- Kernel - mailweb.openeuler.org

[PATCH OLK-6.6] media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
by Yuan can 29 Nov '25

29 Nov '25

From: Duoming Zhou <duoming(a)zju.edu.cn> stable inclusion from stable-v6.6.110 commit bb10a9ddc8d6c5dbf098f21eb1055a652652e524 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID22Q9 CVE: CVE-2025-39996 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 01e03fb7db419d39e18d6090d4873c1bff103914 upstream. The original code uses cancel_delayed_work() in flexcop_pci_remove(), which does not guarantee that the delayed work item irq_check_work has fully completed if it was already running. This leads to use-after-free scenarios where flexcop_pci_remove() may free the flexcop_device while irq_check_work is still active and attempts to dereference the device. A typical race condition is illustrated below: CPU 0 (remove) | CPU 1 (delayed work callback) flexcop_pci_remove() | flexcop_pci_irq_check_work() cancel_delayed_work() | flexcop_device_kfree(fc_pci->fc_dev) | | fc = fc_pci->fc_dev; // UAF This is confirmed by a KASAN report: ================================================================== BUG: KASAN: slab-use-after-free in __run_timer_base.part.0+0x7d7/0x8c0 Write of size 8 at addr ffff8880093aa8c8 by task bash/135 ... Call Trace: <IRQ> dump_stack_lvl+0x55/0x70 print_report+0xcf/0x610 ? __run_timer_base.part.0+0x7d7/0x8c0 kasan_report+0xb8/0xf0 ? __run_timer_base.part.0+0x7d7/0x8c0 __run_timer_base.part.0+0x7d7/0x8c0 ? __pfx___run_timer_base.part.0+0x10/0x10 ? __pfx_read_tsc+0x10/0x10 ? ktime_get+0x60/0x140 ? lapic_next_event+0x11/0x20 ? clockevents_program_event+0x1d4/0x2a0 run_timer_softirq+0xd1/0x190 handle_softirqs+0x16a/0x550 irq_exit_rcu+0xaf/0xe0 sysvec_apic_timer_interrupt+0x70/0x80 </IRQ> ... Allocated by task 1: kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 __kasan_kmalloc+0x7f/0x90 __kmalloc_noprof+0x1be/0x460 flexcop_device_kmalloc+0x54/0xe0 flexcop_pci_probe+0x1f/0x9d0 local_pci_probe+0xdc/0x190 pci_device_probe+0x2fe/0x470 really_probe+0x1ca/0x5c0 __driver_probe_device+0x248/0x310 driver_probe_device+0x44/0x120 __driver_attach+0xd2/0x310 bus_for_each_dev+0xed/0x170 bus_add_driver+0x208/0x500 driver_register+0x132/0x460 do_one_initcall+0x89/0x300 kernel_init_freeable+0x40d/0x720 kernel_init+0x1a/0x150 ret_from_fork+0x10c/0x1a0 ret_from_fork_asm+0x1a/0x30 Freed by task 135: kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 kasan_save_free_info+0x3a/0x60 __kasan_slab_free+0x3f/0x50 kfree+0x137/0x370 flexcop_device_kfree+0x32/0x50 pci_device_remove+0xa6/0x1d0 device_release_driver_internal+0xf8/0x210 pci_stop_bus_device+0x105/0x150 pci_stop_and_remove_bus_device_locked+0x15/0x30 remove_store+0xcc/0xe0 kernfs_fop_write_iter+0x2c3/0x440 vfs_write+0x871/0xd70 ksys_write+0xee/0x1c0 do_syscall_64+0xac/0x280 entry_SYSCALL_64_after_hwframe+0x77/0x7f ... Replace cancel_delayed_work() with cancel_delayed_work_sync() to ensure that the delayed work item is properly canceled and any executing delayed work has finished before the device memory is deallocated. This bug was initially identified through static analysis. To reproduce and test it, I simulated the B2C2 FlexCop PCI device in QEMU and introduced artificial delays within the flexcop_pci_irq_check_work() function to increase the likelihood of triggering the bug. Fixes: 382c5546d618 ("V4L/DVB (10694): [PATCH] software IRQ watchdog for Flexcop B2C2 DVB PCI cards") Cc: stable(a)vger.kernel.org Signed-off-by: Duoming Zhou <duoming(a)zju.edu.cn> Signed-off-by: Hans Verkuil <hverkuil+cisco(a)kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Yuan can <yuancan(a)huawei.com> --- drivers/media/pci/b2c2/flexcop-pci.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/media/pci/b2c2/flexcop-pci.c b/drivers/media/pci/b2c2/flexcop-pci.c index 486c8ec0fa60..ab53c5b02c48 100644 --- a/drivers/media/pci/b2c2/flexcop-pci.c +++ b/drivers/media/pci/b2c2/flexcop-pci.c @@ -411,7 +411,7 @@ static void flexcop_pci_remove(struct pci_dev *pdev) struct flexcop_pci *fc_pci = pci_get_drvdata(pdev); if (irq_chk_intv > 0) - cancel_delayed_work(&fc_pci->irq_check_work); + cancel_delayed_work_sync(&fc_pci->irq_check_work); flexcop_pci_dma_exit(fc_pci); flexcop_device_exit(fc_pci->fc_dev); -- 2.34.1

