- Kernel - mailweb.openeuler.org

[openeuler:OLK-6.6 3214/3214] mm/memory.c:2802:5: sparse: sparse: symbol '__remap_pfn_range' was not declared. Should it be static?
by kernel test robot 19 Nov '25

19 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: b4a3c05741e1650e8bb8399196fb5d7a318a4698 commit: 923e224a12462d640fa37f3069c6bfafd378ac3b [3214/3214] mm: introduce remap_pfn_range_try_pmd() for PMD-level hugepage mapping config: x86_64-randconfig-r111-20251118 (https://download.01.org/0day-ci/archive/20251119/202511190025.obom3fen-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251119/202511190025.obom3fen-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511190025.obom3fen-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) >> mm/memory.c:2802:5: sparse: sparse: symbol '__remap_pfn_range' was not declared. Should it be static? mm/memory.c:301:9: sparse: sparse: incompatible types in conditional expression (different base types): mm/memory.c:301:9: sparse: void mm/memory.c:301:9: sparse: int vim +/__remap_pfn_range +2802 mm/memory.c 2789 2790 /** 2791 * remap_pfn_range - remap kernel memory to userspace 2792 * @vma: user vma to map to 2793 * @addr: target page aligned user address to start at 2794 * @pfn: page frame number of kernel physical memory address 2795 * @size: size of mapping area 2796 * @prot: page protection flags for this mapping 2797 * 2798 * Note: this is only safe if the mm semaphore is held when called. 2799 * 2800 * Return: %0 on success, negative error code otherwise. 2801 */ > 2802 int __remap_pfn_range(struct vm_area_struct *vma, unsigned long addr, 2803 unsigned long pfn, unsigned long size, pgprot_t prot, 2804 unsigned int page_shift) 2805 { 2806 int err; 2807 2808 err = track_pfn_remap(vma, &prot, pfn, addr, PAGE_ALIGN(size)); 2809 if (err) 2810 return -EINVAL; 2811 2812 err = __remap_pfn_range_notrack(vma, addr, pfn, size, prot, page_shift); 2813 if (err) 2814 untrack_pfn(vma, pfn, PAGE_ALIGN(size), true); 2815 return err; 2816 } 2817 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3214/3214] block/blk-ioinf.c:530:41: error: array type has incomplete element type 'struct blk_mq_debugfs_attr'
by kernel test robot 18 Nov '25

18 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: b4a3c05741e1650e8bb8399196fb5d7a318a4698 commit: 4192ef0b07762c6dabf617654df442fecffe8510 [3214/3214] blk-ioinf: add rqos/inflight/stat debufs interface config: x86_64-randconfig-r111-20251118 (https://download.01.org/0day-ci/archive/20251118/202511182212.yHIyxmau-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251118/202511182212.yHIyxmau-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511182212.yHIyxmau-lkp@intel.com/ All error/warnings (new ones prefixed by >>): block/blk-ioinf.c:248:6: warning: no previous prototype for 'ioinf_done' [-Wmissing-prototypes] 248 | void ioinf_done(struct ioinf *inf, struct ioinf_rq_wait *rqw) | ^~~~~~~~~~ >> block/blk-ioinf.c:530:41: error: array type has incomplete element type 'struct blk_mq_debugfs_attr' 530 | static const struct blk_mq_debugfs_attr ioinf_debugfs_attrs[] = { | ^~~~~~~~~~~~~~~~~~~ block/blk-ioinf.c:547:5: warning: no previous prototype for 'ioinf_calc_budget' [-Wmissing-prototypes] 547 | u32 ioinf_calc_budget(struct ioinf_rq_wait *rqw) | ^~~~~~~~~~~~~~~~~ >> block/blk-ioinf.c:530:41: warning: 'ioinf_debugfs_attrs' defined but not used [-Wunused-variable] 530 | static const struct blk_mq_debugfs_attr ioinf_debugfs_attrs[] = { | ^~~~~~~~~~~~~~~~~~~ Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for PGP_PRELOAD Depends on [n]: CRYPTO [=y] && ASYMMETRIC_KEY_TYPE [=n] Selected by [y]: - PGP_PRELOAD_PUBLIC_KEYS [=y] && CRYPTO [=y] vim +530 block/blk-ioinf.c 529 > 530 static const struct blk_mq_debugfs_attr ioinf_debugfs_attrs[] = { 531 {"stat", 0400, ioinf_stat_show}, 532 {}, 533 }; 534 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH] arm64/mpam: Add build dependencies for CONFIG_RESCTRL_IOMMU
by Zeng Heng 18 Nov '25

