ecc978c3d5d0c4e172ec5b956dc1904061d98 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAD09L CVE: CVE-2024-40984 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit a83e1385b780d41307433ddbc86e3c528db031f0 ] Undo the modifications made in commit d410ee5109a1 ("ACPICA: avoid "Info: mapping multiple BARs. Your kernel is fine.""). The initial purpose of this commit was to stop memory mappings for operation regions from overlapping page boundaries, as it can trigger warnings if different page attributes are present. However, it was found that when this situation arises, mapping continues until the boundary's end, but there is still an attempt to read/write the entire length of the map, leading to a NULL pointer deference. For example, if a four-byte mapping request is made but only one byte is mapped because it hits the current page boundary's end, a four-byte read/write attempt is still made, resulting in a NULL pointer deference. Instead, map the entire length, as the ACPI specification does not mandate that it must be within the same page boundary. It is permissible for it to be mapped across different regions. Link: https://github.com/acpica/acpica/pull/954 Closes: https://bugzilla.kernel.org/show_bug.cgi?id=218849 Fixes: d410ee5109a1 ("ACPICA: avoid "Info: mapping multiple BARs. Your kernel is fine."") Co-developed-by: Sanath S <Sanath.S(a)amd.com> Signed-off-by: Sanath S <Sanath.S(a)amd.com> Signed-off-by: Raju Rangoju <Raju.Rangoju(a)amd.com> Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/acpi/acpica/exregion.c | 23 ++--------------------- 1 file changed, 2 insertions(+), 21 deletions(-) diff --git a/drivers/acpi/acpica/exregion.c b/drivers/acpi/acpica/exregion.c index 97bbfd07fcf7..2d99cbbf82d1 100644 --- a/drivers/acpi/acpica/exregion.c +++ b/drivers/acpi/acpica/exregion.c @@ -43,7 +43,6 @@ acpi_ex_system_memory_space_handler(u32 function, struct acpi_mem_space_context *mem_info = region_context; u32 length; acpi_size map_length; - acpi_size page_boundary_map_length; #ifdef ACPI_MISALIGNMENT_NOT_SUPPORTED u32 remainder; #endif @@ -120,26 +119,8 @@ acpi_ex_system_memory_space_handler(u32 function, map_length = (acpi_size) ((mem_info->address + mem_info->length) - address); - /* - * If mapping the entire remaining portion of the region will cross - * a page boundary, just map up to the page boundary, do not cross. - * On some systems, crossing a page boundary while mapping regions - * can cause warnings if the pages have different attributes - * due to resource management. - * - * This has the added benefit of constraining a single mapping to - * one page, which is similar to the original code that used a 4k - * maximum window. - */ - page_boundary_map_length = (acpi_size) - (ACPI_ROUND_UP(address, ACPI_DEFAULT_PAGE_SIZE) - address); - if (page_boundary_map_length == 0) { - page_boundary_map_length = ACPI_DEFAULT_PAGE_SIZE; - } - - if (map_length > page_boundary_map_length) { - map_length = page_boundary_map_length; - } + if (map_length > ACPI_DEFAULT_PAGE_SIZE) + map_length = ACPI_DEFAULT_PAGE_SIZE; /* Create a new mapping starting at the address given */ -- 2.25.1

2 1

[PATCH openEuler-22.03-LTS-SP1] ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
by Zeng Heng 15 Jul '24

15 Jul '24

From: Raju Rangoju <Raju.Rangoju(a)amd.com> stable inclusion from stable-v5.10.221 commit 6eca23100e9030725f69c1babacd58803f29ec8d category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAD09L CVE: CVE-2024-40984 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit a83e1385b780d41307433ddbc86e3c528db031f0 ] Undo the modifications made in commit d410ee5109a1 ("ACPICA: avoid "Info: mapping multiple BARs. Your kernel is fine.""). The initial purpose of this commit was to stop memory mappings for operation regions from overlapping page boundaries, as it can trigger warnings if different page attributes are present. However, it was found that when this situation arises, mapping continues until the boundary's end, but there is still an attempt to read/write the entire length of the map, leading to a NULL pointer deference. For example, if a four-byte mapping request is made but only one byte is mapped because it hits the current page boundary's end, a four-byte read/write attempt is still made, resulting in a NULL pointer deference. Instead, map the entire length, as the ACPI specification does not mandate that it must be within the same page boundary. It is permissible for it to be mapped across different regions. Link: https://github.com/acpica/acpica/pull/954 Closes: https://bugzilla.kernel.org/show_bug.cgi?id=218849 Fixes: d410ee5109a1 ("ACPICA: avoid "Info: mapping multiple BARs. Your kernel is fine."") Co-developed-by: Sanath S <Sanath.S(a)amd.com> Signed-off-by: Sanath S <Sanath.S(a)amd.com> Signed-off-by: Raju Rangoju <Raju.Rangoju(a)amd.com> Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/acpi/acpica/exregion.c | 23 ++--------------------- 1 file changed, 2 insertions(+), 21 deletions(-) diff --git a/drivers/acpi/acpica/exregion.c b/drivers/acpi/acpica/exregion.c index 4914dbc44517..5bbbd015de5a 100644 --- a/drivers/acpi/acpica/exregion.c +++ b/drivers/acpi/acpica/exregion.c @@ -44,7 +44,6 @@ acpi_ex_system_memory_space_handler(u32 function, struct acpi_mem_mapping *mm = mem_info->cur_mm; u32 length; acpi_size map_length; - acpi_size page_boundary_map_length; #ifdef ACPI_MISALIGNMENT_NOT_SUPPORTED u32 remainder; #endif @@ -138,26 +137,8 @@ acpi_ex_system_memory_space_handler(u32 function, map_length = (acpi_size) ((mem_info->address + mem_info->length) - address); - /* - * If mapping the entire remaining portion of the region will cross - * a page boundary, just map up to the page boundary, do not cross. - * On some systems, crossing a page boundary while mapping regions - * can cause warnings if the pages have different attributes - * due to resource management. - * - * This has the added benefit of constraining a single mapping to - * one page, which is similar to the original code that used a 4k - * maximum window. - */ - page_boundary_map_length = (acpi_size) - (ACPI_ROUND_UP(address, ACPI_DEFAULT_PAGE_SIZE) - address); - if (page_boundary_map_length == 0) { - page_boundary_map_length = ACPI_DEFAULT_PAGE_SIZE; - } - - if (map_length > page_boundary_map_length) { - map_length = page_boundary_map_length; - } + if (map_length > ACPI_DEFAULT_PAGE_SIZE) + map_length = ACPI_DEFAULT_PAGE_SIZE; /* Create a new mapping starting at the address given */ -- 2.25.1

2 1

[PATCH OLK-5.10] ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
by Zeng Heng 15 Jul '24

15 Jul '24

From: Raju Rangoju <Raju.Rangoju(a)amd.com> stable inclusion from stable-v5.10.221 commit 6eca23100e9030725f69c1babacd58803f29ec8d category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAD09L CVE: CVE-2024-40984 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit a83e1385b780d41307433ddbc86e3c528db031f0 ] Undo the modifications made in commit d410ee5109a1 ("ACPICA: avoid "Info: mapping multiple BARs. Your kernel is fine.""). The initial purpose of this commit was to stop memory mappings for operation regions from overlapping page boundaries, as it can trigger warnings if different page attributes are present. However, it was found that when this situation arises, mapping continues until the boundary's end, but there is still an attempt to read/write the entire length of the map, leading to a NULL pointer deference. For example, if a four-byte mapping request is made but only one byte is mapped because it hits the current page boundary's end, a four-byte read/write attempt is still made, resulting in a NULL pointer deference. Instead, map the entire length, as the ACPI specification does not mandate that it must be within the same page boundary. It is permissible for it to be mapped across different regions. Link: https://github.com/acpica/acpica/pull/954 Closes: https://bugzilla.kernel.org/show_bug.cgi?id=218849 Fixes: d410ee5109a1 ("ACPICA: avoid "Info: mapping multiple BARs. Your kernel is fine."") Co-developed-by: Sanath S <Sanath.S(a)amd.com> Signed-off-by: Sanath S <Sanath.S(a)amd.com> Signed-off-by: Raju Rangoju <Raju.Rangoju(a)amd.com> Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/acpi/acpica/exregion.c | 23 ++--------------------- 1 file changed, 2 insertions(+), 21 deletions(-) diff --git a/drivers/acpi/acpica/exregion.c b/drivers/acpi/acpica/exregion.c index 4914dbc44517..5bbbd015de5a 100644 --- a/drivers/acpi/acpica/exregion.c +++ b/drivers/acpi/acpica/exregion.c @@ -44,7 +44,6 @@ acpi_ex_system_memory_space_handler(u32 function, struct acpi_mem_mapping *mm = mem_info->cur_mm; u32 length; acpi_size map_length; - acpi_size page_boundary_map_length; #ifdef ACPI_MISALIGNMENT_NOT_SUPPORTED u32 remainder; #endif @@ -138,26 +137,8 @@ acpi_ex_system_memory_space_handler(u32 function, map_length = (acpi_size) ((mem_info->address + mem_info->length) - address); - /* - * If mapping the entire remaining portion of the region will cross - * a page boundary, just map up to the page boundary, do not cross. - * On some systems, crossing a page boundary while mapping regions - * can cause warnings if the pages have different attributes - * due to resource management. - * - * This has the added benefit of constraining a single mapping to - * one page, which is similar to the original code that used a 4k - * maximum window. - */ - page_boundary_map_length = (acpi_size) - (ACPI_ROUND_UP(address, ACPI_DEFAULT_PAGE_SIZE) - address); - if (page_boundary_map_length == 0) { - page_boundary_map_length = ACPI_DEFAULT_PAGE_SIZE; - } - - if (map_length > page_boundary_map_length) { - map_length = page_boundary_map_length; - } + if (map_length > ACPI_DEFAULT_PAGE_SIZE) + map_length = ACPI_DEFAULT_PAGE_SIZE; /* Create a new mapping starting at the address given */ -- 2.25.1

2 1

[PATCH OLK-6.6] ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
by Zeng Heng 15 Jul '24

15 Jul '24

From: Raju Rangoju <Raju.Rangoju(a)amd.com> stable inclusion from stable-v6.6.36 commit 434c6b924e1f4c219aab2d9e05fe79c5364e37d3 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAD09L CVE: CVE-2024-40984 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit a83e1385b780d41307433ddbc86e3c528db031f0 ] Undo the modifications made in commit d410ee5109a1 ("ACPICA: avoid "Info: mapping multiple BARs. Your kernel is fine.""). The initial purpose of this commit was to stop memory mappings for operation regions from overlapping page boundaries, as it can trigger warnings if different page attributes are present. However, it was found that when this situation arises, mapping continues until the boundary's end, but there is still an attempt to read/write the entire length of the map, leading to a NULL pointer deference. For example, if a four-byte mapping request is made but only one byte is mapped because it hits the current page boundary's end, a four-byte read/write attempt is still made, resulting in a NULL pointer deference. Instead, map the entire length, as the ACPI specification does not mandate that it must be within the same page boundary. It is permissible for it to be mapped across different regions. Link: https://github.com/acpica/acpica/pull/954 Closes: https://bugzilla.kernel.org/show_bug.cgi?id=218849 Fixes: d410ee5109a1 ("ACPICA: avoid "Info: mapping multiple BARs. Your kernel is fine."") Co-developed-by: Sanath S <Sanath.S(a)amd.com> Signed-off-by: Sanath S <Sanath.S(a)amd.com> Signed-off-by: Raju Rangoju <Raju.Rangoju(a)amd.com> Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/acpi/acpica/exregion.c | 23 ++--------------------- 1 file changed, 2 insertions(+), 21 deletions(-) diff --git a/drivers/acpi/acpica/exregion.c b/drivers/acpi/acpica/exregion.c index 8907b8bf4267..c49b9f8de723 100644 --- a/drivers/acpi/acpica/exregion.c +++ b/drivers/acpi/acpica/exregion.c @@ -44,7 +44,6 @@ acpi_ex_system_memory_space_handler(u32 function, struct acpi_mem_mapping *mm = mem_info->cur_mm; u32 length; acpi_size map_length; - acpi_size page_boundary_map_length; #ifdef ACPI_MISALIGNMENT_NOT_SUPPORTED u32 remainder; #endif @@ -138,26 +137,8 @@ acpi_ex_system_memory_space_handler(u32 function, map_length = (acpi_size) ((mem_info->address + mem_info->length) - address); - /* - * If mapping the entire remaining portion of the region will cross - * a page boundary, just map up to the page boundary, do not cross. - * On some systems, crossing a page boundary while mapping regions - * can cause warnings if the pages have different attributes - * due to resource management. - * - * This has the added benefit of constraining a single mapping to - * one page, which is similar to the original code that used a 4k - * maximum window. - */ - page_boundary_map_length = (acpi_size) - (ACPI_ROUND_UP(address, ACPI_DEFAULT_PAGE_SIZE) - address); - if (page_boundary_map_length == 0) { - page_boundary_map_length = ACPI_DEFAULT_PAGE_SIZE; - } - - if (map_length > page_boundary_map_length) { - map_length = page_boundary_map_length; - } + if (map_length > ACPI_DEFAULT_PAGE_SIZE) + map_length = ACPI_DEFAULT_PAGE_SIZE; /* Create a new mapping starting at the address given */ -- 2.25.1

2 1

[PATCH OLK-6.6 1/1] kvm: add coda feature
by l00500167 15 Jul '24

15 Jul '24

virtCCA feature Signed-off-by: l00500167 <lijunbin4(a)huawei.com> --- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h | 14 ++++++++++++++ include/linux/iommu.h | 4 +++- 2 files changed, 17 insertions(+), 1 deletion(-) diff --git a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h index 859d21729..0f2acb4ed 100644 --- a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h +++ b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h @@ -625,6 +625,9 @@ struct arm_smmu_strtab_l1_desc { struct arm_smmu_ste *l2ptr; dma_addr_t l2ptr_dma; +#ifdef CONFIG_CVM_HOST + bool is_sync; +#endif }; struct arm_smmu_ctx_desc { @@ -750,6 +753,12 @@ struct arm_smmu_device { struct mutex streams_mutex; bool bypass; +#ifdef CONFIG_CVM_HOST + int s_evtq_irq; + int s_gerr_irq; + resource_size_t ioaddr; + uint64_t id; +#endif }; struct arm_smmu_stream { @@ -802,6 +811,11 @@ struct arm_smmu_domain { spinlock_t devices_lock; struct list_head mmu_notifiers; +#ifdef CONFIG_CVM_HOST + bool secure; + struct list_head node; + struct kvm *kvm; +#endif }; static inline struct arm_smmu_domain *to_smmu_domain(struct iommu_domain *dom) diff --git a/include/linux/iommu.h b/include/linux/iommu.h index 1d70dd0d0..840a3b89f 100644 --- a/include/linux/iommu.h +++ b/include/linux/iommu.h @@ -635,7 +635,9 @@ struct iommu_ops { struct iommu_domain *blocked_domain; struct iommu_domain *default_domain; - KABI_RESERVE(1) +#ifdef CONFIG_CVM_HOST + int (*iommu_enable_secure)(struct iommu_domain *domain); +#endif KABI_RESERVE(2) KABI_RESERVE(3) KABI_RESERVE(4) -- 2.25.1

2 1

[PATCH OLK-6.6 1/1] kvm: add coda feature
by l00500167 15 Jul '24

15 Jul '24

virtcca feature Signed-off-by: l00500167 <lijunbin4(a)huawei.com> --- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h | 14 ++++++++++++++ include/linux/iommu.h | 4 +++- 2 files changed, 17 insertions(+), 1 deletion(-) diff --git a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h index 859d21729..0f2acb4ed 100644 --- a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h +++ b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h @@ -625,6 +625,9 @@ struct arm_smmu_strtab_l1_desc { struct arm_smmu_ste *l2ptr; dma_addr_t l2ptr_dma; +#ifdef CONFIG_CVM_HOST + bool is_sync; +#endif }; struct arm_smmu_ctx_desc { @@ -750,6 +753,12 @@ struct arm_smmu_device { struct mutex streams_mutex; bool bypass; +#ifdef CONFIG_CVM_HOST + int s_evtq_irq; + int s_gerr_irq; + resource_size_t ioaddr; + uint64_t id; +#endif }; struct arm_smmu_stream { @@ -802,6 +811,11 @@ struct arm_smmu_domain { spinlock_t devices_lock; struct list_head mmu_notifiers; +#ifdef CONFIG_CVM_HOST + bool secure; + struct list_head node; + struct kvm *kvm; +#endif }; static inline struct arm_smmu_domain *to_smmu_domain(struct iommu_domain *dom) diff --git a/include/linux/iommu.h b/include/linux/iommu.h index 1d70dd0d0..840a3b89f 100644 --- a/include/linux/iommu.h +++ b/include/linux/iommu.h @@ -635,7 +635,9 @@ struct iommu_ops { struct iommu_domain *blocked_domain; struct iommu_domain *default_domain; - KABI_RESERVE(1) +#ifdef CONFIG_CVM_HOST + int (*iommu_enable_secure)(struct iommu_domain *domain); +#endif KABI_RESERVE(2) KABI_RESERVE(3) KABI_RESERVE(4) -- 2.25.1

2 1

[PATCH OLK-6.6 1/1] kvm: add coda feature
by l00500167 15 Jul '24

15 Jul '24

virtcca coda feature Signed-off-by: l00500167 <lijunbin4(a)huawei.com> --- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h | 14 ++++++++++++++ include/linux/iommu.h | 4 +++- 2 files changed, 17 insertions(+), 1 deletion(-) diff --git a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h index 859d21729..0f2acb4ed 100644 --- a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h +++ b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h @@ -625,6 +625,9 @@ struct arm_smmu_strtab_l1_desc { struct arm_smmu_ste *l2ptr; dma_addr_t l2ptr_dma; +#ifdef CONFIG_CVM_HOST + bool is_sync; +#endif }; struct arm_smmu_ctx_desc { @@ -750,6 +753,12 @@ struct arm_smmu_device { struct mutex streams_mutex; bool bypass; +#ifdef CONFIG_CVM_HOST + int s_evtq_irq; + int s_gerr_irq; + resource_size_t ioaddr; + uint64_t id; +#endif }; struct arm_smmu_stream { @@ -802,6 +811,11 @@ struct arm_smmu_domain { spinlock_t devices_lock; struct list_head mmu_notifiers; +#ifdef CONFIG_CVM_HOST + bool secure; + struct list_head node; + struct kvm *kvm; +#endif }; static inline struct arm_smmu_domain *to_smmu_domain(struct iommu_domain *dom) diff --git a/include/linux/iommu.h b/include/linux/iommu.h index 1d70dd0d0..840a3b89f 100644 --- a/include/linux/iommu.h +++ b/include/linux/iommu.h @@ -635,7 +635,9 @@ struct iommu_ops { struct iommu_domain *blocked_domain; struct iommu_domain *default_domain; - KABI_RESERVE(1) +#ifdef CONFIG_CVM_HOST + int (*iommu_enable_secure)(struct iommu_domain *domain); +#endif KABI_RESERVE(2) KABI_RESERVE(3) KABI_RESERVE(4) -- 2.25.1

2 1

[PATCH OLK-6.6] kvm: add coda feature
by l00500167 15 Jul '24

15 Jul '24

virtcca feature Signed-off-by: l00500167 <lijunbin4(a)huawei.com> --- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h | 14 ++++++++++++++ include/linux/iommu.h | 3 +++ 2 files changed, 17 insertions(+) diff --git a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h index 859d21729..0f2acb4ed 100644 --- a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h +++ b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h @@ -625,6 +625,9 @@ struct arm_smmu_strtab_l1_desc { struct arm_smmu_ste *l2ptr; dma_addr_t l2ptr_dma; +#ifdef CONFIG_CVM_HOST + bool is_sync; +#endif }; struct arm_smmu_ctx_desc { @@ -750,6 +753,12 @@ struct arm_smmu_device { struct mutex streams_mutex; bool bypass; +#ifdef CONFIG_CVM_HOST + int s_evtq_irq; + int s_gerr_irq; + resource_size_t ioaddr; + uint64_t id; +#endif }; struct arm_smmu_stream { @@ -802,6 +811,11 @@ struct arm_smmu_domain { spinlock_t devices_lock; struct list_head mmu_notifiers; +#ifdef CONFIG_CVM_HOST + bool secure; + struct list_head node; + struct kvm *kvm; +#endif }; static inline struct arm_smmu_domain *to_smmu_domain(struct iommu_domain *dom) diff --git a/include/linux/iommu.h b/include/linux/iommu.h index 1d70dd0d0..e3186fbd4 100644 --- a/include/linux/iommu.h +++ b/include/linux/iommu.h @@ -635,6 +635,9 @@ struct iommu_ops { struct iommu_domain *blocked_domain; struct iommu_domain *default_domain; +#ifdef CONFIG_CVM_HOST + int (*iommu_enable_secure)(struct iommu_domain *domain); +#endif - KABI_RESERVE(1) KABI_RESERVE(2) KABI_RESERVE(3) -- 2.25.1

2 2

[PATCH OLK-6.6] f2fs: remove clear SB_INLINECRYPT flag in default_options
by Yifan Qiao 15 Jul '24

15 Jul '24

From: Yunlei He <heyunlei(a)oppo.com> stable inclusion from stable-v6.6.36 commit eddeb8d941d5be11a9da5637dbe81ac37e8449a2 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACZZP CVE: CVE-2024-40971 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit ac5eecf481c29942eb9a862e758c0c8b68090c33 ] In f2fs_remount, SB_INLINECRYPT flag will be clear and re-set. If create new file or open file during this gap, these files will not use inlinecrypt. Worse case, it may lead to data corruption if wrappedkey_v0 is enable. Thread A: Thread B: -f2fs_remount -f2fs_file_open or f2fs_new_inode -default_options <- clear SB_INLINECRYPT flag -fscrypt_select_encryption_impl -parse_options <- set SB_INLINECRYPT again Signed-off-by: Yunlei He <heyunlei(a)oppo.com> Reviewed-by: Chao Yu <chao(a)kernel.org> Signed-off-by: Jaegeuk Kim <jaegeuk(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Yifan Qiao <qiaoyifan4(a)huawei.com> --- fs/f2fs/super.c | 2 -- 1 file changed, 2 deletions(-) diff --git a/fs/f2fs/super.c b/fs/f2fs/super.c index b1a239f3eb66..534d8bb1f26c 100644 --- a/fs/f2fs/super.c +++ b/fs/f2fs/super.c @@ -2186,8 +2186,6 @@ static void default_options(struct f2fs_sb_info *sbi, bool remount) F2FS_OPTION(sbi).memory_mode = MEMORY_MODE_NORMAL; F2FS_OPTION(sbi).errors = MOUNT_ERRORS_CONTINUE; - sbi->sb->s_flags &= ~SB_INLINECRYPT; - set_opt(sbi, INLINE_XATTR); set_opt(sbi, INLINE_DATA); set_opt(sbi, INLINE_DENTRY); -- 2.39.2

2 1

[PATCH OLK-5.10] f2fs: remove clear SB_INLINECRYPT flag in default_options
by Yifan Qiao 15 Jul '24

15 Jul '24

From: Yunlei He <heyunlei(a)oppo.com> stable inclusion from stable-v5.10.221 commit 38a82c8d00638bb642bef787eb1d5e0e4d3b7d71 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACZZP CVE: CVE-2024-40971 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit ac5eecf481c29942eb9a862e758c0c8b68090c33 ] In f2fs_remount, SB_INLINECRYPT flag will be clear and re-set. If create new file or open file during this gap, these files will not use inlinecrypt. Worse case, it may lead to data corruption if wrappedkey_v0 is enable. Thread A: Thread B: -f2fs_remount -f2fs_file_open or f2fs_new_inode -default_options <- clear SB_INLINECRYPT flag -fscrypt_select_encryption_impl -parse_options <- set SB_INLINECRYPT again Signed-off-by: Yunlei He <heyunlei(a)oppo.com> Reviewed-by: Chao Yu <chao(a)kernel.org> Signed-off-by: Jaegeuk Kim <jaegeuk(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Conflicts: fs/f2f2/super.c [Context differences] Signed-off-by: Yifan Qiao <qiaoyifan4(a)huawei.com> --- fs/f2fs/super.c | 2 -- 1 file changed, 2 deletions(-) diff --git a/fs/f2fs/super.c b/fs/f2fs/super.c index 6a214366970c..daa31574acfb 100644 --- a/fs/f2fs/super.c +++ b/fs/f2fs/super.c @@ -1713,8 +1713,6 @@ static void default_options(struct f2fs_sb_info *sbi) F2FS_OPTION(sbi).compress_ext_cnt = 0; F2FS_OPTION(sbi).bggc_mode = BGGC_MODE_ON; - sbi->sb->s_flags &= ~SB_INLINECRYPT; - set_opt(sbi, INLINE_XATTR); set_opt(sbi, INLINE_DATA); set_opt(sbi, INLINE_DENTRY); -- 2.39.2

2 1

[PATCH openEuler-22.03-LTS-SP1] f2fs: remove clear SB_INLINECRYPT flag in default_options
by Yifan Qiao 15 Jul '24

15 Jul '24

From: Yunlei He <heyunlei(a)oppo.com> stable inclusion from stable-v5.10.221 commit 38a82c8d00638bb642bef787eb1d5e0e4d3b7d71 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACZZP CVE: CVE-2024-40971 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit ac5eecf481c29942eb9a862e758c0c8b68090c33 ] In f2fs_remount, SB_INLINECRYPT flag will be clear and re-set. If create new file or open file during this gap, these files will not use inlinecrypt. Worse case, it may lead to data corruption if wrappedkey_v0 is enable. Thread A: Thread B: -f2fs_remount -f2fs_file_open or f2fs_new_inode -default_options <- clear SB_INLINECRYPT flag -fscrypt_select_encryption_impl -parse_options <- set SB_INLINECRYPT again Signed-off-by: Yunlei He <heyunlei(a)oppo.com> Reviewed-by: Chao Yu <chao(a)kernel.org> Signed-off-by: Jaegeuk Kim <jaegeuk(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Conflicts: fs/f2f2/super.c [Context differences] Signed-off-by: Yifan Qiao <qiaoyifan4(a)huawei.com> --- fs/f2fs/super.c | 2 -- 1 file changed, 2 deletions(-) diff --git a/fs/f2fs/super.c b/fs/f2fs/super.c index fba413ced982..565289233b3b 100644 --- a/fs/f2fs/super.c +++ b/fs/f2fs/super.c @@ -1714,8 +1714,6 @@ static void default_options(struct f2fs_sb_info *sbi) F2FS_OPTION(sbi).compress_ext_cnt = 0; F2FS_OPTION(sbi).bggc_mode = BGGC_MODE_ON; - sbi->sb->s_flags &= ~SB_INLINECRYPT; - set_opt(sbi, INLINE_XATTR); set_opt(sbi, INLINE_DATA); set_opt(sbi, INLINE_DENTRY); -- 2.39.2

2 1

[PATCH openEuler-22.03-LTS-SP1] f2fs: remove clear SB_INLINECRYPT flag in default_options
by Yifan Qiao 15 Jul '24

15 Jul '24

From: Yunlei He <heyunlei(a)oppo.com> stable inclusion from stable-v5.10.221 commit 38a82c8d00638bb642bef787eb1d5e0e4d3b7d71 category: bugfix bugzilla: 190178 CVE: CVE-2024-40971 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit ac5eecf481c29942eb9a862e758c0c8b68090c33 ] In f2fs_remount, SB_INLINECRYPT flag will be clear and re-set. If create new file or open file during this gap, these files will not use inlinecrypt. Worse case, it may lead to data corruption if wrappedkey_v0 is enable. Thread A: Thread B: -f2fs_remount -f2fs_file_open or f2fs_new_inode -default_options <- clear SB_INLINECRYPT flag -fscrypt_select_encryption_impl -parse_options <- set SB_INLINECRYPT again Signed-off-by: Yunlei He <heyunlei(a)oppo.com> Reviewed-by: Chao Yu <chao(a)kernel.org> Signed-off-by: Jaegeuk Kim <jaegeuk(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Conflicts: fs/f2f2/super.c [Context differences] Signed-off-by: Yifan Qiao <qiaoyifan4(a)huawei.com> --- fs/f2fs/super.c | 2 -- 1 file changed, 2 deletions(-) diff --git a/fs/f2fs/super.c b/fs/f2fs/super.c index fba413ced982..565289233b3b 100644 --- a/fs/f2fs/super.c +++ b/fs/f2fs/super.c @@ -1714,8 +1714,6 @@ static void default_options(struct f2fs_sb_info *sbi) F2FS_OPTION(sbi).compress_ext_cnt = 0; F2FS_OPTION(sbi).bggc_mode = BGGC_MODE_ON; - sbi->sb->s_flags &= ~SB_INLINECRYPT; - set_opt(sbi, INLINE_XATTR); set_opt(sbi, INLINE_DATA); set_opt(sbi, INLINE_DENTRY); -- 2.39.2

2 1

[PATCH OLK-6.6] ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
by Yifan Qiao 15 Jul '24

15 Jul '24

From: Baokun Li <libaokun1(a)huawei.com> stable inclusion from stable-v6.6.36 commit 677ff4589f1501578fa903a25bb14831d0607992 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAD018 CVE: CVE-2024-40955 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 13df4d44a3aaabe61cd01d277b6ee23ead2a5206 upstream. We can trigger a slab-out-of-bounds with the following commands: mkfs.ext4 -F /dev/$disk 10G mount /dev/$disk /tmp/test echo 2147483647 > /sys/fs/ext4/$disk/mb_group_prealloc echo test > /tmp/test/file && sync ================================================================== BUG: KASAN: slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists+0x8a/0x200 [ext4] Read of size 8 at addr ffff888121b9d0f0 by task kworker/u2:0/11 CPU: 0 PID: 11 Comm: kworker/u2:0 Tainted: GL 6.7.0-next-20240118 #521 Call Trace: dump_stack_lvl+0x2c/0x50 kasan_report+0xb6/0xf0 ext4_mb_find_good_group_avg_frag_lists+0x8a/0x200 [ext4] ext4_mb_regular_allocator+0x19e9/0x2370 [ext4] ext4_mb_new_blocks+0x88a/0x1370 [ext4] ext4_ext_map_blocks+0x14f7/0x2390 [ext4] ext4_map_blocks+0x569/0xea0 [ext4] ext4_do_writepages+0x10f6/0x1bc0 [ext4] [...] ================================================================== The flow of issue triggering is as follows: // Set s_mb_group_prealloc to 2147483647 via sysfs ext4_mb_new_blocks ext4_mb_normalize_request ext4_mb_normalize_group_request ac->ac_g_ex.fe_len = EXT4_SB(sb)->s_mb_group_prealloc ext4_mb_regular_allocator ext4_mb_choose_next_group ext4_mb_choose_next_group_best_avail mb_avg_fragment_size_order order = fls(len) - 2 = 29 ext4_mb_find_good_group_avg_frag_lists frag_list = &sbi->s_mb_avg_fragment_size[order] if (list_empty(frag_list)) // Trigger SOOB! At 4k block size, the length of the s_mb_avg_fragment_size list is 14, but an oversized s_mb_group_prealloc is set, causing slab-out-of-bounds to be triggered by an attempt to access an element at index 29. Add a new attr_id attr_clusters_in_group with values in the range [0, sbi->s_clusters_per_group] and declare mb_group_prealloc as that type to fix the issue. In addition avoid returning an order from mb_avg_fragment_size_order() greater than MB_NUM_ORDERS(sb) and reduce some useless loops. Fixes: 7e170922f06b ("ext4: Add allocation criteria 1.5 (CR1_5)") CC: stable(a)vger.kernel.org Signed-off-by: Baokun Li <libaokun1(a)huawei.com> Reviewed-by: Jan Kara <jack(a)suse.cz> Reviewed-by: Ojaswin Mujoo <ojaswin(a)linux.ibm.com> Link: https://lore.kernel.org/r/20240319113325.3110393-5-libaokun1@huawei.com Signed-off-by: Theodore Ts'o <tytso(a)mit.edu> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Yifan Qiao <qiaoyifan4(a)huawei.com> --- fs/ext4/mballoc.c | 4 ++++ fs/ext4/sysfs.c | 13 ++++++++++++- 2 files changed, 16 insertions(+), 1 deletion(-) diff --git a/fs/ext4/mballoc.c b/fs/ext4/mballoc.c index f6e02978d0e6..9a65cdcc6417 100644 --- a/fs/ext4/mballoc.c +++ b/fs/ext4/mballoc.c @@ -834,6 +834,8 @@ static int mb_avg_fragment_size_order(struct super_block *sb, ext4_grpblk_t len) return 0; if (order == MB_NUM_ORDERS(sb)) order--; + if (WARN_ON_ONCE(order > MB_NUM_ORDERS(sb))) + order = MB_NUM_ORDERS(sb) - 1; return order; } @@ -1011,6 +1013,8 @@ static void ext4_mb_choose_next_group_best_avail(struct ext4_allocation_context * goal length. */ order = fls(ac->ac_g_ex.fe_len) - 1; + if (WARN_ON_ONCE(order - 1 > MB_NUM_ORDERS(ac->ac_sb))) + order = MB_NUM_ORDERS(ac->ac_sb); min_order = order - sbi->s_mb_best_avail_max_trim_order; if (min_order < 0) min_order = 0; diff --git a/fs/ext4/sysfs.c b/fs/ext4/sysfs.c index 6d332dff79dd..5f3df2931643 100644 --- a/fs/ext4/sysfs.c +++ b/fs/ext4/sysfs.c @@ -29,6 +29,7 @@ typedef enum { attr_trigger_test_error, attr_first_error_time, attr_last_error_time, + attr_clusters_in_group, attr_feature, attr_pointer_ui, attr_pointer_ul, @@ -207,13 +208,14 @@ EXT4_ATTR_FUNC(sra_exceeded_retry_limit, 0444); EXT4_ATTR_OFFSET(inode_readahead_blks, 0644, inode_readahead, ext4_sb_info, s_inode_readahead_blks); +EXT4_ATTR_OFFSET(mb_group_prealloc, 0644, clusters_in_group, + ext4_sb_info, s_mb_group_prealloc); EXT4_RW_ATTR_SBI_UI(inode_goal, s_inode_goal); EXT4_RW_ATTR_SBI_UI(mb_stats, s_mb_stats); EXT4_RW_ATTR_SBI_UI(mb_max_to_scan, s_mb_max_to_scan); EXT4_RW_ATTR_SBI_UI(mb_min_to_scan, s_mb_min_to_scan); EXT4_RW_ATTR_SBI_UI(mb_order2_req, s_mb_order2_reqs); EXT4_RW_ATTR_SBI_UI(mb_stream_req, s_mb_stream_request); -EXT4_RW_ATTR_SBI_UI(mb_group_prealloc, s_mb_group_prealloc); EXT4_RW_ATTR_SBI_UI(mb_max_linear_groups, s_mb_max_linear_groups); EXT4_RW_ATTR_SBI_UI(extent_max_zeroout_kb, s_extent_max_zeroout_kb); EXT4_ATTR(trigger_fs_error, 0200, trigger_test_error); @@ -392,6 +394,7 @@ static ssize_t ext4_attr_show(struct kobject *kobj, (unsigned long long) percpu_counter_sum(&sbi->s_sra_exceeded_retry_limit)); case attr_inode_readahead: + case attr_clusters_in_group: case attr_pointer_ui: if (!ptr) return 0; @@ -468,6 +471,14 @@ static ssize_t ext4_attr_store(struct kobject *kobj, else *((unsigned int *) ptr) = t; return len; + case attr_clusters_in_group: + ret = kstrtouint(skip_spaces(buf), 0, &t); + if (ret) + return ret; + if (t > sbi->s_clusters_per_group) + return -EINVAL; + *((unsigned int *) ptr) = t; + return len; case attr_pointer_ul: if (!ptr) return 0; -- 2.39.2

2 1

[PATCH OLK-6.6] ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
by Yifan Qiao 15 Jul '24

15 Jul '24

From: Baokun Li <libaokun1(a)huawei.com> stable inclusion from stable-v6.6.36 commit 677ff4589f1501578fa903a25bb14831d0607992 category: bugfix bugzilla: 190177 CVE: CVE-2024-40955 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 13df4d44a3aaabe61cd01d277b6ee23ead2a5206 upstream. We can trigger a slab-out-of-bounds with the following commands: mkfs.ext4 -F /dev/$disk 10G mount /dev/$disk /tmp/test echo 2147483647 > /sys/fs/ext4/$disk/mb_group_prealloc echo test > /tmp/test/file && sync ================================================================== BUG: KASAN: slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists+0x8a/0x200 [ext4] Read of size 8 at addr ffff888121b9d0f0 by task kworker/u2:0/11 CPU: 0 PID: 11 Comm: kworker/u2:0 Tainted: GL 6.7.0-next-20240118 #521 Call Trace: dump_stack_lvl+0x2c/0x50 kasan_report+0xb6/0xf0 ext4_mb_find_good_group_avg_frag_lists+0x8a/0x200 [ext4] ext4_mb_regular_allocator+0x19e9/0x2370 [ext4] ext4_mb_new_blocks+0x88a/0x1370 [ext4] ext4_ext_map_blocks+0x14f7/0x2390 [ext4] ext4_map_blocks+0x569/0xea0 [ext4] ext4_do_writepages+0x10f6/0x1bc0 [ext4] [...] ================================================================== The flow of issue triggering is as follows: // Set s_mb_group_prealloc to 2147483647 via sysfs ext4_mb_new_blocks ext4_mb_normalize_request ext4_mb_normalize_group_request ac->ac_g_ex.fe_len = EXT4_SB(sb)->s_mb_group_prealloc ext4_mb_regular_allocator ext4_mb_choose_next_group ext4_mb_choose_next_group_best_avail mb_avg_fragment_size_order order = fls(len) - 2 = 29 ext4_mb_find_good_group_avg_frag_lists frag_list = &sbi->s_mb_avg_fragment_size[order] if (list_empty(frag_list)) // Trigger SOOB! At 4k block size, the length of the s_mb_avg_fragment_size list is 14, but an oversized s_mb_group_prealloc is set, causing slab-out-of-bounds to be triggered by an attempt to access an element at index 29. Add a new attr_id attr_clusters_in_group with values in the range [0, sbi->s_clusters_per_group] and declare mb_group_prealloc as that type to fix the issue. In addition avoid returning an order from mb_avg_fragment_size_order() greater than MB_NUM_ORDERS(sb) and reduce some useless loops. Fixes: 7e170922f06b ("ext4: Add allocation criteria 1.5 (CR1_5)") CC: stable(a)vger.kernel.org Signed-off-by: Baokun Li <libaokun1(a)huawei.com> Reviewed-by: Jan Kara <jack(a)suse.cz> Reviewed-by: Ojaswin Mujoo <ojaswin(a)linux.ibm.com> Link: https://lore.kernel.org/r/20240319113325.3110393-5-libaokun1@huawei.com Signed-off-by: Theodore Ts'o <tytso(a)mit.edu> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Yifan Qiao <qiaoyifan4(a)huawei.com> --- fs/ext4/mballoc.c | 4 ++++ fs/ext4/sysfs.c | 13 ++++++++++++- 2 files changed, 16 insertions(+), 1 deletion(-) diff --git a/fs/ext4/mballoc.c b/fs/ext4/mballoc.c index f6e02978d0e6..9a65cdcc6417 100644 --- a/fs/ext4/mballoc.c +++ b/fs/ext4/mballoc.c @@ -834,6 +834,8 @@ static int mb_avg_fragment_size_order(struct super_block *sb, ext4_grpblk_t len) return 0; if (order == MB_NUM_ORDERS(sb)) order--; + if (WARN_ON_ONCE(order > MB_NUM_ORDERS(sb))) + order = MB_NUM_ORDERS(sb) - 1; return order; } @@ -1011,6 +1013,8 @@ static void ext4_mb_choose_next_group_best_avail(struct ext4_allocation_context * goal length. */ order = fls(ac->ac_g_ex.fe_len) - 1; + if (WARN_ON_ONCE(order - 1 > MB_NUM_ORDERS(ac->ac_sb))) + order = MB_NUM_ORDERS(ac->ac_sb); min_order = order - sbi->s_mb_best_avail_max_trim_order; if (min_order < 0) min_order = 0; diff --git a/fs/ext4/sysfs.c b/fs/ext4/sysfs.c index 6d332dff79dd..5f3df2931643 100644 --- a/fs/ext4/sysfs.c +++ b/fs/ext4/sysfs.c @@ -29,6 +29,7 @@ typedef enum { attr_trigger_test_error, attr_first_error_time, attr_last_error_time, + attr_clusters_in_group, attr_feature, attr_pointer_ui, attr_pointer_ul, @@ -207,13 +208,14 @@ EXT4_ATTR_FUNC(sra_exceeded_retry_limit, 0444); EXT4_ATTR_OFFSET(inode_readahead_blks, 0644, inode_readahead, ext4_sb_info, s_inode_readahead_blks); +EXT4_ATTR_OFFSET(mb_group_prealloc, 0644, clusters_in_group, + ext4_sb_info, s_mb_group_prealloc); EXT4_RW_ATTR_SBI_UI(inode_goal, s_inode_goal); EXT4_RW_ATTR_SBI_UI(mb_stats, s_mb_stats); EXT4_RW_ATTR_SBI_UI(mb_max_to_scan, s_mb_max_to_scan); EXT4_RW_ATTR_SBI_UI(mb_min_to_scan, s_mb_min_to_scan); EXT4_RW_ATTR_SBI_UI(mb_order2_req, s_mb_order2_reqs); EXT4_RW_ATTR_SBI_UI(mb_stream_req, s_mb_stream_request); -EXT4_RW_ATTR_SBI_UI(mb_group_prealloc, s_mb_group_prealloc); EXT4_RW_ATTR_SBI_UI(mb_max_linear_groups, s_mb_max_linear_groups); EXT4_RW_ATTR_SBI_UI(extent_max_zeroout_kb, s_extent_max_zeroout_kb); EXT4_ATTR(trigger_fs_error, 0200, trigger_test_error); @@ -392,6 +394,7 @@ static ssize_t ext4_attr_show(struct kobject *kobj, (unsigned long long) percpu_counter_sum(&sbi->s_sra_exceeded_retry_limit)); case attr_inode_readahead: + case attr_clusters_in_group: case attr_pointer_ui: if (!ptr) return 0; @@ -468,6 +471,14 @@ static ssize_t ext4_attr_store(struct kobject *kobj, else *((unsigned int *) ptr) = t; return len; + case attr_clusters_in_group: + ret = kstrtouint(skip_spaces(buf), 0, &t); + if (ret) + return ret; + if (t > sbi->s_clusters_per_group) + return -EINVAL; + *((unsigned int *) ptr) = t; + return len; case attr_pointer_ul: if (!ptr) return 0; -- 2.39.2

2 1

[PATCH OLK-6.6 0/1] fix CVE-2024-40934
by Hongbo Li 15 Jul '24

15 Jul '24

Fix CVE-2024-40934. José Expósito (1): HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() drivers/hid/hid-logitech-dj.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) -- 2.34.1

2 2

[PATCH openEuler-22.03-LTS-SP1] media: gspca: cpia1: shift-out-of-bounds in set_flicker
by felix 15 Jul '24

15 Jul '24

From: Rajeshwar R Shinde <coolrrsh(a)gmail.com> stable inclusion from stable-v5.10.202 commit c6b6b8692218da73b33b310d7c1df90f115bdd9a category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/I9DZOS Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 099be1822d1f095433f4b08af9cc9d6308ec1953 ] Syzkaller reported the following issue: UBSAN: shift-out-of-bounds in drivers/media/usb/gspca/cpia1.c:1031:27 shift exponent 245 is too large for 32-bit type 'int' When the value of the variable "sd->params.exposure.gain" exceeds the number of bits in an integer, a shift-out-of-bounds error is reported. It is triggered because the variable "currentexp" cannot be left-shifted by more than the number of bits in an integer. In order to avoid invalid range during left-shift, the conditional expression is added. Reported-by: syzbot+e27f3dbdab04e43b9f73(a)syzkaller.appspotmail.com Closes: https://lore.kernel.org/all/20230818164522.12806-1-coolrrsh@gmail.com Link: https://syzkaller.appspot.com/bug?extid=e27f3dbdab04e43b9f73 Signed-off-by: Rajeshwar R Shinde <coolrrsh(a)gmail.com> Signed-off-by: Hans Verkuil <hverkuil-cisco(a)xs4all.nl> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: sanglipeng <sanglipeng1(a)jd.com> Signed-off-by: Felix Fu <fuzhen5(a)huawei.com> --- drivers/media/usb/gspca/cpia1.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/drivers/media/usb/gspca/cpia1.c b/drivers/media/usb/gspca/cpia1.c index d93d384286c1..de945e13c7c6 100644 --- a/drivers/media/usb/gspca/cpia1.c +++ b/drivers/media/usb/gspca/cpia1.c @@ -18,6 +18,7 @@ #include <linux/input.h> #include <linux/sched/signal.h> +#include <linux/bitops.h> #include "gspca.h" @@ -1027,6 +1028,8 @@ static int set_flicker(struct gspca_dev *gspca_dev, int on, int apply) sd->params.exposure.expMode = 2; sd->exposure_status = EXPOSURE_NORMAL; } + if (sd->params.exposure.gain >= BITS_PER_TYPE(currentexp)) + return -EINVAL; currentexp = currentexp << sd->params.exposure.gain; sd->params.exposure.gain = 0; /* round down current exposure to nearest value */ -- 2.34.1

2 1

[PATCH OLK-5.10 0/1] fix CVE-2024-40934
by Hongbo Li 15 Jul '24

15 Jul '24

Fix CVE-2024-40934. José Expósito (1): HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() drivers/hid/hid-logitech-dj.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) -- 2.34.1

2 2

[PATCH OLK-6.6] ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind()
by Xiongfeng Wang 15 Jul '24

15 Jul '24

From: Simon Trimmer <simont(a)opensource.cirrus.com> mainline inclusion from mainline-v6.10-rc5 commit 6386682cdc8b41319c92fbbe421953e33a28840c category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACS5R CVE: CVE-2024-40964 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- The cs35l41_hda_unbind() function clears the hda_component entry matching it's index and then dereferences the codec pointer held in the first element of the hda_component array, this is an issue when the device index was 0. Instead use the codec pointer stashed in the cs35l41_hda structure as it will still be valid. Fixes: 7cf5ce66dfda ("ALSA: hda: cs35l41: Add device_link between HDA and cs35l41_hda") Signed-off-by: Simon Trimmer <simont(a)opensource.cirrus.com> Link: https://lore.kernel.org/r/20240531120820.35367-1-simont@opensource.cirrus.c… Signed-off-by: Takashi Iwai <tiwai(a)suse.de> Signed-off-by: Xiongfeng Wang <wangxiongfeng2(a)huawei.com> --- sound/pci/hda/cs35l41_hda.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sound/pci/hda/cs35l41_hda.c b/sound/pci/hda/cs35l41_hda.c index 3c157b006a5a..b437beae9b51 100644 --- a/sound/pci/hda/cs35l41_hda.c +++ b/sound/pci/hda/cs35l41_hda.c @@ -1187,7 +1187,7 @@ static void cs35l41_hda_unbind(struct device *dev, struct device *master, void * if (comps[cs35l41->index].dev == dev) { memset(&comps[cs35l41->index], 0, sizeof(*comps)); sleep_flags = lock_system_sleep(); - device_link_remove(&comps->codec->core.dev, cs35l41->dev); + device_link_remove(&cs35l41->codec->core.dev, cs35l41->dev); unlock_system_sleep(sleep_flags); } } -- 2.20.1

2 1

[PATCH openEuler-22.03-LTS-SP1] selinux: avoid dereference of garbage after mount failure
by felix 15 Jul '24

15 Jul '24

From: Christian Göttsche <cgzones(a)googlemail.com> stable inclusion from stable-v6.6.26 commit 477ed6789eb9f3f4d3568bb977f90c863c12724e category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QG73 CVE: CVE-2024-35904 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 37801a36b4d68892ce807264f784d818f8d0d39b upstream. In case kern_mount() fails and returns an error pointer return in the error branch instead of continuing and dereferencing the error pointer. While on it drop the never read static variable selinuxfs_mount. Cc: stable(a)vger.kernel.org Fixes: 0619f0f5e36f ("selinux: wrap selinuxfs state") Signed-off-by: Christian Göttsche <cgzones(a)googlemail.com> Signed-off-by: Paul Moore <paul(a)paul-moore.com> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Conflicts: security/selinux/selinuxfs.c [selinuxfs_mount still in use because of SECURITY_SELINUX_DISABLE, so we reserve it, only deal with kern_mount failure issue] Signed-off-by: Felix Fu <fuzhen5(a)huawei.com> --- security/selinux/selinuxfs.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/security/selinux/selinuxfs.c b/security/selinux/selinuxfs.c index d893c2280f59..97d169679265 100644 --- a/security/selinux/selinuxfs.c +++ b/security/selinux/selinuxfs.c @@ -2232,13 +2232,17 @@ static int __init init_sel_fs(void) pr_err("selinuxfs: could not mount!\n"); err = PTR_ERR(selinuxfs_mount); selinuxfs_mount = NULL; + selinux_null.mnt = NULL; + return err; } + selinux_null.dentry = d_hash_and_lookup(selinux_null.mnt->mnt_root, &null_name); if (IS_ERR(selinux_null.dentry)) { pr_err("selinuxfs: could not lookup null!\n"); err = PTR_ERR(selinux_null.dentry); selinux_null.dentry = NULL; + return err; } return err; -- 2.34.1

2 1

[PATCH OLK-6.6 0/2] nvdimm: Backport some bugfixs
by Zhihao Cheng 15 Jul '24

15 Jul '24

Mathieu Desnoyers (2): nvdimm/pmem: fix leak on dax_add_host() failure dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n drivers/dax/super.c | 5 +++++ drivers/nvdimm/pmem.c | 3 +-- include/linux/dax.h | 6 +----- 3 files changed, 7 insertions(+), 7 deletions(-) -- 2.31.1

2 3

[PATCH openEuler-22.03-LTS-SP1 0/2] nvdimm: Backport some bugfixs
by Zhihao Cheng 15 Jul '24

15 Jul '24

Luis Chamberlain (1): nvdimm/pmem: use add_disk() error handling Mathieu Desnoyers (1): dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n drivers/dax/super.c | 5 +++++ drivers/nvdimm/pmem.c | 8 +++++++- include/linux/dax.h | 6 +----- 3 files changed, 13 insertions(+), 6 deletions(-) -- 2.31.1

2 3

[PATCH OLK-5.10 0/2] nvdimm: Backport some bugfixs
by Zhihao Cheng 15 Jul '24

15 Jul '24

Luis Chamberlain (1): nvdimm/pmem: use add_disk() error handling Mathieu Desnoyers (1): dax: alloc_dax() return ERR_PTR(-EOPNOTSUPP) for CONFIG_DAX=n drivers/dax/super.c | 5 +++++ drivers/nvdimm/pmem.c | 8 +++++++- include/linux/dax.h | 6 +----- 3 files changed, 13 insertions(+), 6 deletions(-) -- 2.31.1

2 3

[PATCH openEuler-22.03-LTS-SP1] ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
by felix 15 Jul '24

15 Jul '24

From: "Geoffrey D. Bennett" <g(a)b4.vu> stable inclusion from stable-v5.15.148 commit e517645ead5ea22c69d2a44694baa23fe1ce7c2b category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q9ID CVE: CVE-2023-52674 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 04f8f053252b86c7583895c962d66747ecdc61b7 ] Ensure the value passed to scarlett2_mixer_ctl_put() is between 0 and SCARLETT2_MIXER_MAX_VALUE so we don't attempt to access outside scarlett2_mixer_values[]. Signed-off-by: Geoffrey D. Bennett <g(a)b4.vu> Fixes: 9e4d5c1be21f ("ALSA: usb-audio: Scarlett Gen 2 mixer interface") Link: https://lore.kernel.org/r/3b19fb3da641b587749b85fe1daa1b4e696c0c1b.17030010… Signed-off-by: Takashi Iwai <tiwai(a)suse.de> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Conflicts: sound/usb/mixer_scarlett_gen2.c [Some context inconsistencies exist in the scarlett2_mixer_ctl_put function, which does not affect the patch] Signed-off-by: Felix Fu <fuzhen5(a)huawei.com> --- sound/usb/mixer_scarlett_gen2.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/sound/usb/mixer_scarlett_gen2.c b/sound/usb/mixer_scarlett_gen2.c index 1b7c7b754c38..6b7c8b8d7111 100644 --- a/sound/usb/mixer_scarlett_gen2.c +++ b/sound/usb/mixer_scarlett_gen2.c @@ -1509,7 +1509,8 @@ static int scarlett2_mixer_ctl_put(struct snd_kcontrol *kctl, mutex_lock(&private->data_mutex); oval = private->mix[elem->control]; - val = ucontrol->value.integer.value[0]; + val = clamp(ucontrol->value.integer.value[0], + 0L, (long)SCARLETT2_MIXER_MAX_VALUE); num_mixer_in = ports[SCARLETT2_PORT_TYPE_MIX].num[SCARLETT2_PORT_OUT]; mix_num = elem->control / num_mixer_in; -- 2.34.1

2 1

[PATCH OLK-6.6] ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind()
by Xiongfeng Wang 15 Jul '24

15 Jul '24

From: Simon Trimmer <simont(a)opensource.cirrus.com> mainline inclusion from mainline-v6.10-rc5 commit 6386682cdc8b41319c92fbbe421953e33a28840c category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACS5R CVE: CVE-2024-40964 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- The cs35l41_hda_unbind() function clears the hda_component entry matching it's index and then dereferences the codec pointer held in the first element of the hda_component array, this is an issue when the device index was 0. Instead use the codec pointer stashed in the cs35l41_hda structure as it will still be valid. Fixes: 7cf5ce66dfda ("ALSA: hda: cs35l41: Add device_link between HDA and cs35l41_hda") Signed-off-by: Simon Trimmer <simont(a)opensource.cirrus.com> Link: https://lore.kernel.org/r/20240531120820.35367-1-simont@opensource.cirrus.c… Signed-off-by: Takashi Iwai <tiwai(a)suse.de> Signed-off-by: Xiongfeng Wang <wangxiongfeng2(a)huawei.com> --- sound/pci/hda/cs35l41_hda.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sound/pci/hda/cs35l41_hda.c b/sound/pci/hda/cs35l41_hda.c index 3c157b006a5a..b437beae9b51 100644 --- a/sound/pci/hda/cs35l41_hda.c +++ b/sound/pci/hda/cs35l41_hda.c @@ -1187,7 +1187,7 @@ static void cs35l41_hda_unbind(struct device *dev, struct device *master, void * if (comps[cs35l41->index].dev == dev) { memset(&comps[cs35l41->index], 0, sizeof(*comps)); sleep_flags = lock_system_sleep(); - device_link_remove(&comps->codec->core.dev, cs35l41->dev); + device_link_remove(&cs35l41->codec->core.dev, cs35l41->dev); unlock_system_sleep(sleep_flags); } } -- 2.20.1

2 1

[PATCH OLK-6.6 0/6] ext4: improve buffered write with more than one blocks_per_folio
by Zhang Yi 15 Jul '24

15 Jul '24

In ext4_iomap_write_begin(), we speed up mapping check by checking the folio dirty bit. If the folio is dirty, it means this folio has just been written and must have a counterpart allocated block or delalloc extent, so we don't need to map the folio again if we write to the same place, this could speed up a lot for the case of repeated overwrite to the same folio. However, we only check the entire folio has been dirty or not, so it doesn't support if we have more than one blocks per folio yet. This series fix the handles of sub-folio properly in iomap, and extend this improvement by checking partial blocks in one folio. Zhang Yi (6): iomap: correct the range of a partial dirty clear iomap: support invalidating partial folios iomap: advance the ifs allocation if we have more than one blocks per folio iomap: correct the dirty length in page mkwrite iomap: add iomap_is_fully_dirty() ext4: improve sub-polio check in ext4_iomap_write_begin() fs/ext4/inode.c | 2 +- fs/iomap/buffered-io.c | 64 ++++++++++++++++++++++++++++++++++++------ include/linux/iomap.h | 1 + 3 files changed, 57 insertions(+), 10 deletions(-) -- 2.31.1

3 10

[PATCH OLK-6.6] ocfs2: fix races between hole punching and AIO+DIO
by Ye Bin 15 Jul '24

15 Jul '24

From: Su Yue <glass.su(a)suse.com> mainline inclusion from mainline-v6.10-rc1 commit 952b023f06a24b2ad6ba67304c4c84d45bea2f18 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAD0L1 CVE: CVE-2024-40943 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… --------------------------- After commit "ocfs2: return real error code in ocfs2_dio_wr_get_block", fstests/generic/300 become from always failed to sometimes failed: ======================================================================== [ 473.293420 ] run fstests generic/300 [ 475.296983 ] JBD2: Ignoring recovery information on journal [ 475.302473 ] ocfs2: Mounting device (253,1) on (node local, slot 0) with ordered data mode. [ 494.290998 ] OCFS2: ERROR (device dm-1): ocfs2_change_extent_flag: Owner 5668 has an extent at cpos 78723 which can no longer be found [ 494.291609 ] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 494.292018 ] OCFS2: File system is now read-only. [ 494.292224 ] (kworker/19:11,2628,19):ocfs2_mark_extent_written:5272 ERROR: status = -30 [ 494.292602 ] (kworker/19:11,2628,19):ocfs2_dio_end_io_write:2374 ERROR: status = -3 fio: io_u error on file /mnt/scratch/racer: Read-only file system: write offset=460849152, buflen=131072 ========================================================================= In __blockdev_direct_IO, ocfs2_dio_wr_get_block is called to add unwritten extents to a list. extents are also inserted into extent tree in ocfs2_write_begin_nolock. Then another thread call fallocate to puch a hole at one of the unwritten extent. The extent at cpos was removed by ocfs2_remove_extent(). At end io worker thread, ocfs2_search_extent_list found there is no such extent at the cpos. T1 T2 T3 inode lock ... insert extents ... inode unlock ocfs2_fallocate __ocfs2_change_file_space inode lock lock ip_alloc_sem ocfs2_remove_inode_range inode ocfs2_remove_btree_range ocfs2_remove_extent ^---remove the extent at cpos 78723 ... unlock ip_alloc_sem inode unlock ocfs2_dio_end_io ocfs2_dio_end_io_write lock ip_alloc_sem ocfs2_mark_extent_written ocfs2_change_extent_flag ocfs2_search_extent_list ^---failed to find extent ... unlock ip_alloc_sem In most filesystems, fallocate is not compatible with racing with AIO+DIO, so fix it by adding to wait for all dio before fallocate/punch_hole like ext4. Link: https://lkml.kernel.org/r/20240408082041.20925-3-glass.su@suse.com Fixes: b25801038da5 ("ocfs2: Support xfs style space reservation ioctls") Signed-off-by: Su Yue <glass.su(a)suse.com> Reviewed-by: Joseph Qi <joseph.qi(a)linux.alibaba.com> Cc: Changwei Ge <gechangwei(a)live.cn> Cc: Gang He <ghe(a)suse.com> Cc: Joel Becker <jlbec(a)evilplan.org> Cc: Jun Piao <piaojun(a)huawei.com> Cc: Junxiao Bi <junxiao.bi(a)oracle.com> Cc: Mark Fasheh <mark(a)fasheh.com> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> Signed-off-by: Ye Bin <yebin10(a)huawei.com> --- fs/ocfs2/file.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/fs/ocfs2/file.c b/fs/ocfs2/file.c index c45596c25c66..f861b8c345e8 100644 --- a/fs/ocfs2/file.c +++ b/fs/ocfs2/file.c @@ -1934,6 +1934,8 @@ static int __ocfs2_change_file_space(struct file *file, struct inode *inode, inode_lock(inode); + /* Wait all existing dio workers, newcomers will block on i_rwsem */ + inode_dio_wait(inode); /* * This prevents concurrent writes on other nodes */ -- 2.31.1

2 1

[PATCH openEuler-22.03-LTS-SP1] ocfs2: fix races between hole punching and AIO+DIO
by Ye Bin 15 Jul '24

15 Jul '24

From: Su Yue <glass.su(a)suse.com> mainline inclusion from mainline-v6.10-rc1 commit 952b023f06a24b2ad6ba67304c4c84d45bea2f18 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAD0L1 CVE: CVE-2024-40943 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… --------------------------- After commit "ocfs2: return real error code in ocfs2_dio_wr_get_block", fstests/generic/300 become from always failed to sometimes failed: ======================================================================== [ 473.293420 ] run fstests generic/300 [ 475.296983 ] JBD2: Ignoring recovery information on journal [ 475.302473 ] ocfs2: Mounting device (253,1) on (node local, slot 0) with ordered data mode. [ 494.290998 ] OCFS2: ERROR (device dm-1): ocfs2_change_extent_flag: Owner 5668 has an extent at cpos 78723 which can no longer be found [ 494.291609 ] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 494.292018 ] OCFS2: File system is now read-only. [ 494.292224 ] (kworker/19:11,2628,19):ocfs2_mark_extent_written:5272 ERROR: status = -30 [ 494.292602 ] (kworker/19:11,2628,19):ocfs2_dio_end_io_write:2374 ERROR: status = -3 fio: io_u error on file /mnt/scratch/racer: Read-only file system: write offset=460849152, buflen=131072 ========================================================================= In __blockdev_direct_IO, ocfs2_dio_wr_get_block is called to add unwritten extents to a list. extents are also inserted into extent tree in ocfs2_write_begin_nolock. Then another thread call fallocate to puch a hole at one of the unwritten extent. The extent at cpos was removed by ocfs2_remove_extent(). At end io worker thread, ocfs2_search_extent_list found there is no such extent at the cpos. T1 T2 T3 inode lock ... insert extents ... inode unlock ocfs2_fallocate __ocfs2_change_file_space inode lock lock ip_alloc_sem ocfs2_remove_inode_range inode ocfs2_remove_btree_range ocfs2_remove_extent ^---remove the extent at cpos 78723 ... unlock ip_alloc_sem inode unlock ocfs2_dio_end_io ocfs2_dio_end_io_write lock ip_alloc_sem ocfs2_mark_extent_written ocfs2_change_extent_flag ocfs2_search_extent_list ^---failed to find extent ... unlock ip_alloc_sem In most filesystems, fallocate is not compatible with racing with AIO+DIO, so fix it by adding to wait for all dio before fallocate/punch_hole like ext4. Link: https://lkml.kernel.org/r/20240408082041.20925-3-glass.su@suse.com Fixes: b25801038da5 ("ocfs2: Support xfs style space reservation ioctls") Signed-off-by: Su Yue <glass.su(a)suse.com> Reviewed-by: Joseph Qi <joseph.qi(a)linux.alibaba.com> Cc: Changwei Ge <gechangwei(a)live.cn> Cc: Gang He <ghe(a)suse.com> Cc: Joel Becker <jlbec(a)evilplan.org> Cc: Jun Piao <piaojun(a)huawei.com> Cc: Junxiao Bi <junxiao.bi(a)oracle.com> Cc: Mark Fasheh <mark(a)fasheh.com> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> Signed-off-by: Ye Bin <yebin10(a)huawei.com> --- fs/ocfs2/file.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/fs/ocfs2/file.c b/fs/ocfs2/file.c index 1470b49adb2d..ffa258da6bac 100644 --- a/fs/ocfs2/file.c +++ b/fs/ocfs2/file.c @@ -1940,6 +1940,8 @@ static int __ocfs2_change_file_space(struct file *file, struct inode *inode, inode_lock(inode); + /* Wait all existing dio workers, newcomers will block on i_rwsem */ + inode_dio_wait(inode); /* * This prevents concurrent writes on other nodes */ -- 2.31.1

2 1

[PATCH OLK-5.10] ocfs2: fix races between hole punching and AIO+DIO
by Ye Bin 15 Jul '24

15 Jul '24

From: Su Yue <glass.su(a)suse.com> mainline inclusion from mainline-v6.10-rc1 commit 952b023f06a24b2ad6ba67304c4c84d45bea2f18 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAD0L1 CVE: CVE-2024-40943 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… --------------------------- After commit "ocfs2: return real error code in ocfs2_dio_wr_get_block", fstests/generic/300 become from always failed to sometimes failed: ======================================================================== [ 473.293420 ] run fstests generic/300 [ 475.296983 ] JBD2: Ignoring recovery information on journal [ 475.302473 ] ocfs2: Mounting device (253,1) on (node local, slot 0) with ordered data mode. [ 494.290998 ] OCFS2: ERROR (device dm-1): ocfs2_change_extent_flag: Owner 5668 has an extent at cpos 78723 which can no longer be found [ 494.291609 ] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 494.292018 ] OCFS2: File system is now read-only. [ 494.292224 ] (kworker/19:11,2628,19):ocfs2_mark_extent_written:5272 ERROR: status = -30 [ 494.292602 ] (kworker/19:11,2628,19):ocfs2_dio_end_io_write:2374 ERROR: status = -3 fio: io_u error on file /mnt/scratch/racer: Read-only file system: write offset=460849152, buflen=131072 ========================================================================= In __blockdev_direct_IO, ocfs2_dio_wr_get_block is called to add unwritten extents to a list. extents are also inserted into extent tree in ocfs2_write_begin_nolock. Then another thread call fallocate to puch a hole at one of the unwritten extent. The extent at cpos was removed by ocfs2_remove_extent(). At end io worker thread, ocfs2_search_extent_list found there is no such extent at the cpos. T1 T2 T3 inode lock ... insert extents ... inode unlock ocfs2_fallocate __ocfs2_change_file_space inode lock lock ip_alloc_sem ocfs2_remove_inode_range inode ocfs2_remove_btree_range ocfs2_remove_extent ^---remove the extent at cpos 78723 ... unlock ip_alloc_sem inode unlock ocfs2_dio_end_io ocfs2_dio_end_io_write lock ip_alloc_sem ocfs2_mark_extent_written ocfs2_change_extent_flag ocfs2_search_extent_list ^---failed to find extent ... unlock ip_alloc_sem In most filesystems, fallocate is not compatible with racing with AIO+DIO, so fix it by adding to wait for all dio before fallocate/punch_hole like ext4. Link: https://lkml.kernel.org/r/20240408082041.20925-3-glass.su@suse.com Fixes: b25801038da5 ("ocfs2: Support xfs style space reservation ioctls") Signed-off-by: Su Yue <glass.su(a)suse.com> Reviewed-by: Joseph Qi <joseph.qi(a)linux.alibaba.com> Cc: Changwei Ge <gechangwei(a)live.cn> Cc: Gang He <ghe(a)suse.com> Cc: Joel Becker <jlbec(a)evilplan.org> Cc: Jun Piao <piaojun(a)huawei.com> Cc: Junxiao Bi <junxiao.bi(a)oracle.com> Cc: Mark Fasheh <mark(a)fasheh.com> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> Signed-off-by: Ye Bin <yebin10(a)huawei.com> --- fs/ocfs2/file.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/fs/ocfs2/file.c b/fs/ocfs2/file.c index 318b73d791d5..ec0e67e9a3ec 100644 --- a/fs/ocfs2/file.c +++ b/fs/ocfs2/file.c @@ -1940,6 +1940,8 @@ static int __ocfs2_change_file_space(struct file *file, struct inode *inode, inode_lock(inode); + /* Wait all existing dio workers, newcomers will block on i_rwsem */ + inode_dio_wait(inode); /* * This prevents concurrent writes on other nodes */ -- 2.31.1

2 1

[PATCH openEuler-1.0-LTS] ocfs2: fix races between hole punching and AIO+DIO
by Ye Bin 15 Jul '24

15 Jul '24

From: Su Yue <glass.su(a)suse.com> mainline inclusion from mainline-v6.10-rc1 commit 952b023f06a24b2ad6ba67304c4c84d45bea2f18 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAD0L1 CVE: CVE-2024-40943 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… --------------------------- After commit "ocfs2: return real error code in ocfs2_dio_wr_get_block", fstests/generic/300 become from always failed to sometimes failed: ======================================================================== [ 473.293420 ] run fstests generic/300 [ 475.296983 ] JBD2: Ignoring recovery information on journal [ 475.302473 ] ocfs2: Mounting device (253,1) on (node local, slot 0) with ordered data mode. [ 494.290998 ] OCFS2: ERROR (device dm-1): ocfs2_change_extent_flag: Owner 5668 has an extent at cpos 78723 which can no longer be found [ 494.291609 ] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 494.292018 ] OCFS2: File system is now read-only. [ 494.292224 ] (kworker/19:11,2628,19):ocfs2_mark_extent_written:5272 ERROR: status = -30 [ 494.292602 ] (kworker/19:11,2628,19):ocfs2_dio_end_io_write:2374 ERROR: status = -3 fio: io_u error on file /mnt/scratch/racer: Read-only file system: write offset=460849152, buflen=131072 ========================================================================= In __blockdev_direct_IO, ocfs2_dio_wr_get_block is called to add unwritten extents to a list. extents are also inserted into extent tree in ocfs2_write_begin_nolock. Then another thread call fallocate to puch a hole at one of the unwritten extent. The extent at cpos was removed by ocfs2_remove_extent(). At end io worker thread, ocfs2_search_extent_list found there is no such extent at the cpos. T1 T2 T3 inode lock ... insert extents ... inode unlock ocfs2_fallocate __ocfs2_change_file_space inode lock lock ip_alloc_sem ocfs2_remove_inode_range inode ocfs2_remove_btree_range ocfs2_remove_extent ^---remove the extent at cpos 78723 ... unlock ip_alloc_sem inode unlock ocfs2_dio_end_io ocfs2_dio_end_io_write lock ip_alloc_sem ocfs2_mark_extent_written ocfs2_change_extent_flag ocfs2_search_extent_list ^---failed to find extent ... unlock ip_alloc_sem In most filesystems, fallocate is not compatible with racing with AIO+DIO, so fix it by adding to wait for all dio before fallocate/punch_hole like ext4. Link: https://lkml.kernel.org/r/20240408082041.20925-3-glass.su@suse.com Fixes: b25801038da5 ("ocfs2: Support xfs style space reservation ioctls") Signed-off-by: Su Yue <glass.su(a)suse.com> Reviewed-by: Joseph Qi <joseph.qi(a)linux.alibaba.com> Cc: Changwei Ge <gechangwei(a)live.cn> Cc: Gang He <ghe(a)suse.com> Cc: Joel Becker <jlbec(a)evilplan.org> Cc: Jun Piao <piaojun(a)huawei.com> Cc: Junxiao Bi <junxiao.bi(a)oracle.com> Cc: Mark Fasheh <mark(a)fasheh.com> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> Signed-off-by: Ye Bin <yebin10(a)huawei.com> --- fs/ocfs2/file.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/fs/ocfs2/file.c b/fs/ocfs2/file.c index fd49fd2ad86f..8c0e300f0463 100644 --- a/fs/ocfs2/file.c +++ b/fs/ocfs2/file.c @@ -1940,6 +1940,8 @@ static int __ocfs2_change_file_space(struct file *file, struct inode *inode, inode_lock(inode); + /* Wait all existing dio workers, newcomers will block on i_rwsem */ + inode_dio_wait(inode); /* * This prevents concurrent writes on other nodes */ -- 2.31.1

2 1

[PATCH OLK-5.10] drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
by Zeng Heng 15 Jul '24

15 Jul '24

From: Anand K Mistry <amistry(a)google.com> mainline inclusion from mainline-v5.16-rc1 commit 8244a3bc27b3efd057da154b8d7e414670d5044f category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNEV CVE: CVE-2021-47200 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ---------------------------------- drm_gem_ttm_mmap() drops a reference to the gem object on success. If the gem object's refcount == 1 on entry to drm_gem_prime_mmap(), that drop will free the gem object, and the subsequent drm_gem_object_get() will be a UAF. Fix by grabbing a reference before calling the mmap helper. This issue was forseen when the reference dropping was adding in commit 9786b65bc61ac ("drm/ttm: fix mmap refcounting"): "For that to work properly the drm_gem_object_get() call in drm_gem_ttm_mmap() must be moved so it happens before calling obj->funcs->mmap(), otherwise the gem refcount would go down to zero." Signed-off-by: Anand K Mistry <amistry(a)google.com> Fixes: 9786b65bc61a ("drm/ttm: fix mmap refcounting") Cc: Gerd Hoffmann <kraxel(a)redhat.com> Cc: Daniel Vetter <daniel.vetter(a)ffwll.ch> Cc: Maarten Lankhorst <maarten.lankhorst(a)linux.intel.com> Cc: Maxime Ripard <mripard(a)kernel.org> Cc: Thomas Zimmermann <tzimmermann(a)suse.de> Cc: David Airlie <airlied(a)linux.ie> Cc: Daniel Vetter <daniel(a)ffwll.ch> Cc: dri-devel(a)lists.freedesktop.org Cc: <stable(a)vger.kernel.org> # v5.5+ Signed-off-by: Thomas Zimmermann <tzimmermann(a)suse.de> Link: https://patchwork.freedesktop.org/patch/msgid/20210930085932.1.I8043d61cc23… Conflicts: drivers/gpu/drm/drm_prime.c [Resolve conflicts due to several refactor patches not merged.] Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/gpu/drm/drm_prime.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/drivers/gpu/drm/drm_prime.c b/drivers/gpu/drm/drm_prime.c index 825499ea3ff5..893421d81e1e 100644 --- a/drivers/gpu/drm/drm_prime.c +++ b/drivers/gpu/drm/drm_prime.c @@ -724,11 +724,13 @@ int drm_gem_prime_mmap(struct drm_gem_object *obj, struct vm_area_struct *vma) vma->vm_pgoff += drm_vma_node_start(&obj->vma_node); if (obj->funcs && obj->funcs->mmap) { + drm_gem_object_get(obj); ret = obj->funcs->mmap(obj, vma); - if (ret) + if (ret) { + drm_gem_object_put(obj); return ret; + } vma->vm_private_data = obj; - drm_gem_object_get(obj); return 0; } -- 2.25.1

2 1

[PATCH openEuler-22.03-LTS-SP1] drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
by Zeng Heng 15 Jul '24

15 Jul '24

From: Anand K Mistry <amistry(a)google.com> mainline inclusion from mainline-v5.16-rc1 commit 8244a3bc27b3efd057da154b8d7e414670d5044f category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNEV CVE: CVE-2021-47200 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ---------------------------------- drm_gem_ttm_mmap() drops a reference to the gem object on success. If the gem object's refcount == 1 on entry to drm_gem_prime_mmap(), that drop will free the gem object, and the subsequent drm_gem_object_get() will be a UAF. Fix by grabbing a reference before calling the mmap helper. This issue was forseen when the reference dropping was adding in commit 9786b65bc61ac ("drm/ttm: fix mmap refcounting"): "For that to work properly the drm_gem_object_get() call in drm_gem_ttm_mmap() must be moved so it happens before calling obj->funcs->mmap(), otherwise the gem refcount would go down to zero." Signed-off-by: Anand K Mistry <amistry(a)google.com> Fixes: 9786b65bc61a ("drm/ttm: fix mmap refcounting") Cc: Gerd Hoffmann <kraxel(a)redhat.com> Cc: Daniel Vetter <daniel.vetter(a)ffwll.ch> Cc: Maarten Lankhorst <maarten.lankhorst(a)linux.intel.com> Cc: Maxime Ripard <mripard(a)kernel.org> Cc: Thomas Zimmermann <tzimmermann(a)suse.de> Cc: David Airlie <airlied(a)linux.ie> Cc: Daniel Vetter <daniel(a)ffwll.ch> Cc: dri-devel(a)lists.freedesktop.org Cc: <stable(a)vger.kernel.org> # v5.5+ Signed-off-by: Thomas Zimmermann <tzimmermann(a)suse.de> Link: https://patchwork.freedesktop.org/patch/msgid/20210930085932.1.I8043d61cc23… Conflicts: drivers/gpu/drm/drm_prime.c [Resolve conflicts due to several refactor patches not merged.] Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/gpu/drm/drm_prime.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/drivers/gpu/drm/drm_prime.c b/drivers/gpu/drm/drm_prime.c index 825499ea3ff5..893421d81e1e 100644 --- a/drivers/gpu/drm/drm_prime.c +++ b/drivers/gpu/drm/drm_prime.c @@ -724,11 +724,13 @@ int drm_gem_prime_mmap(struct drm_gem_object *obj, struct vm_area_struct *vma) vma->vm_pgoff += drm_vma_node_start(&obj->vma_node); if (obj->funcs && obj->funcs->mmap) { + drm_gem_object_get(obj); ret = obj->funcs->mmap(obj, vma); - if (ret) + if (ret) { + drm_gem_object_put(obj); return ret; + } vma->vm_private_data = obj; - drm_gem_object_get(obj); return 0; } -- 2.25.1

2 1

[PATCH openEuler-22.03-LTS-SP1] drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
by Zeng Heng 15 Jul '24

15 Jul '24

From: Anand K Mistry <amistry(a)google.com> mainline inclusion from mainline-v5.16-rc1 commit 8244a3bc27b3efd057da154b8d7e414670d5044f category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNEV CVE: CVE-2021-47200 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ---------------------------------- drm_gem_ttm_mmap() drops a reference to the gem object on success. If the gem object's refcount == 1 on entry to drm_gem_prime_mmap(), that drop will free the gem object, and the subsequent drm_gem_object_get() will be a UAF. Fix by grabbing a reference before calling the mmap helper. This issue was forseen when the reference dropping was adding in commit 9786b65bc61ac ("drm/ttm: fix mmap refcounting"): "For that to work properly the drm_gem_object_get() call in drm_gem_ttm_mmap() must be moved so it happens before calling obj->funcs->mmap(), otherwise the gem refcount would go down to zero." Signed-off-by: Anand K Mistry <amistry(a)google.com> Fixes: 9786b65bc61a ("drm/ttm: fix mmap refcounting") Cc: Gerd Hoffmann <kraxel(a)redhat.com> Cc: Daniel Vetter <daniel.vetter(a)ffwll.ch> Cc: Maarten Lankhorst <maarten.lankhorst(a)linux.intel.com> Cc: Maxime Ripard <mripard(a)kernel.org> Cc: Thomas Zimmermann <tzimmermann(a)suse.de> Cc: David Airlie <airlied(a)linux.ie> Cc: Daniel Vetter <daniel(a)ffwll.ch> Cc: dri-devel(a)lists.freedesktop.org Cc: <stable(a)vger.kernel.org> # v5.5+ Signed-off-by: Thomas Zimmermann <tzimmermann(a)suse.de> Link: https://patchwork.freedesktop.org/patch/msgid/20210930085932.1.I8043d61cc23… Conflicts: drivers/gpu/drm/drm_prime.c [Resolve conflicts due to several refactor patches not merged.] Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/gpu/drm/drm_prime.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/drivers/gpu/drm/drm_prime.c b/drivers/gpu/drm/drm_prime.c index 825499ea3ff5..c806cf4c9a48 100644 --- a/drivers/gpu/drm/drm_prime.c +++ b/drivers/gpu/drm/drm_prime.c @@ -724,11 +724,14 @@ int drm_gem_prime_mmap(struct drm_gem_object *obj, struct vm_area_struct *vma) vma->vm_pgoff += drm_vma_node_start(&obj->vma_node); if (obj->funcs && obj->funcs->mmap) { + + drm_gem_object_get(obj); ret = obj->funcs->mmap(obj, vma); - if (ret) + if (ret) { + drm_gem_object_put(obj); return ret; + } vma->vm_private_data = obj; - drm_gem_object_get(obj); return 0; } -- 2.25.1

2 1

[PATCH OLK-5.10] drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
by Zeng Heng 15 Jul '24

15 Jul '24

From: Anand K Mistry <amistry(a)google.com> mainline inclusion from mainline-v5.16-rc1 commit 8244a3bc27b3efd057da154b8d7e414670d5044f category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNEV CVE: CVE-2021-47200 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ---------------------------------- drm_gem_ttm_mmap() drops a reference to the gem object on success. If the gem object's refcount == 1 on entry to drm_gem_prime_mmap(), that drop will free the gem object, and the subsequent drm_gem_object_get() will be a UAF. Fix by grabbing a reference before calling the mmap helper. This issue was forseen when the reference dropping was adding in commit 9786b65bc61ac ("drm/ttm: fix mmap refcounting"): "For that to work properly the drm_gem_object_get() call in drm_gem_ttm_mmap() must be moved so it happens before calling obj->funcs->mmap(), otherwise the gem refcount would go down to zero." Signed-off-by: Anand K Mistry <amistry(a)google.com> Fixes: 9786b65bc61a ("drm/ttm: fix mmap refcounting") Cc: Gerd Hoffmann <kraxel(a)redhat.com> Cc: Daniel Vetter <daniel.vetter(a)ffwll.ch> Cc: Maarten Lankhorst <maarten.lankhorst(a)linux.intel.com> Cc: Maxime Ripard <mripard(a)kernel.org> Cc: Thomas Zimmermann <tzimmermann(a)suse.de> Cc: David Airlie <airlied(a)linux.ie> Cc: Daniel Vetter <daniel(a)ffwll.ch> Cc: dri-devel(a)lists.freedesktop.org Cc: <stable(a)vger.kernel.org> # v5.5+ Signed-off-by: Thomas Zimmermann <tzimmermann(a)suse.de> Link: https://patchwork.freedesktop.org/patch/msgid/20210930085932.1.I8043d61cc23… Conflicts: drivers/gpu/drm/drm_prime.c [Resolve conflicts due to several refactor patches not merged.] Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/gpu/drm/drm_prime.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/drivers/gpu/drm/drm_prime.c b/drivers/gpu/drm/drm_prime.c index 825499ea3ff5..c806cf4c9a48 100644 --- a/drivers/gpu/drm/drm_prime.c +++ b/drivers/gpu/drm/drm_prime.c @@ -724,11 +724,14 @@ int drm_gem_prime_mmap(struct drm_gem_object *obj, struct vm_area_struct *vma) vma->vm_pgoff += drm_vma_node_start(&obj->vma_node); if (obj->funcs && obj->funcs->mmap) { + + drm_gem_object_get(obj); ret = obj->funcs->mmap(obj, vma); - if (ret) + if (ret) { + drm_gem_object_put(obj); return ret; + } vma->vm_private_data = obj; - drm_gem_object_get(obj); return 0; } -- 2.25.1

2 1

[PATCH OLK-5.10] drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
by Zeng Heng 15 Jul '24

15 Jul '24

From: Anand K Mistry <amistry(a)google.com> mainline inclusion from mainline-v5.16-rc1 commit 8244a3bc27b3efd057da154b8d7e414670d5044f category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNEV CVE: CVE-2021-47200 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ---------------------------------- drm_gem_ttm_mmap() drops a reference to the gem object on success. If the gem object's refcount == 1 on entry to drm_gem_prime_mmap(), that drop will free the gem object, and the subsequent drm_gem_object_get() will be a UAF. Fix by grabbing a reference before calling the mmap helper. This issue was forseen when the reference dropping was adding in commit 9786b65bc61ac ("drm/ttm: fix mmap refcounting"): "For that to work properly the drm_gem_object_get() call in drm_gem_ttm_mmap() must be moved so it happens before calling obj->funcs->mmap(), otherwise the gem refcount would go down to zero." Signed-off-by: Anand K Mistry <amistry(a)google.com> Fixes: 9786b65bc61a ("drm/ttm: fix mmap refcounting") Cc: Gerd Hoffmann <kraxel(a)redhat.com> Cc: Daniel Vetter <daniel.vetter(a)ffwll.ch> Cc: Maarten Lankhorst <maarten.lankhorst(a)linux.intel.com> Cc: Maxime Ripard <mripard(a)kernel.org> Cc: Thomas Zimmermann <tzimmermann(a)suse.de> Cc: David Airlie <airlied(a)linux.ie> Cc: Daniel Vetter <daniel(a)ffwll.ch> Cc: dri-devel(a)lists.freedesktop.org Cc: <stable(a)vger.kernel.org> # v5.5+ Signed-off-by: Thomas Zimmermann <tzimmermann(a)suse.de> Link: https://patchwork.freedesktop.org/patch/msgid/20210930085932.1.I8043d61cc23… Conflicts: drivers/gpu/drm/drm_prime.c [Resolve conflicts due to several refactor patches not merged.] Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/gpu/drm/drm_prime.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/drivers/gpu/drm/drm_prime.c b/drivers/gpu/drm/drm_prime.c index 825499ea3ff5..c806cf4c9a48 100644 --- a/drivers/gpu/drm/drm_prime.c +++ b/drivers/gpu/drm/drm_prime.c @@ -724,11 +724,14 @@ int drm_gem_prime_mmap(struct drm_gem_object *obj, struct vm_area_struct *vma) vma->vm_pgoff += drm_vma_node_start(&obj->vma_node); if (obj->funcs && obj->funcs->mmap) { + + drm_gem_object_get(obj); ret = obj->funcs->mmap(obj, vma); - if (ret) + if (ret) { + drm_gem_object_put(obj); return ret; + } vma->vm_private_data = obj; - drm_gem_object_get(obj); return 0; } -- 2.25.1

2 1

[PATCH openEuler-22.03-LTS-SP1] drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
by Zeng Heng 15 Jul '24

15 Jul '24

From: Anand K Mistry <amistry(a)google.com> mainline inclusion from mainline-v5.16-rc1 commit 8244a3bc27b3efd057da154b8d7e414670d5044f category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNEV CVE: CVE-2021-47200 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ---------------------------------- drm_gem_ttm_mmap() drops a reference to the gem object on success. If the gem object's refcount == 1 on entry to drm_gem_prime_mmap(), that drop will free the gem object, and the subsequent drm_gem_object_get() will be a UAF. Fix by grabbing a reference before calling the mmap helper. This issue was forseen when the reference dropping was adding in commit 9786b65bc61ac ("drm/ttm: fix mmap refcounting"): "For that to work properly the drm_gem_object_get() call in drm_gem_ttm_mmap() must be moved so it happens before calling obj->funcs->mmap(), otherwise the gem refcount would go down to zero." Signed-off-by: Anand K Mistry <amistry(a)google.com> Fixes: 9786b65bc61a ("drm/ttm: fix mmap refcounting") Cc: Gerd Hoffmann <kraxel(a)redhat.com> Cc: Daniel Vetter <daniel.vetter(a)ffwll.ch> Cc: Maarten Lankhorst <maarten.lankhorst(a)linux.intel.com> Cc: Maxime Ripard <mripard(a)kernel.org> Cc: Thomas Zimmermann <tzimmermann(a)suse.de> Cc: David Airlie <airlied(a)linux.ie> Cc: Daniel Vetter <daniel(a)ffwll.ch> Cc: dri-devel(a)lists.freedesktop.org Cc: <stable(a)vger.kernel.org> # v5.5+ Signed-off-by: Thomas Zimmermann <tzimmermann(a)suse.de> Link: https://patchwork.freedesktop.org/patch/msgid/20210930085932.1.I8043d61cc23… Conflicts: drivers/gpu/drm/drm_prime.c [Resolve conflicts due to several refactor patches not merged.] Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/gpu/drm/drm_prime.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/drivers/gpu/drm/drm_prime.c b/drivers/gpu/drm/drm_prime.c index 825499ea3ff5..c806cf4c9a48 100644 --- a/drivers/gpu/drm/drm_prime.c +++ b/drivers/gpu/drm/drm_prime.c @@ -724,11 +724,14 @@ int drm_gem_prime_mmap(struct drm_gem_object *obj, struct vm_area_struct *vma) vma->vm_pgoff += drm_vma_node_start(&obj->vma_node); if (obj->funcs && obj->funcs->mmap) { + + drm_gem_object_get(obj); ret = obj->funcs->mmap(obj, vma); - if (ret) + if (ret) { + drm_gem_object_put(obj); return ret; + } vma->vm_private_data = obj; - drm_gem_object_get(obj); return 0; } -- 2.25.1

2 1

[PATCH openEuler-22.03-LTS-SP1] powerpc/pseries: Enforce hcall result buffer validity and size
by Huang Xiaojia 15 Jul '24

