- Kernel - mailweb.openeuler.org

[PATCH OLK-6.6] md: make rdev_addable usable for rcu mode
by Zheng Qixing 02 Sep '25

02 Sep '25

From: Yang Erkun <yangerkun(a)huawei.com> mainline inclusion from mainline-v6.17-rc1 commit 13017b427118f4311471ee47df74872372ca8482 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ICUC8X CVE: CVE-2025-38621 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ------------------ Our testcase trigger panic: BUG: kernel NULL pointer dereference, address: 00000000000000e0 ... Oops: Oops: 0000 [#1] SMP NOPTI CPU: 2 UID: 0 PID: 85 Comm: kworker/2:1 Not tainted 6.16.0+ #94 PREEMPT(none) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 Workqueue: md_misc md_start_sync RIP: 0010:rdev_addable+0x4d/0xf0 ... Call Trace: <TASK> md_start_sync+0x329/0x480 process_one_work+0x226/0x6d0 worker_thread+0x19e/0x340 kthread+0x10f/0x250 ret_from_fork+0x14d/0x180 ret_from_fork_asm+0x1a/0x30 </TASK> Modules linked in: raid10 CR2: 00000000000000e0 ---[ end trace 0000000000000000 ]--- RIP: 0010:rdev_addable+0x4d/0xf0 md_spares_need_change in md_start_sync will call rdev_addable which protected by rcu_read_lock/rcu_read_unlock. This rcu context will help protect rdev won't be released, but rdev->mddev will be set to NULL before we call synchronize_rcu in md_kick_rdev_from_array. Fix this by using READ_ONCE and check does rdev->mddev still alive. Fixes: bc08041b32ab ("md: suspend array in md_start_sync() if array need reconfiguration") Fixes: 570b9147deb6 ("md: use RCU lock to protect traversal in md_spares_need_change()") Signed-off-by: Yang Erkun <yangerkun(a)huawei.com> Link: https://lore.kernel.org/linux-raid/20250731114530.776670-1-yangerkun@huawei… Signed-off-by: Yu Kuai <yukuai3(a)huawei.com> Signed-off-by: Zheng Qixing <zhengqixing(a)huawei.com> --- drivers/md/md.c | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/drivers/md/md.c b/drivers/md/md.c index 4f7284beb754..715f6be52ea7 100644 --- a/drivers/md/md.c +++ b/drivers/md/md.c @@ -9326,6 +9326,12 @@ static bool rdev_is_spare(struct md_rdev *rdev) static bool rdev_addable(struct md_rdev *rdev) { + struct mddev *mddev; + + mddev = READ_ONCE(rdev->mddev); + if (!mddev) + return false; + /* rdev is already used, don't add it again. */ if (test_bit(Candidate, &rdev->flags) || rdev->raid_disk >= 0 || test_bit(Faulty, &rdev->flags)) @@ -9336,7 +9342,7 @@ static bool rdev_addable(struct md_rdev *rdev) return true; /* Allow to add if array is read-write. */ - if (md_is_rdwr(rdev->mddev)) + if (md_is_rdwr(mddev)) return true; /* -- 2.39.2

2 1

[PATCH OLK-6.6] scsi: core: ufs: Fix a hang in the error handler
by Zheng Qixing 02 Sep '25