18 Nov '25

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IC03L1 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/morse/linux.git/commit/?h=m… -------------------------------- On the ARM64 architecture, the CONFIG_RESCTRL_IOMMU actually depends on the CONFIG_ARM_SMMU_V3, which allows to bind SMMU iommu_groups with resctrl groups. Therefore, add this build dependency in Kconfig. Additionally, to avoid compilation errors due to re-definitions in the include/linux/resctrl.h header file when the CONFIG_RESCTRL_IOMMU is disabled, add the build switch for resctrl_arch_*_iommu_closid_rmid(). Fixes: 7e3f95a1a861 ("fs/resctrl: Add support for assigning iommu_groups to resctrl groups") Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/platform/mpam/Kconfig | 2 +- drivers/platform/mpam/mpam_resctrl.c | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/drivers/platform/mpam/Kconfig b/drivers/platform/mpam/Kconfig index a6e937b8f91d..96dd7c091a9f 100644 --- a/drivers/platform/mpam/Kconfig +++ b/drivers/platform/mpam/Kconfig @@ -6,4 +6,4 @@ config ARM_CPU_RESCTRL depends on ARM64 && ARCH_HAS_CPU_RESCTRL depends on MISC_FILESYSTEMS select RESCTRL_RMID_DEPENDS_ON_CLOSID - select RESCTRL_IOMMU + select RESCTRL_IOMMU if ARM_SMMU_V3 diff --git a/drivers/platform/mpam/mpam_resctrl.c b/drivers/platform/mpam/mpam_resctrl.c index 2d3a1827a48c..7c386ce7b80f 100644 --- a/drivers/platform/mpam/mpam_resctrl.c +++ b/drivers/platform/mpam/mpam_resctrl.c @@ -260,6 +260,7 @@ bool resctrl_arch_match_rmid(struct task_struct *tsk, u32 closid, u32 rmid) return (tsk_closid == closid) && (tsk_rmid == rmid); } +#ifdef CONFIG_RESCTRL_IOMMU int resctrl_arch_set_iommu_closid_rmid(struct iommu_group *group, u32 closid, u32 rmid) { @@ -302,6 +303,7 @@ bool resctrl_arch_match_iommu_closid_rmid(struct iommu_group *group, return (partid == closid) && (rmid == pmg); } +#endif struct rdt_resource *resctrl_arch_get_resource(enum resctrl_res_level l) { -- 2.25.1

1 0

[openeuler:OLK-6.6 3214/3214] block/blk-ioinf.c:233:6: warning: no previous prototype for 'ioinf_done'
by kernel test robot 18 Nov '25