15 Jul '24

From: Nathan Lynch <nathanl(a)linux.ibm.com> stable inclusion from stable-v4.19.317 commit acf2b80c31c37acab040baa3cf5f19fbd5140b18 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACRHB CVE: CVE-2024-40974 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit ff2e185cf73df480ec69675936c4ee75a445c3e4 ] plpar_hcall(), plpar_hcall9(), and related functions expect callers to provide valid result buffers of certain minimum size. Currently this is communicated only through comments in the code and the compiler has no idea. For example, if I write a bug like this: long retbuf[PLPAR_HCALL_BUFSIZE]; // should be PLPAR_HCALL9_BUFSIZE plpar_hcall9(H_ALLOCATE_VAS_WINDOW, retbuf, ...); This compiles with no diagnostics emitted, but likely results in stack corruption at runtime when plpar_hcall9() stores results past the end of the array. (To be clear this is a contrived example and I have not found a real instance yet.) To make this class of error less likely, we can use explicitly-sized array parameters instead of pointers in the declarations for the hcall APIs. When compiled with -Warray-bounds[1], the code above now provokes a diagnostic like this: error: array argument is too small; is of size 32, callee requires at least 72 [-Werror,-Warray-bounds] 60 | plpar_hcall9(H_ALLOCATE_VAS_WINDOW, retbuf, | ^ ~~~~~~ [1] Enabled for LLVM builds but not GCC for now. See commit 0da6e5fd6c37 ("gcc: disable '-Warray-bounds' for gcc-13 too") and related changes. Signed-off-by: Nathan Lynch <nathanl(a)linux.ibm.com> Signed-off-by: Michael Ellerman <mpe(a)ellerman.id.au> Link: https://msgid.link/20240408-pseries-hvcall-retbuf-v1-1-ebc73d7253cf@linux.i… Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Huang Xiaojia <huangxiaojia2(a)huawei.com> --- arch/powerpc/include/asm/hvcall.h | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/arch/powerpc/include/asm/hvcall.h b/arch/powerpc/include/asm/hvcall.h index 00c8cda1c9c3..a8035af4fc50 100644 --- a/arch/powerpc/include/asm/hvcall.h +++ b/arch/powerpc/include/asm/hvcall.h @@ -453,7 +453,7 @@ long plpar_hcall_norets_notrace(unsigned long opcode, ...); * Used for all but the craziest of phyp interfaces (see plpar_hcall9) */ #define PLPAR_HCALL_BUFSIZE 4 -long plpar_hcall(unsigned long opcode, unsigned long *retbuf, ...); +long plpar_hcall(unsigned long opcode, unsigned long retbuf[static PLPAR_HCALL_BUFSIZE], ...); /** * plpar_hcall_raw: - Make a hypervisor call without calculating hcall stats @@ -467,7 +467,7 @@ long plpar_hcall(unsigned long opcode, unsigned long *retbuf, ...); * plpar_hcall, but plpar_hcall_raw works in real mode and does not * calculate hypervisor call statistics. */ -long plpar_hcall_raw(unsigned long opcode, unsigned long *retbuf, ...); +long plpar_hcall_raw(unsigned long opcode, unsigned long retbuf[static PLPAR_HCALL_BUFSIZE], ...); /** * plpar_hcall9: - Make a pseries hypervisor call with up to 9 return arguments @@ -478,8 +478,8 @@ long plpar_hcall_raw(unsigned long opcode, unsigned long *retbuf, ...); * PLPAR_HCALL9_BUFSIZE to size the return argument buffer. */ #define PLPAR_HCALL9_BUFSIZE 9 -long plpar_hcall9(unsigned long opcode, unsigned long *retbuf, ...); -long plpar_hcall9_raw(unsigned long opcode, unsigned long *retbuf, ...); +long plpar_hcall9(unsigned long opcode, unsigned long retbuf[static PLPAR_HCALL9_BUFSIZE], ...); +long plpar_hcall9_raw(unsigned long opcode, unsigned long retbuf[static PLPAR_HCALL9_BUFSIZE], ...); struct hvcall_mpp_data { unsigned long entitled_mem; -- 2.34.1

2 1

[PATCH openEuler-1.0-LTS] powerpc/pseries: Enforce hcall result buffer validity and size
by Huang Xiaojia 15 Jul '24

15 Jul '24

From: Nathan Lynch <nathanl(a)linux.ibm.com> stable inclusion from stable-v4.19.317 commit acf2b80c31c37acab040baa3cf5f19fbd5140b18 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACRHB CVE: CVE-2024-40974 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit ff2e185cf73df480ec69675936c4ee75a445c3e4 ] plpar_hcall(), plpar_hcall9(), and related functions expect callers to provide valid result buffers of certain minimum size. Currently this is communicated only through comments in the code and the compiler has no idea. For example, if I write a bug like this: long retbuf[PLPAR_HCALL_BUFSIZE]; // should be PLPAR_HCALL9_BUFSIZE plpar_hcall9(H_ALLOCATE_VAS_WINDOW, retbuf, ...); This compiles with no diagnostics emitted, but likely results in stack corruption at runtime when plpar_hcall9() stores results past the end of the array. (To be clear this is a contrived example and I have not found a real instance yet.) To make this class of error less likely, we can use explicitly-sized array parameters instead of pointers in the declarations for the hcall APIs. When compiled with -Warray-bounds[1], the code above now provokes a diagnostic like this: error: array argument is too small; is of size 32, callee requires at least 72 [-Werror,-Warray-bounds] 60 | plpar_hcall9(H_ALLOCATE_VAS_WINDOW, retbuf, | ^ ~~~~~~ [1] Enabled for LLVM builds but not GCC for now. See commit 0da6e5fd6c37 ("gcc: disable '-Warray-bounds' for gcc-13 too") and related changes. Signed-off-by: Nathan Lynch <nathanl(a)linux.ibm.com> Signed-off-by: Michael Ellerman <mpe(a)ellerman.id.au> Link: https://msgid.link/20240408-pseries-hvcall-retbuf-v1-1-ebc73d7253cf@linux.i… Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Huang Xiaojia <huangxiaojia2(a)huawei.com> --- arch/powerpc/include/asm/hvcall.h | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/arch/powerpc/include/asm/hvcall.h b/arch/powerpc/include/asm/hvcall.h index a0b17f9f1ea4..8347f57e1c6a 100644 --- a/arch/powerpc/include/asm/hvcall.h +++ b/arch/powerpc/include/asm/hvcall.h @@ -383,7 +383,7 @@ long plpar_hcall_norets(unsigned long opcode, ...); * Used for all but the craziest of phyp interfaces (see plpar_hcall9) */ #define PLPAR_HCALL_BUFSIZE 4 -long plpar_hcall(unsigned long opcode, unsigned long *retbuf, ...); +long plpar_hcall(unsigned long opcode, unsigned long retbuf[static PLPAR_HCALL_BUFSIZE], ...); /** * plpar_hcall_raw: - Make a hypervisor call without calculating hcall stats @@ -397,7 +397,7 @@ long plpar_hcall(unsigned long opcode, unsigned long *retbuf, ...); * plpar_hcall, but plpar_hcall_raw works in real mode and does not * calculate hypervisor call statistics. */ -long plpar_hcall_raw(unsigned long opcode, unsigned long *retbuf, ...); +long plpar_hcall_raw(unsigned long opcode, unsigned long retbuf[static PLPAR_HCALL_BUFSIZE], ...); /** * plpar_hcall9: - Make a pseries hypervisor call with up to 9 return arguments @@ -408,8 +408,8 @@ long plpar_hcall_raw(unsigned long opcode, unsigned long *retbuf, ...); * PLPAR_HCALL9_BUFSIZE to size the return argument buffer. */ #define PLPAR_HCALL9_BUFSIZE 9 -long plpar_hcall9(unsigned long opcode, unsigned long *retbuf, ...); -long plpar_hcall9_raw(unsigned long opcode, unsigned long *retbuf, ...); +long plpar_hcall9(unsigned long opcode, unsigned long retbuf[static PLPAR_HCALL9_BUFSIZE], ...); +long plpar_hcall9_raw(unsigned long opcode, unsigned long retbuf[static PLPAR_HCALL9_BUFSIZE], ...); struct hvcall_mpp_data { unsigned long entitled_mem; -- 2.34.1

2 1

[PATCH openEuler-22.03-LTS-SP1 0/1] powerpc/pseries: Enforce hcall result buffer validity and size
by Huang Xiaojia 15 Jul '24

15 Jul '24

*** BLURB HERE *** Nathan Lynch (1): powerpc/pseries: Enforce hcall result buffer validity and size arch/powerpc/include/asm/hvcall.h | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) -- 2.34.1

2 2

[PATCH OLK-6.6 0/1] powerpc/pseries: Enforce hcall result buffer validity and size
by Huang Xiaojia 15 Jul '24

15 Jul '24

*** BLURB HERE *** Nathan Lynch (1): powerpc/pseries: Enforce hcall result buffer validity and size arch/powerpc/include/asm/hvcall.h | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) -- 2.34.1

2 2

[PATCH OLK-6.6] arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
by Li Zetao 15 Jul '24

15 Jul '24

From: Jiangfeng Xiao <xiaojiangfeng(a)huawei.com> stable inclusion from stable-v6.6.33 commit 9f2ad88f9b349554f64e4037ec185c84d7dd9c7d category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAC3N3 CVE: CVE-2024-39488 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit ffbf4fb9b5c12ff878a10ea17997147ea4ebea6f ] When CONFIG_DEBUG_BUGVERBOSE=n, we fail to add necessary padding bytes to bug_table entries, and as a result the last entry in a bug table will be ignored, potentially leading to an unexpected panic(). All prior entries in the table will be handled correctly. The arm64 ABI requires that struct fields of up to 8 bytes are naturally-aligned, with padding added within a struct such that struct are suitably aligned within arrays. When CONFIG_DEBUG_BUGVERPOSE=y, the layout of a bug_entry is: struct bug_entry { signed int bug_addr_disp; // 4 bytes signed int file_disp; // 4 bytes unsigned short line; // 2 bytes unsigned short flags; // 2 bytes } ... with 12 bytes total, requiring 4-byte alignment. When CONFIG_DEBUG_BUGVERBOSE=n, the layout of a bug_entry is: struct bug_entry { signed int bug_addr_disp; // 4 bytes unsigned short flags; // 2 bytes < implicit padding > // 2 bytes } ... with 8 bytes total, with 6 bytes of data and 2 bytes of trailing padding, requiring 4-byte alginment. When we create a bug_entry in assembly, we align the start of the entry to 4 bytes, which implicitly handles padding for any prior entries. However, we do not align the end of the entry, and so when CONFIG_DEBUG_BUGVERBOSE=n, the final entry lacks the trailing padding bytes. For the main kernel image this is not a problem as find_bug() doesn't depend on the trailing padding bytes when searching for entries: for (bug = __start___bug_table; bug < __stop___bug_table; ++bug) if (bugaddr == bug_addr(bug)) return bug; However for modules, module_bug_finalize() depends on the trailing bytes when calculating the number of entries: mod->num_bugs = sechdrs[i].sh_size / sizeof(struct bug_entry); ... and as the last bug_entry lacks the necessary padding bytes, this entry will not be counted, e.g. in the case of a single entry: sechdrs[i].sh_size == 6 sizeof(struct bug_entry) == 8; sechdrs[i].sh_size / sizeof(struct bug_entry) == 0; Consequently module_find_bug() will miss the last bug_entry when it does: for (i = 0; i < mod->num_bugs; ++i, ++bug) if (bugaddr == bug_addr(bug)) goto out; ... which can lead to a kenrel panic due to an unhandled bug. This can be demonstrated with the following module: static int __init buginit(void) { WARN(1, "hello\n"); return 0; } static void __exit bugexit(void) { } module_init(buginit); module_exit(bugexit); MODULE_LICENSE("GPL"); ... which will trigger a kernel panic when loaded: ------------[ cut here ]------------ hello Unexpected kernel BRK exception at EL1 Internal error: BRK handler: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: hello(O+) CPU: 0 PID: 50 Comm: insmod Tainted: G O 6.9.1 #8 Hardware name: linux,dummy-virt (DT) pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : buginit+0x18/0x1000 [hello] lr : buginit+0x18/0x1000 [hello] sp : ffff800080533ae0 x29: ffff800080533ae0 x28: 0000000000000000 x27: 0000000000000000 x26: ffffaba8c4e70510 x25: ffff800080533c30 x24: ffffaba8c4a28a58 x23: 0000000000000000 x22: 0000000000000000 x21: ffff3947c0eab3c0 x20: ffffaba8c4e3f000 x19: ffffaba846464000 x18: 0000000000000006 x17: 0000000000000000 x16: ffffaba8c2492834 x15: 0720072007200720 x14: 0720072007200720 x13: ffffaba8c49b27c8 x12: 0000000000000312 x11: 0000000000000106 x10: ffffaba8c4a0a7c8 x9 : ffffaba8c49b27c8 x8 : 00000000ffffefff x7 : ffffaba8c4a0a7c8 x6 : 80000000fffff000 x5 : 0000000000000107 x4 : 0000000000000000 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff3947c0eab3c0 Call trace: buginit+0x18/0x1000 [hello] do_one_initcall+0x80/0x1c8 do_init_module+0x60/0x218 load_module+0x1ba4/0x1d70 __do_sys_init_module+0x198/0x1d0 __arm64_sys_init_module+0x1c/0x28 invoke_syscall+0x48/0x114 el0_svc_common.constprop.0+0x40/0xe0 do_el0_svc+0x1c/0x28 el0_svc+0x34/0xd8 el0t_64_sync_handler+0x120/0x12c el0t_64_sync+0x190/0x194 Code: d0ffffe0 910003fd 91000000 9400000b (d4210000) ---[ end trace 0000000000000000 ]--- Kernel panic - not syncing: BRK handler: Fatal exception Fix this by always aligning the end of a bug_entry to 4 bytes, which is correct regardless of CONFIG_DEBUG_BUGVERBOSE. Fixes: 9fb7410f955f ("arm64/BUG: Use BRK instruction for generic BUG traps") Signed-off-by: Yuanbin Xie <xieyuanbin1(a)huawei.com> Signed-off-by: Jiangfeng Xiao <xiaojiangfeng(a)huawei.com> Reviewed-by: Mark Rutland <mark.rutland(a)arm.com> Link: https://lore.kernel.org/r/1716212077-43826-1-git-send-email-xiaojiangfeng@h… Signed-off-by: Will Deacon <will(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Li Zetao <lizetao1(a)huawei.com> --- arch/arm64/include/asm/asm-bug.h | 1 + 1 file changed, 1 insertion(+) diff --git a/arch/arm64/include/asm/asm-bug.h b/arch/arm64/include/asm/asm-bug.h index c762038ba4009..6e73809f6492a 100644 --- a/arch/arm64/include/asm/asm-bug.h +++ b/arch/arm64/include/asm/asm-bug.h @@ -28,6 +28,7 @@ 14470: .long 14471f - .; \ _BUGVERBOSE_LOCATION(__FILE__, __LINE__) \ .short flags; \ + .align 2; \ .popsection; \ 14471: #else -- 2.34.1

2 1

[PATCH OLK-5.10 0/1] powerpc/pseries: Enforce hcall result buffer validity and size
by Huang Xiaojia 15 Jul '24

15 Jul '24

*** BLURB HERE *** Nathan Lynch (1): powerpc/pseries: Enforce hcall result buffer validity and size arch/powerpc/include/asm/hvcall.h | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) -- 2.34.1

2 2

[PATCH openEuler-22.03-LTS-SP1] arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
by Li Zetao 15 Jul '24

15 Jul '24

From: Jiangfeng Xiao <xiaojiangfeng(a)huawei.com> stable inclusion from stable-v5.10.219 commit 461a760d578b2b2c2faac3040b6b7c77baf128f8 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAC3N3 CVE: CVE-2024-39488 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit ffbf4fb9b5c12ff878a10ea17997147ea4ebea6f ] When CONFIG_DEBUG_BUGVERBOSE=n, we fail to add necessary padding bytes to bug_table entries, and as a result the last entry in a bug table will be ignored, potentially leading to an unexpected panic(). All prior entries in the table will be handled correctly. The arm64 ABI requires that struct fields of up to 8 bytes are naturally-aligned, with padding added within a struct such that struct are suitably aligned within arrays. When CONFIG_DEBUG_BUGVERPOSE=y, the layout of a bug_entry is: struct bug_entry { signed int bug_addr_disp; // 4 bytes signed int file_disp; // 4 bytes unsigned short line; // 2 bytes unsigned short flags; // 2 bytes } ... with 12 bytes total, requiring 4-byte alignment. When CONFIG_DEBUG_BUGVERBOSE=n, the layout of a bug_entry is: struct bug_entry { signed int bug_addr_disp; // 4 bytes unsigned short flags; // 2 bytes < implicit padding > // 2 bytes } ... with 8 bytes total, with 6 bytes of data and 2 bytes of trailing padding, requiring 4-byte alginment. When we create a bug_entry in assembly, we align the start of the entry to 4 bytes, which implicitly handles padding for any prior entries. However, we do not align the end of the entry, and so when CONFIG_DEBUG_BUGVERBOSE=n, the final entry lacks the trailing padding bytes. For the main kernel image this is not a problem as find_bug() doesn't depend on the trailing padding bytes when searching for entries: for (bug = __start___bug_table; bug < __stop___bug_table; ++bug) if (bugaddr == bug_addr(bug)) return bug; However for modules, module_bug_finalize() depends on the trailing bytes when calculating the number of entries: mod->num_bugs = sechdrs[i].sh_size / sizeof(struct bug_entry); ... and as the last bug_entry lacks the necessary padding bytes, this entry will not be counted, e.g. in the case of a single entry: sechdrs[i].sh_size == 6 sizeof(struct bug_entry) == 8; sechdrs[i].sh_size / sizeof(struct bug_entry) == 0; Consequently module_find_bug() will miss the last bug_entry when it does: for (i = 0; i < mod->num_bugs; ++i, ++bug) if (bugaddr == bug_addr(bug)) goto out; ... which can lead to a kenrel panic due to an unhandled bug. This can be demonstrated with the following module: static int __init buginit(void) { WARN(1, "hello\n"); return 0; } static void __exit bugexit(void) { } module_init(buginit); module_exit(bugexit); MODULE_LICENSE("GPL"); ... which will trigger a kernel panic when loaded: ------------[ cut here ]------------ hello Unexpected kernel BRK exception at EL1 Internal error: BRK handler: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: hello(O+) CPU: 0 PID: 50 Comm: insmod Tainted: G O 6.9.1 #8 Hardware name: linux,dummy-virt (DT) pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : buginit+0x18/0x1000 [hello] lr : buginit+0x18/0x1000 [hello] sp : ffff800080533ae0 x29: ffff800080533ae0 x28: 0000000000000000 x27: 0000000000000000 x26: ffffaba8c4e70510 x25: ffff800080533c30 x24: ffffaba8c4a28a58 x23: 0000000000000000 x22: 0000000000000000 x21: ffff3947c0eab3c0 x20: ffffaba8c4e3f000 x19: ffffaba846464000 x18: 0000000000000006 x17: 0000000000000000 x16: ffffaba8c2492834 x15: 0720072007200720 x14: 0720072007200720 x13: ffffaba8c49b27c8 x12: 0000000000000312 x11: 0000000000000106 x10: ffffaba8c4a0a7c8 x9 : ffffaba8c49b27c8 x8 : 00000000ffffefff x7 : ffffaba8c4a0a7c8 x6 : 80000000fffff000 x5 : 0000000000000107 x4 : 0000000000000000 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff3947c0eab3c0 Call trace: buginit+0x18/0x1000 [hello] do_one_initcall+0x80/0x1c8 do_init_module+0x60/0x218 load_module+0x1ba4/0x1d70 __do_sys_init_module+0x198/0x1d0 __arm64_sys_init_module+0x1c/0x28 invoke_syscall+0x48/0x114 el0_svc_common.constprop.0+0x40/0xe0 do_el0_svc+0x1c/0x28 el0_svc+0x34/0xd8 el0t_64_sync_handler+0x120/0x12c el0t_64_sync+0x190/0x194 Code: d0ffffe0 910003fd 91000000 9400000b (d4210000) ---[ end trace 0000000000000000 ]--- Kernel panic - not syncing: BRK handler: Fatal exception Fix this by always aligning the end of a bug_entry to 4 bytes, which is correct regardless of CONFIG_DEBUG_BUGVERBOSE. Fixes: 9fb7410f955f ("arm64/BUG: Use BRK instruction for generic BUG traps") Signed-off-by: Yuanbin Xie <xieyuanbin1(a)huawei.com> Signed-off-by: Jiangfeng Xiao <xiaojiangfeng(a)huawei.com> Reviewed-by: Mark Rutland <mark.rutland(a)arm.com> Link: https://lore.kernel.org/r/1716212077-43826-1-git-send-email-xiaojiangfeng@h… Signed-off-by: Will Deacon <will(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Li Zetao <lizetao1(a)huawei.com> --- arch/arm64/include/asm/asm-bug.h | 1 + 1 file changed, 1 insertion(+) diff --git a/arch/arm64/include/asm/asm-bug.h b/arch/arm64/include/asm/asm-bug.h index 03f52f84a4f3f..bc2dcc8a00009 100644 --- a/arch/arm64/include/asm/asm-bug.h +++ b/arch/arm64/include/asm/asm-bug.h @@ -28,6 +28,7 @@ 14470: .long 14471f - 14470b; \ _BUGVERBOSE_LOCATION(__FILE__, __LINE__) \ .short flags; \ + .align 2; \ .popsection; \ 14471: #else -- 2.34.1

2 1

[PATCH openEuler-1.0-LTS 0/1] powerpc/pseries: Enforce hcall result buffer validity and size
by Huang Xiaojia 15 Jul '24

15 Jul '24

*** BLURB HERE *** Nathan Lynch (1): powerpc/pseries: Enforce hcall result buffer validity and size arch/powerpc/include/asm/hvcall.h | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) -- 2.34.1

2 2

[PATCH OLK-5.10] arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
by Li Zetao 15 Jul '24

15 Jul '24

From: Jiangfeng Xiao <xiaojiangfeng(a)huawei.com> stable inclusion from stable-v5.10.219 commit 461a760d578b2b2c2faac3040b6b7c77baf128f8 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAC3N3 CVE: CVE-2024-39488 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit ffbf4fb9b5c12ff878a10ea17997147ea4ebea6f ] When CONFIG_DEBUG_BUGVERBOSE=n, we fail to add necessary padding bytes to bug_table entries, and as a result the last entry in a bug table will be ignored, potentially leading to an unexpected panic(). All prior entries in the table will be handled correctly. The arm64 ABI requires that struct fields of up to 8 bytes are naturally-aligned, with padding added within a struct such that struct are suitably aligned within arrays. When CONFIG_DEBUG_BUGVERPOSE=y, the layout of a bug_entry is: struct bug_entry { signed int bug_addr_disp; // 4 bytes signed int file_disp; // 4 bytes unsigned short line; // 2 bytes unsigned short flags; // 2 bytes } ... with 12 bytes total, requiring 4-byte alignment. When CONFIG_DEBUG_BUGVERBOSE=n, the layout of a bug_entry is: struct bug_entry { signed int bug_addr_disp; // 4 bytes unsigned short flags; // 2 bytes < implicit padding > // 2 bytes } ... with 8 bytes total, with 6 bytes of data and 2 bytes of trailing padding, requiring 4-byte alginment. When we create a bug_entry in assembly, we align the start of the entry to 4 bytes, which implicitly handles padding for any prior entries. However, we do not align the end of the entry, and so when CONFIG_DEBUG_BUGVERBOSE=n, the final entry lacks the trailing padding bytes. For the main kernel image this is not a problem as find_bug() doesn't depend on the trailing padding bytes when searching for entries: for (bug = __start___bug_table; bug < __stop___bug_table; ++bug) if (bugaddr == bug_addr(bug)) return bug; However for modules, module_bug_finalize() depends on the trailing bytes when calculating the number of entries: mod->num_bugs = sechdrs[i].sh_size / sizeof(struct bug_entry); ... and as the last bug_entry lacks the necessary padding bytes, this entry will not be counted, e.g. in the case of a single entry: sechdrs[i].sh_size == 6 sizeof(struct bug_entry) == 8; sechdrs[i].sh_size / sizeof(struct bug_entry) == 0; Consequently module_find_bug() will miss the last bug_entry when it does: for (i = 0; i < mod->num_bugs; ++i, ++bug) if (bugaddr == bug_addr(bug)) goto out; ... which can lead to a kenrel panic due to an unhandled bug. This can be demonstrated with the following module: static int __init buginit(void) { WARN(1, "hello\n"); return 0; } static void __exit bugexit(void) { } module_init(buginit); module_exit(bugexit); MODULE_LICENSE("GPL"); ... which will trigger a kernel panic when loaded: ------------[ cut here ]------------ hello Unexpected kernel BRK exception at EL1 Internal error: BRK handler: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: hello(O+) CPU: 0 PID: 50 Comm: insmod Tainted: G O 6.9.1 #8 Hardware name: linux,dummy-virt (DT) pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : buginit+0x18/0x1000 [hello] lr : buginit+0x18/0x1000 [hello] sp : ffff800080533ae0 x29: ffff800080533ae0 x28: 0000000000000000 x27: 0000000000000000 x26: ffffaba8c4e70510 x25: ffff800080533c30 x24: ffffaba8c4a28a58 x23: 0000000000000000 x22: 0000000000000000 x21: ffff3947c0eab3c0 x20: ffffaba8c4e3f000 x19: ffffaba846464000 x18: 0000000000000006 x17: 0000000000000000 x16: ffffaba8c2492834 x15: 0720072007200720 x14: 0720072007200720 x13: ffffaba8c49b27c8 x12: 0000000000000312 x11: 0000000000000106 x10: ffffaba8c4a0a7c8 x9 : ffffaba8c49b27c8 x8 : 00000000ffffefff x7 : ffffaba8c4a0a7c8 x6 : 80000000fffff000 x5 : 0000000000000107 x4 : 0000000000000000 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff3947c0eab3c0 Call trace: buginit+0x18/0x1000 [hello] do_one_initcall+0x80/0x1c8 do_init_module+0x60/0x218 load_module+0x1ba4/0x1d70 __do_sys_init_module+0x198/0x1d0 __arm64_sys_init_module+0x1c/0x28 invoke_syscall+0x48/0x114 el0_svc_common.constprop.0+0x40/0xe0 do_el0_svc+0x1c/0x28 el0_svc+0x34/0xd8 el0t_64_sync_handler+0x120/0x12c el0t_64_sync+0x190/0x194 Code: d0ffffe0 910003fd 91000000 9400000b (d4210000) ---[ end trace 0000000000000000 ]--- Kernel panic - not syncing: BRK handler: Fatal exception Fix this by always aligning the end of a bug_entry to 4 bytes, which is correct regardless of CONFIG_DEBUG_BUGVERBOSE. Fixes: 9fb7410f955f ("arm64/BUG: Use BRK instruction for generic BUG traps") Signed-off-by: Yuanbin Xie <xieyuanbin1(a)huawei.com> Signed-off-by: Jiangfeng Xiao <xiaojiangfeng(a)huawei.com> Reviewed-by: Mark Rutland <mark.rutland(a)arm.com> Link: https://lore.kernel.org/r/1716212077-43826-1-git-send-email-xiaojiangfeng@h… Signed-off-by: Will Deacon <will(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- arch/arm64/include/asm/asm-bug.h | 1 + 1 file changed, 1 insertion(+) diff --git a/arch/arm64/include/asm/asm-bug.h b/arch/arm64/include/asm/asm-bug.h index 03f52f84a4f3f..bc2dcc8a00009 100644 --- a/arch/arm64/include/asm/asm-bug.h +++ b/arch/arm64/include/asm/asm-bug.h @@ -28,6 +28,7 @@ 14470: .long 14471f - 14470b; \ _BUGVERBOSE_LOCATION(__FILE__, __LINE__) \ .short flags; \ + .align 2; \ .popsection; \ 14471: #else -- 2.34.1

2 1

[openeuler:openEuler-1.0-LTS] BUILD SUCCESS a4c425277bd22c3124be10b92316ce4a7106b5b5
by kernel test robot 14 Jul '24

14 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS branch HEAD: a4c425277bd22c3124be10b92316ce4a7106b5b5 !9891 ipv6: sr: fix memleak in seg6_hmac_init_algo Warning ids grouped by kconfigs: recent_errors `-- x86_64-randconfig-006-20240713 `-- kernel-livepatch-core.c:warning:no-previous-prototype-for-function-klp_check_patch_kprobed elapsed time: 724m configs tested: 34 configs skipped: 128 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig gcc-14.1.0 arm64 allnoconfig gcc-14.1.0 arm64 randconfig-001-20240713 gcc-14.1.0 arm64 randconfig-002-20240713 gcc-14.1.0 arm64 randconfig-003-20240713 gcc-14.1.0 arm64 randconfig-004-20240713 gcc-14.1.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240713 clang-18 x86_64 buildonly-randconfig-002-20240713 clang-18 x86_64 buildonly-randconfig-003-20240713 gcc-13 x86_64 buildonly-randconfig-004-20240713 clang-18 x86_64 buildonly-randconfig-005-20240713 gcc-8 x86_64 buildonly-randconfig-006-20240713 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240713 clang-18 x86_64 randconfig-002-20240713 clang-18 x86_64 randconfig-003-20240713 clang-18 x86_64 randconfig-004-20240713 gcc-13 x86_64 randconfig-005-20240713 clang-18 x86_64 randconfig-006-20240713 clang-18 x86_64 randconfig-011-20240713 clang-18 x86_64 randconfig-012-20240713 clang-18 x86_64 randconfig-013-20240713 gcc-13 x86_64 randconfig-014-20240713 clang-18 x86_64 randconfig-015-20240713 gcc-13 x86_64 randconfig-016-20240713 gcc-13 x86_64 randconfig-071-20240713 gcc-8 x86_64 randconfig-072-20240713 gcc-8 x86_64 randconfig-073-20240713 clang-18 x86_64 randconfig-074-20240713 clang-18 x86_64 randconfig-075-20240713 gcc-13 x86_64 randconfig-076-20240713 clang-18 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6] BUILD REGRESSION 9cf1dcdc633d81337449d1de07395f43c6156124
by kernel test robot 14 Jul '24

14 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-6.6 branch HEAD: 9cf1dcdc633d81337449d1de07395f43c6156124 !9888 ipv6: sr: fix memleak in seg6_hmac_init_algo Error/Warning ids grouped by kconfigs: recent_errors |-- arm64-allmodconfig | `-- clang:warning:no-such-include-directory:drivers-infiniband-hw-hiroce3-include-mag |-- loongarch-allmodconfig | `-- arch-loongarch-kvm-..-..-..-virt-kvm-kvm_main.c:warning:kvmalloc_array-sizes-specified-with-sizeof-in-the-earlier-argument-and-not-in-the-later-argument |-- loongarch-randconfig-001-20240713 | |-- arch-loongarch-kvm-..-..-..-virt-kvm-kvm_main.c:warning:kvmalloc_array-sizes-specified-with-sizeof-in-the-earlier-argument-and-not-in-the-later-argument | `-- drivers-char-virtio_console.c:warning:u-directive-output-may-be-truncated-writing-between-and-bytes-into-a-region-of-size-between-and |-- loongarch-randconfig-002-20240713 | `-- include-linux-mmzone.h:error:error-Allocator-MAX_ORDER-exceeds-SECTION_SIZE `-- x86_64-allyesconfig `-- drivers-gpu-drm-amd-amdgpu-..-amdkfd-kfd_topology.c:warning:stack-frame-size-()-exceeds-limit-()-in-kfd_topology_add_device elapsed time: 734m configs tested: 37 configs skipped: 124 tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-14.1.0 arm64 randconfig-001-20240713 gcc-14.1.0 arm64 randconfig-002-20240713 gcc-14.1.0 arm64 randconfig-003-20240713 clang-19 arm64 randconfig-004-20240713 gcc-14.1.0 loongarch allmodconfig gcc-14.1.0 loongarch allnoconfig gcc-14.1.0 loongarch randconfig-001-20240713 gcc-14.1.0 loongarch randconfig-002-20240713 gcc-14.1.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240713 clang-18 x86_64 buildonly-randconfig-002-20240713 clang-18 x86_64 buildonly-randconfig-003-20240713 gcc-13 x86_64 buildonly-randconfig-004-20240713 clang-18 x86_64 buildonly-randconfig-005-20240713 gcc-8 x86_64 buildonly-randconfig-006-20240713 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240713 clang-18 x86_64 randconfig-002-20240713 clang-18 x86_64 randconfig-003-20240713 clang-18 x86_64 randconfig-004-20240713 gcc-13 x86_64 randconfig-005-20240713 clang-18 x86_64 randconfig-006-20240713 clang-18 x86_64 randconfig-011-20240713 clang-18 x86_64 randconfig-012-20240713 clang-18 x86_64 randconfig-013-20240713 gcc-13 x86_64 randconfig-014-20240713 clang-18 x86_64 randconfig-015-20240713 gcc-13 x86_64 randconfig-016-20240713 gcc-13 x86_64 randconfig-071-20240713 gcc-8 x86_64 randconfig-072-20240713 gcc-8 x86_64 randconfig-073-20240713 clang-18 x86_64 randconfig-074-20240713 clang-18 x86_64 randconfig-075-20240713 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6] sock_map: avoid race between sock_map_close and sk_psock_put
by Liu Jian 13 Jul '24

13 Jul '24

From: Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> stable inclusion from stable-v6.6.35 commit e946428439a0d2079959f5603256ac51b6047017 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACQJF CVE: CVE-2024-39500 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… --------------------------- commit 4b4647add7d3c8530493f7247d11e257ee425bf0 upstream. sk_psock_get will return NULL if the refcount of psock has gone to 0, which will happen when the last call of sk_psock_put is done. However, sk_psock_drop may not have finished yet, so the close callback will still point to sock_map_close despite psock being NULL. This can be reproduced with a thread deleting an element from the sock map, while the second one creates a socket, adds it to the map and closes it. That will trigger the WARN_ON_ONCE: ------------[ cut here ]------------ WARNING: CPU: 1 PID: 7220 at net/core/sock_map.c:1701 sock_map_close+0x2a2/0x2d0 net/core/sock_map.c:1701 Modules linked in: CPU: 1 PID: 7220 Comm: syz-executor380 Not tainted 6.9.0-syzkaller-07726-g3c999d1ae3c7 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:sock_map_close+0x2a2/0x2d0 net/core/sock_map.c:1701 Code: df e8 92 29 88 f8 48 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 79 29 88 f8 4c 8b 23 eb 89 e8 4f 15 23 f8 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 13 26 3d 02 RSP: 0018:ffffc9000441fda8 EFLAGS: 00010293 RAX: ffffffff89731ae1 RBX: ffffffff94b87540 RCX: ffff888029470000 RDX: 0000000000000000 RSI: ffffffff8bcab5c0 RDI: ffffffff8c1faba0 RBP: 0000000000000000 R08: ffffffff92f9b61f R09: 1ffffffff25f36c3 R10: dffffc0000000000 R11: fffffbfff25f36c4 R12: ffffffff89731840 R13: ffff88804b587000 R14: ffff88804b587000 R15: ffffffff89731870 FS: 000055555e080380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000000207d4000 CR4: 0000000000350ef0 Call Trace: <TASK> unix_release+0x87/0xc0 net/unix/af_unix.c:1048 __sock_release net/socket.c:659 [inline] sock_close+0xbe/0x240 net/socket.c:1421 __fput+0x42b/0x8a0 fs/file_table.c:422 __do_sys_close fs/open.c:1556 [inline] __se_sys_close fs/open.c:1541 [inline] __x64_sys_close+0x7f/0x110 fs/open.c:1541 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb37d618070 Code: 00 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d4 e8 10 2c 00 00 80 3d 31 f0 07 00 00 74 17 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c RSP: 002b:00007ffcd4a525d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fb37d618070 RDX: 0000000000000010 RSI: 00000000200001c0 RDI: 0000000000000004 RBP: 0000000000000000 R08: 0000000100000000 R09: 0000000100000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 </TASK> Use sk_psock, which will only check that the pointer is not been set to NULL yet, which should only happen after the callbacks are restored. If, then, a reference can still be gotten, we may call sk_psock_stop and cancel psock->work. As suggested by Paolo Abeni, reorder the condition so the control flow is less convoluted. After that change, the reproducer does not trigger the WARN_ON_ONCE anymore. Suggested-by: Paolo Abeni <pabeni(a)redhat.com> Reported-by: syzbot+07a2e4a1a57118ef7355(a)syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=07a2e4a1a57118ef7355 Fixes: aadb2bb83ff7 ("sock_map: Fix a potential use-after-free in sock_map_close()") Fixes: 5b4a79ba65a1 ("bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself") Cc: stable(a)vger.kernel.org Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> Acked-by: Jakub Sitnicki <jakub(a)cloudflare.com> Link: https://lore.kernel.org/r/20240524144702.1178377-1-cascardo@igalia.com Signed-off-by: Paolo Abeni <pabeni(a)redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Liu Jian <liujian56(a)huawei.com> --- net/core/sock_map.c | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) diff --git a/net/core/sock_map.c b/net/core/sock_map.c index 27d733c0f65e..a37143d181f9 100644 --- a/net/core/sock_map.c +++ b/net/core/sock_map.c @@ -1633,19 +1633,23 @@ void sock_map_close(struct sock *sk, long timeout) lock_sock(sk); rcu_read_lock(); - psock = sk_psock_get(sk); - if (unlikely(!psock)) { - rcu_read_unlock(); - release_sock(sk); - saved_close = READ_ONCE(sk->sk_prot)->close; - } else { + psock = sk_psock(sk); + if (likely(psock)) { saved_close = psock->saved_close; sock_map_remove_links(sk, psock); + psock = sk_psock_get(sk); + if (unlikely(!psock)) + goto no_psock; rcu_read_unlock(); sk_psock_stop(psock); release_sock(sk); cancel_delayed_work_sync(&psock->work); sk_psock_put(sk, psock); + } else { + saved_close = READ_ONCE(sk->sk_prot)->close; +no_psock: + rcu_read_unlock(); + release_sock(sk); } /* Make sure we do not recurse. This is a bug. -- 2.34.1

2 1

[PATCH OLK-5.10] sock_map: avoid race between sock_map_close and sk_psock_put
by Liu Jian 13 Jul '24

13 Jul '24

From: Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> mainline inclusion from mainline-v6.10-rc2 commit 4b4647add7d3c8530493f7247d11e257ee425bf0 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACQJF CVE: CVE-2024-39500 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… --------------------------- sk_psock_get will return NULL if the refcount of psock has gone to 0, which will happen when the last call of sk_psock_put is done. However, sk_psock_drop may not have finished yet, so the close callback will still point to sock_map_close despite psock being NULL. This can be reproduced with a thread deleting an element from the sock map, while the second one creates a socket, adds it to the map and closes it. That will trigger the WARN_ON_ONCE: ------------[ cut here ]------------ WARNING: CPU: 1 PID: 7220 at net/core/sock_map.c:1701 sock_map_close+0x2a2/0x2d0 net/core/sock_map.c:1701 Modules linked in: CPU: 1 PID: 7220 Comm: syz-executor380 Not tainted 6.9.0-syzkaller-07726-g3c999d1ae3c7 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:sock_map_close+0x2a2/0x2d0 net/core/sock_map.c:1701 Code: df e8 92 29 88 f8 48 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 79 29 88 f8 4c 8b 23 eb 89 e8 4f 15 23 f8 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 13 26 3d 02 RSP: 0018:ffffc9000441fda8 EFLAGS: 00010293 RAX: ffffffff89731ae1 RBX: ffffffff94b87540 RCX: ffff888029470000 RDX: 0000000000000000 RSI: ffffffff8bcab5c0 RDI: ffffffff8c1faba0 RBP: 0000000000000000 R08: ffffffff92f9b61f R09: 1ffffffff25f36c3 R10: dffffc0000000000 R11: fffffbfff25f36c4 R12: ffffffff89731840 R13: ffff88804b587000 R14: ffff88804b587000 R15: ffffffff89731870 FS: 000055555e080380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000000207d4000 CR4: 0000000000350ef0 Call Trace: <TASK> unix_release+0x87/0xc0 net/unix/af_unix.c:1048 __sock_release net/socket.c:659 [inline] sock_close+0xbe/0x240 net/socket.c:1421 __fput+0x42b/0x8a0 fs/file_table.c:422 __do_sys_close fs/open.c:1556 [inline] __se_sys_close fs/open.c:1541 [inline] __x64_sys_close+0x7f/0x110 fs/open.c:1541 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb37d618070 Code: 00 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d4 e8 10 2c 00 00 80 3d 31 f0 07 00 00 74 17 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c RSP: 002b:00007ffcd4a525d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fb37d618070 RDX: 0000000000000010 RSI: 00000000200001c0 RDI: 0000000000000004 RBP: 0000000000000000 R08: 0000000100000000 R09: 0000000100000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 </TASK> Use sk_psock, which will only check that the pointer is not been set to NULL yet, which should only happen after the callbacks are restored. If, then, a reference can still be gotten, we may call sk_psock_stop and cancel psock->work. As suggested by Paolo Abeni, reorder the condition so the control flow is less convoluted. After that change, the reproducer does not trigger the WARN_ON_ONCE anymore. Suggested-by: Paolo Abeni <pabeni(a)redhat.com> Reported-by: syzbot+07a2e4a1a57118ef7355(a)syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=07a2e4a1a57118ef7355 Fixes: aadb2bb83ff7 ("sock_map: Fix a potential use-after-free in sock_map_close()") Fixes: 5b4a79ba65a1 ("bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself") Cc: stable(a)vger.kernel.org Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> Acked-by: Jakub Sitnicki <jakub(a)cloudflare.com> Link: https://lore.kernel.org/r/20240524144702.1178377-1-cascardo@igalia.com Signed-off-by: Paolo Abeni <pabeni(a)redhat.com> Signed-off-by: Liu Jian <liujian56(a)huawei.com> --- net/core/sock_map.c | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) diff --git a/net/core/sock_map.c b/net/core/sock_map.c index c7900283eebb..a4d1d41883b0 100644 --- a/net/core/sock_map.c +++ b/net/core/sock_map.c @@ -1666,19 +1666,23 @@ void sock_map_close(struct sock *sk, long timeout) lock_sock(sk); rcu_read_lock(); - psock = sk_psock_get(sk); - if (unlikely(!psock)) { - rcu_read_unlock(); - release_sock(sk); - saved_close = READ_ONCE(sk->sk_prot)->close; - } else { + psock = sk_psock(sk); + if (likely(psock)) { saved_close = psock->saved_close; sock_map_remove_links(sk, psock); + psock = sk_psock_get(sk); + if (unlikely(!psock)) + goto no_psock; rcu_read_unlock(); sk_psock_stop(psock); release_sock(sk); cancel_work_sync(&psock->work); sk_psock_put(sk, psock); + } else { + saved_close = READ_ONCE(sk->sk_prot)->close; +no_psock: + rcu_read_unlock(); + release_sock(sk); } /* Make sure we do not recurse. This is a bug. * Leak the socket instead of crashing on a stack overflow. -- 2.34.1

2 1

[PATCH openEuler-22.03-LTS-SP1] sock_map: avoid race between sock_map_close and sk_psock_put
by Liu Jian 13 Jul '24

13 Jul '24

From: Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> mainline inclusion from mainline-v6.10-rc2 commit 4b4647add7d3c8530493f7247d11e257ee425bf0 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACQJF CVE: CVE-2024-39500 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… --------------------------- sk_psock_get will return NULL if the refcount of psock has gone to 0, which will happen when the last call of sk_psock_put is done. However, sk_psock_drop may not have finished yet, so the close callback will still point to sock_map_close despite psock being NULL. This can be reproduced with a thread deleting an element from the sock map, while the second one creates a socket, adds it to the map and closes it. That will trigger the WARN_ON_ONCE: ------------[ cut here ]------------ WARNING: CPU: 1 PID: 7220 at net/core/sock_map.c:1701 sock_map_close+0x2a2/0x2d0 net/core/sock_map.c:1701 Modules linked in: CPU: 1 PID: 7220 Comm: syz-executor380 Not tainted 6.9.0-syzkaller-07726-g3c999d1ae3c7 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:sock_map_close+0x2a2/0x2d0 net/core/sock_map.c:1701 Code: df e8 92 29 88 f8 48 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 79 29 88 f8 4c 8b 23 eb 89 e8 4f 15 23 f8 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 13 26 3d 02 RSP: 0018:ffffc9000441fda8 EFLAGS: 00010293 RAX: ffffffff89731ae1 RBX: ffffffff94b87540 RCX: ffff888029470000 RDX: 0000000000000000 RSI: ffffffff8bcab5c0 RDI: ffffffff8c1faba0 RBP: 0000000000000000 R08: ffffffff92f9b61f R09: 1ffffffff25f36c3 R10: dffffc0000000000 R11: fffffbfff25f36c4 R12: ffffffff89731840 R13: ffff88804b587000 R14: ffff88804b587000 R15: ffffffff89731870 FS: 000055555e080380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000000207d4000 CR4: 0000000000350ef0 Call Trace: <TASK> unix_release+0x87/0xc0 net/unix/af_unix.c:1048 __sock_release net/socket.c:659 [inline] sock_close+0xbe/0x240 net/socket.c:1421 __fput+0x42b/0x8a0 fs/file_table.c:422 __do_sys_close fs/open.c:1556 [inline] __se_sys_close fs/open.c:1541 [inline] __x64_sys_close+0x7f/0x110 fs/open.c:1541 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb37d618070 Code: 00 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d4 e8 10 2c 00 00 80 3d 31 f0 07 00 00 74 17 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c RSP: 002b:00007ffcd4a525d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fb37d618070 RDX: 0000000000000010 RSI: 00000000200001c0 RDI: 0000000000000004 RBP: 0000000000000000 R08: 0000000100000000 R09: 0000000100000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 </TASK> Use sk_psock, which will only check that the pointer is not been set to NULL yet, which should only happen after the callbacks are restored. If, then, a reference can still be gotten, we may call sk_psock_stop and cancel psock->work. As suggested by Paolo Abeni, reorder the condition so the control flow is less convoluted. After that change, the reproducer does not trigger the WARN_ON_ONCE anymore. Suggested-by: Paolo Abeni <pabeni(a)redhat.com> Reported-by: syzbot+07a2e4a1a57118ef7355(a)syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=07a2e4a1a57118ef7355 Fixes: aadb2bb83ff7 ("sock_map: Fix a potential use-after-free in sock_map_close()") Fixes: 5b4a79ba65a1 ("bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself") Cc: stable(a)vger.kernel.org Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> Acked-by: Jakub Sitnicki <jakub(a)cloudflare.com> Link: https://lore.kernel.org/r/20240524144702.1178377-1-cascardo@igalia.com Signed-off-by: Paolo Abeni <pabeni(a)redhat.com> Conflicts: net/core/sock_map.c [Did not backport 8bbabb3fddcd, 29173d07f798.] Signed-off-by: Liu Jian <liujian56(a)huawei.com> --- net/core/sock_map.c | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) diff --git a/net/core/sock_map.c b/net/core/sock_map.c index 83e3ef655684..96b8b8d1dac9 100644 --- a/net/core/sock_map.c +++ b/net/core/sock_map.c @@ -1604,18 +1604,22 @@ void sock_map_close(struct sock *sk, long timeout) lock_sock(sk); rcu_read_lock(); - psock = sk_psock_get(sk); - if (unlikely(!psock)) { - rcu_read_unlock(); - release_sock(sk); - saved_close = READ_ONCE(sk->sk_prot)->close; - } else { + psock = sk_psock(sk); + if (likely(psock)) { saved_close = psock->saved_close; sock_map_remove_links(sk, psock); + psock = sk_psock_get(sk); + if (unlikely(!psock)) + goto no_psock; rcu_read_unlock(); sk_psock_stop(psock, true); sk_psock_put(sk, psock); release_sock(sk); + } else { + saved_close = READ_ONCE(sk->sk_prot)->close; +no_psock: + rcu_read_unlock(); + release_sock(sk); } /* Make sure we do not recurse. This is a bug. * Leak the socket instead of crashing on a stack overflow. -- 2.34.1

2 1

[PATCH openEuler-22.03-LTS-SP1] mptcp: ensure snd_una is properly initialized on connect
by Zhengchao Shao 13 Jul '24

13 Jul '24

From: Paolo Abeni <pabeni(a)redhat.com> mainline inclusion from mainline-v6.10-rc4 commit 8031b58c3a9b1db3ef68b3bd749fbee2e1e1aaa3 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACQHR CVE: CVE-2024-40931 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- This is strictly related to commit fb7a0d334894 ("mptcp: ensure snd_nxt is properly initialized on connect"). It turns out that syzkaller can trigger the retransmit after fallback and before processing any other incoming packet - so that snd_una is still left uninitialized. Address the issue explicitly initializing snd_una together with snd_nxt and write_seq. Suggested-by: Mat Martineau <martineau(a)kernel.org> Fixes: 8fd738049ac3 ("mptcp: fallback in case of simultaneous connect") Cc: stable(a)vger.kernel.org Reported-by: Christoph Paasch <cpaasch(a)apple.com> Closes: https://github.com/multipath-tcp/mptcp_net-next/issues/485 Signed-off-by: Paolo Abeni <pabeni(a)redhat.com> Reviewed-by: Mat Martineau <martineau(a)kernel.org> Signed-off-by: Matthieu Baerts (NGI0) <matttbe(a)kernel.org> Link: https://lore.kernel.org/r/20240607-upstream-net-20240607-misc-fixes-v1-1-1a… Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Conflicts: net/mptcp/protocol.c [The conflict occurs because the commit 54f1944ed6d2("mptcp: factor out mptcp_connect()") and 7439d687b79c("mptcp: avoid a few atomic ops in the rx path") are not merged] Signed-off-by: Zhengchao Shao <shaozhengchao(a)huawei.com> --- net/mptcp/protocol.c | 1 + 1 file changed, 1 insertion(+) diff --git a/net/mptcp/protocol.c b/net/mptcp/protocol.c index 22ed394295a7..e0fc72ab97c3 100644 --- a/net/mptcp/protocol.c +++ b/net/mptcp/protocol.c @@ -2649,6 +2649,7 @@ static int mptcp_stream_connect(struct socket *sock, struct sockaddr *uaddr, mptcp_subflow_early_fallback(msk, subflow); WRITE_ONCE(msk->write_seq, subflow->idsn); + atomic64_set(&msk->snd_una, subflow->idsn); do_connect: err = ssock->ops->connect(ssock, uaddr, addr_len, flags); -- 2.34.1

2 1

[PATCH OLK-5.10] mptcp: ensure snd_una is properly initialized on connect
by Zhengchao Shao 13 Jul '24

13 Jul '24

From: Paolo Abeni <pabeni(a)redhat.com> mainline inclusion from mainline-v6.10-rc4 commit 8031b58c3a9b1db3ef68b3bd749fbee2e1e1aaa3 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACQHR CVE: CVE-2024-40931 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- This is strictly related to commit fb7a0d334894 ("mptcp: ensure snd_nxt is properly initialized on connect"). It turns out that syzkaller can trigger the retransmit after fallback and before processing any other incoming packet - so that snd_una is still left uninitialized. Address the issue explicitly initializing snd_una together with snd_nxt and write_seq. Suggested-by: Mat Martineau <martineau(a)kernel.org> Fixes: 8fd738049ac3 ("mptcp: fallback in case of simultaneous connect") Cc: stable(a)vger.kernel.org Reported-by: Christoph Paasch <cpaasch(a)apple.com> Closes: https://github.com/multipath-tcp/mptcp_net-next/issues/485 Signed-off-by: Paolo Abeni <pabeni(a)redhat.com> Reviewed-by: Mat Martineau <martineau(a)kernel.org> Signed-off-by: Matthieu Baerts (NGI0) <matttbe(a)kernel.org> Link: https://lore.kernel.org/r/20240607-upstream-net-20240607-misc-fixes-v1-1-1a… Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Conflicts: net/mptcp/protocol.c [The conflict occurs because the commit 54f1944ed6d2("mptcp: factor out mptcp_connect()") and 7439d687b79c("mptcp: avoid a few atomic ops in the rx path") are not merged] Signed-off-by: Zhengchao Shao <shaozhengchao(a)huawei.com> --- net/mptcp/protocol.c | 1 + 1 file changed, 1 insertion(+) diff --git a/net/mptcp/protocol.c b/net/mptcp/protocol.c index 613442057a04..c876f93f5b17 100644 --- a/net/mptcp/protocol.c +++ b/net/mptcp/protocol.c @@ -2649,6 +2649,7 @@ static int mptcp_stream_connect(struct socket *sock, struct sockaddr *uaddr, mptcp_subflow_early_fallback(msk, subflow); WRITE_ONCE(msk->write_seq, subflow->idsn); + atomic64_set(&msk->snd_una, subflow->idsn); do_connect: err = ssock->ops->connect(ssock, uaddr, addr_len, flags); -- 2.34.1

2 1

[PATCH OLK-6.6] mptcp: ensure snd_una is properly initialized on connect
by Zhengchao Shao 13 Jul '24

13 Jul '24

From: Paolo Abeni <pabeni(a)redhat.com> stable inclusion from stable-v6.6.35 commit f1f0a46f8bb8890b90ab7194f0a0c8fe2a3fb57f category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACQHR CVE: CVE-2024-40931 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… --------------------------- commit 8031b58c3a9b1db3ef68b3bd749fbee2e1e1aaa3 upstream. This is strictly related to commit fb7a0d334894 ("mptcp: ensure snd_nxt is properly initialized on connect"). It turns out that syzkaller can trigger the retransmit after fallback and before processing any other incoming packet - so that snd_una is still left uninitialized. Address the issue explicitly initializing snd_una together with snd_nxt and write_seq. Suggested-by: Mat Martineau <martineau(a)kernel.org> Fixes: 8fd738049ac3 ("mptcp: fallback in case of simultaneous connect") Cc: stable(a)vger.kernel.org Reported-by: Christoph Paasch <cpaasch(a)apple.com> Closes: https://github.com/multipath-tcp/mptcp_net-next/issues/485 Signed-off-by: Paolo Abeni <pabeni(a)redhat.com> Reviewed-by: Mat Martineau <martineau(a)kernel.org> Signed-off-by: Matthieu Baerts (NGI0) <matttbe(a)kernel.org> Link: https://lore.kernel.org/r/20240607-upstream-net-20240607-misc-fixes-v1-1-1a… Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Zhengchao Shao <shaozhengchao(a)huawei.com> --- net/mptcp/protocol.c | 1 + 1 file changed, 1 insertion(+) diff --git a/net/mptcp/protocol.c b/net/mptcp/protocol.c index cfe316ee8789..4f42bd439228 100644 --- a/net/mptcp/protocol.c +++ b/net/mptcp/protocol.c @@ -3708,6 +3708,7 @@ static int mptcp_connect(struct sock *sk, struct sockaddr *uaddr, int addr_len) WRITE_ONCE(msk->write_seq, subflow->idsn); WRITE_ONCE(msk->snd_nxt, subflow->idsn); + WRITE_ONCE(msk->snd_una, subflow->idsn); if (likely(!__mptcp_check_fallback(msk))) MPTCP_INC_STATS(sock_net(sk), MPTCP_MIB_MPCAPABLEACTIVE); -- 2.34.1

2 1

[PATCH openEuler-22.03-LTS-SP1] ipv6: fix possible race in __fib6_drop_pcpu_from()
by Liu Jian 13 Jul '24

13 Jul '24

From: Eric Dumazet <edumazet(a)google.com> stable inclusion from stable-v5.10.221 commit c693698787660c97950bc1f93a8dd19d8307153d category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACQJD CVE: CVE-2024-40905 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… --------------------------- [ Upstream commit b01e1c030770ff3b4fe37fc7cc6bca03f594133f ] syzbot found a race in __fib6_drop_pcpu_from() [1] If compiler reads more than once (*ppcpu_rt), second read could read NULL, if another cpu clears the value in rt6_get_pcpu_route(). Add a READ_ONCE() to prevent this race. Also add rcu_read_lock()/rcu_read_unlock() because we rely on RCU protection while dereferencing pcpu_rt. [1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000012: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000090-0x0000000000000097] CPU: 0 PID: 7543 Comm: kworker/u8:17 Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Workqueue: netns cleanup_net RIP: 0010:__fib6_drop_pcpu_from.part.0+0x10a/0x370 net/ipv6/ip6_fib.c:984 Code: f8 48 c1 e8 03 80 3c 28 00 0f 85 16 02 00 00 4d 8b 3f 4d 85 ff 74 31 e8 74 a7 fa f7 49 8d bf 90 00 00 00 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 1e 02 00 00 49 8b 87 90 00 00 00 48 8b 0c 24 48 RSP: 0018:ffffc900040df070 EFLAGS: 00010206 RAX: 0000000000000012 RBX: 0000000000000001 RCX: ffffffff89932e16 RDX: ffff888049dd1e00 RSI: ffffffff89932d7c RDI: 0000000000000091 RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000007 R10: 0000000000000001 R11: 0000000000000006 R12: ffff88807fa080b8 R13: fffffbfff1a9a07d R14: ffffed100ff41022 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b32c26000 CR3: 000000005d56e000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> __fib6_drop_pcpu_from net/ipv6/ip6_fib.c:966 [inline] fib6_drop_pcpu_from net/ipv6/ip6_fib.c:1027 [inline] fib6_purge_rt+0x7f2/0x9f0 net/ipv6/ip6_fib.c:1038 fib6_del_route net/ipv6/ip6_fib.c:1998 [inline] fib6_del+0xa70/0x17b0 net/ipv6/ip6_fib.c:2043 fib6_clean_node+0x426/0x5b0 net/ipv6/ip6_fib.c:2205 fib6_walk_continue+0x44f/0x8d0 net/ipv6/ip6_fib.c:2127 fib6_walk+0x182/0x370 net/ipv6/ip6_fib.c:2175 fib6_clean_tree+0xd7/0x120 net/ipv6/ip6_fib.c:2255 __fib6_clean_all+0x100/0x2d0 net/ipv6/ip6_fib.c:2271 rt6_sync_down_dev net/ipv6/route.c:4906 [inline] rt6_disable_ip+0x7ed/0xa00 net/ipv6/route.c:4911 addrconf_ifdown.isra.0+0x117/0x1b40 net/ipv6/addrconf.c:3855 addrconf_notify+0x223/0x19e0 net/ipv6/addrconf.c:3778 notifier_call_chain+0xb9/0x410 kernel/notifier.c:93 call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:1992 call_netdevice_notifiers_extack net/core/dev.c:2030 [inline] call_netdevice_notifiers net/core/dev.c:2044 [inline] dev_close_many+0x333/0x6a0 net/core/dev.c:1585 unregister_netdevice_many_notify+0x46d/0x19f0 net/core/dev.c:11193 unregister_netdevice_many net/core/dev.c:11276 [inline] default_device_exit_batch+0x85b/0xae0 net/core/dev.c:11759 ops_exit_list+0x128/0x180 net/core/net_namespace.c:178 cleanup_net+0x5b7/0xbf0 net/core/net_namespace.c:640 process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231 process_scheduled_works kernel/workqueue.c:3312 [inline] worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Fixes: d52d3997f843 ("ipv6: Create percpu rt6_info") Signed-off-by: Eric Dumazet <edumazet(a)google.com> Cc: Martin KaFai Lau <kafai(a)fb.com> Link: https://lore.kernel.org/r/20240604193549.981839-1-edumazet@google.com Signed-off-by: Paolo Abeni <pabeni(a)redhat.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Liu Jian <liujian56(a)huawei.com> --- net/ipv6/ip6_fib.c | 6 +++++- net/ipv6/route.c | 1 + 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/net/ipv6/ip6_fib.c b/net/ipv6/ip6_fib.c index cac2de1d1d5c..ba4087fb0368 100644 --- a/net/ipv6/ip6_fib.c +++ b/net/ipv6/ip6_fib.c @@ -960,6 +960,7 @@ static void __fib6_drop_pcpu_from(struct fib6_nh *fib6_nh, if (!fib6_nh->rt6i_pcpu) return; + rcu_read_lock(); /* release the reference to this fib entry from * all of its cached pcpu routes */ @@ -968,7 +969,9 @@ static void __fib6_drop_pcpu_from(struct fib6_nh *fib6_nh, struct rt6_info *pcpu_rt; ppcpu_rt = per_cpu_ptr(fib6_nh->rt6i_pcpu, cpu); - pcpu_rt = *ppcpu_rt; + + /* Paired with xchg() in rt6_get_pcpu_route() */ + pcpu_rt = READ_ONCE(*ppcpu_rt); /* only dropping the 'from' reference if the cached route * is using 'match'. The cached pcpu_rt->from only changes @@ -982,6 +985,7 @@ static void __fib6_drop_pcpu_from(struct fib6_nh *fib6_nh, fib6_info_release(from); } } + rcu_read_unlock(); } struct fib6_nh_pcpu_arg { diff --git a/net/ipv6/route.c b/net/ipv6/route.c index 59bd6f57357f..ab270e2a3708 100644 --- a/net/ipv6/route.c +++ b/net/ipv6/route.c @@ -1391,6 +1391,7 @@ static struct rt6_info *rt6_get_pcpu_route(const struct fib6_result *res) struct rt6_info *prev, **p; p = this_cpu_ptr(res->nh->rt6i_pcpu); + /* Paired with READ_ONCE() in __fib6_drop_pcpu_from() */ prev = xchg(p, NULL); if (prev) { dst_dev_put(&prev->dst); -- 2.34.1

2 1

[PATCH OLK-5.10] ipv6: fix possible race in __fib6_drop_pcpu_from()
by Liu Jian 13 Jul '24

13 Jul '24

From: Eric Dumazet <edumazet(a)google.com> stable inclusion from stable-v5.10.221 commit c693698787660c97950bc1f93a8dd19d8307153d category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACQJD CVE: CVE-2024-40905 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… --------------------------- [ Upstream commit b01e1c030770ff3b4fe37fc7cc6bca03f594133f ] syzbot found a race in __fib6_drop_pcpu_from() [1] If compiler reads more than once (*ppcpu_rt), second read could read NULL, if another cpu clears the value in rt6_get_pcpu_route(). Add a READ_ONCE() to prevent this race. Also add rcu_read_lock()/rcu_read_unlock() because we rely on RCU protection while dereferencing pcpu_rt. [1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000012: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000090-0x0000000000000097] CPU: 0 PID: 7543 Comm: kworker/u8:17 Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Workqueue: netns cleanup_net RIP: 0010:__fib6_drop_pcpu_from.part.0+0x10a/0x370 net/ipv6/ip6_fib.c:984 Code: f8 48 c1 e8 03 80 3c 28 00 0f 85 16 02 00 00 4d 8b 3f 4d 85 ff 74 31 e8 74 a7 fa f7 49 8d bf 90 00 00 00 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 1e 02 00 00 49 8b 87 90 00 00 00 48 8b 0c 24 48 RSP: 0018:ffffc900040df070 EFLAGS: 00010206 RAX: 0000000000000012 RBX: 0000000000000001 RCX: ffffffff89932e16 RDX: ffff888049dd1e00 RSI: ffffffff89932d7c RDI: 0000000000000091 RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000007 R10: 0000000000000001 R11: 0000000000000006 R12: ffff88807fa080b8 R13: fffffbfff1a9a07d R14: ffffed100ff41022 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b32c26000 CR3: 000000005d56e000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> __fib6_drop_pcpu_from net/ipv6/ip6_fib.c:966 [inline] fib6_drop_pcpu_from net/ipv6/ip6_fib.c:1027 [inline] fib6_purge_rt+0x7f2/0x9f0 net/ipv6/ip6_fib.c:1038 fib6_del_route net/ipv6/ip6_fib.c:1998 [inline] fib6_del+0xa70/0x17b0 net/ipv6/ip6_fib.c:2043 fib6_clean_node+0x426/0x5b0 net/ipv6/ip6_fib.c:2205 fib6_walk_continue+0x44f/0x8d0 net/ipv6/ip6_fib.c:2127 fib6_walk+0x182/0x370 net/ipv6/ip6_fib.c:2175 fib6_clean_tree+0xd7/0x120 net/ipv6/ip6_fib.c:2255 __fib6_clean_all+0x100/0x2d0 net/ipv6/ip6_fib.c:2271 rt6_sync_down_dev net/ipv6/route.c:4906 [inline] rt6_disable_ip+0x7ed/0xa00 net/ipv6/route.c:4911 addrconf_ifdown.isra.0+0x117/0x1b40 net/ipv6/addrconf.c:3855 addrconf_notify+0x223/0x19e0 net/ipv6/addrconf.c:3778 notifier_call_chain+0xb9/0x410 kernel/notifier.c:93 call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:1992 call_netdevice_notifiers_extack net/core/dev.c:2030 [inline] call_netdevice_notifiers net/core/dev.c:2044 [inline] dev_close_many+0x333/0x6a0 net/core/dev.c:1585 unregister_netdevice_many_notify+0x46d/0x19f0 net/core/dev.c:11193 unregister_netdevice_many net/core/dev.c:11276 [inline] default_device_exit_batch+0x85b/0xae0 net/core/dev.c:11759 ops_exit_list+0x128/0x180 net/core/net_namespace.c:178 cleanup_net+0x5b7/0xbf0 net/core/net_namespace.c:640 process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231 process_scheduled_works kernel/workqueue.c:3312 [inline] worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Fixes: d52d3997f843 ("ipv6: Create percpu rt6_info") Signed-off-by: Eric Dumazet <edumazet(a)google.com> Cc: Martin KaFai Lau <kafai(a)fb.com> Link: https://lore.kernel.org/r/20240604193549.981839-1-edumazet@google.com Signed-off-by: Paolo Abeni <pabeni(a)redhat.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Liu Jian <liujian56(a)huawei.com> --- net/ipv6/ip6_fib.c | 6 +++++- net/ipv6/route.c | 1 + 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/net/ipv6/ip6_fib.c b/net/ipv6/ip6_fib.c index 23881e5ebb3d..7883bdb5171f 100644 --- a/net/ipv6/ip6_fib.c +++ b/net/ipv6/ip6_fib.c @@ -960,6 +960,7 @@ static void __fib6_drop_pcpu_from(struct fib6_nh *fib6_nh, if (!fib6_nh->rt6i_pcpu) return; + rcu_read_lock(); /* release the reference to this fib entry from * all of its cached pcpu routes */ @@ -968,7 +969,9 @@ static void __fib6_drop_pcpu_from(struct fib6_nh *fib6_nh, struct rt6_info *pcpu_rt; ppcpu_rt = per_cpu_ptr(fib6_nh->rt6i_pcpu, cpu); - pcpu_rt = *ppcpu_rt; + + /* Paired with xchg() in rt6_get_pcpu_route() */ + pcpu_rt = READ_ONCE(*ppcpu_rt); /* only dropping the 'from' reference if the cached route * is using 'match'. The cached pcpu_rt->from only changes @@ -982,6 +985,7 @@ static void __fib6_drop_pcpu_from(struct fib6_nh *fib6_nh, fib6_info_release(from); } } + rcu_read_unlock(); } struct fib6_nh_pcpu_arg { diff --git a/net/ipv6/route.c b/net/ipv6/route.c index 96b3ddafb8d1..ff2b9f763b10 100644 --- a/net/ipv6/route.c +++ b/net/ipv6/route.c @@ -1391,6 +1391,7 @@ static struct rt6_info *rt6_get_pcpu_route(const struct fib6_result *res) struct rt6_info *prev, **p; p = this_cpu_ptr(res->nh->rt6i_pcpu); + /* Paired with READ_ONCE() in __fib6_drop_pcpu_from() */ prev = xchg(p, NULL); if (prev) { dst_dev_put(&prev->dst); -- 2.34.1

2 1

[PATCH OLK-6.6] ipv6: fix possible race in __fib6_drop_pcpu_from()
by Liu Jian 13 Jul '24

13 Jul '24

From: Eric Dumazet <edumazet(a)google.com> stable inclusion from stable-v6.6.35 commit 7e796c3fefa8b17b30e7252886ae8cffacd2b9ef category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACQJD CVE: CVE-2024-40905 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… --------------------------- [ Upstream commit b01e1c030770ff3b4fe37fc7cc6bca03f594133f ] syzbot found a race in __fib6_drop_pcpu_from() [1] If compiler reads more than once (*ppcpu_rt), second read could read NULL, if another cpu clears the value in rt6_get_pcpu_route(). Add a READ_ONCE() to prevent this race. Also add rcu_read_lock()/rcu_read_unlock() because we rely on RCU protection while dereferencing pcpu_rt. [1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000012: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000090-0x0000000000000097] CPU: 0 PID: 7543 Comm: kworker/u8:17 Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Workqueue: netns cleanup_net RIP: 0010:__fib6_drop_pcpu_from.part.0+0x10a/0x370 net/ipv6/ip6_fib.c:984 Code: f8 48 c1 e8 03 80 3c 28 00 0f 85 16 02 00 00 4d 8b 3f 4d 85 ff 74 31 e8 74 a7 fa f7 49 8d bf 90 00 00 00 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 1e 02 00 00 49 8b 87 90 00 00 00 48 8b 0c 24 48 RSP: 0018:ffffc900040df070 EFLAGS: 00010206 RAX: 0000000000000012 RBX: 0000000000000001 RCX: ffffffff89932e16 RDX: ffff888049dd1e00 RSI: ffffffff89932d7c RDI: 0000000000000091 RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000007 R10: 0000000000000001 R11: 0000000000000006 R12: ffff88807fa080b8 R13: fffffbfff1a9a07d R14: ffffed100ff41022 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b32c26000 CR3: 000000005d56e000 CR4: 00000000003526f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> __fib6_drop_pcpu_from net/ipv6/ip6_fib.c:966 [inline] fib6_drop_pcpu_from net/ipv6/ip6_fib.c:1027 [inline] fib6_purge_rt+0x7f2/0x9f0 net/ipv6/ip6_fib.c:1038 fib6_del_route net/ipv6/ip6_fib.c:1998 [inline] fib6_del+0xa70/0x17b0 net/ipv6/ip6_fib.c:2043 fib6_clean_node+0x426/0x5b0 net/ipv6/ip6_fib.c:2205 fib6_walk_continue+0x44f/0x8d0 net/ipv6/ip6_fib.c:2127 fib6_walk+0x182/0x370 net/ipv6/ip6_fib.c:2175 fib6_clean_tree+0xd7/0x120 net/ipv6/ip6_fib.c:2255 __fib6_clean_all+0x100/0x2d0 net/ipv6/ip6_fib.c:2271 rt6_sync_down_dev net/ipv6/route.c:4906 [inline] rt6_disable_ip+0x7ed/0xa00 net/ipv6/route.c:4911 addrconf_ifdown.isra.0+0x117/0x1b40 net/ipv6/addrconf.c:3855 addrconf_notify+0x223/0x19e0 net/ipv6/addrconf.c:3778 notifier_call_chain+0xb9/0x410 kernel/notifier.c:93 call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:1992 call_netdevice_notifiers_extack net/core/dev.c:2030 [inline] call_netdevice_notifiers net/core/dev.c:2044 [inline] dev_close_many+0x333/0x6a0 net/core/dev.c:1585 unregister_netdevice_many_notify+0x46d/0x19f0 net/core/dev.c:11193 unregister_netdevice_many net/core/dev.c:11276 [inline] default_device_exit_batch+0x85b/0xae0 net/core/dev.c:11759 ops_exit_list+0x128/0x180 net/core/net_namespace.c:178 cleanup_net+0x5b7/0xbf0 net/core/net_namespace.c:640 process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231 process_scheduled_works kernel/workqueue.c:3312 [inline] worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 Fixes: d52d3997f843 ("ipv6: Create percpu rt6_info") Signed-off-by: Eric Dumazet <edumazet(a)google.com> Cc: Martin KaFai Lau <kafai(a)fb.com> Link: https://lore.kernel.org/r/20240604193549.981839-1-edumazet@google.com Signed-off-by: Paolo Abeni <pabeni(a)redhat.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Liu Jian <liujian56(a)huawei.com> --- net/ipv6/ip6_fib.c | 6 +++++- net/ipv6/route.c | 1 + 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/net/ipv6/ip6_fib.c b/net/ipv6/ip6_fib.c index 8184076a3924..4356806b52bd 100644 --- a/net/ipv6/ip6_fib.c +++ b/net/ipv6/ip6_fib.c @@ -961,6 +961,7 @@ static void __fib6_drop_pcpu_from(struct fib6_nh *fib6_nh, if (!fib6_nh->rt6i_pcpu) return; + rcu_read_lock(); /* release the reference to this fib entry from * all of its cached pcpu routes */ @@ -969,7 +970,9 @@ static void __fib6_drop_pcpu_from(struct fib6_nh *fib6_nh, struct rt6_info *pcpu_rt; ppcpu_rt = per_cpu_ptr(fib6_nh->rt6i_pcpu, cpu); - pcpu_rt = *ppcpu_rt; + + /* Paired with xchg() in rt6_get_pcpu_route() */ + pcpu_rt = READ_ONCE(*ppcpu_rt); /* only dropping the 'from' reference if the cached route * is using 'match'. The cached pcpu_rt->from only changes @@ -983,6 +986,7 @@ static void __fib6_drop_pcpu_from(struct fib6_nh *fib6_nh, fib6_info_release(from); } } + rcu_read_unlock(); } struct fib6_nh_pcpu_arg { diff --git a/net/ipv6/route.c b/net/ipv6/route.c index 236a45557ba1..8cccc6a2b404 100644 --- a/net/ipv6/route.c +++ b/net/ipv6/route.c @@ -1398,6 +1398,7 @@ static struct rt6_info *rt6_get_pcpu_route(const struct fib6_result *res) struct rt6_info *prev, **p; p = this_cpu_ptr(res->nh->rt6i_pcpu); + /* Paired with READ_ONCE() in __fib6_drop_pcpu_from() */ prev = xchg(p, NULL); if (prev) { dst_dev_put(&prev->dst); -- 2.34.1

2 1

[PATCH OLK-6.6] ionic: fix use after netif_napi_del()
by Zhengchao Shao 13 Jul '24

13 Jul '24

From: Taehee Yoo <ap420073(a)gmail.com> stable inclusion from stable-v6.6.35 commit 183ebc167a8a19e916b885d4bb61a3491991bfa5 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACQHS CVE: CVE-2024-39502 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… --------------------------- [ Upstream commit 79f18a41dd056115d685f3b0a419c7cd40055e13 ] When queues are started, netif_napi_add() and napi_enable() are called. If there are 4 queues and only 3 queues are used for the current configuration, only 3 queues' napi should be registered and enabled. The ionic_qcq_enable() checks whether the .poll pointer is not NULL for enabling only the using queue' napi. Unused queues' napi will not be registered by netif_napi_add(), so the .poll pointer indicates NULL. But it couldn't distinguish whether the napi was unregistered or not because netif_napi_del() doesn't reset the .poll pointer to NULL. So, ionic_qcq_enable() calls napi_enable() for the queue, which was unregistered by netif_napi_del(). Reproducer: ethtool -L <interface name> rx 1 tx 1 combined 0 ethtool -L <interface name> rx 0 tx 0 combined 1 ethtool -L <interface name> rx 0 tx 0 combined 4 Splat looks like: kernel BUG at net/core/dev.c:6666! Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 3 PID: 1057 Comm: kworker/3:3 Not tainted 6.10.0-rc2+ #16 Workqueue: events ionic_lif_deferred_work [ionic] RIP: 0010:napi_enable+0x3b/0x40 Code: 48 89 c2 48 83 e2 f6 80 b9 61 09 00 00 00 74 0d 48 83 bf 60 01 00 00 00 74 03 80 ce 01 f0 4f RSP: 0018:ffffb6ed83227d48 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff97560cda0828 RCX: 0000000000000029 RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff97560cda0a28 RBP: ffffb6ed83227d50 R08: 0000000000000400 R09: 0000000000000001 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 R13: ffff97560ce3c1a0 R14: 0000000000000000 R15: ffff975613ba0a20 FS: 0000000000000000(0000) GS:ffff975d5f780000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8f734ee200 CR3: 0000000103e50000 CR4: 00000000007506f0 PKRU: 55555554 Call Trace: <TASK> ? die+0x33/0x90 ? do_trap+0xd9/0x100 ? napi_enable+0x3b/0x40 ? do_error_trap+0x83/0xb0 ? napi_enable+0x3b/0x40 ? napi_enable+0x3b/0x40 ? exc_invalid_op+0x4e/0x70 ? napi_enable+0x3b/0x40 ? asm_exc_invalid_op+0x16/0x20 ? napi_enable+0x3b/0x40 ionic_qcq_enable+0xb7/0x180 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8] ionic_start_queues+0xc4/0x290 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8] ionic_link_status_check+0x11c/0x170 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8] ionic_lif_deferred_work+0x129/0x280 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8] process_one_work+0x145/0x360 worker_thread+0x2bb/0x3d0 ? __pfx_worker_thread+0x10/0x10 kthread+0xcc/0x100 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x2d/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 Fixes: 0f3154e6bcb3 ("ionic: Add Tx and Rx handling") Signed-off-by: Taehee Yoo <ap420073(a)gmail.com> Reviewed-by: Brett Creeley <brett.creeley(a)amd.com> Reviewed-by: Shannon Nelson <shannon.nelson(a)amd.com> Link: https://lore.kernel.org/r/20240612060446.1754392-1-ap420073@gmail.com Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zhengchao Shao <shaozhengchao(a)huawei.com> --- drivers/net/ethernet/pensando/ionic/ionic_lif.c | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/drivers/net/ethernet/pensando/ionic/ionic_lif.c b/drivers/net/ethernet/pensando/ionic/ionic_lif.c index 4f05cddc65cb..7e6e1bed525a 100644 --- a/drivers/net/ethernet/pensando/ionic/ionic_lif.c +++ b/drivers/net/ethernet/pensando/ionic/ionic_lif.c @@ -296,10 +296,8 @@ static int ionic_qcq_enable(struct ionic_qcq *qcq) if (ret) return ret; - if (qcq->napi.poll) - napi_enable(&qcq->napi); - if (qcq->flags & IONIC_QCQ_F_INTR) { + napi_enable(&qcq->napi); irq_set_affinity_hint(qcq->intr.vector, &qcq->intr.affinity_mask); ionic_intr_mask(idev->intr_ctrl, qcq->intr.index, -- 2.34.1

2 1

[PATCH OLK-6.6] cpufreq: amd-pstate: fix memory leak on CPU EPP exit
by Jinjie Ruan 13 Jul '24

13 Jul '24

From: Peng Ma <andypma(a)tencent.com> stable inclusion from stable-v6.6.36 commit 448efb7ea0bfa2c4e27c5a2eb5684fd225cd12cd category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACQP5 CVE: CVE-2024-40997 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit cea04f3d9aeebda9d9c063c0dfa71e739c322c81 ] The cpudata memory from kzalloc() in amd_pstate_epp_cpu_init() is not freed in the analogous exit function, so fix that. Signed-off-by: Peng Ma <andypma(a)tencent.com> Acked-by: Mario Limonciello <mario.limonciello(a)amd.com> Reviewed-by: Perry Yuan <Perry.Yuan(a)amd.com> [ rjw: Subject and changelog edits ] Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Jinjie Ruan <ruanjinjie(a)huawei.com> --- drivers/cpufreq/amd-pstate.c | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/drivers/cpufreq/amd-pstate.c b/drivers/cpufreq/amd-pstate.c index 07f341995439..3efc2aef31ce 100644 --- a/drivers/cpufreq/amd-pstate.c +++ b/drivers/cpufreq/amd-pstate.c @@ -1216,6 +1216,13 @@ static int amd_pstate_epp_cpu_init(struct cpufreq_policy *policy) static int amd_pstate_epp_cpu_exit(struct cpufreq_policy *policy) { + struct amd_cpudata *cpudata = policy->driver_data; + + if (cpudata) { + kfree(cpudata); + policy->driver_data = NULL; + } + pr_debug("CPU %d exiting\n", policy->cpu); return 0; } -- 2.34.1

2 1

[PATCH OLK-5.10] ionic: fix use after netif_napi_del()
by Zhengchao Shao 13 Jul '24

13 Jul '24

From: Taehee Yoo <ap420073(a)gmail.com> mainline inclusion from mainline-v6.10-rc4 commit 79f18a41dd056115d685f3b0a419c7cd40055e13 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IACQHS CVE: CVE-2024-39502 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- When queues are started, netif_napi_add() and napi_enable() are called. If there are 4 queues and only 3 queues are used for the current configuration, only 3 queues' napi should be registered and enabled. The ionic_qcq_enable() checks whether the .poll pointer is not NULL for enabling only the using queue' napi. Unused queues' napi will not be registered by netif_napi_add(), so the .poll pointer indicates NULL. But it couldn't distinguish whether the napi was unregistered or not because netif_napi_del() doesn't reset the .poll pointer to NULL. So, ionic_qcq_enable() calls napi_enable() for the queue, which was unregistered by netif_napi_del(). Reproducer: ethtool -L <interface name> rx 1 tx 1 combined 0 ethtool -L <interface name> rx 0 tx 0 combined 1 ethtool -L <interface name> rx 0 tx 0 combined 4 Splat looks like: kernel BUG at net/core/dev.c:6666! Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 3 PID: 1057 Comm: kworker/3:3 Not tainted 6.10.0-rc2+ #16 Workqueue: events ionic_lif_deferred_work [ionic] RIP: 0010:napi_enable+0x3b/0x40 Code: 48 89 c2 48 83 e2 f6 80 b9 61 09 00 00 00 74 0d 48 83 bf 60 01 00 00 00 74 03 80 ce 01 f0 4f RSP: 0018:ffffb6ed83227d48 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff97560cda0828 RCX: 0000000000000029 RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff97560cda0a28 RBP: ffffb6ed83227d50 R08: 0000000000000400 R09: 0000000000000001 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 R13: ffff97560ce3c1a0 R14: 0000000000000000 R15: ffff975613ba0a20 FS: 0000000000000000(0000) GS:ffff975d5f780000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8f734ee200 CR3: 0000000103e50000 CR4: 00000000007506f0 PKRU: 55555554 Call Trace: <TASK> ? die+0x33/0x90 ? do_trap+0xd9/0x100 ? napi_enable+0x3b/0x40 ? do_error_trap+0x83/0xb0 ? napi_enable+0x3b/0x40 ? napi_enable+0x3b/0x40 ? exc_invalid_op+0x4e/0x70 ? napi_enable+0x3b/0x40 ? asm_exc_invalid_op+0x16/0x20 ? napi_enable+0x3b/0x40 ionic_qcq_enable+0xb7/0x180 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8] ionic_start_queues+0xc4/0x290 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8] ionic_link_status_check+0x11c/0x170 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8] ionic_lif_deferred_work+0x129/0x280 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8] process_one_work+0x145/0x360 worker_thread+0x2bb/0x3d0 ? __pfx_worker_thread+0x10/0x10 kthread+0xcc/0x100 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x2d/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 Fixes: 0f3154e6bcb3 ("ionic: Add Tx and Rx handling") Signed-off-by: Taehee Yoo <ap420073(a)gmail.com> Reviewed-by: Brett Creeley <brett.creeley(a)amd.com> Reviewed-by: Shannon Nelson <shannon.nelson(a)amd.com> Link: https://lore.kernel.org/r/20240612060446.1754392-1-ap420073@gmail.com Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Zhengchao Shao <shaozhengchao(a)huawei.com> --- drivers/net/ethernet/pensando/ionic/ionic_lif.c | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/drivers/net/ethernet/pensando/ionic/ionic_lif.c b/drivers/net/ethernet/pensando/ionic/ionic_lif.c index 49c28134ac2c..d507b4448a51 100644 --- a/drivers/net/ethernet/pensando/ionic/ionic_lif.c +++ b/drivers/net/ethernet/pensando/ionic/ionic_lif.c @@ -272,10 +272,8 @@ static int ionic_qcq_enable(struct ionic_qcq *qcq) if (ret) return ret; - if (qcq->napi.poll) - napi_enable(&qcq->napi); - if (qcq->flags & IONIC_QCQ_F_INTR) { + napi_enable(&qcq->napi); irq_set_affinity_hint(qcq->intr.vector, &qcq->intr.affinity_mask); ionic_intr_mask(idev->intr_ctrl, qcq->intr.index, -- 2.34.1

2 1

[PATCH OLK-6.6] bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
by Liu Jian 13 Jul '24

13 Jul '24

From: Sam Sun <samsun1006219(a)gmail.com> stable inclusion from stable-v6.6.39 commit b75e33eae8667084bd4a63e67657c6a5a0f8d1e8 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IABSW1 CVE: CVE-2024-39487 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… --------------------------- [ Upstream commit e271ff53807e8f2c628758290f0e499dbe51cb3d ] In function bond_option_arp_ip_targets_set(), if newval->string is an empty string, newval->string+1 will point to the byte after the string, causing an out-of-bound read. BUG: KASAN: slab-out-of-bounds in strlen+0x7d/0xa0 lib/string.c:418 Read of size 1 at addr ffff8881119c4781 by task syz-executor665/8107 CPU: 1 PID: 8107 Comm: syz-executor665 Not tainted 6.7.0-rc7 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd9/0x150 lib/dump_stack.c:106 print_address_description mm/kasan/report.c:364 [inline] print_report+0xc1/0x5e0 mm/kasan/report.c:475 kasan_report+0xbe/0xf0 mm/kasan/report.c:588 strlen+0x7d/0xa0 lib/string.c:418 __fortify_strlen include/linux/fortify-string.h:210 [inline] in4_pton+0xa3/0x3f0 net/core/utils.c:130 bond_option_arp_ip_targets_set+0xc2/0x910 drivers/net/bonding/bond_options.c:1201 __bond_opt_set+0x2a4/0x1030 drivers/net/bonding/bond_options.c:767 __bond_opt_set_notify+0x48/0x150 drivers/net/bonding/bond_options.c:792 bond_opt_tryset_rtnl+0xda/0x160 drivers/net/bonding/bond_options.c:817 bonding_sysfs_store_option+0xa1/0x120 drivers/net/bonding/bond_sysfs.c:156 dev_attr_store+0x54/0x80 drivers/base/core.c:2366 sysfs_kf_write+0x114/0x170 fs/sysfs/file.c:136 kernfs_fop_write_iter+0x337/0x500 fs/kernfs/file.c:334 call_write_iter include/linux/fs.h:2020 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x96a/0xd80 fs/read_write.c:584 ksys_write+0x122/0x250 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x40/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b ---[ end trace ]--- Fix it by adding a check of string length before using it. Fixes: f9de11a16594 ("bonding: add ip checks when store ip target") Signed-off-by: Yue Sun <samsun1006219(a)gmail.com> Signed-off-by: Simon Horman <horms(a)kernel.org> Acked-by: Jay Vosburgh <jay.vosburgh(a)canonical.com> Reviewed-by: Hangbin Liu <liuhangbin(a)gmail.com> Link: https://patch.msgid.link/20240702-bond-oob-v6-1-2dfdba195c19@kernel.org Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Liu Jian <liujian56(a)huawei.com> --- drivers/net/bonding/bond_options.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/drivers/net/bonding/bond_options.c b/drivers/net/bonding/bond_options.c index f3f27f0bd2a6..00a662f8edd6 100644 --- a/drivers/net/bonding/bond_options.c +++ b/drivers/net/bonding/bond_options.c @@ -1198,9 +1198,9 @@ static int bond_option_arp_ip_targets_set(struct bonding *bond, __be32 target; if (newval->string) { - if (!in4_pton(newval->string+1, -1, (u8 *)&target, -1, NULL)) { - netdev_err(bond->dev, "invalid ARP target %pI4 specified\n", - &target); + if (strlen(newval->string) < 1 || + !in4_pton(newval->string + 1, -1, (u8 *)&target, -1, NULL)) { + netdev_err(bond->dev, "invalid ARP target specified\n"); return ret; } if (newval->string[0] == '+') -- 2.34.1

2 1

[PATCH openEuler-1.0-LTS] bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
by Liu Jian 13 Jul '24

13 Jul '24

From: Sam Sun <samsun1006219(a)gmail.com> mainline inclusion from mainline-v6.10-rc7 commit e271ff53807e8f2c628758290f0e499dbe51cb3d category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IABSW1 CVE: CVE-2024-39487 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… --------------------------- In function bond_option_arp_ip_targets_set(), if newval->string is an empty string, newval->string+1 will point to the byte after the string, causing an out-of-bound read. BUG: KASAN: slab-out-of-bounds in strlen+0x7d/0xa0 lib/string.c:418 Read of size 1 at addr ffff8881119c4781 by task syz-executor665/8107 CPU: 1 PID: 8107 Comm: syz-executor665 Not tainted 6.7.0-rc7 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd9/0x150 lib/dump_stack.c:106 print_address_description mm/kasan/report.c:364 [inline] print_report+0xc1/0x5e0 mm/kasan/report.c:475 kasan_report+0xbe/0xf0 mm/kasan/report.c:588 strlen+0x7d/0xa0 lib/string.c:418 __fortify_strlen include/linux/fortify-string.h:210 [inline] in4_pton+0xa3/0x3f0 net/core/utils.c:130 bond_option_arp_ip_targets_set+0xc2/0x910 drivers/net/bonding/bond_options.c:1201 __bond_opt_set+0x2a4/0x1030 drivers/net/bonding/bond_options.c:767 __bond_opt_set_notify+0x48/0x150 drivers/net/bonding/bond_options.c:792 bond_opt_tryset_rtnl+0xda/0x160 drivers/net/bonding/bond_options.c:817 bonding_sysfs_store_option+0xa1/0x120 drivers/net/bonding/bond_sysfs.c:156 dev_attr_store+0x54/0x80 drivers/base/core.c:2366 sysfs_kf_write+0x114/0x170 fs/sysfs/file.c:136 kernfs_fop_write_iter+0x337/0x500 fs/kernfs/file.c:334 call_write_iter include/linux/fs.h:2020 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x96a/0xd80 fs/read_write.c:584 ksys_write+0x122/0x250 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x40/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b ---[ end trace ]--- Fix it by adding a check of string length before using it. Fixes: f9de11a16594 ("bonding: add ip checks when store ip target") Signed-off-by: Yue Sun <samsun1006219(a)gmail.com> Signed-off-by: Simon Horman <horms(a)kernel.org> Acked-by: Jay Vosburgh <jay.vosburgh(a)canonical.com> Reviewed-by: Hangbin Liu <liuhangbin(a)gmail.com> Link: https://patch.msgid.link/20240702-bond-oob-v6-1-2dfdba195c19@kernel.org Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Liu Jian <liujian56(a)huawei.com> --- drivers/net/bonding/bond_options.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/drivers/net/bonding/bond_options.c b/drivers/net/bonding/bond_options.c index 1745cba04c18..8f44f80a8781 100644 --- a/drivers/net/bonding/bond_options.c +++ b/drivers/net/bonding/bond_options.c @@ -1093,9 +1093,9 @@ static int bond_option_arp_ip_targets_set(struct bonding *bond, __be32 target; if (newval->string) { - if (!in4_pton(newval->string+1, -1, (u8 *)&target, -1, NULL)) { - netdev_err(bond->dev, "invalid ARP target %pI4 specified\n", - &target); + if (strlen(newval->string) < 1 || + !in4_pton(newval->string + 1, -1, (u8 *)&target, -1, NULL)) { + netdev_err(bond->dev, "invalid ARP target specified\n"); return ret; } if (newval->string[0] == '+') -- 2.34.1