02 Sep '25

From: Sanjeev Yadav <sanjeev.y(a)mediatek.com> stable inclusion from stable-v6.6.94 commit 21f071261f946c5ca1adf378f818082a112b34d2 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ICJT7H CVE: CVE-2025-38119 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… ------------------ [ Upstream commit 8a3514d348de87a9d5e2ac00fbac4faae0b97996 ] ufshcd_err_handling_prepare() calls ufshcd_rpm_get_sync(). The latter function can only succeed if UFSHCD_EH_IN_PROGRESS is not set because resuming involves submitting a SCSI command and ufshcd_queuecommand() returns SCSI_MLQUEUE_HOST_BUSY if UFSHCD_EH_IN_PROGRESS is set. Fix this hang by setting UFSHCD_EH_IN_PROGRESS after ufshcd_rpm_get_sync() has been called instead of before. Backtrace: __switch_to+0x174/0x338 __schedule+0x600/0x9e4 schedule+0x7c/0xe8 schedule_timeout+0xa4/0x1c8 io_schedule_timeout+0x48/0x70 wait_for_common_io+0xa8/0x160 //waiting on START_STOP wait_for_completion_io_timeout+0x10/0x20 blk_execute_rq+0xe4/0x1e4 scsi_execute_cmd+0x108/0x244 ufshcd_set_dev_pwr_mode+0xe8/0x250 __ufshcd_wl_resume+0x94/0x354 ufshcd_wl_runtime_resume+0x3c/0x174 scsi_runtime_resume+0x64/0xa4 rpm_resume+0x15c/0xa1c __pm_runtime_resume+0x4c/0x90 // Runtime resume ongoing ufshcd_err_handler+0x1a0/0xd08 process_one_work+0x174/0x808 worker_thread+0x15c/0x490 kthread+0xf4/0x1ec ret_from_fork+0x10/0x20 Signed-off-by: Sanjeev Yadav <sanjeev.y(a)mediatek.com> [ bvanassche: rewrote patch description ] Fixes: 62694735ca95 ("[SCSI] ufs: Add runtime PM support for UFS host controller driver") Signed-off-by: Bart Van Assche <bvanassche(a)acm.org> Link: https://lore.kernel.org/r/20250523201409.1676055-1-bvanassche@acm.org Reviewed-by: Peter Wang <peter.wang(a)mediatek.com> Signed-off-by: Martin K. Petersen <martin.petersen(a)oracle.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zheng Qixing <zhengqixing(a)huawei.com> --- drivers/ufs/core/ufshcd.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/drivers/ufs/core/ufshcd.c b/drivers/ufs/core/ufshcd.c index 5e9c17681748..b595e9dcb0cf 100644 --- a/drivers/ufs/core/ufshcd.c +++ b/drivers/ufs/core/ufshcd.c @@ -6499,9 +6499,14 @@ static void ufshcd_err_handler(struct work_struct *work) up(&hba->host_sem); return; } - ufshcd_set_eh_in_progress(hba); spin_unlock_irqrestore(hba->host->host_lock, flags); + ufshcd_err_handling_prepare(hba); + + spin_lock_irqsave(hba->host->host_lock, flags); + ufshcd_set_eh_in_progress(hba); + spin_unlock_irqrestore(hba->host->host_lock, flags); + /* Complete requests that have door-bell cleared by h/w */ ufshcd_complete_requests(hba, false); spin_lock_irqsave(hba->host->host_lock, flags); -- 2.39.2

2 1

[PATCH OLK-6.6 0/5] CVE-2025-38502
by Xiaomeng Zhang 02 Sep '25

02 Sep '25

Daniel Borkmann (4): bpf: Add cookie object to bpf maps bpf: Move bpf map owner out of common struct bpf: Move cgroup iterator helpers to bpf.h bpf: Fix oob access in cgroup local storage Xiaomeng Zhang (1): Fix kabi breakage for bpf_map by using KABI_BROKEN_REPLACE and KABI_FILL_HOLE. include/linux/bpf-cgroup.h | 5 ---- include/linux/bpf.h | 56 ++++++++++++++++++++++++++++---------- kernel/bpf/core.c | 50 ++++++++++++++++++++++------------ kernel/bpf/syscall.c | 19 +++++++++---- 4 files changed, 88 insertions(+), 42 deletions(-) -- 2.34.1

2 6

[PATCH OLK-5.10 0/6] CVE-2025-38502
by Xiaomeng Zhang 02 Sep '25

02 Sep '25

Daniel Borkmann (4): bpf: Add cookie object to bpf maps bpf: Move bpf map owner out of common struct bpf: Move cgroup iterator helpers to bpf.h bpf: Fix oob access in cgroup local storage Toke Hoiland-Jorgensen (1): bpf: generalise tail call map compatibility check Xiaomeng Zhang (1): Fix kabi breakage for bpf_map by using KABI_FILL_HOLE and KABI_EXTEND include/linux/bpf-cgroup.h | 5 --- include/linux/bpf.h | 90 +++++++++++++++++++++++++------------- kernel/bpf/arraymap.c | 4 +- kernel/bpf/core.c | 57 ++++++++++++++---------- kernel/bpf/cpumap.c | 16 ++++--- kernel/bpf/devmap.c | 3 +- kernel/bpf/syscall.c | 22 ++++++---- 7 files changed, 119 insertions(+), 78 deletions(-) -- 2.34.1

2 7

[openeuler:openEuler-1.0-LTS 1774/1774] drivers/net/ethernet/3snic/sssnic/hw/sss_pci_probe.c:548:5: error: no previous prototype for 'sss_pci_probe'
by kernel test robot 02 Sep '25

