- Kernel - mailweb.openeuler.org

[PATCH OLK-5.10 V1] sched/dynamic_affinity: fix preffered_cpu offline problem
by Cheng Yu 28 May '25

28 May '25

From: He Yujie <coka.heyujie(a)huawei.com> hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IB42TC -------------------------------- After the preferred_cpu goes offline, the core selection of dynamic affinity does not check whether the preferred_cpu is valid. As a result, related dynamic affinity processes are concentrated on a shared_cpu. This patch resolves this problem to checks whether the preferred_cpu is valid and compares only the usage threshold of the valid preferred_cpu. Fixes: 2e1dfc02d115 ("sched: Adjust wakeup cpu range according CPU util dynamicly") Signed-off-by: He Yujie <coka.heyujie(a)huawei.com> Signed-off-by: Cheng Yu <serein.chengyu(a)huawei.com> --- kernel/sched/fair.c | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/kernel/sched/fair.c b/kernel/sched/fair.c index 5fc8d6a25b9a..437572c568ee 100644 --- a/kernel/sched/fair.c +++ b/kernel/sched/fair.c @@ -8124,6 +8124,7 @@ static void set_task_select_cpus(struct task_struct *p, int *idlest_cpu, struct task_group *tg; long spare; int cpu, mode; + int nr_cpus_valid = 0; rcu_read_lock(); mode = dynamic_affinity_mode(p); @@ -8141,7 +8142,7 @@ static void set_task_select_cpus(struct task_struct *p, int *idlest_cpu, /* manual mode */ tg = task_group(p); - for_each_cpu(cpu, p->prefer_cpus) { + for_each_cpu_and(cpu, p->prefer_cpus, cpu_online_mask) { if (idlest_cpu && (available_idle_cpu(cpu) || sched_idle_cpu(cpu))) { *idlest_cpu = cpu; } else if (idlest_cpu) { @@ -8163,10 +8164,17 @@ static void set_task_select_cpus(struct task_struct *p, int *idlest_cpu, util_avg_sum += taskgroup_cpu_util(tg, cpu); tg_capacity += capacity_of(cpu); + nr_cpus_valid++; } rcu_read_unlock(); - if (tg_capacity > cpumask_weight(p->prefer_cpus) && + /* + * Follow cases should select cpus_ptr, checking by condition of + * tg_capacity > nr_cpus_valid: + * 1. all prefer_cpus offline; + * 2. all prefer_cpus has no cfs capaicity(tg_capacity = nr_cpus_valid * 1) + */ + if (tg_capacity > nr_cpus_valid && util_avg_sum * 100 <= tg_capacity * sysctl_sched_util_low_pct) { p->select_cpus = p->prefer_cpus; if (sd_flag & SD_BALANCE_WAKE) -- 2.25.1

2 1

[PATCH OLK-6.6 v5 0/5] Support soft domain
by Zhang Qiao 28 May '25

28 May '25

v5: - Fix build error on ppc/x86/arm v4: - Fix memleak issue v3: - Fix x86 build error v2: - fix __SCHED_FEAT_SOFT_DOMAIN build error Zhang Qiao (5): sched: topology: Build soft domain for LLC sched: Attach task group to soft domain sched: fair: Select idle cpu in soft domain sched: fair: Disable numa migrate for soft domian task arm64: Enable CONFIG_SCHED_SOFT_DOMAIN arch/arm64/configs/openeuler_defconfig | 2 + include/linux/sched/topology.h | 21 ++ init/Kconfig | 11 + kernel/sched/build_policy.c | 3 + kernel/sched/core.c | 72 ++++++ kernel/sched/fair.c | 91 +++++++ kernel/sched/features.h | 4 + kernel/sched/sched.h | 34 +++ kernel/sched/soft_domain.c | 334 +++++++++++++++++++++++++ 9 files changed, 572 insertions(+) create mode 100644 kernel/sched/soft_domain.c -- 2.18.0.huawei.25

