- Kernel - mailweb.openeuler.org

[PATCH OLK-6.6 00/22] support for SMC-D loopback_lo feature
by Zhengchao Shao 13 Jul '24

13 Jul '24

Support for SMC-D loopback_lo feature. Wen Gu (22): net/smc: rename some 'fce' to 'fce_v2x' for clarity net/smc: introduce sub-functions for smc_clc_send_confirm_accept() net/smc: unify the structs of accept or confirm message for v1 and v2 net/smc: support SMCv2.x supplemental features negotiation net/smc: introduce virtual ISM device support feature net/smc: define a reserved CHID range for virtual ISM devices net/smc: compatible with 128-bits extended GID of virtual ISM device net/smc: support extended GID in SMC-D lgr netlink attribute net/smc: manage system EID in SMC stack instead of ISM driver net/smc: fix incorrect SMC-D link group matching logic net/smc: change the term virtual ISM to Emulated-ISM net/smc: decouple ism_client from SMC-D DMB registration net/smc: introduce loopback-ism for SMC intra-OS shortcut net/smc: implement ID-related operations of loopback-ism net/smc: implement DMB-related operations of loopback-ism net/smc: mark optional smcd_ops and check for support when called net/smc: ignore loopback-ism when dumping SMC-D devices net/smc: register loopback-ism into SMC-D device list net/smc: add operations to merge sndbuf with peer DMB net/smc: {at|de}tach sndbuf to peer DMB if supported net/smc: adapt cursor update when sndbuf and peer DMB are merged net/smc: implement DMB-merged operations of loopback-ism drivers/s390/net/ism.h | 7 - drivers/s390/net/ism_drv.c | 59 ++--- include/linux/ism.h | 1 - include/net/smc.h | 33 ++- include/uapi/linux/smc.h | 2 + include/uapi/linux/smc_diag.h | 2 + net/smc/Kconfig | 13 ++ net/smc/Makefile | 1 + net/smc/af_smc.c | 146 ++++++++---- net/smc/smc.h | 10 +- net/smc/smc_cdc.c | 36 ++- net/smc/smc_clc.c | 304 ++++++++++++++---------- net/smc/smc_clc.h | 64 ++--- net/smc/smc_core.c | 104 ++++++++- net/smc/smc_core.h | 19 +- net/smc/smc_diag.c | 9 +- net/smc/smc_ism.c | 136 ++++++++--- net/smc/smc_ism.h | 40 +++- net/smc/smc_loopback.c | 427 ++++++++++++++++++++++++++++++++++ net/smc/smc_loopback.h | 61 +++++ net/smc/smc_pnet.c | 4 +- 21 files changed, 1158 insertions(+), 320 deletions(-) create mode 100644 net/smc/smc_loopback.c create mode 100644 net/smc/smc_loopback.h -- 2.34.1

1 9

[PATCH OLK-6.6] kvm: add coda feature
by l00500167 13 Jul '24

13 Jul '24

virtcca feature Signed-off-by: l00500167 <lijunbin4(a)huawei.com> --- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h | 14 ++++++++++++++ include/linux/iommu.h | 3 +++ 2 files changed, 17 insertions(+) diff --git a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h index 859d21729..0f2acb4ed 100644 --- a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h +++ b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h @@ -625,6 +625,9 @@ struct arm_smmu_strtab_l1_desc { struct arm_smmu_ste *l2ptr; dma_addr_t l2ptr_dma; +#ifdef CONFIG_CVM_HOST + bool is_sync; +#endif }; struct arm_smmu_ctx_desc { @@ -750,6 +753,12 @@ struct arm_smmu_device { struct mutex streams_mutex; bool bypass; +#ifdef CONFIG_CVM_HOST + int s_evtq_irq; + int s_gerr_irq; + resource_size_t ioaddr; + uint64_t id; +#endif }; struct arm_smmu_stream { @@ -802,6 +811,11 @@ struct arm_smmu_domain { spinlock_t devices_lock; struct list_head mmu_notifiers; +#ifdef CONFIG_CVM_HOST + bool secure; + struct list_head node; + struct kvm *kvm; +#endif }; static inline struct arm_smmu_domain *to_smmu_domain(struct iommu_domain *dom) diff --git a/include/linux/iommu.h b/include/linux/iommu.h index 1d70dd0d0..e3186fbd4 100644 --- a/include/linux/iommu.h +++ b/include/linux/iommu.h @@ -635,6 +635,9 @@ struct iommu_ops { struct iommu_domain *blocked_domain; struct iommu_domain *default_domain; +#ifdef CONFIG_CVM_HOST + int (*iommu_enable_secure)(struct iommu_domain *domain); +#endif KABI_RESERVE(1) KABI_RESERVE(2) KABI_RESERVE(3) -- 2.25.1

2 1

[openeuler:OLK-5.10] BUILD SUCCESS e716fc2c6d620ad9767378aeb6d9155bf7b8308f
by kernel test robot 13 Jul '24