02 Sep '25

Hi Steven, FYI, the error/warning still remains. tree: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS head: 54968bf23106d2ac31ede8dca013a7fadeb3dd75 commit: a6a7981cbf66d4951425d33cdce6ef39206eba83 [1774/1774] Net: ethernet: Support 3snic 3s9xx network card config: arm64-allmodconfig (https://download.01.org/0day-ci/archive/20250902/202509021827.2May8nFb-lkp@…) compiler: aarch64-linux-gcc (GCC) 15.1.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250902/202509021827.2May8nFb-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202509021827.2May8nFb-lkp@intel.com/ All errors (new ones prefixed by >>): >> drivers/net/ethernet/3snic/sssnic/hw/sss_pci_probe.c:276:5: error: no previous prototype for 'sss_attach_uld_driver' [-Werror=missing-prototypes] 276 | int sss_attach_uld_driver(struct sss_pci_adapter *adapter, | ^~~~~~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_pci_probe.c:548:5: error: no previous prototype for 'sss_pci_probe' [-Werror=missing-prototypes] 548 | int sss_pci_probe(struct pci_dev *pdev, const struct pci_device_id *id) | ^~~~~~~~~~~~~ cc1: all warnings being treated as errors -- >> drivers/net/ethernet/3snic/sssnic/hw/sss_pci_remove.c:90:6: error: no previous prototype for 'sss_detach_uld_driver' [-Werror=missing-prototypes] 90 | void sss_detach_uld_driver(struct sss_pci_adapter *adapter, | ^~~~~~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_pci_remove.c:120:6: error: no previous prototype for 'sss_detach_all_uld_driver' [-Werror=missing-prototypes] 120 | void sss_detach_all_uld_driver(struct sss_pci_adapter *adapter) | ^~~~~~~~~~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_pci_remove.c:138:6: error: no previous prototype for 'sss_dettach_uld_dev' [-Werror=missing-prototypes] 138 | void sss_dettach_uld_dev(struct sss_pci_adapter *adapter) | ^~~~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_pci_remove.c:179:6: error: no previous prototype for 'sss_deinit_function' [-Werror=missing-prototypes] 179 | void sss_deinit_function(struct pci_dev *pdev) | ^~~~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_pci_remove.c:200:6: error: no previous prototype for 'sss_unmap_pci_bar' [-Werror=missing-prototypes] 200 | void sss_unmap_pci_bar(struct sss_pci_adapter *adapter) | ^~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_pci_remove.c:211:5: error: no previous prototype for 'sss_deinit_adapter' [-Werror=missing-prototypes] 211 | int sss_deinit_adapter(struct sss_pci_adapter *adapter) | ^~~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_pci_remove.c:237:6: error: no previous prototype for 'sss_deinit_pci_dev' [-Werror=missing-prototypes] 237 | void sss_deinit_pci_dev(struct pci_dev *pdev) | ^~~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_pci_remove.c:249:6: error: no previous prototype for 'sss_pci_remove' [-Werror=missing-prototypes] 249 | void sss_pci_remove(struct pci_dev *pdev) | ^~~~~~~~~~~~~~ cc1: all warnings being treated as errors -- >> drivers/net/ethernet/3snic/sssnic/hw/sss_pci_shutdown.c:28:6: error: no previous prototype for 'sss_pci_shutdown' [-Werror=missing-prototypes] 28 | void sss_pci_shutdown(struct pci_dev *pdev) | ^~~~~~~~~~~~~~~~ cc1: all warnings being treated as errors -- >> drivers/net/ethernet/3snic/sssnic/hw/sss_pci_error.c:34:18: error: no previous prototype for 'sss_detect_pci_error' [-Werror=missing-prototypes] 34 | pci_ers_result_t sss_detect_pci_error(struct pci_dev *pdev, | ^~~~~~~~~~~~~~~~~~~~ cc1: all warnings being treated as errors -- >> drivers/net/ethernet/3snic/sssnic/hw/sss_pci_global.c:37:6: error: no previous prototype for 'sss_init_uld_lock' [-Werror=missing-prototypes] 37 | void sss_init_uld_lock(void) | ^~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_pci_global.c:42:6: error: no previous prototype for 'sss_lock_uld' [-Werror=missing-prototypes] 42 | void sss_lock_uld(void) | ^~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_pci_global.c:47:6: error: no previous prototype for 'sss_unlock_uld' [-Werror=missing-prototypes] 47 | void sss_unlock_uld(void) | ^~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_pci_global.c:52:14: error: no previous prototype for 'sss_get_uld_names' [-Werror=missing-prototypes] 52 | const char **sss_get_uld_names(void) | ^~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_pci_global.c:57:22: error: no previous prototype for 'sss_get_uld_info' [-Werror=missing-prototypes] 57 | struct sss_uld_info *sss_get_uld_info(void) | ^~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_pci_global.c:62:6: error: no previous prototype for 'sss_attach_is_enable' [-Werror=missing-prototypes] 62 | bool sss_attach_is_enable(void) | ^~~~~~~~~~~~~~~~~~~~ cc1: all warnings being treated as errors -- drivers/net/ethernet/3snic/sssnic/hw/sss_hwdev_init.c: In function 'sss_heartbeat_lost_handler': >> drivers/net/ethernet/3snic/sssnic/hw/sss_hwdev_init.c:185:13: error: variable 'pcie_src' set but not used [-Werror=unused-but-set-variable] 185 | u16 pcie_src; | ^~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_hwdev_init.c:184:13: error: variable 'fault_level' set but not used [-Werror=unused-but-set-variable] 184 | u16 fault_level; | ^~~~~~~~~~~ drivers/net/ethernet/3snic/sssnic/hw/sss_hwdev_init.c: At top level: >> drivers/net/ethernet/3snic/sssnic/hw/sss_hwdev_init.c:384:5: error: no previous prototype for 'sss_init_hwdev' [-Werror=missing-prototypes] 384 | int sss_init_hwdev(struct sss_pci_adapter *adapter) | ^~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_hwdev_init.c:487:6: error: no previous prototype for 'sss_deinit_hwdev' [-Werror=missing-prototypes] 487 | void sss_deinit_hwdev(void *hwdev) | ^~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_hwdev_init.c:518:6: error: no previous prototype for 'sss_hwdev_stop' [-Werror=missing-prototypes] 518 | void sss_hwdev_stop(void *hwdev) | ^~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_hwdev_init.c:531:6: error: no previous prototype for 'sss_hwdev_detach' [-Werror=missing-prototypes] 531 | void sss_hwdev_detach(void *hwdev) | ^~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_hwdev_init.c:539:6: error: no previous prototype for 'sss_hwdev_shutdown' [-Werror=missing-prototypes] 539 | void sss_hwdev_shutdown(void *hwdev) | ^~~~~~~~~~~~~~~~~~ cc1: all warnings being treated as errors -- >> drivers/net/ethernet/3snic/sssnic/hw/sss_hwdev_mgmt_info.c:54:5: error: no previous prototype for 'sss_init_mgmt_info' [-Werror=missing-prototypes] 54 | int sss_init_mgmt_info(struct sss_hwdev *hwdev) | ^~~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_hwdev_mgmt_info.c:90:6: error: no previous prototype for 'sss_deinit_mgmt_info' [-Werror=missing-prototypes] 90 | void sss_deinit_mgmt_info(struct sss_hwdev *hwdev) | ^~~~~~~~~~~~~~~~~~~~ cc1: all warnings being treated as errors -- >> drivers/net/ethernet/3snic/sssnic/hw/sss_hwdev_io_flush.c:91:5: error: no previous prototype for 'sss_hwdev_flush_io' [-Werror=missing-prototypes] 91 | int sss_hwdev_flush_io(struct sss_hwdev *hwdev, u16 channel) | ^~~~~~~~~~~~~~~~~~ cc1: all warnings being treated as errors -- >> drivers/net/ethernet/3snic/sssnic/hw/sss_hwif_ctrlq_init.c:277:5: error: no previous prototype for 'sss_reinit_ctrlq_ctx' [-Werror=missing-prototypes] 277 | int sss_reinit_ctrlq_ctx(struct sss_hwdev *hwdev) | ^~~~~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_hwif_ctrlq_init.c:367:6: error: no previous prototype for 'sss_deinit_ctrlq' [-Werror=missing-prototypes] 