2 6

[openeuler:OLK-6.6 2320/2320] arch/x86/kernel/cpu/proc.c:63:5: warning: no previous prototype for function 'show_cpuinfo'
by kernel test robot 28 May '25

28 May '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 9a55d4a78730623072ee5a82518e7c094296b8b6 commit: 9d3b0e8891b8b3450a7cd6d1367946a1c69e4eb9 [2320/2320] bpf: Add cpuinfo_x86 iterator target config: x86_64-buildonly-randconfig-002-20250528 (https://download.01.org/0day-ci/archive/20250528/202505281457.ZzTKocMO-lkp@…) compiler: clang version 20.1.2 (https://github.com/llvm/llvm-project 58df0ef89dd64126512e4ee27b4ac3fd8ddf6247) rustc: rustc 1.73.0 (cc66ad468 2023-10-03) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250528/202505281457.ZzTKocMO-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202505281457.ZzTKocMO-lkp@intel.com/ All warnings (new ones prefixed by >>): >> arch/x86/kernel/cpu/proc.c:63:5: warning: no previous prototype for function 'show_cpuinfo' [-Wmissing-prototypes] 63 | int show_cpuinfo(struct seq_file *m, void *v) | ^ arch/x86/kernel/cpu/proc.c:63:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 63 | int show_cpuinfo(struct seq_file *m, void *v) | ^ | static 1 warning generated. vim +/show_cpuinfo +63 arch/x86/kernel/cpu/proc.c 62 > 63 int show_cpuinfo(struct seq_file *m, void *v) 64 { 65 struct cpuinfo_x86 *c = v; 66 unsigned int cpu; 67 int i; 68 69 cpu = c->cpu_index; 70 seq_printf(m, "processor\t: %u\n" 71 "vendor_id\t: %s\n" 72 "cpu family\t: %d\n" 73 "model\t\t: %u\n" 74 "model name\t: %s\n", 75 cpu, 76 c->x86_vendor_id[0] ? c->x86_vendor_id : "unknown", 77 c->x86, 78 c->x86_model, 79 c->x86_model_id[0] ? c->x86_model_id : "unknown"); 80 81 if (c->x86_stepping || c->cpuid_level >= 0) 82 seq_printf(m, "stepping\t: %d\n", c->x86_stepping); 83 else 84 seq_puts(m, "stepping\t: unknown\n"); 85 if (c->microcode) 86 seq_printf(m, "microcode\t: 0x%x\n", c->microcode); 87 88 if (cpu_has(c, X86_FEATURE_TSC)) { 89 unsigned int freq = arch_freq_get_on_cpu(cpu); 90 91 seq_printf(m, "cpu MHz\t\t: %u.%03u\n", freq / 1000, (freq % 1000)); 92 } 93 94 /* Cache size */ 95 if (c->x86_cache_size) 96 seq_printf(m, "cache size\t: %u KB\n", c->x86_cache_size); 97 98 show_cpuinfo_core(m, c, cpu); 99 show_cpuinfo_misc(m, c); 100 101 seq_puts(m, "flags\t\t:"); 102 for (i = 0; i < 32*NCAPINTS; i++) 103 if (cpu_has(c, i) && x86_cap_flags[i] != NULL) { 104 if (c->x86_vendor == X86_VENDOR_HYGON) 105 seq_printf(m, " %s", i == X86_FEATURE_SEV ? "csv" : 106 (i == X86_FEATURE_SEV_ES ? "csv2" : 107 x86_cap_flags[i])); 108 else 109 seq_printf(m, " %s", x86_cap_flags[i]); 110 } 111 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6 v4 0/5] Support soft domain
by Zhang Qiao 28 May '25