2 1

[PATCH OLK-6.6] xsched: add xsched_{set,get}attr syscall
by Liu Kai 29 Nov '25

29 Nov '25

hulk inclusion category: feature bugzilla: https://gitee.com/openeuler/kernel/issues/ID9IFI ----------------------------------------- If CONFIG_XCU_CGROUP is not enabled, the xsched kernel defaults to only the RT scheduling class, and there is no interface available to configure the RT priority. Therefore, two new syscalls are added to set and get the configuration of the RT scheduling class. The default priority for RT is 4 (the lowest priority), and it inherits the priority configuration of the parent process during fork. If pid=0, it indicates that the configuration is applied to the current process. Additionally, an interface is reserved for configuring the xsched scheduling class, which will be used to support CFS in the future. Currently, these system calls are only available for ARM64 and x86_64 architectures. Signed-off-by: Liu Kai <liukai284(a)huawei.com> --- arch/arm/tools/syscall.tbl | 4 +- arch/powerpc/kernel/syscalls/syscall.tbl | 4 +- arch/x86/entry/syscalls/syscall_32.tbl | 4 +- arch/x86/entry/syscalls/syscall_64.tbl | 4 +- include/linux/sched.h | 11 +++ include/linux/syscalls.h | 3 + include/linux/xsched.h | 17 +--- include/linux/xsched_types.h | 27 ++++++ include/uapi/asm-generic/unistd.h | 8 +- init/init_task.c | 6 ++ kernel/fork.c | 3 + kernel/xsched/core.c | 74 ++++++++++++++ kernel/xsched/rt.c | 96 ++----------------- .../arch/powerpc/entry/syscalls/syscall.tbl | 4 +- .../arch/x86/entry/syscalls/syscall_64.tbl | 4 +- 15 files changed, 149 insertions(+), 120 deletions(-) create mode 100644 include/linux/xsched_types.h diff --git a/arch/arm/tools/syscall.tbl b/arch/arm/tools/syscall.tbl index 5127af69471c..9c04d1625193 100644 --- a/arch/arm/tools/syscall.tbl +++ b/arch/arm/tools/syscall.tbl @@ -468,8 +468,8 @@ 452 common fchmodat2 sys_fchmodat2 453 common map_shadow_stack sys_map_shadow_stack 454 common vstream_manage sys_ni_syscall -455 common kabi_reserved455 sys_ni_syscall -456 common kabi_reserved456 sys_ni_syscall +455 common xsched_setattr sys_ni_syscall +456 common xsched_getattr sys_ni_syscall 457 common kabi_reserved457 sys_ni_syscall 458 common kabi_reserved458 sys_ni_syscall 459 common kabi_reserved459 sys_ni_syscall diff --git a/arch/powerpc/kernel/syscalls/syscall.tbl b/arch/powerpc/kernel/syscalls/syscall.tbl index 3378482bcf6f..086f8d3e8c12 100644 --- a/arch/powerpc/kernel/syscalls/syscall.tbl +++ b/arch/powerpc/kernel/syscalls/syscall.tbl @@ -545,8 +545,8 @@ 452 common fchmodat2 sys_fchmodat2 453 common map_shadow_stack sys_ni_syscall 454 common vstream_manage sys_ni_syscall -455 common kabi_reserved455 sys_ni_syscall -456 common kabi_reserved456 sys_ni_syscall +455 common xsched_setattr sys_ni_syscall +456 common xsched_getattr sys_ni_syscall 457 common kabi_reserved457 sys_ni_syscall 458 common kabi_reserved458 sys_ni_syscall 459 common kabi_reserved459 sys_ni_syscall diff --git a/arch/x86/entry/syscalls/syscall_32.tbl b/arch/x86/entry/syscalls/syscall_32.tbl index e14ce1f6b1ec..90d4cd7dfe28 100644 --- a/arch/x86/entry/syscalls/syscall_32.tbl +++ b/arch/x86/entry/syscalls/syscall_32.tbl @@ -459,8 +459,8 @@ 452 i386 fchmodat2 sys_fchmodat2 453 i386 map_shadow_stack sys_map_shadow_stack 454 i386 vstream_manage sys_ni_syscall -455 i386 kabi_reserved455 sys_ni_syscall -456 i386 kabi_reserved456 sys_ni_syscall +455 i386 xsched_setattr sys_ni_syscall +456 i386 xsched_getattr sys_ni_syscall 457 i386 kabi_reserved457 sys_ni_syscall 458 i386 kabi_reserved458 sys_ni_syscall 459 i386 kabi_reserved459 sys_ni_syscall diff --git a/arch/x86/entry/syscalls/syscall_64.tbl b/arch/x86/entry/syscalls/syscall_64.tbl index 162517343cb1..5f6579d0e307 100644 --- a/arch/x86/entry/syscalls/syscall_64.tbl +++ b/arch/x86/entry/syscalls/syscall_64.tbl @@ -376,8 +376,8 @@ 452 common fchmodat2 sys_fchmodat2 453 64 map_shadow_stack sys_map_shadow_stack 454 common vstream_manage sys_vstream_manage -455 common kabi_reserved455 sys_ni_syscall -456 common kabi_reserved456 sys_ni_syscall +455 common xsched_setattr sys_xsched_setattr +456 common xsched_getattr sys_xsched_getattr 457 common kabi_reserved457 sys_ni_syscall 458 common kabi_reserved458 sys_ni_syscall 459 common kabi_reserved459 sys_ni_syscall diff --git a/include/linux/sched.h b/include/linux/sched.h index e0afdc2dad2c..e3c0c5b56f01 100644 --- a/include/linux/sched.h +++ b/include/linux/sched.h @@ -41,6 +41,10 @@ #include <linux/thread_bits.h> #include <linux/kabi.h> +#ifdef CONFIG_XCU_SCHEDULER +#include <linux/xsched_types.h> +#endif + /* task_struct member predeclarations (sorted alphabetically): */ struct audit_context; struct bio_list; @@ -72,6 +76,9 @@ struct signal_struct; struct task_delay_info; struct task_group; struct user_event_mm; +#ifdef CONFIG_XCU_SCHEDULER +struct xsched_attr; +#endif /* * Task state bitmask. NOTE! These bits are also @@ -776,6 +783,10 @@ struct kmap_ctrl { struct task_struct_resvd { /* pointer back to the main task_struct */ struct task_struct *task; + +#ifdef CONFIG_XCU_SCHEDULER + struct xsched_attr xse_attr; +#endif }; struct task_struct { diff --git a/include/linux/syscalls.h b/include/linux/syscalls.h index 119aabc72a2d..2e7b2c57c8c0 100644 --- a/include/linux/syscalls.h +++ b/include/linux/syscalls.h @@ -950,6 +950,9 @@ asmlinkage long sys_cachestat(unsigned int fd, asmlinkage long sys_map_shadow_stack(unsigned long addr, unsigned long size, unsigned int flags); asmlinkage long sys_vstream_manage(struct vstream_args __user *arg, int cmd); + +asmlinkage long sys_xsched_setattr(pid_t pid, struct xsched_attr __user *arg); +asmlinkage long