18 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 09c1ca7bc68f566c176a3647d87ed91e455d90f3 commit: a63e78514d119d4ee6525e1cc3a0aca4a2b29cbd [3214/3214] blk-ioinf: introduce inflight-based IO QoS controller config: x86_64-randconfig-r111-20251118 (https://download.01.org/0day-ci/archive/20251118/202511182153.2rP8BCJI-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251118/202511182153.2rP8BCJI-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511182153.2rP8BCJI-lkp@intel.com/ All warnings (new ones prefixed by >>): >> block/blk-ioinf.c:233:6: warning: no previous prototype for 'ioinf_done' [-Wmissing-prototypes] 233 | void ioinf_done(struct ioinf *inf, struct ioinf_rq_wait *rqw) | ^~~~~~~~~~ >> block/blk-ioinf.c:461:5: warning: no previous prototype for 'ioinf_calc_budget' [-Wmissing-prototypes] 461 | u32 ioinf_calc_budget(struct ioinf_rq_wait *rqw) | ^~~~~~~~~~~~~~~~~ Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for PGP_PRELOAD Depends on [n]: CRYPTO [=y] && ASYMMETRIC_KEY_TYPE [=n] Selected by [y]: - PGP_PRELOAD_PUBLIC_KEYS [=y] && CRYPTO [=y] vim +/ioinf_done +233 block/blk-ioinf.c 232 > 233 void ioinf_done(struct ioinf *inf, struct ioinf_rq_wait *rqw) 234 { 235 int inflight; 236 237 if (!inf->params.enabled) 238 return; 239 240 inflight = atomic_dec_return(&rqw->inflight); 241 if (inflight >= (int)rqw->hinflight) 242 return; 243 244 if (!READ_ONCE(inf->waking) && atomic_read(&rqw->sleepers)) { 245 WRITE_ONCE(inf->waking, true); 246 hrtimer_start(&inf->wakeup_timer, 0, HRTIMER_MODE_REL); 247 } 248 } 249 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3214/3214] net/ipv4/tcp_input.c:7198:25: error: 'struct tcp_options_received' has no member named 'ums_ok'; did you mean 'smc_ok'?
by kernel test robot 18 Nov '25

18 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 72220f090cf216491c25f4fe87c974ea97eb4e19 commit: 62eb2012d814e530839ba9ccf4146712701f486a [3214/3214] net: Add a new protocol family AF_UB config: x86_64-randconfig-r111-20251118 (https://download.01.org/0day-ci/archive/20251118/202511181912.iiOiNVW1-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251118/202511181912.iiOiNVW1-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511181912.iiOiNVW1-lkp@intel.com/ All errors (new ones prefixed by >>): net/ipv4/tcp_input.c: In function 'tcp_conn_request': >> net/ipv4/tcp_input.c:7198:25: error: 'struct tcp_options_received' has no member named 'ums_ok'; did you mean 'smc_ok'? 7198 | tmp_opt.ums_ok = 0; | ^~~~~~ | smc_ok Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for PGP_PRELOAD Depends on [n]: CRYPTO [=y] && ASYMMETRIC_KEY_TYPE [=n] Selected by [y]: - PGP_PRELOAD_PUBLIC_KEYS [=y] && CRYPTO [=y] vim +7198 net/ipv4/tcp_input.c 7184 7185 tcp_clear_options(&tmp_opt); 7186 tmp_opt.mss_clamp = af_ops->mss_clamp; 7187 tmp_opt.user_mss = tp->rx_opt.user_mss; 7188 tcp_parse_options(sock_net(sk), skb, &tmp_opt, 0, 7189 want_cookie ? NULL : &foc); 7190 7191 if (want_cookie && !tmp_opt.saw_tstamp) 7192 tcp_clear_options(&tmp_opt); 7193 7194 if (IS_ENABLED(CONFIG_SMC) && want_cookie) 7195 tmp_opt.smc_ok = 0; 7196 7197 if (IS_ENABLED(CONFIG_UB_UMS) && want_cookie) > 7198 tmp_opt.ums_ok = 0; -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6] EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
by Luo Gengkun 18 Nov '25