13 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-5.10 branch HEAD: e716fc2c6d620ad9767378aeb6d9155bf7b8308f !9368 CVE-2024-27416 elapsed time: 731m configs tested: 34 configs skipped: 111 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-14.1.0 arm64 randconfig-001-20240713 gcc-14.1.0 arm64 randconfig-002-20240713 gcc-14.1.0 arm64 randconfig-003-20240713 clang-19 arm64 randconfig-004-20240713 gcc-14.1.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240713 clang-18 x86_64 buildonly-randconfig-002-20240713 clang-18 x86_64 buildonly-randconfig-003-20240713 gcc-13 x86_64 buildonly-randconfig-004-20240713 clang-18 x86_64 buildonly-randconfig-005-20240713 gcc-8 x86_64 buildonly-randconfig-006-20240713 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240713 clang-18 x86_64 randconfig-002-20240713 clang-18 x86_64 randconfig-003-20240713 clang-18 x86_64 randconfig-004-20240713 gcc-13 x86_64 randconfig-005-20240713 clang-18 x86_64 randconfig-006-20240713 clang-18 x86_64 randconfig-011-20240713 clang-18 x86_64 randconfig-012-20240713 clang-18 x86_64 randconfig-013-20240713 gcc-13 x86_64 randconfig-014-20240713 clang-18 x86_64 randconfig-015-20240713 gcc-13 x86_64 randconfig-016-20240713 gcc-13 x86_64 randconfig-071-20240713 gcc-8 x86_64 randconfig-072-20240713 gcc-8 x86_64 randconfig-073-20240713 clang-18 x86_64 randconfig-074-20240713 clang-18 x86_64 randconfig-075-20240713 gcc-13 x86_64 randconfig-076-20240713 clang-18 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6] BUILD REGRESSION 10bfbd53c8aa4c81829876b20e654c4e7c4e7aa7
by kernel test robot 13 Jul '24

13 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-6.6 branch HEAD: 10bfbd53c8aa4c81829876b20e654c4e7c4e7aa7 !5261 [OLK-6.6]Hygon: Some enhancement and bugfixes for HYGON CSV/CSV2 Error/Warning reports: https://lore.kernel.org/oe-kbuild-all/202407130439.z4HZgaFv-lkp@intel.com Error/Warning: (recently discovered and may have been fixed) include/linux/mmzone.h:1788:2: error: #error Allocator MAX_ORDER exceeds SECTION_SIZE Error/Warning ids grouped by kconfigs: recent_errors |-- arm64-allmodconfig | `-- clang:warning:no-such-include-directory:drivers-infiniband-hw-hiroce3-include-mag |-- loongarch-allmodconfig | `-- arch-loongarch-kvm-..-..-..-virt-kvm-kvm_main.c:warning:kvmalloc_array-sizes-specified-with-sizeof-in-the-earlier-argument-and-not-in-the-later-argument |-- loongarch-randconfig-001-20240713 | |-- arch-loongarch-kvm-..-..-..-virt-kvm-kvm_main.c:warning:kvmalloc_array-sizes-specified-with-sizeof-in-the-earlier-argument-and-not-in-the-later-argument | `-- drivers-char-virtio_console.c:warning:u-directive-output-may-be-truncated-writing-between-and-bytes-into-a-region-of-size-between-and |-- loongarch-randconfig-002-20240713 | `-- include-linux-mmzone.h:error:error-Allocator-MAX_ORDER-exceeds-SECTION_SIZE `-- x86_64-allyesconfig `-- drivers-gpu-drm-amd-amdgpu-..-amdkfd-kfd_topology.c:warning:stack-frame-size-()-exceeds-limit-()-in-kfd_topology_add_device elapsed time: 725m configs tested: 14 configs skipped: 97 tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-14.1.0 arm64 randconfig-001-20240713 gcc-14.1.0 arm64 randconfig-002-20240713 gcc-14.1.0 arm64 randconfig-003-20240713 clang-19 arm64 randconfig-004-20240713 gcc-14.1.0 loongarch allmodconfig gcc-14.1.0 loongarch allnoconfig gcc-14.1.0 loongarch randconfig-001-20240713 gcc-14.1.0 loongarch randconfig-002-20240713 gcc-14.1.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 defconfig gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3892/10681] include/linux/mmzone.h:1788:2: error: #error Allocator MAX_ORDER exceeds SECTION_SIZE
by kernel test robot 13 Jul '24

