- Kernel - mailweb.openeuler.org

[PATCH OLK-6.6 0/2] Fix watchdog false positive problem
by Luo Gengkun 10 Jun '25

10 Jun '25

Luo Gengkun (1): [Backport] watchdog: fix watchdog may detect false positive of softlockup Nysal Jan K.A (1): [Backport] watchdog: fix the SOFTLOCKUP_DETECTOR=n case kernel/watchdog.c | 41 +++++++++++++++++++++++++++-------------- 1 file changed, 27 insertions(+), 14 deletions(-) -- 2.34.1

1 1

[PATCH 1/3] arm64: trap implementation defined functionality in userspace
by frenkjason 10 Jun '25

10 Jun '25

From: Kristina Martsenko <kristina.martsenko(a)arm.com> The Arm v8.8 extension adds a new control FEAT_TIDCP1 that allows the kernel to disable all implementation-defined system registers and instructions in userspace. This can improve robustness against covert channels between processes, for example in cases where the firmware or hardware didn't disable that functionality by default. The kernel does not currently support any implementation-defined features, as there are no hwcaps for any such features, so disable all imp-def features unconditionally. Any use of imp-def instructions will result in a SIGILL being delivered to the process (same as for undefined instructions). Signed-off-by: Kristina Martsenko <kristina.martsenko(a)arm.com> Link: https://lore.kernel.org/r/20220622115424.683520-1-kristina.martsenko@arm.com Signed-off-by: Will Deacon <will(a)kernel.org> Conflicts: arch/arm64/include/asm/sysreg.h arch/arm64/kernel/cpufeature.c arch/arm64/include/asm/cpucaps.h Signed-off-by: frankyj915 <yangjieyj.yang(a)huawei.com> --- arch/arm64/include/asm/cpucaps.h | 1 + arch/arm64/include/asm/sysreg.h | 5 +++++ arch/arm64/kernel/cpufeature.c | 17 +++++++++++++++++ 3 files changed, 23 insertions(+) diff --git a/arch/arm64/include/asm/cpucaps.h b/arch/arm64/include/asm/cpucaps.h index 163a38107d3d..3107f4a6942d 100644 --- a/arch/arm64/include/asm/cpucaps.h +++ b/arch/arm64/include/asm/cpucaps.h @@ -64,6 +64,7 @@ #define ARM64_WORKAROUND_HISILICON_1980005 54 #define ARM64_WORKAROUND_HISILICON_ERRATUM_162100125 55 #define ARM64_WORKAROUND_HISILICON_ERRATUM_162100602 56 +#define ARM64_HAS_TIDCP1 57 #define ARM64_NCAPS 80 diff --git a/arch/arm64/include/asm/sysreg.h b/arch/arm64/include/asm/sysreg.h index 60c6affb9135..e579e49a304a 100644 --- a/arch/arm64/include/asm/sysreg.h +++ b/arch/arm64/include/asm/sysreg.h @@ -520,6 +520,7 @@ #endif /* SCTLR_EL1 specific flags. */ +#define SCTLR_EL1_TIDCP (BIT(63)) #define SCTLR_EL1_UCI (BIT(26)) #define SCTLR_EL1_E0E (BIT(24)) #define SCTLR_EL1_SPAN (BIT(23)) @@ -678,6 +679,7 @@ /* id_aa64mmfr1 */ #define ID_AA64MMFR1_ECBHB_SHIFT 60 +#define ID_AA64MMFR1_TIDCP1_SHIFT 52 #define ID_AA64MMFR1_PAN_SHIFT 20 #define ID_AA64MMFR1_LOR_SHIFT 16 #define ID_AA64MMFR1_HPD_SHIFT 12 @@ -688,6 +690,9 @@ #define ID_AA64MMFR1_VMIDBITS_8 0 #define ID_AA64MMFR1_VMIDBITS_16 2 +#define ID_AA64MMFR1_TIDCP1_NI 0 +#define ID_AA64MMFR1_TIDCP1_IMP 1 + /* id_aa64mmfr2 */ #define ID_AA64MMFR2_TTL_SHIFT 48 #define ID_AA64MMFR2_FWB_SHIFT 40 diff --git a/arch/arm64/kernel/cpufeature.c b/arch/arm64/kernel/cpufeature.c index 6c0cdac84fb6..cc50fd0bac99 100644 --- a/arch/arm64/kernel/cpufeature.c +++ b/arch/arm64/kernel/cpufeature.c @@ -228,6 +228,7 @@ static const struct arm64_ftr_bits ftr_id_aa64mmfr0[] = { }; static const struct arm64_ftr_bits ftr_id_aa64mmfr1[] = { + ARM64_FTR_BITS(FTR_HIDDEN, FTR_NONSTRICT, FTR_LOWER_SAFE, ID_AA64MMFR1_TIDCP1_SHIFT, 4, 0), ARM64_FTR_BITS(FTR_HIDDEN, FTR_STRICT, FTR_LOWER_SAFE, ID_AA64MMFR1_PAN_SHIFT, 4, 0), ARM64_FTR_BITS(FTR_HIDDEN, FTR_STRICT, FTR_LOWER_SAFE, ID_AA64MMFR1_LOR_SHIFT, 4, 0), ARM64_FTR_BITS(FTR_HIDDEN, FTR_STRICT, FTR_LOWER_SAFE, ID_AA64MMFR1_HPD_SHIFT, 4, 0), @@ -1298,6 +1299,11 @@ static void elf_hwcap_fixup(void) #endif /* ARM64_ERRATUM_1742098 */ } +static void cpu_trap_el0_impdef(const struct arm64_cpu_capabilities *__unused) +{ + sysreg_clear_set(sctlr_el1, 0, SCTLR_EL1_TIDCP); +} + static const struct arm64_cpu_capabilities arm64_features[] = { { .desc = "GIC system register CPU interface", @@ -1628,6 +1634,17 @@ static const struct arm64_cpu_capabilities arm64_features[] = { .min_field_value = 1, }, #endif + { + .desc = "Trap EL0 IMPLEMENTATION DEFINED functionality", + .capability = ARM64_HAS_TIDCP1, + .type = ARM64_CPUCAP_SYSTEM_FEATURE, + .sys_reg = SYS_ID_AA64MMFR1_EL1, + .sign = FTR_UNSIGNED, + .field_pos = ID_AA64MMFR1_TIDCP1_SHIFT, + .min_field_value = ID_AA64MMFR1_TIDCP1_IMP, + .matches = has_cpuid_feature, + .cpu_enable = cpu_trap_el0_impdef, + }, {}, }; -- 2.25.1