18 Nov '25

From: Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> stable inclusion from stable-v6.6.112 commit 8100b6c0f9089d5b156642b81270ce27fff17490 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6B9J CVE: CVE-2025-40157 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… ---------------------------------------------------------------------- [ Upstream commit 2e6fe1bbefd9c059c3787d1c620fe67343a94dff ] When loading the i10nm_edac driver on some Intel Granite Rapids servers, a call trace may appear as follows: UBSAN: shift-out-of-bounds in drivers/edac/skx_common.c:453:16 shift exponent -66 is negative ... __ubsan_handle_shift_out_of_bounds+0x1e3/0x390 skx_get_dimm_info.cold+0x47/0xd40 [skx_edac_common] i10nm_get_dimm_config+0x23e/0x390 [i10nm_edac] skx_register_mci+0x159/0x220 [skx_edac_common] i10nm_init+0xcb0/0x1ff0 [i10nm_edac] ... This occurs because some BIOS may disable a memory controller if there aren't any memory DIMMs populated on this memory controller. The DIMMMTR register of this disabled memory controller contains the invalid value ~0, resulting in the call trace above. Fix this call trace by skipping DIMM enumeration on a disabled memory controller. Fixes: ba987eaaabf9 ("EDAC/i10nm: Add Intel Granite Rapids server support") Reported-by: Jose Jesus Ambriz Meza <jose.jesus.ambriz.meza(a)intel.com> Reported-by: Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> Closes: https://lore.kernel.org/all/20250730063155.2612379-1-acelan.kao@canonical.c… Signed-off-by: Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> Signed-off-by: Tony Luck <tony.luck(a)intel.com> Tested-by: Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> Link: https://lore.kernel.org/r/20250806065707.3533345-1-qiuxu.zhuo@intel.com Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Luo Gengkun <luogengkun2(a)huawei.com> --- drivers/edac/i10nm_base.c | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/drivers/edac/i10nm_base.c b/drivers/edac/i10nm_base.c index 1f06183d1399..80527845dc5f 100644 --- a/drivers/edac/i10nm_base.c +++ b/drivers/edac/i10nm_base.c @@ -1056,6 +1056,15 @@ static bool i10nm_check_ecc(struct skx_imc *imc, int chan) return !!GET_BITFIELD(mcmtr, 2, 2); } +static bool i10nm_channel_disabled(struct skx_imc *imc, int chan) +{ + u32 mcmtr = I10NM_GET_MCMTR(imc, chan); + + edac_dbg(1, "mc%d ch%d mcmtr reg %x\n", imc->mc, chan, mcmtr); + + return (mcmtr == ~0 || GET_BITFIELD(mcmtr, 18, 18)); +} + static int i10nm_get_dimm_config(struct mem_ctl_info *mci, struct res_config *cfg) { @@ -1069,6 +1078,11 @@ static int i10nm_get_dimm_config(struct mem_ctl_info *mci, if (!imc->mbase) continue; + if (i10nm_channel_disabled(imc, i)) { + edac_dbg(1, "mc%d ch%d is disabled.\n", imc->mc, i); + continue; + } + ndimms = 0; if (res_cfg->type != GNR) -- 2.34.1

2 1

[PATCH OLK-5.10] EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
by Luo Gengkun 18 Nov '25