367 | void sss_deinit_ctrlq(struct sss_hwdev *hwdev) | ^~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_hwif_ctrlq_init.c:501:5: error: no previous prototype for 'sss_init_ctrlq_channel' [-Werror=missing-prototypes] 501 | int sss_init_ctrlq_channel(struct sss_hwdev *hwdev) | ^~~~~~~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_hwif_ctrlq_init.c:538:6: error: no previous prototype for 'sss_deinit_ctrlq_channel' [-Werror=missing-prototypes] 538 | void sss_deinit_ctrlq_channel(struct sss_hwdev *hwdev) | ^~~~~~~~~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_hwif_ctrlq_init.c:547:6: error: no previous prototype for 'sss_ctrlq_flush_sync_cmd' [-Werror=missing-prototypes] 547 | void sss_ctrlq_flush_sync_cmd(struct sss_hwdev *hwdev) | ^~~~~~~~~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_hwif_ctrlq_init.c:573:5: error: no previous prototype for 'sss_wait_ctrlq_stop' [-Werror=missing-prototypes] 573 | int sss_wait_ctrlq_stop(struct sss_hwdev *hwdev) | ^~~~~~~~~~~~~~~~~~~ cc1: all warnings being treated as errors -- >> drivers/net/ethernet/3snic/sssnic/hw/sss_hwif_mbx_init.c:252:5: error: no previous prototype for 'sss_init_func_mbx_msg' [-Werror=missing-prototypes] 252 | int sss_init_func_mbx_msg(void *hwdev, u16 func_num) | ^~~~~~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_hwif_mbx_init.c:401:5: error: no previous prototype for 'sss_hwif_init_mbx' [-Werror=missing-prototypes] 401 | int sss_hwif_init_mbx(struct sss_hwdev *hwdev) | ^~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_hwif_mbx_init.c:449:6: error: no previous prototype for 'sss_hwif_deinit_mbx' [-Werror=missing-prototypes] 449 | void sss_hwif_deinit_mbx(struct sss_hwdev *hwdev) | ^~~~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_hwif_mbx_init.c:872:6: error: no previous prototype for 'sss_recv_mbx_aeq_handler' [-Werror=missing-prototypes] 872 | void sss_recv_mbx_aeq_handler(void *handle, u8 *header, u8 size) | ^~~~~~~~~~~~~~~~~~~~~~~~ cc1: all warnings being treated as errors -- drivers/net/ethernet/3snic/sssnic/hw/sss_hwif_adm.c:545:5: error: no previous prototype for 'sss_adm_msg_write' [-Werror=missing-prototypes] 545 | int sss_adm_msg_write(struct sss_adm_msg *adm_msg, u8 node_id, | ^~~~~~~~~~~~~~~~~ drivers/net/ethernet/3snic/sssnic/hw/sss_hwif_adm.c:551:5: error: no previous prototype for 'sss_adm_msg_read' [-Werror=missing-prototypes] 551 | int sss_adm_msg_read(struct sss_adm_msg *adm_msg, u8 node_id, | ^~~~~~~~~~~~~~~~ drivers/net/ethernet/3snic/sssnic/hw/sss_hwif_adm.c:597:5: error: no previous prototype for 'sss_adm_msg_read_ack' [-Werror=missing-prototypes] 597 | int sss_adm_msg_read_ack(void *hwdev, u8 dest, const void *cmd, | ^~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/3snic/sssnic/hw/sss_hwif_adm.c:618:5: error: no previous prototype for 'sss_adm_msg_write_nack' [-Werror=missing-prototypes] 618 | int sss_adm_msg_write_nack(void *hwdev, u8 dest, const void *cmd, u16 size) | ^~~~~~~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/3snic/sssnic/hw/sss_hwif_adm.c:682:5: error: no previous prototype for 'sss_sync_send_adm_msg' [-Werror=missing-prototypes] 682 | int sss_sync_send_adm_msg(void *hwdev, u8 mod, u16 cmd, void *buf_in, | ^~~~~~~~~~~~~~~~~~~~~ cc1: all warnings being treated as errors .. vim +/sss_pci_probe +548 drivers/net/ethernet/3snic/sssnic/hw/sss_pci_probe.c 547 > 548 int sss_pci_probe(struct pci_dev *pdev, const struct pci_device_id *id) -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 2835/2835] arch/loongarch/kernel/legacy_boot.c:106:34: error: call to undeclared function 'nid_to_addrbase'; ISO C99 and later do not support implicit function declarations
by kernel test robot 02 Sep '25