28 May '25

v4: - Fix memleak issue v3: - Fix x86 build error v2: - fix __SCHED_FEAT_SOFT_DOMAIN build error Zhang Qiao (5): sched: topology: Build soft domain for LLC sched: Attach task group to soft domain sched: fair: Select idle cpu in soft domain sched: fair: Disable numa migrate for soft domian task arm64: Enable CONFIG_SCHED_SOFT_DOMAIN arch/arm64/configs/openeuler_defconfig | 2 + include/linux/sched/topology.h | 21 ++ init/Kconfig | 11 + kernel/sched/build_policy.c | 3 + kernel/sched/core.c | 72 ++++++ kernel/sched/fair.c | 91 +++++++ kernel/sched/features.h | 4 + kernel/sched/sched.h | 34 +++ kernel/sched/soft_domain.c | 334 +++++++++++++++++++++++++ 9 files changed, 572 insertions(+) create mode 100644 kernel/sched/soft_domain.c -- 2.18.0.huawei.25

2 6

[openeuler:OLK-6.6 2311/2311] kismet: WARNING: unmet direct dependencies detected for MOTORCOMM_PHY when selected by YT6801
by kernel test robot 28 May '25

28 May '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 571552c7fb136e86f4279b2e96292270085255e5 commit: 6460d9d3c42d1357c8292d7be5c26cb7b84e84d7 [2311/2311] yt6801: Add Motorcomm yt6801 PCIe driver config: loongarch-kismet-CONFIG_MOTORCOMM_PHY-CONFIG_YT6801-0-0 (https://download.01.org/0day-ci/archive/20250528/202505281128.MTV3LnwY-lkp@…) reproduce: (https://download.01.org/0day-ci/archive/20250528/202505281128.MTV3LnwY-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202505281128.MTV3LnwY-lkp@intel.com/ kismet warnings: (new ones prefixed by >>) >> kismet: WARNING: unmet direct dependencies detected for MOTORCOMM_PHY when selected by YT6801 WARNING: unmet direct dependencies detected for PGP_PRELOAD Depends on [n]: CRYPTO [=y] && ASYMMETRIC_KEY_TYPE [=n] Selected by [y]: - PGP_PRELOAD_PUBLIC_KEYS [=y] && CRYPTO [=y] WARNING: unmet direct dependencies detected for MOTORCOMM_PHY Depends on [n]: NETDEVICES [=y] && PHYLIB [=n] Selected by [y]: - YT6801 [=y] && NETDEVICES [=y] && ETHERNET [=y] && NET_VENDOR_MOTORCOMM [=y] && PCI [=y] && NET [=y] -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6 0/4] LoongArch: internal repository sync 20250528
by Hongchen Zhang 28 May '25

28 May '25

Huacai Chen (1): LoongArch: Fix early_numa_add_cpu() usage for FDT systems Qunqin Zhao (1): tpm: Add a driver for Loongson TPM device Tianyang Zhang (2): Loongarch: Fix panic caused by NULL pmd in huge_pte_offset() mm/page_alloc.c: avoid infinite retries caused by cpuset race MAINTAINERS | 5 + arch/loongarch/configs/loongson3_defconfig | 1 + arch/loongarch/kernel/smp.c | 2 +- arch/loongarch/mm/hugetlbpage.c | 3 +- drivers/char/Kconfig | 1 + drivers/char/loongson_se.c | 33 +++++-- drivers/char/tpm/Kconfig | 9 ++ drivers/char/tpm/Makefile | 1 + drivers/char/tpm/tpm_loongson.c | 103 +++++++++++++++++++++ include/soc/loongson/se.h | 1 + mm/page_alloc.c | 8 ++ 11 files changed, 155 insertions(+), 12 deletions(-) create mode 100644 drivers/char/tpm/tpm_loongson.c -- 2.33.0

2 5

[PATCH OLK-6.6 V1] padata: do not leak refcount in reorder_work
by Wang Tao 28 May '25