2 1

[PATCH openEuler-22.03-LTS-SP1] bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
by Liu Jian 13 Jul '24

13 Jul '24

From: Sam Sun <samsun1006219(a)gmail.com> mainline inclusion from mainline-v6.10-rc7 commit e271ff53807e8f2c628758290f0e499dbe51cb3d category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IABSW1 CVE: CVE-2024-39487 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… --------------------------- In function bond_option_arp_ip_targets_set(), if newval->string is an empty string, newval->string+1 will point to the byte after the string, causing an out-of-bound read. BUG: KASAN: slab-out-of-bounds in strlen+0x7d/0xa0 lib/string.c:418 Read of size 1 at addr ffff8881119c4781 by task syz-executor665/8107 CPU: 1 PID: 8107 Comm: syz-executor665 Not tainted 6.7.0-rc7 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd9/0x150 lib/dump_stack.c:106 print_address_description mm/kasan/report.c:364 [inline] print_report+0xc1/0x5e0 mm/kasan/report.c:475 kasan_report+0xbe/0xf0 mm/kasan/report.c:588 strlen+0x7d/0xa0 lib/string.c:418 __fortify_strlen include/linux/fortify-string.h:210 [inline] in4_pton+0xa3/0x3f0 net/core/utils.c:130 bond_option_arp_ip_targets_set+0xc2/0x910 drivers/net/bonding/bond_options.c:1201 __bond_opt_set+0x2a4/0x1030 drivers/net/bonding/bond_options.c:767 __bond_opt_set_notify+0x48/0x150 drivers/net/bonding/bond_options.c:792 bond_opt_tryset_rtnl+0xda/0x160 drivers/net/bonding/bond_options.c:817 bonding_sysfs_store_option+0xa1/0x120 drivers/net/bonding/bond_sysfs.c:156 dev_attr_store+0x54/0x80 drivers/base/core.c:2366 sysfs_kf_write+0x114/0x170 fs/sysfs/file.c:136 kernfs_fop_write_iter+0x337/0x500 fs/kernfs/file.c:334 call_write_iter include/linux/fs.h:2020 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x96a/0xd80 fs/read_write.c:584 ksys_write+0x122/0x250 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x40/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b ---[ end trace ]--- Fix it by adding a check of string length before using it. Fixes: f9de11a16594 ("bonding: add ip checks when store ip target") Signed-off-by: Yue Sun <samsun1006219(a)gmail.com> Signed-off-by: Simon Horman <horms(a)kernel.org> Acked-by: Jay Vosburgh <jay.vosburgh(a)canonical.com> Reviewed-by: Hangbin Liu <liuhangbin(a)gmail.com> Link: https://patch.msgid.link/20240702-bond-oob-v6-1-2dfdba195c19@kernel.org Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Liu Jian <liujian56(a)huawei.com> --- drivers/net/bonding/bond_options.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/drivers/net/bonding/bond_options.c b/drivers/net/bonding/bond_options.c index fe55c81608da..fa0bf77870d4 100644 --- a/drivers/net/bonding/bond_options.c +++ b/drivers/net/bonding/bond_options.c @@ -1100,9 +1100,9 @@ static int bond_option_arp_ip_targets_set(struct bonding *bond, __be32 target; if (newval->string) { - if (!in4_pton(newval->string+1, -1, (u8 *)&target, -1, NULL)) { - netdev_err(bond->dev, "invalid ARP target %pI4 specified\n", - &target); + if (strlen(newval->string) < 1 || + !in4_pton(newval->string + 1, -1, (u8 *)&target, -1, NULL)) { + netdev_err(bond->dev, "invalid ARP target specified\n"); return ret; } if (newval->string[0] == '+') -- 2.34.1

2 1

[PATCH OLK-5.10] bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
by Liu Jian 13 Jul '24

13 Jul '24

From: Sam Sun <samsun1006219(a)gmail.com> mainline inclusion from mainline-v6.10-rc7 commit e271ff53807e8f2c628758290f0e499dbe51cb3d category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IABSW1 CVE: CVE-2024-39487 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… --------------------------- In function bond_option_arp_ip_targets_set(), if newval->string is an empty string, newval->string+1 will point to the byte after the string, causing an out-of-bound read. BUG: KASAN: slab-out-of-bounds in strlen+0x7d/0xa0 lib/string.c:418 Read of size 1 at addr ffff8881119c4781 by task syz-executor665/8107 CPU: 1 PID: 8107 Comm: syz-executor665 Not tainted 6.7.0-rc7 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd9/0x150 lib/dump_stack.c:106 print_address_description mm/kasan/report.c:364 [inline] print_report+0xc1/0x5e0 mm/kasan/report.c:475 kasan_report+0xbe/0xf0 mm/kasan/report.c:588 strlen+0x7d/0xa0 lib/string.c:418 __fortify_strlen include/linux/fortify-string.h:210 [inline] in4_pton+0xa3/0x3f0 net/core/utils.c:130 bond_option_arp_ip_targets_set+0xc2/0x910 drivers/net/bonding/bond_options.c:1201 __bond_opt_set+0x2a4/0x1030 drivers/net/bonding/bond_options.c:767 __bond_opt_set_notify+0x48/0x150 drivers/net/bonding/bond_options.c:792 bond_opt_tryset_rtnl+0xda/0x160 drivers/net/bonding/bond_options.c:817 bonding_sysfs_store_option+0xa1/0x120 drivers/net/bonding/bond_sysfs.c:156 dev_attr_store+0x54/0x80 drivers/base/core.c:2366 sysfs_kf_write+0x114/0x170 fs/sysfs/file.c:136 kernfs_fop_write_iter+0x337/0x500 fs/kernfs/file.c:334 call_write_iter include/linux/fs.h:2020 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x96a/0xd80 fs/read_write.c:584 ksys_write+0x122/0x250 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x40/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b ---[ end trace ]--- Fix it by adding a check of string length before using it. Fixes: f9de11a16594 ("bonding: add ip checks when store ip target") Signed-off-by: Yue Sun <samsun1006219(a)gmail.com> Signed-off-by: Simon Horman <horms(a)kernel.org> Acked-by: Jay Vosburgh <jay.vosburgh(a)canonical.com> Reviewed-by: Hangbin Liu <liuhangbin(a)gmail.com> Link: https://patch.msgid.link/20240702-bond-oob-v6-1-2dfdba195c19@kernel.org Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Liu Jian <liujian56(a)huawei.com> --- drivers/net/bonding/bond_options.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/drivers/net/bonding/bond_options.c b/drivers/net/bonding/bond_options.c index fe55c81608da..fa0bf77870d4 100644 --- a/drivers/net/bonding/bond_options.c +++ b/drivers/net/bonding/bond_options.c @@ -1100,9 +1100,9 @@ static int bond_option_arp_ip_targets_set(struct bonding *bond, __be32 target; if (newval->string) { - if (!in4_pton(newval->string+1, -1, (u8 *)&target, -1, NULL)) { - netdev_err(bond->dev, "invalid ARP target %pI4 specified\n", - &target); + if (strlen(newval->string) < 1 || + !in4_pton(newval->string + 1, -1, (u8 *)&target, -1, NULL)) { + netdev_err(bond->dev, "invalid ARP target specified\n"); return ret; } if (newval->string[0] == '+') -- 2.34.1

2 1

[openeuler:openEuler-1.0-LTS 16562/23271] mm/pin_mem.c:1075:12: sparse: sparse: symbol 'reserve_idr' was not declared. Should it be static?
by kernel test robot 13 Jul '24

13 Jul '24

tree: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS head: 07c988f00903b4f0fbf9c31cea24351fbf885b1c commit: 892de178c180d2924ad5f3dcf55baa3b8ab2272d [16562/23271] pid: add pid reserve method for checkpoint and restore config: arm64-randconfig-r112-20240713 (https://download.01.org/0day-ci/archive/20240713/202407131157.Vwc7D5kC-lkp@…) compiler: aarch64-linux-gcc (GCC) 14.1.0 reproduce: (https://download.01.org/0day-ci/archive/20240713/202407131157.Vwc7D5kC-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407131157.Vwc7D5kC-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) mm/pin_mem.c:34:14: sparse: sparse: symbol 'max_pin_pid_num' was not declared. Should it be static? mm/pin_mem.c:35:15: sparse: sparse: symbol 'redirect_space_size' was not declared. Should it be static? mm/pin_mem.c:171:6: sparse: sparse: symbol 'reserve_page_from_buddy' was not declared. Should it be static? mm/pin_mem.c:254:6: sparse: sparse: symbol 'free_user_map_pages' was not declared. Should it be static? mm/pin_mem.c:311:6: sparse: sparse: symbol 'check_redirect_end_valid' was not declared. Should it be static? mm/pin_mem.c:392:5: sparse: sparse: symbol 'calculate_pin_mem_digest' was not declared. Should it be static? mm/pin_mem.c:481:5: sparse: sparse: symbol 'collect_pmd_huge_pages' was not declared. Should it be static? mm/pin_mem.c:544:5: sparse: sparse: symbol 'collect_normal_pages' was not declared. Should it be static? mm/pin_mem.c:610:6: sparse: sparse: symbol 'free_pin_pages' was not declared. Should it be static? mm/pin_mem.c:770:12: sparse: sparse: symbol 'remap_normal_pages' was not declared. Should it be static? mm/pin_mem.c:857:12: sparse: sparse: symbol 'remap_huge_pmd_pages' was not declared. Should it be static? >> mm/pin_mem.c:1075:12: sparse: sparse: symbol 'reserve_idr' was not declared. Should it be static? mm/pin_mem.c:844:63: sparse: sparse: not addressable mm/pin_mem.c:846:63: sparse: sparse: not addressable mm/pin_mem.c:848:71: sparse: sparse: not addressable mm/pin_mem.c:851:65: sparse: sparse: not addressable mm/pin_mem.c:171:6: warning: no previous prototype for 'reserve_page_from_buddy' [-Wmissing-prototypes] 171 | void reserve_page_from_buddy(unsigned long nr_pages, struct page *page) | ^~~~~~~~~~~~~~~~~~~~~~~ mm/pin_mem.c:254:6: warning: no previous prototype for 'free_user_map_pages' [-Wmissing-prototypes] 254 | void free_user_map_pages(unsigned int pid_index, unsigned int entry_index, unsigned int page_index) | ^~~~~~~~~~~~~~~~~~~ mm/pin_mem.c:311:6: warning: no previous prototype for 'check_redirect_end_valid' [-Wmissing-prototypes] 311 | bool check_redirect_end_valid(struct redirect_info *redirect_start, | ^~~~~~~~~~~~~~~~~~~~~~~~ mm/pin_mem.c:392:5: warning: no previous prototype for 'calculate_pin_mem_digest' [-Wmissing-prototypes] 392 | int calculate_pin_mem_digest(struct pin_mem_dump_info *pmdi, char *digest) | ^~~~~~~~~~~~~~~~~~~~~~~~ mm/pin_mem.c:481:5: warning: no previous prototype for 'collect_pmd_huge_pages' [-Wmissing-prototypes] 481 | int collect_pmd_huge_pages(struct task_struct *task, | ^~~~~~~~~~~~~~~~~~~~~~ mm/pin_mem.c:544:5: warning: no previous prototype for 'collect_normal_pages' [-Wmissing-prototypes] 544 | int collect_normal_pages(struct task_struct *task, | ^~~~~~~~~~~~~~~~~~~~ mm/pin_mem.c: In function 'collect_normal_pages': mm/pin_mem.c:549:26: warning: variable 'nr_pages' set but not used [-Wunused-but-set-variable] 549 | unsigned long i, nr_pages; | ^~~~~~~~ mm/pin_mem.c: At top level: mm/pin_mem.c:610:6: warning: no previous prototype for 'free_pin_pages' [-Wmissing-prototypes] 610 | void free_pin_pages(struct page_map_entry *pme) | ^~~~~~~~~~~~~~ mm/pin_mem.c:770:12: warning: no previous prototype for 'remap_normal_pages' [-Wmissing-prototypes] 770 | vm_fault_t remap_normal_pages(struct mm_struct *mm, struct vm_area_struct *vma, | ^~~~~~~~~~~~~~~~~~ mm/pin_mem.c: In function 'get_hugepage_gfpmask': mm/pin_mem.c:844:63: error: lvalue required as unary '&' operand 844 | if (test_bit(TRANSPARENT_HUGEPAGE_DEFRAG_DIRECT_FLAG, &transparent_hugepage_flags)) | ^ mm/pin_mem.c:846:63: error: lvalue required as unary '&' operand 846 | if (test_bit(TRANSPARENT_HUGEPAGE_DEFRAG_KSWAPD_FLAG, &transparent_hugepage_flags)) | ^ mm/pin_mem.c:848:71: error: lvalue required as unary '&' operand 848 | if (test_bit(TRANSPARENT_HUGEPAGE_DEFRAG_KSWAPD_OR_MADV_FLAG, &transparent_hugepage_flags)) | ^ mm/pin_mem.c:851:65: error: lvalue required as unary '&' operand 851 | if (test_bit(TRANSPARENT_HUGEPAGE_DEFRAG_REQ_MADV_FLAG, &transparent_hugepage_flags)) | ^ mm/pin_mem.c: At top level: mm/pin_mem.c:857:12: warning: no previous prototype for 'remap_huge_pmd_pages' [-Wmissing-prototypes] 857 | vm_fault_t remap_huge_pmd_pages(struct mm_struct *mm, struct vm_area_struct *vma, | ^~~~~~~~~~~~~~~~~~~~ vim +/reserve_idr +1075 mm/pin_mem.c 1073 1074 #ifdef CONFIG_PID_RESERVE > 1075 struct idr *reserve_idr; 1076 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6 00/23] support for SMC-D loopback_lo feature
by Zhengchao Shao 13 Jul '24

13 Jul '24

Support for SMC-D loopback_lo feature. Wen Gu (22): net/smc: rename some 'fce' to 'fce_v2x' for clarity net/smc: introduce sub-functions for smc_clc_send_confirm_accept() net/smc: unify the structs of accept or confirm message for v1 and v2 net/smc: support SMCv2.x supplemental features negotiation net/smc: introduce virtual ISM device support feature net/smc: define a reserved CHID range for virtual ISM devices net/smc: compatible with 128-bits extended GID of virtual ISM device net/smc: support extended GID in SMC-D lgr netlink attribute net/smc: manage system EID in SMC stack instead of ISM driver net/smc: fix incorrect SMC-D link group matching logic net/smc: change the term virtual ISM to Emulated-ISM net/smc: decouple ism_client from SMC-D DMB registration net/smc: introduce loopback-ism for SMC intra-OS shortcut net/smc: implement ID-related operations of loopback-ism net/smc: implement DMB-related operations of loopback-ism net/smc: mark optional smcd_ops and check for support when called net/smc: ignore loopback-ism when dumping SMC-D devices net/smc: register loopback-ism into SMC-D device list net/smc: add operations to merge sndbuf with peer DMB net/smc: {at|de}tach sndbuf to peer DMB if supported net/smc: adapt cursor update when sndbuf and peer DMB are merged net/smc: implement DMB-merged operations of loopback-ism Zhengchao Shao (1): net/smc: enable the smc-lo on the x86 and arm64 platforms arch/arm64/configs/openeuler_defconfig | 1 + arch/x86/configs/openeuler_defconfig | 1 + drivers/s390/net/ism.h | 7 - drivers/s390/net/ism_drv.c | 59 ++-- include/linux/ism.h | 1 - include/net/smc.h | 33 +- include/uapi/linux/smc.h | 2 + include/uapi/linux/smc_diag.h | 2 + net/smc/Kconfig | 13 + net/smc/Makefile | 1 + net/smc/af_smc.c | 146 ++++++--- net/smc/smc.h | 10 +- net/smc/smc_cdc.c | 36 ++- net/smc/smc_clc.c | 304 ++++++++++-------- net/smc/smc_clc.h | 64 ++-- net/smc/smc_core.c | 104 +++++- net/smc/smc_core.h | 19 +- net/smc/smc_diag.c | 9 +- net/smc/smc_ism.c | 136 ++++++-- net/smc/smc_ism.h | 40 ++- net/smc/smc_loopback.c | 427 +++++++++++++++++++++++++ net/smc/smc_loopback.h | 61 ++++ net/smc/smc_pnet.c | 4 +- 23 files changed, 1160 insertions(+), 320 deletions(-) create mode 100644 net/smc/smc_loopback.c create mode 100644 net/smc/smc_loopback.h -- 2.34.1

2 24

[PATCH openEuler-1.0-LTS] ipv6: sr: fix memleak in seg6_hmac_init_algo
by Zhengchao Shao 13 Jul '24

13 Jul '24

From: Hangbin Liu <liuhangbin(a)gmail.com> stable inclusion from stable-v4.19.316 commit afd5730969aec960a2fee4e5ee839a6014643976 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAC3N0 CVE: CVE-2024-39489 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… --------------------------- [ Upstream commit efb9f4f19f8e37fde43dfecebc80292d179f56c6 ] seg6_hmac_init_algo returns without cleaning up the previous allocations if one fails, so it's going to leak all that memory and the crypto tfms. Update seg6_hmac_exit to only free the memory when allocated, so we can reuse the code directly. Fixes: bf355b8d2c30 ("ipv6: sr: add core files for SR HMAC support") Reported-by: Sabrina Dubroca <sd(a)queasysnail.net> Closes: https://lore.kernel.org/netdev/Zj3bh-gE7eT6V6aH@hog/ Signed-off-by: Hangbin Liu <liuhangbin(a)gmail.com> Reviewed-by: Simon Horman <horms(a)kernel.org> Reviewed-by: Sabrina Dubroca <sd(a)queasysnail.net> Link: https://lore.kernel.org/r/20240517005435.2600277-1-liuhangbin@gmail.com Signed-off-by: Paolo Abeni <pabeni(a)redhat.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zhengchao Shao <shaozhengchao(a)huawei.com> --- net/ipv6/seg6_hmac.c | 42 ++++++++++++++++++++++++++++-------------- 1 file changed, 28 insertions(+), 14 deletions(-) diff --git a/net/ipv6/seg6_hmac.c b/net/ipv6/seg6_hmac.c index 8546f94f30d4..a8f0eac64a19 100644 --- a/net/ipv6/seg6_hmac.c +++ b/net/ipv6/seg6_hmac.c @@ -361,6 +361,7 @@ static int seg6_hmac_init_algo(void) struct crypto_shash *tfm; struct shash_desc *shash; int i, alg_count, cpu; + int ret = -ENOMEM; alg_count = ARRAY_SIZE(hmac_algos); @@ -371,12 +372,14 @@ static int seg6_hmac_init_algo(void) algo = &hmac_algos[i]; algo->tfms = alloc_percpu(struct crypto_shash *); if (!algo->tfms) - return -ENOMEM; + goto error_out; for_each_possible_cpu(cpu) { tfm = crypto_alloc_shash(algo->name, 0, 0); - if (IS_ERR(tfm)) - return PTR_ERR(tfm); + if (IS_ERR(tfm)) { + ret = PTR_ERR(tfm); + goto error_out; + } p_tfm = per_cpu_ptr(algo->tfms, cpu); *p_tfm = tfm; } @@ -388,18 +391,22 @@ static int seg6_hmac_init_algo(void) algo->shashs = alloc_percpu(struct shash_desc *); if (!algo->shashs) - return -ENOMEM; + goto error_out; for_each_possible_cpu(cpu) { shash = kzalloc_node(shsize, GFP_KERNEL, cpu_to_node(cpu)); if (!shash) - return -ENOMEM; + goto error_out; *per_cpu_ptr(algo->shashs, cpu) = shash; } } return 0; + +error_out: + seg6_hmac_exit(); + return ret; } int __init seg6_hmac_init(void) @@ -421,22 +428,29 @@ EXPORT_SYMBOL(seg6_hmac_net_init); void seg6_hmac_exit(void) { struct seg6_hmac_algo *algo = NULL; + struct crypto_shash *tfm; + struct shash_desc *shash; int i, alg_count, cpu; alg_count = ARRAY_SIZE(hmac_algos); for (i = 0; i < alg_count; i++) { algo = &hmac_algos[i]; - for_each_possible_cpu(cpu) { - struct crypto_shash *tfm; - struct shash_desc *shash; - shash = *per_cpu_ptr(algo->shashs, cpu); - kfree(shash); - tfm = *per_cpu_ptr(algo->tfms, cpu); - crypto_free_shash(tfm); + if (algo->shashs) { + for_each_possible_cpu(cpu) { + shash = *per_cpu_ptr(algo->shashs, cpu); + kfree(shash); + } + free_percpu(algo->shashs); + } + + if (algo->tfms) { + for_each_possible_cpu(cpu) { + tfm = *per_cpu_ptr(algo->tfms, cpu); + crypto_free_shash(tfm); + } + free_percpu(algo->tfms); } - free_percpu(algo->tfms); - free_percpu(algo->shashs); } } EXPORT_SYMBOL(seg6_hmac_exit); -- 2.34.1

2 1

[PATCH openEuler-22.03-LTS-SP1] ipv6: sr: fix memleak in seg6_hmac_init_algo
by Zhengchao Shao 13 Jul '24

13 Jul '24

From: Hangbin Liu <liuhangbin(a)gmail.com> stable inclusion from stable-v5.10.219 commit daf341e0a2318b813427d5a78788c86f4a7f02be category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAC3N0 CVE: CVE-2024-39489 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… --------------------------- [ Upstream commit efb9f4f19f8e37fde43dfecebc80292d179f56c6 ] seg6_hmac_init_algo returns without cleaning up the previous allocations if one fails, so it's going to leak all that memory and the crypto tfms. Update seg6_hmac_exit to only free the memory when allocated, so we can reuse the code directly. Fixes: bf355b8d2c30 ("ipv6: sr: add core files for SR HMAC support") Reported-by: Sabrina Dubroca <sd(a)queasysnail.net> Closes: https://lore.kernel.org/netdev/Zj3bh-gE7eT6V6aH@hog/ Signed-off-by: Hangbin Liu <liuhangbin(a)gmail.com> Reviewed-by: Simon Horman <horms(a)kernel.org> Reviewed-by: Sabrina Dubroca <sd(a)queasysnail.net> Link: https://lore.kernel.org/r/20240517005435.2600277-1-liuhangbin@gmail.com Signed-off-by: Paolo Abeni <pabeni(a)redhat.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zhengchao Shao <shaozhengchao(a)huawei.com> --- net/ipv6/seg6_hmac.c | 42 ++++++++++++++++++++++++++++-------------- 1 file changed, 28 insertions(+), 14 deletions(-) diff --git a/net/ipv6/seg6_hmac.c b/net/ipv6/seg6_hmac.c index d43c50a7310d..3c3800223e0e 100644 --- a/net/ipv6/seg6_hmac.c +++ b/net/ipv6/seg6_hmac.c @@ -354,6 +354,7 @@ static int seg6_hmac_init_algo(void) struct crypto_shash *tfm; struct shash_desc *shash; int i, alg_count, cpu; + int ret = -ENOMEM; alg_count = ARRAY_SIZE(hmac_algos); @@ -364,12 +365,14 @@ static int seg6_hmac_init_algo(void) algo = &hmac_algos[i]; algo->tfms = alloc_percpu(struct crypto_shash *); if (!algo->tfms) - return -ENOMEM; + goto error_out; for_each_possible_cpu(cpu) { tfm = crypto_alloc_shash(algo->name, 0, 0); - if (IS_ERR(tfm)) - return PTR_ERR(tfm); + if (IS_ERR(tfm)) { + ret = PTR_ERR(tfm); + goto error_out; + } p_tfm = per_cpu_ptr(algo->tfms, cpu); *p_tfm = tfm; } @@ -381,18 +384,22 @@ static int seg6_hmac_init_algo(void) algo->shashs = alloc_percpu(struct shash_desc *); if (!algo->shashs) - return -ENOMEM; + goto error_out; for_each_possible_cpu(cpu) { shash = kzalloc_node(shsize, GFP_KERNEL, cpu_to_node(cpu)); if (!shash) - return -ENOMEM; + goto error_out; *per_cpu_ptr(algo->shashs, cpu) = shash; } } return 0; + +error_out: + seg6_hmac_exit(); + return ret; } int __init seg6_hmac_init(void) @@ -410,22 +417,29 @@ int __net_init seg6_hmac_net_init(struct net *net) void seg6_hmac_exit(void) { struct seg6_hmac_algo *algo = NULL; + struct crypto_shash *tfm; + struct shash_desc *shash; int i, alg_count, cpu; alg_count = ARRAY_SIZE(hmac_algos); for (i = 0; i < alg_count; i++) { algo = &hmac_algos[i]; - for_each_possible_cpu(cpu) { - struct crypto_shash *tfm; - struct shash_desc *shash; - shash = *per_cpu_ptr(algo->shashs, cpu); - kfree(shash); - tfm = *per_cpu_ptr(algo->tfms, cpu); - crypto_free_shash(tfm); + if (algo->shashs) { + for_each_possible_cpu(cpu) { + shash = *per_cpu_ptr(algo->shashs, cpu); + kfree(shash); + } + free_percpu(algo->shashs); + } + + if (algo->tfms) { + for_each_possible_cpu(cpu) { + tfm = *per_cpu_ptr(algo->tfms, cpu); + crypto_free_shash(tfm); + } + free_percpu(algo->tfms); } - free_percpu(algo->tfms); - free_percpu(algo->shashs); } } EXPORT_SYMBOL(seg6_hmac_exit); -- 2.34.1

2 1

[PATCH OLK-5.10] ipv6: sr: fix memleak in seg6_hmac_init_algo
by Zhengchao Shao 13 Jul '24

13 Jul '24

From: Hangbin Liu <liuhangbin(a)gmail.com> stable inclusion from stable-v5.10.219 commit daf341e0a2318b813427d5a78788c86f4a7f02be category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAC3N0 CVE: CVE-2024-39489 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… --------------------------- [ Upstream commit efb9f4f19f8e37fde43dfecebc80292d179f56c6 ] seg6_hmac_init_algo returns without cleaning up the previous allocations if one fails, so it's going to leak all that memory and the crypto tfms. Update seg6_hmac_exit to only free the memory when allocated, so we can reuse the code directly. Fixes: bf355b8d2c30 ("ipv6: sr: add core files for SR HMAC support") Reported-by: Sabrina Dubroca <sd(a)queasysnail.net> Closes: https://lore.kernel.org/netdev/Zj3bh-gE7eT6V6aH@hog/ Signed-off-by: Hangbin Liu <liuhangbin(a)gmail.com> Reviewed-by: Simon Horman <horms(a)kernel.org> Reviewed-by: Sabrina Dubroca <sd(a)queasysnail.net> Link: https://lore.kernel.org/r/20240517005435.2600277-1-liuhangbin@gmail.com Signed-off-by: Paolo Abeni <pabeni(a)redhat.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zhengchao Shao <shaozhengchao(a)huawei.com> --- net/ipv6/seg6_hmac.c | 42 ++++++++++++++++++++++++++++-------------- 1 file changed, 28 insertions(+), 14 deletions(-) diff --git a/net/ipv6/seg6_hmac.c b/net/ipv6/seg6_hmac.c index d43c50a7310d..3c3800223e0e 100644 --- a/net/ipv6/seg6_hmac.c +++ b/net/ipv6/seg6_hmac.c @@ -354,6 +354,7 @@ static int seg6_hmac_init_algo(void) struct crypto_shash *tfm; struct shash_desc *shash; int i, alg_count, cpu; + int ret = -ENOMEM; alg_count = ARRAY_SIZE(hmac_algos); @@ -364,12 +365,14 @@ static int seg6_hmac_init_algo(void) algo = &hmac_algos[i]; algo->tfms = alloc_percpu(struct crypto_shash *); if (!algo->tfms) - return -ENOMEM; + goto error_out; for_each_possible_cpu(cpu) { tfm = crypto_alloc_shash(algo->name, 0, 0); - if (IS_ERR(tfm)) - return PTR_ERR(tfm); + if (IS_ERR(tfm)) { + ret = PTR_ERR(tfm); + goto error_out; + } p_tfm = per_cpu_ptr(algo->tfms, cpu); *p_tfm = tfm; } @@ -381,18 +384,22 @@ static int seg6_hmac_init_algo(void) algo->shashs = alloc_percpu(struct shash_desc *); if (!algo->shashs) - return -ENOMEM; + goto error_out; for_each_possible_cpu(cpu) { shash = kzalloc_node(shsize, GFP_KERNEL, cpu_to_node(cpu)); if (!shash) - return -ENOMEM; + goto error_out; *per_cpu_ptr(algo->shashs, cpu) = shash; } } return 0; + +error_out: + seg6_hmac_exit(); + return ret; } int __init seg6_hmac_init(void) @@ -410,22 +417,29 @@ int __net_init seg6_hmac_net_init(struct net *net) void seg6_hmac_exit(void) { struct seg6_hmac_algo *algo = NULL; + struct crypto_shash *tfm; + struct shash_desc *shash; int i, alg_count, cpu; alg_count = ARRAY_SIZE(hmac_algos); for (i = 0; i < alg_count; i++) { algo = &hmac_algos[i]; - for_each_possible_cpu(cpu) { - struct crypto_shash *tfm; - struct shash_desc *shash; - shash = *per_cpu_ptr(algo->shashs, cpu); - kfree(shash); - tfm = *per_cpu_ptr(algo->tfms, cpu); - crypto_free_shash(tfm); + if (algo->shashs) { + for_each_possible_cpu(cpu) { + shash = *per_cpu_ptr(algo->shashs, cpu); + kfree(shash); + } + free_percpu(algo->shashs); + } + + if (algo->tfms) { + for_each_possible_cpu(cpu) { + tfm = *per_cpu_ptr(algo->tfms, cpu); + crypto_free_shash(tfm); + } + free_percpu(algo->tfms); } - free_percpu(algo->tfms); - free_percpu(algo->shashs); } } EXPORT_SYMBOL(seg6_hmac_exit); -- 2.34.1

2 1

[PATCH OLK-6.6] ipv6: sr: fix memleak in seg6_hmac_init_algo
by Zhengchao Shao 13 Jul '24

13 Jul '24

From: Hangbin Liu <liuhangbin(a)gmail.com> stable inclusion from stable-v6.6.33 commit 0e44d6cbe8de983470c3d2f978649783384fdcb6 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAC3N0 CVE: CVE-2024-39489 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… --------------------------- [ Upstream commit efb9f4f19f8e37fde43dfecebc80292d179f56c6 ] seg6_hmac_init_algo returns without cleaning up the previous allocations if one fails, so it's going to leak all that memory and the crypto tfms. Update seg6_hmac_exit to only free the memory when allocated, so we can reuse the code directly. Fixes: bf355b8d2c30 ("ipv6: sr: add core files for SR HMAC support") Reported-by: Sabrina Dubroca <sd(a)queasysnail.net> Closes: https://lore.kernel.org/netdev/Zj3bh-gE7eT6V6aH@hog/ Signed-off-by: Hangbin Liu <liuhangbin(a)gmail.com> Reviewed-by: Simon Horman <horms(a)kernel.org> Reviewed-by: Sabrina Dubroca <sd(a)queasysnail.net> Link: https://lore.kernel.org/r/20240517005435.2600277-1-liuhangbin@gmail.com Signed-off-by: Paolo Abeni <pabeni(a)redhat.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zhengchao Shao <shaozhengchao(a)huawei.com> --- net/ipv6/seg6_hmac.c | 42 ++++++++++++++++++++++++++++-------------- 1 file changed, 28 insertions(+), 14 deletions(-) diff --git a/net/ipv6/seg6_hmac.c b/net/ipv6/seg6_hmac.c index d43c50a7310d..3c3800223e0e 100644 --- a/net/ipv6/seg6_hmac.c +++ b/net/ipv6/seg6_hmac.c @@ -354,6 +354,7 @@ static int seg6_hmac_init_algo(void) struct crypto_shash *tfm; struct shash_desc *shash; int i, alg_count, cpu; + int ret = -ENOMEM; alg_count = ARRAY_SIZE(hmac_algos); @@ -364,12 +365,14 @@ static int seg6_hmac_init_algo(void) algo = &hmac_algos[i]; algo->tfms = alloc_percpu(struct crypto_shash *); if (!algo->tfms) - return -ENOMEM; + goto error_out; for_each_possible_cpu(cpu) { tfm = crypto_alloc_shash(algo->name, 0, 0); - if (IS_ERR(tfm)) - return PTR_ERR(tfm); + if (IS_ERR(tfm)) { + ret = PTR_ERR(tfm); + goto error_out; + } p_tfm = per_cpu_ptr(algo->tfms, cpu); *p_tfm = tfm; } @@ -381,18 +384,22 @@ static int seg6_hmac_init_algo(void) algo->shashs = alloc_percpu(struct shash_desc *); if (!algo->shashs) - return -ENOMEM; + goto error_out; for_each_possible_cpu(cpu) { shash = kzalloc_node(shsize, GFP_KERNEL, cpu_to_node(cpu)); if (!shash) - return -ENOMEM; + goto error_out; *per_cpu_ptr(algo->shashs, cpu) = shash; } } return 0; + +error_out: + seg6_hmac_exit(); + return ret; } int __init seg6_hmac_init(void) @@ -410,22 +417,29 @@ int __net_init seg6_hmac_net_init(struct net *net) void seg6_hmac_exit(void) { struct seg6_hmac_algo *algo = NULL; + struct crypto_shash *tfm; + struct shash_desc *shash; int i, alg_count, cpu; alg_count = ARRAY_SIZE(hmac_algos); for (i = 0; i < alg_count; i++) { algo = &hmac_algos[i]; - for_each_possible_cpu(cpu) { - struct crypto_shash *tfm; - struct shash_desc *shash; - shash = *per_cpu_ptr(algo->shashs, cpu); - kfree(shash); - tfm = *per_cpu_ptr(algo->tfms, cpu); - crypto_free_shash(tfm); + if (algo->shashs) { + for_each_possible_cpu(cpu) { + shash = *per_cpu_ptr(algo->shashs, cpu); + kfree(shash); + } + free_percpu(algo->shashs); + } + + if (algo->tfms) { + for_each_possible_cpu(cpu) { + tfm = *per_cpu_ptr(algo->tfms, cpu); + crypto_free_shash(tfm); + } + free_percpu(algo->tfms); } - free_percpu(algo->tfms); - free_percpu(algo->shashs); } } EXPORT_SYMBOL(seg6_hmac_exit); -- 2.34.1

2 1

[PATCH OLK-6.6 00/22] support for SMC-D loopback_lo feature
by Zhengchao Shao 13 Jul '24

13 Jul '24

Support for SMC-D loopback_lo feature. Wen Gu (22): net/smc: rename some 'fce' to 'fce_v2x' for clarity net/smc: introduce sub-functions for smc_clc_send_confirm_accept() net/smc: unify the structs of accept or confirm message for v1 and v2 net/smc: support SMCv2.x supplemental features negotiation net/smc: introduce virtual ISM device support feature net/smc: define a reserved CHID range for virtual ISM devices net/smc: compatible with 128-bits extended GID of virtual ISM device net/smc: support extended GID in SMC-D lgr netlink attribute net/smc: manage system EID in SMC stack instead of ISM driver net/smc: fix incorrect SMC-D link group matching logic net/smc: change the term virtual ISM to Emulated-ISM net/smc: decouple ism_client from SMC-D DMB registration net/smc: introduce loopback-ism for SMC intra-OS shortcut net/smc: implement ID-related operations of loopback-ism net/smc: implement DMB-related operations of loopback-ism net/smc: mark optional smcd_ops and check for support when called net/smc: ignore loopback-ism when dumping SMC-D devices net/smc: register loopback-ism into SMC-D device list net/smc: add operations to merge sndbuf with peer DMB net/smc: {at|de}tach sndbuf to peer DMB if supported net/smc: adapt cursor update when sndbuf and peer DMB are merged net/smc: implement DMB-merged operations of loopback-ism drivers/s390/net/ism.h | 7 - drivers/s390/net/ism_drv.c | 59 ++--- include/linux/ism.h | 1 - include/net/smc.h | 33 ++- include/uapi/linux/smc.h | 2 + include/uapi/linux/smc_diag.h | 2 + net/smc/Kconfig | 13 ++ net/smc/Makefile | 1 + net/smc/af_smc.c | 146 ++++++++---- net/smc/smc.h | 10 +- net/smc/smc_cdc.c | 36 ++- net/smc/smc_clc.c | 304 ++++++++++++++---------- net/smc/smc_clc.h | 64 ++--- net/smc/smc_core.c | 104 ++++++++- net/smc/smc_core.h | 19 +- net/smc/smc_diag.c | 9 +- net/smc/smc_ism.c | 136 ++++++++--- net/smc/smc_ism.h | 40 +++- net/smc/smc_loopback.c | 427 ++++++++++++++++++++++++++++++++++ net/smc/smc_loopback.h | 61 +++++ net/smc/smc_pnet.c | 4 +- 21 files changed, 1158 insertions(+), 320 deletions(-) create mode 100644 net/smc/smc_loopback.c create mode 100644 net/smc/smc_loopback.h -- 2.34.1

2 23

[PATCH OLK-6.6 00/22] support for SMC-D loopback_lo feature
by Zhengchao Shao 13 Jul '24

13 Jul '24

Support for SMC-D loopback_lo feature. Wen Gu (22): net/smc: rename some 'fce' to 'fce_v2x' for clarity net/smc: introduce sub-functions for smc_clc_send_confirm_accept() net/smc: unify the structs of accept or confirm message for v1 and v2 net/smc: support SMCv2.x supplemental features negotiation net/smc: introduce virtual ISM device support feature net/smc: define a reserved CHID range for virtual ISM devices net/smc: compatible with 128-bits extended GID of virtual ISM device net/smc: support extended GID in SMC-D lgr netlink attribute net/smc: manage system EID in SMC stack instead of ISM driver net/smc: fix incorrect SMC-D link group matching logic net/smc: change the term virtual ISM to Emulated-ISM net/smc: decouple ism_client from SMC-D DMB registration net/smc: introduce loopback-ism for SMC intra-OS shortcut net/smc: implement ID-related operations of loopback-ism net/smc: implement DMB-related operations of loopback-ism net/smc: mark optional smcd_ops and check for support when called net/smc: ignore loopback-ism when dumping SMC-D devices net/smc: register loopback-ism into SMC-D device list net/smc: add operations to merge sndbuf with peer DMB net/smc: {at|de}tach sndbuf to peer DMB if supported net/smc: adapt cursor update when sndbuf and peer DMB are merged net/smc: implement DMB-merged operations of loopback-ism drivers/s390/net/ism.h | 7 - drivers/s390/net/ism_drv.c | 59 ++--- include/linux/ism.h | 1 - include/net/smc.h | 33 ++- include/uapi/linux/smc.h | 2 + include/uapi/linux/smc_diag.h | 2 + net/smc/Kconfig | 13 ++ net/smc/Makefile | 1 + net/smc/af_smc.c | 146 ++++++++---- net/smc/smc.h | 10 +- net/smc/smc_cdc.c | 36 ++- net/smc/smc_clc.c | 304 ++++++++++++++---------- net/smc/smc_clc.h | 64 ++--- net/smc/smc_core.c | 104 ++++++++- net/smc/smc_core.h | 19 +- net/smc/smc_diag.c | 9 +- net/smc/smc_ism.c | 136 ++++++++--- net/smc/smc_ism.h | 40 +++- net/smc/smc_loopback.c | 427 ++++++++++++++++++++++++++++++++++ net/smc/smc_loopback.h | 61 +++++ net/smc/smc_pnet.c | 4 +- 21 files changed, 1158 insertions(+), 320 deletions(-) create mode 100644 net/smc/smc_loopback.c create mode 100644 net/smc/smc_loopback.h -- 2.34.1

1 9

[PATCH OLK-6.6] kvm: add coda feature
by l00500167 13 Jul '24

13 Jul '24

virtcca feature Signed-off-by: l00500167 <lijunbin4(a)huawei.com> --- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h | 14 ++++++++++++++ include/linux/iommu.h | 3 +++ 2 files changed, 17 insertions(+) diff --git a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h index 859d21729..0f2acb4ed 100644 --- a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h +++ b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h @@ -625,6 +625,9 @@ struct arm_smmu_strtab_l1_desc { struct arm_smmu_ste *l2ptr; dma_addr_t l2ptr_dma; +#ifdef CONFIG_CVM_HOST + bool is_sync; +#endif }; struct arm_smmu_ctx_desc { @@ -750,6 +753,12 @@ struct arm_smmu_device { struct mutex streams_mutex; bool bypass; +#ifdef CONFIG_CVM_HOST + int s_evtq_irq; + int s_gerr_irq; + resource_size_t ioaddr; + uint64_t id; +#endif }; struct arm_smmu_stream { @@ -802,6 +811,11 @@ struct arm_smmu_domain { spinlock_t devices_lock; struct list_head mmu_notifiers; +#ifdef CONFIG_CVM_HOST + bool secure; + struct list_head node; + struct kvm *kvm; +#endif }; static inline struct arm_smmu_domain *to_smmu_domain(struct iommu_domain *dom) diff --git a/include/linux/iommu.h b/include/linux/iommu.h index 1d70dd0d0..e3186fbd4 100644 --- a/include/linux/iommu.h +++ b/include/linux/iommu.h @@ -635,6 +635,9 @@ struct iommu_ops { struct iommu_domain *blocked_domain; struct iommu_domain *default_domain; +#ifdef CONFIG_CVM_HOST + int (*iommu_enable_secure)(struct iommu_domain *domain); +#endif KABI_RESERVE(1) KABI_RESERVE(2) KABI_RESERVE(3) -- 2.25.1

2 1

[openeuler:OLK-5.10] BUILD SUCCESS e716fc2c6d620ad9767378aeb6d9155bf7b8308f
by kernel test robot 13 Jul '24

13 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-5.10 branch HEAD: e716fc2c6d620ad9767378aeb6d9155bf7b8308f !9368 CVE-2024-27416 elapsed time: 731m configs tested: 34 configs skipped: 111 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-14.1.0 arm64 randconfig-001-20240713 gcc-14.1.0 arm64 randconfig-002-20240713 gcc-14.1.0 arm64 randconfig-003-20240713 clang-19 arm64 randconfig-004-20240713 gcc-14.1.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240713 clang-18 x86_64 buildonly-randconfig-002-20240713 clang-18 x86_64 buildonly-randconfig-003-20240713 gcc-13 x86_64 buildonly-randconfig-004-20240713 clang-18 x86_64 buildonly-randconfig-005-20240713 gcc-8 x86_64 buildonly-randconfig-006-20240713 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240713 clang-18 x86_64 randconfig-002-20240713 clang-18 x86_64 randconfig-003-20240713 clang-18 x86_64 randconfig-004-20240713 gcc-13 x86_64 randconfig-005-20240713 clang-18 x86_64 randconfig-006-20240713 clang-18 x86_64 randconfig-011-20240713 clang-18 x86_64 randconfig-012-20240713 clang-18 x86_64 randconfig-013-20240713 gcc-13 x86_64 randconfig-014-20240713 clang-18 x86_64 randconfig-015-20240713 gcc-13 x86_64 randconfig-016-20240713 gcc-13 x86_64 randconfig-071-20240713 gcc-8 x86_64 randconfig-072-20240713 gcc-8 x86_64 randconfig-073-20240713 clang-18 x86_64 randconfig-074-20240713 clang-18 x86_64 randconfig-075-20240713 gcc-13 x86_64 randconfig-076-20240713 clang-18 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6] BUILD REGRESSION 10bfbd53c8aa4c81829876b20e654c4e7c4e7aa7
by kernel test robot 13 Jul '24

13 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-6.6 branch HEAD: 10bfbd53c8aa4c81829876b20e654c4e7c4e7aa7 !5261 [OLK-6.6]Hygon: Some enhancement and bugfixes for HYGON CSV/CSV2 Error/Warning reports: https://lore.kernel.org/oe-kbuild-all/202407130439.z4HZgaFv-lkp@intel.com Error/Warning: (recently discovered and may have been fixed) include/linux/mmzone.h:1788:2: error: #error Allocator MAX_ORDER exceeds SECTION_SIZE Error/Warning ids grouped by kconfigs: recent_errors |-- arm64-allmodconfig | `-- clang:warning:no-such-include-directory:drivers-infiniband-hw-hiroce3-include-mag |-- loongarch-allmodconfig | `-- arch-loongarch-kvm-..-..-..-virt-kvm-kvm_main.c:warning:kvmalloc_array-sizes-specified-with-sizeof-in-the-earlier-argument-and-not-in-the-later-argument |-- loongarch-randconfig-001-20240713 | |-- arch-loongarch-kvm-..-..-..-virt-kvm-kvm_main.c:warning:kvmalloc_array-sizes-specified-with-sizeof-in-the-earlier-argument-and-not-in-the-later-argument | `-- drivers-char-virtio_console.c:warning:u-directive-output-may-be-truncated-writing-between-and-bytes-into-a-region-of-size-between-and |-- loongarch-randconfig-002-20240713 | `-- include-linux-mmzone.h:error:error-Allocator-MAX_ORDER-exceeds-SECTION_SIZE `-- x86_64-allyesconfig `-- drivers-gpu-drm-amd-amdgpu-..-amdkfd-kfd_topology.c:warning:stack-frame-size-()-exceeds-limit-()-in-kfd_topology_add_device elapsed time: 725m configs tested: 14 configs skipped: 97 tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-14.1.0 arm64 randconfig-001-20240713 gcc-14.1.0 arm64 randconfig-002-20240713 gcc-14.1.0 arm64 randconfig-003-20240713 clang-19 arm64 randconfig-004-20240713 gcc-14.1.0 loongarch allmodconfig gcc-14.1.0 loongarch allnoconfig gcc-14.1.0 loongarch randconfig-001-20240713 gcc-14.1.0 loongarch randconfig-002-20240713 gcc-14.1.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 defconfig gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3892/10681] include/linux/mmzone.h:1788:2: error: #error Allocator MAX_ORDER exceeds SECTION_SIZE
by kernel test robot 13 Jul '24

13 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 10bfbd53c8aa4c81829876b20e654c4e7c4e7aa7 commit: c93eb12529e21dbb59796132f4fdf75fad4eddaf [3892/10681] LoongArch: Adapted SECTION_SIZE_BITS with page size config: loongarch-randconfig-002-20240713 (https://download.01.org/0day-ci/archive/20240713/202407130439.z4HZgaFv-lkp@…) compiler: loongarch64-linux-gcc (GCC) 14.1.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20240713/202407130439.z4HZgaFv-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407130439.z4HZgaFv-lkp@intel.com/ All errors (new ones prefixed by >>): In file included from include/linux/gfp.h:7, from include/linux/mm.h:7, from arch/loongarch/kernel/asm-offsets.c:9: >> include/linux/mmzone.h:1788:2: error: #error Allocator MAX_ORDER exceeds SECTION_SIZE 1788 | #error Allocator MAX_ORDER exceeds SECTION_SIZE | ^~~~~ arch/loongarch/kernel/asm-offsets.c:18:6: warning: no previous prototype for 'output_ptreg_defines' [-Wmissing-prototypes] 18 | void output_ptreg_defines(void) | ^~~~~~~~~~~~~~~~~~~~ arch/loongarch/kernel/asm-offsets.c:65:6: warning: no previous prototype for 'output_task_defines' [-Wmissing-prototypes] 65 | void output_task_defines(void) | ^~~~~~~~~~~~~~~~~~~ arch/loongarch/kernel/asm-offsets.c:80:6: warning: no previous prototype for 'output_thread_info_defines' [-Wmissing-prototypes] 80 | void output_thread_info_defines(void) | ^~~~~~~~~~~~~~~~~~~~~~~~~~ arch/loongarch/kernel/asm-offsets.c:96:6: warning: no previous prototype for 'output_thread_defines' [-Wmissing-prototypes] 96 | void output_thread_defines(void) | ^~~~~~~~~~~~~~~~~~~~~ arch/loongarch/kernel/asm-offsets.c:132:6: warning: no previous prototype for 'output_thread_fpu_defines' [-Wmissing-prototypes] 132 | void output_thread_fpu_defines(void) | ^~~~~~~~~~~~~~~~~~~~~~~~~ arch/loongarch/kernel/asm-offsets.c:173:6: warning: no previous prototype for 'output_thread_lbt_defines' [-Wmissing-prototypes] 173 | void output_thread_lbt_defines(void) | ^~~~~~~~~~~~~~~~~~~~~~~~~ arch/loongarch/kernel/asm-offsets.c:183:6: warning: no previous prototype for 'output_mm_defines' [-Wmissing-prototypes] 183 | void output_mm_defines(void) | ^~~~~~~~~~~~~~~~~ arch/loongarch/kernel/asm-offsets.c:215:6: warning: no previous prototype for 'output_sc_defines' [-Wmissing-prototypes] 215 | void output_sc_defines(void) | ^~~~~~~~~~~~~~~~~ arch/loongarch/kernel/asm-offsets.c:223:6: warning: no previous prototype for 'output_signal_defines' [-Wmissing-prototypes] 223 | void output_signal_defines(void) | ^~~~~~~~~~~~~~~~~~~~~ arch/loongarch/kernel/asm-offsets.c:261:6: warning: no previous prototype for 'output_smpboot_defines' [-Wmissing-prototypes] 261 | void output_smpboot_defines(void) | ^~~~~~~~~~~~~~~~~~~~~~ arch/loongarch/kernel/asm-offsets.c:294:6: warning: no previous prototype for 'output_kvm_defines' [-Wmissing-prototypes] 294 | void output_kvm_defines(void) | ^~~~~~~~~~~~~~~~~~ make[3]: *** [scripts/Makefile.build:116: arch/loongarch/kernel/asm-offsets.s] Error 1 shuffle=784060646 make[3]: Target 'prepare' not remade because of errors. make[2]: *** [Makefile:1202: prepare0] Error 2 shuffle=784060646 make[2]: Target 'prepare' not remade because of errors. make[1]: *** [Makefile:234: __sub-make] Error 2 shuffle=784060646 make[1]: Target 'prepare' not remade because of errors. make: *** [Makefile:234: __sub-make] Error 2 shuffle=784060646 make: Target 'prepare' not remade because of errors. vim +1788 include/linux/mmzone.h d41dee369bff3b Andy Whitcroft 2005-06-23 1783 835c134ec4dd75 Mel Gorman 2007-10-16 1784 #define SECTION_BLOCKFLAGS_BITS \ d9c2340052278d Mel Gorman 2007-10-16 1785 ((1UL << (PFN_SECTION_SHIFT - pageblock_order)) * NR_PAGEBLOCK_BITS) 835c134ec4dd75 Mel Gorman 2007-10-16 1786 23baf831a32c04 Kirill A. Shutemov 2023-03-15 1787 #if (MAX_ORDER + PAGE_SHIFT) > SECTION_SIZE_BITS d41dee369bff3b Andy Whitcroft 2005-06-23 @1788 #error Allocator MAX_ORDER exceeds SECTION_SIZE d41dee369bff3b Andy Whitcroft 2005-06-23 1789 #endif d41dee369bff3b Andy Whitcroft 2005-06-23 1790 :::::: The code at line 1788 was first introduced by commit :::::: d41dee369bff3b9dcb6328d4d822926c28cc2594 [PATCH] sparsemem memory model :::::: TO: Andy Whitcroft <apw(a)shadowen.org> :::::: CC: Linus Torvalds <torvalds(a)ppc970.osdl.org> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:openEuler-1.0-LTS] BUILD REGRESSION 07c988f00903b4f0fbf9c31cea24351fbf885b1c
by kernel test robot 13 Jul '24

13 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS branch HEAD: 07c988f00903b4f0fbf9c31cea24351fbf885b1c !9492 netlabel: fix out-of-bounds memory accesses Error/Warning ids grouped by kconfigs: recent_errors `-- arm64-randconfig-001-20240712 `-- drivers-mmc-host-phytium-sdci.c:error:lvalue-required-as-unary-operand elapsed time: 727m configs tested: 31 configs skipped: 111 tested configs: arm64 allmodconfig gcc-14.1.0 arm64 allnoconfig gcc-14.1.0 arm64 randconfig-001-20240712 gcc-14.1.0 arm64 randconfig-002-20240712 gcc-14.1.0 arm64 randconfig-003-20240712 gcc-14.1.0 arm64 randconfig-004-20240712 gcc-14.1.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240712 clang-18 x86_64 buildonly-randconfig-002-20240712 clang-18 x86_64 buildonly-randconfig-003-20240712 clang-18 x86_64 buildonly-randconfig-004-20240712 clang-18 x86_64 buildonly-randconfig-005-20240712 clang-18 x86_64 buildonly-randconfig-006-20240712 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240712 gcc-12 x86_64 randconfig-002-20240712 gcc-13 x86_64 randconfig-003-20240712 gcc-12 x86_64 randconfig-004-20240712 clang-18 x86_64 randconfig-005-20240712 gcc-13 x86_64 randconfig-006-20240712 clang-18 x86_64 randconfig-011-20240712 clang-18 x86_64 randconfig-012-20240712 clang-18 x86_64 randconfig-013-20240712 clang-18 x86_64 randconfig-014-20240712 gcc-13 x86_64 randconfig-015-20240712 clang-18 x86_64 randconfig-016-20240712 clang-18 x86_64 randconfig-071-20240712 gcc-13 x86_64 randconfig-072-20240712 gcc-11 x86_64 randconfig-073-20240712 clang-18 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:openEuler-1.0-LTS 21349/23271] drivers/mmc/host/phytium-sdci.c:1483:23: error: lvalue required as unary '&' operand
by kernel test robot 13 Jul '24

13 Jul '24

tree: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS head: 07c988f00903b4f0fbf9c31cea24351fbf885b1c commit: d65622e6edee11f7fcbd295bdb5aef86e12dfef3 [21349/23271] mmc: add support for Phytium MMC config: arm64-randconfig-001-20240712 (https://download.01.org/0day-ci/archive/20240713/202407130055.5P1q7PDM-lkp@…) compiler: aarch64-linux-gcc (GCC) 14.1.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20240713/202407130055.5P1q7PDM-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407130055.5P1q7PDM-lkp@intel.com/ All errors (new ones prefixed by >>): drivers/mmc/host/phytium-sdci.c: In function 'phytium_sdci_start_data': drivers/mmc/host/phytium-sdci.c:271:14: warning: variable 'read' set but not used [-Wunused-but-set-variable] 271 | bool read, res; | ^~~~ drivers/mmc/host/phytium-sdci.c: In function 'phytium_sdci_dma_irq': drivers/mmc/host/phytium-sdci.c:1018:29: warning: variable 'cmd' set but not used [-Wunused-but-set-variable] 1018 | struct mmc_command *cmd; | ^~~ drivers/mmc/host/phytium-sdci.c: At top level: >> drivers/mmc/host/phytium-sdci.c:1483:23: error: lvalue required as unary '&' operand 1483 | .pm = &phytium_sdci_dev_pm_ops, | ^ vim +1483 drivers/mmc/host/phytium-sdci.c 1475 1476 static struct platform_driver phytium_sdci_driver = { 1477 .probe = phytium_sdci_probe, 1478 .remove = phytium_sdci_remove, 1479 .driver = { 1480 .name = "sdci-phytium", 1481 .of_match_table = phytium_sdci_of_ids, 1482 .acpi_match_table = phytium_sdci_acpi_ids, > 1483 .pm = &phytium_sdci_dev_pm_ops, 1484 }, 1485 }; 1486 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 10626/10665] drivers/gpu/drm/amd/amdgpu/../amdkfd/kfd_topology.c:1922:5: warning: stack frame size (2200) exceeds limit (2048) in 'kfd_topology_add_device'
by kernel test robot 12 Jul '24

12 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 57aa1dda67c88842ffde6304bf732c7d7c81c211 commit: 241ad43fe7e9c24d5ba4cdd1ec22e731cdd22d14 [10626/10665] Compiler: Add clang's PGO support for kernel. config: x86_64-allyesconfig (https://download.01.org/0day-ci/archive/20240712/202407122247.S82V5Eh3-lkp@…) compiler: clang version 18.1.5 (https://github.com/llvm/llvm-project 617a15a9eac96088ae5e9134248d8236e34b91b1) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20240712/202407122247.S82V5Eh3-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407122247.S82V5Eh3-lkp@intel.com/ All warnings (new ones prefixed by >>): >> drivers/gpu/drm/amd/amdgpu/../amdkfd/kfd_topology.c:1922:5: warning: stack frame size (2200) exceeds limit (2048) in 'kfd_topology_add_device' [-Wframe-larger-than] 1922 | int kfd_topology_add_device(struct kfd_node *gpu) | ^ 1 warning generated. vim +/kfd_topology_add_device +1922 drivers/gpu/drm/amd/amdgpu/../amdkfd/kfd_topology.c d230f1bfe7a197 Jonathan Kim 2022-03-25 1921 8dc1db3172ae2f Mukul Joshi 2022-09-14 @1922 int kfd_topology_add_device(struct kfd_node *gpu) f701acb6a4ed0a Felix Kuehling 2022-11-16 1923 { f701acb6a4ed0a Felix Kuehling 2022-11-16 1924 uint32_t gpu_id; f701acb6a4ed0a Felix Kuehling 2022-11-16 1925 struct kfd_topology_device *dev; f701acb6a4ed0a Felix Kuehling 2022-11-16 1926 struct kfd_cu_info cu_info; f701acb6a4ed0a Felix Kuehling 2022-11-16 1927 int res = 0; f701acb6a4ed0a Felix Kuehling 2022-11-16 1928 int i; f701acb6a4ed0a Felix Kuehling 2022-11-16 1929 const char *asic_name = amdgpu_asic_name[gpu->adev->asic_type]; f701acb6a4ed0a Felix Kuehling 2022-11-16 1930 f701acb6a4ed0a Felix Kuehling 2022-11-16 1931 gpu_id = kfd_generate_gpu_id(gpu); 400a39f1ec43d2 James Zhu 2023-08-09 1932 if (gpu->xcp && !gpu->xcp->ddev) { 400a39f1ec43d2 James Zhu 2023-08-09 1933 dev_warn(gpu->adev->dev, 400a39f1ec43d2 James Zhu 2023-08-09 1934 "Won't add GPU (ID: 0x%x) to topology since it has no drm node assigned.", 400a39f1ec43d2 James Zhu 2023-08-09 1935 gpu_id); 400a39f1ec43d2 James Zhu 2023-08-09 1936 return 0; 400a39f1ec43d2 James Zhu 2023-08-09 1937 } else { f701acb6a4ed0a Felix Kuehling 2022-11-16 1938 pr_debug("Adding new GPU (ID: 0x%x) to topology\n", gpu_id); 400a39f1ec43d2 James Zhu 2023-08-09 1939 } f701acb6a4ed0a Felix Kuehling 2022-11-16 1940 f701acb6a4ed0a Felix Kuehling 2022-11-16 1941 /* Check to see if this gpu device exists in the topology_device_list. f701acb6a4ed0a Felix Kuehling 2022-11-16 1942 * If so, assign the gpu to that device, f701acb6a4ed0a Felix Kuehling 2022-11-16 1943 * else create a Virtual CRAT for this gpu device and then parse that f701acb6a4ed0a Felix Kuehling 2022-11-16 1944 * CRAT to create a new topology device. Once created assign the gpu to f701acb6a4ed0a Felix Kuehling 2022-11-16 1945 * that topology device f701acb6a4ed0a Felix Kuehling 2022-11-16 1946 */ f701acb6a4ed0a Felix Kuehling 2022-11-16 1947 down_write(&topology_lock); f701acb6a4ed0a Felix Kuehling 2022-11-16 1948 dev = kfd_assign_gpu(gpu); f701acb6a4ed0a Felix Kuehling 2022-11-16 1949 if (!dev) f701acb6a4ed0a Felix Kuehling 2022-11-16 1950 res = kfd_topology_add_device_locked(gpu, gpu_id, &dev); c0cc999f3c32e6 Ma Jun 2022-11-02 1951 up_write(&topology_lock); f701acb6a4ed0a Felix Kuehling 2022-11-16 1952 if (res) f701acb6a4ed0a Felix Kuehling 2022-11-16 1953 return res; 5b5c4e40a37e85 Evgeny Pinchuk 2014-07-16 1954 5b5c4e40a37e85 Evgeny Pinchuk 2014-07-16 1955 dev->gpu_id = gpu_id; 5b5c4e40a37e85 Evgeny Pinchuk 2014-07-16 1956 gpu->id = gpu_id; 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1957 0f28cca87e9afc Ramesh Errabolu 2022-05-26 1958 kfd_dev_create_p2p_links(); 0f28cca87e9afc Ramesh Errabolu 2022-05-26 1959 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1960 /* TODO: Move the following lines to function 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1961 * kfd_add_non_crat_information 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1962 */ 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1963 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1964 /* Fill-in additional information that is not available in CRAT but 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1965 * needed for the topology 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1966 */ 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1967 574c4183ef7511 Graham Sider 2021-10-19 1968 amdgpu_amdkfd_get_cu_info(dev->gpu->adev, &cu_info); c181159a5b1e1e Yong Zhao 2019-08-01 1969 b7675b7bbc3c4c Graham Sider 2021-11-11 1970 for (i = 0; i < KFD_TOPOLOGY_PUBLIC_NAME_SIZE-1; i++) { b7675b7bbc3c4c Graham Sider 2021-11-11 1971 dev->node_props.name[i] = __tolower(asic_name[i]); b7675b7bbc3c4c Graham Sider 2021-11-11 1972 if (asic_name[i] == '\0') b7675b7bbc3c4c Graham Sider 2021-11-11 1973 break; b7675b7bbc3c4c Graham Sider 2021-11-11 1974 } b7675b7bbc3c4c Graham Sider 2021-11-11 1975 dev->node_props.name[i] = '\0'; c181159a5b1e1e Yong Zhao 2019-08-01 1976 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1977 dev->node_props.simd_arrays_per_engine = 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1978 cu_info.num_shader_arrays_per_engine; 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1979 8dc1db3172ae2f Mukul Joshi 2022-09-14 1980 dev->node_props.gfx_target_version = 8dc1db3172ae2f Mukul Joshi 2022-09-14 1981 gpu->kfd->device_info.gfx_target_version; d69a3b762dc4c9 Mukul Joshi 2022-05-09 1982 dev->node_props.vendor_id = gpu->adev->pdev->vendor; d69a3b762dc4c9 Mukul Joshi 2022-05-09 1983 dev->node_props.device_id = gpu->adev->pdev->device; c6d1ec4134edc1 Joseph Greathouse 2020-04-16 1984 dev->node_props.capability |= 02274fc0f67259 Graham Sider 2021-11-05 1985 ((dev->gpu->adev->rev_id << HSA_CAP_ASIC_REVISION_SHIFT) & c6d1ec4134edc1 Joseph Greathouse 2020-04-16 1986 HSA_CAP_ASIC_REVISION_MASK); 92085240ef9c0e Jonathan Kim 2022-05-03 1987 d69a3b762dc4c9 Mukul Joshi 2022-05-09 1988 dev->node_props.location_id = pci_dev_id(gpu->adev->pdev); 92085240ef9c0e Jonathan Kim 2022-05-03 1989 if (KFD_GC_VERSION(dev->gpu->kfd) == IP_VERSION(9, 4, 3)) 92085240ef9c0e Jonathan Kim 2022-05-03 1990 dev->node_props.location_id |= dev->gpu->node_id; 92085240ef9c0e Jonathan Kim 2022-05-03 1991 d69a3b762dc4c9 Mukul Joshi 2022-05-09 1992 dev->node_props.domain = pci_domain_nr(gpu->adev->pdev->bus); 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1993 dev->node_props.max_engine_clk_fcompute = 574c4183ef7511 Graham Sider 2021-10-19 1994 amdgpu_amdkfd_get_max_engine_clock_in_mhz(dev->gpu->adev); 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1995 dev->node_props.max_engine_clk_ccompute = 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1996 cpufreq_quick_get_max(0) / 1000; a476c0c645535c Philip Yang 2023-02-23 1997 a476c0c645535c Philip Yang 2023-02-23 1998 if (gpu->xcp) a476c0c645535c Philip Yang 2023-02-23 1999 dev->node_props.drm_render_minor = gpu->xcp->ddev->render->index; a476c0c645535c Philip Yang 2023-02-23 2000 else 7c9b717196b1af Oak Zeng 2018-03-15 2001 dev->node_props.drm_render_minor = 8dc1db3172ae2f Mukul Joshi 2022-09-14 2002 gpu->kfd->shared_resources.drm_render_minor; 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2003 8dc1db3172ae2f Mukul Joshi 2022-09-14 2004 dev->node_props.hive_id = gpu->kfd->hive_id; ee2f17f4d02b14 Amber Lin 2021-11-18 2005 dev->node_props.num_sdma_engines = kfd_get_num_sdma_engines(gpu); 14568cf6583e9d Oak Zeng 2019-02-08 2006 dev->node_props.num_sdma_xgmi_engines = ee2f17f4d02b14 Amber Lin 2021-11-18 2007 kfd_get_num_xgmi_sdma_engines(gpu); bb71c74db3c554 Huang Rui 2019-12-16 2008 dev->node_props.num_sdma_queues_per_engine = 8dc1db3172ae2f Mukul Joshi 2022-09-14 2009 gpu->kfd->device_info.num_sdma_queues_per_engine - 8dc1db3172ae2f Mukul Joshi 2022-09-14 2010 gpu->kfd->device_info.num_reserved_sdma_queues_per_engine; 29633d0e204df1 Joseph Greathouse 2020-01-15 2011 dev->node_props.num_gws = (dev->gpu->gws && 29e764621bbcd4 Oak Zeng 2019-05-03 2012 dev->gpu->dqm->sched_policy != KFD_SCHED_POLICY_NO_HWS) ? 02274fc0f67259 Graham Sider 2021-11-05 2013 dev->gpu->adev->gds.gws_size : 0; e6945304187dea Yong Zhao 2020-01-30 2014 dev->node_props.num_cp_queues = get_cp_queues_num(dev->gpu->dqm); 0c1690e38b5e68 Shaoyun Liu 2018-07-06 2015 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2016 kfd_fill_mem_clk_max_info(dev); 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2017 kfd_fill_iolink_non_crat_info(dev); 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2018 7eb0502ac0538e Graham Sider 2021-11-10 2019 switch (dev->gpu->adev->asic_type) { 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2020 case CHIP_KAVERI: 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2021 case CHIP_HAWAII: 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2022 case CHIP_TONGA: 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2023 dev->node_props.capability |= ((HSA_CAP_DOORBELL_TYPE_PRE_1_0 << 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2024 HSA_CAP_DOORBELL_TYPE_TOTALBITS_SHIFT) & 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2025 HSA_CAP_DOORBELL_TYPE_TOTALBITS_MASK); 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2026 break; 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2027 case CHIP_CARRIZO: 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2028 case CHIP_FIJI: 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2029 case CHIP_POLARIS10: 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2030 case CHIP_POLARIS11: 846a44d7e918a4 Gang Ba 2018-09-05 2031 case CHIP_POLARIS12: ed81cd6e0e9f37 Kent Russell 2019-03-21 2032 case CHIP_VEGAM: 42aa8793d795f1 Felix Kuehling 2017-12-08 2033 pr_debug("Adding doorbell packet type capability\n"); 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2034 dev->node_props.capability |= ((HSA_CAP_DOORBELL_TYPE_1_0 << 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2035 HSA_CAP_DOORBELL_TYPE_TOTALBITS_SHIFT) & 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2036 HSA_CAP_DOORBELL_TYPE_TOTALBITS_MASK); 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2037 break; e4804a39ba5f72 Graham Sider 2021-10-28 2038 default: d230f1bfe7a197 Jonathan Kim 2022-03-25 2039 if (KFD_GC_VERSION(dev->gpu) < IP_VERSION(9, 0, 1)) 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2040 WARN(1, "Unexpected ASIC family %u", 7eb0502ac0538e Graham Sider 2021-11-10 2041 dev->gpu->adev->asic_type); d230f1bfe7a197 Jonathan Kim 2022-03-25 2042 else d230f1bfe7a197 Jonathan Kim 2022-03-25 2043 kfd_topology_set_capabilities(dev); 7639a8c420f04c Ben Goz 2015-06-07 2044 } 7639a8c420f04c Ben Goz 2015-06-07 2045 1ae99eab34f90c Oak Zeng 2019-06-10 2046 /* 1ae99eab34f90c Oak Zeng 2019-06-10 2047 * Overwrite ATS capability according to needs_iommu_device to fix 1ae99eab34f90c Oak Zeng 2019-06-10 2048 * potential missing corresponding bit in CRAT of BIOS. 1ae99eab34f90c Oak Zeng 2019-06-10 2049 */ 1ae99eab34f90c Oak Zeng 2019-06-10 2050 dev->node_props.capability &= ~HSA_CAP_ATS_PRESENT; 1ae99eab34f90c Oak Zeng 2019-06-10 2051 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2052 /* Fix errors in CZ CRAT. 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2053 * simd_count: Carrizo CRAT reports wrong simd_count, probably 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2054 * because it doesn't consider masked out CUs 70f372bffcc84c Philip Cox 2017-12-08 2055 * max_waves_per_simd: Carrizo reports wrong max_waves_per_simd 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2056 */ 7eb0502ac0538e Graham Sider 2021-11-10 2057 if (dev->gpu->adev->asic_type == CHIP_CARRIZO) { 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2058 dev->node_props.simd_count = 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2059 cu_info.simd_per_cu * cu_info.cu_active_number; 70f372bffcc84c Philip Cox 2017-12-08 2060 dev->node_props.max_waves_per_simd = 10; 70f372bffcc84c Philip Cox 2017-12-08 2061 } 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2062 5436ab94cd9460 Stanley.Yang 2020-08-17 2063 /* kfd only concerns sram ecc on GFX and HBM ecc on UMC */ 0dee45a25a63f7 Eric Huang 2019-01-11 2064 dev->node_props.capability |= 56c5977eae8799 Graham Sider 2021-10-19 2065 ((dev->gpu->adev->ras_enabled & BIT(AMDGPU_RAS_BLOCK__GFX)) != 0) ? 0dee45a25a63f7 Eric Huang 2019-01-11 2066 HSA_CAP_SRAM_EDCSUPPORTED : 0; 56c5977eae8799 Graham Sider 2021-10-19 2067 dev->node_props.capability |= 56c5977eae8799 Graham Sider 2021-10-19 2068 ((dev->gpu->adev->ras_enabled & BIT(AMDGPU_RAS_BLOCK__UMC)) != 0) ? 0dee45a25a63f7 Eric Huang 2019-01-11 2069 HSA_CAP_MEM_EDCSUPPORTED : 0; 0dee45a25a63f7 Eric Huang 2019-01-11 2070 046e674b961594 Graham Sider 2021-11-09 2071 if (KFD_GC_VERSION(dev->gpu) != IP_VERSION(9, 0, 1)) 56c5977eae8799 Graham Sider 2021-10-19 2072 dev->node_props.capability |= (dev->gpu->adev->ras_enabled != 0) ? 0dee45a25a63f7 Eric Huang 2019-01-11 2073 HSA_CAP_RASEVENTNOTIFY : 0; 0dee45a25a63f7 Eric Huang 2019-01-11 2074 610dab118ff501 Philip Yang 2023-03-31 2075 if (KFD_IS_SVM_API_SUPPORTED(dev->gpu->adev)) 4c166eb95decf0 Philip Yang 2020-12-09 2076 dev->node_props.capability |= HSA_CAP_SVMAPI_SUPPORTED; 4c166eb95decf0 Philip Yang 2020-12-09 2077 03d400e7605e3d Alex Sierra 2023-06-15 2078 if (dev->gpu->adev->gmc.is_app_apu || 03d400e7605e3d Alex Sierra 2023-06-15 2079 dev->gpu->adev->gmc.xgmi.connected_to_cpu) 03d400e7605e3d Alex Sierra 2023-06-15 2080 dev->node_props.capability |= HSA_CAP_FLAGS_COHERENTHOSTACCESS; 03d400e7605e3d Alex Sierra 2023-06-15 2081 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2082 kfd_debug_print_topology(); 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2083 5b5c4e40a37e85 Evgeny Pinchuk 2014-07-16 2084 kfd_notify_gpu_change(gpu_id, 1); f701acb6a4ed0a Felix Kuehling 2022-11-16 2085 7d4f8db4a1448e Dan Carpenter 2022-11-25 2086 return 0; 5b5c4e40a37e85 Evgeny Pinchuk 2014-07-16 2087 } 5b5c4e40a37e85 Evgeny Pinchuk 2014-07-16 2088 :::::: The code at line 1922 was first introduced by commit :::::: 8dc1db3172ae2f17ae71e33b608a33411ce8a1aa drm/amdkfd: Introduce kfd_node struct (v5) :::::: TO: Mukul Joshi <mukul.joshi(a)amd.com> :::::: CC: Alex Deucher <alexander.deucher(a)amd.com> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6] x86: resctrl: Fix illegal access by the chips not having RDT
by Zeng Heng 12 Jul '24

12 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IA7L2U --------------------------- If the chip not having RDT function, resctrl_arch_system_num_rmid_idx() would return 0. rmid_ptrs points to an illegal buffer after kcalloc() allocation, which would cause illegal access fault when accessing. Consequently, when we found resctrl_arch_system_num_rmid_idx() return 0, just return EOPNOTSUPP immediatly and skip initializing the resctrl file system. Fixes: 13e249bf4944 ("x86/resctrl: Move the filesystem portions of resctrl to live in '/fs/'") Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- fs/resctrl/monitor.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/fs/resctrl/monitor.c b/fs/resctrl/monitor.c index fcf2ab18966f..6f93ed1681c4 100644 --- a/fs/resctrl/monitor.c +++ b/fs/resctrl/monitor.c @@ -727,6 +727,9 @@ static int dom_data_init(struct rdt_resource *r) int err = 0, i; u32 idx; + if (!idx_limit) + return -EOPNOTSUPP; + mutex_lock(&rdtgroup_mutex); if (IS_ENABLED(CONFIG_RESCTRL_RMID_DEPENDS_ON_CLOSID)) { u32 *tmp; -- 2.25.1

2 1

[PATCH V2 OLK-5.10] iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
by Zhang Zekun 12 Jul '24

12 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IACKUP ---------------------------------------------- The code is isolated by CONFIG_ARCH_HISI which could also be opened in other platforms . Change the style to identify the hisi platform to minimize the code influence scope. Fixes: 46f0c5798ba5 ("iommu/arm-smmu-v3: Enable iotlb_sync_map according to SMMU_IIDR") Signed-off-by: Zhang Zekun <zhangzekun11(a)huawei.com> --- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 33 ++++++++++++++++----- 1 file changed, 25 insertions(+), 8 deletions(-) diff --git a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c index 7c818a17ca11..c5c25be54fd5 100644 --- a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c +++ b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c @@ -129,6 +129,7 @@ struct arm_smmu_ctx_desc quiet_cd = { 0 }; static struct arm_smmu_option_prop arm_smmu_options[] = { { ARM_SMMU_OPT_SKIP_PREFETCH, "hisilicon,broken-prefetch-cmd" }, { ARM_SMMU_OPT_PAGE0_REGS_ONLY, "cavium,cn9900-broken-page1-regspace"}, + { ARM_SMMU_OPT_SYNC_MAP, "hisilicon,broken-prefetch-pgtbl"}, { 0, NULL}, }; @@ -4948,14 +4949,9 @@ static void hisi_smmu_check_errata(struct arm_smmu_device *smmu) { u32 reg, i; - /* IIDR */ - reg = readl_relaxed(smmu->base + ARM_SMMU_IIDR); - if (!(FIELD_GET(IIDR_VARIANT, reg) == 0x3) || - !(FIELD_GET(IIDR_REVISON, reg) == 0x2)) + if (!(smmu->options & ARM_SMMU_OPT_SYNC_MAP)) return; - smmu->options |= ARM_SMMU_OPT_SYNC_MAP; - reg = readl_relaxed(smmu->base + ARM_SMMU_USER_CFG1); reg = reg & GENMASK(15, 0); for (i = 0; i < 8; i++) { @@ -4981,6 +4977,8 @@ static void hisi_smmu_check_errata(struct arm_smmu_device *smmu) } smmu->options |= ARM_SMMU_OPT_SYNC_BATCH; } +#else +static void hisi_smmu_check_errata(struct arm_smmu_device *smmu) {} #endif static int arm_smmu_device_hw_probe(struct arm_smmu_device *smmu) @@ -5213,9 +5211,7 @@ static int arm_smmu_device_hw_probe(struct arm_smmu_device *smmu) smmu->oas = 48; } -#ifdef CONFIG_HISILICON_ERRATUM_162100602 hisi_smmu_check_errata(smmu); -#endif if (arm_smmu_ops.pgsize_bitmap == -1UL) arm_smmu_ops.pgsize_bitmap = smmu->pgsize_bitmap; @@ -5248,6 +5244,25 @@ static int arm_smmu_device_hw_probe(struct arm_smmu_device *smmu) } #ifdef CONFIG_ACPI +static struct acpi_platform_list arm_smmu_v3_plat_info[] __initdata = { + /* HiSilicon Hip09 Platform */ + {"HISI ", "HIP09 ", 0, ACPI_SIG_IORT, greater_than_or_equal, + "Erratum #162100602", 0}, + {"HISI ", "HIP10 ", 0, ACPI_SIG_IORT, greater_than_or_equal, + "Erratum #162100602", 0}, + {"HISI ", "HIP11 ", 0, ACPI_SIG_IORT, greater_than_or_equal, + "Erratum #162100602", 0}, + { } +}; + +static void acpi_get_hisi_options(struct arm_smmu_device *smmu) +{ + if (acpi_match_platform_list(arm_smmu_v3_plat_info) < 0) + return; + + smmu->options |= ARM_SMMU_OPT_SYNC_MAP; +} + static void acpi_smmu_get_options(u32 model, struct arm_smmu_device *smmu) { switch (model) { @@ -5259,6 +5274,8 @@ static void acpi_smmu_get_options(u32 model, struct arm_smmu_device *smmu) break; } + acpi_get_hisi_options(smmu); + dev_notice(smmu->dev, "option mask 0x%x\n", smmu->options); } -- 2.17.1

2 1

[PATCH OLK-5.10] iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
by Zhang Zekun 12 Jul '24

12 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IACKUP ---------------------------------------------- The code is isolated by CONFIG_ARCH_HISI which could also be opened in other platforms . Change the style to identify the hisi platform to minimize the code influence scope. Fixes: 46f0c5798ba5 ("iommu/arm-smmu-v3: Enable iotlb_sync_map according to SMMU_IIDR") Signed-off-by: Zhang Zekun <zhangzekun11(a)huawei.com> --- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 33 ++++++++++++++++----- 1 file changed, 25 insertions(+), 8 deletions(-) diff --git a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c index 7c818a17ca11..c5c25be54fd5 100644 --- a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c +++ b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c @@ -129,6 +129,7 @@ struct arm_smmu_ctx_desc quiet_cd = { 0 }; static struct arm_smmu_option_prop arm_smmu_options[] = { { ARM_SMMU_OPT_SKIP_PREFETCH, "hisilicon,broken-prefetch-cmd" }, { ARM_SMMU_OPT_PAGE0_REGS_ONLY, "cavium,cn9900-broken-page1-regspace"}, + { ARM_SMMU_OPT_SYNC_MAP, "hisilicon,broken-prefetch-pgtbl"}, { 0, NULL}, }; @@ -4948,14 +4949,9 @@ static void hisi_smmu_check_errata(struct arm_smmu_device *smmu) { u32 reg, i; - /* IIDR */ - reg = readl_relaxed(smmu->base + ARM_SMMU_IIDR); - if (!(FIELD_GET(IIDR_VARIANT, reg) == 0x3) || - !(FIELD_GET(IIDR_REVISON, reg) == 0x2)) + if (!(smmu->options & ARM_SMMU_OPT_SYNC_MAP)) return; - smmu->options |= ARM_SMMU_OPT_SYNC_MAP; - reg = readl_relaxed(smmu->base + ARM_SMMU_USER_CFG1); reg = reg & GENMASK(15, 0); for (i = 0; i < 8; i++) { @@ -4981,6 +4977,8 @@ static void hisi_smmu_check_errata(struct arm_smmu_device *smmu) } smmu->options |= ARM_SMMU_OPT_SYNC_BATCH; } +#else +static void hisi_smmu_check_errata(struct arm_smmu_device *smmu) {} #endif static int arm_smmu_device_hw_probe(struct arm_smmu_device *smmu) @@ -5213,9 +5211,7 @@ static int arm_smmu_device_hw_probe(struct arm_smmu_device *smmu) smmu->oas = 48; } -#ifdef CONFIG_HISILICON_ERRATUM_162100602 hisi_smmu_check_errata(smmu); -#endif if (arm_smmu_ops.pgsize_bitmap == -1UL) arm_smmu_ops.pgsize_bitmap = smmu->pgsize_bitmap; @@ -5248,6 +5244,25 @@ static int arm_smmu_device_hw_probe(struct arm_smmu_device *smmu) } #ifdef CONFIG_ACPI +static struct acpi_platform_list arm_smmu_v3_plat_info[] __initdata = { + /* HiSilicon Hip09 Platform */ + {"HISI ", "HIP09 ", 0, ACPI_SIG_IORT, greater_than_or_equal, + "Erratum #162100602", 0}, + {"HISI ", "HIP10 ", 0, ACPI_SIG_IORT, greater_than_or_equal, + "Erratum #162100602", 0}, + {"HISI ", "HIP11 ", 0, ACPI_SIG_IORT, greater_than_or_equal, + "Erratum #162100602", 0}, + { } +}; + +static void acpi_get_hisi_options(struct arm_smmu_device *smmu) +{ + if (acpi_match_platform_list(arm_smmu_v3_plat_info) < 0) + return; + + smmu->options |= ARM_SMMU_OPT_SYNC_MAP; +} + static void acpi_smmu_get_options(u32 model, struct arm_smmu_device *smmu) { switch (model) { @@ -5259,6 +5274,8 @@ static void acpi_smmu_get_options(u32 model, struct arm_smmu_device *smmu) break; } + acpi_get_hisi_options(smmu); + dev_notice(smmu->dev, "option mask 0x%x\n", smmu->options); } -- 2.17.1

2 1

[PATCH openEuler-22.03-LTS-SP1] Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST
by Yongqiang Liu 12 Jul '24

12 Jul '24

From: Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> stable inclusion from stable-v5.10.212 commit df193568d61234c81de7ed4d540c01975de60277 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q8M1 CVE: CVE-2024-27416 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 7e74aa53a68bf60f6019bd5d9a9a1406ec4d4865 ] If we received HCI_EV_IO_CAPA_REQUEST while HCI_OP_READ_REMOTE_EXT_FEATURES is yet to be responded assume the remote does support SSP since otherwise this event shouldn't be generated. Link: https://lore.kernel.org/linux-bluetooth/CABBYNZ+9UdG1cMZVmdtN3U2aS16AKMCyTA… Fixes: c7f59461f5a7 ("Bluetooth: Fix a refcnt underflow problem for hci_conn") Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Rui Xiang <rui.xiang(a)huawei.com> --- net/bluetooth/hci_event.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/net/bluetooth/hci_event.c b/net/bluetooth/hci_event.c index e01159d8fabf..ff348a8a2424 100644 --- a/net/bluetooth/hci_event.c +++ b/net/bluetooth/hci_event.c @@ -4620,9 +4620,12 @@ static void hci_io_capa_request_evt(struct hci_dev *hdev, struct sk_buff *skb) hci_dev_lock(hdev); conn = hci_conn_hash_lookup_ba(hdev, ACL_LINK, &ev->bdaddr); - if (!conn || !hci_conn_ssp_enabled(conn)) + if (!conn || !hci_dev_test_flag(hdev, HCI_SSP_ENABLED)) goto unlock; + /* Assume remote supports SSP since it has triggered this event */ + set_bit(HCI_CONN_SSP_ENABLED, &conn->flags); + hci_conn_hold(conn); if (!hci_dev_test_flag(hdev, HCI_MGMT)) -- 2.34.1

2 1

[PATCH OLK-5.10] fs: improve dump_mapping() robustness
by Jinjiang Tu 12 Jul '24

12 Jul '24

From: Baolin Wang <baolin.wang(a)linux.alibaba.com> mainline inclusion from mainline-v6.9-rc1 commit 8b3d838139bcd1e552f1899191f734264ce2a1a5 category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IACHGW CVE: NA Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ------------------------------------------- We met a kernel crash issue when running stress-ng testing, and the system crashes when printing the dentry name in dump_mapping(). Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 pc : dentry_name+0xd8/0x224 lr : pointer+0x22c/0x370 sp : ffff800025f134c0 ...... Call trace: dentry_name+0xd8/0x224 pointer+0x22c/0x370 vsnprintf+0x1ec/0x730 vscnprintf+0x2c/0x60 vprintk_store+0x70/0x234 vprintk_emit+0xe0/0x24c vprintk_default+0x3c/0x44 vprintk_func+0x84/0x2d0 printk+0x64/0x88 __dump_page+0x52c/0x530 dump_page+0x14/0x20 set_migratetype_isolate+0x110/0x224 start_isolate_page_range+0xc4/0x20c offline_pages+0x124/0x474 memory_block_offline+0x44/0xf4 memory_subsys_offline+0x3c/0x70 device_offline+0xf0/0x120 ...... The root cause is that, one thread is doing page migration, and we will use the target page's ->mapping field to save 'anon_vma' pointer between page unmap and page move, and now the target page is locked and refcount is 1. Currently, there is another stress-ng thread performing memory hotplug, attempting to offline the target page that is being migrated. It discovers that the refcount of this target page is 1, preventing the offline operation, thus proceeding to dump the page. However, page_mapping() of the target page may return an incorrect file mapping to crash the system in dump_mapping(), since the target page->mapping only saves 'anon_vma' pointer without setting PAGE_MAPPING_ANON flag. The page migration issue has been fixed by commit d1adb25df711 ("mm: migrate: fix getting incorrect page mapping during page migration"). In addition, Matthew suggested we should also improve dump_mapping()'s robustness to resilient against the kernel crash [1]. With checking the 'dentry.parent' and 'dentry.d_name.name' used by dentry_name(), I can see dump_mapping() will output the invalid dentry instead of crashing the system when this issue is reproduced again. [12211.189128] page:fffff7de047741c0 refcount:1 mapcount:0 mapping:ffff989117f55ea0 index:0x1 pfn:0x211dd07 [12211.189144] aops:0x0 ino:1 invalid dentry:74786574206e6870 [12211.189148] flags: 0x57ffffc0000001(locked|node=1|zone=2|lastcpupid=0x1fffff) [12211.189150] page_type: 0xffffffff() [12211.189153] raw: 0057ffffc0000001 0000000000000000 dead000000000122 ffff989117f55ea0 [12211.189154] raw: 0000000000000001 0000000000000001 00000001ffffffff 0000000000000000 [12211.189155] page dumped because: unmovable page [1] https://lore.kernel.org/all/ZXxn%2F0oixJxxAnpF@casper.infradead.org/ Suggested-by: Matthew Wilcox <willy(a)infradead.org> Signed-off-by: Baolin Wang <baolin.wang(a)linux.alibaba.com> Link: https://lore.kernel.org/r/937ab1f87328516821d39be672b6bc18861d9d3e.17053914… Signed-off-by: Christian Brauner <brauner(a)kernel.org> Conflicts: fs/inode.c mm/debug.c [Prior cleanup commit 3e9d80a891df is not merged.] Signed-off-by: Jinjiang Tu <tujinjiang(a)huawei.com> --- mm/debug.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/mm/debug.c b/mm/debug.c index 8a40b3fefbeb..6ead410ec389 100644 --- a/mm/debug.c +++ b/mm/debug.c @@ -150,7 +150,8 @@ void __dump_page(struct page *page, const char *reason) } dentry_ptr = container_of(dentry_first, struct dentry, d_u.d_alias); - if (get_kernel_nofault(dentry, dentry_ptr)) { + if (get_kernel_nofault(dentry, dentry_ptr) || + !dentry.d_parent || !dentry.d_name.name) { pr_warn("aops:%ps ino:%lx with invalid dentry %px\n", a_ops, ino, dentry_ptr); } else { -- 2.25.1