13 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 10bfbd53c8aa4c81829876b20e654c4e7c4e7aa7 commit: c93eb12529e21dbb59796132f4fdf75fad4eddaf [3892/10681] LoongArch: Adapted SECTION_SIZE_BITS with page size config: loongarch-randconfig-002-20240713 (https://download.01.org/0day-ci/archive/20240713/202407130439.z4HZgaFv-lkp@…) compiler: loongarch64-linux-gcc (GCC) 14.1.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20240713/202407130439.z4HZgaFv-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407130439.z4HZgaFv-lkp@intel.com/ All errors (new ones prefixed by >>): In file included from include/linux/gfp.h:7, from include/linux/mm.h:7, from arch/loongarch/kernel/asm-offsets.c:9: >> include/linux/mmzone.h:1788:2: error: #error Allocator MAX_ORDER exceeds SECTION_SIZE 1788 | #error Allocator MAX_ORDER exceeds SECTION_SIZE | ^~~~~ arch/loongarch/kernel/asm-offsets.c:18:6: warning: no previous prototype for 'output_ptreg_defines' [-Wmissing-prototypes] 18 | void output_ptreg_defines(void) | ^~~~~~~~~~~~~~~~~~~~ arch/loongarch/kernel/asm-offsets.c:65:6: warning: no previous prototype for 'output_task_defines' [-Wmissing-prototypes] 65 | void output_task_defines(void) | ^~~~~~~~~~~~~~~~~~~ arch/loongarch/kernel/asm-offsets.c:80:6: warning: no previous prototype for 'output_thread_info_defines' [-Wmissing-prototypes] 80 | void output_thread_info_defines(void) | ^~~~~~~~~~~~~~~~~~~~~~~~~~ arch/loongarch/kernel/asm-offsets.c:96:6: warning: no previous prototype for 'output_thread_defines' [-Wmissing-prototypes] 96 | void output_thread_defines(void) | ^~~~~~~~~~~~~~~~~~~~~ arch/loongarch/kernel/asm-offsets.c:132:6: warning: no previous prototype for 'output_thread_fpu_defines' [-Wmissing-prototypes] 132 | void output_thread_fpu_defines(void) | ^~~~~~~~~~~~~~~~~~~~~~~~~ arch/loongarch/kernel/asm-offsets.c:173:6: warning: no previous prototype for 'output_thread_lbt_defines' [-Wmissing-prototypes] 173 | void output_thread_lbt_defines(void) | ^~~~~~~~~~~~~~~~~~~~~~~~~ arch/loongarch/kernel/asm-offsets.c:183:6: warning: no previous prototype for 'output_mm_defines' [-Wmissing-prototypes] 183 | void output_mm_defines(void) | ^~~~~~~~~~~~~~~~~ arch/loongarch/kernel/asm-offsets.c:215:6: warning: no previous prototype for 'output_sc_defines' [-Wmissing-prototypes] 215 | void output_sc_defines(void) | ^~~~~~~~~~~~~~~~~ arch/loongarch/kernel/asm-offsets.c:223:6: warning: no previous prototype for 'output_signal_defines' [-Wmissing-prototypes] 223 | void output_signal_defines(void) | ^~~~~~~~~~~~~~~~~~~~~ arch/loongarch/kernel/asm-offsets.c:261:6: warning: no previous prototype for 'output_smpboot_defines' [-Wmissing-prototypes] 261 | void output_smpboot_defines(void) | ^~~~~~~~~~~~~~~~~~~~~~ arch/loongarch/kernel/asm-offsets.c:294:6: warning: no previous prototype for 'output_kvm_defines' [-Wmissing-prototypes] 294 | void output_kvm_defines(void) | ^~~~~~~~~~~~~~~~~~ make[3]: *** [scripts/Makefile.build:116: arch/loongarch/kernel/asm-offsets.s] Error 1 shuffle=784060646 make[3]: Target 'prepare' not remade because of errors. make[2]: *** [Makefile:1202: prepare0] Error 2 shuffle=784060646 make[2]: Target 'prepare' not remade because of errors. make[1]: *** [Makefile:234: __sub-make] Error 2 shuffle=784060646 make[1]: Target 'prepare' not remade because of errors. make: *** [Makefile:234: __sub-make] Error 2 shuffle=784060646 make: Target 'prepare' not remade because of errors. vim +1788 include/linux/mmzone.h d41dee369bff3b Andy Whitcroft 2005-06-23 1783 835c134ec4dd75 Mel Gorman 2007-10-16 1784 #define SECTION_BLOCKFLAGS_BITS \ d9c2340052278d Mel Gorman 2007-10-16 1785 ((1UL << (PFN_SECTION_SHIFT - pageblock_order)) * NR_PAGEBLOCK_BITS) 835c134ec4dd75 Mel Gorman 2007-10-16 1786 23baf831a32c04 Kirill A. Shutemov 2023-03-15 1787 #if (MAX_ORDER + PAGE_SHIFT) > SECTION_SIZE_BITS d41dee369bff3b Andy Whitcroft 2005-06-23 @1788 #error Allocator MAX_ORDER exceeds SECTION_SIZE d41dee369bff3b Andy Whitcroft 2005-06-23 1789 #endif d41dee369bff3b Andy Whitcroft 2005-06-23 1790 :::::: The code at line 1788 was first introduced by commit :::::: d41dee369bff3b9dcb6328d4d822926c28cc2594 [PATCH] sparsemem memory model :::::: TO: Andy Whitcroft <apw(a)shadowen.org> :::::: CC: Linus Torvalds <torvalds(a)ppc970.osdl.org> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:openEuler-1.0-LTS] BUILD REGRESSION 07c988f00903b4f0fbf9c31cea24351fbf885b1c
by kernel test robot 13 Jul '24