28 May '25

From: Dominik Grzegorzek <dominik.grzegorzek(a)oracle.com> mainline inclusion from mainline-v6.15 commit d6ebcde6d4ecf34f8495fb30516645db3aea8993 category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/ICAXLF Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- A recent patch that addressed a UAF introduced a reference count leak: the parallel_data refcount is incremented unconditionally, regardless of the return value of queue_work(). If the work item is already queued, the incremented refcount is never decremented. Fix this by checking the return value of queue_work() and decrementing the refcount when necessary. Resolves: Unreferenced object 0xffff9d9f421e3d80 (size 192): comm "cryptomgr_probe", pid 157, jiffies 4294694003 hex dump (first 32 bytes): 80 8b cf 41 9f 9d ff ff b8 97 e0 89 ff ff ff ff ...A............ d0 97 e0 89 ff ff ff ff 19 00 00 00 1f 88 23 00 ..............#. backtrace (crc 838fb36): __kmalloc_cache_noprof+0x284/0x320 padata_alloc_pd+0x20/0x1e0 padata_alloc_shell+0x3b/0xa0 0xffffffffc040a54d cryptomgr_probe+0x43/0xc0 kthread+0xf6/0x1f0 ret_from_fork+0x2f/0x50 ret_from_fork_asm+0x1a/0x30 Fixes: dd7d37ccf6b1 ("padata: avoid UAF for reorder_work") Cc: <stable(a)vger.kernel.org> Signed-off-by: Dominik Grzegorzek <dominik.grzegorzek(a)oracle.com> Signed-off-by: Herbert Xu <herbert(a)gondor.apana.org.au> Signed-off-by: Wang Tao <wangtao554(a)huawei.com> --- kernel/padata.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/kernel/padata.c b/kernel/padata.c index 071d8cad8078..93cd7704ab63 100644 --- a/kernel/padata.c +++ b/kernel/padata.c @@ -358,7 +358,8 @@ static void padata_reorder(struct parallel_data *pd) * To avoid UAF issue, add pd ref here, and put pd ref after reorder_work finish. */ padata_get_pd(pd); - queue_work(pinst->serial_wq, &pd->reorder_work); + if (!queue_work(pinst->serial_wq, &pd->reorder_work)) + padata_put_pd(pd); } } -- 2.34.1

2 1

[PATCH OLK-5.10 V1] padata: do not leak refcount in reorder_work
by Wang Tao 28 May '25

28 May '25

From: Dominik Grzegorzek <dominik.grzegorzek(a)oracle.com> mainline inclusion from mainline-v6.15 commit d6ebcde6d4ecf34f8495fb30516645db3aea8993 category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/ICAXMC Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- A recent patch that addressed a UAF introduced a reference count leak: the parallel_data refcount is incremented unconditionally, regardless of the return value of queue_work(). If the work item is already queued, the incremented refcount is never decremented. Fix this by checking the return value of queue_work() and decrementing the refcount when necessary. Resolves: Unreferenced object 0xffff9d9f421e3d80 (size 192): comm "cryptomgr_probe", pid 157, jiffies 4294694003 hex dump (first 32 bytes): 80 8b cf 41 9f 9d ff ff b8 97 e0 89 ff ff ff ff ...A............ d0 97 e0 89 ff ff ff ff 19 00 00 00 1f 88 23 00 ..............#. backtrace (crc 838fb36): __kmalloc_cache_noprof+0x284/0x320 padata_alloc_pd+0x20/0x1e0 padata_alloc_shell+0x3b/0xa0 0xffffffffc040a54d cryptomgr_probe+0x43/0xc0 kthread+0xf6/0x1f0 ret_from_fork+0x2f/0x50 ret_from_fork_asm+0x1a/0x30 Fixes: dd7d37ccf6b1 ("padata: avoid UAF for reorder_work") Cc: <stable(a)vger.kernel.org> Signed-off-by: Dominik Grzegorzek <dominik.grzegorzek(a)oracle.com> Signed-off-by: Herbert Xu <herbert(a)gondor.apana.org.au> Signed-off-by: Wang Tao <wangtao554(a)huawei.com> --- kernel/padata.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/kernel/padata.c b/kernel/padata.c index 574ad4d7325d..d0f6bf1cf18a 100644 --- a/kernel/padata.c +++ b/kernel/padata.c @@ -363,7 +363,8 @@ static void padata_reorder(struct parallel_data *pd) * To avoid UAF issue, add pd ref here, and put pd ref after reorder_work finish. */ padata_get_pd(pd); - queue_work(pinst->serial_wq, &pd->reorder_work); + if (!queue_work(pinst->serial_wq, &pd->reorder_work)) + padata_put_pd(pd); } } -- 2.34.1