sys_xsched_getattr(pid_t pid, struct xsched_attr __user *arg); /* * Architecture-specific system calls */ diff --git a/include/linux/xsched.h b/include/linux/xsched.h index 38db18c0d570..2f1354dd49f6 100644 --- a/include/linux/xsched.h +++ b/include/linux/xsched.h @@ -6,6 +6,7 @@ #include <linux/kref.h> #include <linux/vstream.h> #include <linux/xcu_group.h> +#include <linux/xsched_types.h> #ifndef pr_fmt #define pr_fmt(fmt) fmt @@ -53,20 +54,6 @@ extern struct xsched_cu *xsched_cu_mgr[XSCHED_NR_CUS]; -enum xcu_sched_type { - XSCHED_TYPE_RT = 0, - XSCHED_TYPE_CFS = 1, - XSCHED_TYPE_NUM, - XSCHED_TYPE_DFLT = XSCHED_TYPE_RT -}; - -enum xse_prio { - XSE_PRIO_HIGH = 0, - XSE_PRIO_LOW = 4, - NR_XSE_PRIO, - XSE_PRIO_DFLT = XSE_PRIO_LOW -}; - extern struct xsched_class rt_xsched_class; extern struct xsched_class fair_xsched_class; @@ -456,7 +443,7 @@ int xsched_init_entity(struct xsched_context *ctx, struct vstream_info *vs); int ctx_bind_to_xcu(vstream_info_t *vstream_info, struct xsched_context *ctx); int xsched_vsm_add_tail(struct vstream_info *vs, vstream_args_t *arg); struct vstream_metadata *xsched_vsm_fetch_first(struct vstream_info *vs); -int xsched_rt_prio_set(pid_t tgid, unsigned int prio); +void xsched_rt_prio_set(pid_t tgid, unsigned int prio); void enqueue_ctx(struct xsched_entity *xse, struct xsched_cu *xcu); void dequeue_ctx(struct xsched_entity *xse, struct xsched_cu *xcu); int delete_ctx(struct xsched_context *ctx); diff --git a/include/linux/xsched_types.h b/include/linux/xsched_types.h new file mode 100644 index 000000000000..5b4f0423024d --- /dev/null +++ b/include/linux/xsched_types.h @@ -0,0 +1,27 @@ +/* SPDX-License-Identifier: GPL-2.0 */ +#ifndef _XSCHED_TYPE_H +#define _XSCHED_TYPE_H + +struct xsched_attr { + /* XSCHED_TYPE_RT, XSCHED_TYPE_CFS */ + unsigned int xsched_class; + + /* 1~5 */ + unsigned int xsched_priority; +}; + +enum xcu_sched_type { + XSCHED_TYPE_RT = 0, + XSCHED_TYPE_CFS = 1, + XSCHED_TYPE_NUM, + XSCHED_TYPE_DFLT = XSCHED_TYPE_RT +}; + +enum xse_prio { + XSE_PRIO_HIGH = 0, + XSE_PRIO_LOW = 4, + NR_XSE_PRIO, + XSE_PRIO_DFLT = XSE_PRIO_LOW +}; + +#endif /* ! _XSCHED_TYPE_H */ diff --git a/include/uapi/asm-generic/unistd.h b/include/uapi/asm-generic/unistd.h index f015a3987255..02f2cb738d48 100644 --- a/include/uapi/asm-generic/unistd.h +++ b/include/uapi/asm-generic/unistd.h @@ -829,10 +829,10 @@ __SYSCALL(__NR_map_shadow_stack, sys_map_shadow_stack) #define __NR_vstream_manage 454 __SYSCALL(__NR_vstream_manage, sys_vstream_manage) -#define __NR_kabi_reserved455 455 -__SYSCALL(__NR_kabi_reserved455, sys_ni_syscall) -#define __NR_kabi_reserved456 456 -__SYSCALL(__NR_kabi_reserved456, sys_ni_syscall) +#define __NR_xsched_setattr 455 +__SYSCALL(__NR_xsched_setattr, sys_xsched_setattr) +#define __NR_xsched_getattr 456 +__SYSCALL(__NR_xsched_getattr, sys_xsched_getattr) #define __NR_kabi_reserved457 457 __SYSCALL(__NR_kabi_reserved457, sys_ni_syscall) #define __NR_kabi_reserved458 458 diff --git a/init/init_task.c b/init/init_task.c index 1adc17149558..61a6345708c8 100644 --- a/init/init_task.c +++ b/init/init_task.c @@ -14,6 +14,9 @@ #include <linux/scs.h> #include <linux/uaccess.h> +#ifdef CONFIG_XCU_SCHEDULER +#include <linux/xsched_types.h> +#endif static struct signal_struct init_signals = { .nr_threads = 1, @@ -59,6 +62,9 @@ unsigned long init_shadow_call_stack[SCS_SIZE / sizeof(long)] static struct task_struct_resvd init_task_struct_resvd = { .task = &init_task, +#ifdef CONFIG_XCU_SCHEDULER + .xse_attr = { .xsched_priority = XSE_PRIO_DFLT }, +#endif }; /* diff --git a/kernel/fork.c b/kernel/fork.c index 328bbf6a36d2..f3c663602345 100644 --- a/kernel/fork.c +++ b/kernel/fork.c @@ -1165,6 +1165,9 @@ static bool dup_resvd_task_struct(struct task_struct *dst, return false; dst->_resvd->task = dst; +#ifdef CONFIG_XCU_SCHEDULER + dst->_resvd->xse_attr = orig->_resvd->xse_attr; +#endif return true; } diff --git a/kernel/xsched/core.c b/kernel/xsched/core.c index 69f1a442f985..02d326868094 100644 --- a/kernel/xsched/core.c +++ b/kernel/xsched/core.c @@ -20,6 +20,7 @@ #include <linux/kthread.h> #include <linux/slab.h> #include <linux/spinlock_types.h> +#include <linux/syscalls.h> #include <linux/types.h> #include <linux/xsched.h> @@ -533,3 +534,76 @@ __init int xsched_sched_init(void) } late_initcall(xsched_sched_init); +static int xsched_setattr(struct task_struct *p, const struct xsched_attr *attr) +{ + struct xsched_attr *old_attr = &p->_resvd->xse_attr; + + if (old_attr->xsched_class == attr->xsched_class && + old_attr->xsched_priority == attr->xsched_priority) + return 0; + + old_attr->xsched_class = attr->xsched_class; + old_attr->xsched_priority = attr->xsched_priority; + xsched_rt_prio_set(p->pid, old_attr->xsched_priority); + + return 0; +} + +SYSCALL_DEFINE2(xsched_setattr, pid_t, pid, struct xsched_attr __user *, arg) +{ + struct xsched_attr kattr; + struct task_struct *p; + int retval, rt_prio; + + if (pid < 0 || !arg) + return -EINVAL; + + if (copy_from_user(&kattr, arg, sizeof(*arg))) { + XSCHED_ERR("Fail to copy_from_user @ %s\n", __func__); + return -EFAULT; + } + + rt_prio = NR_XSE_PRIO - kattr.xsched_priority; + /* Only support RT */ + if (rt_prio < XSE_PRIO_HIGH || rt_prio > XSE_PRIO_LOW || + kattr.xsched_class > XSCHED_TYPE_RT) + return -EINVAL; + + kattr.xsched_priority = rt_prio; + + rcu_read_lock(); + p = pid ? find_task_by_vpid(pid) : current; + if (likely(p)) + get_task_struct(p); + rcu_read_unlock(); + + if (likely(p)) { + retval = xsched_setattr(p, &kattr); + put_task_struct(p); + } + + return retval; +} + +SYSCALL_DEFINE2(xsched_getattr, pid_t, pid, struct xsched_attr __user *, arg) +{ + struct