2 1

[PATCH OLK-6.6 0/1] CVE-2024-39478
by Chen Ridong 12 Jul '24

12 Jul '24

*** BLURB HERE *** Jia Jie Ho (1): crypto: starfive - Do not free stack buffer drivers/crypto/starfive/jh7110-rsa.c | 1 - 1 file changed, 1 deletion(-) -- 2.34.1

2 2

[PATCH OLK-6.6] gfs2: Fix potential glock use-after-free on unmount
by Zeng Heng 12 Jul '24

12 Jul '24

From: Andreas Gruenbacher <agruenba(a)redhat.com> stable inclusion from stable-v6.6.33 commit 0636b34b44589b142700ac137b5f69802cfe2e37 category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IA74DQ Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit d98779e687726d8f8860f1c54b5687eec5f63a73 ] When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploiting this behavior to speed up filesystem unmount: gfs2 would simply free glocks it didn't want to unlock and then release the lockspace. This didn't take the bast callbacks for asynchronous lock contention notifications into account, which remain active until until a lock is unlocked or its lockspace is released. To prevent those callbacks from accessing deallocated objects, put the glocks that should not be unlocked on the sd_dead_glocks list, release the lockspace, and only then free those glocks. As an additional measure, ignore unexpected ast and bast callbacks if the receiving glock is dead. Fixes: fb6791d100d1b ("GFS2: skip dlm_unlock calls in unmount") Signed-off-by: Andreas Gruenbacher <agruenba(a)redhat.com> Cc: David Teigland <teigland(a)redhat.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Conflicts: fs/gfs2/glock.c fs/gfs2/glock.h [Resolve conflicts due to several refactor patches not merged.] Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- fs/gfs2/glock.c | 39 ++++++++++++++++++++++++++++++++++----- fs/gfs2/glock.h | 3 ++- fs/gfs2/incore.h | 1 + fs/gfs2/lock_dlm.c | 32 ++++++++++++++++++++++---------- fs/gfs2/ops_fstype.c | 1 + fs/gfs2/super.c | 3 --- 6 files changed, 60 insertions(+), 19 deletions(-) diff --git a/fs/gfs2/glock.c b/fs/gfs2/glock.c index 4a280be229a6..7739e6198d75 100644 --- a/fs/gfs2/glock.c +++ b/fs/gfs2/glock.c @@ -166,19 +166,46 @@ static bool glock_blocked_by_withdraw(struct gfs2_glock *gl) return true; } -void gfs2_glock_free(struct gfs2_glock *gl) +static void __gfs2_glock_free(struct gfs2_glock *gl) { - struct gfs2_sbd *sdp = gl->gl_name.ln_sbd; - gfs2_glock_assert_withdraw(gl, atomic_read(&gl->gl_revokes) == 0); rhashtable_remove_fast(&gl_hash_table, &gl->gl_node, ht_parms); smp_mb(); wake_up_glock(gl); call_rcu(&gl->gl_rcu, gfs2_glock_dealloc); +} + +void gfs2_glock_free(struct gfs2_glock *gl) { + struct gfs2_sbd *sdp = gl->gl_name.ln_sbd; + + __gfs2_glock_free(gl); if (atomic_dec_and_test(&sdp->sd_glock_disposal)) wake_up(&sdp->sd_kill_wait); } +void gfs2_glock_free_later(struct gfs2_glock *gl) { + struct gfs2_sbd *sdp = gl->gl_name.ln_sbd; + + spin_lock(&lru_lock); + list_add(&gl->gl_lru, &sdp->sd_dead_glocks); + spin_unlock(&lru_lock); + if (atomic_dec_and_test(&sdp->sd_glock_disposal)) + wake_up(&sdp->sd_kill_wait); +} + +static void gfs2_free_dead_glocks(struct gfs2_sbd *sdp) +{ + struct list_head *list = &sdp->sd_dead_glocks; + + while(!list_empty(list)) { + struct gfs2_glock *gl; + + gl = list_first_entry(list, struct gfs2_glock, gl_lru); + list_del_init(&gl->gl_lru); + __gfs2_glock_free(gl); + } +} + /** * gfs2_glock_hold() - increment reference count on glock * @gl: The glock to hold @@ -467,7 +494,7 @@ int gfs2_instantiate(struct gfs2_holder *gh) /** * do_promote - promote as many requests as possible on the current queue * @gl: The glock - * + * * Returns true on success (i.e., progress was made or there are no waiters). */ @@ -1468,7 +1495,7 @@ static inline bool pid_is_meaningful(const struct gfs2_holder *gh) * Eventually we should move the recursive locking trap to a * debugging option or something like that. This is the fast * path and needs to have the minimum number of distractions. - * + * */ static inline void add_to_queue(struct gfs2_holder *gh) @@ -2193,6 +2220,8 @@ void gfs2_gl_hash_clear(struct gfs2_sbd *sdp) wait_event_timeout(sdp->sd_kill_wait, atomic_read(&sdp->sd_glock_disposal) == 0, HZ * 600); + gfs2_lm_unmount(sdp); + gfs2_free_dead_glocks(sdp); glock_hash_walk(dump_glock_func, sdp); } diff --git a/fs/gfs2/glock.h b/fs/gfs2/glock.h index c8685ca7d2a2..a5d793026de8 100644 --- a/fs/gfs2/glock.h +++ b/fs/gfs2/glock.h @@ -84,7 +84,7 @@ enum { #define GL_SKIP 0x0100 #define GL_NOPID 0x0200 #define GL_NOCACHE 0x0400 - + /* * lm_async_cb return flags * @@ -266,6 +266,7 @@ extern void gfs2_gl_dq_holders(struct gfs2_sbd *sdp); extern void gfs2_glock_thaw(struct gfs2_sbd *sdp); extern void gfs2_glock_add_to_lru(struct gfs2_glock *gl); extern void gfs2_glock_free(struct gfs2_glock *gl); +extern void gfs2_glock_free_later(struct gfs2_glock *gl); extern int __init gfs2_glock_init(void); extern void gfs2_glock_exit(void); diff --git a/fs/gfs2/incore.h b/fs/gfs2/incore.h index a8c95c5293c6..d364daa87c81 100644 --- a/fs/gfs2/incore.h +++ b/fs/gfs2/incore.h @@ -838,6 +838,7 @@ struct gfs2_sbd { /* For quiescing the filesystem */ struct gfs2_holder sd_freeze_gh; struct mutex sd_freeze_mutex; + struct list_head sd_dead_glocks; char sd_fsname[GFS2_FSNAME_LEN + 3 * sizeof(int) + 2]; char sd_table_name[GFS2_FSNAME_LEN]; diff --git a/fs/gfs2/lock_dlm.c b/fs/gfs2/lock_dlm.c index 59ab18c79889..0bde45fb4963 100644 --- a/fs/gfs2/lock_dlm.c +++ b/fs/gfs2/lock_dlm.c @@ -121,6 +121,11 @@ static void gdlm_ast(void *arg) struct gfs2_glock *gl = arg; unsigned ret = gl->gl_state; + /* If the glock is dead, we only react to a dlm_unlock() reply. */ + if (__lockref_is_dead(&gl->gl_lockref) && + gl->gl_lksb.sb_status != -DLM_EUNLOCK) + return; + gfs2_update_reply_times(gl); BUG_ON(gl->gl_lksb.sb_flags & DLM_SBF_DEMOTED); @@ -171,6 +176,9 @@ static void gdlm_bast(void *arg, int mode) { struct gfs2_glock *gl = arg; + if (__lockref_is_dead(&gl->gl_lockref)) + return; + switch (mode) { case DLM_LOCK_EX: gfs2_glock_cb(gl, LM_ST_UNLOCKED); @@ -291,8 +299,12 @@ static void gdlm_put_lock(struct gfs2_glock *gl) struct lm_lockstruct *ls = &sdp->sd_lockstruct; int error; - if (gl->gl_lksb.sb_lkid == 0) - goto out_free; + BUG_ON(!__lockref_is_dead(&gl->gl_lockref)); + + if (gl->gl_lksb.sb_lkid == 0) { + gfs2_glock_free(gl); + return; + } clear_bit(GLF_BLOCKING, &gl->gl_flags); gfs2_glstats_inc(gl, GFS2_LKS_DCOUNT); @@ -300,13 +312,17 @@ static void gdlm_put_lock(struct gfs2_glock *gl) gfs2_update_request_times(gl); /* don't want to call dlm if we've unmounted the lock protocol */ - if (test_bit(DFL_UNMOUNT, &ls->ls_recover_flags)) - goto out_free; + if (test_bit(DFL_UNMOUNT, &ls->ls_recover_flags)) { + gfs2_glock_free(gl); + return; + } /* don't want to skip dlm_unlock writing the lvb when lock has one */ if (test_bit(SDF_SKIP_DLM_UNLOCK, &sdp->sd_flags) && - !gl->gl_lksb.sb_lvbptr) - goto out_free; + !gl->gl_lksb.sb_lvbptr) { + gfs2_glock_free_later(gl); + return; + } again: error = dlm_unlock(ls->ls_dlm, gl->gl_lksb.sb_lkid, DLM_LKF_VALBLK, @@ -321,10 +337,6 @@ static void gdlm_put_lock(struct gfs2_glock *gl) gl->gl_name.ln_type, (unsigned long long)gl->gl_name.ln_number, error); } - return; - -out_free: - gfs2_glock_free(gl); } static void gdlm_cancel(struct gfs2_glock *gl) diff --git a/fs/gfs2/ops_fstype.c b/fs/gfs2/ops_fstype.c index dd64140ae6d7..c5743f84a10d 100644 --- a/fs/gfs2/ops_fstype.c +++ b/fs/gfs2/ops_fstype.c @@ -136,6 +136,7 @@ static struct gfs2_sbd *init_sbd(struct super_block *sb) atomic_set(&sdp->sd_log_in_flight, 0); init_waitqueue_head(&sdp->sd_log_flush_wait); mutex_init(&sdp->sd_freeze_mutex); + INIT_LIST_HEAD(&sdp->sd_dead_glocks); return sdp; diff --git a/fs/gfs2/super.c b/fs/gfs2/super.c index 5f4ebe279aaa..b590d435a6cb 100644 --- a/fs/gfs2/super.c +++ b/fs/gfs2/super.c @@ -646,10 +646,7 @@ static void gfs2_put_super(struct super_block *sb) gfs2_gl_hash_clear(sdp); truncate_inode_pages_final(&sdp->sd_aspace); gfs2_delete_debugfs_file(sdp); - /* Unmount the locking protocol */ - gfs2_lm_unmount(sdp); - /* At this point, we're through participating in the lockspace */ gfs2_sys_fs_del(sdp); free_sbd(sdp); } -- 2.25.1

2 1

[PATCH OLK-6.6 V3 0/2] Fix xfs file creation issue
by Zizhi Wo 12 Jul '24

12 Jul '24

V3: Add a fix tag that was missing from the second patch. V2: Add a fix tag that was missing from the first patch. V1: Fix main problem. Zizhi Wo (2): Revert "xfs: Fix file creation failure" xfs: Avoid races with cnt_btree lastrec updates fs/xfs/libxfs/xfs_alloc.c | 125 +++++++++++++++++++++++++++++--- fs/xfs/libxfs/xfs_alloc_btree.c | 72 ------------------ fs/xfs/libxfs/xfs_btree.c | 51 ------------- fs/xfs/libxfs/xfs_btree.h | 19 +---- 4 files changed, 115 insertions(+), 152 deletions(-) -- 2.39.2

2 3

[openeuler:OLK-5.10] BUILD SUCCESS 9bb2f255d4cf060692e6f5240ace43b12ac72246
by kernel test robot 12 Jul '24

12 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-5.10 branch HEAD: 9bb2f255d4cf060692e6f5240ace43b12ac72246 !9745 CVE-2024-39469 elapsed time: 732m configs tested: 34 configs skipped: 128 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-14.1.0 arm64 randconfig-001-20240712 gcc-14.1.0 arm64 randconfig-002-20240712 gcc-14.1.0 arm64 randconfig-003-20240712 clang-19 arm64 randconfig-004-20240712 clang-17 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240712 clang-18 x86_64 buildonly-randconfig-002-20240712 clang-18 x86_64 buildonly-randconfig-003-20240712 clang-18 x86_64 buildonly-randconfig-004-20240712 clang-18 x86_64 buildonly-randconfig-005-20240712 clang-18 x86_64 buildonly-randconfig-006-20240712 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240712 gcc-12 x86_64 randconfig-002-20240712 gcc-13 x86_64 randconfig-003-20240712 gcc-12 x86_64 randconfig-004-20240712 clang-18 x86_64 randconfig-005-20240712 gcc-13 x86_64 randconfig-006-20240712 clang-18 x86_64 randconfig-011-20240712 clang-18 x86_64 randconfig-012-20240712 clang-18 x86_64 randconfig-013-20240712 clang-18 x86_64 randconfig-014-20240712 gcc-13 x86_64 randconfig-015-20240712 clang-18 x86_64 randconfig-016-20240712 clang-18 x86_64 randconfig-071-20240712 gcc-13 x86_64 randconfig-072-20240712 gcc-11 x86_64 randconfig-073-20240712 clang-18 x86_64 randconfig-074-20240712 gcc-9 x86_64 randconfig-075-20240712 clang-18 x86_64 randconfig-076-20240712 clang-18 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6 V2 0/2] Fix xfs file creation issue
by Zizhi Wo 12 Jul '24

12 Jul '24

V2: Add a fix tag that was missing from the first patch. V1: Fix main problem. Zizhi Wo (2): Revert "xfs: Fix file creation failure" xfs: Avoid races with cnt_btree lastrec updates fs/xfs/libxfs/xfs_alloc.c | 125 +++++++++++++++++++++++++++++--- fs/xfs/libxfs/xfs_alloc_btree.c | 72 ------------------ fs/xfs/libxfs/xfs_btree.c | 51 ------------- fs/xfs/libxfs/xfs_btree.h | 19 +---- 4 files changed, 115 insertions(+), 152 deletions(-) -- 2.39.2

2 3

[openeuler:openEuler-1.0-LTS] BUILD SUCCESS 8585cfc057fe5efb77b4d3582604b16fdf4ccc09
by kernel test robot 12 Jul '24

12 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS branch HEAD: 8585cfc057fe5efb77b4d3582604b16fdf4ccc09 !9858 khugepaged: fix null-pointer dereference due to race elapsed time: 736m configs tested: 30 configs skipped: 128 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig gcc-14.1.0 arm64 allnoconfig gcc-14.1.0 arm64 randconfig-001-20240712 gcc-14.1.0 arm64 randconfig-002-20240712 gcc-14.1.0 arm64 randconfig-003-20240712 gcc-14.1.0 arm64 randconfig-004-20240712 gcc-14.1.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240712 clang-18 x86_64 buildonly-randconfig-002-20240712 clang-18 x86_64 buildonly-randconfig-003-20240712 clang-18 x86_64 buildonly-randconfig-004-20240712 clang-18 x86_64 buildonly-randconfig-005-20240712 clang-18 x86_64 buildonly-randconfig-006-20240712 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240712 gcc-12 x86_64 randconfig-002-20240712 gcc-13 x86_64 randconfig-003-20240712 gcc-12 x86_64 randconfig-004-20240712 clang-18 x86_64 randconfig-005-20240712 gcc-13 x86_64 randconfig-006-20240712 clang-18 x86_64 randconfig-011-20240712 clang-18 x86_64 randconfig-012-20240712 clang-18 x86_64 randconfig-013-20240712 clang-18 x86_64 randconfig-014-20240712 gcc-13 x86_64 randconfig-015-20240712 clang-18 x86_64 randconfig-016-20240712 clang-18 x86_64 randconfig-071-20240712 gcc-13 x86_64 randconfig-072-20240712 gcc-11 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3761/10661] arch/loongarch/kvm/../../../virt/kvm/kvm_main.c:426:53: warning: 'kvmalloc_array' sizes specified with 'sizeof' in the earlier argument and not in the later argument
by kernel test robot 12 Jul '24

12 Jul '24

Hi Tianrui, First bad commit (maybe != root cause): tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 15f539c4a521c5ae892554d0046e24f050ec0e00 commit: 07db411edd838080fb7c42b9f56bc08dd60d9af6 [3761/10661] LoongArch: KVM: Enable kvm config and add the makefile config: loongarch-randconfig-001-20240711 (https://download.01.org/0day-ci/archive/20240712/202407120630.mHZS1KSZ-lkp@…) compiler: loongarch64-linux-gcc (GCC) 14.1.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20240712/202407120630.mHZS1KSZ-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407120630.mHZS1KSZ-lkp@intel.com/ All warnings (new ones prefixed by >>): arch/loongarch/kvm/../../../virt/kvm/kvm_main.c: In function '__kvm_mmu_topup_memory_cache': >> arch/loongarch/kvm/../../../virt/kvm/kvm_main.c:426:53: warning: 'kvmalloc_array' sizes specified with 'sizeof' in the earlier argument and not in the later argument [-Wcalloc-transposed-args] 426 | mc->objects = kvmalloc_array(sizeof(void *), capacity, gfp); | ^~~~ arch/loongarch/kvm/../../../virt/kvm/kvm_main.c:426:53: note: earlier argument should specify number of elements, later size of each element vim +426 arch/loongarch/kvm/../../../virt/kvm/kvm_main.c 6926f95accee3f Sean Christopherson 2020-07-02 413 837f66c7120754 David Matlack 2022-06-22 414 int __kvm_mmu_topup_memory_cache(struct kvm_mmu_memory_cache *mc, int capacity, int min) 6926f95accee3f Sean Christopherson 2020-07-02 415 { 63f4b210414b65 Paolo Bonzini 2022-07-29 416 gfp_t gfp = mc->gfp_custom ? mc->gfp_custom : GFP_KERNEL_ACCOUNT; 6926f95accee3f Sean Christopherson 2020-07-02 417 void *obj; 6926f95accee3f Sean Christopherson 2020-07-02 418 6926f95accee3f Sean Christopherson 2020-07-02 419 if (mc->nobjs >= min) 6926f95accee3f Sean Christopherson 2020-07-02 420 return 0; 837f66c7120754 David Matlack 2022-06-22 421 837f66c7120754 David Matlack 2022-06-22 422 if (unlikely(!mc->objects)) { 837f66c7120754 David Matlack 2022-06-22 423 if (WARN_ON_ONCE(!capacity)) 837f66c7120754 David Matlack 2022-06-22 424 return -EIO; 837f66c7120754 David Matlack 2022-06-22 425 837f66c7120754 David Matlack 2022-06-22 @426 mc->objects = kvmalloc_array(sizeof(void *), capacity, gfp); 837f66c7120754 David Matlack 2022-06-22 427 if (!mc->objects) 837f66c7120754 David Matlack 2022-06-22 428 return -ENOMEM; 837f66c7120754 David Matlack 2022-06-22 429 837f66c7120754 David Matlack 2022-06-22 430 mc->capacity = capacity; 837f66c7120754 David Matlack 2022-06-22 431 } 837f66c7120754 David Matlack 2022-06-22 432 837f66c7120754 David Matlack 2022-06-22 433 /* It is illegal to request a different capacity across topups. */ 837f66c7120754 David Matlack 2022-06-22 434 if (WARN_ON_ONCE(mc->capacity != capacity)) 837f66c7120754 David Matlack 2022-06-22 435 return -EIO; 837f66c7120754 David Matlack 2022-06-22 436 837f66c7120754 David Matlack 2022-06-22 437 while (mc->nobjs < mc->capacity) { 837f66c7120754 David Matlack 2022-06-22 438 obj = mmu_memory_cache_alloc_obj(mc, gfp); 6926f95accee3f Sean Christopherson 2020-07-02 439 if (!obj) 6926f95accee3f Sean Christopherson 2020-07-02 440 return mc->nobjs >= min ? 0 : -ENOMEM; 6926f95accee3f Sean Christopherson 2020-07-02 441 mc->objects[mc->nobjs++] = obj; 6926f95accee3f Sean Christopherson 2020-07-02 442 } 6926f95accee3f Sean Christopherson 2020-07-02 443 return 0; 6926f95accee3f Sean Christopherson 2020-07-02 444 } 6926f95accee3f Sean Christopherson 2020-07-02 445 :::::: The code at line 426 was first introduced by commit :::::: 837f66c71207542283831d0762c5dca3db5b397a KVM: Allow for different capacities in kvm_mmu_memory_cache structs :::::: TO: David Matlack <dmatlack(a)google.com> :::::: CC: Paolo Bonzini <pbonzini(a)redhat.com> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6] BUILD REGRESSION 15f539c4a521c5ae892554d0046e24f050ec0e00
by kernel test robot 12 Jul '24

12 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-6.6 branch HEAD: 15f539c4a521c5ae892554d0046e24f050ec0e00 !5260 [OLK-6.6] Support live migration for CSV/CSV2 guest, and support rebooting CSV/CSV2 guest Error/Warning reports: https://lore.kernel.org/oe-kbuild-all/202407120045.vP3mrDfe-lkp@intel.com https://lore.kernel.org/oe-kbuild-all/202407120236.foVeyRg9-lkp@intel.com Error/Warning: (recently discovered and may have been fixed) drivers/char/virtio_console.c:1460:63: warning: '%u' directive output may be truncated writing between 1 and 10 bytes into a region of size between 0 and 9 [-Wformat-truncation=] loongarch64-linux-ld: ls2k500sfb.c:(.text+0x1030): undefined reference to `fg_console' ls2k500sfb.c:(.text+0x102c): undefined reference to `fg_console' Error/Warning ids grouped by kconfigs: recent_errors |-- arm64-allmodconfig | `-- clang:warning:no-such-include-directory:drivers-infiniband-hw-hiroce3-include-mag |-- arm64-randconfig-003-20240711 | `-- drivers-char-virtio_console.c:warning:u-directive-output-may-be-truncated-writing-between-and-bytes-into-a-region-of-size-between-and `-- loongarch-randconfig-r133-20240711 |-- loongarch64-linux-ld:ls2k500sfb.c:(.text):undefined-reference-to-fg_console `-- ls2k500sfb.c:(.text):undefined-reference-to-fg_console elapsed time: 737m configs tested: 38 configs skipped: 107 tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-14.1.0 arm64 randconfig-001-20240711 clang-19 arm64 randconfig-002-20240711 gcc-14.1.0 arm64 randconfig-003-20240711 gcc-14.1.0 arm64 randconfig-004-20240711 gcc-14.1.0 loongarch allmodconfig gcc-14.1.0 loongarch allnoconfig gcc-14.1.0 loongarch randconfig-001-20240711 gcc-14.1.0 loongarch randconfig-002-20240711 gcc-14.1.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240711 clang-18 x86_64 buildonly-randconfig-002-20240711 clang-18 x86_64 buildonly-randconfig-003-20240711 clang-18 x86_64 buildonly-randconfig-004-20240711 clang-18 x86_64 buildonly-randconfig-005-20240711 gcc-13 x86_64 buildonly-randconfig-006-20240711 gcc-13 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240711 gcc-13 x86_64 randconfig-002-20240711 gcc-13 x86_64 randconfig-003-20240711 gcc-11 x86_64 randconfig-004-20240711 gcc-9 x86_64 randconfig-005-20240711 clang-18 x86_64 randconfig-006-20240711 gcc-13 x86_64 randconfig-011-20240711 gcc-13 x86_64 randconfig-012-20240711 clang-18 x86_64 randconfig-013-20240711 gcc-13 x86_64 randconfig-014-20240711 clang-18 x86_64 randconfig-015-20240711 clang-18 x86_64 randconfig-016-20240711 gcc-10 x86_64 randconfig-071-20240711 gcc-13 x86_64 randconfig-072-20240711 gcc-13 x86_64 randconfig-073-20240711 clang-18 x86_64 randconfig-074-20240711 gcc-13 x86_64 randconfig-075-20240711 clang-18 x86_64 randconfig-076-20240711 gcc-8 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 2431/10661] drivers/char/virtio_console.c:1460:63: warning: '%u' directive output may be truncated writing between 1 and 10 bytes into a region of size between 0 and 9
by kernel test robot 12 Jul '24

12 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 15f539c4a521c5ae892554d0046e24f050ec0e00 commit: f04c0f3eb9b49427c273cd3e4d5a2ff895855b4b [2431/10661] make OPTIMIZE_INLINING config editable config: arm64-randconfig-003-20240711 (https://download.01.org/0day-ci/archive/20240712/202407120236.foVeyRg9-lkp@…) compiler: aarch64-linux-gcc (GCC) 14.1.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20240712/202407120236.foVeyRg9-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407120236.foVeyRg9-lkp@intel.com/ All warnings (new ones prefixed by >>): drivers/char/virtio_console.c: In function 'add_port.isra': >> drivers/char/virtio_console.c:1460:63: warning: '%u' directive output may be truncated writing between 1 and 10 bytes into a region of size between 0 and 9 [-Wformat-truncation=] 1460 | snprintf(debugfs_name, sizeof(debugfs_name), "vport%up%u", | ^~ drivers/char/virtio_console.c:1460:54: note: directive argument in the range [0, 4294967294] 1460 | snprintf(debugfs_name, sizeof(debugfs_name), "vport%up%u", | ^~~~~~~~~~~~ drivers/char/virtio_console.c:1460:9: note: 'snprintf' output between 9 and 27 bytes into a destination of size 16 1460 | snprintf(debugfs_name, sizeof(debugfs_name), "vport%up%u", | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 1461 | port->portdev->vdev->index, id); | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ vim +1460 drivers/char/virtio_console.c 3eae0adea949d8 Amit Shah 2010-09-02 1354 c446f8fcc9fba3 Amit Shah 2010-05-19 1355 static int add_port(struct ports_device *portdev, u32 id) c446f8fcc9fba3 Amit Shah 2010-05-19 1356 { c446f8fcc9fba3 Amit Shah 2010-05-19 1357 char debugfs_name[16]; c446f8fcc9fba3 Amit Shah 2010-05-19 1358 struct port *port; c446f8fcc9fba3 Amit Shah 2010-05-19 1359 dev_t devt; c446f8fcc9fba3 Amit Shah 2010-05-19 1360 int err; c446f8fcc9fba3 Amit Shah 2010-05-19 1361 c446f8fcc9fba3 Amit Shah 2010-05-19 1362 port = kmalloc(sizeof(*port), GFP_KERNEL); c446f8fcc9fba3 Amit Shah 2010-05-19 1363 if (!port) { c446f8fcc9fba3 Amit Shah 2010-05-19 1364 err = -ENOMEM; c446f8fcc9fba3 Amit Shah 2010-05-19 1365 goto fail; c446f8fcc9fba3 Amit Shah 2010-05-19 1366 } b353a6b8216270 Amit Shah 2010-09-02 1367 kref_init(&port->kref); c446f8fcc9fba3 Amit Shah 2010-05-19 1368 c446f8fcc9fba3 Amit Shah 2010-05-19 1369 port->portdev = portdev; c446f8fcc9fba3 Amit Shah 2010-05-19 1370 port->id = id; c446f8fcc9fba3 Amit Shah 2010-05-19 1371 c446f8fcc9fba3 Amit Shah 2010-05-19 1372 port->name = NULL; c446f8fcc9fba3 Amit Shah 2010-05-19 1373 port->inbuf = NULL; c446f8fcc9fba3 Amit Shah 2010-05-19 1374 port->cons.hvc = NULL; 3eae0adea949d8 Amit Shah 2010-09-02 1375 port->async_queue = NULL; c446f8fcc9fba3 Amit Shah 2010-05-19 1376 9778829cffd4d8 Amit Shah 2010-05-06 1377 port->cons.ws.ws_row = port->cons.ws.ws_col = 0; 4b0a2c5ff72152 Pankaj Gupta 2019-03-19 1378 port->cons.vtermno = 0; 9778829cffd4d8 Amit Shah 2010-05-06 1379 c446f8fcc9fba3 Amit Shah 2010-05-19 1380 port->host_connected = port->guest_connected = false; 17e5b4f20adbe2 Amit Shah 2011-09-14 1381 port->stats = (struct port_stats) { 0 }; c446f8fcc9fba3 Amit Shah 2010-05-19 1382 cdfadfc1adb87f Amit Shah 2010-05-19 1383 port->outvq_full = false; cdfadfc1adb87f Amit Shah 2010-05-19 1384 c446f8fcc9fba3 Amit Shah 2010-05-19 1385 port->in_vq = portdev->in_vqs[port->id]; c446f8fcc9fba3 Amit Shah 2010-05-19 1386 port->out_vq = portdev->out_vqs[port->id]; c446f8fcc9fba3 Amit Shah 2010-05-19 1387 d22a69892bd8f2 Amit Shah 2010-09-02 1388 port->cdev = cdev_alloc(); d22a69892bd8f2 Amit Shah 2010-09-02 1389 if (!port->cdev) { d22a69892bd8f2 Amit Shah 2010-09-02 1390 dev_err(&port->portdev->vdev->dev, "Error allocating cdev\n"); d22a69892bd8f2 Amit Shah 2010-09-02 1391 err = -ENOMEM; d22a69892bd8f2 Amit Shah 2010-09-02 1392 goto free_port; d22a69892bd8f2 Amit Shah 2010-09-02 1393 } d22a69892bd8f2 Amit Shah 2010-09-02 1394 port->cdev->ops = &port_fops; c446f8fcc9fba3 Amit Shah 2010-05-19 1395 c446f8fcc9fba3 Amit Shah 2010-05-19 1396 devt = MKDEV(portdev->chr_major, id); d22a69892bd8f2 Amit Shah 2010-09-02 1397 err = cdev_add(port->cdev, devt, 1); c446f8fcc9fba3 Amit Shah 2010-05-19 1398 if (err < 0) { c446f8fcc9fba3 Amit Shah 2010-05-19 1399 dev_err(&port->portdev->vdev->dev, c446f8fcc9fba3 Amit Shah 2010-05-19 1400 "Error %d adding cdev for port %u\n", err, id); d22a69892bd8f2 Amit Shah 2010-09-02 1401 goto free_cdev; c446f8fcc9fba3 Amit Shah 2010-05-19 1402 } 11680fdf29cec5 Ivan Orlov 2023-06-20 1403 port->dev = device_create(&port_class, &port->portdev->vdev->dev, c446f8fcc9fba3 Amit Shah 2010-05-19 1404 devt, port, "vport%up%u", dc18f0800f5f16 Sjur Brændeland 2013-02-12 1405 port->portdev->vdev->index, id); c446f8fcc9fba3 Amit Shah 2010-05-19 1406 if (IS_ERR(port->dev)) { c446f8fcc9fba3 Amit Shah 2010-05-19 1407 err = PTR_ERR(port->dev); c446f8fcc9fba3 Amit Shah 2010-05-19 1408 dev_err(&port->portdev->vdev->dev, c446f8fcc9fba3 Amit Shah 2010-05-19 1409 "Error %d creating device for port %u\n", c446f8fcc9fba3 Amit Shah 2010-05-19 1410 err, id); c446f8fcc9fba3 Amit Shah 2010-05-19 1411 goto free_cdev; c446f8fcc9fba3 Amit Shah 2010-05-19 1412 } c446f8fcc9fba3 Amit Shah 2010-05-19 1413 c446f8fcc9fba3 Amit Shah 2010-05-19 1414 spin_lock_init(&port->inbuf_lock); cdfadfc1adb87f Amit Shah 2010-05-19 1415 spin_lock_init(&port->outvq_lock); c446f8fcc9fba3 Amit Shah 2010-05-19 1416 init_waitqueue_head(&port->waitqueue); c446f8fcc9fba3 Amit Shah 2010-05-19 1417 d791cfcbf98191 Laurent Vivier 2019-11-14 1418 /* We can safely ignore ENOSPC because it means d791cfcbf98191 Laurent Vivier 2019-11-14 1419 * the queue already has buffers. Buffers are removed d791cfcbf98191 Laurent Vivier 2019-11-14 1420 * only by virtcons_remove(), not by unplug_port() d791cfcbf98191 Laurent Vivier 2019-11-14 1421 */ d791cfcbf98191 Laurent Vivier 2019-11-14 1422 err = fill_queue(port->in_vq, &port->inbuf_lock); d791cfcbf98191 Laurent Vivier 2019-11-14 1423 if (err < 0 && err != -ENOSPC) { c446f8fcc9fba3 Amit Shah 2010-05-19 1424 dev_err(port->dev, "Error allocating inbufs\n"); c446f8fcc9fba3 Amit Shah 2010-05-19 1425 goto free_device; c446f8fcc9fba3 Amit Shah 2010-05-19 1426 } c446f8fcc9fba3 Amit Shah 2010-05-19 1427 1b6370463e88b0 Sjur Brændeland 2012-12-14 1428 if (is_rproc_serial(port->portdev->vdev)) c446f8fcc9fba3 Amit Shah 2010-05-19 1429 /* 1b6370463e88b0 Sjur Brændeland 2012-12-14 1430 * For rproc_serial assume remote processor is connected. 1b6370463e88b0 Sjur Brændeland 2012-12-14 1431 * rproc_serial does not want the console port, only 1b6370463e88b0 Sjur Brændeland 2012-12-14 1432 * the generic port implementation. 1b6370463e88b0 Sjur Brændeland 2012-12-14 1433 */ aabd6a8fa5a933 Sjur BrÃ¦ndeland 2013-03-18 1434 port->host_connected = true; 1b6370463e88b0 Sjur Brændeland 2012-12-14 1435 else if (!use_multiport(port->portdev)) { c446f8fcc9fba3 Amit Shah 2010-05-19 1436 /* 1b6370463e88b0 Sjur Brændeland 2012-12-14 1437 * If we're not using multiport support, 1b6370463e88b0 Sjur Brændeland 2012-12-14 1438 * this has to be a console port. c446f8fcc9fba3 Amit Shah 2010-05-19 1439 */ c446f8fcc9fba3 Amit Shah 2010-05-19 1440 err = init_port_console(port); c446f8fcc9fba3 Amit Shah 2010-05-19 1441 if (err) c446f8fcc9fba3 Amit Shah 2010-05-19 1442 goto free_inbufs; c446f8fcc9fba3 Amit Shah 2010-05-19 1443 } c446f8fcc9fba3 Amit Shah 2010-05-19 1444 c446f8fcc9fba3 Amit Shah 2010-05-19 1445 spin_lock_irq(&portdev->ports_lock); c446f8fcc9fba3 Amit Shah 2010-05-19 1446 list_add_tail(&port->list, &port->portdev->ports); c446f8fcc9fba3 Amit Shah 2010-05-19 1447 spin_unlock_irq(&portdev->ports_lock); c446f8fcc9fba3 Amit Shah 2010-05-19 1448 c446f8fcc9fba3 Amit Shah 2010-05-19 1449 /* c446f8fcc9fba3 Amit Shah 2010-05-19 1450 * Tell the Host we're set so that it can send us various c446f8fcc9fba3 Amit Shah 2010-05-19 1451 * configuration parameters for this port (eg, port name, c446f8fcc9fba3 Amit Shah 2010-05-19 1452 * caching, whether this is a console port, etc.) c446f8fcc9fba3 Amit Shah 2010-05-19 1453 */ c446f8fcc9fba3 Amit Shah 2010-05-19 1454 send_control_msg(port, VIRTIO_CONSOLE_PORT_READY, 1); c446f8fcc9fba3 Amit Shah 2010-05-19 1455 c446f8fcc9fba3 Amit Shah 2010-05-19 1456 /* c446f8fcc9fba3 Amit Shah 2010-05-19 1457 * Finally, create the debugfs file that we can use to c446f8fcc9fba3 Amit Shah 2010-05-19 1458 * inspect a port's state at any time c446f8fcc9fba3 Amit Shah 2010-05-19 1459 */ db1700685c0ad2 Dan Carpenter 2015-05-08 @1460 snprintf(debugfs_name, sizeof(debugfs_name), "vport%up%u", dc18f0800f5f16 Sjur Brændeland 2013-02-12 1461 port->portdev->vdev->index, id); c446f8fcc9fba3 Amit Shah 2010-05-19 1462 port->debugfs_file = debugfs_create_file(debugfs_name, 0444, c446f8fcc9fba3 Amit Shah 2010-05-19 1463 pdrvdata.debugfs_dir, fb11de92ac6e4a Greg Kroah-Hartman 2021-02-16 1464 port, &port_debugfs_fops); c446f8fcc9fba3 Amit Shah 2010-05-19 1465 return 0; c446f8fcc9fba3 Amit Shah 2010-05-19 1466 c446f8fcc9fba3 Amit Shah 2010-05-19 1467 free_inbufs: c446f8fcc9fba3 Amit Shah 2010-05-19 1468 free_device: 11680fdf29cec5 Ivan Orlov 2023-06-20 1469 device_destroy(&port_class, port->dev->devt); c446f8fcc9fba3 Amit Shah 2010-05-19 1470 free_cdev: d22a69892bd8f2 Amit Shah 2010-09-02 1471 cdev_del(port->cdev); c446f8fcc9fba3 Amit Shah 2010-05-19 1472 free_port: c446f8fcc9fba3 Amit Shah 2010-05-19 1473 kfree(port); c446f8fcc9fba3 Amit Shah 2010-05-19 1474 fail: c446f8fcc9fba3 Amit Shah 2010-05-19 1475 /* The host might want to notify management sw about port add failure */ 0643e4c6e4fd67 Julia Lawall 2010-05-15 1476 __send_control_msg(portdev, id, VIRTIO_CONSOLE_PORT_READY, 0); c446f8fcc9fba3 Amit Shah 2010-05-19 1477 return err; c446f8fcc9fba3 Amit Shah 2010-05-19 1478 } c446f8fcc9fba3 Amit Shah 2010-05-19 1479 :::::: The code at line 1460 was first introduced by commit :::::: db1700685c0ad2ecb9e42af6a568435a03bbc3fd virtio_console: silence a static checker warning :::::: TO: Dan Carpenter <dan.carpenter(a)oracle.com> :::::: CC: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 1625/10661] ls2k500sfb.c:undefined reference to `fg_console'
by kernel test robot 12 Jul '24

12 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 15f539c4a521c5ae892554d0046e24f050ec0e00 commit: 8248d42b7c5f4338a54f26d8efebec8614b43466 [1625/10661] fbdev: add ls2k500sfb driver for ls2k500 bmc. config: loongarch-randconfig-r133-20240711 (https://download.01.org/0day-ci/archive/20240712/202407120045.vP3mrDfe-lkp@…) compiler: loongarch64-linux-gcc (GCC) 13.3.0 reproduce: (https://download.01.org/0day-ci/archive/20240712/202407120045.vP3mrDfe-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407120045.vP3mrDfe-lkp@intel.com/ All errors (new ones prefixed by >>): loongarch64-linux-ld: drivers/video/fbdev/ls2k500sfb.o: in function `.L131': >> ls2k500sfb.c:(.text+0x102c): undefined reference to `fg_console' >> loongarch64-linux-ld: ls2k500sfb.c:(.text+0x1030): undefined reference to `fg_console' -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH openEuler-1.0-LTS] crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
by Ye Bin 11 Jul '24

11 Jul '24

From: Herbert Xu <herbert(a)gondor.apana.org.au> mainline inclusion from mainline-v6.10-rc1 commit d3b17c6d9dddc2db3670bc9be628b122416a3d26 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAC3MY CVE: CVE-2024-39493 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… --------------------------- Using completion_done to determine whether the caller has gone away only works after a complete call. Furthermore it's still possible that the caller has not yet called wait_for_completion, resulting in another potential UAF. Fix this by making the caller use cancel_work_sync and then freeing the memory safely. Fixes: 7d42e097607c ("crypto: qat - resolve race condition during AER recovery") Cc: <stable(a)vger.kernel.org> #6.8+ Signed-off-by: Herbert Xu <herbert(a)gondor.apana.org.au> Reviewed-by: Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> Signed-off-by: Herbert Xu <herbert(a)gondor.apana.org.au> Conflicts: drivers/crypto/qat/qat_common/adf_aer.c drivers/crypto/intel/qat/qat_common/adf_aer.c [Fix context diff] Signed-off-by: Ye Bin <yebin10(a)huawei.com> --- drivers/crypto/qat/qat_common/adf_aer.c | 19 +++++-------------- 1 file changed, 5 insertions(+), 14 deletions(-) diff --git a/drivers/crypto/qat/qat_common/adf_aer.c b/drivers/crypto/qat/qat_common/adf_aer.c index 7242a1ee86de..3811ca0b6e0b 100644 --- a/drivers/crypto/qat/qat_common/adf_aer.c +++ b/drivers/crypto/qat/qat_common/adf_aer.c @@ -139,8 +139,7 @@ static void adf_device_reset_worker(struct work_struct *work) if (adf_dev_init(accel_dev) || adf_dev_start(accel_dev)) { /* The device hanged and we can't restart it so stop here */ dev_err(&GET_DEV(accel_dev), "Restart device failed\n"); - if (reset_data->mode == ADF_DEV_RESET_ASYNC || - completion_done(&reset_data->compl)) + if (reset_data->mode == ADF_DEV_RESET_ASYNC) kfree(reset_data); WARN(1, "QAT: device restart failed. Device is unusable\n"); return; @@ -148,16 +147,8 @@ static void adf_device_reset_worker(struct work_struct *work) adf_dev_restarted_notify(accel_dev); clear_bit(ADF_STATUS_RESTARTING, &accel_dev->status); - /* - * The dev is back alive. Notify the caller if in sync mode - * - * If device restart will take a more time than expected, - * the schedule_reset() function can timeout and exit. This can be - * detected by calling the completion_done() function. In this case - * the reset_data structure needs to be freed here. - */ - if (reset_data->mode == ADF_DEV_RESET_ASYNC || - completion_done(&reset_data->compl)) + /* The dev is back alive. Notify the caller if in sync mode */ + if (reset_data->mode == ADF_DEV_RESET_ASYNC) kfree(reset_data); else complete(&reset_data->compl); @@ -192,10 +183,10 @@ static int adf_dev_aer_schedule_reset(struct adf_accel_dev *accel_dev, if (!timeout) { dev_err(&GET_DEV(accel_dev), "Reset device timeout expired\n"); + cancel_work_sync(&reset_data->reset_work); ret = -EFAULT; - } else { - kfree(reset_data); } + kfree(reset_data); return ret; } return 0; -- 2.31.1

2 1

[PATCH openEuler-22.03-LTS-SP1 0/2] CVE-2024-38570
by Zeng Heng 11 Jul '24

11 Jul '24

Andreas Gruenbacher (2): gfs2: Rename sd_{ glock => kill }_wait gfs2: Fix potential glock use-after-free on unmount fs/gfs2/glock.c | 45 ++++++++++++++++++++++++++++++++++++-------- fs/gfs2/glock.h | 1 + fs/gfs2/incore.h | 3 ++- fs/gfs2/lock_dlm.c | 14 ++++++++++++-- fs/gfs2/ops_fstype.c | 5 +++-- fs/gfs2/super.c | 3 --- 6 files changed, 55 insertions(+), 16 deletions(-) -- 2.25.1

2 3

[PATCH OLK-5.10 0/2] CVE-2024-38570
by Zeng Heng 11 Jul '24

11 Jul '24

Andreas Gruenbacher (2): gfs2: Rename sd_{ glock => kill }_wait gfs2: Fix potential glock use-after-free on unmount fs/gfs2/glock.c | 45 ++++++++++++++++++++++++++++++++++++-------- fs/gfs2/glock.h | 1 + fs/gfs2/incore.h | 3 ++- fs/gfs2/lock_dlm.c | 14 ++++++++++++-- fs/gfs2/ops_fstype.c | 5 +++-- fs/gfs2/super.c | 3 --- 6 files changed, 55 insertions(+), 16 deletions(-) -- 2.25.1

2 3

[PATCH OLK-5.10] cifs: Fix deadlock in cifs_writepages during reconnect
by Wang Zhaolong 11 Jul '24

11 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAASLU -------------------------------- When multiple processes or threads write to the same file concurrently, if a network disruption occurs during the write operation, it may lead to a deadlock situation as follow: Process 1 (dd) Process 2 (cifsd) Process 3 (cifsiod) cifs_writepages lock_page - [1] wait_on_page_writeback - [2] Waiting for writeback, blocked by [4] wait_on_page_bit cifs_demultiplex_thread cifs_read_from_socket cifs_readv_from_socket - If another process triggers reconnect at this point cifs_reconnect - mid->mid_state updated to MID_RETRY_NEEDED smb2_writev_callback mid_entry->callback() - mid_state leads to wdata->result = -EAGAIN wdata->result = -EAGAIN queue_work(cifsiod_wq, &wdata->work); cifs_writev_complete - work function - Condition satisfied - wdata->result == -EAGAIN cifs_writev_requeue lock_page - [3] Blocked by [1] end_page_writeback - [4] Won't execute, blocked by [3] unlock_page Mainline refactoring patch d08089f649a0 ("cifs: Change the I/O paths to use an iterator rather than a page list") unlock page while waiting for the writeback to complete, thus avoiding potential deadlocks caused by lock ordering issues during reconnection. Due to the large refactor of the mainline, the patch cannot be backport directly. Therefore, This patch only uses a part of the idea of the mainline patch to fix deadlock. Fixes: c28c89fc43e3 ("cifs: add cifs_async_writev") Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- fs/cifs/file.c | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/fs/cifs/file.c b/fs/cifs/file.c index 0b840555a175..e0c10fd93b64 100644 --- a/fs/cifs/file.c +++ b/fs/cifs/file.c @@ -2223,6 +2223,7 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, * back from swapper_space to tmpfs file mapping */ +relock_recheck: if (nr_pages == 0) lock_page(page); else if (!trylock_page(page)) @@ -2245,11 +2246,16 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, break; } - if (wbc->sync_mode != WB_SYNC_NONE) - wait_on_page_writeback(page); + if (PageWriteback(page)) { + unlock_page(page); + if (wbc->sync_mode != WB_SYNC_NONE) { + wait_on_page_writeback(page); + goto relock_recheck; + } + break; + } - if (PageWriteback(page) || - !clear_page_dirty_for_io(page)) { + if (!clear_page_dirty_for_io(page)) { unlock_page(page); break; } -- 2.39.2

2 1

[PATCH openEuler-1.0-LTS] cifs: Fix deadlock in cifs_writepages during reconnect
by Wang Zhaolong 11 Jul '24

11 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAASLU -------------------------------- When multiple processes or threads write to the same file concurrently, if a network disruption occurs during the write operation, it may lead to a deadlock situation as follow: Process 1 (dd) Process 2 (cifsd) Process 3 (cifsiod) cifs_writepages lock_page - [1] wait_on_page_writeback - [2] Waiting for writeback, blocked by [4] wait_on_page_bit cifs_demultiplex_thread cifs_read_from_socket cifs_readv_from_socket - If another process triggers reconnect at this point cifs_reconnect - mid->mid_state updated to MID_RETRY_NEEDED smb2_writev_callback mid_entry->callback() - mid_state leads to wdata->result = -EAGAIN wdata->result = -EAGAIN queue_work(cifsiod_wq, &wdata->work); cifs_writev_complete - work function - Condition satisfied - wdata->result == -EAGAIN cifs_writev_requeue lock_page - [3] Blocked by [1] end_page_writeback - [4] Won't execute, blocked by [3] unlock_page Mainline refactoring patch d08089f649a0 ("cifs: Change the I/O paths to use an iterator rather than a page list") unlock page while waiting for the writeback to complete, thus avoiding potential deadlocks caused by lock ordering issues during reconnection. Due to the large refactor of the mainline, the patch cannot be backport directly. Therefore, This patch only uses a part of the idea of the mainline patch to fix deadlock. Fixes: c28c89fc43e3 ("cifs: add cifs_async_writev") Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- fs/cifs/file.c | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/fs/cifs/file.c b/fs/cifs/file.c index 0b840555a175..e0c10fd93b64 100644 --- a/fs/cifs/file.c +++ b/fs/cifs/file.c @@ -2223,6 +2223,7 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, * back from swapper_space to tmpfs file mapping */ +relock_recheck: if (nr_pages == 0) lock_page(page); else if (!trylock_page(page)) @@ -2245,11 +2246,16 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, break; } - if (wbc->sync_mode != WB_SYNC_NONE) - wait_on_page_writeback(page); + if (PageWriteback(page)) { + unlock_page(page); + if (wbc->sync_mode != WB_SYNC_NONE) { + wait_on_page_writeback(page); + goto relock_recheck; + } + break; + } - if (PageWriteback(page) || - !clear_page_dirty_for_io(page)) { + if (!clear_page_dirty_for_io(page)) { unlock_page(page); break; } -- 2.39.2

2 1

[PATCH openEuler-22.03-LTS-SP1] cifs: Fix deadlock in cifs_writepages during reconnect
by Wang Zhaolong 11 Jul '24

11 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAASLU -------------------------------- When multiple processes or threads write to the same file concurrently, if a network disruption occurs during the write operation, it may lead to a deadlock situation as follow: Process 1 (dd) Process 2 (cifsd) Process 3 (cifsiod) cifs_writepages lock_page - [1] wait_on_page_writeback - [2] Waiting for writeback, blocked by [4] wait_on_page_bit cifs_demultiplex_thread cifs_read_from_socket cifs_readv_from_socket - If another process triggers reconnect at this point cifs_reconnect - mid->mid_state updated to MID_RETRY_NEEDED smb2_writev_callback mid_entry->callback() - mid_state leads to wdata->result = -EAGAIN wdata->result = -EAGAIN queue_work(cifsiod_wq, &wdata->work); cifs_writev_complete - work function - Condition satisfied - wdata->result == -EAGAIN cifs_writev_requeue lock_page - [3] Blocked by [1] end_page_writeback - [4] Won't execute, blocked by [3] unlock_page Mainline refactoring patch d08089f649a0 ("cifs: Change the I/O paths to use an iterator rather than a page list") unlock page while waiting for the writeback to complete, thus avoiding potential deadlocks caused by lock ordering issues during reconnection. Due to the large refactor of the mainline, the patch cannot be backport directly. Therefore, This patch only uses a part of the idea of the mainline patch to fix deadlock. Fixes: c28c89fc43e3 ("cifs: add cifs_async_writev") Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- fs/cifs/file.c | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/fs/cifs/file.c b/fs/cifs/file.c index 0b840555a175..e0c10fd93b64 100644 --- a/fs/cifs/file.c +++ b/fs/cifs/file.c @@ -2223,6 +2223,7 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, * back from swapper_space to tmpfs file mapping */ +relock_recheck: if (nr_pages == 0) lock_page(page); else if (!trylock_page(page)) @@ -2245,11 +2246,16 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, break; } - if (wbc->sync_mode != WB_SYNC_NONE) - wait_on_page_writeback(page); + if (PageWriteback(page)) { + unlock_page(page); + if (wbc->sync_mode != WB_SYNC_NONE) { + wait_on_page_writeback(page); + goto relock_recheck; + } + break; + } - if (PageWriteback(page) || - !clear_page_dirty_for_io(page)) { + if (!clear_page_dirty_for_io(page)) { unlock_page(page); break; } -- 2.39.2

2 1

[PATCH openEuler-1.0-LTS] usb: musb: tusb6010: check return value after calling platform_get_resource()
by Wang Zhaolong 11 Jul '24

11 Jul '24

From: Yang Yingliang <yangyingliang(a)huawei.com> mainline inclusion from mainline-v5.16-rc1 commit 14651496a3de6807a17c310f63c894ea0c5d858e category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNF2 CVE: CVE-2021-47181 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- It will cause null-ptr-deref if platform_get_resource() returns NULL, we need check the return value. Signed-off-by: Yang Yingliang <yangyingliang(a)huawei.com> Link: https://lore.kernel.org/r/20210915034925.2399823-1-yangyingliang@huawei.com Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- drivers/usb/musb/tusb6010.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/drivers/usb/musb/tusb6010.c b/drivers/usb/musb/tusb6010.c index 39453287b5c3..9629ddb943d5 100644 --- a/drivers/usb/musb/tusb6010.c +++ b/drivers/usb/musb/tusb6010.c @@ -1102,6 +1102,11 @@ static int tusb_musb_init(struct musb *musb) /* dma address for async dma */ mem = platform_get_resource(pdev, IORESOURCE_MEM, 0); + if (!mem) { + pr_debug("no async dma resource?\n"); + ret = -ENODEV; + goto done; + } musb->async = mem->start; /* dma address for sync dma */ -- 2.34.3

2 1

[PATCH OLK-6.6] x86: resctrl: Fix illegal access by the chips not having RDT
by Zeng Heng 11 Jul '24

11 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IA7L2U --------------------------- If the chip not having RDT function, resctrl_arch_system_num_rmid_idx() would return 0. rmid_ptrs points to an illegal buffer after kcalloc() allocation, which would cause illegal access fault when accessing. Consequently, when we found resctrl_arch_system_num_rmid_idx() return 0, just return EOPNOTSUPP immediatly and skip initializing the resctrl file system. Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- fs/resctrl/monitor.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/fs/resctrl/monitor.c b/fs/resctrl/monitor.c index 6ef878f5afdd..a7bd84f9a440 100644 --- a/fs/resctrl/monitor.c +++ b/fs/resctrl/monitor.c @@ -728,6 +728,9 @@ static int dom_data_init(struct rdt_resource *r) int err = 0, i; u32 idx; + if (!idx_limit) + return -EOPNOTSUPP; + mutex_lock(&rdtgroup_mutex); if (IS_ENABLED(CONFIG_RESCTRL_RMID_DEPENDS_ON_CLOSID)) { u32 *tmp; -- 2.25.1

2 1

[PATCH openEuler-1.0-LTS] usb: musb: tusb6010: check return value after calling platform_get_resource()
by Wang Zhaolong 11 Jul '24

11 Jul '24

From: Yang Yingliang <yangyingliang(a)huawei.com> mainline inclusion from mainline-v5.16-rc1v6.1 commit 14651496a3de6807a17c310f63c894ea0c5d858e category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNF2 CVE: CVE-2021-47181 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- It will cause null-ptr-deref if platform_get_resource() returns NULL, we need check the return value. Signed-off-by: Yang Yingliang <yangyingliang(a)huawei.com> Link: https://lore.kernel.org/r/20210915034925.2399823-1-yangyingliang@huawei.com Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- drivers/usb/musb/tusb6010.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/drivers/usb/musb/tusb6010.c b/drivers/usb/musb/tusb6010.c index 39453287b5c3..9629ddb943d5 100644 --- a/drivers/usb/musb/tusb6010.c +++ b/drivers/usb/musb/tusb6010.c @@ -1102,6 +1102,11 @@ static int tusb_musb_init(struct musb *musb) /* dma address for async dma */ mem = platform_get_resource(pdev, IORESOURCE_MEM, 0); + if (!mem) { + pr_debug("no async dma resource?\n"); + ret = -ENODEV; + goto done; + } musb->async = mem->start; /* dma address for sync dma */ -- 2.34.3

2 1

[PATCH openEuler-22.03-LTS-SP1] cifs: Fix deadlock in cifs_writepages during reconnect
by Wang Zhaolong 11 Jul '24

11 Jul '24

Offering: HULK hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAASLU -------------------------------- When multiple processes or threads write to the same file concurrently, if a network disruption occurs during the write operation, it may lead to a deadlock situation as follow: Process 1 (dd) Process 2 (cifsd) Process 3 (cifsiod) cifs_writepages lock_page - [1] wait_on_page_writeback - [2] Waiting for writeback, blocked by [4] wait_on_page_bit cifs_demultiplex_thread cifs_read_from_socket cifs_readv_from_socket - If another process triggers reconnect at this point cifs_reconnect - mid->mid_state updated to MID_RETRY_NEEDED smb2_writev_callback mid_entry->callback() - mid_state leads to wdata->result = -EAGAIN wdata->result = -EAGAIN queue_work(cifsiod_wq, &wdata->work); cifs_writev_complete - work function - Condition satisfied - wdata->result == -EAGAIN cifs_writev_requeue lock_page - [3] Blocked by [1] end_page_writeback - [4] Won't execute, blocked by [3] unlock_page Mainline refactoring patch d08089f649a0 ("cifs: Change the I/O paths to use an iterator rather than a page list") unlock page while waiting for the writeback to complete, thus avoiding potential deadlocks caused by lock ordering issues during reconnection. Due to the large refactor of the mainline, the patch cannot be backport directly. Therefore, This patch only uses a part of the idea of the mainline patch to fix deadlock. Fixes: c28c89fc43e3 ("cifs: add cifs_async_writev") Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- fs/cifs/file.c | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/fs/cifs/file.c b/fs/cifs/file.c index 0b840555a175..e0c10fd93b64 100644 --- a/fs/cifs/file.c +++ b/fs/cifs/file.c @@ -2223,6 +2223,7 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, * back from swapper_space to tmpfs file mapping */ +relock_recheck: if (nr_pages == 0) lock_page(page); else if (!trylock_page(page)) @@ -2245,11 +2246,16 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, break; } - if (wbc->sync_mode != WB_SYNC_NONE) - wait_on_page_writeback(page); + if (PageWriteback(page)) { + unlock_page(page); + if (wbc->sync_mode != WB_SYNC_NONE) { + wait_on_page_writeback(page); + goto relock_recheck; + } + break; + } - if (PageWriteback(page) || - !clear_page_dirty_for_io(page)) { + if (!clear_page_dirty_for_io(page)) { unlock_page(page); break; } -- 2.39.2

2 1

[PATCH OLK-5.10] cifs: Fix deadlock in cifs_writepages during reconnect
by Wang Zhaolong 11 Jul '24

11 Jul '24

Offering: HULK hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAASLU -------------------------------- When multiple processes or threads write to the same file concurrently, if a network disruption occurs during the write operation, it may lead to a deadlock situation as follow: Process 1 (dd) Process 2 (cifsd) Process 3 (cifsiod) cifs_writepages lock_page - [1] wait_on_page_writeback - [2] Waiting for writeback, blocked by [4] wait_on_page_bit cifs_demultiplex_thread cifs_read_from_socket cifs_readv_from_socket - If another process triggers reconnect at this point cifs_reconnect - mid->mid_state updated to MID_RETRY_NEEDED smb2_writev_callback mid_entry->callback() - mid_state leads to wdata->result = -EAGAIN wdata->result = -EAGAIN queue_work(cifsiod_wq, &wdata->work); cifs_writev_complete - work function - Condition satisfied - wdata->result == -EAGAIN cifs_writev_requeue lock_page - [3] Blocked by [1] end_page_writeback - [4] Won't execute, blocked by [3] unlock_page Mainline refactoring patch d08089f649a0 ("cifs: Change the I/O paths to use an iterator rather than a page list") unlock page while waiting for the writeback to complete, thus avoiding potential deadlocks caused by lock ordering issues during reconnection. Due to the large refactor of the mainline, the patch cannot be backport directly. Therefore, This patch only uses a part of the idea of the mainline patch to fix deadlock. Fixes: c28c89fc43e3 ("cifs: add cifs_async_writev") Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- fs/cifs/file.c | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/fs/cifs/file.c b/fs/cifs/file.c index e914f4f5cc83..dc7175b75c26 100644 --- a/fs/cifs/file.c +++ b/fs/cifs/file.c @@ -2226,6 +2226,7 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, * back from swapper_space to tmpfs file mapping */ +relock_recheck: if (nr_pages == 0) lock_page(page); else if (!trylock_page(page)) @@ -2248,11 +2249,16 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, break; } - if (wbc->sync_mode != WB_SYNC_NONE) - wait_on_page_writeback(page); + if (PageWriteback(page)) { + unlock_page(page); + if (wbc->sync_mode != WB_SYNC_NONE) { + wait_on_page_writeback(page); + goto relock_recheck; + } + break; + } - if (PageWriteback(page) || - !clear_page_dirty_for_io(page)) { + if (!clear_page_dirty_for_io(page)) { unlock_page(page); break; } -- 2.39.2

2 1

[PATCH openEuler-1.0-LTS] cifs: Fix deadlock in cifs_writepages during reconnect
by Wang Zhaolong 11 Jul '24

11 Jul '24

Offering: HULK hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAASLU -------------------------------- When multiple processes or threads write to the same file concurrently, if a network disruption occurs during the write operation, it may lead to a deadlock situation as follow: Process 1 (dd) Process 2 (cifsd) Process 3 (cifsiod) cifs_writepages lock_page - [1] wait_on_page_writeback - [2] Waiting for writeback, blocked by [4] wait_on_page_bit cifs_demultiplex_thread cifs_read_from_socket cifs_readv_from_socket - If another process triggers reconnect at this point cifs_reconnect - mid->mid_state updated to MID_RETRY_NEEDED smb2_writev_callback mid_entry->callback() - mid_state leads to wdata->result = -EAGAIN wdata->result = -EAGAIN queue_work(cifsiod_wq, &wdata->work); cifs_writev_complete - work function - Condition satisfied - wdata->result == -EAGAIN cifs_writev_requeue lock_page - [3] Blocked by [1] end_page_writeback - [4] Won't execute, blocked by [3] unlock_page Mainline refactoring patch d08089f649a0 ("cifs: Change the I/O paths to use an iterator rather than a page list") unlock page while waiting for the writeback to complete, thus avoiding potential deadlocks caused by lock ordering issues during reconnection. Due to the large refactor of the mainline, the patch cannot be backport directly. Therefore, This patch only uses a part of the idea of the mainline patch to fix deadlock. Fixes: c28c89fc43e3 ("cifs: add cifs_async_writev") Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- fs/cifs/file.c | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/fs/cifs/file.c b/fs/cifs/file.c index 875cb44ba573..e346e6c2227a 100644 --- a/fs/cifs/file.c +++ b/fs/cifs/file.c @@ -2056,6 +2056,7 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, * back from swapper_space to tmpfs file mapping */ +relock_recheck: if (nr_pages == 0) lock_page(page); else if (!trylock_page(page)) @@ -2078,11 +2079,16 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, break; } - if (wbc->sync_mode != WB_SYNC_NONE) - wait_on_page_writeback(page); + if (PageWriteback(page)) { + unlock_page(page); + if (wbc->sync_mode != WB_SYNC_NONE) { + wait_on_page_writeback(page); + goto relock_recheck; + } + break; + } - if (PageWriteback(page) || - !clear_page_dirty_for_io(page)) { + if (!clear_page_dirty_for_io(page)) { unlock_page(page); break; } -- 2.39.2

2 1

[PATCH OLK-6.6] ipvlan: Modify the value of ipvlan modes
by Zhengchao Shao 11 Jul '24

11 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAC95A CVE: NA -------------------------------- In order to make iproute compatible with other operation system like SUSE, rethad and etc, put IPVLAN_MODE_L2E last. Fixes: 53f51b3cd1e4 ("ipvlan: Introduce l2e mode") Signed-off-by: Zhengchao Shao <shaozhengchao(a)huawei.com> --- drivers/net/ipvlan/ipvlan_main.c | 2 +- include/uapi/linux/if_link.h | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/net/ipvlan/ipvlan_main.c b/drivers/net/ipvlan/ipvlan_main.c index 67d03a17dd3f..3870d7b2b652 100644 --- a/drivers/net/ipvlan/ipvlan_main.c +++ b/drivers/net/ipvlan/ipvlan_main.c @@ -17,7 +17,7 @@ int sysctl_ipvlan_loop_qlen = 131072; int sysctl_ipvlan_loop_delay = 10; static int ipvlan_default_mode = IPVLAN_MODE_L3; module_param(ipvlan_default_mode, int, 0400); -MODULE_PARM_DESC(ipvlan_default_mode, "set ipvlan default mode: 0 for l2, 1 for l3, 2 for l2e, 3 for l3s, others invalid now"); +MODULE_PARM_DESC(ipvlan_default_mode, "set ipvlan default mode: 0 for l2, 1 for l3, 2 for l3s, 3 for l2e, others invalid now"); static struct ctl_table_header *ipvlan_table_hrd; static struct ctl_table ipvlan_table[] = { diff --git a/include/uapi/linux/if_link.h b/include/uapi/linux/if_link.h index 96ecfe1709e0..e603ada6b5ea 100644 --- a/include/uapi/linux/if_link.h +++ b/include/uapi/linux/if_link.h @@ -741,8 +741,8 @@ enum { enum ipvlan_mode { IPVLAN_MODE_L2 = 0, IPVLAN_MODE_L3, - IPVLAN_MODE_L2E, IPVLAN_MODE_L3S, + IPVLAN_MODE_L2E, IPVLAN_MODE_MAX }; -- 2.34.1

2 1

[openeuler:OLK-6.6] BUILD SUCCESS 985826e1203e470bf196aab02c03859d95e4fc7f
by kernel test robot 11 Jul '24

11 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-6.6 branch HEAD: 985826e1203e470bf196aab02c03859d95e4fc7f !9829 fix CVE-2024-38620 Warning ids grouped by kconfigs: recent_errors `-- arm64-allmodconfig `-- clang:warning:no-such-include-directory:drivers-infiniband-hw-hiroce3-include-mag elapsed time: 744m configs tested: 39 configs skipped: 122 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240710 clang-19 arm64 randconfig-002-20240710 clang-19 arm64 randconfig-003-20240710 clang-17 arm64 randconfig-004-20240710 gcc-13.2.0 loongarch alldefconfig gcc-13.3.0 loongarch allmodconfig gcc-13.3.0 loongarch allnoconfig gcc-13.3.0 loongarch randconfig-001-20240710 gcc-13.3.0 loongarch randconfig-002-20240710 gcc-13.3.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240710 clang-18 x86_64 buildonly-randconfig-002-20240710 clang-18 x86_64 buildonly-randconfig-003-20240710 clang-18 x86_64 buildonly-randconfig-004-20240710 clang-18 x86_64 buildonly-randconfig-005-20240710 gcc-13 x86_64 buildonly-randconfig-006-20240710 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240710 gcc-13 x86_64 randconfig-002-20240710 clang-18 x86_64 randconfig-003-20240710 gcc-12 x86_64 randconfig-004-20240710 clang-18 x86_64 randconfig-005-20240710 clang-18 x86_64 randconfig-006-20240710 gcc-13 x86_64 randconfig-011-20240710 clang-18 x86_64 randconfig-012-20240710 clang-18 x86_64 randconfig-013-20240710 clang-18 x86_64 randconfig-014-20240710 clang-18 x86_64 randconfig-015-20240710 clang-18 x86_64 randconfig-016-20240710 gcc-13 x86_64 randconfig-071-20240710 gcc-13 x86_64 randconfig-072-20240710 clang-18 x86_64 randconfig-073-20240710 clang-18 x86_64 randconfig-074-20240710 gcc-7 x86_64 randconfig-075-20240710 clang-18 x86_64 randconfig-076-20240710 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-5.10] BUILD SUCCESS cf1d3c6a50d28b2cd5493204fe4e853383307ce4
by kernel test robot 11 Jul '24

11 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-5.10 branch HEAD: cf1d3c6a50d28b2cd5493204fe4e853383307ce4 !9851 net/sched: act_skbmod: prevent kernel-infoleak elapsed time: 735m configs tested: 34 configs skipped: 128 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240710 clang-19 arm64 randconfig-002-20240710 clang-19 arm64 randconfig-003-20240710 clang-17 arm64 randconfig-004-20240710 gcc-13.2.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240710 clang-18 x86_64 buildonly-randconfig-002-20240710 clang-18 x86_64 buildonly-randconfig-003-20240710 clang-18 x86_64 buildonly-randconfig-004-20240710 clang-18 x86_64 buildonly-randconfig-005-20240710 gcc-13 x86_64 buildonly-randconfig-006-20240710 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240710 gcc-13 x86_64 randconfig-002-20240710 clang-18 x86_64 randconfig-003-20240710 gcc-12 x86_64 randconfig-004-20240710 clang-18 x86_64 randconfig-005-20240710 clang-18 x86_64 randconfig-006-20240710 gcc-13 x86_64 randconfig-011-20240710 clang-18 x86_64 randconfig-012-20240710 clang-18 x86_64 randconfig-013-20240710 clang-18 x86_64 randconfig-014-20240710 clang-18 x86_64 randconfig-015-20240710 clang-18 x86_64 randconfig-016-20240710 gcc-13 x86_64 randconfig-071-20240710 gcc-13 x86_64 randconfig-072-20240710 clang-18 x86_64 randconfig-073-20240710 clang-18 x86_64 randconfig-074-20240710 gcc-7 x86_64 randconfig-075-20240710 clang-18 x86_64 randconfig-076-20240710 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:openEuler-1.0-LTS] BUILD SUCCESS dc5173acb0679d098a881e7e6b34ca61d8dc5d51
by kernel test robot 10 Jul '24

10 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS branch HEAD: dc5173acb0679d098a881e7e6b34ca61d8dc5d51 !9842 net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove Warning ids grouped by kconfigs: recent_errors `-- x86_64-buildonly-randconfig-005-20240710 `-- include-asm-generic-atomic-instrumented.h:warning:wait_req-may-be-used-uninitialized elapsed time: 726m configs tested: 34 configs skipped: 128 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig gcc-13.2.0 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240710 gcc-13.2.0 arm64 randconfig-002-20240710 gcc-13.2.0 arm64 randconfig-003-20240710 gcc-13.2.0 arm64 randconfig-004-20240710 gcc-13.2.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240710 clang-18 x86_64 buildonly-randconfig-002-20240710 clang-18 x86_64 buildonly-randconfig-003-20240710 clang-18 x86_64 buildonly-randconfig-004-20240710 clang-18 x86_64 buildonly-randconfig-005-20240710 gcc-13 x86_64 buildonly-randconfig-006-20240710 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240710 gcc-13 x86_64 randconfig-002-20240710 clang-18 x86_64 randconfig-003-20240710 gcc-12 x86_64 randconfig-004-20240710 clang-18 x86_64 randconfig-005-20240710 clang-18 x86_64 randconfig-006-20240710 gcc-13 x86_64 randconfig-011-20240710 clang-18 x86_64 randconfig-012-20240710 clang-18 x86_64 randconfig-013-20240710 clang-18 x86_64 randconfig-014-20240710 clang-18 x86_64 randconfig-015-20240710 clang-18 x86_64 randconfig-016-20240710 gcc-13 x86_64 randconfig-071-20240710 gcc-13 x86_64 randconfig-072-20240710 clang-18 x86_64 randconfig-073-20240710 clang-18 x86_64 randconfig-074-20240710 gcc-7 x86_64 randconfig-075-20240710 clang-18 x86_64 randconfig-076-20240710 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6] block: enable BLK_IO_HUNG_TASK_CHECK by default
by Li Lingfeng 10 Jul '24

10 Jul '24

hulk inclusion category: feature bugzilla: https://gitee.com/openeuler/kernel/issues/IAC2T6 -------------------------------- Enable BLK_IO_HUNG_TASK_CHECK by default like 5.10. Signed-off-by: Li Lingfeng <lilingfeng3(a)huawei.com> --- arch/arm64/configs/openeuler_defconfig | 2 +- arch/x86/configs/openeuler_defconfig | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/arch/arm64/configs/openeuler_defconfig b/arch/arm64/configs/openeuler_defconfig index 09e8452bba42..f4a8a774d53b 100644 --- a/arch/arm64/configs/openeuler_defconfig +++ b/arch/arm64/configs/openeuler_defconfig @@ -949,7 +949,7 @@ CONFIG_BLK_DEBUG_FS_ZONED=y # CONFIG_BLK_INLINE_ENCRYPTION is not set CONFIG_BLK_DEV_DETECT_WRITING_PART0=y CONFIG_BLK_DEV_WRITE_MOUNTED_DUMP=y -CONFIG_BLK_IO_HUNG_TASK_CHECK=n +CONFIG_BLK_IO_HUNG_TASK_CHECK=y # # Partition Types diff --git a/arch/x86/configs/openeuler_defconfig b/arch/x86/configs/openeuler_defconfig index e7859242cbbd..3d85395e74df 100644 --- a/arch/x86/configs/openeuler_defconfig +++ b/arch/x86/configs/openeuler_defconfig @@ -981,7 +981,7 @@ CONFIG_BLK_DEBUG_FS_ZONED=y # CONFIG_BLK_INLINE_ENCRYPTION is not set CONFIG_BLK_DEV_DETECT_WRITING_PART0=y CONFIG_BLK_DEV_WRITE_MOUNTED_DUMP=y -CONFIG_BLK_IO_HUNG_TASK_CHECK=n +CONFIG_BLK_IO_HUNG_TASK_CHECK=y # # Partition Types -- 2.31.1

2 1

[PATCH openEuler-1.0-LTS] khugepaged: fix null-pointer dereference due to race
by Liu Shixin 10 Jul '24

10 Jul '24

From: "Kirill A. Shutemov" <kirill.shutemov(a)linux.intel.com> mainline inclusion from mainline-v5.8-rc7 commit 594cced14ad3903166c8b091ff96adac7552f0b3 category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IABZNI CVE: NA Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- khugepaged has to drop mmap lock several times while collapsing a page. The situation can change while the lock is dropped and we need to re-validate that the VMA is still in place and the PMD is still subject for collapse. But we miss one corner case: while collapsing an anonymous pages the VMA could be replaced with file VMA. If the file VMA doesn't have any private pages we get NULL pointer dereference: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] anon_vma_lock_write include/linux/rmap.h:120 [inline] collapse_huge_page mm/khugepaged.c:1110 [inline] khugepaged_scan_pmd mm/khugepaged.c:1349 [inline] khugepaged_scan_mm_slot mm/khugepaged.c:2110 [inline] khugepaged_do_scan mm/khugepaged.c:2193 [inline] khugepaged+0x3bba/0x5a10 mm/khugepaged.c:2238 The fix is to make sure that the VMA is anonymous in hugepage_vma_revalidate(). The helper is only used for collapsing anonymous pages. Fixes: 99cb0dbd47a1 ("mm,thp: add read-only THP support for (non-shmem) FS") Reported-by: syzbot+ed318e8b790ca72c5ad0(a)syzkaller.appspotmail.com Signed-off-by: Kirill A. Shutemov <kirill.shutemov(a)linux.intel.com> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> Reviewed-by: David Hildenbrand <david(a)redhat.com> Acked-by: Yang Shi <yang.shi(a)linux.alibaba.com> Cc: <stable(a)vger.kernel.org> Link: http://lkml.kernel.org/r/20200722121439.44328-1-kirill.shutemov@linux.intel… Signed-off-by: Linus Torvalds <torvalds(a)linux-foundation.org> [ The Fixes tag is incorrect, the problem can triggered due to shmem_file. ] Signed-off-by: Liu Shixin <liushixin2(a)huawei.com> --- mm/khugepaged.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/mm/khugepaged.c b/mm/khugepaged.c index 04d0a3ee006e..88badbed7f73 100644 --- a/mm/khugepaged.c +++ b/mm/khugepaged.c @@ -893,6 +893,9 @@ static int hugepage_vma_revalidate(struct mm_struct *mm, unsigned long address, return SCAN_ADDRESS_RANGE; if (!hugepage_vma_check(vma, vma->vm_flags)) return SCAN_VMA_CHECK; + /* Anon VMA expected */ + if (!vma->anon_vma || vma->vm_ops) + return SCAN_VMA_CHECK; return 0; } -- 2.25.1

2 1

[PATCH OLK-6.6] drm/amdgpu/mes: fix use-after-free issue
by Li Huafei 10 Jul '24

10 Jul '24

From: Jack Xiao <Jack.Xiao(a)amd.com> stable inclusion from stable-v6.6.33 commit 39cfce75168c11421d70b8c0c65f6133edccb82a category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SIE CVE: CVE-2024-38581 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 948255282074d9367e01908b3f5dcf8c10fc9c3d ] Delete fence fallback timer to fix the ramdom use-after-free issue. v2: move to amdgpu_mes.c Signed-off-by: Jack Xiao <Jack.Xiao(a)amd.com> Acked-by: Lijo Lazar <lijo.lazar(a)amd.com> Acked-by: Christian König <christian.koenig(a)amd.com> Signed-off-by: Alex Deucher <alexander.deucher(a)amd.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Li Huafei <lihuafei1(a)huawei.com> --- drivers/gpu/drm/amd/amdgpu/amdgpu_mes.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/gpu/drm/amd/amdgpu/amdgpu_mes.c b/drivers/gpu/drm/amd/amdgpu/amdgpu_mes.c index 15c67fa404ff..c5c55e132af2 100644 --- a/drivers/gpu/drm/amd/amdgpu/amdgpu_mes.c +++ b/drivers/gpu/drm/amd/amdgpu/amdgpu_mes.c @@ -1098,6 +1098,7 @@ void amdgpu_mes_remove_ring(struct amdgpu_device *adev, return; amdgpu_mes_remove_hw_queue(adev, ring->hw_queue_id); + del_timer_sync(&ring->fence_drv.fallback_timer); amdgpu_ring_fini(ring); kfree(ring); } -- 2.25.1

2 1

[PATCH openEuler-1.0-LTS] btrfs: fix memory ordering between normal and ordered work functions
by Yifan Qiao 10 Jul '24

10 Jul '24

From: Nikolay Borisov <nborisov(a)suse.com> stable inclusion from stable-v4.19.218 commit ed058d735a70f4b063323f1a7bb33cda0f987513 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNFN CVE: CVE-2021-47189 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 45da9c1767ac31857df572f0a909fbe88fd5a7e9 upstream. Ordered work functions aren't guaranteed to be handled by the same thread which executed the normal work functions. The only way execution between normal/ordered functions is synchronized is via the WORK_DONE_BIT, unfortunately the used bitops don't guarantee any ordering whatsoever. This manifested as seemingly inexplicable crashes on ARM64, where async_chunk::inode is seen as non-null in async_cow_submit which causes submit_compressed_extents to be called and crash occurs because async_chunk::inode suddenly became NULL. The call trace was similar to: pc : submit_compressed_extents+0x38/0x3d0 lr : async_cow_submit+0x50/0xd0 sp : ffff800015d4bc20 <registers omitted for brevity> Call trace: submit_compressed_extents+0x38/0x3d0 async_cow_submit+0x50/0xd0 run_ordered_work+0xc8/0x280 btrfs_work_helper+0x98/0x250 process_one_work+0x1f0/0x4ac worker_thread+0x188/0x504 kthread+0x110/0x114 ret_from_fork+0x10/0x18 Fix this by adding respective barrier calls which ensure that all accesses preceding setting of WORK_DONE_BIT are strictly ordered before setting the flag. At the same time add a read barrier after reading of WORK_DONE_BIT in run_ordered_work which ensures all subsequent loads would be strictly ordered after reading the bit. This in turn ensures are all accesses before WORK_DONE_BIT are going to be strictly ordered before any access that can occur in ordered_func. Reported-by: Chris Murphy <lists(a)colorremedies.com> Fixes: 08a9ff326418 ("btrfs: Added btrfs_workqueue_struct implemented ordered execution based on kernel workqueue") CC: stable(a)vger.kernel.org # 4.4+ Link: https://bugzilla.redhat.com/show_bug.cgi?id=2011928 Reviewed-by: Josef Bacik <josef(a)toxicpanda.com> Tested-by: Chris Murphy <chris(a)colorremedies.com> Signed-off-by: Nikolay Borisov <nborisov(a)suse.com> Signed-off-by: David Sterba <dsterba(a)suse.com> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Yifan Qiao <qiaoyifan4(a)huawei.com> --- fs/btrfs/async-thread.c | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/fs/btrfs/async-thread.c b/fs/btrfs/async-thread.c index f79c0cb7697a..21f8f475c894 100644 --- a/fs/btrfs/async-thread.c +++ b/fs/btrfs/async-thread.c @@ -270,6 +270,13 @@ static void run_ordered_work(struct __btrfs_workqueue *wq, ordered_list); if (!test_bit(WORK_DONE_BIT, &work->flags)) break; + /* + * Orders all subsequent loads after reading WORK_DONE_BIT, + * paired with the smp_mb__before_atomic in btrfs_work_helper + * this guarantees that the ordered function will see all + * updates from ordinary work function. + */ + smp_rmb(); /* * we are going to call the ordered done function, but @@ -355,6 +362,13 @@ static void normal_work_helper(struct btrfs_work *work) thresh_exec_hook(wq); work->func(work); if (need_order) { + /* + * Ensures all memory accesses done in the work function are + * ordered before setting the WORK_DONE_BIT. Ensuring the thread + * which is going to executed the ordered work sees them. + * Pairs with the smp_rmb in run_ordered_work. + */ + smp_mb__before_atomic(); set_bit(WORK_DONE_BIT, &work->flags); run_ordered_work(wq, work); } -- 2.39.2

2 1

[openeuler:OLK-6.6] BUILD REGRESSION b752420db6600f7d154e7b1d9ccbf448a9cc3170
by kernel test robot 10 Jul '24

10 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-6.6 branch HEAD: b752420db6600f7d154e7b1d9ccbf448a9cc3170 !9779 CVE-2024-39461 Error/Warning ids grouped by kconfigs: recent_errors |-- arm64-allmodconfig | `-- clang:warning:no-such-include-directory:drivers-infiniband-hw-hiroce3-include-mag |-- arm64-randconfig-002-20240709 | `-- drivers-net-ethernet-mucse-rnpvf-rnpvf_main.c:error:called-object-type-int-is-not-a-function-or-function-pointer `-- loongarch-randconfig-002-20240709 `-- drivers-net-ethernet-mucse-rnpm-rnpm_main.c:warning:d-directive-output-may-be-truncated-writing-between-and-bytes-into-a-region-of-size-between-and elapsed time: 816m configs tested: 39 configs skipped: 133 tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-13.2.0 arm64 defconfig gcc-13.2.0 arm64 randconfig-001-20240709 clang-19 arm64 randconfig-002-20240709 clang-17 arm64 randconfig-003-20240709 clang-19 arm64 randconfig-004-20240709 clang-19 loongarch allnoconfig gcc-13.2.0 loongarch defconfig gcc-13.2.0 loongarch randconfig-001-20240709 gcc-13.2.0 loongarch randconfig-002-20240709 gcc-13.2.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240710 clang-18 x86_64 buildonly-randconfig-002-20240710 clang-18 x86_64 buildonly-randconfig-003-20240710 clang-18 x86_64 buildonly-randconfig-004-20240710 clang-18 x86_64 buildonly-randconfig-005-20240710 gcc-13 x86_64 buildonly-randconfig-006-20240710 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240710 gcc-13 x86_64 randconfig-002-20240710 clang-18 x86_64 randconfig-003-20240710 gcc-12 x86_64 randconfig-004-20240710 clang-18 x86_64 randconfig-005-20240710 clang-18 x86_64 randconfig-006-20240710 gcc-13 x86_64 randconfig-011-20240710 clang-18 x86_64 randconfig-012-20240710 clang-18 x86_64 randconfig-013-20240710 clang-18 x86_64 randconfig-014-20240710 clang-18 x86_64 randconfig-015-20240710 clang-18 x86_64 randconfig-016-20240710 gcc-13 x86_64 randconfig-071-20240710 gcc-13 x86_64 randconfig-072-20240710 clang-18 x86_64 randconfig-073-20240710 clang-18 x86_64 randconfig-074-20240710 gcc-7 x86_64 randconfig-075-20240710 clang-18 x86_64 randconfig-076-20240710 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-5.10] BUILD SUCCESS 223a7beb53529b66601db229f1cd1a5e6d278982
by kernel test robot 10 Jul '24

10 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-5.10 branch HEAD: 223a7beb53529b66601db229f1cd1a5e6d278982 !9643 f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() elapsed time: 729m configs tested: 34 configs skipped: 128 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240709 clang-19 arm64 randconfig-002-20240709 clang-17 arm64 randconfig-003-20240709 clang-19 arm64 randconfig-004-20240709 clang-19 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240709 gcc-11 x86_64 buildonly-randconfig-002-20240709 clang-18 x86_64 buildonly-randconfig-003-20240709 clang-18 x86_64 buildonly-randconfig-004-20240709 gcc-9 x86_64 buildonly-randconfig-005-20240709 gcc-13 x86_64 buildonly-randconfig-006-20240709 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240709 clang-18 x86_64 randconfig-002-20240709 gcc-10 x86_64 randconfig-003-20240709 clang-18 x86_64 randconfig-004-20240709 gcc-12 x86_64 randconfig-005-20240709 gcc-13 x86_64 randconfig-006-20240709 gcc-8 x86_64 randconfig-011-20240709 clang-18 x86_64 randconfig-012-20240709 clang-18 x86_64 randconfig-013-20240709 clang-18 x86_64 randconfig-014-20240709 clang-18 x86_64 randconfig-015-20240709 clang-18 x86_64 randconfig-016-20240709 clang-18 x86_64 randconfig-071-20240709 gcc-7 x86_64 randconfig-072-20240709 clang-18 x86_64 randconfig-073-20240709 gcc-13 x86_64 randconfig-074-20240709 gcc-13 x86_64 randconfig-075-20240709 gcc-11 x86_64 randconfig-076-20240709 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH openEuler-22.03-LTS-SP1] nilfs2: fix use-after-free of timer for log writer thread
by Guo Mengqi 09 Jul '24

09 Jul '24

From: Ryusuke Konishi <konishi.ryusuke(a)gmail.com> stable inclusion from stable-v5.10.219 commit 67fa90d4a2ccd9ebb0e1e168c7d0b5d0cf3c7148 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6S5D CVE: CVE-2024-38583 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit f5d4e04634c9cf68bdf23de08ada0bb92e8befe7 upstream. Patch series "nilfs2: fix log writer related issues". This bug fix series covers three nilfs2 log writer-related issues, including a timer use-after-free issue and potential deadlock issue on unmount, and a potential freeze issue in event synchronization found during their analysis. Details are described in each commit log. This patch (of 3): A use-after-free issue has been reported regarding the timer sc_timer on the nilfs_sc_info structure. The problem is that even though it is used to wake up a sleeping log writer thread, sc_timer is not shut down until the nilfs_sc_info structure is about to be freed, and is used regardless of the thread's lifetime. Fix this issue by limiting the use of sc_timer only while the log writer thread is alive. Link: https://lkml.kernel.org/r/20240520132621.4054-1-konishi.ryusuke@gmail.com Link: https://lkml.kernel.org/r/20240520132621.4054-2-konishi.ryusuke@gmail.com Fixes: fdce895ea5dd ("nilfs2: change sc_timer from a pointer to an embedded one in struct nilfs_sc_info") Signed-off-by: Ryusuke Konishi <konishi.ryusuke(a)gmail.com> Reported-by: "Bai, Shuangpeng" <sjb7183(a)psu.edu> Closes: https://groups.google.com/g/syzkaller/c/MK_LYqtt8ko/m/8rgdWeseAwAJ Tested-by: Ryusuke Konishi <konishi.ryusuke(a)gmail.com> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Guo Mengqi <guomengqi3(a)huawei.com> --- fs/nilfs2/segment.c | 25 +++++++++++++++++++------ 1 file changed, 19 insertions(+), 6 deletions(-) diff --git a/fs/nilfs2/segment.c b/fs/nilfs2/segment.c index 931f87d657fc..d4e518a31131 100644 --- a/fs/nilfs2/segment.c +++ b/fs/nilfs2/segment.c @@ -2129,8 +2129,10 @@ static void nilfs_segctor_start_timer(struct nilfs_sc_info *sci) { spin_lock(&sci->sc_state_lock); if (!(sci->sc_state & NILFS_SEGCTOR_COMMIT)) { - sci->sc_timer.expires = jiffies + sci->sc_interval; - add_timer(&sci->sc_timer); + if (sci->sc_task) { + sci->sc_timer.expires = jiffies + sci->sc_interval; + add_timer(&sci->sc_timer); + } sci->sc_state |= NILFS_SEGCTOR_COMMIT; } spin_unlock(&sci->sc_state_lock); @@ -2350,10 +2352,21 @@ int nilfs_construct_dsync_segment(struct super_block *sb, struct inode *inode, */ static void nilfs_segctor_accept(struct nilfs_sc_info *sci) { + bool thread_is_alive; + spin_lock(&sci->sc_state_lock); sci->sc_seq_accepted = sci->sc_seq_request; + thread_is_alive = (bool)sci->sc_task; spin_unlock(&sci->sc_state_lock); - del_timer_sync(&sci->sc_timer); + + /* + * This function does not race with the log writer thread's + * termination. Therefore, deleting sc_timer, which should not be + * done after the log writer thread exits, can be done safely outside + * the area protected by sc_state_lock. + */ + if (thread_is_alive) + del_timer_sync(&sci->sc_timer); } /** @@ -2379,7 +2392,7 @@ static void nilfs_segctor_notify(struct nilfs_sc_info *sci, int mode, int err) sci->sc_flush_request &= ~FLUSH_DAT_BIT; /* re-enable timer if checkpoint creation was not done */ - if ((sci->sc_state & NILFS_SEGCTOR_COMMIT) && + if ((sci->sc_state & NILFS_SEGCTOR_COMMIT) && sci->sc_task && time_before(jiffies, sci->sc_timer.expires)) add_timer(&sci->sc_timer); } @@ -2569,6 +2582,7 @@ static int nilfs_segctor_thread(void *arg) int timeout = 0; sci->sc_timer_task = current; + timer_setup(&sci->sc_timer, nilfs_construction_timeout, 0); /* start sync. */ sci->sc_task = current; @@ -2637,6 +2651,7 @@ static int nilfs_segctor_thread(void *arg) /* end sync. */ sci->sc_task = NULL; + del_timer_sync(&sci->sc_timer); wake_up(&sci->sc_wait_task); /* for nilfs_segctor_kill_thread() */ return 0; } @@ -2699,7 +2714,6 @@ static struct nilfs_sc_info *nilfs_segctor_new(struct super_block *sb, INIT_LIST_HEAD(&sci->sc_gc_inodes); INIT_LIST_HEAD(&sci->sc_iput_queue); INIT_WORK(&sci->sc_iput_work, nilfs_iput_work_func); - timer_setup(&sci->sc_timer, nilfs_construction_timeout, 0); sci->sc_interval = HZ * NILFS_SC_DEFAULT_TIMEOUT; sci->sc_mjcp_freq = HZ * NILFS_SC_DEFAULT_SR_FREQ; @@ -2785,7 +2799,6 @@ static void nilfs_segctor_destroy(struct nilfs_sc_info *sci) down_write(&nilfs->ns_segctor_sem); - del_timer_sync(&sci->sc_timer); kfree(sci); } -- 2.17.1