2 1

[PATCH OLK-6.6 v3 0/5] Support soft domain v3
by Zhang Qiao 28 May '25

28 May '25

v3: - Fix x86 build error v2: - fix __SCHED_FEAT_SOFT_DOMAIN build error Zhang Qiao (5): sched: topology: Build soft domain for LLC sched: Attach task group to soft domain sched: fair: Select idle cpu in soft domain sched: fair: Disable numa migrate for soft domian task arm64: Enable CONFIG_SCHED_SOFT_DOMAIN arch/arm64/configs/openeuler_defconfig | 2 + include/linux/sched/topology.h | 21 ++ init/Kconfig | 11 + kernel/sched/build_policy.c | 3 + kernel/sched/core.c | 72 ++++++ kernel/sched/fair.c | 91 +++++++ kernel/sched/features.h | 4 + kernel/sched/sched.h | 34 +++ kernel/sched/soft_domain.c | 334 +++++++++++++++++++++++++ 9 files changed, 572 insertions(+) create mode 100644 kernel/sched/soft_domain.c -- 2.18.0.huawei.25

2 6

[PATCH OLK-6.6] fbdev: omapfb: Add 'plane' value check
by Yi Yang 28 May '25

28 May '25

From: Leonid Arapov <arapovl839(a)gmail.com> stable inclusion from stable-v6.6.88 commit fda15c5b96b883d62fb2d84a3a1422aa87717897 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IC6PUR CVE: CVE-2025-37851 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 3e411827f31db7f938a30a3c7a7599839401ec30 ] Function dispc_ovl_setup is not intended to work with the value OMAP_DSS_WB of the enum parameter plane. The value of this parameter is initialized in dss_init_overlays and in the current state of the code it cannot take this value so it's not a real problem. For the purposes of defensive coding it wouldn't be superfluous to check the parameter value, because some functions down the call stack process this value correctly and some not. For example, in dispc_ovl_setup_global_alpha it may lead to buffer overflow. Add check for this value. Found by Linux Verification Center (linuxtesting.org) with SVACE static analysis tool. Signed-off-by: Leonid Arapov <arapovl839(a)gmail.com> Signed-off-by: Helge Deller <deller(a)gmx.de> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Yi Yang <yiyang13(a)huawei.com> --- drivers/video/fbdev/omap2/omapfb/dss/dispc.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/drivers/video/fbdev/omap2/omapfb/dss/dispc.c b/drivers/video/fbdev/omap2/omapfb/dss/dispc.c index 21fef9db90d2..4f09111f8b57 100644 --- a/drivers/video/fbdev/omap2/omapfb/dss/dispc.c +++ b/drivers/video/fbdev/omap2/omapfb/dss/dispc.c @@ -2749,9 +2749,13 @@ int dispc_ovl_setup(enum omap_plane plane, const struct omap_overlay_info *oi, bool mem_to_mem) { int r; - enum omap_overlay_caps caps = dss_feat_get_overlay_caps(plane); + enum omap_overlay_caps caps; enum omap_channel channel; + if (plane == OMAP_DSS_WB) + return -EINVAL; + + caps = dss_feat_get_overlay_caps(plane); channel = dispc_ovl_get_channel_out(plane); DSSDBG("dispc_ovl_setup %d, pa %pad, pa_uv %pad, sw %d, %d,%d, %dx%d ->" -- 2.25.1

2 1