xsched_attr kattr = { }; + struct task_struct *p; + + if (pid < 0 || !arg) + return -EINVAL; + + rcu_read_lock(); + p = pid ? find_task_by_vpid(pid) : current; + kattr = p->_resvd->xse_attr; + rcu_read_unlock(); + + kattr.xsched_priority = NR_XSE_PRIO - kattr.xsched_priority; + + if (copy_to_user(arg, &kattr, sizeof(kattr))) { + XSCHED_ERR("Fail to copy_to_user @ %s\n", __func__); + return -EFAULT; + } + + return 0; +} diff --git a/kernel/xsched/rt.c b/kernel/xsched/rt.c index 41b60e341679..e2ce1ebb8a7a 100644 --- a/kernel/xsched/rt.c +++ b/kernel/xsched/rt.c @@ -25,76 +25,6 @@ #define XSCHED_RT_TIMESLICE (10 * NSEC_PER_MSEC) -#define TGID_HASH_BITS 8 - -/* Mapping between tgid and context */ -struct tgid_prio { - pid_t tgid; - int32_t prio; - struct hlist_node hnode; -}; - -static DEFINE_HASHTABLE(tgid_prio_map, TGID_HASH_BITS); -static DEFINE_SPINLOCK(tgid_prio_lock); - -static int tgid_prio_insert(pid_t tgid, int32_t prio) -{ - struct tgid_prio *new_map; - unsigned int hash_key; - - if (prio >= NR_XSE_PRIO) - return -EINVAL; - - new_map = kzalloc(sizeof(struct tgid_prio), GFP_KERNEL); - if (!new_map) { - XSCHED_ERR("Fail to alloc mapping (tgid=%d) @ %s\n", - tgid, __func__); - return -ENOMEM; - } - - new_map->tgid = tgid; - new_map->prio = prio; - - hash_key = hash_32(tgid, TGID_HASH_BITS); - - spin_lock(&tgid_prio_lock); - hash_add_rcu(tgid_prio_map, &new_map->hnode, hash_key); - spin_unlock(&tgid_prio_lock); - - return 0; -} - -static struct tgid_prio *tgid_prio_find(pid_t tgid) -{ - struct tgid_prio *map = NULL; - unsigned int hash_key = hash_32(tgid, TGID_HASH_BITS); - - rcu_read_lock(); - hash_for_each_possible_rcu(tgid_prio_map, map, hnode, hash_key) { - if (map->tgid == tgid) - break; - } - rcu_read_unlock(); - return map; -} - -static void tgid_prio_delete(pid_t tgid) -{ - struct tgid_prio *map; - unsigned int hash_key = hash_32(tgid, TGID_HASH_BITS); - - spin_lock(&tgid_prio_lock); - hash_for_each_possible(tgid_prio_map, map, hnode, hash_key) { - if (map->tgid == tgid) { - hash_del_rcu(&map->hnode); - spin_unlock(&tgid_prio_lock); - kfree(map); - return; - } - } - spin_unlock(&tgid_prio_lock); -} - static inline void xse_rt_add(struct xsched_entity *xse, struct xsched_cu *xcu) { @@ -115,7 +45,7 @@ static inline void xse_rt_move_tail(struct xsched_entity *xse) /* Increase RT runqueue total and per prio nr_running stat. */ static inline void xrq_inc_nr_running(struct xsched_entity *xse, - struct xsched_cu *xcu) + struct xsched_cu *xcu) { xcu->xrq.rt.nr_running++; } @@ -143,7 +73,7 @@ static void enqueue_ctx_rt(struct xsched_entity *xse, struct xsched_cu *xcu) } static inline struct xsched_entity *xrq_next_xse(struct xsched_cu *xcu, - int prio) + int prio) { return list_first_entry(&xcu->xrq.rt.rq[prio], struct xsched_entity, rt.list_node); @@ -217,23 +147,16 @@ void rq_init_rt(struct xsched_cu *xcu) void xse_init_rt(struct xsched_entity *xse) { - struct tgid_prio *map = tgid_prio_find(xse->tgid); + struct task_struct *p; - xse->rt.prio = (map) ? map->prio : XSE_PRIO_DFLT; + p = find_task_by_vpid(xse->tgid); + xse->rt.prio = p->_resvd->xse_attr.xsched_priority; XSCHED_DEBUG("Xse init: set priority=%d.\n", xse->rt.prio); xse->rt.timeslice = XSCHED_RT_TIMESLICE; INIT_LIST_HEAD(&xse->rt.list_node); } -void xse_deinit_rt(struct xsched_entity *xse) -{ - struct tgid_prio *map = tgid_prio_find(xse->tgid); - - if (map) { - tgid_prio_delete(xse->tgid); - XSCHED_DEBUG("Map deleted: tgid=%d\n", xse->tgid); - } -} +void xse_deinit_rt(struct xsched_entity *xse) { } struct xsched_class rt_xsched_class = { .class_id = XSCHED_TYPE_RT, @@ -248,16 +171,13 @@ struct xsched_class rt_xsched_class = { .check_preempt = check_preempt_ctx_rt }; -int xsched_rt_prio_set(pid_t tgid, unsigned int prio) +void xsched_rt_prio_set(pid_t tgid, unsigned int prio) { unsigned int id; struct xsched_cu *xcu; struct xsched_context *ctx; struct xsched_entity *xse; - tgid_prio_delete(tgid); - tgid_prio_insert(tgid, prio); - for_each_active_xcu(xcu, id) { mutex_lock(&xcu->ctx_list_lock); mutex_lock(&xcu->xcu_lock); @@ -275,7 +195,5 @@ int xsched_rt_prio_set(pid_t tgid, unsigned int prio) mutex_unlock(&xcu->xcu_lock); mutex_unlock(&xcu->ctx_list_lock); } - - return 0; } diff --git a/tools/perf/arch/powerpc/entry/syscalls/syscall.tbl b/tools/perf/arch/powerpc/entry/syscalls/syscall.tbl index 4d76d8970013..32cdc194a940 100644 --- a/tools/perf/arch/powerpc/entry/syscalls/syscall.tbl +++ b/tools/perf/arch/powerpc/entry/syscalls/syscall.tbl @@ -541,8 +541,8 @@ 452 common fchmodat2 sys_fchmodat2 453 common map_shadow_stack sys_ni_syscall 454 common vstream_manage sys_ni_syscall -455 common kabi_reserved455 sys_ni_syscall -456 common kabi_reserved456 sys_ni_syscall +455 common xsched_setattr sys_ni_syscall +456 common xsched_getattr sys_ni_syscall 457 common kabi_reserved457 sys_ni_syscall 458 common kabi_reserved458 sys_ni_syscall 459 common kabi_reserved459 sys_ni_syscall diff --git a/tools/perf/arch/x86/entry/syscalls/syscall_64.tbl b/tools/perf/arch/x86/entry/syscalls/syscall_64.tbl index 65004179e548..3f20eeaf9f18 100644 --- a/tools/perf/arch/x86/entry/syscalls/syscall_64.tbl +++ b/tools/perf/arch/x86/entry/syscalls/syscall_64.tbl @@ -376,8 +376,8 @@ 452 common fchmodat2 sys_fchmodat2 453 64 map_shadow_stack sys_map_shadow_stack 454 common vstream_manage sys_vstream_manage -455 common kabi_reserved455 sys_ni_syscall -456 common kabi_reserved456 sys_ni_syscall +455 common xsched_setattr sys_ni_syscall +456 common xsched_getattr sys_ni_syscall 457 common kabi_reserved457 sys_ni_syscall 458 common kabi_reserved458 sys_ni_syscall 459 common kabi_reserved459 sys_ni_syscall -- 2.34.1