13 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS branch HEAD: 07c988f00903b4f0fbf9c31cea24351fbf885b1c !9492 netlabel: fix out-of-bounds memory accesses Error/Warning ids grouped by kconfigs: recent_errors `-- arm64-randconfig-001-20240712 `-- drivers-mmc-host-phytium-sdci.c:error:lvalue-required-as-unary-operand elapsed time: 727m configs tested: 31 configs skipped: 111 tested configs: arm64 allmodconfig gcc-14.1.0 arm64 allnoconfig gcc-14.1.0 arm64 randconfig-001-20240712 gcc-14.1.0 arm64 randconfig-002-20240712 gcc-14.1.0 arm64 randconfig-003-20240712 gcc-14.1.0 arm64 randconfig-004-20240712 gcc-14.1.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240712 clang-18 x86_64 buildonly-randconfig-002-20240712 clang-18 x86_64 buildonly-randconfig-003-20240712 clang-18 x86_64 buildonly-randconfig-004-20240712 clang-18 x86_64 buildonly-randconfig-005-20240712 clang-18 x86_64 buildonly-randconfig-006-20240712 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240712 gcc-12 x86_64 randconfig-002-20240712 gcc-13 x86_64 randconfig-003-20240712 gcc-12 x86_64 randconfig-004-20240712 clang-18 x86_64 randconfig-005-20240712 gcc-13 x86_64 randconfig-006-20240712 clang-18 x86_64 randconfig-011-20240712 clang-18 x86_64 randconfig-012-20240712 clang-18 x86_64 randconfig-013-20240712 clang-18 x86_64 randconfig-014-20240712 gcc-13 x86_64 randconfig-015-20240712 clang-18 x86_64 randconfig-016-20240712 clang-18 x86_64 randconfig-071-20240712 gcc-13 x86_64 randconfig-072-20240712 gcc-11 x86_64 randconfig-073-20240712 clang-18 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:openEuler-1.0-LTS 21349/23271] drivers/mmc/host/phytium-sdci.c:1483:23: error: lvalue required as unary '&' operand
by kernel test robot 13 Jul '24

13 Jul '24

tree: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS head: 07c988f00903b4f0fbf9c31cea24351fbf885b1c commit: d65622e6edee11f7fcbd295bdb5aef86e12dfef3 [21349/23271] mmc: add support for Phytium MMC config: arm64-randconfig-001-20240712 (https://download.01.org/0day-ci/archive/20240713/202407130055.5P1q7PDM-lkp@…) compiler: aarch64-linux-gcc (GCC) 14.1.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20240713/202407130055.5P1q7PDM-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407130055.5P1q7PDM-lkp@intel.com/ All errors (new ones prefixed by >>): drivers/mmc/host/phytium-sdci.c: In function 'phytium_sdci_start_data': drivers/mmc/host/phytium-sdci.c:271:14: warning: variable 'read' set but not used [-Wunused-but-set-variable] 271 | bool read, res; | ^~~~ drivers/mmc/host/phytium-sdci.c: In function 'phytium_sdci_dma_irq': drivers/mmc/host/phytium-sdci.c:1018:29: warning: variable 'cmd' set but not used [-Wunused-but-set-variable] 1018 | struct mmc_command *cmd; | ^~~ drivers/mmc/host/phytium-sdci.c: At top level: >> drivers/mmc/host/phytium-sdci.c:1483:23: error: lvalue required as unary '&' operand 1483 | .pm = &phytium_sdci_dev_pm_ops, | ^ vim +1483 drivers/mmc/host/phytium-sdci.c 1475 1476 static struct platform_driver phytium_sdci_driver = { 1477 .probe = phytium_sdci_probe, 1478 .remove = phytium_sdci_remove, 1479 .driver = { 1480 .name = "sdci-phytium", 1481 .of_match_table = phytium_sdci_of_ids, 1482 .acpi_match_table = phytium_sdci_acpi_ids, > 1483 .pm = &phytium_sdci_dev_pm_ops, 1484 }, 1485 }; 1486 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 10626/10665] drivers/gpu/drm/amd/amdgpu/../amdkfd/kfd_topology.c:1922:5: warning: stack frame size (2200) exceeds limit (2048) in 'kfd_topology_add_device'
by kernel test robot 12 Jul '24