2 1

[PATCH OLK-5.10] nilfs2: fix use-after-free of timer for log writer thread
by Guo Mengqi 09 Jul '24

09 Jul '24

From: Ryusuke Konishi <konishi.ryusuke(a)gmail.com> stable inclusion from stable-v5.10.219 commit 67fa90d4a2ccd9ebb0e1e168c7d0b5d0cf3c7148 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6S5D CVE: CVE-2024-38583 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit f5d4e04634c9cf68bdf23de08ada0bb92e8befe7 upstream. Patch series "nilfs2: fix log writer related issues". This bug fix series covers three nilfs2 log writer-related issues, including a timer use-after-free issue and potential deadlock issue on unmount, and a potential freeze issue in event synchronization found during their analysis. Details are described in each commit log. This patch (of 3): A use-after-free issue has been reported regarding the timer sc_timer on the nilfs_sc_info structure. The problem is that even though it is used to wake up a sleeping log writer thread, sc_timer is not shut down until the nilfs_sc_info structure is about to be freed, and is used regardless of the thread's lifetime. Fix this issue by limiting the use of sc_timer only while the log writer thread is alive. Link: https://lkml.kernel.org/r/20240520132621.4054-1-konishi.ryusuke@gmail.com Link: https://lkml.kernel.org/r/20240520132621.4054-2-konishi.ryusuke@gmail.com Fixes: fdce895ea5dd ("nilfs2: change sc_timer from a pointer to an embedded one in struct nilfs_sc_info") Signed-off-by: Ryusuke Konishi <konishi.ryusuke(a)gmail.com> Reported-by: "Bai, Shuangpeng" <sjb7183(a)psu.edu> Closes: https://groups.google.com/g/syzkaller/c/MK_LYqtt8ko/m/8rgdWeseAwAJ Tested-by: Ryusuke Konishi <konishi.ryusuke(a)gmail.com> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Guo Mengqi <guomengqi3(a)huawei.com> --- fs/nilfs2/segment.c | 25 +++++++++++++++++++------ 1 file changed, 19 insertions(+), 6 deletions(-) diff --git a/fs/nilfs2/segment.c b/fs/nilfs2/segment.c index 3997f377f0e3..2eeae67ad298 100644 --- a/fs/nilfs2/segment.c +++ b/fs/nilfs2/segment.c @@ -2164,8 +2164,10 @@ static void nilfs_segctor_start_timer(struct nilfs_sc_info *sci) { spin_lock(&sci->sc_state_lock); if (!(sci->sc_state & NILFS_SEGCTOR_COMMIT)) { - sci->sc_timer.expires = jiffies + sci->sc_interval; - add_timer(&sci->sc_timer); + if (sci->sc_task) { + sci->sc_timer.expires = jiffies + sci->sc_interval; + add_timer(&sci->sc_timer); + } sci->sc_state |= NILFS_SEGCTOR_COMMIT; } spin_unlock(&sci->sc_state_lock); @@ -2385,10 +2387,21 @@ int nilfs_construct_dsync_segment(struct super_block *sb, struct inode *inode, */ static void nilfs_segctor_accept(struct nilfs_sc_info *sci) { + bool thread_is_alive; + spin_lock(&sci->sc_state_lock); sci->sc_seq_accepted = sci->sc_seq_request; + thread_is_alive = (bool)sci->sc_task; spin_unlock(&sci->sc_state_lock); - del_timer_sync(&sci->sc_timer); + + /* + * This function does not race with the log writer thread's + * termination. Therefore, deleting sc_timer, which should not be + * done after the log writer thread exits, can be done safely outside + * the area protected by sc_state_lock. + */ + if (thread_is_alive) + del_timer_sync(&sci->sc_timer); } /** @@ -2414,7 +2427,7 @@ static void nilfs_segctor_notify(struct nilfs_sc_info *sci, int mode, int err) sci->sc_flush_request &= ~FLUSH_DAT_BIT; /* re-enable timer if checkpoint creation was not done */ - if ((sci->sc_state & NILFS_SEGCTOR_COMMIT) && + if ((sci->sc_state & NILFS_SEGCTOR_COMMIT) && sci->sc_task && time_before(jiffies, sci->sc_timer.expires)) add_timer(&sci->sc_timer); } @@ -2604,6 +2617,7 @@ static int nilfs_segctor_thread(void *arg) int timeout = 0; sci->sc_timer_task = current; + timer_setup(&sci->sc_timer, nilfs_construction_timeout, 0); /* start sync. */ sci->sc_task = current; @@ -2670,6 +2684,7 @@ static int nilfs_segctor_thread(void *arg) end_thread: /* end sync. */ sci->sc_task = NULL; + del_timer_sync(&sci->sc_timer); wake_up(&sci->sc_wait_task); /* for nilfs_segctor_kill_thread() */ spin_unlock(&sci->sc_state_lock); return 0; @@ -2733,7 +2748,6 @@ static struct nilfs_sc_info *nilfs_segctor_new(struct super_block *sb, INIT_LIST_HEAD(&sci->sc_gc_inodes); INIT_LIST_HEAD(&sci->sc_iput_queue); INIT_WORK(&sci->sc_iput_work, nilfs_iput_work_func); - timer_setup(&sci->sc_timer, nilfs_construction_timeout, 0); sci->sc_interval = HZ * NILFS_SC_DEFAULT_TIMEOUT; sci->sc_mjcp_freq = HZ * NILFS_SC_DEFAULT_SR_FREQ; @@ -2819,7 +2833,6 @@ static void nilfs_segctor_destroy(struct nilfs_sc_info *sci) down_write(&nilfs->ns_segctor_sem); - del_timer_sync(&sci->sc_timer); kfree(sci); } -- 2.17.1

2 1

[PATCH openEuler-22.03-LTS-SP1] net/sched: act_skbmod: prevent kernel-infoleak
by Guo Mengqi 09 Jul '24

09 Jul '24

From: Eric Dumazet <edumazet(a)google.com> stable inclusion from stable-v5.10.215 commit 5e45dc4408857305f4685abfd7a528a1e58b51b5 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QG2F Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit d313eb8b77557a6d5855f42d2234bd592c7b50dd upstream. syzbot found that tcf_skbmod_dump() was copying four bytes from kernel stack to user space [1]. The issue here is that 'struct tc_skbmod' has a four bytes hole. We need to clear the structure before filling fields. [1] BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline] BUG: KMSAN: kernel-infoleak in copy_to_user_iter lib/iov_iter.c:24 [inline] BUG: KMSAN: kernel-infoleak in iterate_ubuf include/linux/iov_iter.h:29 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance2 include/linux/iov_iter.h:245 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance include/linux/iov_iter.h:271 [inline] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x366/0x2520 lib/iov_iter.c:185 instrument_copy_to_user include/linux/instrumented.h:114 [inline] copy_to_user_iter lib/iov_iter.c:24 [inline] iterate_ubuf include/linux/iov_iter.h:29 [inline] iterate_and_advance2 include/linux/iov_iter.h:245 [inline] iterate_and_advance include/linux/iov_iter.h:271 [inline] _copy_to_iter+0x366/0x2520 lib/iov_iter.c:185 copy_to_iter include/linux/uio.h:196 [inline] simple_copy_to_iter net/core/datagram.c:532 [inline] __skb_datagram_iter+0x185/0x1000 net/core/datagram.c:420 skb_copy_datagram_iter+0x5c/0x200 net/core/datagram.c:546 skb_copy_datagram_msg include/linux/skbuff.h:4050 [inline] netlink_recvmsg+0x432/0x1610 net/netlink/af_netlink.c:1962 sock_recvmsg_nosec net/socket.c:1046 [inline] sock_recvmsg+0x2c4/0x340 net/socket.c:1068 __sys_recvfrom+0x35a/0x5f0 net/socket.c:2242 __do_sys_recvfrom net/socket.c:2260 [inline] __se_sys_recvfrom net/socket.c:2256 [inline] __x64_sys_recvfrom+0x126/0x1d0 net/socket.c:2256 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Uninit was stored to memory at: pskb_expand_head+0x30f/0x19d0 net/core/skbuff.c:2253 netlink_trim+0x2c2/0x330 net/netlink/af_netlink.c:1317 netlink_unicast+0x9f/0x1260 net/netlink/af_netlink.c:1351 nlmsg_unicast include/net/netlink.h:1144 [inline] nlmsg_notify+0x21d/0x2f0 net/netlink/af_netlink.c:2610 rtnetlink_send+0x73/0x90 net/core/rtnetlink.c:741 rtnetlink_maybe_send include/linux/rtnetlink.h:17 [inline] tcf_add_notify net/sched/act_api.c:2048 [inline] tcf_action_add net/sched/act_api.c:2071 [inline] tc_ctl_action+0x146e/0x19d0 net/sched/act_api.c:2119 rtnetlink_rcv_msg+0x1737/0x1900 net/core/rtnetlink.c:6595 netlink_rcv_skb+0x375/0x650 net/netlink/af_netlink.c:2559 rtnetlink_rcv+0x34/0x40 net/core/rtnetlink.c:6613 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline] netlink_unicast+0xf4c/0x1260 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x10df/0x11f0 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x30f/0x380 net/socket.c:745 ____sys_sendmsg+0x877/0xb60 net/socket.c:2584 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638 __sys_sendmsg net/socket.c:2667 [inline] __do_sys_sendmsg net/socket.c:2676 [inline] __se_sys_sendmsg net/socket.c:2674 [inline] __x64_sys_sendmsg+0x307/0x4a0 net/socket.c:2674 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Uninit was stored to memory at: __nla_put lib/nlattr.c:1041 [inline] nla_put+0x1c6/0x230 lib/nlattr.c:1099 tcf_skbmod_dump+0x23f/0xc20 net/sched/act_skbmod.c:256 tcf_action_dump_old net/sched/act_api.c:1191 [inline] tcf_action_dump_1+0x85e/0x970 net/sched/act_api.c:1227 tcf_action_dump+0x1fd/0x460 net/sched/act_api.c:1251 tca_get_fill+0x519/0x7a0 net/sched/act_api.c:1628 tcf_add_notify_msg net/sched/act_api.c:2023 [inline] tcf_add_notify net/sched/act_api.c:2042 [inline] tcf_action_add net/sched/act_api.c:2071 [inline] tc_ctl_action+0x1365/0x19d0 net/sched/act_api.c:2119 rtnetlink_rcv_msg+0x1737/0x1900 net/core/rtnetlink.c:6595 netlink_rcv_skb+0x375/0x650 net/netlink/af_netlink.c:2559 rtnetlink_rcv+0x34/0x40 net/core/rtnetlink.c:6613 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline] netlink_unicast+0xf4c/0x1260 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x10df/0x11f0 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x30f/0x380 net/socket.c:745 ____sys_sendmsg+0x877/0xb60 net/socket.c:2584 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638 __sys_sendmsg net/socket.c:2667 [inline] __do_sys_sendmsg net/socket.c:2676 [inline] __se_sys_sendmsg net/socket.c:2674 [inline] __x64_sys_sendmsg+0x307/0x4a0 net/socket.c:2674 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Local variable opt created at: tcf_skbmod_dump+0x9d/0xc20 net/sched/act_skbmod.c:244 tcf_action_dump_old net/sched/act_api.c:1191 [inline] tcf_action_dump_1+0x85e/0x970 net/sched/act_api.c:1227 Bytes 188-191 of 248 are uninitialized Memory access of size 248 starts at ffff888117697680 Data copied to user address 00007ffe56d855f0 Fixes: 86da71b57383 ("net_sched: Introduce skbmod action") Signed-off-by: Eric Dumazet <edumazet(a)google.com> Acked-by: Jamal Hadi Salim <jhs(a)mojatatu.com> Link: https://lore.kernel.org/r/20240403130908.93421-1-edumazet@google.com Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Wang Hai <wanghai38(a)huawei.com> --- net/sched/act_skbmod.c | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/net/sched/act_skbmod.c b/net/sched/act_skbmod.c index 8d17a543cc9f..9a266fd33cfb 100644 --- a/net/sched/act_skbmod.c +++ b/net/sched/act_skbmod.c @@ -219,13 +219,13 @@ static int tcf_skbmod_dump(struct sk_buff *skb, struct tc_action *a, struct tcf_skbmod *d = to_skbmod(a); unsigned char *b = skb_tail_pointer(skb); struct tcf_skbmod_params *p; - struct tc_skbmod opt = { - .index = d->tcf_index, - .refcnt = refcount_read(&d->tcf_refcnt) - ref, - .bindcnt = atomic_read(&d->tcf_bindcnt) - bind, - }; + struct tc_skbmod opt; struct tcf_t t; + memset(&opt, 0, sizeof(opt)); + opt.index = d->tcf_index; + opt.refcnt = refcount_read(&d->tcf_refcnt) - ref, + opt.bindcnt = atomic_read(&d->tcf_bindcnt) - bind; spin_lock_bh(&d->tcf_lock); opt.action = d->tcf_action; p = rcu_dereference_protected(d->skbmod_p, -- 2.17.1

2 1

[PATCH OLK-5.10] net/sched: act_skbmod: prevent kernel-infoleak
by Guo Mengqi 09 Jul '24

09 Jul '24

From: Eric Dumazet <edumazet(a)google.com> stable inclusion from stable-v5.10.215 commit 5e45dc4408857305f4685abfd7a528a1e58b51b5 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QG2F Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit d313eb8b77557a6d5855f42d2234bd592c7b50dd upstream. syzbot found that tcf_skbmod_dump() was copying four bytes from kernel stack to user space [1]. The issue here is that 'struct tc_skbmod' has a four bytes hole. We need to clear the structure before filling fields. [1] BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline] BUG: KMSAN: kernel-infoleak in copy_to_user_iter lib/iov_iter.c:24 [inline] BUG: KMSAN: kernel-infoleak in iterate_ubuf include/linux/iov_iter.h:29 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance2 include/linux/iov_iter.h:245 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance include/linux/iov_iter.h:271 [inline] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x366/0x2520 lib/iov_iter.c:185 instrument_copy_to_user include/linux/instrumented.h:114 [inline] copy_to_user_iter lib/iov_iter.c:24 [inline] iterate_ubuf include/linux/iov_iter.h:29 [inline] iterate_and_advance2 include/linux/iov_iter.h:245 [inline] iterate_and_advance include/linux/iov_iter.h:271 [inline] _copy_to_iter+0x366/0x2520 lib/iov_iter.c:185 copy_to_iter include/linux/uio.h:196 [inline] simple_copy_to_iter net/core/datagram.c:532 [inline] __skb_datagram_iter+0x185/0x1000 net/core/datagram.c:420 skb_copy_datagram_iter+0x5c/0x200 net/core/datagram.c:546 skb_copy_datagram_msg include/linux/skbuff.h:4050 [inline] netlink_recvmsg+0x432/0x1610 net/netlink/af_netlink.c:1962 sock_recvmsg_nosec net/socket.c:1046 [inline] sock_recvmsg+0x2c4/0x340 net/socket.c:1068 __sys_recvfrom+0x35a/0x5f0 net/socket.c:2242 __do_sys_recvfrom net/socket.c:2260 [inline] __se_sys_recvfrom net/socket.c:2256 [inline] __x64_sys_recvfrom+0x126/0x1d0 net/socket.c:2256 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Uninit was stored to memory at: pskb_expand_head+0x30f/0x19d0 net/core/skbuff.c:2253 netlink_trim+0x2c2/0x330 net/netlink/af_netlink.c:1317 netlink_unicast+0x9f/0x1260 net/netlink/af_netlink.c:1351 nlmsg_unicast include/net/netlink.h:1144 [inline] nlmsg_notify+0x21d/0x2f0 net/netlink/af_netlink.c:2610 rtnetlink_send+0x73/0x90 net/core/rtnetlink.c:741 rtnetlink_maybe_send include/linux/rtnetlink.h:17 [inline] tcf_add_notify net/sched/act_api.c:2048 [inline] tcf_action_add net/sched/act_api.c:2071 [inline] tc_ctl_action+0x146e/0x19d0 net/sched/act_api.c:2119 rtnetlink_rcv_msg+0x1737/0x1900 net/core/rtnetlink.c:6595 netlink_rcv_skb+0x375/0x650 net/netlink/af_netlink.c:2559 rtnetlink_rcv+0x34/0x40 net/core/rtnetlink.c:6613 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline] netlink_unicast+0xf4c/0x1260 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x10df/0x11f0 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x30f/0x380 net/socket.c:745 ____sys_sendmsg+0x877/0xb60 net/socket.c:2584 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638 __sys_sendmsg net/socket.c:2667 [inline] __do_sys_sendmsg net/socket.c:2676 [inline] __se_sys_sendmsg net/socket.c:2674 [inline] __x64_sys_sendmsg+0x307/0x4a0 net/socket.c:2674 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Uninit was stored to memory at: __nla_put lib/nlattr.c:1041 [inline] nla_put+0x1c6/0x230 lib/nlattr.c:1099 tcf_skbmod_dump+0x23f/0xc20 net/sched/act_skbmod.c:256 tcf_action_dump_old net/sched/act_api.c:1191 [inline] tcf_action_dump_1+0x85e/0x970 net/sched/act_api.c:1227 tcf_action_dump+0x1fd/0x460 net/sched/act_api.c:1251 tca_get_fill+0x519/0x7a0 net/sched/act_api.c:1628 tcf_add_notify_msg net/sched/act_api.c:2023 [inline] tcf_add_notify net/sched/act_api.c:2042 [inline] tcf_action_add net/sched/act_api.c:2071 [inline] tc_ctl_action+0x1365/0x19d0 net/sched/act_api.c:2119 rtnetlink_rcv_msg+0x1737/0x1900 net/core/rtnetlink.c:6595 netlink_rcv_skb+0x375/0x650 net/netlink/af_netlink.c:2559 rtnetlink_rcv+0x34/0x40 net/core/rtnetlink.c:6613 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline] netlink_unicast+0xf4c/0x1260 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x10df/0x11f0 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x30f/0x380 net/socket.c:745 ____sys_sendmsg+0x877/0xb60 net/socket.c:2584 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638 __sys_sendmsg net/socket.c:2667 [inline] __do_sys_sendmsg net/socket.c:2676 [inline] __se_sys_sendmsg net/socket.c:2674 [inline] __x64_sys_sendmsg+0x307/0x4a0 net/socket.c:2674 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Local variable opt created at: tcf_skbmod_dump+0x9d/0xc20 net/sched/act_skbmod.c:244 tcf_action_dump_old net/sched/act_api.c:1191 [inline] tcf_action_dump_1+0x85e/0x970 net/sched/act_api.c:1227 Bytes 188-191 of 248 are uninitialized Memory access of size 248 starts at ffff888117697680 Data copied to user address 00007ffe56d855f0 Fixes: 86da71b57383 ("net_sched: Introduce skbmod action") Signed-off-by: Eric Dumazet <edumazet(a)google.com> Acked-by: Jamal Hadi Salim <jhs(a)mojatatu.com> Link: https://lore.kernel.org/r/20240403130908.93421-1-edumazet@google.com Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Wang Hai <wanghai38(a)huawei.com> --- net/sched/act_skbmod.c | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/net/sched/act_skbmod.c b/net/sched/act_skbmod.c index aa98dcac94b9..934765a2edeb 100644 --- a/net/sched/act_skbmod.c +++ b/net/sched/act_skbmod.c @@ -219,13 +219,13 @@ static int tcf_skbmod_dump(struct sk_buff *skb, struct tc_action *a, struct tcf_skbmod *d = to_skbmod(a); unsigned char *b = skb_tail_pointer(skb); struct tcf_skbmod_params *p; - struct tc_skbmod opt = { - .index = d->tcf_index, - .refcnt = refcount_read(&d->tcf_refcnt) - ref, - .bindcnt = atomic_read(&d->tcf_bindcnt) - bind, - }; + struct tc_skbmod opt; struct tcf_t t; + memset(&opt, 0, sizeof(opt)); + opt.index = d->tcf_index; + opt.refcnt = refcount_read(&d->tcf_refcnt) - ref, + opt.bindcnt = atomic_read(&d->tcf_bindcnt) - bind; spin_lock_bh(&d->tcf_lock); opt.action = d->tcf_action; p = rcu_dereference_protected(d->skbmod_p, -- 2.17.1

2 1

[PATCH OLK-5.10] power: supply: bq27xxx-i2c: Do not free non existing IRQ
by Guo Mengqi 09 Jul '24

09 Jul '24

From: Hans de Goede <hdegoede(a)redhat.com> stable inclusion from stable-v5.10.212 commit d7acc4a569f5f4513120c85ea2b9f04909b7490f category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q8ME Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 2df70149e73e79783bcbc7db4fa51ecef0e2022c ] The bq27xxx i2c-client may not have an IRQ, in which case client->irq will be 0. bq27xxx_battery_i2c_probe() already has an if (client->irq) check wrapping the request_threaded_irq(). But bq27xxx_battery_i2c_remove() unconditionally calls free_irq(client->irq) leading to: [ 190.310742] ------------[ cut here ]------------ [ 190.310843] Trying to free already-free IRQ 0 [ 190.310861] WARNING: CPU: 2 PID: 1304 at kernel/irq/manage.c:1893 free_irq+0x1b8/0x310 Followed by a backtrace when unbinding the driver. Add an if (client->irq) to bq27xxx_battery_i2c_remove() mirroring probe() to fix this. Fixes: 444ff00734f3 ("power: supply: bq27xxx: Fix I2C IRQ race on remove") Signed-off-by: Hans de Goede <hdegoede(a)redhat.com> Link: https://lore.kernel.org/r/20240215155133.70537-1-hdegoede@redhat.com Signed-off-by: Sebastian Reichel <sebastian.reichel(a)collabora.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Wang Hai <wanghai38(a)huawei.com> --- drivers/power/supply/bq27xxx_battery_i2c.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/drivers/power/supply/bq27xxx_battery_i2c.c b/drivers/power/supply/bq27xxx_battery_i2c.c index 0e32efb10ee7..6fbae8fc2e50 100644 --- a/drivers/power/supply/bq27xxx_battery_i2c.c +++ b/drivers/power/supply/bq27xxx_battery_i2c.c @@ -209,7 +209,9 @@ static int bq27xxx_battery_i2c_remove(struct i2c_client *client) { struct bq27xxx_device_info *di = i2c_get_clientdata(client); - free_irq(client->irq, di); + if (client->irq) + free_irq(client->irq, di); + bq27xxx_battery_teardown(di); mutex_lock(&battery_mutex); -- 2.17.1

2 1

[PATCH openEuler-22.03-LTS-SP1] drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
by Guo Mengqi 09 Jul '24

09 Jul '24

From: Aleksandr Mishin <amishin(a)t-argos.ru> stable inclusion from stable-v6.6.33 commit dcf53e6103b26e7458be71491d0641f49fbd5840 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SEW CVE: CVE-2024-38548 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 935a92a1c400285545198ca2800a4c6c519c650a ] In cdns_mhdp_atomic_enable(), the return value of drm_mode_duplicate() is assigned to mhdp_state->current_mode, and there is a dereference of it in drm_mode_set_name(), which will lead to a NULL pointer dereference on failure of drm_mode_duplicate(). Fix this bug add a check of mhdp_state->current_mode. Fixes: fb43aa0acdfd ("drm: bridge: Add support for Cadence MHDP8546 DPI/DP bridge") Signed-off-by: Aleksandr Mishin <amishin(a)t-argos.ru> Reviewed-by: Robert Foss <rfoss(a)kernel.org> Signed-off-by: Robert Foss <rfoss(a)kernel.org> Link: https://patchwork.freedesktop.org/patch/msgid/20240408125810.21899-1-amishi… Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: ZhangPeng <zhangpeng362(a)huawei.com> Signed-off-by: Zheng Zucheng <zhengzucheng(a)huawei.com> --- drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c b/drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c index f56ff97c9899..ae99d04f0045 100644 --- a/drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c +++ b/drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c @@ -1978,6 +1978,9 @@ static void cdns_mhdp_atomic_enable(struct drm_bridge *bridge, mhdp_state = to_cdns_mhdp_bridge_state(new_state); mhdp_state->current_mode = drm_mode_duplicate(bridge->dev, mode); + if (!mhdp_state->current_mode) + return; + drm_mode_set_name(mhdp_state->current_mode); dev_dbg(mhdp->dev, "%s: Enabling mode %s\n", __func__, mode->name); -- 2.17.1

2 1

[PATCH OLK-5.10] power: supply: bq27xxx-i2c: Do not free non existing IRQ
by Guo Mengqi 09 Jul '24

09 Jul '24

From: Hans de Goede <hdegoede(a)redhat.com> stable inclusion from stable-v5.10.212 commit d7acc4a569f5f4513120c85ea2b9f04909b7490f category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q8ME Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 2df70149e73e79783bcbc7db4fa51ecef0e2022c ] The bq27xxx i2c-client may not have an IRQ, in which case client->irq will be 0. bq27xxx_battery_i2c_probe() already has an if (client->irq) check wrapping the request_threaded_irq(). But bq27xxx_battery_i2c_remove() unconditionally calls free_irq(client->irq) leading to: [ 190.310742] ------------[ cut here ]------------ [ 190.310843] Trying to free already-free IRQ 0 [ 190.310861] WARNING: CPU: 2 PID: 1304 at kernel/irq/manage.c:1893 free_irq+0x1b8/0x310 Followed by a backtrace when unbinding the driver. Add an if (client->irq) to bq27xxx_battery_i2c_remove() mirroring probe() to fix this. Fixes: 444ff00734f3 ("power: supply: bq27xxx: Fix I2C IRQ race on remove") Signed-off-by: Hans de Goede <hdegoede(a)redhat.com> Link: https://lore.kernel.org/r/20240215155133.70537-1-hdegoede@redhat.com Signed-off-by: Sebastian Reichel <sebastian.reichel(a)collabora.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Wang Hai <wanghai38(a)huawei.com> --- drivers/power/supply/bq27xxx_battery_i2c.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/drivers/power/supply/bq27xxx_battery_i2c.c b/drivers/power/supply/bq27xxx_battery_i2c.c index 0e32efb10ee7..6fbae8fc2e50 100644 --- a/drivers/power/supply/bq27xxx_battery_i2c.c +++ b/drivers/power/supply/bq27xxx_battery_i2c.c @@ -209,7 +209,9 @@ static int bq27xxx_battery_i2c_remove(struct i2c_client *client) { struct bq27xxx_device_info *di = i2c_get_clientdata(client); - free_irq(client->irq, di); + if (client->irq) + free_irq(client->irq, di); + bq27xxx_battery_teardown(di); mutex_lock(&battery_mutex); -- 2.17.1

2 1

[PATCH openEuler-22.03-LTS-SP1] of: Fix double free in of_parse_phandle_with_args_map
by Guo Mengqi 09 Jul '24

09 Jul '24

From: "Christian A. Ehrhardt" <lk(a)c--e.de> stable inclusion from stable-v5.10.209 commit d5f490343c77e6708b6c4aa7dbbfbcbb9546adea category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q9I4 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… ----------------------------------------- [ Upstream commit 4dde83569832f9377362e50f7748463340c5db6b ] In of_parse_phandle_with_args_map() the inner loop that iterates through the map entries calls of_node_put(new) to free the reference acquired by the previous iteration of the inner loop. This assumes that the value of "new" is NULL on the first iteration of the inner loop. Make sure that this is true in all iterations of the outer loop by setting "new" to NULL after its value is assigned to "cur". Extend the unittest to detect the double free and add an additional test case that actually triggers this path. Fixes: bd6f2fd5a1 ("of: Support parsing phandle argument lists through a nexus node") Cc: Stephen Boyd <stephen.boyd(a)linaro.org> Signed-off-by: "Christian A. Ehrhardt" <lk(a)c--e.de> Link: https://lore.kernel.org/r/20231229105411.1603434-1-lk@c--e.de Signed-off-by: Rob Herring <robh(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Wang Wensheng <wangwensheng4(a)huawei.com> --- drivers/of/base.c | 1 + drivers/of/unittest-data/tests-phandle.dtsi | 10 ++- drivers/of/unittest.c | 74 ++++++++++++--------- 3 files changed, 53 insertions(+), 32 deletions(-) diff --git a/drivers/of/base.c b/drivers/of/base.c index a44a0e7ba251..64600a9b18e8 100644 --- a/drivers/of/base.c +++ b/drivers/of/base.c @@ -1670,6 +1670,7 @@ int of_parse_phandle_with_args_map(const struct device_node *np, out_args->np = new; of_node_put(cur); cur = new; + new = NULL; } put: of_node_put(cur); diff --git a/drivers/of/unittest-data/tests-phandle.dtsi b/drivers/of/unittest-data/tests-phandle.dtsi index 6b33be4c4416..aa0d7027ffa6 100644 --- a/drivers/of/unittest-data/tests-phandle.dtsi +++ b/drivers/of/unittest-data/tests-phandle.dtsi @@ -38,6 +38,13 @@ phandle-map-pass-thru = <0x0 0xf0>; }; + provider5: provider5 { + #phandle-cells = <2>; + phandle-map = <2 7 &provider4 2 3>; + phandle-map-mask = <0xff 0xf>; + phandle-map-pass-thru = <0x0 0xf0>; + }; + consumer-a { phandle-list = <&provider1 1>, <&provider2 2 0>, @@ -64,7 +71,8 @@ <&provider4 4 0x100>, <&provider4 0 0x61>, <&provider0>, - <&provider4 19 0x20>; + <&provider4 19 0x20>, + <&provider5 2 7>; phandle-list-bad-phandle = <12345678 0 0>; phandle-list-bad-args = <&provider2 1 0>, <&provider4 0>; diff --git a/drivers/of/unittest.c b/drivers/of/unittest.c index 5407bbdb6439..19442d5e2bb0 100644 --- a/drivers/of/unittest.c +++ b/drivers/of/unittest.c @@ -447,6 +447,9 @@ static void __init of_unittest_parse_phandle_with_args(void) unittest(passed, "index %i - data error on node %pOF rc=%i\n", i, args.np, rc); + + if (rc == 0) + of_node_put(args.np); } /* Check for missing list property */ @@ -536,8 +539,9 @@ static void __init of_unittest_parse_phandle_with_args(void) static void __init of_unittest_parse_phandle_with_args_map(void) { - struct device_node *np, *p0, *p1, *p2, *p3; + struct device_node *np, *p[6] = {}; struct of_phandle_args args; + unsigned int prefs[6]; int i, rc; np = of_find_node_by_path("/testcase-data/phandle-tests/consumer-b"); @@ -546,34 +550,24 @@ static void __init of_unittest_parse_phandle_with_args_map(void) return; } - p0 = of_find_node_by_path("/testcase-data/phandle-tests/provider0"); - if (!p0) { - pr_err("missing testcase data\n"); - return; - } - - p1 = of_find_node_by_path("/testcase-data/phandle-tests/provider1"); - if (!p1) { - pr_err("missing testcase data\n"); - return; - } - - p2 = of_find_node_by_path("/testcase-data/phandle-tests/provider2"); - if (!p2) { - pr_err("missing testcase data\n"); - return; - } - - p3 = of_find_node_by_path("/testcase-data/phandle-tests/provider3"); - if (!p3) { - pr_err("missing testcase data\n"); - return; + p[0] = of_find_node_by_path("/testcase-data/phandle-tests/provider0"); + p[1] = of_find_node_by_path("/testcase-data/phandle-tests/provider1"); + p[2] = of_find_node_by_path("/testcase-data/phandle-tests/provider2"); + p[3] = of_find_node_by_path("/testcase-data/phandle-tests/provider3"); + p[4] = of_find_node_by_path("/testcase-data/phandle-tests/provider4"); + p[5] = of_find_node_by_path("/testcase-data/phandle-tests/provider5"); + for (i = 0; i < ARRAY_SIZE(p); ++i) { + if (!p[i]) { + pr_err("missing testcase data\n"); + return; + } + prefs[i] = kref_read(&p[i]->kobj.kref); } rc = of_count_phandle_with_args(np, "phandle-list", "#phandle-cells"); - unittest(rc == 7, "of_count_phandle_with_args() returned %i, expected 7\n", rc); + unittest(rc == 8, "of_count_phandle_with_args() returned %i, expected 7\n", rc); - for (i = 0; i < 8; i++) { + for (i = 0; i < 9; i++) { bool passed = true; memset(&args, 0, sizeof(args)); @@ -584,13 +578,13 @@ static void __init of_unittest_parse_phandle_with_args_map(void) switch (i) { case 0: passed &= !rc; - passed &= (args.np == p1); + passed &= (args.np == p[1]); passed &= (args.args_count == 1); passed &= (args.args[0] == 1); break; case 1: passed &= !rc; - passed &= (args.np == p3); + passed &= (args.np == p[3]); passed &= (args.args_count == 3); passed &= (args.args[0] == 2); passed &= (args.args[1] == 5); @@ -601,28 +595,36 @@ static void __init of_unittest_parse_phandle_with_args_map(void) break; case 3: passed &= !rc; - passed &= (args.np == p0); + passed &= (args.np == p[0]); passed &= (args.args_count == 0); break; case 4: passed &= !rc; - passed &= (args.np == p1); + passed &= (args.np == p[1]); passed &= (args.args_count == 1); passed &= (args.args[0] == 3); break; case 5: passed &= !rc; - passed &= (args.np == p0); + passed &= (args.np == p[0]); passed &= (args.args_count == 0); break; case 6: passed &= !rc; - passed &= (args.np == p2); + passed &= (args.np == p[2]); passed &= (args.args_count == 2); passed &= (args.args[0] == 15); passed &= (args.args[1] == 0x20); break; case 7: + passed &= !rc; + passed &= (args.np == p[3]); + passed &= (args.args_count == 3); + passed &= (args.args[0] == 2); + passed &= (args.args[1] == 5); + passed &= (args.args[2] == 3); + break; + case 8: passed &= (rc == -ENOENT); break; default: @@ -631,6 +633,9 @@ static void __init of_unittest_parse_phandle_with_args_map(void) unittest(passed, "index %i - data error on node %s rc=%i\n", i, args.np->full_name, rc); + + if (rc == 0) + of_node_put(args.np); } /* Check for missing list property */ @@ -677,6 +682,13 @@ static void __init of_unittest_parse_phandle_with_args_map(void) "OF: /testcase-data/phandle-tests/consumer-b: #phandle-cells = 2 found -1"); unittest(rc == -EINVAL, "expected:%i got:%i\n", -EINVAL, rc); + + for (i = 0; i < ARRAY_SIZE(p); ++i) { + unittest(prefs[i] == kref_read(&p[i]->kobj.kref), + "provider%d: expected:%d got:%d\n", + i, prefs[i], kref_read(&p[i]->kobj.kref)); + of_node_put(p[i]); + } } static void __init of_unittest_property_string(void) -- 2.17.1

2 1

[PATCH openEuler-22.03-LTS-SP1 v2 0/3] CVE-2024-38598
by Li Nan 09 Jul '24

09 Jul '24

Li Nan (2): Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter" md/raid10: check slab-out-of-bounds in md_bitmap_get_counter Yu Kuai (1): md: fix resync softlockup when bitmap size is less than array size drivers/md/md-bitmap.c | 24 +++++++++++------------- 1 file changed, 11 insertions(+), 13 deletions(-) -- 2.39.2

2 4

[PATCH OLK-6.6] xfs: fix log recovery buffer allocation for the legacy h_size fixup
by Long Li 09 Jul '24

09 Jul '24

From: Christoph Hellwig <hch(a)lst.de> mainline inclusion from mainline-v6.9-rc4 commit 45cf976008ddef4a9c9a30310c9b4fb2a9a6602a category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB0JY CVE: CVE-2024-39472 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Commit a70f9fe52daa ("xfs: detect and handle invalid iclog size set by mkfs") added a fixup for incorrect h_size values used for the initial umount record in old xfsprogs versions. Later commit 0c771b99d6c9 ("xfs: clean up calculation of LR header blocks") cleaned up the log reover buffer calculation, but stoped using the fixed up h_size value to size the log recovery buffer, which can lead to an out of bounds access when the incorrect h_size does not come from the old mkfs tool, but a fuzzer. Fix this by open coding xlog_logrec_hblks and taking the fixed h_size into account for this calculation. Fixes: 0c771b99d6c9 ("xfs: clean up calculation of LR header blocks") Reported-by: Sam Sun <samsun1006219(a)gmail.com> Signed-off-by: Christoph Hellwig <hch(a)lst.de> Reviewed-by: Brian Foster <bfoster(a)redhat.com> Reviewed-by: "Darrick J. Wong" <djwong(a)kernel.org> Signed-off-by: Chandan Babu R <chandanbabu(a)kernel.org> Conflicts: fs/xfs/xfs_log_recover.c [Conflicts due to mainline code use kvfree() in context] Signed-off-by: Long Li <leo.lilong(a)huawei.com> --- fs/xfs/xfs_log_recover.c | 20 ++++++++++++++------ 1 file changed, 14 insertions(+), 6 deletions(-) diff --git a/fs/xfs/xfs_log_recover.c b/fs/xfs/xfs_log_recover.c index a875c7237e2d..28acda900f03 100644 --- a/fs/xfs/xfs_log_recover.c +++ b/fs/xfs/xfs_log_recover.c @@ -2985,7 +2985,7 @@ xlog_do_recovery_pass( int error = 0, h_size, h_len; int error2 = 0; int bblks, split_bblks; - int hblks, split_hblks, wrapped_hblks; + int hblks = 1, split_hblks, wrapped_hblks; int i; struct hlist_head rhash[XLOG_RHASH_SIZE]; LIST_HEAD (buffer_list); @@ -3041,14 +3041,22 @@ xlog_do_recovery_pass( if (error) goto bread_err1; - hblks = xlog_logrec_hblks(log, rhead); - if (hblks != 1) { - kmem_free(hbp); - hbp = xlog_alloc_buffer(log, hblks); + /* + * This open codes xlog_logrec_hblks so that we can reuse the + * fixed up h_size value calculated above. Without that we'd + * still allocate the buffer based on the incorrect on-disk + * size. + */ + if (h_size > XLOG_HEADER_CYCLE_SIZE && + (rhead->h_version & cpu_to_be32(XLOG_VERSION_2))) { + hblks = DIV_ROUND_UP(h_size, XLOG_HEADER_CYCLE_SIZE); + if (hblks > 1) { + kmem_free(hbp); + hbp = xlog_alloc_buffer(log, hblks); + } } } else { ASSERT(log->l_sectBBsize == 1); - hblks = 1; hbp = xlog_alloc_buffer(log, 1); h_size = XLOG_BIG_RECORD_BSIZE; } -- 2.39.2

2 1

[PATCH openEuler-22.03-LTS-SP1] xfs: fix log recovery buffer allocation for the legacy h_size fixup
by Long Li 09 Jul '24

09 Jul '24

From: Christoph Hellwig <hch(a)lst.de> mainline inclusion from mainline-v6.9-rc4 commit 45cf976008ddef4a9c9a30310c9b4fb2a9a6602a category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB0JY CVE: CVE-2024-39472 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Commit a70f9fe52daa ("xfs: detect and handle invalid iclog size set by mkfs") added a fixup for incorrect h_size values used for the initial umount record in old xfsprogs versions. Later commit 0c771b99d6c9 ("xfs: clean up calculation of LR header blocks") cleaned up the log reover buffer calculation, but stoped using the fixed up h_size value to size the log recovery buffer, which can lead to an out of bounds access when the incorrect h_size does not come from the old mkfs tool, but a fuzzer. Fix this by open coding xlog_logrec_hblks and taking the fixed h_size into account for this calculation. Fixes: 0c771b99d6c9 ("xfs: clean up calculation of LR header blocks") Reported-by: Sam Sun <samsun1006219(a)gmail.com> Signed-off-by: Christoph Hellwig <hch(a)lst.de> Reviewed-by: Brian Foster <bfoster(a)redhat.com> Reviewed-by: "Darrick J. Wong" <djwong(a)kernel.org> Signed-off-by: Chandan Babu R <chandanbabu(a)kernel.org> Conflicts: fs/xfs/xfs_log_recover.c [Conflicts due to mainline code use kvfree() in context] Signed-off-by: Long Li <leo.lilong(a)huawei.com> --- fs/xfs/xfs_log_recover.c | 20 ++++++++++++++------ 1 file changed, 14 insertions(+), 6 deletions(-) diff --git a/fs/xfs/xfs_log_recover.c b/fs/xfs/xfs_log_recover.c index 331f568834a1..898c65b77457 100644 --- a/fs/xfs/xfs_log_recover.c +++ b/fs/xfs/xfs_log_recover.c @@ -2952,7 +2952,7 @@ xlog_do_recovery_pass( int error = 0, h_size, h_len; int error2 = 0; int bblks, split_bblks; - int hblks, split_hblks, wrapped_hblks; + int hblks = 1, split_hblks, wrapped_hblks; int i; struct hlist_head rhash[XLOG_RHASH_SIZE]; LIST_HEAD (buffer_list); @@ -3008,14 +3008,22 @@ xlog_do_recovery_pass( if (error) goto bread_err1; - hblks = xlog_logrec_hblks(log, rhead); - if (hblks != 1) { - kmem_free(hbp); - hbp = xlog_alloc_buffer(log, hblks); + /* + * This open codes xlog_logrec_hblks so that we can reuse the + * fixed up h_size value calculated above. Without that we'd + * still allocate the buffer based on the incorrect on-disk + * size. + */ + if (h_size > XLOG_HEADER_CYCLE_SIZE && + (rhead->h_version & cpu_to_be32(XLOG_VERSION_2))) { + hblks = DIV_ROUND_UP(h_size, XLOG_HEADER_CYCLE_SIZE); + if (hblks > 1) { + kmem_free(hbp); + hbp = xlog_alloc_buffer(log, hblks); + } } } else { ASSERT(log->l_sectBBsize == 1); - hblks = 1; hbp = xlog_alloc_buffer(log, 1); h_size = XLOG_BIG_RECORD_BSIZE; } -- 2.39.2

2 1

[PATCH OLK-5.10] xfs: fix log recovery buffer allocation for the legacy h_size fixup
by Long Li 09 Jul '24

09 Jul '24

From: Christoph Hellwig <hch(a)lst.de> mainline inclusion from mainline-v6.9-rc4 commit 45cf976008ddef4a9c9a30310c9b4fb2a9a6602a category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB0JY CVE: CVE-2024-39472 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Commit a70f9fe52daa ("xfs: detect and handle invalid iclog size set by mkfs") added a fixup for incorrect h_size values used for the initial umount record in old xfsprogs versions. Later commit 0c771b99d6c9 ("xfs: clean up calculation of LR header blocks") cleaned up the log reover buffer calculation, but stoped using the fixed up h_size value to size the log recovery buffer, which can lead to an out of bounds access when the incorrect h_size does not come from the old mkfs tool, but a fuzzer. Fix this by open coding xlog_logrec_hblks and taking the fixed h_size into account for this calculation. Fixes: 0c771b99d6c9 ("xfs: clean up calculation of LR header blocks") Reported-by: Sam Sun <samsun1006219(a)gmail.com> Signed-off-by: Christoph Hellwig <hch(a)lst.de> Reviewed-by: Brian Foster <bfoster(a)redhat.com> Reviewed-by: "Darrick J. Wong" <djwong(a)kernel.org> Signed-off-by: Chandan Babu R <chandanbabu(a)kernel.org> Conflicts: fs/xfs/xfs_log_recover.c [Conflicts due to mainline code use kvfree() in context] Signed-off-by: Long Li <leo.lilong(a)huawei.com> --- fs/xfs/xfs_log_recover.c | 20 ++++++++++++++------ 1 file changed, 14 insertions(+), 6 deletions(-) diff --git a/fs/xfs/xfs_log_recover.c b/fs/xfs/xfs_log_recover.c index 331f568834a1..898c65b77457 100644 --- a/fs/xfs/xfs_log_recover.c +++ b/fs/xfs/xfs_log_recover.c @@ -2952,7 +2952,7 @@ xlog_do_recovery_pass( int error = 0, h_size, h_len; int error2 = 0; int bblks, split_bblks; - int hblks, split_hblks, wrapped_hblks; + int hblks = 1, split_hblks, wrapped_hblks; int i; struct hlist_head rhash[XLOG_RHASH_SIZE]; LIST_HEAD (buffer_list); @@ -3008,14 +3008,22 @@ xlog_do_recovery_pass( if (error) goto bread_err1; - hblks = xlog_logrec_hblks(log, rhead); - if (hblks != 1) { - kmem_free(hbp); - hbp = xlog_alloc_buffer(log, hblks); + /* + * This open codes xlog_logrec_hblks so that we can reuse the + * fixed up h_size value calculated above. Without that we'd + * still allocate the buffer based on the incorrect on-disk + * size. + */ + if (h_size > XLOG_HEADER_CYCLE_SIZE && + (rhead->h_version & cpu_to_be32(XLOG_VERSION_2))) { + hblks = DIV_ROUND_UP(h_size, XLOG_HEADER_CYCLE_SIZE); + if (hblks > 1) { + kmem_free(hbp); + hbp = xlog_alloc_buffer(log, hblks); + } } } else { ASSERT(log->l_sectBBsize == 1); - hblks = 1; hbp = xlog_alloc_buffer(log, 1); h_size = XLOG_BIG_RECORD_BSIZE; } -- 2.39.2

2 1

[PATCH openEuler-1.0-LTS] net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
by Zhengchao Shao 09 Jul '24

09 Jul '24

From: Pavel Skripkin <paskripkin(a)gmail.com> mainline inclusion from mainline-v5.16-rc2 commit 9b5a333272a48c2f8b30add7a874e46e8b26129c category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNEY CVE: CVE-2021-47204 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Access to netdev after free_netdev() will cause use-after-free bug. Move debug log before free_netdev() call to avoid it. Fixes: 7472dd9f6499 ("staging: fsl-dpaa2/eth: Move print message") Signed-off-by: Pavel Skripkin <paskripkin(a)gmail.com> Signed-off-by: David S. Miller <davem(a)davemloft.net> Conflicts: drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c [The conflict occurs because the commit 34ff68465a17("dpaa2-eth: Move DPAA2 Ethernet driver from staging to drivers/net") is not merged] Signed-off-by: Zhengchao Shao <shaozhengchao(a)huawei.com> --- drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c b/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c index 9329fcad95ac..2f8f1f3f1bcd 100644 --- a/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c +++ b/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c @@ -2632,10 +2632,10 @@ static int dpaa2_eth_remove(struct fsl_mc_device *ls_dev) fsl_mc_portal_free(priv->mc_io); - free_netdev(net_dev); - dev_dbg(net_dev->dev.parent, "Removed interface %s\n", net_dev->name); + free_netdev(net_dev); + return 0; } -- 2.34.1

2 1

[PATCH OLK-6.6] ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension
by Xiongfeng Wang 09 Jul '24

09 Jul '24

From: Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> mainline inclusion from mainline-v6.10-rc2 commit ffa077b2f6ad124ec3d23fbddc5e4b0ff2647af8 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB05U CVE: CVE-2024-39473 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- If a process module does not have base config extension then the same format applies to all of it's inputs and the process->base_config_ext is NULL, causing NULL dereference when specifically crafted topology and sequences used. Fixes: 648fea128476 ("ASoC: SOF: ipc4-topology: set copier output format for process module") Signed-off-by: Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> Reviewed-by: Pierre-Louis Bossart <pierre-louis.bossart(a)linux.intel.com> Reviewed-by: Seppo Ingalsuo <seppo.ingalsuo(a)linux.intel.com> Reviewed-by: Ranjani Sridharan <ranjani.sridharan(a)linux.intel.com> Cc: stable(a)vger.kernel.org Link: https://msgid.link/r/20240529121201.14687-1-peter.ujfalusi@linux.intel.com Signed-off-by: Mark Brown <broonie(a)kernel.org> Signed-off-by: Xiongfeng Wang <wangxiongfeng2(a)huawei.com> --- sound/soc/sof/ipc4-topology.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/sound/soc/sof/ipc4-topology.c b/sound/soc/sof/ipc4-topology.c index 2c075afd237c..78ff129be772 100644 --- a/sound/soc/sof/ipc4-topology.c +++ b/sound/soc/sof/ipc4-topology.c @@ -195,6 +195,14 @@ sof_ipc4_get_input_pin_audio_fmt(struct snd_sof_widget *swidget, int pin_index) } process = swidget->private; + + /* + * For process modules without base config extension, base module config + * format is used for all input pins + */ + if (process->init_config != SOF_IPC4_MODULE_INIT_CONFIG_TYPE_BASE_CFG_WITH_EXT) + return &process->base_config.audio_fmt; + base_cfg_ext = process->base_config_ext; /* -- 2.20.1

2 1

[PATCH openEuler-22.03-LTS-SP1 0/1] cgroup: Fix AA deadlock caused by cgroup_bpf_release
by Chen Ridong 09 Jul '24

09 Jul '24

*** BLURB HERE *** Chen Ridong (1): cgroup: Fix AA deadlock caused by cgroup_bpf_release kernel/bpf/cgroup.c | 2 +- kernel/cgroup/cgroup-internal.h | 1 + kernel/cgroup/cgroup.c | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) -- 2.34.1

2 2

[PATCH OLK-5.10 0/1] cgroup: Fix AA deadlock caused by cgroup_bpf_release
by Chen Ridong 09 Jul '24

09 Jul '24

*** BLURB HERE *** Chen Ridong (1): cgroup: Fix AA deadlock caused by cgroup_bpf_release kernel/bpf/cgroup.c | 2 +- kernel/cgroup/cgroup-internal.h | 1 + kernel/cgroup/cgroup.c | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) -- 2.34.1

2 2

[PATCH OLK-6.6 0/1] cgroup: Fix AA deadlock caused by cgroup_bpf_release
by Chen Ridong 09 Jul '24

09 Jul '24

*** BLURB HERE *** Chen Ridong (1): cgroup: Fix AA deadlock caused by cgroup_bpf_release kernel/bpf/cgroup.c | 2 +- kernel/cgroup/cgroup-internal.h | 1 + kernel/cgroup/cgroup.c | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) -- 2.34.1

2 2

[PATCH openEuler-1.0-LTS] net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
by Zhengchao Shao 09 Jul '24

09 Jul '24

From: Pavel Skripkin <paskripkin(a)gmail.com> mainline inclusion from mainline-v5.16-rc2 commit 9b5a333272a48c2f8b30add7a874e46e8b26129c category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNEY CVE: CVE-2021-47204 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Access to netdev after free_netdev() will cause use-after-free bug. Move debug log before free_netdev() call to avoid it. Fixes: 7472dd9f6499 ("staging: fsl-dpaa2/eth: Move print message") Signed-off-by: Pavel Skripkin <paskripkin(a)gmail.com> Signed-off-by: David S. Miller <davem(a)davemloft.net> Conflicts: drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c [The conflict occurs because the commit 34ff68465a17("dpaa2-eth: Move DPAA2 Ethernet driver from staging to drivers/net") is not merged] Signed-off-by: Zhengchao Shao <shaozhengchao(a)huawei.com> --- drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c b/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c index 9329fcad95ac..2f8f1f3f1bcd 100644 --- a/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c +++ b/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c @@ -2632,10 +2632,10 @@ static int dpaa2_eth_remove(struct fsl_mc_device *ls_dev) fsl_mc_portal_free(priv->mc_io); - free_netdev(net_dev); - dev_dbg(net_dev->dev.parent, "Removed interface %s\n", net_dev->name); + free_netdev(net_dev); + return 0; } -- 2.34.1

2 1

[PATCH OLK-5.10] fpga: manager: add owner module and take its refcount
by Liu Chuang 09 Jul '24

09 Jul '24

From: Marco Pagani <marpagan(a)redhat.com> mainline inclusion from mainline-v6.10-rc1 commit 4d4d2d4346857bf778fafaa97d6f76bb1663e3c9 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA7YM1 CVE: CVE-2024-37021 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- The current implementation of the fpga manager assumes that the low-level module registers a driver for the parent device and uses its owner pointer to take the module's refcount. This approach is problematic since it can lead to a null pointer dereference while attempting to get the manager if the parent device does not have a driver. To address this problem, add a module owner pointer to the fpga_manager struct and use it to take the module's refcount. Modify the functions for registering the manager to take an additional owner module parameter and rename them to avoid conflicts. Use the old function names for helper macros that automatically set the module that registers the manager as the owner. This ensures compatibility with existing low-level control modules and reduces the chances of registering a manager without setting the owner. Also, update the documentation to keep it consistent with the new interface for registering an fpga manager. Other changes: opportunistically move put_device() from __fpga_mgr_get() to fpga_mgr_get() and of_fpga_mgr_get() to improve code clarity since the manager device is taken in these functions. Fixes: 654ba4cc0f3e ("fpga manager: ensure lifetime with of_fpga_mgr_get") Suggested-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Suggested-by: Xu Yilun <yilun.xu(a)intel.com> Signed-off-by: Marco Pagani <marpagan(a)redhat.com> Acked-by: Xu Yilun <yilun.xu(a)intel.com> Link: https://lore.kernel.org/r/20240305192926.84886-1-marpagan@redhat.com Signed-off-by: Xu Yilun <yilun.xu(a)linux.intel.com> Conflicts: drivers/fpga/fpga-mgr.c include/linux/fpga/fpga-mgr.h Documentation/driver-api/fpga/fpga-mgr.rst [Liu Chuang: add owner module.] Signed-off-by: Liu Chuang <liuchuang40(a)huawei.com> --- drivers/fpga/fpga-mgr.c | 62 ++++++++++++++++++++--------------- include/linux/fpga/fpga-mgr.h | 14 +++++--- 2 files changed, 46 insertions(+), 30 deletions(-) diff --git a/drivers/fpga/fpga-mgr.c b/drivers/fpga/fpga-mgr.c index f38bab01432e..f65ea09af2fb 100644 --- a/drivers/fpga/fpga-mgr.c +++ b/drivers/fpga/fpga-mgr.c @@ -444,20 +444,15 @@ static struct attribute *fpga_mgr_attrs[] = { }; ATTRIBUTE_GROUPS(fpga_mgr); -static struct fpga_manager *__fpga_mgr_get(struct device *dev) +static struct fpga_manager *__fpga_mgr_get(struct device *mgr_dev) { struct fpga_manager *mgr; - mgr = to_fpga_manager(dev); - - if (!try_module_get(dev->parent->driver->owner)) - goto err_dev; + mgr = to_fpga_manager(mgr_dev); + if (!try_module_get(mgr->mops_owner)) + mgr = ERR_PTR(-ENODEV); return mgr; - -err_dev: - put_device(dev); - return ERR_PTR(-ENODEV); } static int fpga_mgr_dev_match(struct device *dev, const void *data) @@ -473,12 +468,18 @@ static int fpga_mgr_dev_match(struct device *dev, const void *data) */ struct fpga_manager *fpga_mgr_get(struct device *dev) { - struct device *mgr_dev = class_find_device(fpga_mgr_class, NULL, dev, - fpga_mgr_dev_match); + struct fpga_manager *mgr; + struct device *mgr_dev; + + mgr_dev = class_find_device(fpga_mgr_class, NULL, dev, fpga_mgr_dev_match); if (!mgr_dev) return ERR_PTR(-ENODEV); - return __fpga_mgr_get(mgr_dev); + mgr = __fpga_mgr_get(mgr_dev); + if (IS_ERR(mgr)) + put_device(mgr_dev); + + return mgr; } EXPORT_SYMBOL_GPL(fpga_mgr_get); @@ -491,13 +492,18 @@ EXPORT_SYMBOL_GPL(fpga_mgr_get); */ struct fpga_manager *of_fpga_mgr_get(struct device_node *node) { - struct device *dev; + struct fpga_manager *mgr; + struct device *mgr_dev; - dev = class_find_device_by_of_node(fpga_mgr_class, node); - if (!dev) + mgr_dev = class_find_device_by_of_node(fpga_mgr_class, node); + if (!mgr_dev) return ERR_PTR(-ENODEV); - return __fpga_mgr_get(dev); + mgr = __fpga_mgr_get(mgr_dev); + if (IS_ERR(mgr)) + put_device(mgr_dev); + + return mgr; } EXPORT_SYMBOL_GPL(of_fpga_mgr_get); @@ -507,7 +513,7 @@ EXPORT_SYMBOL_GPL(of_fpga_mgr_get); */ void fpga_mgr_put(struct fpga_manager *mgr) { - module_put(mgr->dev.parent->driver->owner); + module_put(mgr->mops_owner); put_device(&mgr->dev); } EXPORT_SYMBOL_GPL(fpga_mgr_put); @@ -546,20 +552,21 @@ void fpga_mgr_unlock(struct fpga_manager *mgr) EXPORT_SYMBOL_GPL(fpga_mgr_unlock); /** - * fpga_mgr_create - create and initialize a FPGA manager struct + * __fpga_mgr_create - create and initialize a FPGA manager struct * @dev: fpga manager device from pdev * @name: fpga manager name * @mops: pointer to structure of fpga manager ops * @priv: fpga manager private data + * @owner: owner module containing the ops * * The caller of this function is responsible for freeing the struct with * fpga_mgr_free(). Using devm_fpga_mgr_create() instead is recommended. * * Return: pointer to struct fpga_manager or NULL */ -struct fpga_manager *fpga_mgr_create(struct device *dev, const char *name, +struct fpga_manager *__fpga_mgr_create(struct device *dev, const char *name, const struct fpga_manager_ops *mops, - void *priv) + void *priv, struct module *owner) { struct fpga_manager *mgr; int id, ret; @@ -586,6 +593,8 @@ struct fpga_manager *fpga_mgr_create(struct device *dev, const char *name, mutex_init(&mgr->ref_mutex); + mgr->mops_owner = owner; + mgr->name = name; mgr->mops = mops; mgr->priv = priv; @@ -610,7 +619,7 @@ struct fpga_manager *fpga_mgr_create(struct device *dev, const char *name, return NULL; } -EXPORT_SYMBOL_GPL(fpga_mgr_create); +EXPORT_SYMBOL_GPL(__fpga_mgr_create); /** * fpga_mgr_free - free a FPGA manager created with fpga_mgr_create() @@ -631,11 +640,12 @@ static void devm_fpga_mgr_release(struct device *dev, void *res) } /** - * devm_fpga_mgr_create - create and initialize a managed FPGA manager struct + * __devm_fpga_mgr_create - create and initialize a managed FPGA manager struct * @dev: fpga manager device from pdev * @name: fpga manager name * @mops: pointer to structure of fpga manager ops * @priv: fpga manager private data + * @owner: owner module containing the ops * * This function is intended for use in a FPGA manager driver's probe function. * After the manager driver creates the manager struct with @@ -647,9 +657,9 @@ static void devm_fpga_mgr_release(struct device *dev, void *res) * * Return: pointer to struct fpga_manager or NULL */ -struct fpga_manager *devm_fpga_mgr_create(struct device *dev, const char *name, +struct fpga_manager *__devm_fpga_mgr_create(struct device *dev, const char *name, const struct fpga_manager_ops *mops, - void *priv) + void *priv, struct module *owner) { struct fpga_manager **ptr, *mgr; @@ -657,7 +667,7 @@ struct fpga_manager *devm_fpga_mgr_create(struct device *dev, const char *name, if (!ptr) return NULL; - mgr = fpga_mgr_create(dev, name, mops, priv); + mgr = __fpga_mgr_create(dev, name, mops, priv, owner); if (!mgr) { devres_free(ptr); } else { @@ -667,7 +677,7 @@ struct fpga_manager *devm_fpga_mgr_create(struct device *dev, const char *name, return mgr; } -EXPORT_SYMBOL_GPL(devm_fpga_mgr_create); +EXPORT_SYMBOL_GPL(__devm_fpga_mgr_create); /** * fpga_mgr_register - register a FPGA manager diff --git a/include/linux/fpga/fpga-mgr.h b/include/linux/fpga/fpga-mgr.h index e8ca62b2cb5b..7c97e1c359b0 100644 --- a/include/linux/fpga/fpga-mgr.h +++ b/include/linux/fpga/fpga-mgr.h @@ -162,6 +162,7 @@ struct fpga_compat_id { * @state: state of fpga manager * @compat_id: FPGA manager id for compatibility check. * @mops: pointer to struct of fpga manager ops + * @mops_owner: module containing the mops * @priv: low level driver private date */ struct fpga_manager { @@ -171,6 +172,7 @@ struct fpga_manager { enum fpga_mgr_states state; struct fpga_compat_id *compat_id; const struct fpga_manager_ops *mops; + struct module *mops_owner; void *priv; }; @@ -191,15 +193,19 @@ struct fpga_manager *fpga_mgr_get(struct device *dev); void fpga_mgr_put(struct fpga_manager *mgr); -struct fpga_manager *fpga_mgr_create(struct device *dev, const char *name, +#define fpga_mgr_create(dev, name, mops, priv) \ + __fpga_mgr_create(dev, name, mops, priv, THIS_MODULE) +struct fpga_manager *__fpga_mgr_create(struct device *dev, const char *name, const struct fpga_manager_ops *mops, - void *priv); + void *priv, struct module *owner); void fpga_mgr_free(struct fpga_manager *mgr); int fpga_mgr_register(struct fpga_manager *mgr); void fpga_mgr_unregister(struct fpga_manager *mgr); -struct fpga_manager *devm_fpga_mgr_create(struct device *dev, const char *name, +#define devm_fpga_mgr_create(dev, name, mops, priv) \ + __devm_fpga_mgr_create(dev, name, mops, priv, THIS_MODULE) +struct fpga_manager *__devm_fpga_mgr_create(struct device *dev, const char *name, const struct fpga_manager_ops *mops, - void *priv); + void *priv, struct module *owner); #endif /*_LINUX_FPGA_MGR_H */ -- 2.34.1

2 1

[PATCH] Support selecting congestion control algorithms.
by Chengchang Tang 09 Jul '24

09 Jul '24

From: Xinghai Cen <cenxinghai(a)h-partners.com> Support configuring congestion control algorithms with hns direct verbs. New option: --congest_type Usage example: ./ib_send_bw -d hns_0 --congest_type=DCQCN ./ib_send_bw -d hns_0 --congest_type=DCQCN 192.168.100.100 update perftest.spec. Signed-off-by:Xinghai Cen <cenxinghai(a)partners.com> --- ...-selecting-congestion-control-algori.patch | 276 ++++++++++++++++++ perftest.spec | 9 +- 2 files changed, 284 insertions(+), 1 deletion(-) create mode 100644 0010-Perftest-Support-selecting-congestion-control-algori.patch diff --git a/0010-Perftest-Support-selecting-congestion-control-algori.patch b/0010-Perftest-Support-selecting-congestion-control-algori.patch new file mode 100644 index 0000000..ba539b2 --- /dev/null +++ b/0010-Perftest-Support-selecting-congestion-control-algori.patch @@ -0,0 +1,276 @@ +From d3d89123a650aa400be38d6ac939202a909783d4 Mon Sep 17 00:00:00 2001 +From: Guofeng Yue <yueguofeng(a)h-partners.com> +Date: Fri, 28 Jun 2024 10:56:09 +0800 +Subject: [PATCH] Perftest: Support selecting congestion control algorithms + +Support configuring congestion control algorithms with hns direct verbs. + + New option: --congest_type + + Usage example: + ./ib_send_bw -d hns_0 --congest_type=DCQCN + ./ib_send_bw -d hns_0 --congest_type=DCQCN 192.168.100.100 + +Signed-off-by: Guofeng Yue <yueguofeng(a)h-partners.com> +Signed-off-by: Junxian Huang <huangjunxian6(a)hisilicon.com> +--- + Makefile.am | 24 ++++++++--------- + configure.ac | 7 +++++ + src/perftest_parameters.c | 57 +++++++++++++++++++++++++++++++++++++++ + src/perftest_parameters.h | 1 + + src/perftest_resources.c | 12 +++++++++ + src/perftest_resources.h | 3 +++ + 6 files changed, 92 insertions(+), 12 deletions(-) + +diff --git a/Makefile.am b/Makefile.am +index dc3ca41..807e169 100755 +--- a/Makefile.am ++++ b/Makefile.am +@@ -104,41 +104,41 @@ LIBMLX4= + endif + + ib_send_bw_SOURCES = src/send_bw.c src/multicast_resources.c src/multicast_resources.h +-ib_send_bw_LDADD = libperftest.a $(LIBUMAD) $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++ib_send_bw_LDADD = libperftest.a $(LIBUMAD) $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + ib_send_lat_SOURCES = src/send_lat.c src/multicast_resources.c src/multicast_resources.h +-ib_send_lat_LDADD = libperftest.a $(LIBUMAD) $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++ib_send_lat_LDADD = libperftest.a $(LIBUMAD) $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + ib_write_lat_SOURCES = src/write_lat.c +-ib_write_lat_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++ib_write_lat_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + ib_write_bw_SOURCES = src/write_bw.c +-ib_write_bw_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++ib_write_bw_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + ib_read_lat_SOURCES = src/read_lat.c +-ib_read_lat_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++ib_read_lat_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + ib_read_bw_SOURCES = src/read_bw.c +-ib_read_bw_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++ib_read_bw_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + ib_atomic_lat_SOURCES = src/atomic_lat.c +-ib_atomic_lat_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++ib_atomic_lat_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + ib_atomic_bw_SOURCES = src/atomic_bw.c +-ib_atomic_bw_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++ib_atomic_bw_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + if HAVE_RAW_ETH + raw_ethernet_bw_SOURCES = src/raw_ethernet_send_bw.c +-raw_ethernet_bw_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++raw_ethernet_bw_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + raw_ethernet_lat_SOURCES = src/raw_ethernet_send_lat.c +-raw_ethernet_lat_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++raw_ethernet_lat_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + raw_ethernet_burst_lat_SOURCES = src/raw_ethernet_send_burst_lat.c +-raw_ethernet_burst_lat_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++raw_ethernet_burst_lat_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + raw_ethernet_fs_rate_SOURCES = src/raw_ethernet_fs_rate.c +-raw_ethernet_fs_rate_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++raw_ethernet_fs_rate_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + else + raw_ethernet_bw_SOURCES = +diff --git a/configure.ac b/configure.ac +index 71b8382..e59bf39 100755 +--- a/configure.ac ++++ b/configure.ac +@@ -382,6 +382,13 @@ if [test $HAVE_MLX5DV_LIB = yes] && [test $HAVE_MLX5DV = yes]; then + AC_SUBST([LIBMLX5]) + fi + ++AC_CHECK_LIB([hns], [hnsdv_query_device], [HAVE_HNSDV=yes LIBHNS=-lhns], [HAVE_HNSDV=no]) ++AM_CONDITIONAL([HAVE_HNSDV], [test "x$HAVE_HNSDV" = "xyes"]) ++if [test $HAVE_HNSDV = yes]; then ++ AC_DEFINE([HAVE_HNSDV], [1], [Have hns Direct Verbs support]) ++ AC_SUBST([LIBHNS]) ++fi ++ + CFLAGS="-g -Wall -D_GNU_SOURCE -O3 $CFLAGS" + LDFLAGS="$LDFLAGS" + LIBS=$LIBS" -lpthread" +diff --git a/src/perftest_parameters.c b/src/perftest_parameters.c +index dfa7241..cff1336 100755 +--- a/src/perftest_parameters.c ++++ b/src/perftest_parameters.c +@@ -34,6 +34,9 @@ static const char *portStates[] = {"Nop","Down","Init","Armed","","Active Defer" + static const char *qp_state[] = {"OFF","ON"}; + static const char *exchange_state[] = {"Ethernet","rdma_cm"}; + static const char *atomicTypesStr[] = {"CMP_AND_SWAP","FETCH_AND_ADD"}; ++#ifdef HAVE_HNSDV ++static const char *congestStr[] = {"DCQCN","LDCP","HC3","DIP"}; ++#endif + + /****************************************************************************** + * parse_mac_from_str. +@@ -438,6 +441,11 @@ static void usage(const char *argv0, VerbType verb, TestType tst, int connection + printf(" --cpu_util "); + printf(" Show CPU Utilization in report, valid only in Duration mode \n"); + ++ #ifdef HAVE_HNSDV ++ printf(" --congest_type=<DCQCN, LDCP, HC3, DIP> "); ++ printf(" Use the hnsdv interface to set congestion control algorithm.\n"); ++ #endif ++ + if (tst != FS_RATE) { + printf(" --dlid "); + printf(" Set a Destination LID instead of getting it from the other side.\n"); +@@ -863,6 +871,7 @@ static void init_perftest_params(struct perftest_parameters *user_param) + user_param->source_ip = NULL; + user_param->has_source_ip = 0; + user_param->use_write_with_imm = 0; ++ user_param->congest_type = OFF; + } + + static int open_file_write(const char* file_path) +@@ -961,6 +970,25 @@ static void change_conn_type(int *cptr, VerbType verb, const char *optarg) + exit(1); + } + } ++ ++#ifdef HAVE_HNSDV ++static void set_congest_type(int *cgtr, const char *optarg) ++{ ++ if (strcmp(congestStr[0], optarg) == 0) { ++ *cgtr = HNSDV_QP_CREATE_ENABLE_DCQCN; ++ } else if (strcmp(congestStr[1], optarg) == 0) { ++ *cgtr = HNSDV_QP_CREATE_ENABLE_LDCP; ++ } else if (strcmp(congestStr[2], optarg) == 0) { ++ *cgtr = HNSDV_QP_CREATE_ENABLE_HC3; ++ } else if (strcmp(congestStr[3], optarg) == 0) { ++ *cgtr = HNSDV_QP_CREATE_ENABLE_DIP; ++ } else { ++ fprintf(stderr, " Invalid congest type. Please choose from {DCQCN,LDCP,HC3,DIP}\n"); ++ exit(1); ++ } ++} ++#endif ++ + /****************************************************************************** + * + ******************************************************************************/ +@@ -1756,6 +1784,23 @@ static void force_dependecies(struct perftest_parameters *user_param) + } + } + ++ #ifdef HAVE_HNSDV ++ if (user_param->congest_type) { ++ if (user_param->work_rdma_cm == ON) ++ { ++ printf(RESULT_LINE); ++ fprintf(stderr, "rdma_cm does not support setting congest type.\n"); ++ exit(1); ++ } ++ ++ if (user_param->connection_type == XRC || user_param->connection_type == UD) { ++ printf(RESULT_LINE); ++ fprintf(stdout, "XRC/UD does not support setting congest type.\n"); ++ exit(1); ++ } ++ } ++ #endif ++ + return; + } + /****************************************************************************** +@@ -2273,6 +2318,9 @@ int parser(struct perftest_parameters *user_param,char *argv[], int argc) + static int credentials_path_flag = 0; + static int data_enc_key_app_path_flag = 0; + #endif ++ #ifdef HAVE_HNSDV ++ static int congest_type_flag = 0; ++ #endif + + char *server_ip = NULL; + char *client_ip = NULL; +@@ -2426,6 +2474,9 @@ int parser(struct perftest_parameters *user_param,char *argv[], int argc) + #if defined HAVE_OOO_ATTR + {.name = "use_ooo", .has_arg = 0, .flag = &use_ooo_flag, .val = 1}, + #endif ++ #ifdef HAVE_HNSDV ++ { .name = "congest_type", .has_arg = 1, .flag = &congest_type_flag, .val = 1}, ++ #endif + {.name = "bind_source_ip", .has_arg = 1, .flag = &source_ip_flag, .val = 1}, + {.name = "write_with_imm", .has_arg = 0, .flag = &use_write_with_imm_flag, .val = 1 }, + {0} +@@ -2720,6 +2771,12 @@ int parser(struct perftest_parameters *user_param,char *argv[], int argc) + free(duplicates_checker); + return FAILURE; + case 0: /* required for long options to work. */ ++ #ifdef HAVE_HNSDV ++ if (congest_type_flag) { ++ set_congest_type(&user_param->congest_type, optarg); ++ congest_type_flag = 0; ++ } ++ #endif + if (pkey_flag) { + CHECK_VALUE(user_param->pkey_index,int,"Pkey index",not_int_ptr); + pkey_flag = 0; +diff --git a/src/perftest_parameters.h b/src/perftest_parameters.h +index aa476f1..d26253d 100755 +--- a/src/perftest_parameters.h ++++ b/src/perftest_parameters.h +@@ -523,6 +523,7 @@ struct perftest_parameters { + int recv_post_list; + int duration; + int use_srq; ++ int congest_type; + int use_xrc; + int use_rss; + int srq_exists; +diff --git a/src/perftest_resources.c b/src/perftest_resources.c +index eeb679c..be3890c 100755 +--- a/src/perftest_resources.c ++++ b/src/perftest_resources.c +@@ -2219,6 +2219,9 @@ struct ibv_qp* ctx_qp_create(struct pingpong_context *ctx, + struct efadv_qp_init_attr efa_attr = {}; + #endif + #endif ++ #ifdef HAVE_HNSDV ++ struct hnsdv_qp_init_attr hns_attr = {}; ++ #endif + + attr.send_cq = ctx->send_cq; + attr.recv_cq = (user_param->verb == SEND || user_param->verb == WRITE_IMM) ? ctx->recv_cq : ctx->send_cq; +@@ -2382,6 +2385,15 @@ struct ibv_qp* ctx_qp_create(struct pingpong_context *ctx, + #endif // HAVE_AES_XTS + else + #endif // HAVE_MLX5DV ++ ++ #ifdef HAVE_HNSDV ++ if (user_param->congest_type) { ++ hns_attr.comp_mask = HNSDV_QP_INIT_ATTR_MASK_QP_CONGEST_TYPE; ++ hns_attr.congest_type = user_param->congest_type; ++ qp = hnsdv_create_qp(ctx->context, &attr_ex, &hns_attr); ++ } ++ else ++ #endif //HAVE_HNSDV + qp = ibv_create_qp_ex(ctx->context, &attr_ex); + } + else +diff --git a/src/perftest_resources.h b/src/perftest_resources.h +index 12386e2..565deda 100755 +--- a/src/perftest_resources.h ++++ b/src/perftest_resources.h +@@ -55,6 +55,9 @@ + #if defined(HAVE_MLX5DV) + #include <infiniband/mlx5dv.h> + #endif ++#if defined(HAVE_HNSDV) ++#include <infiniband/hnsdv.h> ++#endif + #include <rdma/rdma_cma.h> + #include <stdint.h> + #if defined(__FreeBSD__) +-- +2.33.0 + diff --git a/perftest.spec b/perftest.spec index c49d33d..c34a50b 100644 --- a/perftest.spec +++ b/perftest.spec @@ -1,6 +1,6 @@ Name: perftest Version: 4.5 -Release: 6 +Release: 7 License: GPLv2 or BSD Summary: RDMA Performance Testing Tools Url: https://github.com/linux-rdma/perftest @@ -15,6 +15,7 @@ Patch6: 0006-Perftest-Add-new-HNS-roce-device-ROH-to-support-new_.patch Patch7: 0007-add-loongarch-support-for-perftest.patch Patch8: 0008-Get-CPU-MHz-on-RISC-V.patch Patch9: 0009-Get-CPU-cycles-on-RISC-V.patch +Patch10: 0010-Perftest-Support-selecting-congestion-control-algori.patch BuildRequires: automake gcc libibverbs-devel >= 1.2.0 librdmacm-devel >= 1.0.21 libibumad-devel >= 1.3.10.2 BuildRequires: pciutils-devel libibverbs librdmacm libibumad @@ -41,6 +42,12 @@ done %_bindir/* %changelog +* Mon Jul 8 2024 Xinghai Cen <cenxinghai(a)h-partners.com> - 4.5-7 +- Type: feature +- ID: NA +- SUG: NA +- DESC: support selecting congestion control algorithms + * Fri Jan 19 2024 Chengchang Tang <tangchengchang(a)huawei.com> - 4.5-6 - Type: bugfix - ID: NA -- 2.33.0

1 0

[PATCH OLK-6.6] mmc: davinci: Don't strip remove function when driver is builtin
by Yi Yang 09 Jul '24

09 Jul '24

From: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> stable inclusion from stable-v6.6.34 commit 7590da4c04dd4aa9c262da0231e978263861c6eb category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB0L1 CVE: CVE-2024-39484 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 55c421b364482b61c4c45313a535e61ed5ae4ea3 upstream. Using __exit for the remove function results in the remove callback being discarded with CONFIG_MMC_DAVINCI=y. When such a device gets unbound (e.g. using sysfs or hotplug), the driver is just removed without the cleanup being performed. This results in resource leaks. Fix it by compiling in the remove callback unconditionally. This also fixes a W=1 modpost warning: WARNING: modpost: drivers/mmc/host/davinci_mmc: section mismatch in reference: davinci_mmcsd_driver+0x10 (section: .data) -> davinci_mmcsd_remove (section: .exit.text) Fixes: b4cff4549b7a ("DaVinci: MMC: MMC/SD controller driver for DaVinci family") Signed-off-by: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> Cc: stable(a)vger.kernel.org Link: https://lore.kernel.org/r/20240324114017.231936-2-u.kleine-koenig@pengutron… Signed-off-by: Ulf Hansson <ulf.hansson(a)linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Yi Yang <yiyang13(a)huawei.com> --- drivers/mmc/host/davinci_mmc.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/mmc/host/davinci_mmc.c b/drivers/mmc/host/davinci_mmc.c index ee3b1a4e0848..8fa6796787f4 100644 --- a/drivers/mmc/host/davinci_mmc.c +++ b/drivers/mmc/host/davinci_mmc.c @@ -1344,7 +1344,7 @@ static int davinci_mmcsd_probe(struct platform_device *pdev) return ret; } -static void __exit davinci_mmcsd_remove(struct platform_device *pdev) +static void davinci_mmcsd_remove(struct platform_device *pdev) { struct mmc_davinci_host *host = platform_get_drvdata(pdev); @@ -1399,7 +1399,7 @@ static struct platform_driver davinci_mmcsd_driver = { .of_match_table = davinci_mmc_dt_ids, }, .probe = davinci_mmcsd_probe, - .remove_new = __exit_p(davinci_mmcsd_remove), + .remove_new = davinci_mmcsd_remove, .id_table = davinci_mmc_devtype, }; -- 2.25.1

2 1

[PATCH openEuler-22.03-LTS] mmc: davinci: Don't strip remove function when driver is builtin
by Yi Yang 09 Jul '24

09 Jul '24

From: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> stable inclusion from stable-v5.10.221 commit 6ff7cfa02baabec907f6f29ea76634e6256d2ec4 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB0L1 CVE: CVE-2024-39484 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 55c421b364482b61c4c45313a535e61ed5ae4ea3 ] Using __exit for the remove function results in the remove callback being discarded with CONFIG_MMC_DAVINCI=y. When such a device gets unbound (e.g. using sysfs or hotplug), the driver is just removed without the cleanup being performed. This results in resource leaks. Fix it by compiling in the remove callback unconditionally. This also fixes a W=1 modpost warning: WARNING: modpost: drivers/mmc/host/davinci_mmc: section mismatch in reference: davinci_mmcsd_driver+0x10 (section: .data) -> davinci_mmcsd_remove (section: .exit.text) Fixes: b4cff4549b7a ("DaVinci: MMC: MMC/SD controller driver for DaVinci family") Signed-off-by: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> Cc: stable(a)vger.kernel.org Link: https://lore.kernel.org/r/20240324114017.231936-2-u.kleine-koenig@pengutron… Signed-off-by: Ulf Hansson <ulf.hansson(a)linaro.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Yi Yang <yiyang13(a)huawei.com> --- drivers/mmc/host/davinci_mmc.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/mmc/host/davinci_mmc.c b/drivers/mmc/host/davinci_mmc.c index 647928ab00a3..77258948440f 100644 --- a/drivers/mmc/host/davinci_mmc.c +++ b/drivers/mmc/host/davinci_mmc.c @@ -1347,7 +1347,7 @@ static int davinci_mmcsd_probe(struct platform_device *pdev) return ret; } -static int __exit davinci_mmcsd_remove(struct platform_device *pdev) +static int davinci_mmcsd_remove(struct platform_device *pdev) { struct mmc_davinci_host *host = platform_get_drvdata(pdev); @@ -1404,7 +1404,7 @@ static struct platform_driver davinci_mmcsd_driver = { .of_match_table = davinci_mmc_dt_ids, }, .probe = davinci_mmcsd_probe, - .remove = __exit_p(davinci_mmcsd_remove), + .remove = davinci_mmcsd_remove, .id_table = davinci_mmc_devtype, }; -- 2.25.1

2 5

[PATCH openEuler-22.03-LTS-SP1] mmc: davinci: Don't strip remove function when driver is builtin
by Yi Yang 09 Jul '24

09 Jul '24

From: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> stable inclusion from stable-v5.10.221 commit 6ff7cfa02baabec907f6f29ea76634e6256d2ec4 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB0L1 CVE: CVE-2024-39484 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 55c421b364482b61c4c45313a535e61ed5ae4ea3 ] Using __exit for the remove function results in the remove callback being discarded with CONFIG_MMC_DAVINCI=y. When such a device gets unbound (e.g. using sysfs or hotplug), the driver is just removed without the cleanup being performed. This results in resource leaks. Fix it by compiling in the remove callback unconditionally. This also fixes a W=1 modpost warning: WARNING: modpost: drivers/mmc/host/davinci_mmc: section mismatch in reference: davinci_mmcsd_driver+0x10 (section: .data) -> davinci_mmcsd_remove (section: .exit.text) Fixes: b4cff4549b7a ("DaVinci: MMC: MMC/SD controller driver for DaVinci family") Signed-off-by: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> Cc: stable(a)vger.kernel.org Link: https://lore.kernel.org/r/20240324114017.231936-2-u.kleine-koenig@pengutron… Signed-off-by: Ulf Hansson <ulf.hansson(a)linaro.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Yi Yang <yiyang13(a)huawei.com> --- drivers/mmc/host/davinci_mmc.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/mmc/host/davinci_mmc.c b/drivers/mmc/host/davinci_mmc.c index 647928ab00a3..77258948440f 100644 --- a/drivers/mmc/host/davinci_mmc.c +++ b/drivers/mmc/host/davinci_mmc.c @@ -1347,7 +1347,7 @@ static int davinci_mmcsd_probe(struct platform_device *pdev) return ret; } -static int __exit davinci_mmcsd_remove(struct platform_device *pdev) +static int davinci_mmcsd_remove(struct platform_device *pdev) { struct mmc_davinci_host *host = platform_get_drvdata(pdev); @@ -1404,7 +1404,7 @@ static struct platform_driver davinci_mmcsd_driver = { .of_match_table = davinci_mmc_dt_ids, }, .probe = davinci_mmcsd_probe, - .remove = __exit_p(davinci_mmcsd_remove), + .remove = davinci_mmcsd_remove, .id_table = davinci_mmc_devtype, }; -- 2.25.1

2 1

[PATCH OLK-5.10] mmc: davinci: Don't strip remove function when driver is builtin
by Yi Yang 09 Jul '24

09 Jul '24

From: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> stable inclusion from stable-v5.10.221 commit 6ff7cfa02baabec907f6f29ea76634e6256d2ec4 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB0L1 CVE: CVE-2024-39484 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 55c421b364482b61c4c45313a535e61ed5ae4ea3 ] Using __exit for the remove function results in the remove callback being discarded with CONFIG_MMC_DAVINCI=y. When such a device gets unbound (e.g. using sysfs or hotplug), the driver is just removed without the cleanup being performed. This results in resource leaks. Fix it by compiling in the remove callback unconditionally. This also fixes a W=1 modpost warning: WARNING: modpost: drivers/mmc/host/davinci_mmc: section mismatch in reference: davinci_mmcsd_driver+0x10 (section: .data) -> davinci_mmcsd_remove (section: .exit.text) Fixes: b4cff4549b7a ("DaVinci: MMC: MMC/SD controller driver for DaVinci family") Signed-off-by: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> Cc: stable(a)vger.kernel.org Link: https://lore.kernel.org/r/20240324114017.231936-2-u.kleine-koenig@pengutron… Signed-off-by: Ulf Hansson <ulf.hansson(a)linaro.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Yi Yang <yiyang13(a)huawei.com> --- drivers/mmc/host/davinci_mmc.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/mmc/host/davinci_mmc.c b/drivers/mmc/host/davinci_mmc.c index 647928ab00a3..77258948440f 100644 --- a/drivers/mmc/host/davinci_mmc.c +++ b/drivers/mmc/host/davinci_mmc.c @@ -1347,7 +1347,7 @@ static int davinci_mmcsd_probe(struct platform_device *pdev) return ret; } -static int __exit davinci_mmcsd_remove(struct platform_device *pdev) +static int davinci_mmcsd_remove(struct platform_device *pdev) { struct mmc_davinci_host *host = platform_get_drvdata(pdev); @@ -1404,7 +1404,7 @@ static struct platform_driver davinci_mmcsd_driver = { .of_match_table = davinci_mmc_dt_ids, }, .probe = davinci_mmcsd_probe, - .remove = __exit_p(davinci_mmcsd_remove), + .remove = davinci_mmcsd_remove, .id_table = davinci_mmc_devtype, }; -- 2.25.1

2 1

[PATCH openEuler-1.0-LTS] mmc: davinci: Don't strip remove function when driver is builtin
by Yi Yang 09 Jul '24

09 Jul '24

From: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> stable inclusion from stable-v5.10.221 commit 6ff7cfa02baabec907f6f29ea76634e6256d2ec4 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB0L1 CVE: CVE-2024-39484 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 55c421b364482b61c4c45313a535e61ed5ae4ea3 ] Using __exit for the remove function results in the remove callback being discarded with CONFIG_MMC_DAVINCI=y. When such a device gets unbound (e.g. using sysfs or hotplug), the driver is just removed without the cleanup being performed. This results in resource leaks. Fix it by compiling in the remove callback unconditionally. This also fixes a W=1 modpost warning: WARNING: modpost: drivers/mmc/host/davinci_mmc: section mismatch in reference: davinci_mmcsd_driver+0x10 (section: .data) -> davinci_mmcsd_remove (section: .exit.text) Fixes: b4cff4549b7a ("DaVinci: MMC: MMC/SD controller driver for DaVinci family") Signed-off-by: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> Cc: stable(a)vger.kernel.org Link: https://lore.kernel.org/r/20240324114017.231936-2-u.kleine-koenig@pengutron… Signed-off-by: Ulf Hansson <ulf.hansson(a)linaro.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Yi Yang <yiyang13(a)huawei.com> --- drivers/mmc/host/davinci_mmc.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/mmc/host/davinci_mmc.c b/drivers/mmc/host/davinci_mmc.c index e6f14257a7d0..591cef502b59 100644 --- a/drivers/mmc/host/davinci_mmc.c +++ b/drivers/mmc/host/davinci_mmc.c @@ -1361,7 +1361,7 @@ static int davinci_mmcsd_probe(struct platform_device *pdev) return ret; } -static int __exit davinci_mmcsd_remove(struct platform_device *pdev) +static int davinci_mmcsd_remove(struct platform_device *pdev) { struct mmc_davinci_host *host = platform_get_drvdata(pdev); @@ -1413,7 +1413,7 @@ static struct platform_driver davinci_mmcsd_driver = { .of_match_table = davinci_mmc_dt_ids, }, .probe = davinci_mmcsd_probe, - .remove = __exit_p(davinci_mmcsd_remove), + .remove = davinci_mmcsd_remove, .id_table = davinci_mmc_devtype, }; -- 2.25.1

2 1

[PATCH OLK-6.6 0/5] fix CVE-2024-38620
by Jialin Zhang 09 Jul '24

09 Jul '24

Christophe JAILLET (1): Bluetooth: Remove usage of the deprecated ida_simple_xx() API Iulia Tanasescu (1): Bluetooth: ISO: Fix BIS cleanup Luiz Augusto von Dentz (1): Bluetooth: HCI: Remove HCI_AMP support Lukas Bulwahn (1): Bluetooth: hci_event: Remove code to removed CONFIG_BT_HS Pauli Virtanen (1): Bluetooth: fix connection setup in l2cap_connect drivers/bluetooth/btmrvl_main.c | 9 - drivers/bluetooth/btrsi.c | 1 - drivers/bluetooth/btsdio.c | 8 - drivers/bluetooth/btusb.c | 5 - drivers/bluetooth/hci_bcm4377.c | 1 - drivers/bluetooth/hci_ldisc.c | 6 - drivers/bluetooth/hci_serdev.c | 5 - drivers/bluetooth/hci_uart.h | 1 - drivers/bluetooth/hci_vhci.c | 10 +- drivers/bluetooth/virtio_bt.c | 2 - include/net/bluetooth/hci.h | 114 ------------ include/net/bluetooth/hci_core.h | 46 +---- include/net/bluetooth/hci_sync.h | 2 + include/uapi/linux/virtio_bt.h | 1 - net/bluetooth/hci_conn.c | 10 +- net/bluetooth/hci_core.c | 135 ++------------ net/bluetooth/hci_event.c | 310 ------------------------------- net/bluetooth/hci_sock.c | 9 +- net/bluetooth/hci_sync.c | 138 ++------------ net/bluetooth/l2cap_core.c | 21 +-- net/bluetooth/mgmt.c | 84 +++------ 21 files changed, 73 insertions(+), 845 deletions(-) -- 2.25.1