18 Nov '25

From: Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> mainline inclusion from mainline-v6.18-rc1 commit 2e6fe1bbefd9c059c3787d1c620fe67343a94dff category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6B9J CVE: CVE-2025-40157 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… ---------------------------------------------------------------------- When loading the i10nm_edac driver on some Intel Granite Rapids servers, a call trace may appear as follows: UBSAN: shift-out-of-bounds in drivers/edac/skx_common.c:453:16 shift exponent -66 is negative ... __ubsan_handle_shift_out_of_bounds+0x1e3/0x390 skx_get_dimm_info.cold+0x47/0xd40 [skx_edac_common] i10nm_get_dimm_config+0x23e/0x390 [i10nm_edac] skx_register_mci+0x159/0x220 [skx_edac_common] i10nm_init+0xcb0/0x1ff0 [i10nm_edac] ... This occurs because some BIOS may disable a memory controller if there aren't any memory DIMMs populated on this memory controller. The DIMMMTR register of this disabled memory controller contains the invalid value ~0, resulting in the call trace above. Fix this call trace by skipping DIMM enumeration on a disabled memory controller. Fixes: ba987eaaabf9 ("EDAC/i10nm: Add Intel Granite Rapids server support") Reported-by: Jose Jesus Ambriz Meza <jose.jesus.ambriz.meza(a)intel.com> Reported-by: Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> Closes: https://lore.kernel.org/all/20250730063155.2612379-1-acelan.kao@canonical.c… Signed-off-by: Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> Signed-off-by: Tony Luck <tony.luck(a)intel.com> Tested-by: Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> Link: https://lore.kernel.org/r/20250806065707.3533345-1-qiuxu.zhuo@intel.com Signed-off-by: Luo Gengkun <luogengkun2(a)huawei.com> --- drivers/edac/i10nm_base.c | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/drivers/edac/i10nm_base.c b/drivers/edac/i10nm_base.c index 75262ee01167..a7a30a7ab038 100644 --- a/drivers/edac/i10nm_base.c +++ b/drivers/edac/i10nm_base.c @@ -1062,6 +1062,15 @@ static bool i10nm_check_ecc(struct skx_imc *imc, int chan) return !!GET_BITFIELD(mcmtr, 2, 2); } +static bool i10nm_channel_disabled(struct skx_imc *imc, int chan) +{ + u32 mcmtr = I10NM_GET_MCMTR(imc, chan); + + edac_dbg(1, "mc%d ch%d mcmtr reg %x\n", imc->mc, chan, mcmtr); + + return (mcmtr == ~0 || GET_BITFIELD(mcmtr, 18, 18)); +} + static int i10nm_get_dimm_config(struct mem_ctl_info *mci, struct res_config *cfg) { @@ -1075,6 +1084,11 @@ static int i10nm_get_dimm_config(struct mem_ctl_info *mci, if (!imc->mbase) continue; + if (i10nm_channel_disabled(imc, i)) { + edac_dbg(1, "mc%d ch%d is disabled.\n", imc->mc, i); + continue; + } + ndimms = 0; if (res_cfg->type != GNR) -- 2.34.1

2 1

[PATCH OLK-6.6] arm64/mpam: Add build dependencies for CONFIG_RESCTRL_IOMMU
by Zeng Heng 18 Nov '25

18 Nov '25

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/ID65P3 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/morse/linux.git/commit/?h=m… -------------------------------- On the ARM64 architecture, the CONFIG_RESCTRL_IOMMU actually depends on the CONFIG_ARM_SMMU_V3, which allows to bind SMMU iommu_groups with resctrl groups. Therefore, add this build dependency in Kconfig. Additionally, to avoid compilation errors due to re-definitions in the include/linux/resctrl.h header file when the CONFIG_RESCTRL_IOMMU is disabled, add the build switch for resctrl_arch_*_iommu_closid_rmid(). Fixes: 7e3f95a1a861 ("fs/resctrl: Add support for assigning iommu_groups to resctrl groups") Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/platform/mpam/Kconfig | 2 +- drivers/platform/mpam/mpam_resctrl.c | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/drivers/platform/mpam/Kconfig b/drivers/platform/mpam/Kconfig index a6e937b8f91d..96dd7c091a9f 100644 --- a/drivers/platform/mpam/Kconfig +++ b/drivers/platform/mpam/Kconfig @@ -6,4 +6,4 @@ config ARM_CPU_RESCTRL depends on ARM64 && ARCH_HAS_CPU_RESCTRL depends on MISC_FILESYSTEMS select RESCTRL_RMID_DEPENDS_ON_CLOSID - select RESCTRL_IOMMU + select RESCTRL_IOMMU if ARM_SMMU_V3 diff --git a/drivers/platform/mpam/mpam_resctrl.c b/drivers/platform/mpam/mpam_resctrl.c index 2d3a1827a48c..7c386ce7b80f 100644 --- a/drivers/platform/mpam/mpam_resctrl.c +++ b/drivers/platform/mpam/mpam_resctrl.c @@ -260,6 +260,7 @@ bool resctrl_arch_match_rmid(struct task_struct *tsk, u32 closid, u32 rmid) return (tsk_closid == closid) && (tsk_rmid == rmid); } +#ifdef CONFIG_RESCTRL_IOMMU int resctrl_arch_set_iommu_closid_rmid(struct iommu_group *group, u32 closid, u32 rmid) { @@ -302,6 +303,7 @@ bool resctrl_arch_match_iommu_closid_rmid(struct iommu_group *group, return (partid == closid) && (rmid == pmg); } +#endif struct rdt_resource *resctrl_arch_get_resource(enum resctrl_res_level l) { -- 2.25.1