12 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 57aa1dda67c88842ffde6304bf732c7d7c81c211 commit: 241ad43fe7e9c24d5ba4cdd1ec22e731cdd22d14 [10626/10665] Compiler: Add clang's PGO support for kernel. config: x86_64-allyesconfig (https://download.01.org/0day-ci/archive/20240712/202407122247.S82V5Eh3-lkp@…) compiler: clang version 18.1.5 (https://github.com/llvm/llvm-project 617a15a9eac96088ae5e9134248d8236e34b91b1) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20240712/202407122247.S82V5Eh3-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407122247.S82V5Eh3-lkp@intel.com/ All warnings (new ones prefixed by >>): >> drivers/gpu/drm/amd/amdgpu/../amdkfd/kfd_topology.c:1922:5: warning: stack frame size (2200) exceeds limit (2048) in 'kfd_topology_add_device' [-Wframe-larger-than] 1922 | int kfd_topology_add_device(struct kfd_node *gpu) | ^ 1 warning generated. vim +/kfd_topology_add_device +1922 drivers/gpu/drm/amd/amdgpu/../amdkfd/kfd_topology.c d230f1bfe7a197 Jonathan Kim 2022-03-25 1921 8dc1db3172ae2f Mukul Joshi 2022-09-14 @1922 int kfd_topology_add_device(struct kfd_node *gpu) f701acb6a4ed0a Felix Kuehling 2022-11-16 1923 { f701acb6a4ed0a Felix Kuehling 2022-11-16 1924 uint32_t gpu_id; f701acb6a4ed0a Felix Kuehling 2022-11-16 1925 struct kfd_topology_device *dev; f701acb6a4ed0a Felix Kuehling 2022-11-16 1926 struct kfd_cu_info cu_info; f701acb6a4ed0a Felix Kuehling 2022-11-16 1927 int res = 0; f701acb6a4ed0a Felix Kuehling 2022-11-16 1928 int i; f701acb6a4ed0a Felix Kuehling 2022-11-16 1929 const char *asic_name = amdgpu_asic_name[gpu->adev->asic_type]; f701acb6a4ed0a Felix Kuehling 2022-11-16 1930 f701acb6a4ed0a Felix Kuehling 2022-11-16 1931 gpu_id = kfd_generate_gpu_id(gpu); 400a39f1ec43d2 James Zhu 2023-08-09 1932 if (gpu->xcp && !gpu->xcp->ddev) { 400a39f1ec43d2 James Zhu 2023-08-09 1933 dev_warn(gpu->adev->dev, 400a39f1ec43d2 James Zhu 2023-08-09 1934 "Won't add GPU (ID: 0x%x) to topology since it has no drm node assigned.", 400a39f1ec43d2 James Zhu 2023-08-09 1935 gpu_id); 400a39f1ec43d2 James Zhu 2023-08-09 1936 return 0; 400a39f1ec43d2 James Zhu 2023-08-09 1937 } else { f701acb6a4ed0a Felix Kuehling 2022-11-16 1938 pr_debug("Adding new GPU (ID: 0x%x) to topology\n", gpu_id); 400a39f1ec43d2 James Zhu 2023-08-09 1939 } f701acb6a4ed0a Felix Kuehling 2022-11-16 1940 f701acb6a4ed0a Felix Kuehling 2022-11-16 1941 /* Check to see if this gpu device exists in the topology_device_list. f701acb6a4ed0a Felix Kuehling 2022-11-16 1942 * If so, assign the gpu to that device, f701acb6a4ed0a Felix Kuehling 2022-11-16 1943 * else create a Virtual CRAT for this gpu device and then parse that f701acb6a4ed0a Felix Kuehling 2022-11-16 1944 * CRAT to create a new topology device. Once created assign the gpu to f701acb6a4ed0a Felix Kuehling 2022-11-16 1945 * that topology device f701acb6a4ed0a Felix Kuehling 2022-11-16 1946 */ f701acb6a4ed0a Felix Kuehling 2022-11-16 1947 down_write(&topology_lock); f701acb6a4ed0a Felix Kuehling 2022-11-16 1948 dev = kfd_assign_gpu(gpu); f701acb6a4ed0a Felix Kuehling 2022-11-16 1949 if (!dev) f701acb6a4ed0a Felix Kuehling 2022-11-16 1950 res = kfd_topology_add_device_locked(gpu, gpu_id, &dev); c0cc999f3c32e6 Ma Jun 2022-11-02 1951 up_write(&topology_lock); f701acb6a4ed0a Felix Kuehling 2022-11-16 1952 if (res) f701acb6a4ed0a Felix Kuehling 2022-11-16 1953 return res; 5b5c4e40a37e85 Evgeny Pinchuk 2014-07-16 1954 5b5c4e40a37e85 Evgeny Pinchuk 2014-07-16 1955 dev->gpu_id = gpu_id; 5b5c4e40a37e85 Evgeny Pinchuk 2014-07-16 1956 gpu->id = gpu_id; 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1957 0f28cca87e9afc Ramesh Errabolu 2022-05-26 1958 kfd_dev_create_p2p_links(); 0f28cca87e9afc Ramesh Errabolu 2022-05-26 1959 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1960 /* TODO: Move the following lines to function 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1961 * kfd_add_non_crat_information 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1962 */ 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1963 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1964 /* Fill-in additional information that is not available in CRAT but 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1965 * needed for the topology 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1966 */ 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1967 574c4183ef7511 Graham Sider 2021-10-19 1968 amdgpu_amdkfd_get_cu_info(dev->gpu->adev, &cu_info); c181159a5b1e1e Yong Zhao 2019-08-01 1969 b7675b7bbc3c4c Graham Sider 2021-11-11 1970 for (i = 0; i < KFD_TOPOLOGY_PUBLIC_NAME_SIZE-1; i++) { b7675b7bbc3c4c Graham Sider 2021-11-11 1971 dev->node_props.name[i] = __tolower(asic_name[i]); b7675b7bbc3c4c Graham Sider 2021-11-11 1972 if (asic_name[i] == '\0') b7675b7bbc3c4c