2 6

[PATCH openEuler-22.03-LTS-SP1] ksmbd: fix slab out of bounds write in smb_inherit_dacl()
by Wang Zhaolong 09 Jul '24

09 Jul '24

From: Yang Xiongwei <yangxiongwei6(a)huawei.com> mainline inclusion from mainline-v6.7-rc1 commit eebff19acaa35820cb09ce2ccb3d21bee2156ffb category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4LC CVE: CVE-2023-52755 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- slab out-of-bounds write is caused by that offsets is bigger than pntsd allocation size. This patch add the check to validate 3 offsets using allocation size. Reported-by: zdi-disclosures(a)trendmicro.com # ZDI-CAN-22271 Cc: stable(a)vger.kernel.org Signed-off-by: Namjae Jeon <linkinjeon(a)kernel.org> Signed-off-by: Steve French <stfrench(a)microsoft.com> Conflicts: fs/smb/server/smbacl.c fs/ksmbd/smbacl.c [lc:file path is not same] Signed-off-by: XiongWei Yang <yangxiongwei6(a)huawei.com> Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- fs/ksmbd/smbacl.c | 29 ++++++++++++++++++++++++++--- 1 file changed, 26 insertions(+), 3 deletions(-) diff --git a/fs/ksmbd/smbacl.c b/fs/ksmbd/smbacl.c index d76cee773b82..e173717330ff 100644 --- a/fs/ksmbd/smbacl.c +++ b/fs/ksmbd/smbacl.c @@ -1098,6 +1098,7 @@ int smb_inherit_dacl(struct ksmbd_conn *conn, struct smb_acl *pdacl; struct smb_sid *powner_sid = NULL, *pgroup_sid = NULL; int powner_sid_size = 0, pgroup_sid_size = 0, pntsd_size; + int pntsd_alloc_size; if (parent_pntsd->osidoffset) { powner_sid = (struct smb_sid *)((char *)parent_pntsd + @@ -1110,9 +1111,10 @@ int smb_inherit_dacl(struct ksmbd_conn *conn, pgroup_sid_size = 1 + 1 + 6 + (pgroup_sid->num_subauth * 4); } - pntsd = kzalloc(sizeof(struct smb_ntsd) + powner_sid_size + - pgroup_sid_size + sizeof(struct smb_acl) + - nt_size, GFP_KERNEL); + pntsd_alloc_size = sizeof(struct smb_ntsd) + powner_sid_size + + pgroup_sid_size + sizeof(struct smb_acl) + nt_size; + + pntsd = kzalloc(pntsd_alloc_size, GFP_KERNEL); if (!pntsd) { rc = -ENOMEM; goto free_aces_base; @@ -1127,6 +1129,27 @@ int smb_inherit_dacl(struct ksmbd_conn *conn, pntsd->gsidoffset = parent_pntsd->gsidoffset; pntsd->dacloffset = parent_pntsd->dacloffset; + if ((u64)le32_to_cpu(pntsd->osidoffset) + powner_sid_size > + pntsd_alloc_size) { + rc = -EINVAL; + kfree(pntsd); + goto free_aces_base; + } + + if ((u64)le32_to_cpu(pntsd->gsidoffset) + pgroup_sid_size > + pntsd_alloc_size) { + rc = -EINVAL; + kfree(pntsd); + goto free_aces_base; + } + + if ((u64)le32_to_cpu(pntsd->dacloffset) + sizeof(struct smb_acl) + nt_size > + pntsd_alloc_size) { + rc = -EINVAL; + kfree(pntsd); + goto free_aces_base; + } + if (pntsd->osidoffset) { struct smb_sid *owner_sid = (struct smb_sid *)((char *)pntsd + le32_to_cpu(pntsd->osidoffset)); -- 2.34.3

2 1

[PATCH OLK-5.10] ksmbd: fix slab out of bounds write in smb_inherit_dacl()
by Wang Zhaolong 09 Jul '24

09 Jul '24

From: Yang Xiongwei <yangxiongwei6(a)huawei.com> mainline inclusion from mainline-v6.7-rc1 commit eebff19acaa35820cb09ce2ccb3d21bee2156ffb category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4LC CVE: CVE-2023-52755 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- slab out-of-bounds write is caused by that offsets is bigger than pntsd allocation size. This patch add the check to validate 3 offsets using allocation size. Reported-by: zdi-disclosures(a)trendmicro.com # ZDI-CAN-22271 Cc: stable(a)vger.kernel.org Signed-off-by: Namjae Jeon <linkinjeon(a)kernel.org> Signed-off-by: Steve French <stfrench(a)microsoft.com> Conflicts: fs/smb/server/smbacl.c fs/ksmbd/smbacl.c [lc:file path is not same] Signed-off-by: XiongWei Yang <yangxiongwei6(a)huawei.com> Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- fs/ksmbd/smbacl.c | 29 ++++++++++++++++++++++++++--- 1 file changed, 26 insertions(+), 3 deletions(-) diff --git a/fs/ksmbd/smbacl.c b/fs/ksmbd/smbacl.c index d76cee773b82..e173717330ff 100644 --- a/fs/ksmbd/smbacl.c +++ b/fs/ksmbd/smbacl.c @@ -1098,6 +1098,7 @@ int smb_inherit_dacl(struct ksmbd_conn *conn, struct smb_acl *pdacl; struct smb_sid *powner_sid = NULL, *pgroup_sid = NULL; int powner_sid_size = 0, pgroup_sid_size = 0, pntsd_size; + int pntsd_alloc_size; if (parent_pntsd->osidoffset) { powner_sid = (struct smb_sid *)((char *)parent_pntsd + @@ -1110,9 +1111,10 @@ int smb_inherit_dacl(struct ksmbd_conn *conn, pgroup_sid_size = 1 + 1 + 6 + (pgroup_sid->num_subauth * 4); } - pntsd = kzalloc(sizeof(struct smb_ntsd) + powner_sid_size + - pgroup_sid_size + sizeof(struct smb_acl) + - nt_size, GFP_KERNEL); + pntsd_alloc_size = sizeof(struct smb_ntsd) + powner_sid_size + + pgroup_sid_size + sizeof(struct smb_acl) + nt_size; + + pntsd = kzalloc(pntsd_alloc_size, GFP_KERNEL); if (!pntsd) { rc = -ENOMEM; goto free_aces_base; @@ -1127,6 +1129,27 @@ int smb_inherit_dacl(struct ksmbd_conn *conn, pntsd->gsidoffset = parent_pntsd->gsidoffset; pntsd->dacloffset = parent_pntsd->dacloffset; + if ((u64)le32_to_cpu(pntsd->osidoffset) + powner_sid_size > + pntsd_alloc_size) { + rc = -EINVAL; + kfree(pntsd); + goto free_aces_base; + } + + if ((u64)le32_to_cpu(pntsd->gsidoffset) + pgroup_sid_size > + pntsd_alloc_size) { + rc = -EINVAL; + kfree(pntsd); + goto free_aces_base; + } + + if ((u64)le32_to_cpu(pntsd->dacloffset) + sizeof(struct smb_acl) + nt_size > + pntsd_alloc_size) { + rc = -EINVAL; + kfree(pntsd); + goto free_aces_base; + } + if (pntsd->osidoffset) { struct smb_sid *owner_sid = (struct smb_sid *)((char *)pntsd + le32_to_cpu(pntsd->osidoffset)); -- 2.34.3

2 1

[PATCH openEuler-22.03-LTS-SP1] smb: client: fix potential deadlock when releasing mids
by Wang Zhaolong 09 Jul '24

09 Jul '24

From: Paulo Alcantara <pc(a)manguebit.com> mainline inclusion from mainline-v6.7-rc1 commit e6322fd177c6885a21dd4609dc5e5c973d1a2eb7 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4KS CVE: CVE-2023-52757 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- All release_mid() callers seem to hold a reference of @mid so there is no need to call kref_put(&mid->refcount, __release_mid) under @server->mid_lock spinlock. If they don't, then an use-after-free bug would have occurred anyways. By getting rid of such spinlock also fixes a potential deadlock as shown below CPU 0 CPU 1 ------------------------------------------------------------------ cifs_demultiplex_thread() cifs_debug_data_proc_show() release_mid() spin_lock(&server->mid_lock); spin_lock(&cifs_tcp_ses_lock) spin_lock(&server->mid_lock) __release_mid() smb2_find_smb_tcon() spin_lock(&cifs_tcp_ses_lock) *deadlock* Cc: stable(a)vger.kernel.org Signed-off-by: Paulo Alcantara (SUSE) <pc(a)manguebit.com> Signed-off-by: Steve French <stfrench(a)microsoft.com> Conflicts: fs/smb/client/cifsproto.h fs/smb/client/smb2misc.c fs/smb/client/transport.c fs/cifs/cifsproto.h fs/cifs/smb2misc.c fs/cifs/transport.c [Path is changed and related functions has been refactored for a long time] Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- fs/cifs/cifsproto.h | 7 ++++++- fs/cifs/smb2misc.c | 2 +- fs/cifs/transport.c | 9 +-------- 3 files changed, 8 insertions(+), 10 deletions(-) diff --git a/fs/cifs/cifsproto.h b/fs/cifs/cifsproto.h index a6ca4eda9a5a..5ff518be107e 100644 --- a/fs/cifs/cifsproto.h +++ b/fs/cifs/cifsproto.h @@ -85,7 +85,7 @@ extern struct mid_q_entry *AllocMidQEntry(const struct smb_hdr *smb_buffer, struct TCP_Server_Info *server); extern void DeleteMidQEntry(struct mid_q_entry *midEntry); extern void cifs_delete_mid(struct mid_q_entry *mid); -extern void cifs_mid_q_entry_release(struct mid_q_entry *midEntry); +void _cifs_mid_q_entry_release(struct kref *refcount); extern void cifs_wake_up_task(struct mid_q_entry *mid); extern int cifs_handle_standard(struct TCP_Server_Info *server, struct mid_q_entry *mid); @@ -646,4 +646,9 @@ static inline int cifs_create_options(struct cifs_sb_info *cifs_sb, int options) return options; } +static inline void cifs_mid_q_entry_release(struct mid_q_entry *midEntry) +{ + kref_put(&midEntry->refcount, _cifs_mid_q_entry_release); +} + #endif /* _CIFSPROTO_H */ diff --git a/fs/cifs/smb2misc.c b/fs/cifs/smb2misc.c index 49686086a333..4652b681f5aa 100644 --- a/fs/cifs/smb2misc.c +++ b/fs/cifs/smb2misc.c @@ -786,7 +786,7 @@ __smb2_handle_cancelled_cmd(struct cifs_tcon *tcon, __u16 cmd, __u64 mid, { struct close_cancelled_open *cancelled; - cancelled = kzalloc(sizeof(*cancelled), GFP_ATOMIC); + cancelled = kzalloc(sizeof(*cancelled), GFP_KERNEL); if (!cancelled) return -ENOMEM; diff --git a/fs/cifs/transport.c b/fs/cifs/transport.c index d209f989bb70..231a86327316 100644 --- a/fs/cifs/transport.c +++ b/fs/cifs/transport.c @@ -88,7 +88,7 @@ AllocMidQEntry(const struct smb_hdr *smb_buffer, struct TCP_Server_Info *server) return temp; } -static void _cifs_mid_q_entry_release(struct kref *refcount) +void _cifs_mid_q_entry_release(struct kref *refcount) { struct mid_q_entry *midEntry = container_of(refcount, struct mid_q_entry, refcount); @@ -168,13 +168,6 @@ static void _cifs_mid_q_entry_release(struct kref *refcount) mempool_free(midEntry, cifs_mid_poolp); } -void cifs_mid_q_entry_release(struct mid_q_entry *midEntry) -{ - spin_lock(&GlobalMid_Lock); - kref_put(&midEntry->refcount, _cifs_mid_q_entry_release); - spin_unlock(&GlobalMid_Lock); -} - void DeleteMidQEntry(struct mid_q_entry *midEntry) { cifs_mid_q_entry_release(midEntry); -- 2.34.3

2 1

[PATCH OLK-5.10] smb: client: fix potential deadlock when releasing mids
by Wang Zhaolong 09 Jul '24

09 Jul '24

From: Paulo Alcantara <pc(a)manguebit.com> mainline inclusion from mainline-v6.7-rc1 commit e6322fd177c6885a21dd4609dc5e5c973d1a2eb7 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4KS CVE: CVE-2023-52757 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- All release_mid() callers seem to hold a reference of @mid so there is no need to call kref_put(&mid->refcount, __release_mid) under @server->mid_lock spinlock. If they don't, then an use-after-free bug would have occurred anyways. By getting rid of such spinlock also fixes a potential deadlock as shown below CPU 0 CPU 1 ------------------------------------------------------------------ cifs_demultiplex_thread() cifs_debug_data_proc_show() release_mid() spin_lock(&server->mid_lock); spin_lock(&cifs_tcp_ses_lock) spin_lock(&server->mid_lock) __release_mid() smb2_find_smb_tcon() spin_lock(&cifs_tcp_ses_lock) *deadlock* Cc: stable(a)vger.kernel.org Signed-off-by: Paulo Alcantara (SUSE) <pc(a)manguebit.com> Signed-off-by: Steve French <stfrench(a)microsoft.com> Conflicts: fs/smb/client/cifsproto.h fs/smb/client/smb2misc.c fs/smb/client/transport.c fs/cifs/cifsproto.h fs/cifs/smb2misc.c fs/cifs/transport.c [Path is changed and related functions has been refactored for a long time] Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- fs/cifs/cifsproto.h | 7 ++++++- fs/cifs/smb2misc.c | 2 +- fs/cifs/transport.c | 9 +-------- 3 files changed, 8 insertions(+), 10 deletions(-) diff --git a/fs/cifs/cifsproto.h b/fs/cifs/cifsproto.h index ca34cc1e1931..8c0ed2b60285 100644 --- a/fs/cifs/cifsproto.h +++ b/fs/cifs/cifsproto.h @@ -85,7 +85,7 @@ extern struct mid_q_entry *AllocMidQEntry(const struct smb_hdr *smb_buffer, struct TCP_Server_Info *server); extern void DeleteMidQEntry(struct mid_q_entry *midEntry); extern void cifs_delete_mid(struct mid_q_entry *mid); -extern void cifs_mid_q_entry_release(struct mid_q_entry *midEntry); +void _cifs_mid_q_entry_release(struct kref *refcount); extern void cifs_wake_up_task(struct mid_q_entry *mid); extern int cifs_handle_standard(struct TCP_Server_Info *server, struct mid_q_entry *mid); @@ -646,4 +646,9 @@ static inline int cifs_create_options(struct cifs_sb_info *cifs_sb, int options) return options; } +static inline void cifs_mid_q_entry_release(struct mid_q_entry *midEntry) +{ + kref_put(&midEntry->refcount, _cifs_mid_q_entry_release); +} + #endif /* _CIFSPROTO_H */ diff --git a/fs/cifs/smb2misc.c b/fs/cifs/smb2misc.c index c0b632331912..edffa5657d26 100644 --- a/fs/cifs/smb2misc.c +++ b/fs/cifs/smb2misc.c @@ -780,7 +780,7 @@ __smb2_handle_cancelled_cmd(struct cifs_tcon *tcon, __u16 cmd, __u64 mid, { struct close_cancelled_open *cancelled; - cancelled = kzalloc(sizeof(*cancelled), GFP_ATOMIC); + cancelled = kzalloc(sizeof(*cancelled), GFP_KERNEL); if (!cancelled) return -ENOMEM; diff --git a/fs/cifs/transport.c b/fs/cifs/transport.c index 488893962708..c6fd4223b3be 100644 --- a/fs/cifs/transport.c +++ b/fs/cifs/transport.c @@ -88,7 +88,7 @@ AllocMidQEntry(const struct smb_hdr *smb_buffer, struct TCP_Server_Info *server) return temp; } -static void _cifs_mid_q_entry_release(struct kref *refcount) +void _cifs_mid_q_entry_release(struct kref *refcount) { struct mid_q_entry *midEntry = container_of(refcount, struct mid_q_entry, refcount); @@ -168,13 +168,6 @@ static void _cifs_mid_q_entry_release(struct kref *refcount) mempool_free(midEntry, cifs_mid_poolp); } -void cifs_mid_q_entry_release(struct mid_q_entry *midEntry) -{ - spin_lock(&GlobalMid_Lock); - kref_put(&midEntry->refcount, _cifs_mid_q_entry_release); - spin_unlock(&GlobalMid_Lock); -} - void DeleteMidQEntry(struct mid_q_entry *midEntry) { cifs_mid_q_entry_release(midEntry); -- 2.34.3

2 1

[openeuler:OLK-6.6] BUILD REGRESSION 0dba2ca16050e1ea7b068850b6fa440dbeb6665b
by kernel test robot 09 Jul '24

09 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-6.6 branch HEAD: 0dba2ca16050e1ea7b068850b6fa440dbeb6665b !9807 drm: zynqmp_dpsub: Always register bridge Error/Warning reports: https://lore.kernel.org/oe-kbuild-all/202407090319.Lo3bXFwf-lkp@intel.com https://lore.kernel.org/oe-kbuild-all/202407090326.YKEPYjUd-lkp@intel.com Error/Warning: (recently discovered and may have been fixed) drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2911:41: warning: '%d' directive output may be truncated writing between 1 and 11 bytes into a region of size between 3 and 18 [-Wformat-truncation=] drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5599:32: error: called object type 'int' is not a function or function pointer Error/Warning ids grouped by kconfigs: recent_errors |-- arm64-allmodconfig | `-- clang:warning:no-such-include-directory:drivers-infiniband-hw-hiroce3-include-mag |-- arm64-randconfig-002-20240709 | `-- drivers-net-ethernet-mucse-rnpvf-rnpvf_main.c:error:called-object-type-int-is-not-a-function-or-function-pointer `-- loongarch-randconfig-002-20240709 `-- drivers-net-ethernet-mucse-rnpm-rnpm_main.c:warning:d-directive-output-may-be-truncated-writing-between-and-bytes-into-a-region-of-size-between-and elapsed time: 726m configs tested: 38 configs skipped: 134 tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240709 clang-19 arm64 randconfig-002-20240709 clang-17 arm64 randconfig-003-20240709 clang-19 arm64 randconfig-004-20240709 clang-19 loongarch allmodconfig gcc-13.2.0 loongarch allnoconfig gcc-13.2.0 loongarch randconfig-001-20240709 gcc-13.2.0 loongarch randconfig-002-20240709 gcc-13.2.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240709 gcc-11 x86_64 buildonly-randconfig-002-20240709 clang-18 x86_64 buildonly-randconfig-003-20240709 clang-18 x86_64 buildonly-randconfig-004-20240709 gcc-9 x86_64 buildonly-randconfig-005-20240709 gcc-13 x86_64 buildonly-randconfig-006-20240709 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240709 clang-18 x86_64 randconfig-002-20240709 gcc-10 x86_64 randconfig-003-20240709 clang-18 x86_64 randconfig-004-20240709 gcc-12 x86_64 randconfig-005-20240709 gcc-13 x86_64 randconfig-006-20240709 gcc-8 x86_64 randconfig-011-20240709 clang-18 x86_64 randconfig-012-20240709 clang-18 x86_64 randconfig-013-20240709 clang-18 x86_64 randconfig-014-20240709 clang-18 x86_64 randconfig-015-20240709 clang-18 x86_64 randconfig-016-20240709 clang-18 x86_64 randconfig-071-20240709 gcc-7 x86_64 randconfig-072-20240709 clang-18 x86_64 randconfig-073-20240709 gcc-13 x86_64 randconfig-074-20240709 gcc-13 x86_64 randconfig-075-20240709 gcc-11 x86_64 randconfig-076-20240709 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-5.10] BUILD SUCCESS dbbaf94ca58a3de34ab871764b0b837d8c5015ef
by kernel test robot 09 Jul '24

09 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-5.10 branch HEAD: dbbaf94ca58a3de34ab871764b0b837d8c5015ef !9799 null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' elapsed time: 730m configs tested: 35 configs skipped: 138 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-13.2.0 arm64 defconfig gcc-13.2.0 arm64 randconfig-001-20240708 gcc-13.2.0 arm64 randconfig-002-20240708 clang-19 arm64 randconfig-003-20240708 gcc-13.2.0 arm64 randconfig-004-20240708 gcc-13.2.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240708 gcc-13 x86_64 buildonly-randconfig-002-20240708 gcc-10 x86_64 buildonly-randconfig-003-20240708 gcc-10 x86_64 buildonly-randconfig-004-20240708 gcc-13 x86_64 buildonly-randconfig-005-20240708 gcc-8 x86_64 buildonly-randconfig-006-20240708 gcc-13 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240708 clang-18 x86_64 randconfig-002-20240708 gcc-13 x86_64 randconfig-003-20240708 gcc-13 x86_64 randconfig-004-20240708 gcc-13 x86_64 randconfig-005-20240708 gcc-7 x86_64 randconfig-006-20240708 gcc-13 x86_64 randconfig-011-20240708 clang-18 x86_64 randconfig-012-20240708 clang-18 x86_64 randconfig-013-20240708 gcc-12 x86_64 randconfig-014-20240708 clang-18 x86_64 randconfig-015-20240708 gcc-13 x86_64 randconfig-016-20240708 gcc-13 x86_64 randconfig-071-20240708 clang-18 x86_64 randconfig-072-20240708 gcc-13 x86_64 randconfig-073-20240708 clang-18 x86_64 randconfig-074-20240708 clang-18 x86_64 randconfig-075-20240708 gcc-8 x86_64 randconfig-076-20240708 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:openEuler-1.0-LTS] BUILD SUCCESS 50a2fbeb47f2becd24ba0e491a852e2501463390
by kernel test robot 09 Jul '24

09 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS branch HEAD: 50a2fbeb47f2becd24ba0e491a852e2501463390 !9803 v2 x86/ftrace: Disable lockdep check when execute ftrace_int3_handler() Warning ids grouped by kconfigs: recent_errors `-- x86_64-buildonly-randconfig-001-20240708 `-- include-asm-generic-atomic-instrumented.h:warning:wait_req-may-be-used-uninitialized elapsed time: 723m configs tested: 35 configs skipped: 138 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig gcc-13.2.0 arm64 allnoconfig gcc-13.2.0 arm64 defconfig gcc-13.2.0 arm64 randconfig-001-20240708 gcc-13.2.0 arm64 randconfig-002-20240708 gcc-13.2.0 arm64 randconfig-003-20240708 gcc-13.2.0 arm64 randconfig-004-20240708 gcc-13.2.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240708 gcc-13 x86_64 buildonly-randconfig-002-20240708 gcc-10 x86_64 buildonly-randconfig-003-20240708 gcc-10 x86_64 buildonly-randconfig-004-20240708 gcc-13 x86_64 buildonly-randconfig-005-20240708 gcc-8 x86_64 buildonly-randconfig-006-20240708 gcc-13 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240708 clang-18 x86_64 randconfig-002-20240708 gcc-13 x86_64 randconfig-003-20240708 gcc-13 x86_64 randconfig-004-20240708 gcc-13 x86_64 randconfig-005-20240708 gcc-7 x86_64 randconfig-006-20240708 gcc-13 x86_64 randconfig-011-20240708 clang-18 x86_64 randconfig-012-20240708 clang-18 x86_64 randconfig-013-20240708 gcc-12 x86_64 randconfig-014-20240708 clang-18 x86_64 randconfig-015-20240708 gcc-13 x86_64 randconfig-016-20240708 gcc-13 x86_64 randconfig-071-20240708 clang-18 x86_64 randconfig-072-20240708 gcc-13 x86_64 randconfig-073-20240708 clang-18 x86_64 randconfig-074-20240708 clang-18 x86_64 randconfig-075-20240708 gcc-8 x86_64 randconfig-076-20240708 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 4037/10605] drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2911:41: warning: '%d' directive output may be truncated writing between 1 and 11 bytes into a region of size between 3 and 18
by kernel test robot 09 Jul '24

09 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 0dba2ca16050e1ea7b068850b6fa440dbeb6665b commit: 5deaf74c4b3edcf88f67f18aa352690deb9dc212 [4037/10605] drivers: initial support for rnpm drivers from Mucse Technology config: loongarch-randconfig-002-20240709 (https://download.01.org/0day-ci/archive/20240709/202407090319.Lo3bXFwf-lkp@…) compiler: loongarch64-linux-gcc (GCC) 13.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20240709/202407090319.Lo3bXFwf-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407090319.Lo3bXFwf-lkp@intel.com/ All warnings (new ones prefixed by >>): drivers/net/ethernet/mucse/rnpm/rnpm_main.c:256:6: warning: no previous prototype for 'rnpm_pf_service_event_schedule' [-Wmissing-prototypes] 256 | void rnpm_pf_service_event_schedule(struct rnpm_pf_adapter *pf_adapter) | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:1137:5: warning: no previous prototype for 'rnpm_rx_ring_reinit' [-Wmissing-prototypes] 1137 | int rnpm_rx_ring_reinit(struct rnpm_adapter *adapter, struct rnpm_ring *rx_ring) | ^~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c: In function 'rnpm_clean_rx_irq': drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2015:14: warning: variable 'xdp_xmit' set but not used [-Wunused-but-set-variable] 2015 | bool xdp_xmit = false; | ^~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c: At top level: drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2207:6: warning: no previous prototype for 'rnpm_write_eitr' [-Wmissing-prototypes] 2207 | void rnpm_write_eitr(struct rnpm_q_vector *q_vector, bool is_rxframe) | ^~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3013:5: warning: no previous prototype for 'rnpm_xmit_nop_frame_ring' [-Wmissing-prototypes] 3013 | int rnpm_xmit_nop_frame_ring(struct rnpm_adapter *adapter, | ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3037:5: warning: no previous prototype for 'rnpm_xmit_nop_frame_ring_temp' [-Wmissing-prototypes] 3037 | int rnpm_xmit_nop_frame_ring_temp(struct rnpm_adapter *adapter, | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3909:6: warning: no previous prototype for 'rnpm_vlan_stags_flag' [-Wmissing-prototypes] 3909 | void rnpm_vlan_stags_flag(struct rnpm_adapter *adapter) | ^~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4031:6: warning: no previous prototype for 'control_mac_rx' [-Wmissing-prototypes] 4031 | void control_mac_rx(struct rnpm_adapter *adapter, bool on) | ^~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5803:6: warning: no previous prototype for 'rnpm_pf_service_timer' [-Wmissing-prototypes] 5803 | void rnpm_pf_service_timer(struct timer_list *t) | ^~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5821:6: warning: no previous prototype for 'rnpm_service_timer' [-Wmissing-prototypes] 5821 | void rnpm_service_timer(struct timer_list *t) | ^~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5962:21: warning: no previous prototype for 'wait_all_port_resetting' [-Wmissing-prototypes] 5962 | __maybe_unused void wait_all_port_resetting(struct rnpm_pf_adapter *pf_adapter) | ^~~~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5974:21: warning: no previous prototype for 'clean_all_port_resetting' [-Wmissing-prototypes] 5974 | __maybe_unused void clean_all_port_resetting(struct rnpm_pf_adapter *pf_adapter) | ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6185:5: warning: no previous prototype for 'rnpm_check_mc_addr' [-Wmissing-prototypes] 6185 | int rnpm_check_mc_addr(struct rnpm_adapter *adapter) | ^~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6211:6: warning: no previous prototype for 'update_pf_vlan' [-Wmissing-prototypes] 6211 | void update_pf_vlan(struct rnpm_adapter *adapter) | ^~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6262:6: warning: no previous prototype for 'rnpm_pf_service_task' [-Wmissing-prototypes] 6262 | void rnpm_pf_service_task(struct work_struct *work) | ^~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7528:6: warning: no previous prototype for 'rnpm_clear_udp_tunnel_port' [-Wmissing-prototypes] 7528 | void rnpm_clear_udp_tunnel_port(struct rnpm_adapter *adapter) | ^~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7692:6: warning: no previous prototype for 'rnpm_assign_netdev_ops' [-Wmissing-prototypes] 7692 | void rnpm_assign_netdev_ops(struct net_device *dev) | ^~~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7785:6: warning: no previous prototype for 'rnpm_fix_queue_number' [-Wmissing-prototypes] 7785 | void rnpm_fix_queue_number(struct rnpm_hw *hw) | ^~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8760:5: warning: no previous prototype for 'rnpm_can_rpu_start' [-Wmissing-prototypes] 8760 | int rnpm_can_rpu_start(struct rnpm_pf_adapter *pf_adapter) | ^~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c: In function 'rnpm_request_msix_irqs': >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2911:41: warning: '%d' directive output may be truncated writing between 1 and 11 bytes into a region of size between 3 and 18 [-Wformat-truncation=] 2911 | "%s-%s-%d-%d", netdev->name, "TxRx", i, | ^~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2911:34: note: directive argument in the range [-2147483643, 2147483646] 2911 | "%s-%s-%d-%d", netdev->name, "TxRx", i, | ^~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2911:34: note: directive argument in the range [0, 65535] drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2910:25: note: 'snprintf' output between 10 and 39 bytes into a destination of size 24 2910 | snprintf(q_vector->name, sizeof(q_vector->name) - 1, | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 2911 | "%s-%s-%d-%d", netdev->name, "TxRx", i, | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 2912 | q_vector->v_idx); | ~~~~~~~~~~~~~~~~ vim +2911 drivers/net/ethernet/mucse/rnpm/rnpm_main.c 2887 2888 /** 2889 * rnpm_request_msix_irqs - Initialize MSI-X interrupts 2890 * @adapter: board private structure 2891 * 2892 * rnpm_request_msix_irqs allocates MSI-X vectors and requests 2893 * interrupts from the kernel. 2894 **/ 2895 static int rnpm_request_msix_irqs(struct rnpm_adapter *adapter) 2896 { 2897 struct net_device *netdev = adapter->netdev; 2898 int err; 2899 int i = 0; 2900 int cpu; 2901 2902 DPRINTK(IFUP, INFO, "num_q_vectors:%d\n", adapter->num_q_vectors); 2903 2904 for (i = 0; i < adapter->num_q_vectors; i++) { 2905 struct rnpm_q_vector *q_vector = adapter->q_vector[i]; 2906 struct msix_entry *entry = &adapter->msix_entries[i]; 2907 2908 // rnpm_dbg("use irq %d\n", entry->entry); 2909 if (q_vector->tx.ring && q_vector->rx.ring) { 2910 snprintf(q_vector->name, sizeof(q_vector->name) - 1, > 2911 "%s-%s-%d-%d", netdev->name, "TxRx", i, 2912 q_vector->v_idx); 2913 } else { 2914 WARN(!(q_vector->tx.ring && q_vector->rx.ring), 2915 "%s vector%d tx rx is null, v_idx:%d\n", 2916 netdev->name, i, q_vector->v_idx); 2917 /* skip this unused q_vector */ 2918 continue; 2919 } 2920 err = request_irq(entry->vector, &rnpm_msix_clean_rings, 0, 2921 q_vector->name, q_vector); 2922 if (err) { 2923 e_err(probe, 2924 "%s:request_irq failed for MSIX interrupt:%d Error: %d\n", 2925 netdev->name, entry->vector, err); 2926 goto free_queue_irqs; 2927 } 2928 /* register for affinity change notifications */ 2929 q_vector->affinity_notify.notify = rnpm_irq_affinity_notify; 2930 q_vector->affinity_notify.release = rnpm_irq_affinity_release; 2931 irq_set_affinity_notifier(entry->vector, 2932 &q_vector->affinity_notify); 2933 /* Spread affinity hints out across online CPUs. 2934 * 2935 * get_cpu_mask returns a static constant mask with 2936 * a permanent lifetime so it's ok to pass to 2937 * irq_set_affinity_hint without making a copy. 2938 */ 2939 cpu = cpumask_local_spread(q_vector->v_idx, -1); 2940 irq_set_affinity_hint(entry->vector, get_cpu_mask(cpu)); 2941 } 2942 2943 return 0; 2944 2945 free_queue_irqs: 2946 while (i) { 2947 i--; 2948 irq_set_affinity_hint(adapter->msix_entries[i].vector, NULL); 2949 irq_set_affinity_notifier(adapter->msix_entries[i].vector, 2950 NULL); 2951 irq_set_affinity_hint(adapter->msix_entries[i].vector, NULL); 2952 free_irq(adapter->msix_entries[i].vector, adapter->q_vector[i]); 2953 } 2954 2955 kfree(adapter->msix_entries); 2956 adapter->msix_entries = NULL; 2957 return err; 2958 } 2959 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 6865/10605] drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5599:32: error: called object type 'int' is not a function or function pointer
by kernel test robot 09 Jul '24

09 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 0dba2ca16050e1ea7b068850b6fa440dbeb6665b commit: 6adab536d69347a10c2366aaf6b86de963d5994b [6865/10605] drivers: initial support for rnpvf drivers from Mucse Technology config: arm64-randconfig-002-20240709 (https://download.01.org/0day-ci/archive/20240709/202407090326.YKEPYjUd-lkp@…) compiler: clang version 17.0.6 (https://github.com/llvm/llvm-project 6009708b4367171ccdbf4b5905cb6a803753fe18) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20240709/202407090326.YKEPYjUd-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407090326.YKEPYjUd-lkp@intel.com/ All errors (new ones prefixed by >>): | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:127:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 127 | void rnpvf_unmap_and_free_tx_resource(struct rnpvf_ring *ring, | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:1365:6: warning: no previous prototype for function 'rnpvf_alloc_rx_buffers' [-Wmissing-prototypes] 1365 | void rnpvf_alloc_rx_buffers(struct rnpvf_ring *rx_ring, u16 cleaned_count) | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:1365:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 1365 | void rnpvf_alloc_rx_buffers(struct rnpvf_ring *rx_ring, u16 cleaned_count) | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:1659:7: warning: variable 'xdp_xmit' set but not used [-Wunused-but-set-variable] 1659 | bool xdp_xmit = false; | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:1945:6: warning: no previous prototype for function 'update_rx_count' [-Wmissing-prototypes] 1945 | void update_rx_count(int cleaned, struct rnpvf_q_vector *q_vector) | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:1945:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 1945 | void update_rx_count(int cleaned, struct rnpvf_q_vector *q_vector) | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2420:6: warning: no previous prototype for function 'rnpvf_write_eitr_rx' [-Wmissing-prototypes] 2420 | void rnpvf_write_eitr_rx(struct rnpvf_q_vector *q_vector) | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2420:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 2420 | void rnpvf_write_eitr_rx(struct rnpvf_q_vector *q_vector) | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2523:6: warning: no previous prototype for function 'rnpvf_configure_tx_ring' [-Wmissing-prototypes] 2523 | void rnpvf_configure_tx_ring(struct rnpvf_adapter *adapter, | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2523:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 2523 | void rnpvf_configure_tx_ring(struct rnpvf_adapter *adapter, | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2589:6: warning: no previous prototype for function 'rnpvf_disable_rx_queue' [-Wmissing-prototypes] 2589 | void rnpvf_disable_rx_queue(struct rnpvf_adapter *adapter, | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2589:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 2589 | void rnpvf_disable_rx_queue(struct rnpvf_adapter *adapter, | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2595:6: warning: no previous prototype for function 'rnpvf_enable_rx_queue' [-Wmissing-prototypes] 2595 | void rnpvf_enable_rx_queue(struct rnpvf_adapter *adapter, | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2595:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 2595 | void rnpvf_enable_rx_queue(struct rnpvf_adapter *adapter, | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2601:6: warning: no previous prototype for function 'rnpvf_configure_rx_ring' [-Wmissing-prototypes] 2601 | void rnpvf_configure_rx_ring(struct rnpvf_adapter *adapter, | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2601:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 2601 | void rnpvf_configure_rx_ring(struct rnpvf_adapter *adapter, | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2736:6: warning: variable 'err' set but not used [-Wunused-but-set-variable] 2736 | int err = -EOPNOTSUPP; | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:3307:6: warning: variable 'vector_threshold' set but not used [-Wunused-but-set-variable] 3307 | int vector_threshold; | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:3456:19: warning: variable 'hw' set but not used [-Wunused-but-set-variable] 3456 | struct rnpvf_hw *hw; | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:4590:6: warning: no previous prototype for function 'rnpvf_tx_ctxtdesc' [-Wmissing-prototypes] 4590 | void rnpvf_tx_ctxtdesc(struct rnpvf_ring *tx_ring, u16 mss_seg_len, | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:4590:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 4590 | void rnpvf_tx_ctxtdesc(struct rnpvf_ring *tx_ring, u16 mss_seg_len, | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5039:6: warning: no previous prototype for function 'rnpvf_maybe_tx_ctxtdesc' [-Wmissing-prototypes] 5039 | void rnpvf_maybe_tx_ctxtdesc(struct rnpvf_ring *tx_ring, | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5039:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 5039 | void rnpvf_maybe_tx_ctxtdesc(struct rnpvf_ring *tx_ring, | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5089:13: warning: no previous prototype for function 'rnpvf_xmit_frame_ring' [-Wmissing-prototypes] 5089 | netdev_tx_t rnpvf_xmit_frame_ring(struct sk_buff *skb, | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5089:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 5089 | netdev_tx_t rnpvf_xmit_frame_ring(struct sk_buff *skb, | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5484:6: warning: variable 'ring_csum_err' set but not used [-Wunused-but-set-variable] 5484 | u64 ring_csum_err = 0; | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5485:6: warning: variable 'ring_csum_good' set but not used [-Wunused-but-set-variable] 5485 | u64 ring_csum_good = 0; | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5580:6: warning: no previous prototype for function 'rnpvf_assign_netdev_ops' [-Wmissing-prototypes] 5580 | void rnpvf_assign_netdev_ops(struct net_device *dev) | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5580:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 5580 | void rnpvf_assign_netdev_ops(struct net_device *dev) | ^ | static >> drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5599:32: error: called object type 'int' is not a function or function pointer 5599 | v = rd32(hw, RNP_DMA_RX_START(ring)); | ~~~~~~~~~~~~~~~~^ drivers/net/ethernet/mucse/rnpvf/rnpvf_regs.h:116:53: note: expanded from macro 'rd32' 116 | #define rd32(hw, off) rnpvf_rd_reg((hw)->hw_addr + (off)) | ^~~ drivers/net/ethernet/mucse/rnpvf/rnpvf_regs.h:104:42: note: expanded from macro 'rnpvf_rd_reg' 104 | #define rnpvf_rd_reg(reg) readl((void *)(reg)) | ^~~ 18 warnings and 1 error generated. Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for RESCTRL_FS Depends on [n]: MISC_FILESYSTEMS [=n] && ARCH_HAS_CPU_RESCTRL [=y] Selected by [y]: - ARM64_MPAM [=y] vim +/int +5599 drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c 5587 5588 static u8 rnpvf_vfnum(struct rnpvf_hw *hw) 5589 { 5590 u16 vf_num = -1; 5591 u32 pfvfnum_reg; 5592 5593 #if CONFIG_BAR4_PFVFNUM 5594 int ring, v; 5595 u16 func = 0; 5596 5597 func = ((hw->pdev->devfn & 0x1) ? 1 : 0); 5598 for (ring = 0; ring < 128; ring += 2) { > 5599 v = rd32(hw, RNP_DMA_RX_START(ring)); 5600 if ((v & 0xFFFF) == hw->pdev->vendor) { 5601 continue; 5602 } else { 5603 vf_num = (1 << 7) /*vf-active*/ | 5604 (func << 6) /*pf*/ | (ring / 2) /*vfnum*/; 5605 break; 5606 } 5607 } 5608 return vf_num; 5609 #else 5610 pfvfnum_reg = 5611 (VF_NUM_REG_N10 & (pci_resource_len(hw->pdev, 0) - 1)); 5612 vf_num = readl(hw->hw_addr_bar0 + pfvfnum_reg); 5613 #define VF_NUM_MASK_TEMP (0xff0) 5614 #define VF_NUM_OFF (4) 5615 return ((vf_num & VF_NUM_MASK_TEMP) >> VF_NUM_OFF); 5616 #endif 5617 } 5618 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6] kdb: Fix buffer overflow during tab-complete
by Tengda Wu 08 Jul '24

08 Jul '24

From: Daniel Thompson <daniel.thompson(a)linaro.org> stable inclusion from stable-v6.6.34 commit 107e825cc448b7834b31e8b1b3cf0f57426d46d5 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB05N CVE: CVE-2024-39480 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit e9730744bf3af04cda23799029342aa3cddbc454 upstream. Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer. Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around. Reported-by: Justin Stitt <justinstitt(a)google.com> Closes: https://lore.kernel.org/all/CAFhGd8qESuuifuHsNjFPR-Va3P80bxrw+LqvC8deA8GziU… Cc: stable(a)vger.kernel.org Reviewed-by: Douglas Anderson <dianders(a)chromium.org> Reviewed-by: Justin Stitt <justinstitt(a)google.com> Tested-by: Justin Stitt <justinstitt(a)google.com> Link: https://lore.kernel.org/r/20240424-kgdb_read_refactor-v3-1-f236dbe9828d@lin… Signed-off-by: Daniel Thompson <daniel.thompson(a)linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Fixes: 5d5314d6795f ("kdb: core for kgdb back end (1 of 2)") Signed-off-by: Tengda Wu <wutengda2(a)huawei.com> --- kernel/debug/kdb/kdb_io.c | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/kernel/debug/kdb/kdb_io.c b/kernel/debug/kdb/kdb_io.c index 9443bc63c5a2..06dfbccb1033 100644 --- a/kernel/debug/kdb/kdb_io.c +++ b/kernel/debug/kdb/kdb_io.c @@ -367,14 +367,19 @@ static char *kdb_read(char *buffer, size_t bufsize) kdb_printf(kdb_prompt_str); kdb_printf("%s", buffer); } else if (tab != 2 && count > 0) { - len_tmp = strlen(p_tmp); - strncpy(p_tmp+len_tmp, cp, lastchar-cp+1); - len_tmp = strlen(p_tmp); - strncpy(cp, p_tmp+len, len_tmp-len + 1); - len = len_tmp - len; - kdb_printf("%s", cp); - cp += len; - lastchar += len; + /* How many new characters do we want from tmpbuffer? */ + len_tmp = strlen(p_tmp) - len; + if (lastchar + len_tmp >= bufend) + len_tmp = bufend - lastchar; + + if (len_tmp) { + /* + 1 ensures the '\0' is memmove'd */ + memmove(cp+len_tmp, cp, (lastchar-cp) + 1); + memcpy(cp, p_tmp+len, len_tmp); + kdb_printf("%s", cp); + cp += len_tmp; + lastchar += len_tmp; + } } kdb_nextline = 1; /* reset output line number */ break; -- 2.34.1

2 1

[PATCH OLK-5.10] kdb: Fix buffer overflow during tab-complete
by Tengda Wu 08 Jul '24

08 Jul '24

From: Daniel Thompson <daniel.thompson(a)linaro.org> stable inclusion from stable-v5.10.219 commit cfdc2fa4db57503bc6d3817240547c8ddc55fa96 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB05N CVE: CVE-2024-39480 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit e9730744bf3af04cda23799029342aa3cddbc454 upstream. Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer. Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around. Reported-by: Justin Stitt <justinstitt(a)google.com> Closes: https://lore.kernel.org/all/CAFhGd8qESuuifuHsNjFPR-Va3P80bxrw+LqvC8deA8GziU… Cc: stable(a)vger.kernel.org Reviewed-by: Douglas Anderson <dianders(a)chromium.org> Reviewed-by: Justin Stitt <justinstitt(a)google.com> Tested-by: Justin Stitt <justinstitt(a)google.com> Link: https://lore.kernel.org/r/20240424-kgdb_read_refactor-v3-1-f236dbe9828d@lin… Signed-off-by: Daniel Thompson <daniel.thompson(a)linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Fixes: 5d5314d6795f ("kdb: core for kgdb back end (1 of 2)") Signed-off-by: Tengda Wu <wutengda2(a)huawei.com> --- kernel/debug/kdb/kdb_io.c | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/kernel/debug/kdb/kdb_io.c b/kernel/debug/kdb/kdb_io.c index 6735ac36b718..dcc7e13e98b3 100644 --- a/kernel/debug/kdb/kdb_io.c +++ b/kernel/debug/kdb/kdb_io.c @@ -354,14 +354,19 @@ static char *kdb_read(char *buffer, size_t bufsize) kdb_printf(kdb_prompt_str); kdb_printf("%s", buffer); } else if (tab != 2 && count > 0) { - len_tmp = strlen(p_tmp); - strncpy(p_tmp+len_tmp, cp, lastchar-cp+1); - len_tmp = strlen(p_tmp); - strncpy(cp, p_tmp+len, len_tmp-len + 1); - len = len_tmp - len; - kdb_printf("%s", cp); - cp += len; - lastchar += len; + /* How many new characters do we want from tmpbuffer? */ + len_tmp = strlen(p_tmp) - len; + if (lastchar + len_tmp >= bufend) + len_tmp = bufend - lastchar; + + if (len_tmp) { + /* + 1 ensures the '\0' is memmove'd */ + memmove(cp+len_tmp, cp, (lastchar-cp) + 1); + memcpy(cp, p_tmp+len, len_tmp); + kdb_printf("%s", cp); + cp += len_tmp; + lastchar += len_tmp; + } } kdb_nextline = 1; /* reset output line number */ break; -- 2.34.1

2 1

[PATCH openEuler-1.0-LTS] kdb: Fix buffer overflow during tab-complete
by Tengda Wu 08 Jul '24

08 Jul '24

From: Daniel Thompson <daniel.thompson(a)linaro.org> stable inclusion from stable-v4.19.316 commit fb824a99e148ff272a53d71d84122728b5f00992 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB05N CVE: CVE-2024-39480 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit e9730744bf3af04cda23799029342aa3cddbc454 upstream. Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer. Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around. Reported-by: Justin Stitt <justinstitt(a)google.com> Closes: https://lore.kernel.org/all/CAFhGd8qESuuifuHsNjFPR-Va3P80bxrw+LqvC8deA8GziU… Cc: stable(a)vger.kernel.org Reviewed-by: Douglas Anderson <dianders(a)chromium.org> Reviewed-by: Justin Stitt <justinstitt(a)google.com> Tested-by: Justin Stitt <justinstitt(a)google.com> Link: https://lore.kernel.org/r/20240424-kgdb_read_refactor-v3-1-f236dbe9828d@lin… Signed-off-by: Daniel Thompson <daniel.thompson(a)linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Fixes: 5d5314d6795f ("kdb: core for kgdb back end (1 of 2)") Signed-off-by: Tengda Wu <wutengda2(a)huawei.com> --- kernel/debug/kdb/kdb_io.c | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/kernel/debug/kdb/kdb_io.c b/kernel/debug/kdb/kdb_io.c index 6a4b41484afe..2ce307c86977 100644 --- a/kernel/debug/kdb/kdb_io.c +++ b/kernel/debug/kdb/kdb_io.c @@ -364,14 +364,19 @@ static char *kdb_read(char *buffer, size_t bufsize) kdb_printf(kdb_prompt_str); kdb_printf("%s", buffer); } else if (tab != 2 && count > 0) { - len_tmp = strlen(p_tmp); - strncpy(p_tmp+len_tmp, cp, lastchar-cp+1); - len_tmp = strlen(p_tmp); - strncpy(cp, p_tmp+len, len_tmp-len + 1); - len = len_tmp - len; - kdb_printf("%s", cp); - cp += len; - lastchar += len; + /* How many new characters do we want from tmpbuffer? */ + len_tmp = strlen(p_tmp) - len; + if (lastchar + len_tmp >= bufend) + len_tmp = bufend - lastchar; + + if (len_tmp) { + /* + 1 ensures the '\0' is memmove'd */ + memmove(cp+len_tmp, cp, (lastchar-cp) + 1); + memcpy(cp, p_tmp+len, len_tmp); + kdb_printf("%s", cp); + cp += len_tmp; + lastchar += len_tmp; + } } kdb_nextline = 1; /* reset output line number */ break; -- 2.34.1

2 1

[PATCH openEuler-22.03-LTS-SP1] kdb: Fix buffer overflow during tab-complete
by Tengda Wu 08 Jul '24

08 Jul '24

From: Daniel Thompson <daniel.thompson(a)linaro.org> stable inclusion from stable-v5.10.219 commit cfdc2fa4db57503bc6d3817240547c8ddc55fa96 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB05N CVE: CVE-2024-39480 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit e9730744bf3af04cda23799029342aa3cddbc454 upstream. Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer. Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around. Reported-by: Justin Stitt <justinstitt(a)google.com> Closes: https://lore.kernel.org/all/CAFhGd8qESuuifuHsNjFPR-Va3P80bxrw+LqvC8deA8GziU… Cc: stable(a)vger.kernel.org Reviewed-by: Douglas Anderson <dianders(a)chromium.org> Reviewed-by: Justin Stitt <justinstitt(a)google.com> Tested-by: Justin Stitt <justinstitt(a)google.com> Link: https://lore.kernel.org/r/20240424-kgdb_read_refactor-v3-1-f236dbe9828d@lin… Signed-off-by: Daniel Thompson <daniel.thompson(a)linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Fixes: 5d5314d6795f ("kdb: core for kgdb back end (1 of 2)") Signed-off-by: Tengda Wu <wutengda2(a)huawei.com> --- kernel/debug/kdb/kdb_io.c | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/kernel/debug/kdb/kdb_io.c b/kernel/debug/kdb/kdb_io.c index 6735ac36b718..dcc7e13e98b3 100644 --- a/kernel/debug/kdb/kdb_io.c +++ b/kernel/debug/kdb/kdb_io.c @@ -354,14 +354,19 @@ static char *kdb_read(char *buffer, size_t bufsize) kdb_printf(kdb_prompt_str); kdb_printf("%s", buffer); } else if (tab != 2 && count > 0) { - len_tmp = strlen(p_tmp); - strncpy(p_tmp+len_tmp, cp, lastchar-cp+1); - len_tmp = strlen(p_tmp); - strncpy(cp, p_tmp+len, len_tmp-len + 1); - len = len_tmp - len; - kdb_printf("%s", cp); - cp += len; - lastchar += len; + /* How many new characters do we want from tmpbuffer? */ + len_tmp = strlen(p_tmp) - len; + if (lastchar + len_tmp >= bufend) + len_tmp = bufend - lastchar; + + if (len_tmp) { + /* + 1 ensures the '\0' is memmove'd */ + memmove(cp+len_tmp, cp, (lastchar-cp) + 1); + memcpy(cp, p_tmp+len, len_tmp); + kdb_printf("%s", cp); + cp += len_tmp; + lastchar += len_tmp; + } } kdb_nextline = 1; /* reset output line number */ break; -- 2.34.1

2 1

[PATCH OLK-5.10] arm64: mm: Pass pbha-performance-only bit under chosen node
by Wupeng Ma 08 Jul '24

08 Jul '24

From: Ma Wupeng <mawupeng1(a)huawei.com> hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/I96IZH -------------------------------- Pass pbha-performance-only under chosen node to slove booting problem. Fixes: f43933b3f947 ("arm64: cpufeature: Enable PBHA for stage1 early via FDT") Signed-off-by: Ma Wupeng <mawupeng1(a)huawei.com> --- arch/arm64/kernel/cpufeature.c | 12 +++++++++++- drivers/firmware/efi/libstub/fdt.c | 7 ------- 2 files changed, 11 insertions(+), 8 deletions(-) diff --git a/arch/arm64/kernel/cpufeature.c b/arch/arm64/kernel/cpufeature.c index 9a4193991be5..36a426b0def2 100644 --- a/arch/arm64/kernel/cpufeature.c +++ b/arch/arm64/kernel/cpufeature.c @@ -1802,14 +1802,24 @@ void __init early_pbha_init(void) if (!fdt) goto unlock; + /* arm,pbha-performance-only may exist in both chosen and cpus node */ + node = fdt_path_offset(fdt, "/chosen"); + if (node < 0) + goto unlock; + + prop = fdt_getprop(fdt, node, "arm,pbha-performance-only", &size); + if (prop) + goto found; + node = fdt_path_offset(fdt, "/cpus"); if (node < 0) goto unlock; prop = fdt_getprop(fdt, node, "arm,pbha-performance-only", &size); - if (!prop) + if (prop) goto unlock; +found: if (!cpu_has_pbha()) goto unlock; diff --git a/drivers/firmware/efi/libstub/fdt.c b/drivers/firmware/efi/libstub/fdt.c index cb8e8e4e3f63..30aeb2b54569 100644 --- a/drivers/firmware/efi/libstub/fdt.c +++ b/drivers/firmware/efi/libstub/fdt.c @@ -57,13 +57,6 @@ static efi_status_t fdt_init_hbm_mode(void *fdt, int node) if (status) return EFI_LOAD_ERROR; - node = fdt_subnode_offset(fdt, 0, "cpus"); - if (node < 0) { - node = fdt_add_subnode(fdt, 0, "cpus"); - if (node < 0) - return EFI_LOAD_ERROR; - } - /* Current PBHA bit59 is need to enable PBHA bit0 mode. */ status = fdt_setprop_var(fdt, node, "arm,pbha-performance-only", arr); if (status) { -- 2.25.1

2 1

[PATCH OLK-6.6] mm: mem_reliable: Make counting reliable task usage compatible with folio
by Wupeng Ma 08 Jul '24

08 Jul '24

From: Ma Wupeng <mawupeng1(a)huawei.com> hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/I8USBA -------------------------------- Memory folio is enabled in current branch, however the counting of reliale memory task need some polish to make the counting right. In zap_present_folio_ptes, non-anon folio should also be counted. Fixes: b5be205e006a ("mm/memory: factor out zapping of present pte into zap_present_pte()") Signed-off-by: Ma Wupeng <mawupeng1(a)huawei.com> --- kernel/events/uprobes.c | 2 +- mm/huge_memory.c | 4 ++-- mm/khugepaged.c | 2 +- mm/ksm.c | 2 +- mm/memory.c | 7 ++++--- mm/rmap.c | 8 ++++---- 6 files changed, 13 insertions(+), 12 deletions(-) diff --git a/kernel/events/uprobes.c b/kernel/events/uprobes.c index 9f8d9baa7a2f..a80072c3f888 100644 --- a/kernel/events/uprobes.c +++ b/kernel/events/uprobes.c @@ -199,7 +199,7 @@ static int __replace_page(struct vm_area_struct *vma, unsigned long addr, set_pte_at_notify(mm, addr, pvmw.pte, mk_pte(new_page, vma->vm_page_prot)); - add_reliable_page_counter(old_page, mm, -1); + add_reliable_folio_counter(old_folio, mm, -1); folio_remove_rmap_pte(old_folio, old_page, vma); if (!folio_mapped(old_folio)) folio_free_swap(old_folio); diff --git a/mm/huge_memory.c b/mm/huge_memory.c index 32ddf09db52b..d743502c70f0 100644 --- a/mm/huge_memory.c +++ b/mm/huge_memory.c @@ -1608,7 +1608,7 @@ int copy_huge_pmd(struct mm_struct *dst_mm, struct mm_struct *src_mm, return -EAGAIN; } add_mm_counter(dst_mm, MM_ANONPAGES, HPAGE_PMD_NR); - add_reliable_page_counter(src_page, dst_mm, HPAGE_PMD_NR); + add_reliable_folio_counter(src_folio, dst_mm, HPAGE_PMD_NR); out_zero_page: mm_inc_nr_ptes(dst_mm); pgtable_trans_huge_deposit(dst_mm, dst_pmd, pgtable); @@ -2577,7 +2577,7 @@ static void __split_huge_pmd_locked(struct vm_area_struct *vma, pmd_t *pmd, folio_mark_dirty(folio); if (!folio_test_referenced(folio) && pmd_young(old_pmd)) folio_set_referenced(folio); - add_reliable_page_counter(page, mm, -HPAGE_PMD_NR); + add_reliable_folio_counter(folio, mm, -HPAGE_PMD_NR); folio_remove_rmap_pmd(folio, page, vma); folio_put(folio); } diff --git a/mm/khugepaged.c b/mm/khugepaged.c index fa787464662f..06f31ad4452e 100644 --- a/mm/khugepaged.c +++ b/mm/khugepaged.c @@ -1644,7 +1644,7 @@ int collapse_pte_mapped_thp(struct mm_struct *mm, unsigned long addr, */ ptep_clear(mm, addr, pte); folio_remove_rmap_pte(folio, page, vma); - add_reliable_page_counter(page, mm, -1); + add_reliable_folio_counter(folio, mm, -1); nr_ptes++; } diff --git a/mm/ksm.c b/mm/ksm.c index 94207293e6fc..09411079262b 100644 --- a/mm/ksm.c +++ b/mm/ksm.c @@ -1236,7 +1236,7 @@ static int replace_page(struct vm_area_struct *vma, struct page *page, */ if (!is_zero_pfn(page_to_pfn(kpage))) { folio_get(kfolio); - add_reliable_page_counter(kpage, mm, 1); + add_reliable_folio_counter(kfolio, mm, 1); folio_add_anon_rmap_pte(kfolio, kpage, vma, addr, RMAP_NONE); newpte = mk_pte(kpage, vma->vm_page_prot); } else { diff --git a/mm/memory.c b/mm/memory.c index fe10342687d0..49a5618661d8 100644 --- a/mm/memory.c +++ b/mm/memory.c @@ -1495,12 +1495,12 @@ static __always_inline void zap_present_folio_ptes(struct mmu_gather *tlb, if (pte_young(ptent) && likely(vma_has_recency(vma))) folio_mark_accessed(folio); rss[mm_counter(folio)] -= nr; - add_reliable_page_counter(page, mm, -nr); } else { /* We don't need up-to-date accessed/dirty bits. */ clear_full_ptes(mm, addr, pte, nr, tlb->fullmm); rss[MM_ANONPAGES] -= nr; } + add_reliable_folio_counter(folio, mm, -nr); /* Checking a single PTE in a batch is sufficient. */ arch_check_zapped_pte(vma, ptent); @@ -1637,7 +1637,7 @@ static unsigned long zap_pte_range(struct mmu_gather *tlb, */ WARN_ON_ONCE(!vma_is_anonymous(vma)); rss[mm_counter(folio)]--; - add_reliable_page_counter(page, mm, -1); + add_reliable_folio_counter(folio, mm, -1); if (is_device_private_entry(entry)) folio_remove_rmap_pte(folio, page, vma); folio_put(folio); @@ -1654,6 +1654,7 @@ static unsigned long zap_pte_range(struct mmu_gather *tlb, if (!should_zap_folio(details, folio)) continue; rss[mm_counter(folio)]--; + add_reliable_folio_counter(folio, mm, -1); } else if (pte_marker_entry_uffd_wp(entry)) { /* * For anon: always drop the marker; for file: only @@ -4643,7 +4644,7 @@ vm_fault_t do_set_pmd(struct vm_fault *vmf, struct page *page) entry = maybe_pmd_mkwrite(pmd_mkdirty(entry), vma); add_mm_counter(vma->vm_mm, mm_counter_file(folio), HPAGE_PMD_NR); - add_reliable_page_counter(page, vma->vm_mm, HPAGE_PMD_NR); + add_reliable_folio_counter(folio, vma->vm_mm, HPAGE_PMD_NR); folio_add_file_rmap_pmd(folio, page, vma); /* diff --git a/mm/rmap.c b/mm/rmap.c index d13003244e6a..d78bb701bda1 100644 --- a/mm/rmap.c +++ b/mm/rmap.c @@ -1757,7 +1757,7 @@ static bool try_to_unmap_one(struct folio *folio, struct vm_area_struct *vma, hsz); } else { dec_mm_counter(mm, mm_counter(folio)); - add_reliable_page_counter(&folio->page, mm, -1); + add_reliable_folio_counter(folio, mm, -1); set_pte_at(mm, address, pvmw.pte, pteval); } @@ -1773,7 +1773,7 @@ static bool try_to_unmap_one(struct folio *folio, struct vm_area_struct *vma, * copied pages. */ dec_mm_counter(mm, mm_counter(folio)); - add_reliable_page_counter(&folio->page, mm, -1); + add_reliable_folio_counter(folio, mm, -1); } else if (folio_test_anon(folio)) { swp_entry_t entry = page_swap_entry(subpage); pte_t swp_pte; @@ -2163,7 +2163,7 @@ static bool try_to_migrate_one(struct folio *folio, struct vm_area_struct *vma, hsz); } else { dec_mm_counter(mm, mm_counter(folio)); - add_reliable_page_counter(&folio->page, mm, -1); + add_reliable_folio_counter(folio, mm, -1); set_pte_at(mm, address, pvmw.pte, pteval); } @@ -2179,7 +2179,7 @@ static bool try_to_migrate_one(struct folio *folio, struct vm_area_struct *vma, * copied pages. */ dec_mm_counter(mm, mm_counter(folio)); - add_reliable_page_counter(&folio->page, mm, -1); + add_reliable_folio_counter(folio, mm, -1); } else { swp_entry_t entry; pte_t swp_pte; -- 2.25.1

2 1

[PATCH openEuler-22.03-LTS-SP1] kdb: Fix buffer overflow during tab-complete
by Tengda Wu 08 Jul '24

08 Jul '24

From: Daniel Thompson <daniel.thompson(a)linaro.org> stable inclusion from stable-v5.10.219 commit cfdc2fa4db57503bc6d3817240547c8ddc55fa96 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB05N CVE: CVE-2024-39480 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit e9730744bf3af04cda23799029342aa3cddbc454 upstream. Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer. Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around. Reported-by: Justin Stitt <justinstitt(a)google.com> Closes: https://lore.kernel.org/all/CAFhGd8qESuuifuHsNjFPR-Va3P80bxrw+LqvC8deA8GziU… Cc: stable(a)vger.kernel.org Reviewed-by: Douglas Anderson <dianders(a)chromium.org> Reviewed-by: Justin Stitt <justinstitt(a)google.com> Tested-by: Justin Stitt <justinstitt(a)google.com> Link: https://lore.kernel.org/r/20240424-kgdb_read_refactor-v3-1-f236dbe9828d@lin… Signed-off-by: Daniel Thompson <daniel.thompson(a)linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Fixes: 5d5314d6795f3c1c0f415348ff8c51f7de042b77 ("kdb: core for kgdb back end (1 of 2)") Signed-off-by: Tengda Wu <wutengda2(a)huawei.com> --- kernel/debug/kdb/kdb_io.c | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/kernel/debug/kdb/kdb_io.c b/kernel/debug/kdb/kdb_io.c index 6735ac36b718..dcc7e13e98b3 100644 --- a/kernel/debug/kdb/kdb_io.c +++ b/kernel/debug/kdb/kdb_io.c @@ -354,14 +354,19 @@ static char *kdb_read(char *buffer, size_t bufsize) kdb_printf(kdb_prompt_str); kdb_printf("%s", buffer); } else if (tab != 2 && count > 0) { - len_tmp = strlen(p_tmp); - strncpy(p_tmp+len_tmp, cp, lastchar-cp+1); - len_tmp = strlen(p_tmp); - strncpy(cp, p_tmp+len, len_tmp-len + 1); - len = len_tmp - len; - kdb_printf("%s", cp); - cp += len; - lastchar += len; + /* How many new characters do we want from tmpbuffer? */ + len_tmp = strlen(p_tmp) - len; + if (lastchar + len_tmp >= bufend) + len_tmp = bufend - lastchar; + + if (len_tmp) { + /* + 1 ensures the '\0' is memmove'd */ + memmove(cp+len_tmp, cp, (lastchar-cp) + 1); + memcpy(cp, p_tmp+len, len_tmp); + kdb_printf("%s", cp); + cp += len_tmp; + lastchar += len_tmp; + } } kdb_nextline = 1; /* reset output line number */ break; -- 2.34.1

2 1

[PATCH OLK-6.6] kdb: Fix buffer overflow during tab-complete
by Tengda Wu 08 Jul '24

08 Jul '24

From: Daniel Thompson <daniel.thompson(a)linaro.org> stable inclusion from stable-v6.6.34 commit 107e825cc448b7834b31e8b1b3cf0f57426d46d5 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB05N CVE: CVE-2024-39480 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit e9730744bf3af04cda23799029342aa3cddbc454 upstream. Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer. Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around. Reported-by: Justin Stitt <justinstitt(a)google.com> Closes: https://lore.kernel.org/all/CAFhGd8qESuuifuHsNjFPR-Va3P80bxrw+LqvC8deA8GziU… Cc: stable(a)vger.kernel.org Reviewed-by: Douglas Anderson <dianders(a)chromium.org> Reviewed-by: Justin Stitt <justinstitt(a)google.com> Tested-by: Justin Stitt <justinstitt(a)google.com> Link: https://lore.kernel.org/r/20240424-kgdb_read_refactor-v3-1-f236dbe9828d@lin… Signed-off-by: Daniel Thompson <daniel.thompson(a)linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Fixes: 5d5314d6795f3c1c0f415348ff8c51f7de042b77 ("kdb: core for kgdb back end (1 of 2)") Signed-off-by: Tengda Wu <wutengda2(a)huawei.com> --- kernel/debug/kdb/kdb_io.c | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/kernel/debug/kdb/kdb_io.c b/kernel/debug/kdb/kdb_io.c index 9443bc63c5a2..06dfbccb1033 100644 --- a/kernel/debug/kdb/kdb_io.c +++ b/kernel/debug/kdb/kdb_io.c @@ -367,14 +367,19 @@ static char *kdb_read(char *buffer, size_t bufsize) kdb_printf(kdb_prompt_str); kdb_printf("%s", buffer); } else if (tab != 2 && count > 0) { - len_tmp = strlen(p_tmp); - strncpy(p_tmp+len_tmp, cp, lastchar-cp+1); - len_tmp = strlen(p_tmp); - strncpy(cp, p_tmp+len, len_tmp-len + 1); - len = len_tmp - len; - kdb_printf("%s", cp); - cp += len; - lastchar += len; + /* How many new characters do we want from tmpbuffer? */ + len_tmp = strlen(p_tmp) - len; + if (lastchar + len_tmp >= bufend) + len_tmp = bufend - lastchar; + + if (len_tmp) { + /* + 1 ensures the '\0' is memmove'd */ + memmove(cp+len_tmp, cp, (lastchar-cp) + 1); + memcpy(cp, p_tmp+len, len_tmp); + kdb_printf("%s", cp); + cp += len_tmp; + lastchar += len_tmp; + } } kdb_nextline = 1; /* reset output line number */ break; -- 2.34.1

2 1

[PATCH OLK-5.10] kdb: Fix buffer overflow during tab-complete
by Tengda Wu 08 Jul '24

08 Jul '24

From: Daniel Thompson <daniel.thompson(a)linaro.org> stable inclusion from stable-v5.10.219 commit cfdc2fa4db57503bc6d3817240547c8ddc55fa96 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB05N CVE: CVE-2024-39480 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit e9730744bf3af04cda23799029342aa3cddbc454 upstream. Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer. Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around. Reported-by: Justin Stitt <justinstitt(a)google.com> Closes: https://lore.kernel.org/all/CAFhGd8qESuuifuHsNjFPR-Va3P80bxrw+LqvC8deA8GziU… Cc: stable(a)vger.kernel.org Reviewed-by: Douglas Anderson <dianders(a)chromium.org> Reviewed-by: Justin Stitt <justinstitt(a)google.com> Tested-by: Justin Stitt <justinstitt(a)google.com> Link: https://lore.kernel.org/r/20240424-kgdb_read_refactor-v3-1-f236dbe9828d@lin… Signed-off-by: Daniel Thompson <daniel.thompson(a)linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Fixes: 5d5314d6795f3c1c0f415348ff8c51f7de042b77 ("kdb: core for kgdb back end (1 of 2)") Signed-off-by: Tengda Wu <wutengda2(a)huawei.com> --- kernel/debug/kdb/kdb_io.c | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/kernel/debug/kdb/kdb_io.c b/kernel/debug/kdb/kdb_io.c index 6735ac36b718..dcc7e13e98b3 100644 --- a/kernel/debug/kdb/kdb_io.c +++ b/kernel/debug/kdb/kdb_io.c @@ -354,14 +354,19 @@ static char *kdb_read(char *buffer, size_t bufsize) kdb_printf(kdb_prompt_str); kdb_printf("%s", buffer); } else if (tab != 2 && count > 0) { - len_tmp = strlen(p_tmp); - strncpy(p_tmp+len_tmp, cp, lastchar-cp+1); - len_tmp = strlen(p_tmp); - strncpy(cp, p_tmp+len, len_tmp-len + 1); - len = len_tmp - len; - kdb_printf("%s", cp); - cp += len; - lastchar += len; + /* How many new characters do we want from tmpbuffer? */ + len_tmp = strlen(p_tmp) - len; + if (lastchar + len_tmp >= bufend) + len_tmp = bufend - lastchar; + + if (len_tmp) { + /* + 1 ensures the '\0' is memmove'd */ + memmove(cp+len_tmp, cp, (lastchar-cp) + 1); + memcpy(cp, p_tmp+len, len_tmp); + kdb_printf("%s", cp); + cp += len_tmp; + lastchar += len_tmp; + } } kdb_nextline = 1; /* reset output line number */ break; -- 2.34.1

2 1

[PATCH openEuler-1.0-LTS] kdb: Fix buffer overflow during tab-complete
by Tengda Wu 08 Jul '24

08 Jul '24

From: Daniel Thompson <daniel.thompson(a)linaro.org> stable inclusion from stable-v4.19.316 commit fb824a99e148ff272a53d71d84122728b5f00992 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB05N CVE: CVE-2024-39480 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit e9730744bf3af04cda23799029342aa3cddbc454 upstream. Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer. Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around. Reported-by: Justin Stitt <justinstitt(a)google.com> Closes: https://lore.kernel.org/all/CAFhGd8qESuuifuHsNjFPR-Va3P80bxrw+LqvC8deA8GziU… Cc: stable(a)vger.kernel.org Reviewed-by: Douglas Anderson <dianders(a)chromium.org> Reviewed-by: Justin Stitt <justinstitt(a)google.com> Tested-by: Justin Stitt <justinstitt(a)google.com> Link: https://lore.kernel.org/r/20240424-kgdb_read_refactor-v3-1-f236dbe9828d@lin… Signed-off-by: Daniel Thompson <daniel.thompson(a)linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Fixes: 5d5314d6795f3c1c0f415348ff8c51f7de042b77 ("kdb: core for kgdb back end (1 of 2)") Signed-off-by: Tengda Wu <wutengda2(a)huawei.com> --- kernel/debug/kdb/kdb_io.c | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/kernel/debug/kdb/kdb_io.c b/kernel/debug/kdb/kdb_io.c index 6a4b41484afe..2ce307c86977 100644 --- a/kernel/debug/kdb/kdb_io.c +++ b/kernel/debug/kdb/kdb_io.c @@ -364,14 +364,19 @@ static char *kdb_read(char *buffer, size_t bufsize) kdb_printf(kdb_prompt_str); kdb_printf("%s", buffer); } else if (tab != 2 && count > 0) { - len_tmp = strlen(p_tmp); - strncpy(p_tmp+len_tmp, cp, lastchar-cp+1); - len_tmp = strlen(p_tmp); - strncpy(cp, p_tmp+len, len_tmp-len + 1); - len = len_tmp - len; - kdb_printf("%s", cp); - cp += len; - lastchar += len; + /* How many new characters do we want from tmpbuffer? */ + len_tmp = strlen(p_tmp) - len; + if (lastchar + len_tmp >= bufend) + len_tmp = bufend - lastchar; + + if (len_tmp) { + /* + 1 ensures the '\0' is memmove'd */ + memmove(cp+len_tmp, cp, (lastchar-cp) + 1); + memcpy(cp, p_tmp+len, len_tmp); + kdb_printf("%s", cp); + cp += len_tmp; + lastchar += len_tmp; + } } kdb_nextline = 1; /* reset output line number */ break; -- 2.34.1

2 1

[PATCH OLK-6.6 0/1] fix CVE-2024-39481
by Hongbo Li 08 Jul '24

08 Jul '24

Fix CVE-2024-39481. Tomi Valkeinen (1): media: mc: Fix graph walk in media_pipeline_start drivers/media/mc/mc-entity.c | 6 ++++++ 1 file changed, 6 insertions(+) -- 2.34.1

2 2

[PATCH OLK-6.6] KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked
by Zizhi Wo 08 Jul '24

08 Jul '24

From: Sean Christopherson <seanjc(a)google.com> stable inclusion from stable-v6.6.34 commit f79edaf7370986d73d204b36c50cc563a4c0f356 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB16D CVE: CVE-2024-39483 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- commit b4bd556467477420ee3a91fbcba73c579669edc6 upstream. When requesting an NMI window, WARN on vNMI support being enabled if and only if NMIs are actually masked, i.e. if the vCPU is already handling an NMI. KVM's ABI for NMIs that arrive simultanesouly (from KVM's point of view) is to inject one NMI and pend the other. When using vNMI, KVM pends the second NMI simply by setting V_NMI_PENDING, and lets the CPU do the rest (hardware automatically sets V_NMI_BLOCKING when an NMI is injected). However, if KVM can't immediately inject an NMI, e.g. because the vCPU is in an STI shadow or is running with GIF=0, then KVM will request an NMI window and trigger the WARN (but still function correctly). Whether or not the GIF=0 case makes sense is debatable, as the intent of KVM's behavior is to provide functionality that is as close to real hardware as possible. E.g. if two NMIs are sent in quick succession, the probability of both NMIs arriving in an STI shadow is infinitesimally low on real hardware, but significantly larger in a virtual environment, e.g. if the vCPU is preempted in the STI shadow. For GIF=0, the argument isn't as clear cut, because the window where two NMIs can collide is much larger in bare metal (though still small). That said, KVM should not have divergent behavior for the GIF=0 case based on whether or not vNMI support is enabled. And KVM has allowed simultaneous NMIs with GIF=0 for over a decade, since commit 7460fb4a3400 ("KVM: Fix simultaneous NMIs"). I.e. KVM's GIF=0 handling shouldn't be modified without a *really* good reason to do so, and if KVM's behavior were to be modified, it should be done irrespective of vNMI support. Fixes: fa4c027a7956 ("KVM: x86: Add support for SVM's Virtual NMI") Cc: stable(a)vger.kernel.org Cc: Santosh Shukla <Santosh.Shukla(a)amd.com> Cc: Maxim Levitsky <mlevitsk(a)redhat.com> Signed-off-by: Sean Christopherson <seanjc(a)google.com> Message-ID: <20240522021435.1684366-1-seanjc(a)google.com> Signed-off-by: Paolo Bonzini <pbonzini(a)redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Zizhi Wo <wozizhi(a)huawei.com> --- arch/x86/kvm/svm/svm.c | 27 +++++++++++++++++++-------- 1 file changed, 19 insertions(+), 8 deletions(-) diff --git a/arch/x86/kvm/svm/svm.c b/arch/x86/kvm/svm/svm.c index 8adb6e31c113..1424eb898028 100644 --- a/arch/x86/kvm/svm/svm.c +++ b/arch/x86/kvm/svm/svm.c @@ -3860,16 +3860,27 @@ static void svm_enable_nmi_window(struct kvm_vcpu *vcpu) struct vcpu_svm *svm = to_svm(vcpu); /* - * KVM should never request an NMI window when vNMI is enabled, as KVM - * allows at most one to-be-injected NMI and one pending NMI, i.e. if - * two NMIs arrive simultaneously, KVM will inject one and set - * V_NMI_PENDING for the other. WARN, but continue with the standard - * single-step approach to try and salvage the pending NMI. + * If NMIs are outright masked, i.e. the vCPU is already handling an + * NMI, and KVM has not yet intercepted an IRET, then there is nothing + * more to do at this time as KVM has already enabled IRET intercepts. + * If KVM has already intercepted IRET, then single-step over the IRET, + * as NMIs aren't architecturally unmasked until the IRET completes. + * + * If vNMI is enabled, KVM should never request an NMI window if NMIs + * are masked, as KVM allows at most one to-be-injected NMI and one + * pending NMI. If two NMIs arrive simultaneously, KVM will inject one + * NMI and set V_NMI_PENDING for the other, but if and only if NMIs are + * unmasked. KVM _will_ request an NMI window in some situations, e.g. + * if the vCPU is in an STI shadow or if GIF=0, KVM can't immediately + * inject the NMI. In those situations, KVM needs to single-step over + * the STI shadow or intercept STGI. */ - WARN_ON_ONCE(is_vnmi_enabled(svm)); + if (svm_get_nmi_mask(vcpu)) { + WARN_ON_ONCE(is_vnmi_enabled(svm)); - if (svm_get_nmi_mask(vcpu) && !svm->awaiting_iret_completion) - return; /* IRET will cause a vm exit */ + if (!svm->awaiting_iret_completion) + return; /* IRET will cause a vm exit */ + } /* * SEV-ES guests are responsible for signaling when a vCPU is ready to -- 2.39.2

2 1

[openeuler:OLK-6.6 3342/10598] include/linux/pgplib.h:36:23: error: field has incomplete type 'enum pgp_key_version'
by kernel test robot 08 Jul '24

08 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 01c2a11a75f4f8b273ef3e34cca3974b10314a3a commit: 43d4042e06d2bf96adf67d25e8d91653507a4cf9 [3342/10598] KEYS: Provide a function to load keys from a PGP keyring blob config: arm64-randconfig-r131-20240707 (https://download.01.org/0day-ci/archive/20240708/202407081638.r5xQjyqM-lkp@…) compiler: clang version 19.0.0git (https://github.com/llvm/llvm-project a0c6b8aef853eedaa0980f07c0a502a5a8a9740e) reproduce: (https://download.01.org/0day-ci/archive/20240708/202407081638.r5xQjyqM-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407081638.r5xQjyqM-lkp@intel.com/ Note: the openeuler/OLK-6.6 HEAD 01c2a11a75f4f8b273ef3e34cca3974b10314a3a builds fine. It only hurts bisectability. All errors (new ones prefixed by >>): In file included from crypto/asymmetric_keys/pgp_preload.c:19: include/linux/pgplib.h:26:15: warning: declaration of 'enum pgp_packet_tag' will not be visible outside of this function [-Wvisibility] 26 | enum pgp_packet_tag type, | ^ >> include/linux/pgplib.h:36:23: error: field has incomplete type 'enum pgp_key_version' 36 | enum pgp_key_version version : 8; | ^ include/linux/pgplib.h:36:7: note: forward declaration of 'enum pgp_key_version' 36 | enum pgp_key_version version : 8; | ^ >> include/linux/pgplib.h:37:23: error: field has incomplete type 'enum pgp_pubkey_algo' 37 | enum pgp_pubkey_algo pubkey_algo : 8; | ^ include/linux/pgplib.h:37:7: note: forward declaration of 'enum pgp_pubkey_algo' 37 | enum pgp_pubkey_algo pubkey_algo : 8; | ^ crypto/asymmetric_keys/pgp_preload.c:63:10: warning: declaration of 'enum pgp_packet_tag' will not be visible outside of this function [-Wvisibility] 63 | enum pgp_packet_tag type, u8 headerlen, | ^ crypto/asymmetric_keys/pgp_preload.c:63:25: error: variable has incomplete type 'enum pgp_packet_tag' 63 | enum pgp_packet_tag type, u8 headerlen, | ^ crypto/asymmetric_keys/pgp_preload.c:63:10: note: forward declaration of 'enum pgp_packet_tag' 63 | enum pgp_packet_tag type, u8 headerlen, | ^ crypto/asymmetric_keys/pgp_preload.c:107:36: error: use of undeclared identifier 'PGP_PKT_PUBLIC_KEY' 107 | ctx.pgp.types_of_interest = (1 << PGP_PKT_PUBLIC_KEY); | ^ >> crypto/asymmetric_keys/pgp_preload.c:108:25: error: incompatible function pointer types assigning to 'int (*)(struct pgp_parse_context *, enum pgp_packet_tag, u8, const u8 *, size_t)' (aka 'int (*)(struct pgp_parse_context *, enum pgp_packet_tag, unsigned char, const unsigned char *, unsigned long)') from 'int (struct pgp_parse_context *, enum pgp_packet_tag, u8, const u8 *, size_t)' (aka 'int (struct pgp_parse_context *, enum pgp_packet_tag, unsigned char, const unsigned char *, unsigned long)') [-Wincompatible-function-pointer-types] 108 | ctx.pgp.process_packet = found_pgp_key; | ^ ~~~~~~~~~~~~~ crypto/asymmetric_keys/pgp_preload.c:101:12: warning: no previous prototype for function 'preload_pgp_keys' [-Wmissing-prototypes] 101 | int __init preload_pgp_keys(const u8 *pgpdata, size_t pgpdatalen, | ^ crypto/asymmetric_keys/pgp_preload.c:101:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 101 | int __init preload_pgp_keys(const u8 *pgpdata, size_t pgpdatalen, | ^ | static 3 warnings and 5 errors generated. -- In file included from crypto/asymmetric_keys/pgp_public_key.c:19: In file included from include/linux/mpi.h:21: In file included from include/linux/scatterlist.h:8: In file included from include/linux/mm.h:2193: include/linux/vmstat.h:522:36: warning: arithmetic between different enumeration types ('enum node_stat_item' and 'enum lru_list') [-Wenum-enum-conversion] 522 | return node_stat_name(NR_LRU_BASE + lru) + 3; // skip "nr_" | ~~~~~~~~~~~ ^ ~~~ In file included from crypto/asymmetric_keys/pgp_public_key.c:20: include/linux/pgplib.h:26:15: warning: declaration of 'enum pgp_packet_tag' will not be visible outside of this function [-Wvisibility] 26 | enum pgp_packet_tag type, | ^ >> include/linux/pgplib.h:36:23: error: field has incomplete type 'enum pgp_key_version' 36 | enum pgp_key_version version : 8; | ^ include/linux/pgplib.h:36:7: note: forward declaration of 'enum pgp_key_version' 36 | enum pgp_key_version version : 8; | ^ >> include/linux/pgplib.h:37:23: error: field has incomplete type 'enum pgp_pubkey_algo' 37 | enum pgp_pubkey_algo pubkey_algo : 8; | ^ include/linux/pgplib.h:37:7: note: forward declaration of 'enum pgp_pubkey_algo' 37 | enum pgp_pubkey_algo pubkey_algo : 8; | ^ crypto/asymmetric_keys/pgp_public_key.c:63:2: error: call to undeclared function 'kenter'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 63 | kenter(""); | ^ crypto/asymmetric_keys/pgp_public_key.c:65:22: error: use of undeclared identifier 'PGP_KEY_VERSION_4' 65 | n = (pgp->version < PGP_KEY_VERSION_4) ? 8 : 6; | ^ crypto/asymmetric_keys/pgp_public_key.c:67:9: error: call to undeclared function 'mpi_key_length'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 67 | ret = mpi_key_length(key_ptr, keylen, nb + i, nn + i); | ^ crypto/asymmetric_keys/pgp_public_key.c:95:21: error: use of undeclared identifier 'PGP_KEY_VERSION_4' 95 | if (pgp->version < PGP_KEY_VERSION_4) { | ^ crypto/asymmetric_keys/pgp_public_key.c:115:2: error: call to undeclared function 'kleave'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 115 | kleave(" = %d", ret); | ^ crypto/asymmetric_keys/pgp_public_key.c:134:42: error: use of undeclared identifier 'PGP_KEY_VERSION_4' 134 | tfm = crypto_alloc_shash(pgp->version < PGP_KEY_VERSION_4 ? | ^ crypto/asymmetric_keys/pgp_public_key.c:191:2: error: call to undeclared function 'kleave'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 191 | kleave(" = %d", ret); | ^ crypto/asymmetric_keys/pgp_public_key.c:199:12: warning: declaration of 'enum pgp_packet_tag' will not be visible outside of this function [-Wvisibility] 199 | enum pgp_packet_tag type, | ^ crypto/asymmetric_keys/pgp_public_key.c:199:27: error: variable has incomplete type 'enum pgp_packet_tag' 199 | enum pgp_packet_tag type, | ^ crypto/asymmetric_keys/pgp_public_key.c:199:12: note: forward declaration of 'enum pgp_packet_tag' 199 | enum pgp_packet_tag type, | ^ crypto/asymmetric_keys/pgp_public_key.c:211:2: error: call to undeclared function 'kenter'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 211 | kenter(",%u,%u,,%zu", type, headerlen, datalen); | ^ >> crypto/asymmetric_keys/pgp_public_key.c:213:14: error: use of undeclared identifier 'PGP_PKT_USER_ID' 213 | if (type == PGP_PKT_USER_ID) { | ^ crypto/asymmetric_keys/pgp_public_key.c:216:3: error: call to undeclared function 'kleave'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 216 | kleave(" = 0 [user ID]"); | ^ crypto/asymmetric_keys/pgp_public_key.c:221:3: error: call to undeclared function 'kleave'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 221 | kleave(" = -ENOKEY [already]"); | ^ >> crypto/asymmetric_keys/pgp_public_key.c:234:25: error: use of undeclared identifier 'PGP_PUBKEY__LAST' 234 | if (pgp.pubkey_algo >= PGP_PUBKEY__LAST) | ^ >> crypto/asymmetric_keys/pgp_public_key.c:236:9: error: use of undeclared identifier 'pgp_to_public_key_algo' 236 | algo = pgp_to_public_key_algo[pgp.pubkey_algo]; | ^ crypto/asymmetric_keys/pgp_public_key.c:252:2: error: call to undeclared function 'kleave'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 252 | kleave(" = 0 [use]"); | ^ crypto/asymmetric_keys/pgp_public_key.c:310:2: error: call to undeclared function 'kenter'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 310 | kenter(""); | ^ >> crypto/asymmetric_keys/pgp_public_key.c:313:36: error: use of undeclared identifier 'PGP_PKT_PUBLIC_KEY' 313 | ctx.pgp.types_of_interest = (1 << PGP_PKT_PUBLIC_KEY) | | ^ fatal error: too many errors emitted, stopping now [-ferror-limit=] 3 warnings and 20 errors generated. Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for PGP_KEY_PARSER Depends on [n]: CRYPTO [=y] && ASYMMETRIC_KEY_TYPE [=y] && ASYMMETRIC_PUBLIC_KEY_SUBTYPE [=n] Selected by [y]: - PGP_PRELOAD [=y] && CRYPTO [=y] && ASYMMETRIC_KEY_TYPE [=y] vim +36 include/linux/pgplib.h b78af6579e15dc David Howells 2023-09-12 31 b78af6579e15dc David Howells 2023-09-12 32 extern int pgp_parse_packets(const u8 *data, size_t datalen, b78af6579e15dc David Howells 2023-09-12 33 struct pgp_parse_context *ctx); b78af6579e15dc David Howells 2023-09-12 34 b78af6579e15dc David Howells 2023-09-12 35 struct pgp_parse_pubkey { b78af6579e15dc David Howells 2023-09-12 @36 enum pgp_key_version version : 8; b78af6579e15dc David Howells 2023-09-12 @37 enum pgp_pubkey_algo pubkey_algo : 8; b78af6579e15dc David Howells 2023-09-12 38 __kernel_old_time_t creation_time; b78af6579e15dc David Howells 2023-09-12 39 __kernel_old_time_t expires_at; b78af6579e15dc David Howells 2023-09-12 40 }; b78af6579e15dc David Howells 2023-09-12 41 :::::: The code at line 36 was first introduced by commit :::::: b78af6579e15dcdff86504da90af77f3e890270e PGPLIB: Basic packet parser :::::: TO: David Howells <dhowells(a)redhat.com> :::::: CC: zgzxx <zhangguangzhi3(a)huawei.com> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6] drm: zynqmp_dpsub: Always register bridge
by Zhang Changzhong 08 Jul '24