1 0

[PATCH OLK-5.10 0/2] Fix watchdog false positive problem
by Luo Gengkun 10 Jun '25

10 Jun '25

Luo Gengkun (1): watchdog: fix watchdog may detect false positive of softlockup Nysal Jan K.A (1): watchdog: fix the SOFTLOCKUP_DETECTOR=n case include/linux/nmi.h | 1 + kernel/sysctl.c | 2 +- kernel/watchdog.c | 39 ++++++++++++++++++++++++++------------- 3 files changed, 28 insertions(+), 14 deletions(-) -- 2.34.1

2 3

[PATCH OLK-6.6 0/2] Fix watchdog false positive problem
by Luo Gengkun 10 Jun '25

10 Jun '25

Luo Gengkun (1): watchdog: fix watchdog may detect false positive of softlockup Nysal Jan K.A (1): watchdog: fix the SOFTLOCKUP_DETECTOR=n case kernel/watchdog.c | 41 +++++++++++++++++++++++++++-------------- 1 file changed, 27 insertions(+), 14 deletions(-) -- 2.34.1

2 3

[PATCH OLK-6.6 0/2] Fix watchdog false positive problem
by Luo Gengkun 10 Jun '25

10 Jun '25

Luo Gengkun (1): [Backport] watchdog: fix watchdog may detect false positive of softlockup Nysal Jan K.A (1): [Backport] watchdog: fix the SOFTLOCKUP_DETECTOR=n case kernel/watchdog.c | 41 +++++++++++++++++++++++++++-------------- 1 file changed, 27 insertions(+), 14 deletions(-) -- 2.34.1

2 3

[openeuler:OLK-5.10 2954/2954] net/ipv4/sysctl_net_ipv4.c:477:50: sparse: sparse: incorrect type in argument 3 (different address spaces)
by kernel test robot 10 Jun '25