02 Sep '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 0ee8b2a47575cd8786900505a657c833b2dd4c2f commit: db5bb24abc8dd120fd81b7ce21819e96578d011e [2835/2835] LoongArch: Old BPI compatibility config: loongarch-randconfig-001-20250902 (https://download.01.org/0day-ci/archive/20250902/202509021841.nRo3YUph-lkp@…) compiler: clang version 22.0.0git (https://github.com/llvm/llvm-project 2e122990391b2ba062e6308a12cfedf7206270ba) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250902/202509021841.nRo3YUph-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202509021841.nRo3YUph-lkp@intel.com/ All errors (new ones prefixed by >>): In file included from arch/loongarch/kernel/legacy_boot.c:11: In file included from include/linux/acpi.h:14: In file included from include/linux/device.h:32: In file included from include/linux/device/driver.h:21: In file included from include/linux/module.h:19: In file included from include/linux/elf.h:6: In file included from arch/loongarch/include/asm/elf.h:13: In file included from arch/loongarch/include/asm/vdso.h:10: In file included from include/linux/mm.h:2168: include/linux/vmstat.h:522:36: warning: arithmetic between different enumeration types ('enum node_stat_item' and 'enum lru_list') [-Wenum-enum-conversion] 522 | return node_stat_name(NR_LRU_BASE + lru) + 3; // skip "nr_" | ~~~~~~~~~~~ ^ ~~~ >> arch/loongarch/kernel/legacy_boot.c:106:34: error: call to undeclared function 'nid_to_addrbase'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 106 | pchpic_default[idx].address |= nid_to_addrbase(id) | HT1LO_OFFSET; | ^ arch/loongarch/kernel/legacy_boot.c:94:6: warning: no previous prototype for function 'register_default_pic' [-Wmissing-prototypes] 94 | void register_default_pic(int id, u32 address, u32 irq_base) | ^ arch/loongarch/kernel/legacy_boot.c:94:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 94 | void register_default_pic(int id, u32 address, u32 irq_base) | ^ | static arch/loongarch/kernel/legacy_boot.c:242:13: warning: no previous prototype for function 'fw_init_cmdline' [-Wmissing-prototypes] 242 | __init void fw_init_cmdline(unsigned long argc, unsigned long cmdp) | ^ arch/loongarch/kernel/legacy_boot.c:242:8: note: declare 'static' if the function is not intended to be used outside of this translation unit 242 | __init void fw_init_cmdline(unsigned long argc, unsigned long cmdp) | ^ | static arch/loongarch/kernel/legacy_boot.c:341:14: warning: no previous prototype for function 'bpi_init' [-Wmissing-prototypes] 341 | unsigned int bpi_init(void) | ^ arch/loongarch/kernel/legacy_boot.c:341:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 341 | unsigned int bpi_init(void) | ^ | static 4 warnings and 1 error generated. vim +/nid_to_addrbase +106 arch/loongarch/kernel/legacy_boot.c 93 94 void register_default_pic(int id, u32 address, u32 irq_base) 95 { 96 int idx, entries; 97 unsigned long addr; 98 99 if (bad_pch_pic(address)) 100 return; 101 102 idx = nr_io_pics; 103 104 pchpic_default[idx].address = address; 105 if (idx) > 106 pchpic_default[idx].address |= nid_to_addrbase(id) | HT1LO_OFFSET; 107 pchpic_default[idx].id = id; 108 pchpic_default[idx].version = 0; 109 pchpic_default[idx].size = 0x1000; 110 pchpic_default[idx].gsi_base = irq_base; 111 112 msi_group[nr_io_pics].pci_segment = nr_io_pics; 113 pch_group[nr_io_pics].node = msi_group[nr_io_pics].node = id; 114 115 addr = pchpic_default[idx].address; 116 /* Read INT_ID.int_num */ 117 entries = (((unsigned long)ls7a_readq(addr) >> 48) & 0xff) + 1; 118 pchmsi_default[idx].msg_address = MSI_MSG_ADDRESS; 119 pchmsi_default[idx].start = entries; 120 pchmsi_default[idx].count = MSI_MSG_DEFAULT_COUNT; 121 122 eiointc_default[idx].cascade = 3; 123 eiointc_default[idx].node = id; 124 eiointc_default[idx].node_map = 1; 125 126 if (idx) { 127 eiointc_default[idx].cascade = 0x4; 128 eiointc_default[0].node_map = 0x1DF; 129 eiointc_default[idx].node_map = 0xFE20; 130 } 131 132 acpi_pchpic[idx] = &pchpic_default[idx]; 133 acpi_pchmsi[idx] = &pchmsi_default[idx]; 134 acpi_eiointc[idx] = &eiointc_default[idx]; 135 136 nr_io_pics++; 137 } 138 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-5.10 0/6] CVE-2025-38502
by Xiaomeng Zhang 02 Sep '25