08 Jul '24

From: Sean Anderson <sean.anderson(a)linux.dev> stable inclusion from stable-v6.6.33 commit 6ead3eccf67bc8318b1ce95ed879b2cc05b4fce9 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA7YJM CVE: CVE-2024-38664 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit be3f3042391d061cfca2bd22630e0d101acea5fc ] We must always register the DRM bridge, since zynqmp_dp_hpd_work_func calls drm_bridge_hpd_notify, which in turn expects hpd_mutex to be initialized. We do this before zynqmp_dpsub_drm_init since that calls drm_bridge_attach. This fixes the following lockdep warning: [ 19.217084] ------------[ cut here ]------------ [ 19.227530] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 19.227768] WARNING: CPU: 0 PID: 140 at kernel/locking/mutex.c:582 __mutex_lock+0x4bc/0x550 [ 19.241696] Modules linked in: [ 19.244937] CPU: 0 PID: 140 Comm: kworker/0:4 Not tainted 6.6.20+ #96 [ 19.252046] Hardware name: xlnx,zynqmp (DT) [ 19.256421] Workqueue: events zynqmp_dp_hpd_work_func [ 19.261795] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 19.269104] pc : __mutex_lock+0x4bc/0x550 [ 19.273364] lr : __mutex_lock+0x4bc/0x550 [ 19.277592] sp : ffffffc085c5bbe0 [ 19.281066] x29: ffffffc085c5bbe0 x28: 0000000000000000 x27: ffffff88009417f8 [ 19.288624] x26: ffffff8800941788 x25: ffffff8800020008 x24: ffffffc082aa3000 [ 19.296227] x23: ffffffc080d90e3c x22: 0000000000000002 x21: 0000000000000000 [ 19.303744] x20: 0000000000000000 x19: ffffff88002f5210 x18: 0000000000000000 [ 19.311295] x17: 6c707369642e3030 x16: 3030613464662072 x15: 0720072007200720 [ 19.318922] x14: 0000000000000000 x13: 284e4f5f4e524157 x12: 0000000000000001 [ 19.326442] x11: 0001ffc085c5b940 x10: 0001ff88003f388b x9 : 0001ff88003f3888 [ 19.334003] x8 : 0001ff88003f3888 x7 : 0000000000000000 x6 : 0000000000000000 [ 19.341537] x5 : 0000000000000000 x4 : 0000000000001668 x3 : 0000000000000000 [ 19.349054] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffffff88003f3880 [ 19.356581] Call trace: [ 19.359160] __mutex_lock+0x4bc/0x550 [ 19.363032] mutex_lock_nested+0x24/0x30 [ 19.367187] drm_bridge_hpd_notify+0x2c/0x6c [ 19.371698] zynqmp_dp_hpd_work_func+0x44/0x54 [ 19.376364] process_one_work+0x3ac/0x988 [ 19.380660] worker_thread+0x398/0x694 [ 19.384736] kthread+0x1bc/0x1c0 [ 19.388241] ret_from_fork+0x10/0x20 [ 19.392031] irq event stamp: 183 [ 19.395450] hardirqs last enabled at (183): [<ffffffc0800b9278>] finish_task_switch.isra.0+0xa8/0x2d4 [ 19.405140] hardirqs last disabled at (182): [<ffffffc081ad3754>] __schedule+0x714/0xd04 [ 19.413612] softirqs last enabled at (114): [<ffffffc080133de8>] srcu_invoke_callbacks+0x158/0x23c [ 19.423128] softirqs last disabled at (110): [<ffffffc080133de8>] srcu_invoke_callbacks+0x158/0x23c [ 19.432614] ---[ end trace 0000000000000000 ]--- Fixes: eb2d64bfcc17 ("drm: xlnx: zynqmp_dpsub: Report HPD through the bridge") Signed-off-by: Sean Anderson <sean.anderson(a)linux.dev> Reviewed-by: Laurent Pinchart <laurent.pinchart(a)ideasonboard.com> Reviewed-by: Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> Signed-off-by: Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> Link: https://patchwork.freedesktop.org/patch/msgid/20240308204741.3631919-1-sean… Signed-off-by: Maarten Lankhorst <maarten.lankhorst(a)linux.intel.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zhang Changzhong <zhangchangzhong(a)huawei.com> --- drivers/gpu/drm/xlnx/zynqmp_dpsub.c | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/drivers/gpu/drm/xlnx/zynqmp_dpsub.c b/drivers/gpu/drm/xlnx/zynqmp_dpsub.c index 88eb33acd..face8d6 100644 --- a/drivers/gpu/drm/xlnx/zynqmp_dpsub.c +++ b/drivers/gpu/drm/xlnx/zynqmp_dpsub.c @@ -256,12 +256,12 @@ static int zynqmp_dpsub_probe(struct platform_device *pdev) if (ret) goto err_dp; + drm_bridge_add(dpsub->bridge); + if (dpsub->dma_enabled) { ret = zynqmp_dpsub_drm_init(dpsub); if (ret) goto err_disp; - } else { - drm_bridge_add(dpsub->bridge); } dev_info(&pdev->dev, "ZynqMP DisplayPort Subsystem driver probed"); @@ -288,9 +288,8 @@ static void zynqmp_dpsub_remove(struct platform_device *pdev) if (dpsub->drm) zynqmp_dpsub_drm_cleanup(dpsub); - else - drm_bridge_remove(dpsub->bridge); + drm_bridge_remove(dpsub->bridge); zynqmp_disp_remove(dpsub); zynqmp_dp_remove(dpsub); -- 2.9.5

2 1

[PATCH openEuler-22.03-LTS-SP1 0/2] CVE-2024-36478
by Li Nan 08 Jul '24

08 Jul '24

Damien Le Moal (1): null_blk: Move driver into its own directory Yu Kuai (1): null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' drivers/block/{ => null_blk}/null_blk.h | 0 .../{null_blk_trace.h => null_blk/trace.h} | 2 +- .../{null_blk_main.c => null_blk/main.c} | 43 +++++++++++-------- .../{null_blk_trace.c => null_blk/trace.c} | 2 +- .../{null_blk_zoned.c => null_blk/zoned.c} | 2 +- drivers/block/Kconfig | 8 +--- drivers/block/Makefile | 7 +-- drivers/block/null_blk/Kconfig | 12 ++++++ drivers/block/null_blk/Makefile | 11 +++++ 9 files changed, 54 insertions(+), 33 deletions(-) rename drivers/block/{ => null_blk}/null_blk.h (100%) rename drivers/block/{null_blk_trace.h => null_blk/trace.h} (97%) rename drivers/block/{null_blk_main.c => null_blk/main.c} (99%) rename drivers/block/{null_blk_trace.c => null_blk/trace.c} (93%) rename drivers/block/{null_blk_zoned.c => null_blk/zoned.c} (99%) create mode 100644 drivers/block/null_blk/Kconfig create mode 100644 drivers/block/null_blk/Makefile -- 2.39.2

2 3

[openeuler:OLK-6.6 3348/10598] security/integrity/ima/ima_digest_list.c:164:37: sparse: sparse: cast to restricted __le16
by kernel test robot 08 Jul '24

08 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 01c2a11a75f4f8b273ef3e34cca3974b10314a3a commit: 5fbe16a682d5af0c2f7145096851e31e3c921d64 [3348/10598] ima: Execute parser to upload digest lists not recognizable by the kernel config: arm64-randconfig-r131-20240707 (https://download.01.org/0day-ci/archive/20240708/202407081457.7NZpgJgk-lkp@…) compiler: clang version 19.0.0git (https://github.com/llvm/llvm-project a0c6b8aef853eedaa0980f07c0a502a5a8a9740e) reproduce: (https://download.01.org/0day-ci/archive/20240708/202407081457.7NZpgJgk-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407081457.7NZpgJgk-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) >> security/integrity/ima/ima_digest_list.c:164:37: sparse: sparse: cast to restricted __le16 security/integrity/ima/ima_digest_list.c:165:42: sparse: sparse: cast to restricted __le16 security/integrity/ima/ima_digest_list.c:166:37: sparse: sparse: cast to restricted __le16 >> security/integrity/ima/ima_digest_list.c:167:38: sparse: sparse: cast to restricted __le32 security/integrity/ima/ima_digest_list.c:168:40: sparse: sparse: cast to restricted __le32 >> security/integrity/ima/ima_digest_list.c:416:20: sparse: sparse: symbol 'parser_task' was not declared. Should it be static? vim +164 security/integrity/ima/ima_digest_list.c b3fef06570ef2b Roberto Sassu 2023-09-12 138 b3fef06570ef2b Roberto Sassu 2023-09-12 139 int ima_parse_compact_list(loff_t size, void *buf, int op) b3fef06570ef2b Roberto Sassu 2023-09-12 140 { b3fef06570ef2b Roberto Sassu 2023-09-12 141 u8 *digest; b3fef06570ef2b Roberto Sassu 2023-09-12 142 void *bufp = buf, *bufendp = buf + size; b3fef06570ef2b Roberto Sassu 2023-09-12 143 struct compact_list_hdr *hdr; b3fef06570ef2b Roberto Sassu 2023-09-12 144 size_t digest_len; b3fef06570ef2b Roberto Sassu 2023-09-12 145 int ret = 0, i; b3fef06570ef2b Roberto Sassu 2023-09-12 146 80701e75d21f48 Roberto Sassu 2023-09-12 147 if (!(ima_digest_list_actions & ima_policy_flag)) 80701e75d21f48 Roberto Sassu 2023-09-12 148 return -EACCES; 80701e75d21f48 Roberto Sassu 2023-09-12 149 b3fef06570ef2b Roberto Sassu 2023-09-12 150 while (bufp < bufendp) { b3fef06570ef2b Roberto Sassu 2023-09-12 151 if (bufp + sizeof(*hdr) > bufendp) { b3fef06570ef2b Roberto Sassu 2023-09-12 152 pr_err("compact list, invalid data\n"); b3fef06570ef2b Roberto Sassu 2023-09-12 153 return -EINVAL; b3fef06570ef2b Roberto Sassu 2023-09-12 154 } b3fef06570ef2b Roberto Sassu 2023-09-12 155 b3fef06570ef2b Roberto Sassu 2023-09-12 156 hdr = bufp; b3fef06570ef2b Roberto Sassu 2023-09-12 157 b3fef06570ef2b Roberto Sassu 2023-09-12 158 if (hdr->version != 1) { b3fef06570ef2b Roberto Sassu 2023-09-12 159 pr_err("compact list, unsupported version\n"); b3fef06570ef2b Roberto Sassu 2023-09-12 160 return -EINVAL; b3fef06570ef2b Roberto Sassu 2023-09-12 161 } b3fef06570ef2b Roberto Sassu 2023-09-12 162 b3fef06570ef2b Roberto Sassu 2023-09-12 163 if (ima_canonical_fmt) { b3fef06570ef2b Roberto Sassu 2023-09-12 @164 hdr->type = le16_to_cpu(hdr->type); b3fef06570ef2b Roberto Sassu 2023-09-12 165 hdr->modifiers = le16_to_cpu(hdr->modifiers); b3fef06570ef2b Roberto Sassu 2023-09-12 166 hdr->algo = le16_to_cpu(hdr->algo); b3fef06570ef2b Roberto Sassu 2023-09-12 @167 hdr->count = le32_to_cpu(hdr->count); b3fef06570ef2b Roberto Sassu 2023-09-12 168 hdr->datalen = le32_to_cpu(hdr->datalen); b3fef06570ef2b Roberto Sassu 2023-09-12 169 } b3fef06570ef2b Roberto Sassu 2023-09-12 170 b3fef06570ef2b Roberto Sassu 2023-09-12 171 if (hdr->algo >= HASH_ALGO__LAST) b3fef06570ef2b Roberto Sassu 2023-09-12 172 return -EINVAL; b3fef06570ef2b Roberto Sassu 2023-09-12 173 b3fef06570ef2b Roberto Sassu 2023-09-12 174 digest_len = hash_digest_size[hdr->algo]; b3fef06570ef2b Roberto Sassu 2023-09-12 175 b3fef06570ef2b Roberto Sassu 2023-09-12 176 if (hdr->type >= COMPACT__LAST) { b3fef06570ef2b Roberto Sassu 2023-09-12 177 pr_err("compact list, invalid type %d\n", hdr->type); b3fef06570ef2b Roberto Sassu 2023-09-12 178 return -EINVAL; b3fef06570ef2b Roberto Sassu 2023-09-12 179 } b3fef06570ef2b Roberto Sassu 2023-09-12 180 b3fef06570ef2b Roberto Sassu 2023-09-12 181 bufp += sizeof(*hdr); b3fef06570ef2b Roberto Sassu 2023-09-12 182 b3fef06570ef2b Roberto Sassu 2023-09-12 183 for (i = 0; i < hdr->count; i++) { b3fef06570ef2b Roberto Sassu 2023-09-12 184 if (bufp + digest_len > bufendp) { b3fef06570ef2b Roberto Sassu 2023-09-12 185 pr_err("compact list, invalid data\n"); b3fef06570ef2b Roberto Sassu 2023-09-12 186 return -EINVAL; b3fef06570ef2b Roberto Sassu 2023-09-12 187 } b3fef06570ef2b Roberto Sassu 2023-09-12 188 b3fef06570ef2b Roberto Sassu 2023-09-12 189 digest = bufp; b3fef06570ef2b Roberto Sassu 2023-09-12 190 bufp += digest_len; b3fef06570ef2b Roberto Sassu 2023-09-12 191 b3fef06570ef2b Roberto Sassu 2023-09-12 192 if (op == DIGEST_LIST_OP_ADD) b3fef06570ef2b Roberto Sassu 2023-09-12 193 ret = ima_add_digest_data_entry(digest, b3fef06570ef2b Roberto Sassu 2023-09-12 194 hdr->algo, hdr->type, hdr->modifiers); b3fef06570ef2b Roberto Sassu 2023-09-12 195 else if (op == DIGEST_LIST_OP_DEL) b3fef06570ef2b Roberto Sassu 2023-09-12 196 ima_del_digest_data_entry(digest, hdr->algo, b3fef06570ef2b Roberto Sassu 2023-09-12 197 hdr->type); b3fef06570ef2b Roberto Sassu 2023-09-12 198 if (ret < 0 && ret != -EEXIST) b3fef06570ef2b Roberto Sassu 2023-09-12 199 return ret; b3fef06570ef2b Roberto Sassu 2023-09-12 200 } b3fef06570ef2b Roberto Sassu 2023-09-12 201 b3fef06570ef2b Roberto Sassu 2023-09-12 202 if (i != hdr->count || b3fef06570ef2b Roberto Sassu 2023-09-12 203 bufp != (void *)hdr + sizeof(*hdr) + hdr->datalen) { b3fef06570ef2b Roberto Sassu 2023-09-12 204 pr_err("compact list, invalid data\n"); b3fef06570ef2b Roberto Sassu 2023-09-12 205 return -EINVAL; b3fef06570ef2b Roberto Sassu 2023-09-12 206 } b3fef06570ef2b Roberto Sassu 2023-09-12 207 } b3fef06570ef2b Roberto Sassu 2023-09-12 208 b3fef06570ef2b Roberto Sassu 2023-09-12 209 return bufp - buf; b3fef06570ef2b Roberto Sassu 2023-09-12 210 } 80701e75d21f48 Roberto Sassu 2023-09-12 211 :::::: The code at line 164 was first introduced by commit :::::: b3fef06570ef2b61dd7181e5c1d128bfcbf6b2ef ima: Add parser of compact digest list :::::: TO: Roberto Sassu <roberto.sassu(a)huawei.com> :::::: CC: zgzxx <zhangguangzhi3(a)huawei.com> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 7037/10596] drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1374:9: sparse: sparse: incorrect type in argument 1 (different address spaces)
by kernel test robot 08 Jul '24

08 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 3b421b6002e287e38790cbdad4a3e08baf7e1bc4 commit: f0db1bf5852542c46c16d0b305193069e265f769 [7037/10596] Huawei BMA: Adding Huawei BMA driver: host_edma_drv config: loongarch-randconfig-r132-20240707 (https://download.01.org/0day-ci/archive/20240708/202407081155.6fc6bMvH-lkp@…) compiler: loongarch64-linux-gcc (GCC) 13.2.0 reproduce: (https://download.01.org/0day-ci/archive/20240708/202407081155.6fc6bMvH-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407081155.6fc6bMvH-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:108:16: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:110:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:131:35: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:136:28: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:147:16: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:254:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:413:25: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:581:6: sparse: sparse: symbol 'host_dma_transfer_without_list' was not declared. Should it be static? drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:629:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:608:6: sparse: sparse: symbol 'host_dma_transfer_withlist' was not declared. Should it be static? drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:653:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:668:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:708:25: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:716:9: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:748:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:754:25: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:759:25: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:765:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:777:27: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:791:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:810:9: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:852:35: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:859:49: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:869:49: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:876:33: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:960:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:966:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:996:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1046:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1050:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1061:9: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1087:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1102:9: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1126:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1138:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1160:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1162:44: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1165:22: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1166:33: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got unsigned char * @@ drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1166:33: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1166:33: sparse: got unsigned char * drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1167:22: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1167:22: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got unsigned char * @@ drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1167:22: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1167:22: sparse: got unsigned char * drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1169:9: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1175:28: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1175:28: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1175:28: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1175:28: sparse: got void * drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1181:25: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1186:25: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1196:33: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1200:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1201:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1203:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1217:25: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1218:25: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1219:25: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1227:36: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1227:36: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1227:36: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1227:36: sparse: got void * drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1272:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1282:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1287:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1299:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1356:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1372:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1371:35: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected void [noderef] __iomem *edma_send_addr @@ got void * @@ drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1371:35: sparse: expected void [noderef] __iomem *edma_send_addr drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1371:35: sparse: got void * >> drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1374:9: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const * @@ got void [noderef] __iomem *edma_send_addr @@ drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1374:9: sparse: expected void const * drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1374:9: sparse: got void [noderef] __iomem *edma_send_addr >> drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1374:9: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const * @@ got void [noderef] __iomem *edma_send_addr @@ drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1374:9: sparse: expected void const * drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1374:9: sparse: got void [noderef] __iomem *edma_send_addr >> drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1374:9: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void * @@ got void [noderef] __iomem *edma_send_addr @@ drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1374:9: sparse: expected void * drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1374:9: sparse: got void [noderef] __iomem *edma_send_addr drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1377:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1376:35: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected void [noderef] __iomem *edma_recv_addr @@ got void * @@ drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1376:35: sparse: expected void [noderef] __iomem *edma_recv_addr drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1376:35: sparse: got void * drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1380:9: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1406:16: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1413:9: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1442:16: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c: note: in included file (through include/linux/rculist.h, include/linux/pid.h, include/linux/sched.h, ...): include/linux/list.h:83:21: sparse: sparse: self-comparison always evaluates to true vim +1374 drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c 1268 1269 struct edma_user_inft_s *edma_host_get_user_inft(u32 type) 1270 { 1271 if (type >= TYPE_MAX) { > 1272 BMA_LOG(DLOG_ERROR, "type error %d\n", type); 1273 return NULL; 1274 } 1275 1276 return g_user_func[type]; 1277 } 1278 1279 int edma_host_user_register(u32 type, struct edma_user_inft_s *func) 1280 { 1281 if (type >= TYPE_MAX) { 1282 BMA_LOG(DLOG_ERROR, "type error %d\n", type); 1283 return -EFAULT; 1284 } 1285 1286 if (!func) { 1287 BMA_LOG(DLOG_ERROR, "func is NULL\n"); 1288 return -EFAULT; 1289 } 1290 1291 g_user_func[type] = func; 1292 1293 return 0; 1294 } 1295 1296 int edma_host_user_unregister(u32 type) 1297 { 1298 if (type >= TYPE_MAX) { 1299 BMA_LOG(DLOG_ERROR, "type error %d\n", type); 1300 return -EFAULT; 1301 } 1302 1303 g_user_func[type] = NULL; 1304 1305 return 0; 1306 } 1307 1308 int edma_host_init(struct edma_host_s *edma_host) 1309 { 1310 int ret = 0; 1311 struct bma_dev_s *bma_dev = NULL; 1312 struct notify_msg *pnm = NULL; 1313 1314 if (!edma_host) 1315 return -1; 1316 1317 bma_dev = list_entry(edma_host, struct bma_dev_s, edma_host); 1318 g_bma_dev = bma_dev; 1319 1320 edma_host->pdev = bma_dev->bma_pci_dev->pdev; 1321 1322 #ifdef EDMA_TIMER 1323 #ifdef HAVE_TIMER_SETUP 1324 timer_setup(&edma_host->timer, edma_host_timeout, 0); 1325 #else 1326 setup_timer(&edma_host->timer, edma_host_timeout, 1327 (unsigned long)edma_host); 1328 #endif 1329 (void)mod_timer(&edma_host->timer, jiffies_64 + TIMER_INTERVAL_CHECK); 1330 #ifdef USE_DMA 1331 #ifdef HAVE_TIMER_SETUP 1332 timer_setup(&edma_host->dma_timer, edma_host_dma_timeout, 0); 1333 1334 #else 1335 setup_timer(&edma_host->dma_timer, edma_host_dma_timeout, 1336 (unsigned long)edma_host); 1337 #endif 1338 (void)mod_timer(&edma_host->dma_timer, 1339 jiffies_64 + DMA_TIMER_INTERVAL_CHECK); 1340 #endif 1341 1342 #else 1343 init_completion(&edma_host->msg_ready); 1344 1345 edma_host->edma_thread = 1346 kthread_run(edma_host_thread, (void *)edma_host, "edma_host_msg"); 1347 1348 if (IS_ERR(edma_host->edma_thread)) { 1349 BMA_LOG(DLOG_ERROR, "kernel_run edma_host_msg failed\n"); 1350 return PTR_ERR(edma_host->edma_thread); 1351 } 1352 #endif 1353 1354 edma_host->msg_send_buf = kmalloc(HOST_MAX_SEND_MBX_LEN, GFP_KERNEL); 1355 if (!edma_host->msg_send_buf) { 1356 BMA_LOG(DLOG_ERROR, "malloc msg_send_buf failed!"); 1357 ret = -ENOMEM; 1358 goto failed1; 1359 } 1360 1361 edma_host->msg_send_write = 0; 1362 1363 spin_lock_init(&edma_host->send_msg_lock); 1364 1365 tasklet_init(&edma_host->tasklet, 1366 (void (*)(unsigned long))edma_host_isr_tasklet, 1367 (unsigned long)edma_host); 1368 1369 edma_host->edma_flag = bma_dev->bma_pci_dev->edma_swap_addr; 1370 > 1371 edma_host->edma_send_addr = 1372 (void *)((unsigned char *)bma_dev->bma_pci_dev->edma_swap_addr + 1373 HOST_DMA_FLAG_LEN); > 1374 memset(edma_host->edma_send_addr, 0, SIZE_OF_MBX_HDR); 1375 1376 edma_host->edma_recv_addr = 1377 (void *)((unsigned char *)edma_host->edma_send_addr + 1378 HOST_MAX_SEND_MBX_LEN); 1379 1380 BMA_LOG(DLOG_DEBUG, 1381 "edma_flag = %p, edma_send_addr = %p, edma_recv_addr = %p\n", 1382 edma_host->edma_flag, edma_host->edma_send_addr, 1383 edma_host->edma_recv_addr); 1384 1385 edma_host->hostrtc_viraddr = bma_dev->bma_pci_dev->hostrtc_viraddr; 1386 1387 init_waitqueue_head(&edma_host->wq_dmah2b); 1388 init_waitqueue_head(&edma_host->wq_dmab2h); 1389 1390 spin_lock_init(&edma_host->reg_lock); 1391 1392 edma_host->h2b_state = H2BSTATE_IDLE; 1393 edma_host->b2h_state = B2HSTATE_IDLE; 1394 1395 #ifdef HAVE_TIMER_SETUP 1396 timer_setup(&edma_host->heartbeat_timer, 1397 edma_host_heartbeat_timer, 0); 1398 #else 1399 setup_timer(&edma_host->heartbeat_timer, 1400 edma_host_heartbeat_timer, 1401 (unsigned long)edma_host); 1402 #endif 1403 (void)mod_timer(&edma_host->heartbeat_timer, 1404 jiffies_64 + HEARTBEAT_TIMER_INTERVAL_CHECK); 1405 1406 pnm = (struct notify_msg *)edma_host->edma_flag; 1407 if (pnm) 1408 pnm->host_registered = REGISTERED; 1409 1410 GET_SYS_SECONDS(edma_host->statistics.init_time); 1411 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH openEuler-22.03-LTS-SP1] null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
by Li Nan 08 Jul '24

08 Jul '24

From: Yu Kuai <yukuai3(a)huawei.com> mainline inclusion from mainline-v6.10-rc1 commit a2db328b0839312c169eb42746ec46fc1ab53ed2 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA7D6H CVE: CVE-2024-36478 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Writing 'power' and 'submit_queues' concurrently will trigger kernel panic: Test script: modprobe null_blk nr_devices=0 mkdir -p /sys/kernel/config/nullb/nullb0 while true; do echo 1 > submit_queues; echo 4 > submit_queues; done & while true; do echo 1 > power; echo 0 > power; done Test result: BUG: kernel NULL pointer dereference, address: 0000000000000148 Oops: 0000 [#1] PREEMPT SMP RIP: 0010:__lock_acquire+0x41d/0x28f0 Call Trace: <TASK> lock_acquire+0x121/0x450 down_write+0x5f/0x1d0 simple_recursive_removal+0x12f/0x5c0 blk_mq_debugfs_unregister_hctxs+0x7c/0x100 blk_mq_update_nr_hw_queues+0x4a3/0x720 nullb_update_nr_hw_queues+0x71/0xf0 [null_blk] nullb_device_submit_queues_store+0x79/0xf0 [null_blk] configfs_write_iter+0x119/0x1e0 vfs_write+0x326/0x730 ksys_write+0x74/0x150 This is because del_gendisk() can concurrent with blk_mq_update_nr_hw_queues(): nullb_device_power_store nullb_apply_submit_queues null_del_dev del_gendisk nullb_update_nr_hw_queues if (!dev->nullb) // still set while gendisk is deleted return 0 blk_mq_update_nr_hw_queues dev->nullb = NULL Fix this problem by resuing the global mutex to protect nullb_device_power_store() and nullb_update_nr_hw_queues() from configfs. Fixes: 45919fbfe1c4 ("null_blk: Enable modifying 'submit_queues' after an instance has been configured") Reported-and-tested-by: Yi Zhang <yi.zhang(a)redhat.com> Closes: https://lore.kernel.org/all/CAHj4cs9LgsHLnjg8z06LQ3Pr5cax-+Ps+xT7AP7TPnEjSt… Signed-off-by: Yu Kuai <yukuai3(a)huawei.com> Reviewed-by: Zhu Yanjun <yanjun.zhu(a)linux.dev> Link: https://lore.kernel.org/r/20240523153934.1937851-1-yukuai1@huaweicloud.com Signed-off-by: Jens Axboe <axboe(a)kernel.dk> Conflicts: drivers/block/null_blk/main.c [ A lot of conflict, this patch just expand the protection range of mutex, ignore conflict. ] Signed-off-by: Li Nan <linan122(a)huawei.com> --- drivers/block/null_blk/main.c | 43 +++++++++++++++++++++-------------- 1 file changed, 26 insertions(+), 17 deletions(-) diff --git a/drivers/block/null_blk/main.c b/drivers/block/null_blk/main.c index 35b390a785dd..91c8412442d0 100644 --- a/drivers/block/null_blk/main.c +++ b/drivers/block/null_blk/main.c @@ -323,11 +323,9 @@ CONFIGFS_ATTR(nullb_device_, NAME); static int nullb_apply_submit_queues(struct nullb_device *dev, unsigned int submit_queues) { - struct nullb *nullb = dev->nullb; + struct nullb *nullb; struct blk_mq_tag_set *set; - - if (!nullb) - return 0; + int ret = 0; /* * Make sure that null_init_hctx() does not access nullb->queues[] past @@ -335,9 +333,20 @@ static int nullb_apply_submit_queues(struct nullb_device *dev, */ if (submit_queues > nr_cpu_ids) return -EINVAL; + + mutex_lock(&lock); + + nullb = dev->nullb; + if (!nullb) + goto out; + set = nullb->tag_set; blk_mq_update_nr_hw_queues(set, submit_queues); - return set->nr_hw_queues == submit_queues ? 0 : -ENOMEM; + ret = set->nr_hw_queues == submit_queues ? 0 : -ENOMEM; + +out: + mutex_unlock(&lock); + return ret; } NULLB_DEVICE_ATTR(size, ulong, NULL); @@ -378,27 +387,31 @@ static ssize_t nullb_device_power_store(struct config_item *item, if (ret < 0) return ret; + ret = count; + mutex_lock(&lock); if (!dev->power && newp) { if (test_and_set_bit(NULLB_DEV_FL_UP, &dev->flags)) - return count; + goto out; + if (null_add_dev(dev)) { clear_bit(NULLB_DEV_FL_UP, &dev->flags); - return -ENOMEM; + ret = -ENOMEM; + goto out; } set_bit(NULLB_DEV_FL_CONFIGURED, &dev->flags); dev->power = newp; } else if (dev->power && !newp) { if (test_and_clear_bit(NULLB_DEV_FL_UP, &dev->flags)) { - mutex_lock(&lock); dev->power = newp; null_del_dev(dev->nullb); - mutex_unlock(&lock); } clear_bit(NULLB_DEV_FL_CONFIGURED, &dev->flags); } - return count; +out: + mutex_unlock(&lock); + return ret; } CONFIGFS_ATTR(nullb_device_, power); @@ -1880,15 +1893,11 @@ static int null_add_dev(struct nullb_device *dev) blk_queue_flag_set(QUEUE_FLAG_NONROT, nullb->q); blk_queue_flag_clear(QUEUE_FLAG_ADD_RANDOM, nullb->q); - mutex_lock(&lock); rv = ida_simple_get(&nullb_indexes, 0, 0, GFP_KERNEL); - if (rv < 0) { - mutex_unlock(&lock); + if (rv < 0) goto out_cleanup_zone; - } nullb->index = rv; dev->index = rv; - mutex_unlock(&lock); blk_queue_logical_block_size(nullb->q, dev->blocksize); blk_queue_physical_block_size(nullb->q, dev->blocksize); @@ -1901,9 +1910,7 @@ static int null_add_dev(struct nullb_device *dev) if (rv) goto out_ida_free; - mutex_lock(&lock); list_add_tail(&nullb->list, &nullb_list); - mutex_unlock(&lock); return 0; @@ -1985,7 +1992,9 @@ static int __init null_init(void) ret = -ENOMEM; goto err_dev; } + mutex_lock(&lock); ret = null_add_dev(dev); + mutex_unlock(&lock); if (ret) { null_free_dev(dev); goto err_dev; -- 2.39.2

2 1

[openeuler:OLK-6.6 3342/10596] include/linux/pgplib.h:26:15: warning: declaration of 'enum pgp_packet_tag' will not be visible outside of this function
by kernel test robot 08 Jul '24

08 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 3b421b6002e287e38790cbdad4a3e08baf7e1bc4 commit: 43d4042e06d2bf96adf67d25e8d91653507a4cf9 [3342/10596] KEYS: Provide a function to load keys from a PGP keyring blob config: arm64-randconfig-r131-20240707 (https://download.01.org/0day-ci/archive/20240708/202407081159.yhVjEfsw-lkp@…) compiler: clang version 19.0.0git (https://github.com/llvm/llvm-project a0c6b8aef853eedaa0980f07c0a502a5a8a9740e) reproduce: (https://download.01.org/0day-ci/archive/20240708/202407081159.yhVjEfsw-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407081159.yhVjEfsw-lkp@intel.com/ All warnings (new ones prefixed by >>): In file included from crypto/asymmetric_keys/pgp_preload.c:19: >> include/linux/pgplib.h:26:15: warning: declaration of 'enum pgp_packet_tag' will not be visible outside of this function [-Wvisibility] 26 | enum pgp_packet_tag type, | ^ include/linux/pgplib.h:36:23: error: field has incomplete type 'enum pgp_key_version' 36 | enum pgp_key_version version : 8; | ^ include/linux/pgplib.h:36:7: note: forward declaration of 'enum pgp_key_version' 36 | enum pgp_key_version version : 8; | ^ include/linux/pgplib.h:37:23: error: field has incomplete type 'enum pgp_pubkey_algo' 37 | enum pgp_pubkey_algo pubkey_algo : 8; | ^ include/linux/pgplib.h:37:7: note: forward declaration of 'enum pgp_pubkey_algo' 37 | enum pgp_pubkey_algo pubkey_algo : 8; | ^ crypto/asymmetric_keys/pgp_preload.c:63:10: warning: declaration of 'enum pgp_packet_tag' will not be visible outside of this function [-Wvisibility] 63 | enum pgp_packet_tag type, u8 headerlen, | ^ crypto/asymmetric_keys/pgp_preload.c:63:25: error: variable has incomplete type 'enum pgp_packet_tag' 63 | enum pgp_packet_tag type, u8 headerlen, | ^ crypto/asymmetric_keys/pgp_preload.c:63:10: note: forward declaration of 'enum pgp_packet_tag' 63 | enum pgp_packet_tag type, u8 headerlen, | ^ crypto/asymmetric_keys/pgp_preload.c:107:36: error: use of undeclared identifier 'PGP_PKT_PUBLIC_KEY' 107 | ctx.pgp.types_of_interest = (1 << PGP_PKT_PUBLIC_KEY); | ^ crypto/asymmetric_keys/pgp_preload.c:108:25: error: incompatible function pointer types assigning to 'int (*)(struct pgp_parse_context *, enum pgp_packet_tag, u8, const u8 *, size_t)' (aka 'int (*)(struct pgp_parse_context *, enum pgp_packet_tag, unsigned char, const unsigned char *, unsigned long)') from 'int (struct pgp_parse_context *, enum pgp_packet_tag, u8, const u8 *, size_t)' (aka 'int (struct pgp_parse_context *, enum pgp_packet_tag, unsigned char, const unsigned char *, unsigned long)') [-Wincompatible-function-pointer-types] 108 | ctx.pgp.process_packet = found_pgp_key; | ^ ~~~~~~~~~~~~~ crypto/asymmetric_keys/pgp_preload.c:101:12: warning: no previous prototype for function 'preload_pgp_keys' [-Wmissing-prototypes] 101 | int __init preload_pgp_keys(const u8 *pgpdata, size_t pgpdatalen, | ^ crypto/asymmetric_keys/pgp_preload.c:101:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 101 | int __init preload_pgp_keys(const u8 *pgpdata, size_t pgpdatalen, | ^ | static 3 warnings and 5 errors generated. -- In file included from crypto/asymmetric_keys/pgp_public_key.c:19: In file included from include/linux/mpi.h:21: In file included from include/linux/scatterlist.h:8: In file included from include/linux/mm.h:2193: include/linux/vmstat.h:522:36: warning: arithmetic between different enumeration types ('enum node_stat_item' and 'enum lru_list') [-Wenum-enum-conversion] 522 | return node_stat_name(NR_LRU_BASE + lru) + 3; // skip "nr_" | ~~~~~~~~~~~ ^ ~~~ In file included from crypto/asymmetric_keys/pgp_public_key.c:20: >> include/linux/pgplib.h:26:15: warning: declaration of 'enum pgp_packet_tag' will not be visible outside of this function [-Wvisibility] 26 | enum pgp_packet_tag type, | ^ include/linux/pgplib.h:36:23: error: field has incomplete type 'enum pgp_key_version' 36 | enum pgp_key_version version : 8; | ^ include/linux/pgplib.h:36:7: note: forward declaration of 'enum pgp_key_version' 36 | enum pgp_key_version version : 8; | ^ include/linux/pgplib.h:37:23: error: field has incomplete type 'enum pgp_pubkey_algo' 37 | enum pgp_pubkey_algo pubkey_algo : 8; | ^ include/linux/pgplib.h:37:7: note: forward declaration of 'enum pgp_pubkey_algo' 37 | enum pgp_pubkey_algo pubkey_algo : 8; | ^ crypto/asymmetric_keys/pgp_public_key.c:63:2: error: call to undeclared function 'kenter'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 63 | kenter(""); | ^ crypto/asymmetric_keys/pgp_public_key.c:65:22: error: use of undeclared identifier 'PGP_KEY_VERSION_4' 65 | n = (pgp->version < PGP_KEY_VERSION_4) ? 8 : 6; | ^ crypto/asymmetric_keys/pgp_public_key.c:67:9: error: call to undeclared function 'mpi_key_length'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 67 | ret = mpi_key_length(key_ptr, keylen, nb + i, nn + i); | ^ crypto/asymmetric_keys/pgp_public_key.c:95:21: error: use of undeclared identifier 'PGP_KEY_VERSION_4' 95 | if (pgp->version < PGP_KEY_VERSION_4) { | ^ crypto/asymmetric_keys/pgp_public_key.c:115:2: error: call to undeclared function 'kleave'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 115 | kleave(" = %d", ret); | ^ crypto/asymmetric_keys/pgp_public_key.c:134:42: error: use of undeclared identifier 'PGP_KEY_VERSION_4' 134 | tfm = crypto_alloc_shash(pgp->version < PGP_KEY_VERSION_4 ? | ^ crypto/asymmetric_keys/pgp_public_key.c:191:2: error: call to undeclared function 'kleave'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 191 | kleave(" = %d", ret); | ^ crypto/asymmetric_keys/pgp_public_key.c:199:12: warning: declaration of 'enum pgp_packet_tag' will not be visible outside of this function [-Wvisibility] 199 | enum pgp_packet_tag type, | ^ crypto/asymmetric_keys/pgp_public_key.c:199:27: error: variable has incomplete type 'enum pgp_packet_tag' 199 | enum pgp_packet_tag type, | ^ crypto/asymmetric_keys/pgp_public_key.c:199:12: note: forward declaration of 'enum pgp_packet_tag' 199 | enum pgp_packet_tag type, | ^ crypto/asymmetric_keys/pgp_public_key.c:211:2: error: call to undeclared function 'kenter'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 211 | kenter(",%u,%u,,%zu", type, headerlen, datalen); | ^ crypto/asymmetric_keys/pgp_public_key.c:213:14: error: use of undeclared identifier 'PGP_PKT_USER_ID' 213 | if (type == PGP_PKT_USER_ID) { | ^ crypto/asymmetric_keys/pgp_public_key.c:216:3: error: call to undeclared function 'kleave'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 216 | kleave(" = 0 [user ID]"); | ^ crypto/asymmetric_keys/pgp_public_key.c:221:3: error: call to undeclared function 'kleave'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 221 | kleave(" = -ENOKEY [already]"); | ^ crypto/asymmetric_keys/pgp_public_key.c:234:25: error: use of undeclared identifier 'PGP_PUBKEY__LAST' 234 | if (pgp.pubkey_algo >= PGP_PUBKEY__LAST) | ^ crypto/asymmetric_keys/pgp_public_key.c:236:9: error: use of undeclared identifier 'pgp_to_public_key_algo' 236 | algo = pgp_to_public_key_algo[pgp.pubkey_algo]; | ^ crypto/asymmetric_keys/pgp_public_key.c:252:2: error: call to undeclared function 'kleave'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 252 | kleave(" = 0 [use]"); | ^ crypto/asymmetric_keys/pgp_public_key.c:310:2: error: call to undeclared function 'kenter'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 310 | kenter(""); | ^ crypto/asymmetric_keys/pgp_public_key.c:313:36: error: use of undeclared identifier 'PGP_PKT_PUBLIC_KEY' 313 | ctx.pgp.types_of_interest = (1 << PGP_PKT_PUBLIC_KEY) | | ^ fatal error: too many errors emitted, stopping now [-ferror-limit=] 3 warnings and 20 errors generated. Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for PGP_KEY_PARSER Depends on [n]: CRYPTO [=y] && ASYMMETRIC_KEY_TYPE [=y] && ASYMMETRIC_PUBLIC_KEY_SUBTYPE [=n] Selected by [y]: - PGP_PRELOAD [=y] && CRYPTO [=y] && ASYMMETRIC_KEY_TYPE [=y] vim +26 include/linux/pgplib.h b78af6579e15dc David Howells 2023-09-12 19 b78af6579e15dc David Howells 2023-09-12 20 /* b78af6579e15dc David Howells 2023-09-12 21 * PGP library packet parser b78af6579e15dc David Howells 2023-09-12 22 */ b78af6579e15dc David Howells 2023-09-12 23 struct pgp_parse_context { b78af6579e15dc David Howells 2023-09-12 24 u64 types_of_interest; b78af6579e15dc David Howells 2023-09-12 25 int (*process_packet)(struct pgp_parse_context *context, b78af6579e15dc David Howells 2023-09-12 @26 enum pgp_packet_tag type, b78af6579e15dc David Howells 2023-09-12 27 u8 headerlen, b78af6579e15dc David Howells 2023-09-12 28 const u8 *data, b78af6579e15dc David Howells 2023-09-12 29 size_t datalen); b78af6579e15dc David Howells 2023-09-12 30 }; b78af6579e15dc David Howells 2023-09-12 31 :::::: The code at line 26 was first introduced by commit :::::: b78af6579e15dcdff86504da90af77f3e890270e PGPLIB: Basic packet parser :::::: TO: David Howells <dhowells(a)redhat.com> :::::: CC: zgzxx <zhangguangzhi3(a)huawei.com> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6] md: fix resync softlockup when bitmap size is less than array size
by Li Nan 08 Jul '24

08 Jul '24

From: Yu Kuai <yukuai3(a)huawei.com> mainline inclusion from mainline-v6.10-rc1 commit f0e729af2eb6bee9eb58c4df1087f14ebaefe26b category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SH1 CVE: CVE-2024-38598 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Is is reported that for dm-raid10, lvextend + lvchange --syncaction will trigger following softlockup: kernel:watchdog: BUG: soft lockup - CPU#3 stuck for 26s! [mdX_resync:6976] CPU: 7 PID: 3588 Comm: mdX_resync Kdump: loaded Not tainted 6.9.0-rc4-next-20240419 #1 RIP: 0010:_raw_spin_unlock_irq+0x13/0x30 Call Trace: <TASK> md_bitmap_start_sync+0x6b/0xf0 raid10_sync_request+0x25c/0x1b40 [raid10] md_do_sync+0x64b/0x1020 md_thread+0xa7/0x170 kthread+0xcf/0x100 ret_from_fork+0x30/0x50 ret_from_fork_asm+0x1a/0x30 And the detailed process is as follows: md_do_sync j = mddev->resync_min while (j < max_sectors) sectors = raid10_sync_request(mddev, j, &skipped) if (!md_bitmap_start_sync(..., &sync_blocks)) // md_bitmap_start_sync set sync_blocks to 0 return sync_blocks + sectors_skippe; // sectors = 0; j += sectors; // j never change Root cause is that commit 301867b1c168 ("md/raid10: check slab-out-of-bounds in md_bitmap_get_counter") return early from md_bitmap_get_counter(), without setting returned blocks. Fix this problem by always set returned blocks from md_bitmap_get_counter"(), as it used to be. Noted that this patch just fix the softlockup problem in kernel, the case that bitmap size doesn't match array size still need to be fixed. Fixes: 301867b1c168 ("md/raid10: check slab-out-of-bounds in md_bitmap_get_counter") Reported-and-tested-by: Nigel Croxon <ncroxon(a)redhat.com> Closes: https://lore.kernel.org/all/71ba5272-ab07-43ba-8232-d2da642acb4e@redhat.com/ Signed-off-by: Yu Kuai <yukuai3(a)huawei.com> Link: https://lore.kernel.org/r/20240422065824.2516-1-yukuai1@huaweicloud.com Signed-off-by: Song Liu <song(a)kernel.org> Signed-off-by: Li Nan <linan122(a)huawei.com> --- drivers/md/md-bitmap.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/drivers/md/md-bitmap.c b/drivers/md/md-bitmap.c index a4976ceae868..ee67da44641b 100644 --- a/drivers/md/md-bitmap.c +++ b/drivers/md/md-bitmap.c @@ -1427,7 +1427,7 @@ __acquires(bitmap->lock) sector_t chunk = offset >> bitmap->chunkshift; unsigned long page = chunk >> PAGE_COUNTER_SHIFT; unsigned long pageoff = (chunk & PAGE_COUNTER_MASK) << COUNTER_BYTE_SHIFT; - sector_t csize; + sector_t csize = ((sector_t)1) << bitmap->chunkshift; int err; if (page >= bitmap->pages) { @@ -1436,6 +1436,7 @@ __acquires(bitmap->lock) * End-of-device while looking for a whole page or * user set a huge number to sysfs bitmap_set_bits. */ + *blocks = csize - (offset & (csize - 1)); return NULL; } err = md_bitmap_checkpage(bitmap, page, create, 0); @@ -1444,8 +1445,7 @@ __acquires(bitmap->lock) bitmap->bp[page].map == NULL) csize = ((sector_t)1) << (bitmap->chunkshift + PAGE_COUNTER_SHIFT); - else - csize = ((sector_t)1) << bitmap->chunkshift; + *blocks = csize - (offset & (csize - 1)); if (err < 0) -- 2.39.2

2 1

[PATCH openEuler-22.03-LTS-SP1] null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
by Li Nan 08 Jul '24

08 Jul '24

From: Yu Kuai <yukuai3(a)huawei.com> mainline inclusion from mainline-v6.10-rc1 commit a2db328b0839312c169eb42746ec46fc1ab53ed2 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA7D6H CVE: CVE-2024-36478 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Writing 'power' and 'submit_queues' concurrently will trigger kernel panic: Test script: modprobe null_blk nr_devices=0 mkdir -p /sys/kernel/config/nullb/nullb0 while true; do echo 1 > submit_queues; echo 4 > submit_queues; done & while true; do echo 1 > power; echo 0 > power; done Test result: BUG: kernel NULL pointer dereference, address: 0000000000000148 Oops: 0000 [#1] PREEMPT SMP RIP: 0010:__lock_acquire+0x41d/0x28f0 Call Trace: <TASK> lock_acquire+0x121/0x450 down_write+0x5f/0x1d0 simple_recursive_removal+0x12f/0x5c0 blk_mq_debugfs_unregister_hctxs+0x7c/0x100 blk_mq_update_nr_hw_queues+0x4a3/0x720 nullb_update_nr_hw_queues+0x71/0xf0 [null_blk] nullb_device_submit_queues_store+0x79/0xf0 [null_blk] configfs_write_iter+0x119/0x1e0 vfs_write+0x326/0x730 ksys_write+0x74/0x150 This is because del_gendisk() can concurrent with blk_mq_update_nr_hw_queues(): nullb_device_power_store nullb_apply_submit_queues null_del_dev del_gendisk nullb_update_nr_hw_queues if (!dev->nullb) // still set while gendisk is deleted return 0 blk_mq_update_nr_hw_queues dev->nullb = NULL Fix this problem by resuing the global mutex to protect nullb_device_power_store() and nullb_update_nr_hw_queues() from configfs. Fixes: 45919fbfe1c4 ("null_blk: Enable modifying 'submit_queues' after an instance has been configured") Reported-and-tested-by: Yi Zhang <yi.zhang(a)redhat.com> Closes: https://lore.kernel.org/all/CAHj4cs9LgsHLnjg8z06LQ3Pr5cax-+Ps+xT7AP7TPnEjSt… Signed-off-by: Yu Kuai <yukuai3(a)huawei.com> Reviewed-by: Zhu Yanjun <yanjun.zhu(a)linux.dev> Link: https://lore.kernel.org/r/20240523153934.1937851-1-yukuai1@huaweicloud.com Signed-off-by: Jens Axboe <axboe(a)kernel.dk> Conflicts: drivers/block/null_blk/main.c [ A lot of conflict, this patch just expand the protection range of mutex, ignore conflict. ] Signed-off-by: Li Nan <linan122(a)huawei.com> --- drivers/block/null_blk/main.c | 43 +++++++++++++++++++++-------------- 1 file changed, 26 insertions(+), 17 deletions(-) diff --git a/drivers/block/null_blk/main.c b/drivers/block/null_blk/main.c index 35b390a785dd..91c8412442d0 100644 --- a/drivers/block/null_blk/main.c +++ b/drivers/block/null_blk/main.c @@ -323,11 +323,9 @@ CONFIGFS_ATTR(nullb_device_, NAME); static int nullb_apply_submit_queues(struct nullb_device *dev, unsigned int submit_queues) { - struct nullb *nullb = dev->nullb; + struct nullb *nullb; struct blk_mq_tag_set *set; - - if (!nullb) - return 0; + int ret = 0; /* * Make sure that null_init_hctx() does not access nullb->queues[] past @@ -335,9 +333,20 @@ static int nullb_apply_submit_queues(struct nullb_device *dev, */ if (submit_queues > nr_cpu_ids) return -EINVAL; + + mutex_lock(&lock); + + nullb = dev->nullb; + if (!nullb) + goto out; + set = nullb->tag_set; blk_mq_update_nr_hw_queues(set, submit_queues); - return set->nr_hw_queues == submit_queues ? 0 : -ENOMEM; + ret = set->nr_hw_queues == submit_queues ? 0 : -ENOMEM; + +out: + mutex_unlock(&lock); + return ret; } NULLB_DEVICE_ATTR(size, ulong, NULL); @@ -378,27 +387,31 @@ static ssize_t nullb_device_power_store(struct config_item *item, if (ret < 0) return ret; + ret = count; + mutex_lock(&lock); if (!dev->power && newp) { if (test_and_set_bit(NULLB_DEV_FL_UP, &dev->flags)) - return count; + goto out; + if (null_add_dev(dev)) { clear_bit(NULLB_DEV_FL_UP, &dev->flags); - return -ENOMEM; + ret = -ENOMEM; + goto out; } set_bit(NULLB_DEV_FL_CONFIGURED, &dev->flags); dev->power = newp; } else if (dev->power && !newp) { if (test_and_clear_bit(NULLB_DEV_FL_UP, &dev->flags)) { - mutex_lock(&lock); dev->power = newp; null_del_dev(dev->nullb); - mutex_unlock(&lock); } clear_bit(NULLB_DEV_FL_CONFIGURED, &dev->flags); } - return count; +out: + mutex_unlock(&lock); + return ret; } CONFIGFS_ATTR(nullb_device_, power); @@ -1880,15 +1893,11 @@ static int null_add_dev(struct nullb_device *dev) blk_queue_flag_set(QUEUE_FLAG_NONROT, nullb->q); blk_queue_flag_clear(QUEUE_FLAG_ADD_RANDOM, nullb->q); - mutex_lock(&lock); rv = ida_simple_get(&nullb_indexes, 0, 0, GFP_KERNEL); - if (rv < 0) { - mutex_unlock(&lock); + if (rv < 0) goto out_cleanup_zone; - } nullb->index = rv; dev->index = rv; - mutex_unlock(&lock); blk_queue_logical_block_size(nullb->q, dev->blocksize); blk_queue_physical_block_size(nullb->q, dev->blocksize); @@ -1901,9 +1910,7 @@ static int null_add_dev(struct nullb_device *dev) if (rv) goto out_ida_free; - mutex_lock(&lock); list_add_tail(&nullb->list, &nullb_list); - mutex_unlock(&lock); return 0; @@ -1985,7 +1992,9 @@ static int __init null_init(void) ret = -ENOMEM; goto err_dev; } + mutex_lock(&lock); ret = null_add_dev(dev); + mutex_unlock(&lock); if (ret) { null_free_dev(dev); goto err_dev; -- 2.39.2

2 1

[PATCH OLK-6.6 0/2] CVE-2024-36478
by Li Nan 08 Jul '24

08 Jul '24

Damien Le Moal (1): null_blk: Fix return value of nullb_device_power_store() Yu Kuai (1): null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' drivers/block/null_blk/main.c | 41 +++++++++++++++++++++++------------ 1 file changed, 27 insertions(+), 14 deletions(-) -- 2.39.2

2 3

[PATCH openEuler-1.0-LTS v2] x86/ftrace: Disable lockdep check when execute ftrace_int3_handler()
by Zheng Yejian 08 Jul '24

08 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAA3U5 CVE: NA --------------------------- After commit 5e66a5bdad69 ("ftrace: Fix rcu warn in ftrace_location()"), lockdep still complain that: include/linux/rcupdate.h:646 rcu_read_lock() used illegally while idle! As Xu suggested, lockdep check can be disabled when exectue ftrace_int3_handler(), refer to mainline commit ba1f2b2eaa2a ("x86/entry: Fix NMI vs IRQ state tracking"). Fixes: 5e66a5bdad69 ("ftrace: Fix rcu warn in ftrace_location()") Suggested-by: Xu Kuohai <xukuohai(a)huawei.com> Signed-off-by: Zheng Yejian <zhengyejian1(a)huawei.com> --- arch/x86/kernel/traps.c | 12 +++++++++--- kernel/trace/ftrace.c | 10 ++-------- 2 files changed, 11 insertions(+), 11 deletions(-) v1 -> v2: Fix check_format fail diff --git a/arch/x86/kernel/traps.c b/arch/x86/kernel/traps.c index e832a9becc19..343c21fa3fad 100644 --- a/arch/x86/kernel/traps.c +++ b/arch/x86/kernel/traps.c @@ -585,9 +585,15 @@ dotraplinkage void notrace do_int3(struct pt_regs *regs, long error_code) * ftrace must be first, everything else may cause a recursive crash. * See note by declaration of modifying_ftrace_code in ftrace.c */ - if (unlikely(atomic_read(&modifying_ftrace_code)) && - ftrace_int3_handler(regs)) - return; + if (unlikely(atomic_read(&modifying_ftrace_code))) { + int ret; + + lockdep_off(); + ret = ftrace_int3_handler(regs); + lockdep_on(); + if (ret) + return; + } #endif if (poke_int3_handler(regs)) return; diff --git a/kernel/trace/ftrace.c b/kernel/trace/ftrace.c index ad4440da5b78..6704150cb655 100644 --- a/kernel/trace/ftrace.c +++ b/kernel/trace/ftrace.c @@ -1581,12 +1581,7 @@ unsigned long ftrace_location_range(unsigned long start, unsigned long end) key.ip = start; key.flags = end; /* overload flags, as it is unsigned long */ - /* - * It is in atomic context when called from ftrace_int3_handler(), - * in this case rcu lock is not needed. - */ - if (!in_atomic()) - rcu_read_lock(); + rcu_read_lock(); for (pg = ftrace_pages_start; pg; pg = pg->next) { if (pg->index == 0 || end < pg->records[0].ip || @@ -1600,8 +1595,7 @@ unsigned long ftrace_location_range(unsigned long start, unsigned long end) break; } } - if (!in_atomic()) - rcu_read_unlock(); + rcu_read_unlock(); return ip; } -- 2.25.1

2 1

[PATCH OLK-6.6] ax25: Fix reference count leak issue of net_device
by Zhengchao Shao 08 Jul '24

08 Jul '24

From: Duoming Zhou <duoming(a)zju.edu.cn> stable inclusion from stable-v6.6.33 commit 965d940fb7414b310a22666503d2af69459c981b category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SG4 CVE: CVE-2024-38554 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- [ Upstream commit 36e56b1b002bb26440403053f19f9e1a8bc075b2 ] There is a reference count leak issue of the object "net_device" in ax25_dev_device_down(). When the ax25 device is shutting down, the ax25_dev_device_down() drops the reference count of net_device one or zero times depending on if we goto unlock_put or not, which will cause memory leak. In order to solve the above issue, decrease the reference count of net_device after dev->ax25_ptr is set to null. Fixes: d01ffb9eee4a ("ax25: add refcount in ax25_dev to avoid UAF bugs") Suggested-by: Dan Carpenter <dan.carpenter(a)linaro.org> Signed-off-by: Duoming Zhou <duoming(a)zju.edu.cn> Reviewed-by: Dan Carpenter <dan.carpenter(a)linaro.org> Link: https://lore.kernel.org/r/7ce3b23a40d9084657ba1125432f0ecc380cbc80.17152470… Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zhengchao Shao <shaozhengchao(a)huawei.com> --- net/ax25/ax25_dev.c | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/net/ax25/ax25_dev.c b/net/ax25/ax25_dev.c index 52ccc37d5687..c9d55b99a7a5 100644 --- a/net/ax25/ax25_dev.c +++ b/net/ax25/ax25_dev.c @@ -118,15 +118,10 @@ void ax25_dev_device_down(struct net_device *dev) list_for_each_entry(s, &ax25_dev_list, list) { if (s == ax25_dev) { list_del(&s->list); - goto unlock_put; + break; } } - dev->ax25_ptr = NULL; - spin_unlock_bh(&ax25_dev_lock); - ax25_dev_put(ax25_dev); - return; -unlock_put: dev->ax25_ptr = NULL; spin_unlock_bh(&ax25_dev_lock); netdev_put(dev, &ax25_dev->dev_tracker); -- 2.34.1

2 1

[PATCH openEuler-1.0-LTS] x86/ftrace: Disable lockdep check when execute ftrace_int3_handler()
by Zheng Yejian 08 Jul '24

08 Jul '24

After commit 5e66a5bdad69 ("ftrace: Fix rcu warn in ftrace_location()"), lockdep still complain that: include/linux/rcupdate.h:646 rcu_read_lock() used illegally while idle! As Xu suggested, lockdep check can be disabled when exectue ftrace_int3_handler(), refer to mainline commit ba1f2b2eaa2a ("x86/entry: Fix NMI vs IRQ state tracking"). Fixes: 5e66a5bdad69 ("ftrace: Fix rcu warn in ftrace_location()") Suggested-by: Xu Kuohai <xukuohai(a)huawei.com> Signed-off-by: Zheng Yejian <zhengyejian1(a)huawei.com> --- arch/x86/kernel/traps.c | 12 +++++++++--- kernel/trace/ftrace.c | 10 ++-------- 2 files changed, 11 insertions(+), 11 deletions(-) diff --git a/arch/x86/kernel/traps.c b/arch/x86/kernel/traps.c index e832a9becc19..343c21fa3fad 100644 --- a/arch/x86/kernel/traps.c +++ b/arch/x86/kernel/traps.c @@ -585,9 +585,15 @@ dotraplinkage void notrace do_int3(struct pt_regs *regs, long error_code) * ftrace must be first, everything else may cause a recursive crash. * See note by declaration of modifying_ftrace_code in ftrace.c */ - if (unlikely(atomic_read(&modifying_ftrace_code)) && - ftrace_int3_handler(regs)) - return; + if (unlikely(atomic_read(&modifying_ftrace_code))) { + int ret; + + lockdep_off(); + ret = ftrace_int3_handler(regs); + lockdep_on(); + if (ret) + return; + } #endif if (poke_int3_handler(regs)) return; diff --git a/kernel/trace/ftrace.c b/kernel/trace/ftrace.c index ad4440da5b78..6704150cb655 100644 --- a/kernel/trace/ftrace.c +++ b/kernel/trace/ftrace.c @@ -1581,12 +1581,7 @@ unsigned long ftrace_location_range(unsigned long start, unsigned long end) key.ip = start; key.flags = end; /* overload flags, as it is unsigned long */ - /* - * It is in atomic context when called from ftrace_int3_handler(), - * in this case rcu lock is not needed. - */ - if (!in_atomic()) - rcu_read_lock(); + rcu_read_lock(); for (pg = ftrace_pages_start; pg; pg = pg->next) { if (pg->index == 0 || end < pg->records[0].ip || @@ -1600,8 +1595,7 @@ unsigned long ftrace_location_range(unsigned long start, unsigned long end) break; } } - if (!in_atomic()) - rcu_read_unlock(); + rcu_read_unlock(); return ip; } -- 2.25.1

2 1

[openeuler:OLK-6.6 3272/10596] drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:4087:21: sparse: sparse: incorrect type in assignment (different address spaces)
by kernel test robot 08 Jul '24

08 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 3b421b6002e287e38790cbdad4a3e08baf7e1bc4 commit: 22129ea1b367d0101df8cc4a837b3f773021e556 [3272/10596] iommu/arm-smmu-v3: Add support for less than one ECMDQ per core config: arm64-randconfig-r131-20240707 (https://download.01.org/0day-ci/archive/20240708/202407080858.aAMctg7p-lkp@…) compiler: clang version 19.0.0git (https://github.com/llvm/llvm-project a0c6b8aef853eedaa0980f07c0a502a5a8a9740e) reproduce: (https://download.01.org/0day-ci/archive/20240708/202407080858.aAMctg7p-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407080858.aAMctg7p-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:4084:15: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected struct arm_smmu_ecmdq *ecmdq @@ got struct arm_smmu_ecmdq [noderef] __percpu * @@ drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:4084:15: sparse: expected struct arm_smmu_ecmdq *ecmdq drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:4084:15: sparse: got struct arm_smmu_ecmdq [noderef] __percpu * >> drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:4087:21: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected struct arm_smmu_ecmdq [noderef] __percpu *ecmdq @@ got struct arm_smmu_ecmdq *ecmdq @@ drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:4087:21: sparse: expected struct arm_smmu_ecmdq [noderef] __percpu *ecmdq drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:4087:21: sparse: got struct arm_smmu_ecmdq *ecmdq drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:4124:45: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const *addr @@ got void [noderef] __iomem *base @@ drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:4124:45: sparse: expected void const *addr drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:4124:45: sparse: got void [noderef] __iomem *base drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c: note: in included file (through arch/arm64/include/asm/atomic.h, include/linux/atomic.h, include/asm-generic/bitops/atomic.h, ...): arch/arm64/include/asm/cmpxchg.h:168:1: sparse: sparse: cast truncates bits from constant value (ffffffff80000000 becomes 0) arch/arm64/include/asm/cmpxchg.h:168:1: sparse: sparse: cast truncates bits from constant value (ffffffff80000000 becomes 0) vim +4087 drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c 4077 4078 #ifdef CONFIG_ARM_SMMU_V3_ECMDQ 4079 static int arm_smmu_ecmdq_layout(struct arm_smmu_device *smmu) 4080 { 4081 int cpu, host_cpu; 4082 struct arm_smmu_ecmdq *ecmdq; 4083 > 4084 ecmdq = devm_alloc_percpu(smmu->dev, *ecmdq); 4085 if (!ecmdq) 4086 return -ENOMEM; > 4087 smmu->ecmdq = ecmdq; 4088 4089 /* A core requires at most one ECMDQ */ 4090 if (num_possible_cpus() < smmu->nr_ecmdq) 4091 smmu->nr_ecmdq = num_possible_cpus(); 4092 4093 for_each_possible_cpu(cpu) { 4094 if (cpu < smmu->nr_ecmdq) { 4095 *per_cpu_ptr(smmu->ecmdqs, cpu) = per_cpu_ptr(smmu->ecmdq, cpu); 4096 } else { 4097 host_cpu = cpu % smmu->nr_ecmdq; 4098 ecmdq = per_cpu_ptr(smmu->ecmdq, host_cpu); 4099 ecmdq->cmdq.shared = 1; 4100 *per_cpu_ptr(smmu->ecmdqs, cpu) = ecmdq; 4101 } 4102 } 4103 4104 return 0; 4105 } 4106 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 4037/10596] drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:86:33: sparse: sparse: cast removes address space '__iomem' of expression
by kernel test robot 08 Jul '24

08 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 3b421b6002e287e38790cbdad4a3e08baf7e1bc4 commit: 5deaf74c4b3edcf88f67f18aa352690deb9dc212 [4037/10596] drivers: initial support for rnpm drivers from Mucse Technology config: loongarch-randconfig-r132-20240707 (https://download.01.org/0day-ci/archive/20240708/202407080814.NRFI4Oce-lkp@…) compiler: loongarch64-linux-gcc (GCC) 13.2.0 reproduce: (https://download.01.org/0day-ci/archive/20240708/202407080814.NRFI4Oce-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407080814.NRFI4Oce-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) >> drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:86:33: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:86:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:86:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:86:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:87:41: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:87:41: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:87:41: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:87:41: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:102:41: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:102:41: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:102:41: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:102:41: sparse: got void * -- >> drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:16:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:16:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:16:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:16:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:17:17: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:17:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:17:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:17:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:28:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:28:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:28:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:28:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:29:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:29:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:29:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:29:9: sparse: got void * -- >> drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:76:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:76:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:76:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:79:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:79:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:79:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:81:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:81:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:81:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:107:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:107:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:107:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:113:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:113:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:113:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:116:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:116:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:116:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:125:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:125:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:125:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:126:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:126:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:126:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:130:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:130:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:130:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:189:23: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected char *rpu_base @@ got unsigned char [noderef] [usertype] __iomem *rpu_addr @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:189:23: sparse: expected char *rpu_base drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:189:23: sparse: got unsigned char [noderef] [usertype] __iomem *rpu_addr drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:214:43: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected char *rpu_base @@ got unsigned char [noderef] [usertype] __iomem *rpu_addr @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:214:43: sparse: expected char *rpu_base drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:214:43: sparse: got unsigned char [noderef] [usertype] __iomem *rpu_addr -- >> drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:446:5: sparse: sparse: symbol 'rnpm_reset_pipeline_n10' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:476:26: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:476:26: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:476:26: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:476:26: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:478:20: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:478:20: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:478:20: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:478:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:479:26: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:479:26: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:479:26: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:479:26: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:481:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:481:20: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:481:20: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:481:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:483:26: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:483:26: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:483:26: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:483:26: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:485:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:485:20: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:485:20: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:485:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:486:26: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:486:26: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:486:26: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:486:26: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:488:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:488:20: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:488:20: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:488:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:553:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:553:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:553:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:553:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:555:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:555:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:555:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:555:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:556:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:556:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:556:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:556:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:558:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:558:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:558:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:558:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:561:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:561:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:561:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:561:9: sparse: got void * -- >> drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:20:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:20:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:20:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:20:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:29:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:29:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:29:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:29:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:31:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:31:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:31:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:31:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_tc.c: note: in included file: >> drivers/net/ethernet/mucse/rnpm/rnpm_tc_u32_parse.h:28:44: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] ip @@ got restricted __be32 @@ drivers/net/ethernet/mucse/rnpm/rnpm_tc_u32_parse.h:28:44: sparse: expected unsigned int [usertype] ip drivers/net/ethernet/mucse/rnpm/rnpm_tc_u32_parse.h:28:44: sparse: got restricted __be32 drivers/net/ethernet/mucse/rnpm/rnpm_tc_u32_parse.h:42:44: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] ip @@ got restricted __be32 @@ drivers/net/ethernet/mucse/rnpm/rnpm_tc_u32_parse.h:42:44: sparse: expected unsigned int [usertype] ip drivers/net/ethernet/mucse/rnpm/rnpm_tc_u32_parse.h:42:44: sparse: got restricted __be32 -- >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:369:17: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:369:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:369:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:369:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:373:21: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:373:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:373:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:373:21: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:417:38: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:417:38: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:417:38: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:417:38: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:437:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:437:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:437:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:437:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:453:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:453:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:453:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:453:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:500:26: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:500:26: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:500:26: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:500:26: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:504:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:504:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:504:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:504:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:518:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:518:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:518:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:518:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:537:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:537:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:537:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:537:21: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:542:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:542:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:542:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:542:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:545:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:545:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:545:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:545:13: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:549:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:549:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:549:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:549:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:551:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:551:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:551:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:551:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:552:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:552:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:552:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:552:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:555:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:555:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:555:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:555:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:568:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:568:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:568:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:568:29: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:573:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:573:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:573:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:573:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:576:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:576:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:576:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:576:21: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:580:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:580:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:580:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:580:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:585:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:585:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:585:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:585:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:588:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:588:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:588:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:588:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:589:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:589:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:589:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:589:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:593:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:593:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:593:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:593:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:595:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:595:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:595:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:595:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:599:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:599:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:599:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:599:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:600:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:600:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:600:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:600:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:603:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:603:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ -- >> drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:61:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:61:9: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:61:9: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:61:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:61:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:61:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:61:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:61:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:67:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:67:9: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:67:9: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:67:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:69:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:69:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:69:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:69:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:70:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:70:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:70:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:70:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:71:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:71:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:71:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:71:13: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:73:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:73:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:73:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:73:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:75:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:75:9: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:75:9: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:75:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:75:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:75:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:75:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:75:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:210:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:210:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:210:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:210:13: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:212:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:212:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:212:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:212:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:361:19: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:361:19: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:361:19: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:361:19: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:362:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:362:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:362:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:362:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:380:27: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:380:27: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:380:27: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:380:27: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:382:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:382:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:382:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:382:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:424:35: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:424:35: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:424:35: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:424:35: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:427:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:427:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:427:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:427:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:643:41: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:643:41: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:643:41: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:643:41: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:645:44: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:645:44: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:645:44: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:645:44: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:773:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:773:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:773:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:773:21: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:976:5: sparse: sparse: symbol 'rnpm_get_vf_ringnum' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:989:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:989:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:989:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:989:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:996:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:996:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:996:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:996:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:983:5: sparse: sparse: symbol 'rnpm_setup_ring_maxrate' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c: note: in included file (through include/linux/module.h): include/linux/list.h:83:21: sparse: sparse: self-comparison always evaluates to true drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c: note: in included file (through drivers/net/ethernet/mucse/rnpm/rnpm.h): >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: got void * -- >> drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:18:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:18:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:18:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:18:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:24:21: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:24:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:24:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:24:21: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:56:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:56:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:56:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:56:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:67:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:67:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:67:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:67:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:69:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:69:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:69:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:69:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:71:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:71:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:71:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:71:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:76:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:76:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:76:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:76:23: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:94:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:94:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:94:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:94:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:95:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:95:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:95:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:95:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:97:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:97:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:97:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:97:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:99:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:99:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:99:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:99:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:102:26: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:102:26: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:102:26: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:102:26: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:125:14: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:125:14: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:125:14: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:125:14: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:127:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:127:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:127:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:127:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:136:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:136:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:136:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:136:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:164:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:164:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:164:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:164:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:172:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:172:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:172:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:172:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:174:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:174:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:174:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:174:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:177:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:177:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:177:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:177:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:179:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:179:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:179:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:179:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:184:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:184:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:184:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:184:23: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:316:5: sparse: sparse: symbol 'rnpm_ptp_setup_ptp' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:681:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:681:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:681:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:681:13: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:687:27: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:687:27: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:687:27: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:687:27: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:688:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:688:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:688:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:688:23: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:695:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:695:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:695:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:695:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:697:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:697:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:697:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:697:17: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:769:13: sparse: sparse: restricted __le16 degrades to integer >> drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:786:20: sparse: sparse: cast to restricted __be32 drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:787:20: sparse: sparse: cast to restricted __be32 -- >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:572:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:572:9: sparse: void drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:572:9: sparse: void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:926:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:926:9: sparse: void drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:926:9: sparse: void * >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1039:41: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1039:41: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1039:41: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1039:41: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1046:25: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1046:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1046:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1046:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1048:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1048:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1048:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1048:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1050:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1050:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1050:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1050:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1067:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1067:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1067:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1067:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1106:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1106:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1106:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1106:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1139:41: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1139:41: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1139:41: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1139:41: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1149:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1149:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1149:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1149:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1150:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1150:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1150:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1150:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1152:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1152:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1152:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1152:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1154:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1154:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1154:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1154:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1179:16: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1179:16: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1179:16: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1179:16: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1182:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1182:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1182:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1182:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1196:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1196:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1196:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1196:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1200:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1200:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1200:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1200:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1204:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1204:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1204:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1204:17: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1185:6: sparse: sparse: symbol 'rnpm_setup_layer2_remapping' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1221:17: sparse: sparse: cast from restricted __be32 >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1221:17: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1221:17: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1221:17: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1221:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1221:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1221:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1221:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1227:17: sparse: sparse: cast from restricted __be32 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1227:17: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1227:17: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1227:17: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1227:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1227:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1227:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1227:17: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1233:26: sparse: sparse: cast from restricted __be16 >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1233:22: sparse: sparse: invalid assignment: |= drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1233:22: sparse: left side has type unsigned int drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1233:22: sparse: right side has type restricted __be16 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1238:26: sparse: sparse: cast from restricted __be16 >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1238:26: sparse: sparse: restricted __be16 degrades to integer drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1243:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1243:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1243:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1243:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1267:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1267:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1267:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1267:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1272:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1272:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1272:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1272:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1275:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1275:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1275:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1275:17: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1209:6: sparse: sparse: symbol 'rnpm_setup_tuple5_remapping' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1293:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1293:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1293:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1293:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1297:17: sparse: sparse: cast from restricted __be32 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1297:17: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1297:17: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1297:17: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1297:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1297:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1297:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1297:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1299:17: sparse: sparse: cast from restricted __be32 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1299:17: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1299:17: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1299:17: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1299:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1299:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1299:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1299:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1302:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1302:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1302:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1302:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1303:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1303:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1303:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1303:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1306:17: sparse: sparse: cast from restricted __be32 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1306:17: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1306:17: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1306:17: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1306:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1306:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1306:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1306:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1308:17: sparse: sparse: cast from restricted __be32 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1308:17: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1308:17: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1308:17: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1308:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1308:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1308:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1308:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1311:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1311:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1311:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1311:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1312:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1312:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1312:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1312:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1315:26: sparse: sparse: cast from restricted __be16 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1315:26: sparse: sparse: restricted __be16 degrades to integer drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1316:31: sparse: sparse: cast from restricted __be16 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1316:31: sparse: sparse: restricted __be16 degrades to integer drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1320:26: sparse: sparse: cast from restricted __be16 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1320:22: sparse: sparse: invalid assignment: |= drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1320:22: sparse: left side has type unsigned int drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1320:22: sparse: right side has type restricted __be16 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1321:31: sparse: sparse: cast from restricted __be16 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1321:27: sparse: sparse: invalid assignment: |= drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1321:27: sparse: left side has type unsigned int drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1321:27: sparse: right side has type restricted __be16 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1326:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1326:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1326:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1326:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1327:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1327:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1327:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1327:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1329:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1329:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1329:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1329:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1330:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1330:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1330:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1330:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1360:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1360:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1360:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1360:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1361:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1361:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1361:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1361:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1364:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1364:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1364:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1364:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1366:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1366:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1366:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1366:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1368:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1368:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1368:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1368:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1280:6: sparse: sparse: symbol 'rnpm_setup_tuple5_remapping_tcam' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1404:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1404:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1404:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1404:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1408:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1408:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1408:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1408:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1412:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1412:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1412:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1412:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1414:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1414:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1414:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1414:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1415:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1415:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1415:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1415:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1416:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1416:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1416:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1416:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1417:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1417:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1417:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1417:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1418:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1418:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1418:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1418:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1419:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1419:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1419:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1419:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1420:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1420:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1420:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1420:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1421:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1421:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1421:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1421:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1422:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1422:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1422:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1422:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1424:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1424:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1424:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1424:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1425:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1425:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1425:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1425:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1443:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1443:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1443:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1443:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1445:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1445:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1445:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1445:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1454:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1454:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1454:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1454:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1456:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1456:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1456:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1456:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1471:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1471:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1471:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1471:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1473:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1473:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1473:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1473:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1490:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1490:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1490:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1490:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1492:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1492:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1492:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1492:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1494:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1494:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1494:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1494:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:469:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:469:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:469:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:469:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:469:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:469:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:469:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:469:17: sparse: got void * -- >> drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1763:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1763:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1763:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1763:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:224:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:224:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:224:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:224:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:242:39: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_common.c:242:39: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:242:39: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:242:39: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:244:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:244:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:244:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:244:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:245:39: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:245:39: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:245:39: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:245:39: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:247:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:247:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:247:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:247:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:249:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:249:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:249:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:249:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:250:39: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:250:39: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:250:39: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:250:39: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:251:39: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:251:39: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:251:39: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:251:39: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:252:39: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:252:39: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:252:39: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:252:39: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:253:40: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:253:40: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:253:40: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:253:40: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:255:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:255:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:255:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:255:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:336:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:336:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:336:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:336:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:337:19: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:337:19: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:337:19: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:337:19: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:374:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:374:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:374:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:374:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:380:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:380:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:380:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:380:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:802:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:802:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:802:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:802:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:809:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:809:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:809:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:809:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:810:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:810:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:810:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:810:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:816:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:816:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:816:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:816:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:818:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:818:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:818:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:818:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:855:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:855:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:855:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:855:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:856:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:856:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:856:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:856:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:859:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:859:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:859:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:859:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:861:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:861:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:861:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:861:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:887:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:887:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:887:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:887:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:891:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:891:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:891:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:891:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:892:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:892:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ -- drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1322:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1322:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1322:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1322:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1331:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1331:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1331:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1331:29: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1332:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1332:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1332:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1332:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1343:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1343:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1343:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1343:29: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1345:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1345:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1345:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1345:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1409:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1409:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1409:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1409:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1415:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1415:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1415:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1415:21: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1416:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1416:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1416:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1416:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1441:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1441:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1441:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1441:29: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1443:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1443:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1443:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1443:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1445:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1445:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1445:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1445:29: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1447:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1447:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1447:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1447:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1466:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1466:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1466:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1466:21: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1468:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1468:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1468:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1468:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1515:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1515:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1515:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1515:21: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1519:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1519:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1519:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1519:32: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1574:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1574:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1574:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1574:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1577:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1577:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1577:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1577:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1588:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1588:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1588:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1588:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1590:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1590:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1590:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1590:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1871:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1871:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1871:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1871:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1893:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1893:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1893:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1893:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1906:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1906:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1906:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1906:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1932:24: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1932:24: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1932:24: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1932:24: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1966:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1966:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1966:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1966:17: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1968:13: sparse: sparse: incorrect type in assignment (different base types) @@ expected unsigned short [usertype] vid @@ got restricted __le16 [usertype] @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1968:13: sparse: expected unsigned short [usertype] vid drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1968:13: sparse: got restricted __le16 [usertype] drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1974:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1974:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1974:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1974:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2015:16: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2015:16: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2015:16: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2015:16: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2036:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2036:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2036:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2036:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2055:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2055:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2055:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2055:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2057:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2057:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2057:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2057:25: sparse: got void * -- >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:29:5: sparse: sparse: symbol 'rnpm_mbx_write_posted_locked' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:70:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:70:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:70:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:70:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:75:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:75:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:75:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:75:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:73:6: sparse: sparse: symbol 'rnpm_link_stat_mark_disable' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:78:5: sparse: sparse: symbol 'rnpm_mbx_fw_post_req' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:138:5: sparse: sparse: symbol 'rnpm_fw_send_cmd_wait' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:210:17: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:210:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:210:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:210:17: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:619:5: sparse: sparse: symbol 'rnpm_mbx_lldp_all_ports_enable' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:879:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:879:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:879:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:879:21: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:883:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:883:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:883:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:883:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:886:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:886:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:886:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:886:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:916:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:916:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:916:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:916:21: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:919:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:919:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:919:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:919:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:922:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:922:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:922:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:922:17: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:933:5: sparse: sparse: symbol 'rnpm_mbx_pluginout_evt_en' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:962:5: sparse: sparse: symbol 'rnpm_fw_get_capablity' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1178:5: sparse: sparse: symbol 'rnpm_fw_reg_read' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1205:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1205:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1205:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1205:13: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1212:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1212:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1212:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1212:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1224:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1224:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1224:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1224:13: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1233:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1233:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1233:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1233:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1477:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1477:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1477:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1477:13: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1470:5: sparse: sparse: symbol 'rnpm_get_port_stats2' was not declared. Should it be static? -- >> drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:39:5: sparse: sparse: symbol 'bar4_reg_val' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:40:5: sparse: sparse: symbol 'bar4_reg_addr' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:41:5: sparse: sparse: symbol 'pcs_phy_num' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:42:5: sparse: sparse: symbol 'pcs_cnt' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:192:31: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:192:31: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:192:31: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:192:31: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:222:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:222:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:222:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:222:21: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:224:33: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:224:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:224:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:224:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:227:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:227:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:227:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:227:25: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:263:5: sparse: sparse: symbol 'rnpm_mbx_get_pn_sn' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:409:60: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:409:60: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:409:60: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:409:60: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:429:53: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:429:53: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:429:53: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:429:53: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:738:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:738:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:738:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:738:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:742:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:742:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:742:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:742:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:746:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:746:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:746:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:746:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:752:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:752:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:752:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:752:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:756:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:756:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:756:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:756:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:760:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:760:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:760:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:760:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:766:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:766:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:766:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:766:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:770:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:770:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:770:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:770:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:776:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:776:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:776:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:776:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:780:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:780:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:780:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:780:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:784:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:784:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:784:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:784:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:790:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:790:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:790:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:790:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:794:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:794:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:794:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:794:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:800:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:800:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:800:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:800:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:804:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:804:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:804:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:804:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:808:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:808:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:808:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:808:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:812:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:812:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:812:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:812:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:816:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:816:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:816:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:816:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:820:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:820:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:820:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:820:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:824:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:824:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:824:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:824:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:828:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:828:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:828:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:828:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:832:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:832:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:832:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:832:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:836:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:836:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:836:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:836:15: sparse: got void * -- >> drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:187:32: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:187:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:187:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:187:32: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:1145:33: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:1145:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:1145:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:1145:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2464:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2464:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2464:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2464:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2504:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2504:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2504:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2504:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2532:31: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2532:31: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2532:31: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2532:31: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2543:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2543:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2543:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2543:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2560:22: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2560:22: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2560:22: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2560:22: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2692:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2692:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2692:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2692:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2944:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2944:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2944:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2944:29: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2946:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2946:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2946:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2946:29: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:3002:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:3002:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:3002:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:3002:29: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:3004:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:3004:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:3004:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:3004:29: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:3246:6: sparse: sparse: symbol 'rnpm_get_phy_statistics' was not declared. Should it be static? -- >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:50:6: sparse: sparse: symbol 'rnpm_port_name' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:256:6: sparse: sparse: symbol 'rnpm_pf_service_event_schedule' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:306:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnpm/rnpm_main.c:306:9: sparse: void drivers/net/ethernet/mucse/rnpm/rnpm_main.c:306:9: sparse: void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:351:17: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:351:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:353:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:353:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:1061:37: sparse: sparse: restricted __le16 degrades to integer drivers/net/ethernet/mucse/rnpm/rnpm_main.c:1074:57: sparse: sparse: restricted __le16 degrades to integer drivers/net/ethernet/mucse/rnpm/rnpm_main.c:1167:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:1167:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:1137:5: sparse: sparse: symbol 'rnpm_rx_ring_reinit' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2215:56: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2215:56: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2220:56: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2220:56: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2207:6: sparse: sparse: symbol 'rnpm_write_eitr' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2775:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2775:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2787:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2787:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2902:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2902:9: sparse: void drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2902:9: sparse: void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2994:17: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2994:17: sparse: void drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2994:17: sparse: void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3033:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3033:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3033:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3033:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3013:5: sparse: sparse: symbol 'rnpm_xmit_nop_frame_ring' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3056:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3056:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3056:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3056:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3037:5: sparse: sparse: symbol 'rnpm_xmit_nop_frame_ring_temp' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3102:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3102:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3102:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3102:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3104:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3104:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3104:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3104:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3106:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3106:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3106:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3106:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3110:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3110:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3110:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3110:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3113:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3113:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3113:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3113:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3120:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3120:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3120:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3120:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3125:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3125:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3125:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3125:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3127:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3127:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3127:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3127:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3172:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3172:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3172:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3172:23: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3174:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3174:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3174:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3174:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3191:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3191:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3191:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3191:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3205:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3205:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3205:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3205:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3206:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3206:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3206:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3206:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3208:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3208:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3208:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3208:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3211:31: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3211:31: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3211:31: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3211:31: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3214:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3214:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3214:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3214:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3219:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3219:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3219:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3219:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3221:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3221:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3221:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3221:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3241:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3241:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3241:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3241:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3241:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3241:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3241:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3241:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3247:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3247:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3247:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3247:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3248:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3248:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3248:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3248:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3249:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3249:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3249:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3249:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3250:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3250:9: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3250:9: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3250:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3250:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3250:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3250:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3250:9: sparse: got void * -- drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3497:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3497:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3497:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3497:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3502:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3502:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3502:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3502:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3504:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3504:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3504:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3504:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3505:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3505:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3505:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3505:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3505:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3505:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3505:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3505:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3524:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3524:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3524:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3524:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3524:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3524:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3524:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3524:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3529:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3529:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3529:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3529:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3531:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3531:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3531:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3531:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3533:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3533:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3533:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3533:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3533:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3533:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3533:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3533:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3581:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3581:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3581:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3581:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3674:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3674:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3674:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3674:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3756:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3756:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3756:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3756:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3763:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3763:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3763:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3763:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3767:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3767:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3767:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3767:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3883:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3883:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3883:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3883:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3884:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3884:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3884:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3884:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3885:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3885:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3885:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3885:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3918:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3918:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3918:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3918:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3923:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3923:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3923:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3923:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3924:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3924:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3924:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3924:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3928:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3928:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3928:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3928:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3930:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3930:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3930:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3930:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3931:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3931:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3931:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3931:17: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3909:6: sparse: sparse: symbol 'rnpm_vlan_stags_flag' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3968:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3968:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3968:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3968:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3970:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3970:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3970:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3970:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3976:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3976:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3976:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3976:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3988:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3988:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3988:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3988:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3989:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3989:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3989:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3989:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4039:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4039:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4039:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4039:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4042:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4042:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4042:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4042:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4042:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4042:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4042:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4042:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4046:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4046:33: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4046:33: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4046:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4054:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4054:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4054:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4054:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4054:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4054:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4054:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4054:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4058:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4058:33: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4058:33: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4058:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4066:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4066:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4066:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4066:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4066:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4066:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4066:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4066:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4069:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4069:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4069:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4069:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4069:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4069:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4069:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4069:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4072:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4072:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4072:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4072:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4076:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4076:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4076:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4076:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4076:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4076:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4076:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4076:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4080:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4080:33: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4080:33: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4080:33: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4031:6: sparse: sparse: symbol 'control_mac_rx' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4124:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4124:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4124:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4124:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4456:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4456:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4456:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4456:32: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4513:34: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4513:34: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4513:34: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4513:34: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4522:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4522:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4522:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4522:32: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4525:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4525:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4525:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4525:32: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4539:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4539:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4539:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4539:32: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4546:41: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4546:41: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4546:41: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4546:41: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4559:48: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4559:48: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4559:48: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4559:48: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4817:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4817:9: sparse: void drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4817:9: sparse: void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4917:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4917:9: sparse: void drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4917:9: sparse: void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4956:24: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4956:24: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4956:24: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4956:24: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5139:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5139:9: sparse: void drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5139:9: sparse: void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5215:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5215:9: sparse: void drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5215:9: sparse: void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5299:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5299:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5299:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5299:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5300:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5300:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5300:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5300:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5301:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5301:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5301:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5301:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5302:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5302:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5302:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5302:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5308:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5308:33: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5308:33: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5308:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5313:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5313:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5313:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5313:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5318:35: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5318:35: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5318:35: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5318:35: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5319:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5319:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5319:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5319:32: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5322:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5322:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5322:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5322:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5328:43: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5328:43: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5328:43: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5328:43: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5332:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5332:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5332:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5332:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5335:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5335:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5335:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5335:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5338:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5338:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5338:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5338:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5340:43: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5340:43: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5340:43: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5340:43: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5343:43: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5343:43: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5343:43: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5343:43: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5347:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5347:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5347:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5347:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5354:43: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5354:43: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5354:43: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5354:43: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5357:43: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5357:43: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5357:43: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5357:43: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5364:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5364:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5364:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5364:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5366:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5366:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5366:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5366:23: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5370:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5370:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5370:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5370:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5372:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5372:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5372:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5372:23: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5377:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5377:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5377:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5377:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5379:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5379:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5379:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5379:23: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5382:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5382:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5382:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5382:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5384:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5384:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5384:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5384:23: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5803:6: sparse: sparse: symbol 'rnpm_pf_service_timer' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5821:6: sparse: sparse: symbol 'rnpm_service_timer' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5846:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5846:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5846:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5846:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5858:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5858:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5858:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5858:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5862:26: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5862:26: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5862:26: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5862:26: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5874:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5874:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5874:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5874:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5878:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5878:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5878:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5878:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5905:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5905:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5905:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5905:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5906:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5906:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5906:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5906:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5910:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5910:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5910:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5910:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5918:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5918:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5918:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5918:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5919:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5919:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5919:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5919:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5920:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5920:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5920:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5920:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5923:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5923:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5923:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5923:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5924:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5924:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5924:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5924:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5925:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5925:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5925:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5925:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5926:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5926:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5926:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5926:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5928:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5928:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5928:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5928:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5929:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5929:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5929:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5929:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5930:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5930:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5930:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5930:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5931:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5931:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5931:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5931:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5933:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5933:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5933:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5933:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5939:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5939:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5939:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5939:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5940:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5940:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5940:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5940:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5947:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5947:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5947:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5947:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5948:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5948:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5948:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5948:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5949:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5949:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5949:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5949:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5950:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5950:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5950:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5950:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5954:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5954:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5954:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5954:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5955:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5955:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5955:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5955:17: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5962:21: sparse: sparse: symbol 'wait_all_port_resetting' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5974:21: sparse: sparse: symbol 'clean_all_port_resetting' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6003:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6003:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6003:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6003:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6185:5: sparse: sparse: symbol 'rnpm_check_mc_addr' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6211:6: sparse: sparse: symbol 'update_pf_vlan' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6262:6: sparse: sparse: symbol 'rnpm_pf_service_task' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6436:27: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __le32 [usertype] mac_ip_len @@ got long @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6436:27: sparse: expected restricted __le32 [usertype] mac_ip_len drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6436:27: sparse: got long >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6437:27: sparse: sparse: invalid assignment: |= drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6437:27: sparse: left side has type restricted __le32 drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6437:27: sparse: right side has type long >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6483:32: sparse: sparse: incorrect type in initializer (different base types) @@ expected unsigned short [usertype] old @@ got restricted __be16 [usertype] frag_off @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6483:32: sparse: expected unsigned short [usertype] old drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6483:32: sparse: got restricted __be16 [usertype] frag_off drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6485:33: sparse: sparse: invalid assignment: |= drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6485:33: sparse: left side has type restricted __be16 drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6485:33: sparse: right side has type int >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6489:58: sparse: sparse: restricted __be16 degrades to integer >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6489:69: sparse: sparse: incorrect type in argument 2 (different base types) @@ expected restricted __wsum [usertype] diff @@ got int @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6489:69: sparse: expected restricted __wsum [usertype] diff drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6489:69: sparse: got int >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6611:27: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __le32 [usertype] mac_ip_len @@ got int @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6611:27: sparse: expected restricted __le32 [usertype] mac_ip_len drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6611:27: sparse: got int >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6654:32: sparse: sparse: restricted __le32 degrades to integer drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6766:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6766:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6766:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6766:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6842:27: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __le32 [usertype] mac_ip_len @@ got int @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6842:27: sparse: expected restricted __le32 [usertype] mac_ip_len drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6842:27: sparse: got int drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7422:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7422:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7422:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7422:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7425:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7425:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7425:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7425:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7437:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7437:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7437:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7437:29: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7445:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7445:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7445:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7445:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7492:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7492:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7492:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7492:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7492:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7492:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7492:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7492:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7496:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7496:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7496:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7496:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7496:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7496:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7496:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7496:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7535:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7535:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7535:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7535:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7528:6: sparse: sparse: symbol 'rnpm_clear_udp_tunnel_port' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7577:9: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be16 [usertype] vxlan_port @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7577:9: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7577:9: sparse: got restricted __be16 [usertype] vxlan_port drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7577:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7577:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7577:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7577:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7667:29: sparse: sparse: symbol 'rnpm_netdev_ops' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7692:6: sparse: sparse: symbol 'rnpm_assign_netdev_ops' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7785:6: sparse: sparse: symbol 'rnpm_fix_queue_number' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7961:36: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8025:36: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8055:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8055:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8055:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8055:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8281:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8281:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8281:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8281:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8451:27: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8451:27: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8451:27: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8451:27: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8452:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8452:9: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8452:9: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8452:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8760:5: sparse: sparse: symbol 'rnpm_can_rpu_start' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9034:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9034:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9034:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9034:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9035:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9035:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9035:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9035:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9036:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9036:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9036:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9036:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9039:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9039:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9039:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9039:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9040:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9040:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9040:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9040:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9041:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9041:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9041:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9041:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9042:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9042:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9042:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9042:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9044:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9044:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9044:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9044:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9045:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9045:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9045:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9045:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9046:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9046:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9046:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9046:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9047:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9047:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9047:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9047:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9049:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9049:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9049:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9049:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:637:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:637:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:637:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:637:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:575:31: sparse: sparse: restricted __le16 degrades to integer drivers/net/ethernet/mucse/rnpm/rnpm_main.c:598:26: sparse: sparse: restricted __le16 degrades to integer drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c: note: in included file (through drivers/net/ethernet/mucse/rnpm/rnpm.h): >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c: note: in included file (through include/linux/skbuff.h, include/net/net_namespace.h, include/linux/netdevice.h): include/net/checksum.h:63:59: sparse: sparse: self-comparison always evaluates to false vim +/__iomem +86 drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c 47 48 /** 49 * rnpm_dbg_reg_ops_write - write into reg_ops datum 50 * @filp: the opened file 51 * @buffer: where to find the user's data 52 * @count: the length of the user's data 53 * @ppos: file position offset 54 **/ 55 static ssize_t rnpm_dbg_reg_ops_write(struct file *filp, 56 const char __user *buffer, size_t count, 57 loff_t *ppos) 58 { 59 struct rnpm_adapter *adapter = filp->private_data; 60 struct rnpm_hw *hw = &adapter->hw; 61 int len; 62 63 /* don't allow partial writes */ 64 if (*ppos != 0) 65 return 0; 66 if (count >= sizeof(rnpm_dbg_reg_ops_buf)) 67 return -ENOSPC; 68 69 len = simple_write_to_buffer(rnpm_dbg_reg_ops_buf, 70 sizeof(rnpm_dbg_reg_ops_buf) - 1, ppos, 71 buffer, count); 72 if (len < 0) 73 return len; 74 75 rnpm_dbg_reg_ops_buf[len] = '\0'; 76 77 if (strncmp(rnpm_dbg_reg_ops_buf, "write", 5) == 0) { 78 u32 reg, value; 79 int cnt; 80 81 cnt = sscanf(&rnpm_dbg_reg_ops_buf[5], "%x %x", &reg, &value); 82 if (cnt == 2) { 83 if (reg >= 0x30000000) { 84 rnpm_mbx_reg_write(hw, reg, value); 85 } else { > 86 rnpm_wr_reg(hw->hw_addr + reg, value); > 87 value = rnpm_rd_reg(hw->hw_addr + reg); 88 } 89 e_dev_info("write: 0x%08x = 0x%08x\n", reg, value); 90 } else { 91 e_dev_info("write <reg> <value>\n"); 92 } 93 } else if (strncmp(rnpm_dbg_reg_ops_buf, "read", 4) == 0) { 94 u32 reg, value; 95 int cnt; 96 97 cnt = sscanf(&rnpm_dbg_reg_ops_buf[4], "%x", &reg); 98 if (cnt == 1) { 99 if (reg >= 0x30000000) 100 value = rnpm_mbx_fw_reg_read(hw, reg); 101 else 102 value = rnpm_rd_reg(hw->hw_addr + reg); 103 snprintf(rnpm_dbg_reg_ops_buf, 104 sizeof(rnpm_dbg_reg_ops_buf), "0x%08x: 0x%08x", 105 reg, value); 106 e_dev_info("read 0x%08x = 0x%08x\n", reg, value); 107 } else { 108 e_dev_info("read <reg>\n"); 109 } 110 } else { 111 e_dev_info("Unknown command %s\n", rnpm_dbg_reg_ops_buf); 112 e_dev_info("Available commands:\n"); 113 e_dev_info(" read <reg>\n"); 114 e_dev_info(" write <reg> <value>\n"); 115 } 116 return count; 117 } 118 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3876/10596] drivers/net/ethernet/mucse/rnp/rnp_pcs.c:15:9: sparse: sparse: cast removes address space '__iomem' of expression
by kernel test robot 08 Jul '24