2 1

[PATCH OLK-6.6 v6 00/48] fuse:io_uring: support fuse over io_uring
by Long Li 18 Nov '25

18 Nov '25

v1 -> v2: Fix some build error for io_uring patchs. v2 -> v3: Modify kabi fixed patchs format v3 -> v4: Enable CONFIG_FUSE_IO_URING v4 -> v5: Fix patch commit message format v5 -> v6: Fix separate bg req in fuse iouring Bernd Schubert (19): fuse: rename to fuse_dev_end_requests and make non-static fuse: Move fuse_get_dev to header file fuse: Move request bits fuse: Add fuse-io-uring design documentation fuse: make args->in_args[0] to be always the header fuse: {io-uring} Handle SQEs - register commands fuse: Make fuse_copy non static fuse: Add fuse-io-uring handling into fuse_copy fuse: {io-uring} Make hash-list req unique finding functions non-static fuse: Add io-uring sqe commit and fetch support fuse: {io-uring} Handle teardown of ring entries fuse: {io-uring} Make fuse_dev_queue_{interrupt,forget} non-static fuse: Allow to queue fg requests through io-uring fuse: Allow to queue bg requests through io-uring fuse: {io-uring} Prevent mount point hang on fuse-server termination fuse: block request allocation until io-uring init is complete fuse: enable fuse-over-io-uring fuse: prevent disabling io-uring on active connections fuse: {io-uring} Fix a possible req cancellation race Jens Axboe (1): io_uring: remove dead struct io_submit_state member Joanne Koong (2): fuse: fix uring race condition for null dereference of fc fuse: remove unneeded atomic set in uring creation Long Li (5): io_uring: fix kabi broken in struct io_tw_state io_uring: fix kabi broken in struct io_ring_ctx io_uring: fix kabi broken in struct io_submit_state io_uring: fix kabi broken for header file changed openeuler_defconfig: enable CONFIG_FUSE_IO_URING by default Luis Henriques (2): fuse: fix possible deadlock if rings are never initialized fuse: removed unused function fuse_uring_create() from header Ming Lei (3): io_uring: retain top 8bits of uring_cmd flags for kernel internal use io_uring: cancelable uring_cmd io_uring: kill dead code in io_req_complete_post Pavel Begunkov (16): io_uring: split out cmd api into a separate header io_uring/cmd: inline io_uring_cmd_do_in_task_lazy io_uring/cmd: expose iowq to cmds io_uring/cmd: give inline space in request to cmds io_uring/cmd: move io_uring_try_cancel_uring_cmd() io_uring/cmd: kill one issue_flags to tw conversion io_uring/cmd: fix tw <-> issue_flags conversion io_uring/cmd: document some uring_cmd related helpers io_uring: force tw ctx locking io_uring: remove struct io_tw_state::locked io_uring: refactor io_fill_cqe_req_aux io_uring: get rid of intermediate aux cqe caches io_uring: remove current check from complete_post io_uring: refactor io_req_complete_post() io_uring: clean up io_lockdep_assert_cq_locked io_uring/cmd: let cmds to know about dying task Documentation/filesystems/fuse-io-uring.rst | 99 ++ Documentation/filesystems/index.rst | 1 + MAINTAINERS | 1 + arch/arm64/configs/openeuler_defconfig | 1 + arch/x86/configs/openeuler_defconfig | 1 + drivers/block/ublk_drv.c | 2 +- drivers/nvme/host/ioctl.c | 2 +- fs/fuse/Kconfig | 12 + fs/fuse/Makefile | 1 + fs/fuse/dax.c | 11 +- fs/fuse/dev.c | 165 ++- fs/fuse/dev_uring.c | 1326 +++++++++++++++++++ fs/fuse/dev_uring_i.h | 205 +++ fs/fuse/dir.c | 32 +- fs/fuse/fuse_dev_i.h | 69 + fs/fuse/fuse_i.h | 35 +- fs/fuse/inode.c | 14 +- fs/fuse/xattr.c | 7 +- include/linux/io_uring.h | 73 +- include/linux/io_uring/cmd.h | 140 ++ include/linux/io_uring_types.h | 7 +- include/uapi/linux/fuse.h | 77 +- include/uapi/linux/io_uring.h | 5 +- io_uring/io_uring.c | 212 +-- io_uring/io_uring.h | 34 +- io_uring/net.c | 6 +- io_uring/poll.c | 3 +- io_uring/refs.h | 7 + io_uring/rw.c | 8 +- io_uring/timeout.c | 8 +- io_uring/uring_cmd.c | 114 +- io_uring/uring_cmd.h | 3 + security/selinux/hooks.c | 2 +- security/smack/smack_lsm.c | 2 +- 34 files changed, 2308 insertions(+), 377 deletions(-) create mode 100644 Documentation/filesystems/fuse-io-uring.rst create mode 100644 fs/fuse/dev_uring.c create mode 100644 fs/fuse/dev_uring_i.h create mode 100644 fs/fuse/fuse_dev_i.h create mode 100644 include/linux/io_uring/cmd.h -- 2.39.2