02 Sep '25

Daniel Borkmann (4): bpf: Add cookie object to bpf maps bpf: Move bpf map owner out of common struct bpf: Move cgroup iterator helpers to bpf.h bpf: Fix oob access in cgroup local storage Toke Hoiland-Jorgensen (1): bpf: generalise tail call map compatibility check Xiaomeng Zhang (1): Fix kabi breakage for bpf_map by using KABI_FILL_HOLE and KABI_EXTEND include/linux/bpf-cgroup.h | 5 --- include/linux/bpf.h | 90 +++++++++++++++++++++++++------------- kernel/bpf/arraymap.c | 4 +- kernel/bpf/core.c | 57 ++++++++++++++---------- kernel/bpf/cpumap.c | 16 ++++--- kernel/bpf/devmap.c | 3 +- kernel/bpf/syscall.c | 22 ++++++---- 7 files changed, 119 insertions(+), 78 deletions(-) -- 2.34.1

2 7

[openeuler:OLK-6.6 2835/2835] arch/loongarch/kernel/efi.c:79:12: error: call to undeclared function 'pmd_mkhuge'; ISO C99 and later do not support implicit function declarations
by kernel test robot 02 Sep '25

02 Sep '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 4899f36878e0612ccb9881145064ae35377bcdcc commit: 221e2e8bdbb851a519df0bac5a44298dae2b4612 [2835/2835] LoongArch: add kernel setvirtmap for runtime config: loongarch-randconfig-001-20250902 (https://download.01.org/0day-ci/archive/20250902/202509021500.y8PdGM3g-lkp@…) compiler: clang version 22.0.0git (https://github.com/llvm/llvm-project 2e122990391b2ba062e6308a12cfedf7206270ba) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250902/202509021500.y8PdGM3g-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202509021500.y8PdGM3g-lkp@intel.com/ All errors (new ones prefixed by >>): In file included from arch/loongarch/kernel/efi.c:11: In file included from include/linux/acpi.h:14: In file included from include/linux/device.h:32: In file included from include/linux/device/driver.h:21: In file included from include/linux/module.h:19: In file included from include/linux/elf.h:6: In file included from arch/loongarch/include/asm/elf.h:13: In file included from arch/loongarch/include/asm/vdso.h:10: In file included from include/linux/mm.h:2168: include/linux/vmstat.h:522:36: warning: arithmetic between different enumeration types ('enum node_stat_item' and 'enum lru_list') [-Wenum-enum-conversion] 522 | return node_stat_name(NR_LRU_BASE + lru) + 3; // skip "nr_" | ~~~~~~~~~~~ ^ ~~~ In file included from arch/loongarch/kernel/efi.c:26: arch/loongarch/include/asm/tlb.h:144:24: warning: default initialization of an object of type 'struct vm_area_struct' with const member leaves the object uninitialized [-Wdefault-const-init-field-unsafe] 144 | struct vm_area_struct vma; | ^ include/linux/mm_types.h:601:20: note: member 'vm_flags' declared 'const' here 601 | const vm_flags_t vm_flags; | ^ >> arch/loongarch/kernel/efi.c:79:12: error: call to undeclared function 'pmd_mkhuge'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 79 | entry = pmd_mkhuge(entry); | ^ arch/loongarch/kernel/efi.c:79:12: note: did you mean 'pte_mkhuge'? arch/loongarch/include/asm/pgtable.h:419:21: note: 'pte_mkhuge' declared here 419 | static inline pte_t pte_mkhuge(pte_t pte) | ^ >> arch/loongarch/kernel/efi.c:79:10: error: assigning to 'pmd_t' from incompatible type 'int' 79 | entry = pmd_mkhuge(entry); | ^ ~~~~~~~~~~~~~~~~~ 2 warnings and 2 errors generated. vim +/pmd_mkhuge +79 arch/loongarch/kernel/efi.c 54 55 static int __init efimap_populate_hugepages( 56 unsigned long start, unsigned long end, 57 pgprot_t prot) 58 { 59 unsigned long addr; 60 unsigned long next; 61 pmd_t entry; 62 pud_t *pud; 63 pmd_t *pmd; 64 65 for (addr = start; addr < end; addr = next) { 66 next = pmd_addr_end(addr, end); 67 pud = pud_offset((p4d_t *)pgd_efi + pgd_index(addr), addr); 68 if (pud_none(*pud)) { 69 void *p = memblock_alloc_low(PAGE_SIZE, PAGE_SIZE); 70 71 if (!p) 72 return -1; 73 pmd_init(p); 74 pud_populate(&init_mm, pud, p); 75 } 76 pmd = pmd_offset(pud, addr); 77 if (pmd_none(*pmd)) { 78 entry = pfn_pmd((addr >> PAGE_SHIFT), prot); > 79 entry = pmd_mkhuge(entry); 80 set_pmd_at(&init_mm, addr, pmd, entry); 81 } 82 } 83 return 0; 84 } 85 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6 00/32] mm: page_alloc: freelist migratetype hygiene
by Jinjiang Tu 02 Sep '25