08 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 3b421b6002e287e38790cbdad4a3e08baf7e1bc4 commit: 455d45ae080810ae554f5e586adb9004230f9f70 [3876/10596] drivers: initial support for rnp drivers from Mucse Technology config: loongarch-randconfig-r132-20240707 (https://download.01.org/0day-ci/archive/20240708/202407080500.X6ek0A6W-lkp@…) compiler: loongarch64-linux-gcc (GCC) 13.2.0 reproduce: (https://download.01.org/0day-ci/archive/20240708/202407080500.X6ek0A6W-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407080500.X6ek0A6W-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) >> drivers/net/ethernet/mucse/rnp/rnp_pcs.c:15:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_pcs.c:15:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_pcs.c:15:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_pcs.c:15:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_pcs.c:16:17: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_pcs.c:16:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_pcs.c:16:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_pcs.c:16:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_pcs.c:26:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_pcs.c:26:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_pcs.c:26:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_pcs.c:26:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_pcs.c:27:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_pcs.c:27:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_pcs.c:27:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_pcs.c:27:9: sparse: got void * -- >> drivers/net/ethernet/mucse/rnp/rnp_param.c:275:33: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_param.c:275:33: sparse: void drivers/net/ethernet/mucse/rnp/rnp_param.c:275:33: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_param.c:277:33: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_param.c:277:33: sparse: void drivers/net/ethernet/mucse/rnp/rnp_param.c:277:33: sparse: void * -- >> drivers/net/ethernet/mucse/rnp/rnp_dcb.c:42:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_dcb.c:42:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_dcb.c:42:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_dcb.c:42:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_dcb.c:46:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_dcb.c:46:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_dcb.c:46:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_dcb.c:46:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_dcb.c:65:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_dcb.c:65:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_dcb.c:65:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_dcb.c:65:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_dcb.c:67:15: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_dcb.c:67:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_dcb.c:67:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_dcb.c:67:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_dcb.c:72:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_dcb.c:72:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_dcb.c:72:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_dcb.c:72:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_dcb.c:94:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_dcb.c:94:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_dcb.c:94:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_dcb.c:94:25: sparse: got void * >> drivers/net/ethernet/mucse/rnp/rnp_dcb.c:297:29: sparse: sparse: symbol 'rnp_dcbnl_ops' was not declared. Should it be static? -- >> drivers/net/ethernet/mucse/rnp/rnp_mbx.c:352:17: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_mbx.c:352:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:352:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:352:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:356:21: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_mbx.c:356:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:356:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:356:21: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:403:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:403:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:403:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:403:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:422:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:422:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:422:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:422:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:464:26: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:464:26: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:464:26: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:464:26: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:468:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:468:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:468:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:468:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:482:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:482:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:482:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:482:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:493:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:493:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:493:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:493:21: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:496:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:496:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:496:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:496:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:499:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:499:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:499:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:499:13: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:502:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:502:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:502:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:502:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:505:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:505:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:505:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:505:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:507:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:507:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:507:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:507:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:511:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:511:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:511:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:511:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:522:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:522:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:522:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:522:29: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:525:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:525:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:525:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:525:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:528:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:528:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:528:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:528:21: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:532:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:532:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:532:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:532:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:536:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:536:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:536:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:536:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:539:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:539:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:539:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:539:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:542:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:542:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:542:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:542:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:545:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:545:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:545:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:545:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:547:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:547:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:547:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:547:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:553:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:553:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:553:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:553:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:555:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:555:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:555:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:555:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:558:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:558:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:558:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:558:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:562:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:562:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ -- >> drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:89:33: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:89:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:89:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:89:33: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:90:41: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:90:41: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:90:41: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:90:41: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:106:41: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:106:41: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:106:41: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:106:41: sparse: got void * -- >> drivers/net/ethernet/mucse/rnp/rnp_mpe.c:72:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:72:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mpe.c:72:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mpe.c:73:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:73:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mpe.c:73:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mpe.c:74:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:74:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mpe.c:74:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mpe.c:96:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:96:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mpe.c:96:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mpe.c:102:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:102:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mpe.c:102:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mpe.c:105:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:105:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mpe.c:105:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mpe.c:112:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:112:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mpe.c:112:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mpe.c:113:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:113:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mpe.c:113:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mpe.c:116:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:116:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mpe.c:116:9: sparse: got void * >> drivers/net/ethernet/mucse/rnp/rnp_mpe.c:175:23: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected char *rpu_base @@ got unsigned char [noderef] [usertype] __iomem *rpu_addr @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:175:23: sparse: expected char *rpu_base drivers/net/ethernet/mucse/rnp/rnp_mpe.c:175:23: sparse: got unsigned char [noderef] [usertype] __iomem *rpu_addr drivers/net/ethernet/mucse/rnp/rnp_mpe.c:201:42: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected char *rpu_base @@ got unsigned char [noderef] [usertype] __iomem *rpu_addr @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:201:42: sparse: expected char *rpu_base drivers/net/ethernet/mucse/rnp/rnp_mpe.c:201:42: sparse: got unsigned char [noderef] [usertype] __iomem *rpu_addr -- drivers/net/ethernet/mucse/rnp/rnp_lib.c:439:5: sparse: sparse: symbol 'rnp_acquire_msix_vectors' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnp/rnp_lib.c:531:33: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_lib.c:531:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:531:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:531:33: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:550:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:550:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:550:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:550:33: sparse: got void * >> drivers/net/ethernet/mucse/rnp/rnp_lib.c:596:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_lib.c:596:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_lib.c:596:9: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:600:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_lib.c:600:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_lib.c:600:9: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:984:6: sparse: sparse: symbol 'rnp_print_ring_info' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_lib.c:1049:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_lib.c:1049:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_lib.c:1049:9: sparse: void * >> drivers/net/ethernet/mucse/rnp/rnp_lib.c:1135:61: sparse: sparse: invalid assignment: |= drivers/net/ethernet/mucse/rnp/rnp_lib.c:1135:61: sparse: left side has type restricted __le32 drivers/net/ethernet/mucse/rnp/rnp_lib.c:1135:61: sparse: right side has type int drivers/net/ethernet/mucse/rnp/rnp_lib.c:1256:16: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_lib.c:1256:16: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1256:16: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1256:16: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:1259:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:1259:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1259:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1259:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:1303:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:1303:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1303:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1303:20: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:1304:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:1304:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1304:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1304:20: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:1312:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:1312:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1312:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1312:20: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:1313:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:1313:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1313:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1313:20: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:1327:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:1327:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1327:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1327:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:1329:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:1329:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1329:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1329:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:1346:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:1346:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1346:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1346:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:1348:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:1348:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1348:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1348:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:1350:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:1350:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1350:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1350:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:491:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:491:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:491:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:491:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:481:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:481:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:481:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:481:17: sparse: got void * -- >> drivers/net/ethernet/mucse/rnp/rnp_ptp.c:122:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_ptp.c:122:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_ptp.c:122:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_ptp.c:122:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_ptp.c:277:5: sparse: sparse: symbol 'rnp_ptp_setup_ptp' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_ptp.c:608:13: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_ptp.c:608:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_ptp.c:608:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_ptp.c:608:13: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_ptp.c:614:27: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_ptp.c:614:27: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_ptp.c:614:27: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_ptp.c:614:27: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_ptp.c:615:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_ptp.c:615:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_ptp.c:615:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_ptp.c:615:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_ptp.c:621:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_ptp.c:621:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_ptp.c:621:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_ptp.c:621:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_ptp.c:623:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_ptp.c:623:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_ptp.c:623:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_ptp.c:623:17: sparse: got void * >> drivers/net/ethernet/mucse/rnp/rnp_ptp.c:676:13: sparse: sparse: restricted __le16 degrades to integer >> drivers/net/ethernet/mucse/rnp/rnp_ptp.c:693:20: sparse: sparse: cast to restricted __be32 drivers/net/ethernet/mucse/rnp/rnp_ptp.c:694:20: sparse: sparse: cast to restricted __be32 -- >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:213:33: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:213:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:213:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:213:33: sparse: got void * >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1176:45: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __be16 [usertype] h_proto @@ got int @@ drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1176:45: sparse: expected restricted __be16 [usertype] h_proto drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1176:45: sparse: got int >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1192:52: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __be16 [usertype] psrc @@ got int @@ drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1192:52: sparse: expected restricted __be16 [usertype] psrc drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1192:52: sparse: got int >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1193:52: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __be16 [usertype] pdst @@ got int @@ drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1193:52: sparse: expected restricted __be16 [usertype] pdst drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1193:52: sparse: got int >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1194:54: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __be32 [usertype] ip4src @@ got unsigned int @@ drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1194:54: sparse: expected restricted __be32 [usertype] ip4src drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1194:54: sparse: got unsigned int >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1195:54: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __be32 [usertype] ip4dst @@ got unsigned int @@ drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1195:54: sparse: expected restricted __be32 [usertype] ip4dst drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1195:54: sparse: got unsigned int >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1440:51: sparse: sparse: restricted __be32 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1445:51: sparse: sparse: restricted __be32 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1473:51: sparse: sparse: restricted __be32 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1478:51: sparse: sparse: restricted __be32 degrades to integer >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1483:51: sparse: sparse: restricted __be16 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1488:51: sparse: sparse: restricted __be16 degrades to integer >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1711:55: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __be16 [usertype] src_port_mask @@ got int @@ drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1711:55: sparse: expected restricted __be16 [usertype] src_port_mask drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1711:55: sparse: got int >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1713:55: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __be16 [usertype] dst_port_mask @@ got int @@ drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1713:55: sparse: expected restricted __be16 [usertype] dst_port_mask drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1713:55: sparse: got int -- >> drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:67:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:67:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:67:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:67:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:72:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:72:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:72:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:72:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:189:17: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:189:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:189:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:189:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:192:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:192:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:192:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:192:21: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:831:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:831:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:831:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:831:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:835:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:835:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:835:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:835:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:837:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:837:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:837:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:837:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1141:5: sparse: sparse: symbol 'rnp_fw_reg_read' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1178:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1178:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1178:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1178:13: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1187:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1187:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1187:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1187:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1201:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1201:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1201:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1201:13: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1212:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1212:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1212:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1212:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1456:5: sparse: sparse: symbol 'rnp_mbx_lldp_all_ports_enable' was not declared. Should it be static? -- >> drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:823:15: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:823:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:823:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:823:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:827:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:827:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:827:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:827:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:831:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:831:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:831:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:831:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:837:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:837:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:837:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:837:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:841:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:841:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:841:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:841:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:847:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:847:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:847:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:847:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:851:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:851:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:851:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:851:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:855:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:855:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:855:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:855:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:861:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:861:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:861:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:861:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:865:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:865:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:865:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:865:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:871:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:871:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:871:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:871:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:875:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:875:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:875:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:875:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:879:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:879:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:879:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:879:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:883:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:883:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:883:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:883:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:887:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:887:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:887:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:887:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:891:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:891:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:891:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:891:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:895:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:895:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:895:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:895:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:918:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:918:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:918:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:918:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:922:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:922:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:922:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:922:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:926:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:926:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:926:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:926:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:931:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:931:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:931:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:931:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:936:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:936:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:936:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:936:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:941:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:941:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:941:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:941:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:946:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:946:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:946:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:946:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:951:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:951:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:951:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:951:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:956:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:956:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ -- drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1035:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1035:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1035:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1039:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1039:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1039:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1039:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1043:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1043:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1043:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1043:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1048:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1048:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1048:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1048:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1054:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1054:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1054:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1054:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1058:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1058:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1058:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1058:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1062:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1062:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1062:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1062:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1066:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1066:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1066:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1066:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1070:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1070:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1070:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1070:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1074:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1074:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1074:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1074:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1078:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1078:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1078:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1078:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1082:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1082:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1082:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1082:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1086:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1086:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1086:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1086:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1090:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1090:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1090:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1090:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1094:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1094:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1094:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1094:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1098:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1098:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1098:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1098:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1105:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1105:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1105:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1105:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1109:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1109:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1109:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1109:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1113:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1113:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1113:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1113:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1117:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1117:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1117:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1117:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1124:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1124:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1124:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1124:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1128:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1128:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1128:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1128:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1132:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1132:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1132:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1132:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1154:31: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1154:31: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1154:31: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1154:31: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1186:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1186:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1186:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1186:21: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1188:33: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1188:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1188:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1188:33: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1192:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1192:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1192:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1192:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1214:5: sparse: sparse: symbol 'rnp_mbx_get_pn_sn' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1312:60: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1312:60: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1312:60: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1312:60: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1531:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1531:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1531:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1531:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1533:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1533:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1533:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1533:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1539:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1539:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1539:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1539:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1540:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1540:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1540:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1540:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1926:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1926:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1926:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1926:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1930:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1930:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1930:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1930:13: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1936:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1936:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1936:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1936:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1938:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1938:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1938:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1938:13: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1943:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1943:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1943:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1943:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1946:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1946:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1946:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1946:9: sparse: got void * -- drivers/net/ethernet/mucse/rnp/rnp_sriov.c:305:6: sparse: sparse: symbol 'check_ari_mode' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnp/rnp_sriov.c:724:40: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_sriov.c:724:40: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sriov.c:724:40: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sriov.c:724:40: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sriov.c:726:43: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sriov.c:726:43: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sriov.c:726:43: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sriov.c:726:43: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sriov.c:898:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sriov.c:898:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sriov.c:898:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sriov.c:898:21: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sriov.c:1140:5: sparse: sparse: symbol 'rnp_msg_post_status_signle_link' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_sriov.c:1290:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_sriov.c:1290:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sriov.c:1290:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sriov.c:1290:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sriov.c:1292:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sriov.c:1292:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sriov.c:1292:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sriov.c:1292:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sriov.c: note: in included file (through include/linux/module.h): include/linux/list.h:83:21: sparse: sparse: self-comparison always evaluates to true include/linux/list.h:83:21: sparse: sparse: self-comparison always evaluates to true -- >> drivers/net/ethernet/mucse/rnp/rnp_n10.c:65:17: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_n10.c:65:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:65:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:65:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:67:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:67:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:67:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:67:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:69:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:69:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:69:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:69:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:82:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:82:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:82:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:82:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:93:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:93:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:93:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:93:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:95:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:95:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:95:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:95:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:97:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:97:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:97:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:97:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:99:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:99:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:99:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:99:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:151:20: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_n10.c:151:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:151:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:151:20: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:158:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:158:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:158:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:158:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:159:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:159:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:159:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:159:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:165:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:165:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:165:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:165:20: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:167:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:167:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:167:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:167:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:122:5: sparse: sparse: symbol 'rnp_eth_set_rar_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:195:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:195:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:195:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:195:20: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:198:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:198:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:198:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:198:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:199:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:199:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:199:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:199:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:179:5: sparse: sparse: symbol 'rnp_eth_clear_rar_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:231:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:231:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:231:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:231:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:233:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:233:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:233:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:233:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:214:5: sparse: sparse: symbol 'rnp_eth_set_vmdq_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:254:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:254:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:254:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:254:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:244:5: sparse: sparse: symbol 'rnp_eth_clear_vmdq_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:328:4: sparse: sparse: symbol 'rnp_addr_list_itr' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:420:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:420:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:420:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:420:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:428:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:428:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:428:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:428:29: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:429:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:429:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:429:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:429:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:359:5: sparse: sparse: symbol 'rnp_eth_update_mc_addr_list_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:447:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:447:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:447:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:447:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:442:6: sparse: sparse: symbol 'rnp_eth_clr_mc_addr_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:474:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:474:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:474:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:474:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:478:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:478:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:478:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:478:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:457:6: sparse: sparse: symbol 'rnp_eth_update_rss_key_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:497:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:497:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:497:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:497:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:501:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:501:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:501:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:501:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:488:6: sparse: sparse: symbol 'rnp_eth_update_rss_table_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:533:16: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:533:16: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:533:16: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:533:16: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:548:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:548:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:548:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:548:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:513:5: sparse: sparse: symbol 'rnp_eth_set_vfta_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:558:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:558:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:558:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:558:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:553:6: sparse: sparse: symbol 'rnp_eth_clr_vfta_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:570:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:570:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:570:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:570:21: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:576:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:576:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:576:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:576:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:579:5: sparse: sparse: symbol 'rnp_layer2_pritologic_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:592:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:592:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:592:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:592:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:597:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:597:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:597:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:597:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:600:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:600:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:600:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:600:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:604:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:604:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:604:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:604:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:584:6: sparse: sparse: symbol 'rnp_eth_set_layer2_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:615:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:615:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:615:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:615:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:610:6: sparse: sparse: symbol 'rnp_eth_clr_layer2_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:623:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:623:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:623:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:623:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:618:6: sparse: sparse: symbol 'rnp_eth_clr_all_layer2_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:626:5: sparse: sparse: symbol 'rnp_tuple5_pritologic_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:631:5: sparse: sparse: symbol 'rnp_tuple5_pritologic_tcam_n10' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnp/rnp_n10.c:667:25: sparse: sparse: cast from restricted __be32 >> drivers/net/ethernet/mucse/rnp/rnp_n10.c:667:25: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:667:25: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnp/rnp_n10.c:667:25: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnp/rnp_n10.c:667:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:667:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:667:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:667:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:673:25: sparse: sparse: cast from restricted __be32 drivers/net/ethernet/mucse/rnp/rnp_n10.c:673:25: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:673:25: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnp/rnp_n10.c:673:25: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnp/rnp_n10.c:673:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:673:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:673:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:673:25: sparse: got void * >> drivers/net/ethernet/mucse/rnp/rnp_n10.c:679:34: sparse: sparse: cast from restricted __be16 >> drivers/net/ethernet/mucse/rnp/rnp_n10.c:679:30: sparse: sparse: invalid assignment: |= drivers/net/ethernet/mucse/rnp/rnp_n10.c:679:30: sparse: left side has type unsigned int drivers/net/ethernet/mucse/rnp/rnp_n10.c:679:30: sparse: right side has type restricted __be16 drivers/net/ethernet/mucse/rnp/rnp_n10.c:683:34: sparse: sparse: cast from restricted __be16 >> drivers/net/ethernet/mucse/rnp/rnp_n10.c:683:34: sparse: sparse: restricted __be16 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_n10.c:688:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:688:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:688:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:688:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:712:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:712:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:712:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:712:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:718:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:718:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:718:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:718:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:722:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:722:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:722:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:722:33: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:727:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:727:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:727:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:727:33: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:743:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:743:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:743:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:743:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:745:25: sparse: sparse: cast from restricted __be32 drivers/net/ethernet/mucse/rnp/rnp_n10.c:745:25: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:745:25: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnp/rnp_n10.c:745:25: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnp/rnp_n10.c:745:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:745:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:745:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:745:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:747:25: sparse: sparse: cast from restricted __be32 drivers/net/ethernet/mucse/rnp/rnp_n10.c:747:25: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:747:25: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnp/rnp_n10.c:747:25: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnp/rnp_n10.c:747:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:747:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:747:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:747:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:750:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:750:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:750:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:750:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:751:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:751:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:751:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:751:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:754:25: sparse: sparse: cast from restricted __be32 drivers/net/ethernet/mucse/rnp/rnp_n10.c:754:25: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:754:25: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnp/rnp_n10.c:754:25: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnp/rnp_n10.c:754:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:754:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:754:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:754:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:756:25: sparse: sparse: cast from restricted __be32 drivers/net/ethernet/mucse/rnp/rnp_n10.c:756:25: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:756:25: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnp/rnp_n10.c:756:25: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnp/rnp_n10.c:756:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:756:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:756:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:756:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:759:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:759:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:759:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:759:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:760:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:760:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:760:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:760:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:763:34: sparse: sparse: cast from restricted __be16 drivers/net/ethernet/mucse/rnp/rnp_n10.c:763:34: sparse: sparse: restricted __be16 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_n10.c:764:39: sparse: sparse: cast from restricted __be16 drivers/net/ethernet/mucse/rnp/rnp_n10.c:764:39: sparse: sparse: restricted __be16 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_n10.c:769:34: sparse: sparse: cast from restricted __be16 drivers/net/ethernet/mucse/rnp/rnp_n10.c:769:30: sparse: sparse: invalid assignment: |= drivers/net/ethernet/mucse/rnp/rnp_n10.c:769:30: sparse: left side has type unsigned int drivers/net/ethernet/mucse/rnp/rnp_n10.c:769:30: sparse: right side has type restricted __be16 drivers/net/ethernet/mucse/rnp/rnp_n10.c:771:34: sparse: sparse: cast from restricted __be16 drivers/net/ethernet/mucse/rnp/rnp_n10.c:770:35: sparse: sparse: invalid assignment: |= drivers/net/ethernet/mucse/rnp/rnp_n10.c:770:35: sparse: left side has type unsigned int drivers/net/ethernet/mucse/rnp/rnp_n10.c:770:35: sparse: right side has type restricted __be16 drivers/net/ethernet/mucse/rnp/rnp_n10.c:776:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:776:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:776:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:776:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:777:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:777:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:777:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:777:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:780:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:780:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:780:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:780:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:781:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:781:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:781:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:781:25: sparse: got void * -- drivers/net/ethernet/mucse/rnp/rnp_n10.c:2109:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2109:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2109:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2109:32: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2117:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2117:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2117:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2117:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2120:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2120:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2120:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2120:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2121:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2121:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2121:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2121:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2122:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2122:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2122:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2122:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2123:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2123:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2123:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2123:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2124:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2124:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2124:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2124:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2125:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2125:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2125:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2125:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2126:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2126:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2126:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2126:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2130:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2130:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2130:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2130:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2132:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2132:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2132:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2132:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2133:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2133:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2133:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2133:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2135:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2135:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2135:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2135:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2137:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2137:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2137:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2137:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2139:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2139:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2139:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2139:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2141:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2141:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2141:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2141:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2143:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2143:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2143:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2143:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2145:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2145:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2145:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2145:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2147:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2147:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2147:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2147:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2149:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2149:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2149:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2149:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2151:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2151:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2151:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2151:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2153:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2153:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2153:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2153:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2155:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2155:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2155:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2155:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2158:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2158:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2158:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2158:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2160:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2160:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2160:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2160:23: sparse: got void * >> drivers/net/ethernet/mucse/rnp/rnp_n10.c:2196:24: sparse: sparse: symbol 'rnp10_gstrings_net_stats' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:2805:5: sparse: sparse: symbol 'rnp10_get_link_ksettings' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:3003:5: sparse: sparse: symbol 'rnp10_set_link_ksettings' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:3246:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:3246:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:3246:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:3246:32: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:3249:5: sparse: sparse: symbol 'rnp_nway_reset' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:3269:6: sparse: sparse: symbol 'rnp_device_supports_autoneg_fc' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:3587:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:3587:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:3587:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:3587:20: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:3674:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:3674:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:3674:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:3674:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:3679:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:3679:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:3679:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:3679:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:3720:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:3720:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:3720:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:3720:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:3826:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:3826:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:3826:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:3826:29: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:3827:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:3827:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:3827:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:3827:29: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:3889:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:3889:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:3889:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:3889:29: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:3890:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:3890:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:3890:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:3890:29: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:3950:6: sparse: sparse: symbol 'rnp_set_ethtool_hw_ops_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:3960:5: sparse: sparse: symbol 'rnp_get_thermal_sensor_data_hw_ops_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:3976:5: sparse: sparse: symbol 'rnp_init_thermal_sensor_thresh_hw_ops_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:3990:5: sparse: sparse: symbol 'rnp_phy_read_reg_hw_ops_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:4002:5: sparse: sparse: symbol 'rnp_phy_write_reg_hw_ops_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:4012:6: sparse: sparse: symbol 'rnp_set_vf_vlan_mode_hw_ops_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:4086:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4086:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4086:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4086:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4086:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4086:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4086:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4086:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4090:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4090:33: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4090:33: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4090:33: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4099:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4099:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4099:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4099:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4100:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4100:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4100:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4100:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4103:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4103:33: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4103:33: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4103:33: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4103:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4103:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4103:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4103:33: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4107:41: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4107:41: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4107:41: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4107:41: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4114:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4114:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4114:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4114:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4118:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4118:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4118:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4118:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4118:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4118:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4118:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4118:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4121:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4121:33: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4121:33: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4121:33: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4128:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4128:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4128:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4128:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4136:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4136:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ -- >> drivers/net/ethernet/mucse/rnp/rnp_main.c:166:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:166:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:166:9: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:175:6: sparse: sparse: symbol 'rnp_unmap_and_free_tx_resource' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnp/rnp_main.c:202:20: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_main.c:202:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:203:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:203:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ >> drivers/net/ethernet/mucse/rnp/rnp_main.c:602:29: sparse: sparse: restricted __le16 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_main.c:613:64: sparse: sparse: restricted __le16 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_main.c:702:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_main.c:702:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:670:5: sparse: sparse: symbol 'rnp_rx_ring_reinit' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:2021:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2021:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2012:6: sparse: sparse: symbol 'rnp_write_eitr_rx' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:2225:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2225:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2236:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2236:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2272:49: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2272:49: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2293:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2293:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2311:41: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2311:41: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2392:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:2392:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:2392:9: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2426:17: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:2426:17: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:2426:17: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2469:17: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:2469:17: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:2469:17: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2550:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2550:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2550:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2550:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2551:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2551:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2551:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2551:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2591:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2591:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2591:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2591:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2593:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2593:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2593:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2593:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2595:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2595:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2595:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2595:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2599:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2599:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2599:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2599:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2602:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2602:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2602:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2602:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2605:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2605:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2605:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2605:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2612:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2612:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2612:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2612:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2618:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2618:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2618:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2618:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2620:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2620:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2620:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2620:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2659:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2659:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2659:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2659:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2661:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2661:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2661:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2661:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2671:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2671:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2671:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2671:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2685:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2685:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2685:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2685:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2687:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2687:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2687:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2687:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2689:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2689:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2689:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2689:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2693:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2693:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2693:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2693:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2697:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2697:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2697:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2697:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2700:17: sparse: sparse: cast removes address space '__iomem' of expression -- drivers/net/ethernet/mucse/rnp/rnp_main.c:2728:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2728:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2730:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2730:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2730:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2730:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2752:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2752:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2752:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2752:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2752:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2752:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2752:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2752:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2833:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2833:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2833:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2833:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2840:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2840:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2840:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2840:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2842:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2842:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2842:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2842:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3146:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:3146:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:3146:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:3146:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3147:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:3147:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:3147:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:3147:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3148:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:3148:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:3148:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:3148:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3176:6: sparse: sparse: symbol 'rnp_vlan_stags_flag' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:3284:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:3284:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:3284:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:3284:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3601:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:3601:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:3601:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:3601:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3580:5: sparse: sparse: symbol 'rnp_xmit_nop_frame_ring' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:3662:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:3662:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:3662:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:3662:32: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3712:42: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:3712:42: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:3712:42: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:3712:42: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3722:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:3722:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:3722:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:3722:32: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3728:41: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:3728:41: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:3728:41: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:3728:41: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3738:48: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:3738:48: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:3738:48: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:3738:48: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3920:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:3920:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:3920:9: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3923:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:3923:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:3923:9: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:4017:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:4017:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:4017:9: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:4020:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:4020:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:4020:9: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:4052:24: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:4052:24: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:4052:24: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:4052:24: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:4237:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:4237:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:4237:9: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:4305:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:4305:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:4305:9: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:4358:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:4358:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:4358:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:4358:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:4842:6: sparse: sparse: symbol 'rnp_service_timer' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:4950:6: sparse: sparse: symbol 'rnp_service_task' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:5384:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:5384:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:5384:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:5384:17: sparse: got void * >> drivers/net/ethernet/mucse/rnp/rnp_main.c:5515:42: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __be16 [usertype] priv_tags @@ got int @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:5515:42: sparse: expected restricted __be16 [usertype] priv_tags drivers/net/ethernet/mucse/rnp/rnp_main.c:5515:42: sparse: got int drivers/net/ethernet/mucse/rnp/rnp_main.c:5972:5: sparse: sparse: symbol 'rnp_delete_knode' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnp/rnp_main.c:6036:21: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __be32 [usertype] off @@ got int off @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:6036:21: sparse: expected restricted __be32 [usertype] off drivers/net/ethernet/mucse/rnp/rnp_main.c:6036:21: sparse: got int off >> drivers/net/ethernet/mucse/rnp/rnp_main.c:6044:29: sparse: sparse: restricted __be32 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_main.c:6061:5: sparse: sparse: symbol 'rnp_config_knode' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:6120:5: sparse: sparse: symbol 'rnp_setup_tc_cls_u32' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:6197:6: sparse: sparse: symbol 'rnp_do_reset' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:6348:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:6348:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:6348:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:6348:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:6348:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:6348:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:6348:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:6348:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:6352:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:6352:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:6352:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:6352:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:6352:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:6352:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:6352:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:6352:25: sparse: got void * >> drivers/net/ethernet/mucse/rnp/rnp_main.c:6418:29: sparse: sparse: symbol 'rnp10_netdev_ops' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:6452:6: sparse: sparse: symbol 'rnp_assign_netdev_ops' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:6609:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:6609:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:6609:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:6609:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:6628:5: sparse: sparse: symbol 'rnp_can_rpu_start' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:6692:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:6692:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:6692:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:6692:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:6713:31: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:6713:31: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:6713:31: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:6713:31: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:6737:31: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:6737:31: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:6737:31: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:6737:31: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:7010:17: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:7010:17: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:7010:17: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:412:31: sparse: sparse: restricted __le16 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_main.c:435:33: sparse: sparse: restricted __le16 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_main.c: note: in included file (through drivers/net/ethernet/mucse/rnp/rnp_tc_u32_parse.h): >> drivers/net/ethernet/mucse/rnp/rnp.h:1143:13: sparse: sparse: cast from restricted __le16 >> drivers/net/ethernet/mucse/rnp/rnp.h:1143:13: sparse: sparse: restricted __le16 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_main.c:470:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:470:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:470:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:470:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: got void * vim +/__iomem +15 drivers/net/ethernet/mucse/rnp/rnp_pcs.c 7 8 static u32 rnp_read_pcs(struct rnp_hw *hw, int num, u32 addr) 9 { 10 u32 reg_hi, reg_lo; 11 u32 value; 12 13 reg_hi = addr >> 8; 14 reg_lo = (addr & 0xff) << 2; > 15 wr32(hw, RNP_PCS_BASE(num) + (0xff << 2), reg_hi); > 16 value = rd32(hw, RNP_PCS_BASE(num) + reg_lo); 17 return value; 18 } 19 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3269/10596] drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3942:23: sparse: sparse: incorrect type in assignment (different address spaces)
by kernel test robot 08 Jul '24

08 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 3b421b6002e287e38790cbdad4a3e08baf7e1bc4 commit: 86b90dc581ce2fcc6b724b4ffaea6103122a4b68 [3269/10596] iommu/arm-smmu-v3: Add support for ECMDQ register mode config: arm64-randconfig-r131-20240707 (https://download.01.org/0day-ci/archive/20240708/202407080437.gW9dgdMn-lkp@…) compiler: clang version 19.0.0git (https://github.com/llvm/llvm-project a0c6b8aef853eedaa0980f07c0a502a5a8a9740e) reproduce: (https://download.01.org/0day-ci/archive/20240708/202407080437.gW9dgdMn-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407080437.gW9dgdMn-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) >> drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3942:23: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected struct arm_smmu_ecmdq *ecmdq @@ got struct arm_smmu_ecmdq [noderef] __percpu * @@ drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3942:23: sparse: expected struct arm_smmu_ecmdq *ecmdq drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3942:23: sparse: got struct arm_smmu_ecmdq [noderef] __percpu * drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3947:58: sparse: sparse: incorrect type in initializer (different address spaces) @@ expected void const [noderef] __percpu *__vpp_verify @@ got struct arm_smmu_ecmdq * @@ drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3947:58: sparse: expected void const [noderef] __percpu *__vpp_verify drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3947:58: sparse: got struct arm_smmu_ecmdq * >> drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3973:45: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const *addr @@ got void [noderef] __iomem *base @@ drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3973:45: sparse: expected void const *addr drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3973:45: sparse: got void [noderef] __iomem *base drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c: note: in included file (through arch/arm64/include/asm/atomic.h, include/linux/atomic.h, include/asm-generic/bitops/atomic.h, ...): arch/arm64/include/asm/cmpxchg.h:168:1: sparse: sparse: cast truncates bits from constant value (ffffffff80000000 becomes 0) arch/arm64/include/asm/cmpxchg.h:168:1: sparse: sparse: cast truncates bits from constant value (ffffffff80000000 becomes 0) vim +3942 drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c 3934 3935 #ifdef CONFIG_ARM_SMMU_V3_ECMDQ 3936 static int arm_smmu_ecmdq_layout(struct arm_smmu_device *smmu) 3937 { 3938 int cpu; 3939 struct arm_smmu_ecmdq *ecmdq; 3940 3941 if (num_possible_cpus() <= smmu->nr_ecmdq) { > 3942 ecmdq = devm_alloc_percpu(smmu->dev, *ecmdq); 3943 if (!ecmdq) 3944 return -ENOMEM; 3945 3946 for_each_possible_cpu(cpu) 3947 *per_cpu_ptr(smmu->ecmdq, cpu) = per_cpu_ptr(ecmdq, cpu); 3948 3949 /* A core requires at most one ECMDQ */ 3950 smmu->nr_ecmdq = num_possible_cpus(); 3951 3952 return 0; 3953 } 3954 3955 return -ENOSPC; 3956 } 3957 3958 static int arm_smmu_ecmdq_probe(struct arm_smmu_device *smmu) 3959 { 3960 int ret, cpu; 3961 u32 i, nump, numq, gap; 3962 u32 reg, shift_increment; 3963 u64 addr, smmu_dma_base; 3964 void __iomem *cp_regs, *cp_base; 3965 3966 /* IDR6 */ 3967 reg = readl_relaxed(smmu->base + ARM_SMMU_IDR6); 3968 nump = 1 << FIELD_GET(IDR6_LOG2NUMP, reg); 3969 numq = 1 << FIELD_GET(IDR6_LOG2NUMQ, reg); 3970 smmu->nr_ecmdq = nump * numq; 3971 gap = ECMDQ_CP_RRESET_SIZE >> FIELD_GET(IDR6_LOG2NUMQ, reg); 3972 > 3973 smmu_dma_base = (vmalloc_to_pfn(smmu->base) << PAGE_SHIFT); 3974 cp_regs = ioremap(smmu_dma_base + ARM_SMMU_ECMDQ_CP_BASE, PAGE_SIZE); 3975 if (!cp_regs) 3976 return -ENOMEM; 3977 3978 for (i = 0; i < nump; i++) { 3979 u64 val, pre_addr; 3980 3981 val = readq_relaxed(cp_regs + 32 * i); 3982 if (!(val & ECMDQ_CP_PRESET)) { 3983 iounmap(cp_regs); 3984 dev_err(smmu->dev, "ecmdq control page %u is memory mode\n", i); 3985 return -EFAULT; 3986 } 3987 3988 if (i && ((val & ECMDQ_CP_ADDR) != (pre_addr + ECMDQ_CP_RRESET_SIZE))) { 3989 iounmap(cp_regs); 3990 dev_err(smmu->dev, "ecmdq_cp memory region is not contiguous\n"); 3991 return -EFAULT; 3992 } 3993 3994 pre_addr = val & ECMDQ_CP_ADDR; 3995 } 3996 3997 addr = readl_relaxed(cp_regs) & ECMDQ_CP_ADDR; 3998 iounmap(cp_regs); 3999 4000 cp_base = devm_ioremap(smmu->dev, smmu_dma_base + addr, ECMDQ_CP_RRESET_SIZE * nump); 4001 if (!cp_base) 4002 return -ENOMEM; 4003 4004 smmu->ecmdq = devm_alloc_percpu(smmu->dev, struct arm_smmu_ecmdq *); 4005 if (!smmu->ecmdq) 4006 return -ENOMEM; 4007 4008 ret = arm_smmu_ecmdq_layout(smmu); 4009 if (ret) 4010 return ret; 4011 4012 shift_increment = order_base_2(num_possible_cpus() / smmu->nr_ecmdq); 4013 4014 addr = 0; 4015 for_each_possible_cpu(cpu) { 4016 struct arm_smmu_ecmdq *ecmdq; 4017 struct arm_smmu_queue *q; 4018 4019 ecmdq = *per_cpu_ptr(smmu->ecmdq, cpu); 4020 ecmdq->base = cp_base + addr; 4021 4022 q = &ecmdq->cmdq.q; 4023 4024 q->llq.max_n_shift = ECMDQ_MAX_SZ_SHIFT + shift_increment; 4025 ret = arm_smmu_init_one_queue(smmu, q, ecmdq->base, ARM_SMMU_ECMDQ_PROD, 4026 ARM_SMMU_ECMDQ_CONS, CMDQ_ENT_DWORDS, "ecmdq"); 4027 if (ret) 4028 return ret; 4029 4030 q->ecmdq_prod = ECMDQ_PROD_EN; 4031 rwlock_init(&q->ecmdq_lock); 4032 4033 ret = arm_smmu_ecmdq_init(&ecmdq->cmdq); 4034 if (ret) { 4035 dev_err(smmu->dev, "ecmdq[%d] init failed\n", i); 4036 return ret; 4037 } 4038 4039 addr += gap; 4040 } 4041 4042 return 0; 4043 } 4044 #endif 4045 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3778/10596] drivers/video/fbdev/ls2k500sfb.c:322:49: sparse: sparse: incorrect type in argument 2 (different address spaces)
by kernel test robot 08 Jul '24

08 Jul '24

Hi Xianglai, First bad commit (maybe != root cause): tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 3b421b6002e287e38790cbdad4a3e08baf7e1bc4 commit: 351aa968603500987e891b20cc97a677602ae7c2 [3778/10596] loongarch/kernel: Fix loongarch compilation error config: loongarch-randconfig-r132-20240707 (https://download.01.org/0day-ci/archive/20240708/202407080311.6JOR7V5E-lkp@…) compiler: loongarch64-linux-gcc (GCC) 13.2.0 reproduce: (https://download.01.org/0day-ci/archive/20240708/202407080311.6JOR7V5E-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407080311.6JOR7V5E-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) drivers/video/fbdev/ls2k500sfb.c:144:27: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected void *static p @@ got void [noderef] __iomem * @@ drivers/video/fbdev/ls2k500sfb.c:144:27: sparse: expected void *static p drivers/video/fbdev/ls2k500sfb.c:144:27: sparse: got void [noderef] __iomem * drivers/video/fbdev/ls2k500sfb.c:146:30: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void *static p @@ drivers/video/fbdev/ls2k500sfb.c:146:30: sparse: expected void const volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:146:30: sparse: got void *static p drivers/video/fbdev/ls2k500sfb.c:201:36: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void *static p @@ drivers/video/fbdev/ls2k500sfb.c:201:36: sparse: expected void volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:201:36: sparse: got void *static p drivers/video/fbdev/ls2k500sfb.c:203:37: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/video/fbdev/ls2k500sfb.c:203:37: sparse: expected void const volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:203:37: sparse: got void * drivers/video/fbdev/ls2k500sfb.c:256:13: sparse: sparse: symbol 'ls2k500sfb_interrupt' was not declared. Should it be static? drivers/video/fbdev/ls2k500sfb.c:322:22: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/video/fbdev/ls2k500sfb.c:322:22: sparse: expected void const volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:322:22: sparse: got void * >> drivers/video/fbdev/ls2k500sfb.c:322:49: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/video/fbdev/ls2k500sfb.c:322:49: sparse: expected void volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:322:49: sparse: got void * drivers/video/fbdev/ls2k500sfb.c:323:22: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/video/fbdev/ls2k500sfb.c:323:22: sparse: expected void const volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:323:22: sparse: got void * drivers/video/fbdev/ls2k500sfb.c:323:53: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/video/fbdev/ls2k500sfb.c:323:53: sparse: expected void volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:323:53: sparse: got void * drivers/video/fbdev/ls2k500sfb.c:324:22: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/video/fbdev/ls2k500sfb.c:324:22: sparse: expected void const volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:324:22: sparse: got void * drivers/video/fbdev/ls2k500sfb.c:324:53: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/video/fbdev/ls2k500sfb.c:324:53: sparse: expected void volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:324:53: sparse: got void * drivers/video/fbdev/ls2k500sfb.c:325:22: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/video/fbdev/ls2k500sfb.c:325:22: sparse: expected void const volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:325:22: sparse: got void * drivers/video/fbdev/ls2k500sfb.c:325:51: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/video/fbdev/ls2k500sfb.c:325:51: sparse: expected void volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:325:51: sparse: got void * drivers/video/fbdev/ls2k500sfb.c:458:28: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got char *preg @@ drivers/video/fbdev/ls2k500sfb.c:458:28: sparse: expected void const volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:458:28: sparse: got char *preg drivers/video/fbdev/ls2k500sfb.c:459:32: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got char *preg @@ drivers/video/fbdev/ls2k500sfb.c:459:32: sparse: expected void volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:459:32: sparse: got char *preg drivers/video/fbdev/ls2k500sfb.c:571:19: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected char *penv @@ got void [noderef] __iomem * @@ drivers/video/fbdev/ls2k500sfb.c:571:19: sparse: expected char *penv drivers/video/fbdev/ls2k500sfb.c:571:19: sparse: got void [noderef] __iomem * drivers/video/fbdev/ls2k500sfb.c:572:19: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected char *preg @@ got void [noderef] __iomem * @@ drivers/video/fbdev/ls2k500sfb.c:572:19: sparse: expected char *preg drivers/video/fbdev/ls2k500sfb.c:572:19: sparse: got void [noderef] __iomem * drivers/video/fbdev/ls2k500sfb.c:674:14: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected char *penv @@ got void [noderef] __iomem * @@ drivers/video/fbdev/ls2k500sfb.c:674:14: sparse: expected char *penv drivers/video/fbdev/ls2k500sfb.c:674:14: sparse: got void [noderef] __iomem * vim +322 drivers/video/fbdev/ls2k500sfb.c 8248d42b7c5f433 Chong Qiao 2023-12-11 113 4fbeaa84ef36adc Chong Qiao 2023-12-11 114 static unsigned long event_jiffies; 8248d42b7c5f433 Chong Qiao 2023-12-11 115 static void ls2k500sfb_events_fn(struct work_struct *work) 8248d42b7c5f433 Chong Qiao 2023-12-11 116 { 8248d42b7c5f433 Chong Qiao 2023-12-11 117 struct ls2k500sfb_struct *priv = container_of(work, struct ls2k500sfb_struct, work); 8248d42b7c5f433 Chong Qiao 2023-12-11 118 struct pci_dev *pdev = priv->dev; 8248d42b7c5f433 Chong Qiao 2023-12-11 119 struct pci_dev *ppdev = pdev->bus->self; 8248d42b7c5f433 Chong Qiao 2023-12-11 120 uint32_t i, d, timeout, retry = 0; 8248d42b7c5f433 Chong Qiao 2023-12-11 121 static const uint32_t index[] = { 8248d42b7c5f433 Chong Qiao 2023-12-11 122 0x10, 0x14, 0x18, 0x1c, 0x20, 0x24, 0x30, 0x3c, 0x54, 0x58, 0x78, 0x7c, 0x80, 4 8248d42b7c5f433 Chong Qiao 2023-12-11 123 }; 8248d42b7c5f433 Chong Qiao 2023-12-11 124 8248d42b7c5f433 Chong Qiao 2023-12-11 125 static uint32_t data[sizeof(index) / 4]; 8248d42b7c5f433 Chong Qiao 2023-12-11 126 static const uint32_t cindex[] = { 0x10, 0x3c, 4 }; 8248d42b7c5f433 Chong Qiao 2023-12-11 127 8248d42b7c5f433 Chong Qiao 2023-12-11 128 static uint32_t cdata[sizeof(cindex) / 4]; 8248d42b7c5f433 Chong Qiao 2023-12-11 129 static uint32_t d80c, d71c, ctrl; 8248d42b7c5f433 Chong Qiao 2023-12-11 130 static void *p; 8248d42b7c5f433 Chong Qiao 2023-12-11 131 8248d42b7c5f433 Chong Qiao 2023-12-11 132 if (!priv->running) { 8248d42b7c5f433 Chong Qiao 2023-12-11 133 for (i = 0; i < ARRAY_SIZE(index); i++) 8248d42b7c5f433 Chong Qiao 2023-12-11 134 pci_read_config_dword(ppdev, index[i], &data[i]); 8248d42b7c5f433 Chong Qiao 2023-12-11 135 for (i = 0; i < ARRAY_SIZE(cindex); i++) 8248d42b7c5f433 Chong Qiao 2023-12-11 136 pci_read_config_dword(pdev, cindex[i], &cdata[i]); 8248d42b7c5f433 Chong Qiao 2023-12-11 137 if (ppdev->vendor == 0x14) { 8248d42b7c5f433 Chong Qiao 2023-12-11 138 pci_read_config_dword(ppdev, 0x80c, &d80c); 8248d42b7c5f433 Chong Qiao 2023-12-11 139 d80c = (d80c & ~(3 << 17)) | (1 << 17); 8248d42b7c5f433 Chong Qiao 2023-12-11 140 8248d42b7c5f433 Chong Qiao 2023-12-11 141 pci_read_config_dword(ppdev, 0x71c, &d71c); 8248d42b7c5f433 Chong Qiao 2023-12-11 142 d71c |= 1 << 26; 8248d42b7c5f433 Chong Qiao 2023-12-11 143 8248d42b7c5f433 Chong Qiao 2023-12-11 144 p = pci_iomap(ppdev, 0, 0x100); 8248d42b7c5f433 Chong Qiao 2023-12-11 145 } 8248d42b7c5f433 Chong Qiao 2023-12-11 146 ctrl = readl(p); 8248d42b7c5f433 Chong Qiao 2023-12-11 147 return; 8248d42b7c5f433 Chong Qiao 2023-12-11 148 } 8248d42b7c5f433 Chong Qiao 2023-12-11 149 local_bh_disable(); 8248d42b7c5f433 Chong Qiao 2023-12-11 150 pciebreak_smp_send_stop(100); 8248d42b7c5f433 Chong Qiao 2023-12-11 151 wmb(); /* flush all write before we disable pcie window */ 8248d42b7c5f433 Chong Qiao 2023-12-11 152 pci_write_config_dword(ppdev, 0x18, 0); 8248d42b7c5f433 Chong Qiao 2023-12-11 153 pci_write_config_dword(ppdev, 0x1c, 0); 8248d42b7c5f433 Chong Qiao 2023-12-11 154 pci_write_config_dword(ppdev, 0x20, 0); 4fbeaa84ef36adc Chong Qiao 2023-12-11 155 event_jiffies = jiffies; 8248d42b7c5f433 Chong Qiao 2023-12-11 156 atomic_set(&waiting_for_pciebreak_ipi, 0); 8248d42b7c5f433 Chong Qiao 2023-12-11 157 wmb(); /* flush all write after change pcie window */ 8248d42b7c5f433 Chong Qiao 2023-12-11 158 local_bh_enable(); 8248d42b7c5f433 Chong Qiao 2023-12-11 159 if (ppdev->vendor == 0x14) { 8248d42b7c5f433 Chong Qiao 2023-12-11 160 timeout = 10000; 8248d42b7c5f433 Chong Qiao 2023-12-11 161 while (timeout) { 8248d42b7c5f433 Chong Qiao 2023-12-11 162 pci_read_config_dword(ppdev, 0x10, &d); 8248d42b7c5f433 Chong Qiao 2023-12-11 163 d &= ~0xf; 8248d42b7c5f433 Chong Qiao 2023-12-11 164 if (!d) 8248d42b7c5f433 Chong Qiao 2023-12-11 165 break; 8248d42b7c5f433 Chong Qiao 2023-12-11 166 mdelay(1); 8248d42b7c5f433 Chong Qiao 2023-12-11 167 timeout--; 8248d42b7c5f433 Chong Qiao 2023-12-11 168 }; 8248d42b7c5f433 Chong Qiao 2023-12-11 169 if (!timeout) 8248d42b7c5f433 Chong Qiao 2023-12-11 170 pr_info("bar not clear 0\n"); 8248d42b7c5f433 Chong Qiao 2023-12-11 171 8248d42b7c5f433 Chong Qiao 2023-12-11 172 pci_read_config_dword(ppdev, 0x0, &d); 8248d42b7c5f433 Chong Qiao 2023-12-11 173 pr_info("pcie port deviceid=0x%x recover begin\n", d); 8248d42b7c5f433 Chong Qiao 2023-12-11 174 retrain: 8248d42b7c5f433 Chong Qiao 2023-12-11 175 while (1) { 8248d42b7c5f433 Chong Qiao 2023-12-11 176 pci_write_config_dword(ppdev, index[0], data[0]); 8248d42b7c5f433 Chong Qiao 2023-12-11 177 pci_read_config_dword(ppdev, index[0], &d); 8248d42b7c5f433 Chong Qiao 2023-12-11 178 d &= ~0xf; 8248d42b7c5f433 Chong Qiao 2023-12-11 179 if (d) 8248d42b7c5f433 Chong Qiao 2023-12-11 180 break; 8248d42b7c5f433 Chong Qiao 2023-12-11 181 mdelay(1); 8248d42b7c5f433 Chong Qiao 2023-12-11 182 } 8248d42b7c5f433 Chong Qiao 2023-12-11 183 8248d42b7c5f433 Chong Qiao 2023-12-11 184 while (1) { 8248d42b7c5f433 Chong Qiao 2023-12-11 185 for (i = 0; i < ARRAY_SIZE(index); i++) { 8248d42b7c5f433 Chong Qiao 2023-12-11 186 if (index[i] != 0x18 && index[i] != 0x1c && index[i] != 0x20) 8248d42b7c5f433 Chong Qiao 2023-12-11 187 pci_write_config_dword(ppdev, index[i], data[i]); 8248d42b7c5f433 Chong Qiao 2023-12-11 188 } 8248d42b7c5f433 Chong Qiao 2023-12-11 189 pci_write_config_dword(ppdev, 0x80c, d80c); 8248d42b7c5f433 Chong Qiao 2023-12-11 190 pci_write_config_dword(ppdev, 0x71c, d71c); 8248d42b7c5f433 Chong Qiao 2023-12-11 191 8248d42b7c5f433 Chong Qiao 2023-12-11 192 pci_read_config_dword(ppdev, 0x10, &d); 8248d42b7c5f433 Chong Qiao 2023-12-11 193 d &= ~0xf; 8248d42b7c5f433 Chong Qiao 2023-12-11 194 if (d) 8248d42b7c5f433 Chong Qiao 2023-12-11 195 break; 8248d42b7c5f433 Chong Qiao 2023-12-11 196 mdelay(1); 8248d42b7c5f433 Chong Qiao 2023-12-11 197 } 8248d42b7c5f433 Chong Qiao 2023-12-11 198 8248d42b7c5f433 Chong Qiao 2023-12-11 199 timeout = 10000; 8248d42b7c5f433 Chong Qiao 2023-12-11 200 8248d42b7c5f433 Chong Qiao 2023-12-11 @201 writel(ctrl | 0x8, p); 8248d42b7c5f433 Chong Qiao 2023-12-11 202 while (1) { 8248d42b7c5f433 Chong Qiao 2023-12-11 203 d = readl(p + 0xc); 8248d42b7c5f433 Chong Qiao 2023-12-11 204 if ((d & 0x11) == 0x11) { 8248d42b7c5f433 Chong Qiao 2023-12-11 205 break; 8248d42b7c5f433 Chong Qiao 2023-12-11 206 } else if (!timeout) { 8248d42b7c5f433 Chong Qiao 2023-12-11 207 pr_info("pcie train failed status=0x%x\n", d); 8248d42b7c5f433 Chong Qiao 2023-12-11 208 goto out; 8248d42b7c5f433 Chong Qiao 2023-12-11 209 } 8248d42b7c5f433 Chong Qiao 2023-12-11 210 mdelay(1); 8248d42b7c5f433 Chong Qiao 2023-12-11 211 timeout--; 8248d42b7c5f433 Chong Qiao 2023-12-11 212 } 8248d42b7c5f433 Chong Qiao 2023-12-11 213 8248d42b7c5f433 Chong Qiao 2023-12-11 214 8248d42b7c5f433 Chong Qiao 2023-12-11 215 pr_info("pcie recovered done\n"); 8248d42b7c5f433 Chong Qiao 2023-12-11 216 8248d42b7c5f433 Chong Qiao 2023-12-11 217 if (!retry) { 8248d42b7c5f433 Chong Qiao 2023-12-11 218 /*wait u-boot ddr config */ 8248d42b7c5f433 Chong Qiao 2023-12-11 219 set_current_state(TASK_UNINTERRUPTIBLE); 8248d42b7c5f433 Chong Qiao 2023-12-11 220 schedule_timeout(HZ*resetbootwait); 8248d42b7c5f433 Chong Qiao 2023-12-11 221 set_current_state(TASK_RUNNING); 8248d42b7c5f433 Chong Qiao 2023-12-11 222 pci_read_config_dword(ppdev, 0x10, &d); 8248d42b7c5f433 Chong Qiao 2023-12-11 223 d &= ~0xf; 8248d42b7c5f433 Chong Qiao 2023-12-11 224 if (!d) { 8248d42b7c5f433 Chong Qiao 2023-12-11 225 retry = 1; 8248d42b7c5f433 Chong Qiao 2023-12-11 226 goto retrain; 8248d42b7c5f433 Chong Qiao 2023-12-11 227 } 8248d42b7c5f433 Chong Qiao 2023-12-11 228 } 8248d42b7c5f433 Chong Qiao 2023-12-11 229 } else { 8248d42b7c5f433 Chong Qiao 2023-12-11 230 set_current_state(TASK_UNINTERRUPTIBLE); 8248d42b7c5f433 Chong Qiao 2023-12-11 231 schedule_timeout(HZ*resetbootwait); 8248d42b7c5f433 Chong Qiao 2023-12-11 232 set_current_state(TASK_RUNNING); 8248d42b7c5f433 Chong Qiao 2023-12-11 233 } 8248d42b7c5f433 Chong Qiao 2023-12-11 234 local_bh_disable(); 8248d42b7c5f433 Chong Qiao 2023-12-11 235 pciebreak_smp_send_stop(10000); 8248d42b7c5f433 Chong Qiao 2023-12-11 236 wmb(); /* flush all write before we update pcie window */ 8248d42b7c5f433 Chong Qiao 2023-12-11 237 for (i = 0; i < ARRAY_SIZE(index); i++) 8248d42b7c5f433 Chong Qiao 2023-12-11 238 pci_write_config_dword(ppdev, index[i], data[i]); 8248d42b7c5f433 Chong Qiao 2023-12-11 239 8248d42b7c5f433 Chong Qiao 2023-12-11 240 for (i = 0; i < ARRAY_SIZE(cindex); i++) 8248d42b7c5f433 Chong Qiao 2023-12-11 241 pci_write_config_dword(pdev, cindex[i], cdata[i]); 8248d42b7c5f433 Chong Qiao 2023-12-11 242 atomic_set(&waiting_for_pciebreak_ipi, 0); 8248d42b7c5f433 Chong Qiao 2023-12-11 243 wmb(); /* flush all write after we update pcie window */ 8248d42b7c5f433 Chong Qiao 2023-12-11 244 local_bh_enable(); 8248d42b7c5f433 Chong Qiao 2023-12-11 245 8248d42b7c5f433 Chong Qiao 2023-12-11 246 8248d42b7c5f433 Chong Qiao 2023-12-11 247 pr_info("redraw console\n"); 8248d42b7c5f433 Chong Qiao 2023-12-11 248 8248d42b7c5f433 Chong Qiao 2023-12-11 249 saved_console = fg_console; 8248d42b7c5f433 Chong Qiao 2023-12-11 250 switch_console(fg_console > 0?fg_console - 1 : fg_console + 1); 8248d42b7c5f433 Chong Qiao 2023-12-11 251 queue_delayed_work(priv->wq, &priv->redraw_work, HZ); 8248d42b7c5f433 Chong Qiao 2023-12-11 252 out: 8248d42b7c5f433 Chong Qiao 2023-12-11 253 priv->running = 0; 8248d42b7c5f433 Chong Qiao 2023-12-11 254 } 8248d42b7c5f433 Chong Qiao 2023-12-11 255 8248d42b7c5f433 Chong Qiao 2023-12-11 256 irqreturn_t ls2k500sfb_interrupt(int irq, void *arg) 8248d42b7c5f433 Chong Qiao 2023-12-11 257 { 8248d42b7c5f433 Chong Qiao 2023-12-11 258 struct ls2k500sfb_struct *priv = arg; 8248d42b7c5f433 Chong Qiao 2023-12-11 259 struct pci_dev *pdev = priv->dev; 8248d42b7c5f433 Chong Qiao 2023-12-11 260 8248d42b7c5f433 Chong Qiao 2023-12-11 261 if (irq == pdev->irq) 8248d42b7c5f433 Chong Qiao 2023-12-11 262 pr_info("ls2k500sfb pcie interrupt\n"); 8248d42b7c5f433 Chong Qiao 2023-12-11 263 else 8248d42b7c5f433 Chong Qiao 2023-12-11 264 pr_info("ls2k500sfb gpio interrupt\n"); 8248d42b7c5f433 Chong Qiao 2023-12-11 265 if (system_state != SYSTEM_RUNNING) 8248d42b7c5f433 Chong Qiao 2023-12-11 266 return IRQ_HANDLED; 8248d42b7c5f433 Chong Qiao 2023-12-11 267 8248d42b7c5f433 Chong Qiao 2023-12-11 268 if (!priv->running) { 8248d42b7c5f433 Chong Qiao 2023-12-11 269 if (!resetdelay || time_after(jiffies, priv->reset_time + resetdelay * HZ)) { 8248d42b7c5f433 Chong Qiao 2023-12-11 270 priv->running = 1; 8248d42b7c5f433 Chong Qiao 2023-12-11 271 queue_work(priv->wq, &priv->work); 8248d42b7c5f433 Chong Qiao 2023-12-11 272 } 8248d42b7c5f433 Chong Qiao 2023-12-11 273 priv->reset_time = jiffies; 8248d42b7c5f433 Chong Qiao 2023-12-11 274 } 8248d42b7c5f433 Chong Qiao 2023-12-11 275 return IRQ_HANDLED; 8248d42b7c5f433 Chong Qiao 2023-12-11 276 } 8248d42b7c5f433 Chong Qiao 2023-12-11 277 8248d42b7c5f433 Chong Qiao 2023-12-11 278 #ifdef CONFIG_LOONGARCH 8248d42b7c5f433 Chong Qiao 2023-12-11 279 #define GPIO_OEN ((void *)IO_BASE+0x1fe00000+0x500) 8248d42b7c5f433 Chong Qiao 2023-12-11 280 #define GPIO_FUNCEN ((void *)IO_BASE+0x1fe00000+0x504) 8248d42b7c5f433 Chong Qiao 2023-12-11 281 #define GPIO_OUT ((void *)IO_BASE+0x1fe00000+0x508) 8248d42b7c5f433 Chong Qiao 2023-12-11 282 #define GPIO_IN ((void *)IO_BASE+0x1fe00000+0x50c) 8248d42b7c5f433 Chong Qiao 2023-12-11 283 #define GPIO_INTPOL ((void *)IO_BASE+0x1fe00000+0x510) 8248d42b7c5f433 Chong Qiao 2023-12-11 284 #define GPIO_INTEN ((void *)IO_BASE+0x1fe00000+0x514) 8248d42b7c5f433 Chong Qiao 2023-12-11 285 8248d42b7c5f433 Chong Qiao 2023-12-11 286 static int gpiochip_match_name(struct gpio_chip *chip, void *data) 8248d42b7c5f433 Chong Qiao 2023-12-11 287 { 8248d42b7c5f433 Chong Qiao 2023-12-11 288 const char *name = data; 8248d42b7c5f433 Chong Qiao 2023-12-11 289 8248d42b7c5f433 Chong Qiao 2023-12-11 290 return !strcmp(chip->label, name); 8248d42b7c5f433 Chong Qiao 2023-12-11 291 } 8248d42b7c5f433 Chong Qiao 2023-12-11 292 static int get_gpio_irq_from_acpi_table(int gpio) 8248d42b7c5f433 Chong Qiao 2023-12-11 293 { 8248d42b7c5f433 Chong Qiao 2023-12-11 294 struct gpio_chip *chip; 8248d42b7c5f433 Chong Qiao 2023-12-11 295 struct gpio_desc *desc; 8248d42b7c5f433 Chong Qiao 2023-12-11 296 8248d42b7c5f433 Chong Qiao 2023-12-11 297 chip = gpiochip_find("LOON0007:00", gpiochip_match_name); 8248d42b7c5f433 Chong Qiao 2023-12-11 298 if (!chip) 8248d42b7c5f433 Chong Qiao 2023-12-11 299 return -ENOENT; 8248d42b7c5f433 Chong Qiao 2023-12-11 300 desc = gpiochip_request_own_desc(chip, gpio, "reboot", GPIO_LOOKUP_FLAGS_DEFAULT, GPIOD_IN); 8248d42b7c5f433 Chong Qiao 2023-12-11 301 if (!desc) 8248d42b7c5f433 Chong Qiao 2023-12-11 302 return -ENOENT; 8248d42b7c5f433 Chong Qiao 2023-12-11 303 return gpiod_to_irq(desc); 8248d42b7c5f433 Chong Qiao 2023-12-11 304 } 8248d42b7c5f433 Chong Qiao 2023-12-11 305 8248d42b7c5f433 Chong Qiao 2023-12-11 306 static int get_gpio_irq_from_acpi_gsi(int gpio) 8248d42b7c5f433 Chong Qiao 2023-12-11 307 { 8248d42b7c5f433 Chong Qiao 2023-12-11 308 int gsi = 16 + (gpio & 7); 8248d42b7c5f433 Chong Qiao 2023-12-11 309 8248d42b7c5f433 Chong Qiao 2023-12-11 310 return acpi_register_gsi(NULL, gsi, ACPI_EDGE_SENSITIVE, ACPI_ACTIVE_LOW); 8248d42b7c5f433 Chong Qiao 2023-12-11 311 } 8248d42b7c5f433 Chong Qiao 2023-12-11 312 8248d42b7c5f433 Chong Qiao 2023-12-11 313 static int register_gpio_reboot_handler(struct ls2k500sfb_struct *priv) 8248d42b7c5f433 Chong Qiao 2023-12-11 314 { 8248d42b7c5f433 Chong Qiao 2023-12-11 315 int irq = get_gpio_irq_from_acpi_table(GPIO); 8248d42b7c5f433 Chong Qiao 2023-12-11 316 8248d42b7c5f433 Chong Qiao 2023-12-11 317 if (irq < 0) { 8248d42b7c5f433 Chong Qiao 2023-12-11 318 irq = get_gpio_irq_from_acpi_gsi(GPIO); 8248d42b7c5f433 Chong Qiao 2023-12-11 319 pr_notice("gsi gpio irq %d\n", irq); 8248d42b7c5f433 Chong Qiao 2023-12-11 320 } else 8248d42b7c5f433 Chong Qiao 2023-12-11 321 pr_notice("acpi gpio irq %d\n", irq); 8248d42b7c5f433 Chong Qiao 2023-12-11 @322 writel(readl(GPIO_OEN) | (0x1 << GPIO), GPIO_OEN); 8248d42b7c5f433 Chong Qiao 2023-12-11 323 writel(readl(GPIO_FUNCEN) & ~(0x1 << GPIO), GPIO_FUNCEN); 8248d42b7c5f433 Chong Qiao 2023-12-11 324 writel(readl(GPIO_INTPOL) & ~(0x1 << GPIO), GPIO_INTPOL); 8248d42b7c5f433 Chong Qiao 2023-12-11 325 writel(readl(GPIO_INTEN) | (0x1 << GPIO), GPIO_INTEN); 8248d42b7c5f433 Chong Qiao 2023-12-11 326 if (request_irq(irq, ls2k500sfb_interrupt, IRQF_SHARED | IRQF_TRIGGER_FALLING, 8248d42b7c5f433 Chong Qiao 2023-12-11 327 "ls2k500sfb", priv)) 8248d42b7c5f433 Chong Qiao 2023-12-11 328 pr_err("request_irq(%d) failed\n", irq); 8248d42b7c5f433 Chong Qiao 2023-12-11 329 return 0; 8248d42b7c5f433 Chong Qiao 2023-12-11 330 } 8248d42b7c5f433 Chong Qiao 2023-12-11 331 #endif 8248d42b7c5f433 Chong Qiao 2023-12-11 332 :::::: The code at line 322 was first introduced by commit :::::: 8248d42b7c5f4338a54f26d8efebec8614b43466 fbdev: add ls2k500sfb driver for ls2k500 bmc. :::::: TO: Chong Qiao <qiaochong(a)loongson.cn> :::::: CC: Hongchen Zhang <zhanghongchen(a)loongson.cn> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6] BUILD SUCCESS 3b421b6002e287e38790cbdad4a3e08baf7e1bc4
by kernel test robot 07 Jul '24

07 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-6.6 branch HEAD: 3b421b6002e287e38790cbdad4a3e08baf7e1bc4 !9770 Add a switch to enable hungtask check for io Warning ids grouped by kconfigs: recent_errors `-- arm64-allmodconfig `-- clang:warning:no-such-include-directory:drivers-infiniband-hw-hiroce3-include-mag elapsed time: 723m configs tested: 38 configs skipped: 123 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240706 gcc-13.2.0 arm64 randconfig-002-20240706 gcc-13.2.0 arm64 randconfig-003-20240706 clang-16 arm64 randconfig-004-20240706 clang-19 loongarch allmodconfig gcc-13.2.0 loongarch allnoconfig gcc-13.2.0 loongarch randconfig-001-20240706 gcc-13.2.0 loongarch randconfig-002-20240706 gcc-13.2.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240706 clang-18 x86_64 buildonly-randconfig-002-20240706 clang-18 x86_64 buildonly-randconfig-003-20240706 clang-18 x86_64 buildonly-randconfig-004-20240706 clang-18 x86_64 buildonly-randconfig-005-20240706 gcc-13 x86_64 buildonly-randconfig-006-20240706 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240706 gcc-9 x86_64 randconfig-002-20240706 clang-18 x86_64 randconfig-003-20240706 clang-18 x86_64 randconfig-004-20240706 clang-18 x86_64 randconfig-005-20240706 clang-18 x86_64 randconfig-006-20240706 clang-18 x86_64 randconfig-011-20240706 gcc-12 x86_64 randconfig-012-20240706 gcc-12 x86_64 randconfig-013-20240706 clang-18 x86_64 randconfig-014-20240706 gcc-13 x86_64 randconfig-015-20240706 gcc-13 x86_64 randconfig-016-20240706 gcc-13 x86_64 randconfig-071-20240706 gcc-12 x86_64 randconfig-072-20240706 gcc-13 x86_64 randconfig-073-20240706 gcc-12 x86_64 randconfig-074-20240706 gcc-13 x86_64 randconfig-075-20240706 clang-18 x86_64 randconfig-076-20240706 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-5.10] BUILD SUCCESS 1cc61a82256cf82a5f06287eb7c64d9b94f43786
by kernel test robot 07 Jul '24

07 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-5.10 branch HEAD: 1cc61a82256cf82a5f06287eb7c64d9b94f43786 !9792 v3 net: fix one NULL pointer dereference bug in net_rship module Warning ids grouped by kconfigs: recent_errors `-- x86_64-allnoconfig `-- drivers-arm-spe-spe.c:linux-perf-arm_pmu.h-is-included-more-than-once. elapsed time: 727m configs tested: 34 configs skipped: 126 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240706 gcc-13.2.0 arm64 randconfig-002-20240706 gcc-13.2.0 arm64 randconfig-003-20240706 clang-16 arm64 randconfig-004-20240706 clang-19 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240706 clang-18 x86_64 buildonly-randconfig-002-20240706 clang-18 x86_64 buildonly-randconfig-003-20240706 clang-18 x86_64 buildonly-randconfig-004-20240706 clang-18 x86_64 buildonly-randconfig-005-20240706 gcc-13 x86_64 buildonly-randconfig-006-20240706 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240706 gcc-9 x86_64 randconfig-002-20240706 clang-18 x86_64 randconfig-003-20240706 clang-18 x86_64 randconfig-004-20240706 clang-18 x86_64 randconfig-005-20240706 clang-18 x86_64 randconfig-006-20240706 clang-18 x86_64 randconfig-011-20240706 gcc-12 x86_64 randconfig-012-20240706 gcc-12 x86_64 randconfig-013-20240706 clang-18 x86_64 randconfig-014-20240706 gcc-13 x86_64 randconfig-015-20240706 gcc-13 x86_64 randconfig-016-20240706 gcc-13 x86_64 randconfig-071-20240706 gcc-12 x86_64 randconfig-072-20240706 gcc-13 x86_64 randconfig-073-20240706 gcc-12 x86_64 randconfig-074-20240706 gcc-13 x86_64 randconfig-075-20240706 clang-18 x86_64 randconfig-076-20240706 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:openEuler-1.0-LTS] BUILD SUCCESS d127ee13b4d5627947830da5f044541d1144dc44
by kernel test robot 07 Jul '24

07 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS branch HEAD: d127ee13b4d5627947830da5f044541d1144dc44 !9797 sch_cake: do not call cake_destroy() from cake_init() elapsed time: 726m configs tested: 34 configs skipped: 127 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig gcc-13.2.0 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240706 gcc-13.2.0 arm64 randconfig-002-20240706 gcc-13.2.0 arm64 randconfig-003-20240706 gcc-13.2.0 arm64 randconfig-004-20240706 gcc-13.2.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240706 clang-18 x86_64 buildonly-randconfig-002-20240706 clang-18 x86_64 buildonly-randconfig-003-20240706 clang-18 x86_64 buildonly-randconfig-004-20240706 clang-18 x86_64 buildonly-randconfig-005-20240706 gcc-13 x86_64 buildonly-randconfig-006-20240706 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240706 gcc-9 x86_64 randconfig-002-20240706 clang-18 x86_64 randconfig-003-20240706 clang-18 x86_64 randconfig-004-20240706 clang-18 x86_64 randconfig-005-20240706 clang-18 x86_64 randconfig-006-20240706 clang-18 x86_64 randconfig-011-20240706 gcc-12 x86_64 randconfig-012-20240706 gcc-12 x86_64 randconfig-013-20240706 clang-18 x86_64 randconfig-014-20240706 gcc-13 x86_64 randconfig-015-20240706 gcc-13 x86_64 randconfig-016-20240706 gcc-13 x86_64 randconfig-071-20240706 gcc-12 x86_64 randconfig-072-20240706 gcc-13 x86_64 randconfig-073-20240706 gcc-12 x86_64 randconfig-074-20240706 gcc-13 x86_64 randconfig-075-20240706 clang-18 x86_64 randconfig-076-20240706 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH openEuler-22.03-LTS-SP1] null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
by Li Nan 06 Jul '24

06 Jul '24

From: Yu Kuai <yukuai3(a)huawei.com> mainline inclusion from mainline-v6.10-rc1 commit a2db328b0839312c169eb42746ec46fc1ab53ed2 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA7D6H CVE: CVE-2024-36478 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Writing 'power' and 'submit_queues' concurrently will trigger kernel panic: Test script: modprobe null_blk nr_devices=0 mkdir -p /sys/kernel/config/nullb/nullb0 while true; do echo 1 > submit_queues; echo 4 > submit_queues; done & while true; do echo 1 > power; echo 0 > power; done Test result: BUG: kernel NULL pointer dereference, address: 0000000000000148 Oops: 0000 [#1] PREEMPT SMP RIP: 0010:__lock_acquire+0x41d/0x28f0 Call Trace: <TASK> lock_acquire+0x121/0x450 down_write+0x5f/0x1d0 simple_recursive_removal+0x12f/0x5c0 blk_mq_debugfs_unregister_hctxs+0x7c/0x100 blk_mq_update_nr_hw_queues+0x4a3/0x720 nullb_update_nr_hw_queues+0x71/0xf0 [null_blk] nullb_device_submit_queues_store+0x79/0xf0 [null_blk] configfs_write_iter+0x119/0x1e0 vfs_write+0x326/0x730 ksys_write+0x74/0x150 This is because del_gendisk() can concurrent with blk_mq_update_nr_hw_queues(): nullb_device_power_store nullb_apply_submit_queues null_del_dev del_gendisk nullb_update_nr_hw_queues if (!dev->nullb) // still set while gendisk is deleted return 0 blk_mq_update_nr_hw_queues dev->nullb = NULL Fix this problem by resuing the global mutex to protect nullb_device_power_store() and nullb_update_nr_hw_queues() from configfs. Fixes: 45919fbfe1c4 ("null_blk: Enable modifying 'submit_queues' after an instance has been configured") Reported-and-tested-by: Yi Zhang <yi.zhang(a)redhat.com> Closes: https://lore.kernel.org/all/CAHj4cs9LgsHLnjg8z06LQ3Pr5cax-+Ps+xT7AP7TPnEjSt… Signed-off-by: Yu Kuai <yukuai3(a)huawei.com> Reviewed-by: Zhu Yanjun <yanjun.zhu(a)linux.dev> Link: https://lore.kernel.org/r/20240523153934.1937851-1-yukuai1@huaweicloud.com Signed-off-by: Jens Axboe <axboe(a)kernel.dk> Conflicts: drivers/block/null_blk/main.c [ A lot of conflict, this patch just expand the protection range of mutex, ignore conflict. ] Signed-off-by: Li Nan <linan122(a)huawei.com> --- drivers/block/null_blk/main.c | 43 +++++++++++++++++++++-------------- 1 file changed, 26 insertions(+), 17 deletions(-) diff --git a/drivers/block/null_blk/main.c b/drivers/block/null_blk/main.c index 35b390a785dd..91c8412442d0 100644 --- a/drivers/block/null_blk/main.c +++ b/drivers/block/null_blk/main.c @@ -323,11 +323,9 @@ CONFIGFS_ATTR(nullb_device_, NAME); static int nullb_apply_submit_queues(struct nullb_device *dev, unsigned int submit_queues) { - struct nullb *nullb = dev->nullb; + struct nullb *nullb; struct blk_mq_tag_set *set; - - if (!nullb) - return 0; + int ret = 0; /* * Make sure that null_init_hctx() does not access nullb->queues[] past @@ -335,9 +333,20 @@ static int nullb_apply_submit_queues(struct nullb_device *dev, */ if (submit_queues > nr_cpu_ids) return -EINVAL; + + mutex_lock(&lock); + + nullb = dev->nullb; + if (!nullb) + goto out; + set = nullb->tag_set; blk_mq_update_nr_hw_queues(set, submit_queues); - return set->nr_hw_queues == submit_queues ? 0 : -ENOMEM; + ret = set->nr_hw_queues == submit_queues ? 0 : -ENOMEM; + +out: + mutex_unlock(&lock); + return ret; } NULLB_DEVICE_ATTR(size, ulong, NULL); @@ -378,27 +387,31 @@ static ssize_t nullb_device_power_store(struct config_item *item, if (ret < 0) return ret; + ret = count; + mutex_lock(&lock); if (!dev->power && newp) { if (test_and_set_bit(NULLB_DEV_FL_UP, &dev->flags)) - return count; + goto out; + if (null_add_dev(dev)) { clear_bit(NULLB_DEV_FL_UP, &dev->flags); - return -ENOMEM; + ret = -ENOMEM; + goto out; } set_bit(NULLB_DEV_FL_CONFIGURED, &dev->flags); dev->power = newp; } else if (dev->power && !newp) { if (test_and_clear_bit(NULLB_DEV_FL_UP, &dev->flags)) { - mutex_lock(&lock); dev->power = newp; null_del_dev(dev->nullb); - mutex_unlock(&lock); } clear_bit(NULLB_DEV_FL_CONFIGURED, &dev->flags); } - return count; +out: + mutex_unlock(&lock); + return ret; } CONFIGFS_ATTR(nullb_device_, power); @@ -1880,15 +1893,11 @@ static int null_add_dev(struct nullb_device *dev) blk_queue_flag_set(QUEUE_FLAG_NONROT, nullb->q); blk_queue_flag_clear(QUEUE_FLAG_ADD_RANDOM, nullb->q); - mutex_lock(&lock); rv = ida_simple_get(&nullb_indexes, 0, 0, GFP_KERNEL); - if (rv < 0) { - mutex_unlock(&lock); + if (rv < 0) goto out_cleanup_zone; - } nullb->index = rv; dev->index = rv; - mutex_unlock(&lock); blk_queue_logical_block_size(nullb->q, dev->blocksize); blk_queue_physical_block_size(nullb->q, dev->blocksize); @@ -1901,9 +1910,7 @@ static int null_add_dev(struct nullb_device *dev) if (rv) goto out_ida_free; - mutex_lock(&lock); list_add_tail(&nullb->list, &nullb_list); - mutex_unlock(&lock); return 0; @@ -1985,7 +1992,9 @@ static int __init null_init(void) ret = -ENOMEM; goto err_dev; } + mutex_lock(&lock); ret = null_add_dev(dev); + mutex_unlock(&lock); if (ret) { null_free_dev(dev); goto err_dev; -- 2.39.2

2 1

[PATCH OLK-5.10] null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
by Li Nan 06 Jul '24

06 Jul '24

From: Yu Kuai <yukuai3(a)huawei.com> mainline inclusion from mainline-v6.10-rc1 commit a2db328b0839312c169eb42746ec46fc1ab53ed2 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA7D6H CVE: CVE-2024-36478 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Writing 'power' and 'submit_queues' concurrently will trigger kernel panic: Test script: modprobe null_blk nr_devices=0 mkdir -p /sys/kernel/config/nullb/nullb0 while true; do echo 1 > submit_queues; echo 4 > submit_queues; done & while true; do echo 1 > power; echo 0 > power; done Test result: BUG: kernel NULL pointer dereference, address: 0000000000000148 Oops: 0000 [#1] PREEMPT SMP RIP: 0010:__lock_acquire+0x41d/0x28f0 Call Trace: <TASK> lock_acquire+0x121/0x450 down_write+0x5f/0x1d0 simple_recursive_removal+0x12f/0x5c0 blk_mq_debugfs_unregister_hctxs+0x7c/0x100 blk_mq_update_nr_hw_queues+0x4a3/0x720 nullb_update_nr_hw_queues+0x71/0xf0 [null_blk] nullb_device_submit_queues_store+0x79/0xf0 [null_blk] configfs_write_iter+0x119/0x1e0 vfs_write+0x326/0x730 ksys_write+0x74/0x150 This is because del_gendisk() can concurrent with blk_mq_update_nr_hw_queues(): nullb_device_power_store nullb_apply_submit_queues null_del_dev del_gendisk nullb_update_nr_hw_queues if (!dev->nullb) // still set while gendisk is deleted return 0 blk_mq_update_nr_hw_queues dev->nullb = NULL Fix this problem by resuing the global mutex to protect nullb_device_power_store() and nullb_update_nr_hw_queues() from configfs. Fixes: 45919fbfe1c4 ("null_blk: Enable modifying 'submit_queues' after an instance has been configured") Reported-and-tested-by: Yi Zhang <yi.zhang(a)redhat.com> Closes: https://lore.kernel.org/all/CAHj4cs9LgsHLnjg8z06LQ3Pr5cax-+Ps+xT7AP7TPnEjSt… Signed-off-by: Yu Kuai <yukuai3(a)huawei.com> Reviewed-by: Zhu Yanjun <yanjun.zhu(a)linux.dev> Link: https://lore.kernel.org/r/20240523153934.1937851-1-yukuai1@huaweicloud.com Signed-off-by: Jens Axboe <axboe(a)kernel.dk> Conflicts: drivers/block/null_blk/main.c [ A lot of conflict, this patch just expand the protection range of mutex, ignore conflict. ] Signed-off-by: Li Nan <linan122(a)huawei.com> --- drivers/block/null_blk/main.c | 43 +++++++++++++++++++++-------------- 1 file changed, 26 insertions(+), 17 deletions(-) diff --git a/drivers/block/null_blk/main.c b/drivers/block/null_blk/main.c index 35b390a785dd..91c8412442d0 100644 --- a/drivers/block/null_blk/main.c +++ b/drivers/block/null_blk/main.c @@ -323,11 +323,9 @@ CONFIGFS_ATTR(nullb_device_, NAME); static int nullb_apply_submit_queues(struct nullb_device *dev, unsigned int submit_queues) { - struct nullb *nullb = dev->nullb; + struct nullb *nullb; struct blk_mq_tag_set *set; - - if (!nullb) - return 0; + int ret = 0; /* * Make sure that null_init_hctx() does not access nullb->queues[] past @@ -335,9 +333,20 @@ static int nullb_apply_submit_queues(struct nullb_device *dev, */ if (submit_queues > nr_cpu_ids) return -EINVAL; + + mutex_lock(&lock); + + nullb = dev->nullb; + if (!nullb) + goto out; + set = nullb->tag_set; blk_mq_update_nr_hw_queues(set, submit_queues); - return set->nr_hw_queues == submit_queues ? 0 : -ENOMEM; + ret = set->nr_hw_queues == submit_queues ? 0 : -ENOMEM; + +out: + mutex_unlock(&lock); + return ret; } NULLB_DEVICE_ATTR(size, ulong, NULL); @@ -378,27 +387,31 @@ static ssize_t nullb_device_power_store(struct config_item *item, if (ret < 0) return ret; + ret = count; + mutex_lock(&lock); if (!dev->power && newp) { if (test_and_set_bit(NULLB_DEV_FL_UP, &dev->flags)) - return count; + goto out; + if (null_add_dev(dev)) { clear_bit(NULLB_DEV_FL_UP, &dev->flags); - return -ENOMEM; + ret = -ENOMEM; + goto out; } set_bit(NULLB_DEV_FL_CONFIGURED, &dev->flags); dev->power = newp; } else if (dev->power && !newp) { if (test_and_clear_bit(NULLB_DEV_FL_UP, &dev->flags)) { - mutex_lock(&lock); dev->power = newp; null_del_dev(dev->nullb); - mutex_unlock(&lock); } clear_bit(NULLB_DEV_FL_CONFIGURED, &dev->flags); } - return count; +out: + mutex_unlock(&lock); + return ret; } CONFIGFS_ATTR(nullb_device_, power); @@ -1880,15 +1893,11 @@ static int null_add_dev(struct nullb_device *dev) blk_queue_flag_set(QUEUE_FLAG_NONROT, nullb->q); blk_queue_flag_clear(QUEUE_FLAG_ADD_RANDOM, nullb->q); - mutex_lock(&lock); rv = ida_simple_get(&nullb_indexes, 0, 0, GFP_KERNEL); - if (rv < 0) { - mutex_unlock(&lock); + if (rv < 0) goto out_cleanup_zone; - } nullb->index = rv; dev->index = rv; - mutex_unlock(&lock); blk_queue_logical_block_size(nullb->q, dev->blocksize); blk_queue_physical_block_size(nullb->q, dev->blocksize); @@ -1901,9 +1910,7 @@ static int null_add_dev(struct nullb_device *dev) if (rv) goto out_ida_free; - mutex_lock(&lock); list_add_tail(&nullb->list, &nullb_list); - mutex_unlock(&lock); return 0; @@ -1985,7 +1992,9 @@ static int __init null_init(void) ret = -ENOMEM; goto err_dev; } + mutex_lock(&lock); ret = null_add_dev(dev); + mutex_unlock(&lock); if (ret) { null_free_dev(dev); goto err_dev; -- 2.39.2

2 1