10 Jun '25

tree: https://gitee.com/openeuler/kernel.git OLK-5.10 head: 90ff3e07cc268a8e40bd578dcc4907a3db419c52 commit: dae7bed961c55d9837eada7f98f34f1adb0e9d21 [2954/2954] tcp_comp: add sysctl for enable/disable compression config: arm64-randconfig-r133-20250610 (https://download.01.org/0day-ci/archive/20250610/202506101624.VyZdjKoM-lkp@…) compiler: aarch64-linux-gcc (GCC) 14.3.0 reproduce: (https://download.01.org/0day-ci/archive/20250610/202506101624.VyZdjKoM-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202506101624.VyZdjKoM-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) >> net/ipv4/sysctl_net_ipv4.c:477:50: sparse: sparse: incorrect type in argument 3 (different address spaces) @@ expected void * @@ got void [noderef] __user *buffer @@ net/ipv4/sysctl_net_ipv4.c:477:50: sparse: expected void * net/ipv4/sysctl_net_ipv4.c:477:50: sparse: got void [noderef] __user *buffer >> net/ipv4/sysctl_net_ipv4.c:621:35: sparse: sparse: incorrect type in initializer (incompatible argument 3 (different address spaces)) @@ expected int ( [usertype] *proc_handler )( ... ) @@ got int ( * )( ... ) @@ net/ipv4/sysctl_net_ipv4.c:621:35: sparse: expected int ( [usertype] *proc_handler )( ... ) net/ipv4/sysctl_net_ipv4.c:621:35: sparse: got int ( * )( ... ) vim +477 net/ipv4/sysctl_net_ipv4.c 467 468 #if IS_ENABLED(CONFIG_TCP_COMP) 469 static int proc_tcp_compression_ports(struct ctl_table *table, int write, 470 void __user *buffer, size_t *lenp, 471 loff_t *ppos) 472 { 473 unsigned long *bitmap = *(unsigned long **)table->data; 474 unsigned long bitmap_len = table->maxlen; 475 int ret; 476 > 477 ret = proc_do_large_bitmap(table, write, buffer, lenp, ppos); 478 if (write && ret == 0) { 479 if (bitmap_empty(bitmap, bitmap_len)) { 480 if (static_key_enabled(&tcp_have_comp)) 481 static_branch_disable(&tcp_have_comp); 482 } else { 483 if (!static_key_enabled(&tcp_have_comp)) 484 static_branch_enable(&tcp_have_comp); 485 } 486 } 487 488 return ret; 489 } 490 #endif 491 492 static struct ctl_table ipv4_table[] = { 493 { 494 .procname = "tcp_max_orphans", 495 .data = &sysctl_tcp_max_orphans, 496 .maxlen = sizeof(int), 497 .mode = 0644, 498 .proc_handler = proc_dointvec 499 }, 500 { 501 .procname = "inet_peer_threshold", 502 .data = &inet_peer_threshold, 503 .maxlen = sizeof(int), 504 .mode = 0644, 505 .proc_handler = proc_dointvec 506 }, 507 { 508 .procname = "inet_peer_minttl", 509 .data = &inet_peer_minttl, 510 .maxlen = sizeof(int), 511 .mode = 0644, 512 .proc_handler = proc_dointvec_jiffies, 513 }, 514 { 515 .procname = "inet_peer_maxttl", 516 .data = &inet_peer_maxttl, 517 .maxlen = sizeof(int), 518 .mode = 0644, 519 .proc_handler = proc_dointvec_jiffies, 520 }, 521 { 