2 49

[PATCH OLK-6.6] cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
by Xinyu Zheng 18 Nov '25

18 Nov '25

From: "Rafael J. Wysocki" <rafael.j.wysocki(a)intel.com> stable inclusion from stable-v6.6.113 commit 69a18ff6c60e8e113420f15355fad862cb45d38e category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6BVZ CVE: CVE-2025-40194 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 69e5d50fcf4093fb3f9f41c4f931f12c2ca8c467 upstream. The cpufreq_cpu_put() call in update_qos_request() takes place too early because the latter subsequently calls freq_qos_update_request() that indirectly accesses the policy object in question through the QoS request object passed to it. Fortunately, update_qos_request() is called under intel_pstate_driver_lock, so this issue does not matter for changing the intel_pstate operation mode, but it theoretically can cause a crash to occur on CPU device hot removal (which currently can only happen in virt, but it is formally supported nevertheless). Address this issue by modifying update_qos_request() to drop the reference to the policy later. Fixes: da5c504c7aae ("cpufreq: intel_pstate: Implement QoS supported freq constraints") Cc: 5.4+ <stable(a)vger.kernel.org> # 5.4+ Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> Reviewed-by: Zihuan Zhang <zhangzihuan(a)kylinos.cn> Link: https://patch.msgid.link/2255671.irdbgypaU6@rafael.j.wysocki Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Xinyu Zheng <zhengxinyu6(a)huawei.com> --- drivers/cpufreq/intel_pstate.c | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/drivers/cpufreq/intel_pstate.c b/drivers/cpufreq/intel_pstate.c index 51e7d2ea8294..0908e3ed17b3 100644 --- a/drivers/cpufreq/intel_pstate.c +++ b/drivers/cpufreq/intel_pstate.c @@ -1354,10 +1354,10 @@ static void update_qos_request(enum freq_qos_req_type type) continue; req = policy->driver_data; - cpufreq_cpu_put(policy); - - if (!req) + if (!req) { + cpufreq_cpu_put(policy); continue; + } if (hwp_active) intel_pstate_get_hwp_cap(cpu); @@ -1373,6 +1373,8 @@ static void update_qos_request(enum freq_qos_req_type type) if (freq_qos_update_request(req, freq) < 0) pr_warn("Failed to update freq constraint: CPU%d\n", i); + + cpufreq_cpu_put(policy); } } -- 2.34.1

2 1