02 Sep '25

Brendan Jackman (2): mm/page_alloc: clarify terminology in migratetype fallback code mm/page_alloc: clarify should_claim_block() commentary David Hildenbrand (5): mm/page_isolation: don't pass gfp flags to isolate_single_pageblock() mm/page_alloc: make __alloc_contig_migrate_range() static mm/page_alloc: sort out the alloc_contig_range() gfp flags mess mm/page_alloc: forward the gfp flags from alloc_contig_range() to post_alloc_hook() mm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in split_large_buddy() Huan Yang (1): mm: page_alloc: simpify page del and expand Jinjiang Tu (1): mm: page_alloc: don't steal single pages from biggest buddy Johannes Weiner (13): mm: page_alloc: remove pcppage migratetype caching mm: page_alloc: optimize free_unref_folios() mm: page_alloc: fix up block types when merging compatible blocks mm: page_alloc: move free pages when converting block during isolation mm: page_alloc: fix move_freepages_block() range error mm: page_alloc: fix freelist movement during block conversion mm: page_alloc: close migratetype race between freeing and stealing mm: page_isolation: prepare for hygienic freelists mm: page_alloc: consolidate free page accounting mm: page_alloc: batch vmstat updates in expand() mm: page_alloc: fix highatomic typing in multi-block buddies mm: page_alloc: remove remnants of unlocked migratetype updates mm: page_alloc: speed up fallbacks in rmqueue_bulk() Kefeng Wang (1): mm: remove migration for HugePage in isolate_single_pageblock() Kemeng Shi (2): mm/page_alloc: remove unnecessary check in break_down_buddy_pages mm/page_alloc: remove unnecessary next_page in break_down_buddy_pages Luoxi Li (1): mm: remove unused has_isolate_pageblock Vlastimil Babka (1): mm: page_alloc: change move_freepages() to __move_freepages_block() Yajun Deng (1): mm: page_alloc: simplify __free_pages_ok() Yu Zhao (2): mm/page_alloc: keep track of free highatomic mm/contig_alloc: support __GFP_COMP Zi Yan (1): mm: page_alloc: set migratetype inside move_freepages() gaoxiang17 (1): mm/page_alloc: add some detailed comments in can_steal_fallback include/linux/gfp.h | 21 + include/linux/mm.h | 18 +- include/linux/mmzone.h | 2 +- include/linux/page-isolation.h | 13 +- include/linux/vmstat.h | 8 - mm/compaction.c | 45 +- mm/debug_page_alloc.c | 12 +- mm/internal.h | 15 +- mm/page_alloc.c | 1071 +++++++++++++++++++------------- mm/page_isolation.c | 143 ++--- 10 files changed, 731 insertions(+), 617 deletions(-) -- 2.43.0

2 33

[PATCH OLK-6.6] sdei_watchdog: add percpu flag to fix sdei watchdog state in lpi mode
by Bowen You 02 Sep '25

02 Sep '25

From: youbowen <youbowen2(a)huawei.com> hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/I8LQCC CVE: NA ------------------------------------------------- /proc/sys/kernel/nmi_watchdog interface is designed to close nmi watchdog, but currently, it's not working when in low power scenario, since pm callback will enable/disable event when power state changes. This commit add a percpu flag to be compatible with pm callback. Fixes: f022c4cac9c1 ("sdei_watchdog: use lockup_detector_retry_init() to init sdei watchdog") Signed-off-by: Bowen You <youbowen2(a)huawei.com> --- arch/arm64/kernel/watchdog_sdei.c | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/arch/arm64/kernel/watchdog_sdei.c b/arch/arm64/kernel/watchdog_sdei.c index 19f47e24fa59..d8019becf10d 100644 --- a/arch/arm64/kernel/watchdog_sdei.c +++ b/arch/arm64/kernel/watchdog_sdei.c @@ -25,6 +25,7 @@ static int sdei_watchdog_event_num; bool disable_sdei_nmi_watchdog; static bool sdei_watchdog_registered; static DEFINE_PER_CPU(ktime_t, last_check_time); +static DEFINE_PER_CPU(bool, sdei_usr_en); void sdei_watchdog_hardlockup_enable(unsigned int cpu) { @@ -44,6 +45,7 @@ void sdei_watchdog_hardlockup_enable(unsigned int cpu) pr_err("Enable NMI Watchdog failed on cpu%d\n", smp_processor_id()); } + __this_cpu_write(sdei_usr_en, 1); } void sdei_watchdog_hardlockup_disable(unsigned int cpu) @@ -54,6 +56,7 @@ void sdei_watchdog_hardlockup_disable(unsigned int cpu) return; ret = sdei_api_event_disable(sdei_watchdog_event_num); + __this_cpu_write(sdei_usr_en, 0); if (ret) pr_err("Disable NMI Watchdog failed on cpu%d\n", smp_processor_id()); @@ -110,16 +113,18 @@ void sdei_watchdog_clear_eoi(void) static int sdei_watchdog_pm_notifier(struct notifier_block *nb, unsigned long action, void *data) { - int rv; + int rv = 0; WARN_ON_ONCE(preemptible()); switch (action) { case CPU_PM_ENTER: - rv = sdei_api_event_disable(sdei_watchdog_event_num); + if (per_cpu(sdei_usr_en, smp_processor_id())) + rv = sdei_api_event_disable(sdei_watchdog_event_num); break; case CPU_PM_EXIT: - rv = sdei_api_event_enable(sdei_watchdog_event_num); + if (per_cpu(sdei_usr_en, smp_processor_id())) + rv = sdei_api_event_enable(sdei_watchdog_event_num); break; default: return NOTIFY_DONE; -- 2.34.1

2 1