522 .procname = "tcp_mem", 523 .maxlen = sizeof(sysctl_tcp_mem), 524 .data = &sysctl_tcp_mem, 525 .mode = 0644, 526 .proc_handler = proc_doulongvec_minmax, 527 }, 528 { 529 .procname = "tcp_low_latency", 530 .data = &sysctl_tcp_low_latency, 531 .maxlen = sizeof(int), 532 .mode = 0644, 533 .proc_handler = proc_dointvec 534 }, 535 #ifdef CONFIG_NETLABEL 536 { 537 .procname = "cipso_cache_enable", 538 .data = &cipso_v4_cache_enabled, 539 .maxlen = sizeof(int), 540 .mode = 0644, 541 .proc_handler = proc_dointvec, 542 }, 543 { 544 .procname = "cipso_cache_bucket_size", 545 .data = &cipso_v4_cache_bucketsize, 546 .maxlen = sizeof(int), 547 .mode = 0644, 548 .proc_handler = proc_dointvec, 549 }, 550 { 551 .procname = "cipso_rbm_optfmt", 552 .data = &cipso_v4_rbm_optfmt, 553 .maxlen = sizeof(int), 554 .mode = 0644, 555 .proc_handler = proc_dointvec, 556 }, 557 { 558 .procname = "cipso_rbm_strictvalid", 559 .data = &cipso_v4_rbm_strictvalid, 560 .maxlen = sizeof(int), 561 .mode = 0644, 562 .proc_handler = proc_dointvec, 563 }, 564 #endif /* CONFIG_NETLABEL */ 565 { 566 .procname = "tcp_available_ulp", 567 .maxlen = TCP_ULP_BUF_MAX, 568 .mode = 0444, 569 .proc_handler = proc_tcp_available_ulp, 570 }, 571 { 572 .procname = "icmp_msgs_per_sec", 573 .data = &sysctl_icmp_msgs_per_sec, 574 .maxlen = sizeof(int), 575 .mode = 0644, 576 .proc_handler = proc_dointvec_minmax, 577 .extra1 = SYSCTL_ZERO, 578 }, 579 { 580 .procname = "icmp_msgs_burst", 581 .data = &sysctl_icmp_msgs_burst, 582 .maxlen = sizeof(int), 583 .mode = 0644, 584 .proc_handler = proc_dointvec_minmax, 585 .extra1 = SYSCTL_ZERO, 586 }, 587 { 588 .procname = "udp_mem", 589 .data = &sysctl_udp_mem, 590 .maxlen = sizeof(sysctl_udp_mem), 591 .mode = 0644, 592 .proc_handler = proc_doulongvec_minmax, 593 }, 594 { 595 .procname = "fib_sync_mem", 596 .data = &sysctl_fib_sync_mem, 597 .maxlen = sizeof(sysctl_fib_sync_mem), 598 .mode = 0644, 599 .proc_handler = proc_douintvec_minmax, 600 .extra1 = &sysctl_fib_sync_mem_min, 601 .extra2 = &sysctl_fib_sync_mem_max, 602 }, 603 { 604 .procname = "tcp_rx_skb_cache", 605 .data = &tcp_rx_skb_cache_key.key, 606 .mode = 0644, 607 .proc_handler = proc_do_static_key, 608 }, 609 { 610 .procname = "tcp_tx_skb_cache", 611 .data = &tcp_tx_skb_cache_key.key, 612 .mode = 0644, 613 .proc_handler = proc_do_static_key, 614 }, 615 #if IS_ENABLED(CONFIG_TCP_COMP) 616 { 617 .procname = "tcp_compression_ports", 618 .data = &sysctl_tcp_compression_ports, 619 .maxlen = 65536, 620 .mode = 0644, > 621 .proc_handler = proc_tcp_compression_ports, 622 }, 623 #endif 624 { } 625 }; 626 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-5.10 v7 00/12] arm64: Support xcall prefetch
by Jinjie Ruan 10 Jun '25