Graham Sider 2021-11-11 1973 break; b7675b7bbc3c4c Graham Sider 2021-11-11 1974 } b7675b7bbc3c4c Graham Sider 2021-11-11 1975 dev->node_props.name[i] = '\0'; c181159a5b1e1e Yong Zhao 2019-08-01 1976 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1977 dev->node_props.simd_arrays_per_engine = 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1978 cu_info.num_shader_arrays_per_engine; 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1979 8dc1db3172ae2f Mukul Joshi 2022-09-14 1980 dev->node_props.gfx_target_version = 8dc1db3172ae2f Mukul Joshi 2022-09-14 1981 gpu->kfd->device_info.gfx_target_version; d69a3b762dc4c9 Mukul Joshi 2022-05-09 1982 dev->node_props.vendor_id = gpu->adev->pdev->vendor; d69a3b762dc4c9 Mukul Joshi 2022-05-09 1983 dev->node_props.device_id = gpu->adev->pdev->device; c6d1ec4134edc1 Joseph Greathouse 2020-04-16 1984 dev->node_props.capability |= 02274fc0f67259 Graham Sider 2021-11-05 1985 ((dev->gpu->adev->rev_id << HSA_CAP_ASIC_REVISION_SHIFT) & c6d1ec4134edc1 Joseph Greathouse 2020-04-16 1986 HSA_CAP_ASIC_REVISION_MASK); 92085240ef9c0e Jonathan Kim 2022-05-03 1987 d69a3b762dc4c9 Mukul Joshi 2022-05-09 1988 dev->node_props.location_id = pci_dev_id(gpu->adev->pdev); 92085240ef9c0e Jonathan Kim 2022-05-03 1989 if (KFD_GC_VERSION(dev->gpu->kfd) == IP_VERSION(9, 4, 3)) 92085240ef9c0e Jonathan Kim 2022-05-03 1990 dev->node_props.location_id |= dev->gpu->node_id; 92085240ef9c0e Jonathan Kim 2022-05-03 1991 d69a3b762dc4c9 Mukul Joshi 2022-05-09 1992 dev->node_props.domain = pci_domain_nr(gpu->adev->pdev->bus); 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1993 dev->node_props.max_engine_clk_fcompute = 574c4183ef7511 Graham Sider 2021-10-19 1994 amdgpu_amdkfd_get_max_engine_clock_in_mhz(dev->gpu->adev); 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1995 dev->node_props.max_engine_clk_ccompute = 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 1996 cpufreq_quick_get_max(0) / 1000; a476c0c645535c Philip Yang 2023-02-23 1997 a476c0c645535c Philip Yang 2023-02-23 1998 if (gpu->xcp) a476c0c645535c Philip Yang 2023-02-23 1999 dev->node_props.drm_render_minor = gpu->xcp->ddev->render->index; a476c0c645535c Philip Yang 2023-02-23 2000 else 7c9b717196b1af Oak Zeng 2018-03-15 2001 dev->node_props.drm_render_minor = 8dc1db3172ae2f Mukul Joshi 2022-09-14 2002 gpu->kfd->shared_resources.drm_render_minor; 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2003 8dc1db3172ae2f Mukul Joshi 2022-09-14 2004 dev->node_props.hive_id = gpu->kfd->hive_id; ee2f17f4d02b14 Amber Lin 2021-11-18 2005 dev->node_props.num_sdma_engines = kfd_get_num_sdma_engines(gpu); 14568cf6583e9d Oak Zeng 2019-02-08 2006 dev->node_props.num_sdma_xgmi_engines = ee2f17f4d02b14 Amber Lin 2021-11-18 2007 kfd_get_num_xgmi_sdma_engines(gpu); bb71c74db3c554 Huang Rui 2019-12-16 2008 dev->node_props.num_sdma_queues_per_engine = 8dc1db3172ae2f Mukul Joshi 2022-09-14 2009 gpu->kfd->device_info.num_sdma_queues_per_engine - 8dc1db3172ae2f Mukul Joshi 2022-09-14 2010 gpu->kfd->device_info.num_reserved_sdma_queues_per_engine; 29633d0e204df1 Joseph Greathouse 2020-01-15 2011 dev->node_props.num_gws = (dev->gpu->gws && 29e764621bbcd4 Oak Zeng 2019-05-03 2012 dev->gpu->dqm->sched_policy != KFD_SCHED_POLICY_NO_HWS) ? 02274fc0f67259 Graham Sider 2021-11-05 2013 dev->gpu->adev->gds.gws_size : 0; e6945304187dea Yong Zhao 2020-01-30 2014 dev->node_props.num_cp_queues = get_cp_queues_num(dev->gpu->dqm); 0c1690e38b5e68 Shaoyun Liu 2018-07-06 2015 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2016 kfd_fill_mem_clk_max_info(dev); 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2017 kfd_fill_iolink_non_crat_info(dev); 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2018 7eb0502ac0538e Graham Sider 2021-11-10 2019 switch (dev->gpu->adev->asic_type) { 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2020 case CHIP_KAVERI: 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2021 case CHIP_HAWAII: 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2022 case CHIP_TONGA: 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2023 dev->node_props.capability |= ((HSA_CAP_DOORBELL_TYPE_PRE_1_0 << 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2024 HSA_CAP_DOORBELL_TYPE_TOTALBITS_SHIFT) & 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2025 HSA_CAP_DOORBELL_TYPE_TOTALBITS_MASK); 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2026 break; 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2027 case CHIP_CARRIZO: 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2028 case CHIP_FIJI: 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2029 case CHIP_POLARIS10: 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2030 case CHIP_POLARIS11: 846a44d7e918a4 Gang Ba 2018-09-05 2031 case