2 1

[PATCH OLK-6.6 0/2] Fix CVE-2025-40016
by Long Li 29 Nov '25

29 Nov '25

Fix CVE-2025-40016 Ricardo Ribalda (1): media: uvcvideo: Use heuristic to find stream entity Thadeu Lima de Souza Cascardo (1): media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID drivers/media/usb/uvc/uvc_driver.c | 88 ++++++++++++++++++++---------- drivers/media/usb/uvc/uvcvideo.h | 2 + 2 files changed, 62 insertions(+), 28 deletions(-) -- 2.39.2

2 3

[openeuler:OLK-6.6 3406/3406] htmldocs: ./drivers/fwctl/ub/ub_common.h:43: warning: Function parameter or member 'ioctl_fifo' not described in 'ubctl_dev'
by kernel test robot 28 Nov '25

28 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: ae3faae9efa6dabe1e7613b5e5d3758ffaefb86a commit: f632e7e84ac26e324f4c4a43bc72947d44590d1d [3406/3406] ub: ub_fwctl: add ub_fwctl driver-api documentation description reproduce: (https://download.01.org/0day-ci/archive/20251128/202511281644.oBrjsPKC-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511281644.oBrjsPKC-lkp@intel.com/ All warnings (new ones prefixed by >>): Error: Cannot open file ./include/linux/energy_model.h Error: Cannot open file ./include/linux/energy_model.h Error: Cannot open file ./include/linux/fprobe.h Error: Cannot open file ./include/linux/mutex.h Error: Cannot open file ./include/linux/mutex.h >> ./drivers/fwctl/ub/ub_common.h:43: warning: Function parameter or member 'ioctl_fifo' not described in 'ubctl_dev' >> ./drivers/fwctl/ub/ub_common.h:79: warning: Function parameter or member 'in_data' not described in 'ubctl_cmd' >> ./drivers/fwctl/ub/ub_common.h:79: warning: Function parameter or member 'out_data' not described in 'ubctl_cmd' ./drivers/ub/ubfi/ubc.h:91: warning: Function parameter or member 'reserved' not described in 'ubrt_ubc_table' ./drivers/ub/ubfi/ubc.h:91: warning: Function parameter or member 'ubcs' not described in 'ubrt_ubc_table' ./drivers/ub/ubfi/ubc.h:60: warning: Function parameter or member 'reserved' not described in 'ubc_node' ./drivers/ub/ubfi/ubc.h:60: warning: Function parameter or member 'reserved2' not described in 'ubc_node' ./drivers/ub/ubfi/ubc.h:60: warning: Function parameter or member 'ubc_guid_low' not described in 'ubc_node' ./drivers/ub/ubfi/ubc.h:60: warning: Function parameter or member 'ubc_guid_high' not described in 'ubc_node' ./include/ub/ubus/ubus.h:387: warning: Function parameter or member 'KABI_RESERVE(1' not described in 'ub_driver' Error: Cannot open file ./include/linux/mod_devicetable.h >> ./include/uapi/fwctl/ub_fwctl.h:293: warning: expecting prototype for struct fwctl_pkt_in_enable. Prototype was for struct fwctl_pkt_in_port instead >> ./include/uapi/fwctl/ub_fwctl.h:301: warning: expecting prototype for struct fwctl_pkt_in_enable. Prototype was for struct fwctl_pkt_in_index instead >> ./include/uapi/fwctl/ub_fwctl.h:311: warning: expecting prototype for struct fwctl_pkt_in_enable. Prototype was for struct fwctl_pkt_in_ummuid_value instead Error: Cannot open file ./include/linux/fwctl.h ./include/uapi/linux/iommufd.h:615: warning: Enum value 'IOMMU_HW_CAP_PCI_PASID_EXEC' not described in enum 'iommufd_hw_capabilities' ./include/uapi/linux/iommufd.h:615: warning: Enum value 'IOMMU_HW_CAP_PCI_PASID_PRIV' not described in enum 'iommufd_hw_capabilities' ./include/uapi/linux/iommufd.h:615: warning: Excess enum value 'IOMMU_HW_CAP_PASID_EXEC' description in 'iommufd_hw_capabilities' ./include/uapi/linux/iommufd.h:615: warning: Excess enum value 'IOMMU_HW_CAP_PASID_PRIV' description in 'iommufd_hw_capabilities' -- Documentation/scsi/sssraid.rst:42: WARNING: Block quote ends without a blank line; unexpected unindent. [docutils] WARNING: kernel-doc './scripts/kernel-doc -rst -enable-lineno -sphinx-version 8.2.3 ./include/linux/fprobe.h' failed with return code 1 WARNING: kernel-doc './scripts/kernel-doc -rst -enable-lineno -sphinx-version 8.2.3 -internal ./include/linux/mutex.h' failed with return code 2 Documentation/translations/zh_TW/dev-tools/index.rst:21: WARNING: toctree contains reference to nonexisting document 'translations/zh_TW/dev-tools/sparse' [toc.not_readable] Documentation/ub/index.rst:10: WARNING: toctree contains reference to nonexisting document 'ub/ummu-core' [toc.not_readable] >> Documentation/ub/ub_fwctl/ub_fwctl.rst:85: WARNING: Title underline too short. -- Querying UB link and chip info by ub_fwctl ----------------------------------------- [docutils] >> Documentation/ub/ub_fwctl/ub_fwctl.rst:85: WARNING: Title underline too short. vim +43 ./drivers/fwctl/ub/ub_common.h fe9e7907e911ee Jiaqi Cheng 2025-08-21 17 aabc3d6533494e Jiaqi Cheng 2025-08-14 18 #define ubctl_err(ucdev, format, ...) \ aabc3d6533494e Jiaqi Cheng 2025-08-14 19 dev_err(&ucdev->fwctl.dev, format, ##__VA_ARGS__) aabc3d6533494e Jiaqi Cheng 2025-08-14 20 aabc3d6533494e Jiaqi Cheng 2025-08-14 21 #define ubctl_dbg(ucdev, format, ...) \ aabc3d6533494e Jiaqi Cheng 2025-08-14 22 dev_dbg(&ucdev->fwctl.dev, "PID %u: " format, current->pid, \ aabc3d6533494e Jiaqi Cheng 2025-08-14 23 ##__VA_ARGS__) aabc3d6533494e Jiaqi Cheng 2025-08-14 24 aabc3d6533494e Jiaqi Cheng 2025-08-14 25 #define ubctl_info(ucdev, format, ...) \ aabc3d6533494e Jiaqi Cheng 2025-08-14 26 dev_info(&ucdev->fwctl.dev, "PID %u: " format, current->pid, \ aabc3d6533494e Jiaqi Cheng 2025-08-14 27 ##__VA_ARGS__) aabc3d6533494e Jiaqi Cheng 2025-08-14 28 59043edff2c8b6 Jiaqi Cheng 2025-08-21 29 #define UBCTL_GET_PHY_ADDR(high, low) ((((u64)(high)) << 32) | (low)) 7ed154d74ca3de Jiaqi Cheng 2025-08-21 30 #define UBCTL_EXTRACT_BITS(value, start, end) \ 7ed154d74ca3de Jiaqi Cheng 2025-08-21 31 (((value) >> (start)) & ((1UL << ((end) - (start) + 1)) - 1)) 59043edff2c8b6 Jiaqi Cheng 2025-08-21 32 f632e7e84ac26e Jiaqi Cheng 2025-11-26 33 /** f632e7e84ac26e Jiaqi Cheng 2025-11-26 34 * struct ubctl_dev - Device struct of framework f632e7e84ac26e Jiaqi Cheng 2025-11-26 35 * @fwctl: The device of fwctl f632e7e84ac26e Jiaqi Cheng 2025-11-26 36 * @data_size: Length of @data f632e7e84ac26e Jiaqi Cheng 2025-11-26 37 * @adev: data transmitted to users f632e7e84ac26e Jiaqi Cheng 2025-11-26 38 */ aabc3d6533494e Jiaqi Cheng 2025-08-14 39 struct ubctl_dev { aabc3d6533494e Jiaqi Cheng 2025-08-14 40 struct fwctl_device fwctl; aabc3d6533494e Jiaqi Cheng 2025-08-14 41 DECLARE_KFIFO_PTR(ioctl_fifo, unsigned long); aabc3d6533494e Jiaqi Cheng 2025-08-14 42 struct auxiliary_device *adev; aabc3d6533494e Jiaqi Cheng 2025-08-14 @43 }; aabc3d6533494e Jiaqi Cheng 2025-08-14 44 f632e7e84ac26e Jiaqi Cheng 2025-11-26 45 /** f632e7e84ac26e Jiaqi Cheng 2025-11-26 46 * struct ubctl_query_cmd_param - Parameters of userspace RPC f632e7e84ac26e Jiaqi Cheng 2025-11-26 47 * @in_len: Length of @in f632e7e84ac26e Jiaqi Cheng 2025-11-26 48 * @in: Data of input f632e7e84ac26e Jiaqi Cheng 2025-11-26 49 * @out_len: Length of @out f632e7e84ac26e Jiaqi Cheng 2025-11-26 50 * @out: Data of output f632e7e84ac26e Jiaqi Cheng 2025-11-26 51 * f632e7e84ac26e Jiaqi Cheng 2025-11-26 52 * Used to receive parameters passed from userspace RPC f632e7e84ac26e Jiaqi Cheng 2025-11-26 53 */ aabc3d6533494e Jiaqi Cheng 2025-08-14 54 struct ubctl_query_cmd_param { aabc3d6533494e Jiaqi Cheng 2025-08-14 55 size_t in_len; aabc3d6533494e Jiaqi Cheng 2025-08-14 56 struct fwctl_rpc_ub_in *in; aabc3d6533494e Jiaqi Cheng 2025-08-14 57 size_t out_len; aabc3d6533494e Jiaqi Cheng 2025-08-14 58 struct fwctl_rpc_ub_out *out; aabc3d6533494e Jiaqi Cheng 2025-08-14 59 }; aabc3d6533494e Jiaqi Cheng 2025-08-14 60 f632e7e84ac26e Jiaqi Cheng 2025-11-26 61 /** f632e7e84ac26e Jiaqi Cheng 2025-11-26 62 * struct ubctl_cmd - Parameters of query command f632e7e84ac26e Jiaqi Cheng 2025-11-26 63 * @op_code: The operation code f632e7e84ac26e Jiaqi Cheng 2025-11-26 64 * @is_read: Read-only or read-write f632e7e84ac26e Jiaqi Cheng 2025-11-26 65 * @in_len: Length of @in_data f632e7e84ac26e Jiaqi Cheng 2025-11-26 66 * @out_len: Length of @out_data f632e7e84ac26e Jiaqi Cheng 2025-11-26 67 * @in: Data of input f632e7e84ac26e Jiaqi Cheng 2025-11-26 68 * @out: Data of output f632e7e84ac26e Jiaqi Cheng 2025-11-26 69 * f632e7e84ac26e Jiaqi Cheng 2025-11-26 70 * Used for sending and receiving software communication f632e7e84ac26e Jiaqi Cheng 2025-11-26 71 */ aabc3d6533494e Jiaqi Cheng 2025-08-14 72 struct ubctl_cmd { aabc3d6533494e Jiaqi Cheng 2025-08-14 73 u32 op_code; aabc3d6533494e Jiaqi Cheng 2025-08-14 74 u32 is_read; aabc3d6533494e Jiaqi Cheng 2025-08-14 75 u32 in_len; aabc3d6533494e Jiaqi Cheng 2025-08-14 76 u32 out_len; aabc3d6533494e Jiaqi Cheng 2025-08-14 77 void *in_data; aabc3d6533494e Jiaqi Cheng 2025-08-14 78 void *out_data; aabc3d6533494e Jiaqi Cheng 2025-08-14 @79 }; aabc3d6533494e Jiaqi Cheng 2025-08-14 80 :::::: The code at line 43 was first introduced by commit :::::: aabc3d6533494ed9a3ace44576d03572746f91cd ub: ub_fwctl: Add the ub_fwctl driver and its basic features. :::::: TO: Jiaqi Cheng <chengjiaqi3(a)huawei.com> :::::: CC: Jiaqi Cheng <chengjiaqi3(a)huawei.com> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3355/3355] kernel/xsched/cfs.c:22:6: warning: no previous prototype for function 'xs_rq_add'
by kernel test robot 28 Nov '25