10 Jun '25

Support xcall prefetch. Changes in v7: - Remove "echo @xxx > /proc/$PID/xcall" usage, replace with "echo 1 > /proc/$PID/prefetch". Now the xcall enable and prefetch can be enabled separately. Changes in v6: - Only use one reserved kabi in task_struct for xcall. - Free prefetch item after eventpoll_release_file() to avoid possible competition between ep_prefetch_item_enqueue() and pfi free. - Fix "echo > /proc/xcall/cpu_list" show problem. Changes in v5: - Fix dentry free before free_prefetch_item() and then UAF in prefetch work by cancel_work_sync() before free pfi and move free_prefetch_item() to the first of __fput(). - Fix __queue_work() oops bug. - /proc/xcall/mask_list -> /proc/xcall/cpu_list - Fix xcall_prefetch print data type. - Update prefetch tracepoint, move xcall points definition to separete header file. - Make xcall_prefetch depends on EPOLL. - Adjust xcall prefetch buf to 16KB by default. - Add xcall_prefetch_init() function. - Only use write lock in free_prefetch_item(). - Simplify xcall_read() and add some comment. - Update commit message. Changes in v4: - Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default. - Fix xint sleeping function called from invalid context bug. - free_prefetch_item() in file_free() instead of filp_close(), which fix the alloc-queue and free competition. - Fix kernel_read() warning for FMODE_READ not set. - Add sock_from_file() limit for prefetch. - Check NULL for rc_work. - Simplfy the cpumask interface code, and rename to "/proc/xcall/mask_list". - Remove the xcall_cache_pages_order interface. - tracepoint update: fd -> file. - Simplify the xcall_read() function again. - Handle copy_to_user() return value. - Remove unused XCALL_CACHE_QUEUED. - Update the commit message. Changes in v3: - Add XCALL_PREFETCH config to isolate feature code. - Split the /proc/xxx interface code out to independent patches, which will make it clear. - Update the cpumask interface to "/proc/xcall/numa_mask", and it can set the numa mask of all numas one time. - Add xcall select count to make xcall_cache_pages_order adjust safe. - Introduce xcall_read_start/end() to make it clear. - Simplify the xcall_read() function. - Use cpumask_next() instead of get_nth_cpu_in_cpumask() function. - Use independent cpu select policy function. - Remove some unnecessary pr_err(). - Update the commit message. Changes in v2: - Upadte the xcall prefetch state machine, remove the queued state and add prefetch, cancel states. - Remove the pfi lock and use atomic variables. - Change the 'xcall select' semantics and simplify the code a lot. - Remove keep_running, remove unrelated code. - Remove the count in struct read_cache_entry, and use percpu hit/miss count. - Remove sync mode, so remove struct read_cache_entry in struct task_struct. - Use hash table to find prefetch item for a file, which will not change the file struct KABI. - Use rwlock instead of spinlock for hash table. - Use alloc_page() instead kmalloc() to align 4KB. - Update the commit message. Jinjie Ruan (9): arm64: Introduce Xint software solution arm64: Add debugfs dir for xint arm64: Reserve a kabi in task_struct exclusively for xcall arm64: Introduce xcall prefetch enable interface eventpoll: xcall: Support async prefetch data in epoll xcall: Add /proc/xcall/prefetch dir for performance tuning xcall: Add /proc/xcall/cpu_list for performance tuning xcall: eventpoll: add tracepoint config: Enable FAST_SYSCALL/IRQ and XCALL_PREFETCH by default Liao Chen (1): revert kpti bypass Yipeng Zou (2): arm64: Introduce xcall a faster svc exception handling arm64: Faster SVC exception handler with xcall arch/Kconfig | 81 +++++ arch/arm64/Kconfig | 2 + arch/arm64/configs/openeuler_defconfig | 7 + arch/arm64/include/asm/cpucaps.h | 2 + arch/arm64/include/asm/exception.h | 3 + arch/arm64/kernel/asm-offsets.c | 3 + arch/arm64/kernel/cpufeature.c | 56 ++++ arch/arm64/kernel/entry-common.c | 22 ++ arch/arm64/kernel/entry.S | 183 ++++++++++- arch/arm64/kernel/syscall.c | 57 ++++ drivers/irqchip/irq-gic-v3.c | 130 ++++++++ fs/eventpoll.c | 408 +++++++++++++++++++++++++ fs/file_table.c | 1 + fs/proc/base.c | 183 +++++++++++ fs/read_write.c | 10 +- include/linux/fs.h | 35 +++ include/linux/hardirq.h | 5 + include/linux/irqchip/arm-gic-v3.h | 13 + include/linux/sched.h | 4 + include/linux/xcall.h | 17 ++ include/trace/events/xcall.h | 106 +++++++ kernel/fork.c | 24 ++ kernel/irq/debugfs.c | 33 ++ kernel/irq/internals.h | 18 ++ kernel/irq/irqdesc.c | 19 ++ kernel/irq/proc.c | 10 + kernel/softirq.c | 73 +++++ 27 files changed, 1502 insertions(+), 3 deletions(-) create mode 100644 include/linux/xcall.h create mode 100644 include/trace/events/xcall.h -- 2.34.1