CHIP_POLARIS12: ed81cd6e0e9f37 Kent Russell 2019-03-21 2032 case CHIP_VEGAM: 42aa8793d795f1 Felix Kuehling 2017-12-08 2033 pr_debug("Adding doorbell packet type capability\n"); 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2034 dev->node_props.capability |= ((HSA_CAP_DOORBELL_TYPE_1_0 << 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2035 HSA_CAP_DOORBELL_TYPE_TOTALBITS_SHIFT) & 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2036 HSA_CAP_DOORBELL_TYPE_TOTALBITS_MASK); 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2037 break; e4804a39ba5f72 Graham Sider 2021-10-28 2038 default: d230f1bfe7a197 Jonathan Kim 2022-03-25 2039 if (KFD_GC_VERSION(dev->gpu) < IP_VERSION(9, 0, 1)) 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2040 WARN(1, "Unexpected ASIC family %u", 7eb0502ac0538e Graham Sider 2021-11-10 2041 dev->gpu->adev->asic_type); d230f1bfe7a197 Jonathan Kim 2022-03-25 2042 else d230f1bfe7a197 Jonathan Kim 2022-03-25 2043 kfd_topology_set_capabilities(dev); 7639a8c420f04c Ben Goz 2015-06-07 2044 } 7639a8c420f04c Ben Goz 2015-06-07 2045 1ae99eab34f90c Oak Zeng 2019-06-10 2046 /* 1ae99eab34f90c Oak Zeng 2019-06-10 2047 * Overwrite ATS capability according to needs_iommu_device to fix 1ae99eab34f90c Oak Zeng 2019-06-10 2048 * potential missing corresponding bit in CRAT of BIOS. 1ae99eab34f90c Oak Zeng 2019-06-10 2049 */ 1ae99eab34f90c Oak Zeng 2019-06-10 2050 dev->node_props.capability &= ~HSA_CAP_ATS_PRESENT; 1ae99eab34f90c Oak Zeng 2019-06-10 2051 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2052 /* Fix errors in CZ CRAT. 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2053 * simd_count: Carrizo CRAT reports wrong simd_count, probably 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2054 * because it doesn't consider masked out CUs 70f372bffcc84c Philip Cox 2017-12-08 2055 * max_waves_per_simd: Carrizo reports wrong max_waves_per_simd 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2056 */ 7eb0502ac0538e Graham Sider 2021-11-10 2057 if (dev->gpu->adev->asic_type == CHIP_CARRIZO) { 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2058 dev->node_props.simd_count = 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2059 cu_info.simd_per_cu * cu_info.cu_active_number; 70f372bffcc84c Philip Cox 2017-12-08 2060 dev->node_props.max_waves_per_simd = 10; 70f372bffcc84c Philip Cox 2017-12-08 2061 } 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2062 5436ab94cd9460 Stanley.Yang 2020-08-17 2063 /* kfd only concerns sram ecc on GFX and HBM ecc on UMC */ 0dee45a25a63f7 Eric Huang 2019-01-11 2064 dev->node_props.capability |= 56c5977eae8799 Graham Sider 2021-10-19 2065 ((dev->gpu->adev->ras_enabled & BIT(AMDGPU_RAS_BLOCK__GFX)) != 0) ? 0dee45a25a63f7 Eric Huang 2019-01-11 2066 HSA_CAP_SRAM_EDCSUPPORTED : 0; 56c5977eae8799 Graham Sider 2021-10-19 2067 dev->node_props.capability |= 56c5977eae8799 Graham Sider 2021-10-19 2068 ((dev->gpu->adev->ras_enabled & BIT(AMDGPU_RAS_BLOCK__UMC)) != 0) ? 0dee45a25a63f7 Eric Huang 2019-01-11 2069 HSA_CAP_MEM_EDCSUPPORTED : 0; 0dee45a25a63f7 Eric Huang 2019-01-11 2070 046e674b961594 Graham Sider 2021-11-09 2071 if (KFD_GC_VERSION(dev->gpu) != IP_VERSION(9, 0, 1)) 56c5977eae8799 Graham Sider 2021-10-19 2072 dev->node_props.capability |= (dev->gpu->adev->ras_enabled != 0) ? 0dee45a25a63f7 Eric Huang 2019-01-11 2073 HSA_CAP_RASEVENTNOTIFY : 0; 0dee45a25a63f7 Eric Huang 2019-01-11 2074 610dab118ff501 Philip Yang 2023-03-31 2075 if (KFD_IS_SVM_API_SUPPORTED(dev->gpu->adev)) 4c166eb95decf0 Philip Yang 2020-12-09 2076 dev->node_props.capability |= HSA_CAP_SVMAPI_SUPPORTED; 4c166eb95decf0 Philip Yang 2020-12-09 2077 03d400e7605e3d Alex Sierra 2023-06-15 2078 if (dev->gpu->adev->gmc.is_app_apu || 03d400e7605e3d Alex Sierra 2023-06-15 2079 dev->gpu->adev->gmc.xgmi.connected_to_cpu) 03d400e7605e3d Alex Sierra 2023-06-15 2080 dev->node_props.capability |= HSA_CAP_FLAGS_COHERENTHOSTACCESS; 03d400e7605e3d Alex Sierra 2023-06-15 2081 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2082 kfd_debug_print_topology(); 3a87177eb14113 Harish Kasiviswanathan 2017-12-08 2083 5b5c4e40a37e85 Evgeny Pinchuk 2014-07-16 2084 kfd_notify_gpu_change(gpu_id, 1); f701acb6a4ed0a Felix Kuehling 2022-11-16 2085 7d4f8db4a1448e Dan Carpenter 2022-11-25 2086 return 0; 5b5c4e40a37e85 Evgeny Pinchuk 2014-07-16 2087 } 5b5c4e40a37e85 Evgeny Pinchuk 2014-07-16 2088 :::::: The code at line 1922 was first introduced by commit :::::: 8dc1db3172ae2f17ae71e33b608a33411ce8a1aa drm/amdkfd: Introduce kfd_node struct (v5) :::::: TO: Mukul Joshi <mukul.joshi(a)amd.com> :::::: CC: Alex Deucher <alexander.deucher(a)amd.com> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6] x86: resctrl: Fix illegal access by the chips not having RDT
by Zeng Heng 12 Jul '24