28 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: ae3faae9efa6dabe1e7613b5e5d3758ffaefb86a commit: 024b851138509252da4531dc2e69b1e8df50fd3b [3355/3355] xsched: Add xsched CFS class config: loongarch-allyesconfig (https://download.01.org/0day-ci/archive/20251128/202511282349.cceTk3rf-lkp@…) compiler: clang version 22.0.0git (https://github.com/llvm/llvm-project 9e9fe08b16ea2c4d9867fb4974edf2a3776d6ece) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251128/202511282349.cceTk3rf-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511282349.cceTk3rf-lkp@intel.com/ All warnings (new ones prefixed by >>): >> kernel/xsched/cfs.c:22:6: warning: no previous prototype for function 'xs_rq_add' [-Wmissing-prototypes] 22 | void xs_rq_add(struct xsched_entity_cfs *xse) | ^ kernel/xsched/cfs.c:22:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 22 | void xs_rq_add(struct xsched_entity_cfs *xse) | ^ | static >> kernel/xsched/cfs.c:45:6: warning: no previous prototype for function 'xs_rq_remove' [-Wmissing-prototypes] 45 | void xs_rq_remove(struct xsched_entity_cfs *xse) | ^ kernel/xsched/cfs.c:45:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 45 | void xs_rq_remove(struct xsched_entity_cfs *xse) | ^ | static >> kernel/xsched/cfs.c:159:6: warning: no previous prototype for function 'rq_init_fair' [-Wmissing-prototypes] 159 | void rq_init_fair(struct xsched_cu *xcu) | ^ kernel/xsched/cfs.c:159:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 159 | void rq_init_fair(struct xsched_cu *xcu) | ^ | static >> kernel/xsched/cfs.c:164:6: warning: no previous prototype for function 'xse_init_fair' [-Wmissing-prototypes] 164 | void xse_init_fair(struct xsched_entity *xse) | ^ kernel/xsched/cfs.c:164:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 164 | void xse_init_fair(struct xsched_entity *xse) | ^ | static >> kernel/xsched/cfs.c:169:6: warning: no previous prototype for function 'xse_deinit_fair' [-Wmissing-prototypes] 169 | void xse_deinit_fair(struct xsched_entity *xse) | ^ kernel/xsched/cfs.c:169:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 169 | void xse_deinit_fair(struct xsched_entity *xse) | ^ | static 5 warnings generated. vim +/xs_rq_add +22 kernel/xsched/cfs.c 18 19 #define CFS_INNER_RQ_EMPTY(cfs_xse) \ 20 ((cfs_xse)->xruntime == XSCHED_TIME_INF) 21 > 22 void xs_rq_add(struct xsched_entity_cfs *xse) 23 { 24 struct xsched_rq_cfs *cfs_rq = xse->cfs_rq; 25 struct rb_node **link = &cfs_rq->ctx_timeline.rb_root.rb_node; 26 struct rb_node *parent = NULL; 27 struct xsched_entity_cfs *entry; 28 bool leftmost = true; 29 30 while (*link) { 31 parent = *link; 32 entry = rb_entry(parent, struct xsched_entity_cfs, run_node); 33 if (xse->xruntime <= entry->xruntime) { 34 link = &parent->rb_left; 35 } else { 36 link = &parent->rb_right; 37 leftmost = false; 38 } 39 } 40 41 rb_link_node(&xse->run_node, parent, link); 42 rb_insert_color_cached(&xse->run_node, &cfs_rq->ctx_timeline, leftmost); 43 } 44 > 45 void xs_rq_remove(struct xsched_entity_cfs *xse) 46 { 47 struct xsched_rq_cfs *cfs_rq = xse->cfs_rq; 48 49 rb_erase_cached(&xse->run_node, &cfs_rq->ctx_timeline); 50 } 51 52 /** 53 * xs_cfs_rq_update() - Update entity's runqueue position with new xruntime 54 */ 55 static void xs_cfs_rq_update(struct xsched_entity_cfs *xse_cfs, u64 new_xrt) 56 { 57 xs_rq_remove(xse_cfs); 58 xse_cfs->xruntime = new_xrt; 59 xs_rq_add(xse_cfs); 60 } 61 62 static inline struct xsched_entity_cfs * 63 xs_pick_first(struct xsched_rq_cfs *cfs_rq) 64 { 65 struct xsched_entity_cfs *xse_cfs; 66 struct rb_node *left = rb_first_cached(&cfs_rq->ctx_timeline); 67 68 if (!left) 69 return NULL; 70 71 xse_cfs = rb_entry(left, struct xsched_entity_cfs, run_node); 72 return xse_cfs; 73 } 74 75 /** 76 * xs_update() - Account xruntime and runtime metrics. 77 * @xse_cfs: Point to CFS scheduling entity. 78 * @delta: Execution time in last period 79 */ 80 static void xs_update(struct xsched_entity_cfs *xse_cfs, u64 delta) 81 { 82 u64 new_xrt = xse_cfs->xruntime + delta * xse_cfs->weight; 83 84 xs_cfs_rq_update(xse_cfs, new_xrt); 85 xse_cfs->sum_exec_runtime += delta; 86 } 87 88 /* 89 * Xsched Fair class methods 90 * For rq manipulation we rely on root runqueue lock already acquired in core. 91 * Access xsched_group_xcu_priv requires no locks because one thread per XCU. 92 */ 93 static void dequeue_ctx_fair(struct xsched_entity *xse) 94 { 95 struct xsched_cu *xcu = xse->xcu; 96 struct xsched_entity_cfs *first; 97 struct xsched_entity_cfs *xse_cfs = &xse->cfs; 98 99 xs_rq_remove(xse_cfs); 100 101 first = xs_pick_first(&xcu->xrq.cfs); 102 xcu->xrq.cfs.min_xruntime = (first) ? first->xruntime : XSCHED_TIME_INF; 103 } 104 105 /** 106 * enqueue_ctx_fair() - Add context to the runqueue 107 * @xse: xsched entity of context 108 * @xcu: executor 109 * 110 * In contrary to enqueue_task it is called once on context init. 111 * Although groups reside in tree, their nodes not counted in nr_running. 112 * The xruntime of a group xsched entitry represented by min xruntime inside. 113 */ 114 static void enqueue_ctx_fair(struct xsched_entity *xse, struct xsched_cu *xcu) 115 { 116 struct xsched_entity_cfs *first; 117 struct xsched_rq_cfs *rq; 118 struct xsched_entity_cfs *xse_cfs = &xse->cfs; 119 120 rq = xse_cfs->cfs_rq = &xcu->xrq.cfs; 121 122 /* If no XSE of only empty groups */ 123 if (xs_pick_first(rq) == NULL || rq->min_xruntime == XSCHED_TIME_INF) 124 rq->min_xruntime = xse_cfs->xruntime; 125 else 126 xse_cfs->xruntime = max(xse_cfs->xruntime, rq->min_xruntime); 127 128 xs_rq_add(xse_cfs); 129 130 first = xs_pick_first(&xcu->xrq.cfs); 131 xcu->xrq.cfs.min_xruntime = (first) ? first->xruntime : XSCHED_TIME_INF; 132 } 133 134 static struct xsched_entity *pick_next_ctx_fair(struct xsched_cu *xcu) 135 { 136 struct xsched_entity_cfs *xse; 137 struct xsched_rq_cfs *rq = &xcu->xrq.cfs; 138 139 xse = xs_pick_first(rq); 140 if (!xse) 141 return NULL; 142 143 return container_of(xse, struct xsched_entity, cfs); 144 } 145 146 static inline bool 147 xs_should_preempt_fair(struct xsched_entity *xse) 148 { 149 return (atomic_read(&xse->submitted_one_kick) >= XSCHED_CFS_KICK_SLICE); 150 } 151 152 static void put_prev_ctx_fair(struct xsched_entity *xse) 153 { 154 struct xsched_entity_cfs *prev = &xse->cfs; 155 156 xs_update(prev, xse->last_exec_runtime); 157 } 158 > 159 void rq_init_fair(struct xsched_cu *xcu) 160 { 161 xcu->xrq.cfs.ctx_timeline = RB_ROOT_CACHED; 162 } 163 > 164 void xse_init_fair(struct xsched_entity *xse) 165 { 166 xse->cfs.weight = XSCHED_CFS_WEIGHT_DFLT; 167 } 168 > 169 void xse_deinit_fair(struct xsched_entity *xse) 170 { 171 /* TODO Cgroup exit */ 172 } 173 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3355/3355] kernel/xsched/core.c:497:12: warning: no previous prototype for function 'xsched_sched_init'
by kernel test robot 28 Nov '25