2 13

[PATCH OLK-6.6 0/2] Fix watchdog false positive problem
by Luo Gengkun 10 Jun '25

10 Jun '25

Luo Gengkun (1): watchdog: fix watchdog may detect false positive of softlockup Nysal Jan K.A (1): watchdog: fix the SOFTLOCKUP_DETECTOR=n case kernel/watchdog.c | 41 +++++++++++++++++++++++++++-------------- 1 file changed, 27 insertions(+), 14 deletions(-) -- 2.34.1

2 3

[PATCH OLK-5.10 0/2] Fix watchdog false positive problem
by Luo Gengkun 10 Jun '25

10 Jun '25

Luo Gengkun (1): watchdog: fix watchdog may detect false positive of softlockup Nysal Jan K.A (1): watchdog: fix the SOFTLOCKUP_DETECTOR=n case include/linux/nmi.h | 1 + kernel/sysctl.c | 2 +- kernel/watchdog.c | 39 ++++++++++++++++++++++++++------------- 3 files changed, 28 insertions(+), 14 deletions(-) -- 2.34.1

2 3

[PATCH OLK-6.6 0/9] merge CVE patches into OLK-6.6
by Nanyong Sun 10 Jun '25

10 Jun '25

From: Kaixiong Yu <yukaixiong(a)huawei.com> merge CVE patches into OLK-6.6 the CVE No. as listed: CVE-2025-37930 CVE-2025-37849 CVE-2025-23149 CVE-2025-39735 CVE-2025-38152 CVE-2025-21861 CVE-2024-47732 Bjorn Andersson (1): Revert "remoteproc: core: Clear table_sz when rproc_shutdown" Dan Carpenter (1): crypto: iaa - Fix potential use after free bug David Hildenbrand (1): mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() Kefeng Wang (1): mm: migrate_device: use more folio in migrate_device_finalize() Peng Fan (1): remoteproc: core: Clear table_sz when rproc_shutdown Philipp Stanner (1): drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() Qasim Ijaz (1): jfs: fix slab-out-of-bounds read in ea_get() Thadeu Lima de Souza Cascardo (1): tpm: do not start chip while suspended Will Deacon (1): KVM: arm64: Tear down vGIC on failed vCPU creation arch/arm64/kvm/arm.c | 6 +++- drivers/char/tpm/tpm-chip.c | 5 +++ drivers/char/tpm/tpm-interface.c | 7 ---- drivers/crypto/intel/iaa/iaa_crypto_main.c | 4 +-- drivers/gpu/drm/nouveau/nouveau_fence.c | 2 +- fs/jfs/xattr.c | 15 +++++--- mm/migrate_device.c | 42 +++++++++++----------- 7 files changed, 43 insertions(+), 38 deletions(-) -- 2.34.1

2 10