28 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: ae3faae9efa6dabe1e7613b5e5d3758ffaefb86a commit: 832ec54e11a079d968d8f23780ab455b1537b214 [3355/3355] xsched: Add xsched RT class config: loongarch-allyesconfig (https://download.01.org/0day-ci/archive/20251128/202511282111.LvHs2qlX-lkp@…) compiler: clang version 22.0.0git (https://github.com/llvm/llvm-project 9e9fe08b16ea2c4d9867fb4974edf2a3776d6ece) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251128/202511282111.LvHs2qlX-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511282111.LvHs2qlX-lkp@intel.com/ All warnings (new ones prefixed by >>): kernel/xsched/core.c:189:5: warning: no previous prototype for function 'xsched_xse_set_class' [-Wmissing-prototypes] 189 | int xsched_xse_set_class(struct xsched_entity *xse) | ^ kernel/xsched/core.c:189:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 189 | int xsched_xse_set_class(struct xsched_entity *xse) | ^ | static >> kernel/xsched/core.c:497:12: warning: no previous prototype for function 'xsched_sched_init' [-Wmissing-prototypes] 497 | __init int xsched_sched_init(void) | ^ kernel/xsched/core.c:497:8: note: declare 'static' if the function is not intended to be used outside of this translation unit 497 | __init int xsched_sched_init(void) | ^ | static kernel/xsched/core.c:296:20: warning: unused function 'should_preempt' [-Wunused-function] 296 | static inline bool should_preempt(struct xsched_entity *xse) | ^~~~~~~~~~~~~~ 3 warnings generated. -- >> kernel/xsched/rt.c:207:6: warning: no previous prototype for function 'rq_init_rt' [-Wmissing-prototypes] 207 | void rq_init_rt(struct xsched_cu *xcu) | ^ kernel/xsched/rt.c:207:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 207 | void rq_init_rt(struct xsched_cu *xcu) | ^ | static >> kernel/xsched/rt.c:218:6: warning: no previous prototype for function 'xse_init_rt' [-Wmissing-prototypes] 218 | void xse_init_rt(struct xsched_entity *xse) | ^ kernel/xsched/rt.c:218:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 218 | void xse_init_rt(struct xsched_entity *xse) | ^ | static >> kernel/xsched/rt.c:228:6: warning: no previous prototype for function 'xse_deinit_rt' [-Wmissing-prototypes] 228 | void xse_deinit_rt(struct xsched_entity *xse) | ^ kernel/xsched/rt.c:228:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 228 | void xse_deinit_rt(struct xsched_entity *xse) | ^ | static 3 warnings generated. vim +/xsched_sched_init +497 kernel/xsched/core.c 496 > 497 __init int xsched_sched_init(void) -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3355/3355] kernel/xsched/core.c:189:5: warning: no previous prototype for function 'xsched_xse_set_class'
by kernel test robot 28 Nov '25

28 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: ae3faae9efa6dabe1e7613b5e5d3758ffaefb86a commit: 76c15076abcb100f7c1204bd1ef0ec55128d6546 [3355/3355] xsched: Add basic scheduler core support config: loongarch-allyesconfig (https://download.01.org/0day-ci/archive/20251128/202511282009.VCbXC9Zw-lkp@…) compiler: clang version 22.0.0git (https://github.com/llvm/llvm-project 9e9fe08b16ea2c4d9867fb4974edf2a3776d6ece) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251128/202511282009.VCbXC9Zw-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511282009.VCbXC9Zw-lkp@intel.com/ All warnings (new ones prefixed by >>): >> kernel/xsched/core.c:189:5: warning: no previous prototype for function 'xsched_xse_set_class' [-Wmissing-prototypes] 189 | int xsched_xse_set_class(struct xsched_entity *xse) | ^ kernel/xsched/core.c:189:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 189 | int xsched_xse_set_class(struct xsched_entity *xse) | ^ | static kernel/xsched/core.c:289:20: warning: unused function 'should_preempt' [-Wunused-function] 289 | static inline bool should_preempt(struct xsched_entity *xse) | ^~~~~~~~~~~~~~ 2 warnings generated. vim +/xsched_xse_set_class +189 kernel/xsched/core.c 188 > 189 int xsched_xse_set_class(struct xsched_entity *xse) 190 { 191 struct xsched_class *sched = xsched_first_class; 192 193 xse->class = sched; 194 return 0; 195 } 196 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3406/3406] htmldocs: Documentation/admin-guide/perf/ummu-pmu.rst: WARNING: document isn't included in any toctree [toc.not_included]
by kernel test robot 28 Nov '25

28 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: ae3faae9efa6dabe1e7613b5e5d3758ffaefb86a commit: 3a2ebcdd4d6c72fcd64521ffcfe496b8950be8d0 [3406/3406] iommu/ummu: Add UMMU documentation description reproduce: (https://download.01.org/0day-ci/archive/20251128/202511281229.1nZT8v8W-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511281229.1nZT8v8W-lkp@intel.com/ All warnings (new ones prefixed by >>): WARNING: kernel-doc './scripts/kernel-doc -rst -enable-lineno -sphinx-version 8.2.3 -function ub_device_id ./include/linux/mod_devicetable.h' failed with return code 1 WARNING: kernel-doc './scripts/kernel-doc -rst -enable-lineno -sphinx-version 8.2.3 ./include/linux/fwctl.h' failed with return code 1 Documentation/userspace-api/ummu_core.rst:73: ERROR: Unexpected indentation. [docutils] Documentation/userspace-api/ummu_core.rst:90: ERROR: Unexpected indentation. [docutils] Documentation/userspace-api/ummu_core.rst:103: ERROR: Unexpected indentation. [docutils] >> Documentation/admin-guide/perf/ummu-pmu.rst: WARNING: document isn't included in any toctree [toc.not_included] Documentation/arch/x86/hygon-secure-virtualization.rst: WARNING: document isn't included in any toctree [toc.not_included] Documentation/misc-devices/zcopy.rst: WARNING: document isn't included in any toctree [toc.not_included] Documentation/mm/dynamic_hugetlb.rst: WARNING: document isn't included in any toctree [toc.not_included] Documentation/networking/device_drivers/ethernet/nebula-matrix/m18120.rst: WARNING: document isn't included in any toctree [toc.not_included] Documentation/networking/hinic3.rst: WARNING: document isn't included in any toctree [toc.not_included] Documentation/scsi/hisi_raid.rst: WARNING: document isn't included in any toctree [toc.not_included] Documentation/scsi/sssraid.rst: WARNING: document isn't included in any toctree [toc.not_included] Documentation/ub/ummu/index.rst: WARNING: document isn't included in any toctree [toc.not_included] >> Documentation/userspace-api/ummu_core.rst: WARNING: document isn't included in any toctree [toc.not_included] Documentation/virt/coco/csv-guest.rst: WARNING: document isn't included in any toctree [toc.not_included] Documentation/virt/kvm/arm/pvsched.rst: WARNING: document isn't included in any toctree [toc.not_included] Documentation/virt/kvm/arm/pvsgi.rst: WARNING: document isn't included in any toctree [toc.not_included] Documentation/vm/memcg_memfs_info.rst: WARNING: document isn't included in any toctree [toc.not_included] Documentation/networking/ub/ubl.rst:63: WARNING: undefined label: 'documentation/networking/ub/unic.rst' [ref.ref] -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3355/3355] kernel/xsched/vstream.c:94:19: warning: no previous prototype for function 'xcu_find'
by kernel test robot 28 Nov '25

28 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: ae3faae9efa6dabe1e7613b5e5d3758ffaefb86a commit: 8dde1f2e6bf6049bf69c9f510349c698e0aba49d [3355/3355] xsched: Introduce vstream management config: loongarch-allyesconfig (https://download.01.org/0day-ci/archive/20251128/202511281845.H2cg7rYT-lkp@…) compiler: clang version 22.0.0git (https://github.com/llvm/llvm-project 9e9fe08b16ea2c4d9867fb4974edf2a3776d6ece) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251128/202511281845.H2cg7rYT-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511281845.H2cg7rYT-lkp@intel.com/ All warnings (new ones prefixed by >>): >> kernel/xsched/vstream.c:94:19: warning: no previous prototype for function 'xcu_find' [-Wmissing-prototypes] 94 | struct xsched_cu *xcu_find(uint32_t type, | ^ kernel/xsched/vstream.c:94:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 94 | struct xsched_cu *xcu_find(uint32_t type, | ^ | static 1 warning generated. vim +/xcu_find +94 kernel/xsched/vstream.c 93 > 94 struct xsched_cu *xcu_find(uint32_t type, 95 uint32_t dev_id, uint32_t channel_id) 96 { 97 struct xcu_group *group = NULL; 98 99 /* Find xcu by type. */ 100 group = xcu_group_find(xcu_group_root, type); 101 if (group == NULL) { 102 XSCHED_ERR("Fail to find type group.\n"); 103 return NULL; 104 } 105 106 /* Find device id group. */ 107 group = xcu_group_find(group, dev_id); 108 if (group == NULL) { 109 XSCHED_ERR("Fail to find device group.\n"); 110 return NULL; 111 } 112 /* Find channel id group. */ 113 group = xcu_group_find(group, channel_id); 114 if (group == NULL) { 115 XSCHED_ERR("Fail to find channel group.\n"); 116 return NULL; 117 } 118 119 XSCHED_DEBUG("XCU found: type=%u, dev_id=%u, chan_id=%u.\n", 120 type, dev_id, channel_id); 121 122 return group->xcu; 123 } 124 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3355/3355] drivers/xcu/xcu_group.c:41:5: warning: no previous prototype for function '__xcu_group_attach'
by kernel test robot 28 Nov '25

28 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: ae3faae9efa6dabe1e7613b5e5d3758ffaefb86a commit: b7261a251299bfdababe53a848084af2ecfcc1ae [3355/3355] xcu: Add base NPU driver support config: loongarch-allyesconfig (https://download.01.org/0day-ci/archive/20251128/202511281657.lWcX7PhK-lkp@…) compiler: clang version 22.0.0git (https://github.com/llvm/llvm-project 9e9fe08b16ea2c4d9867fb4974edf2a3776d6ece) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251128/202511281657.lWcX7PhK-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511281657.lWcX7PhK-lkp@intel.com/ All warnings (new ones prefixed by >>): >> drivers/xcu/xcu_group.c:41:5: warning: no previous prototype for function '__xcu_group_attach' [-Wmissing-prototypes] 41 | int __xcu_group_attach(struct xcu_group *new_group, | ^ drivers/xcu/xcu_group.c:41:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 41 | int __xcu_group_attach(struct xcu_group *new_group, | ^ | static 1 warning generated. vim +/__xcu_group_attach +41 drivers/xcu/xcu_group.c 40 > 41 int __xcu_group_attach(struct xcu_group *new_group, 42 struct xcu_group *previous_group) 43 { 44 int id = new_group->id; 45 46 if (id == -1) 47 id = idr_alloc(&previous_group->next_layer, new_group, 0, 48 INT_MAX, GFP_KERNEL); 49 else 50 id = idr_alloc(&previous_group->next_layer, new_group, id, 51 id + 1, GFP_KERNEL); 52 53 if (id < 0) { 54 XSCHED_ERR("Fail to attach xcu_group: id conflict @ %s\n", 55 __func__); 56 return -EEXIST; 57 } 58 new_group->id = id; 59 new_group->previous_layer = previous_group; 60 61 return 0; 62 } 63 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0