12 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IA7L2U --------------------------- If the chip not having RDT function, resctrl_arch_system_num_rmid_idx() would return 0. rmid_ptrs points to an illegal buffer after kcalloc() allocation, which would cause illegal access fault when accessing. Consequently, when we found resctrl_arch_system_num_rmid_idx() return 0, just return EOPNOTSUPP immediatly and skip initializing the resctrl file system. Fixes: 13e249bf4944 ("x86/resctrl: Move the filesystem portions of resctrl to live in '/fs/'") Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- fs/resctrl/monitor.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/fs/resctrl/monitor.c b/fs/resctrl/monitor.c index fcf2ab18966f..6f93ed1681c4 100644 --- a/fs/resctrl/monitor.c +++ b/fs/resctrl/monitor.c @@ -727,6 +727,9 @@ static int dom_data_init(struct rdt_resource *r) int err = 0, i; u32 idx; + if (!idx_limit) + return -EOPNOTSUPP; + mutex_lock(&rdtgroup_mutex); if (IS_ENABLED(CONFIG_RESCTRL_RMID_DEPENDS_ON_CLOSID)) { u32 *tmp; -- 2.25.1

2 1

[PATCH V2 OLK-5.10] iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
by Zhang Zekun 12 Jul '24

12 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IACKUP ---------------------------------------------- The code is isolated by CONFIG_ARCH_HISI which could also be opened in other platforms . Change the style to identify the hisi platform to minimize the code influence scope. Fixes: 46f0c5798ba5 ("iommu/arm-smmu-v3: Enable iotlb_sync_map according to SMMU_IIDR") Signed-off-by: Zhang Zekun <zhangzekun11(a)huawei.com> --- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 33 ++++++++++++++++----- 1 file changed, 25 insertions(+), 8 deletions(-) diff --git a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c index 7c818a17ca11..c5c25be54fd5 100644 --- a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c +++ b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c @@ -129,6 +129,7 @@ struct arm_smmu_ctx_desc quiet_cd = { 0 }; static struct arm_smmu_option_prop arm_smmu_options[] = { { ARM_SMMU_OPT_SKIP_PREFETCH, "hisilicon,broken-prefetch-cmd" }, { ARM_SMMU_OPT_PAGE0_REGS_ONLY, "cavium,cn9900-broken-page1-regspace"}, + { ARM_SMMU_OPT_SYNC_MAP, "hisilicon,broken-prefetch-pgtbl"}, { 0, NULL}, }; @@ -4948,14 +4949,9 @@ static void hisi_smmu_check_errata(struct arm_smmu_device *smmu) { u32 reg, i; - /* IIDR */ - reg = readl_relaxed(smmu->base + ARM_SMMU_IIDR); - if (!(FIELD_GET(IIDR_VARIANT, reg) == 0x3) || - !(FIELD_GET(IIDR_REVISON, reg) == 0x2)) + if (!(smmu->options & ARM_SMMU_OPT_SYNC_MAP)) return; - smmu->options |= ARM_SMMU_OPT_SYNC_MAP; - reg = readl_relaxed(smmu->base + ARM_SMMU_USER_CFG1); reg = reg & GENMASK(15, 0); for (i = 0; i < 8; i++) { @@ -4981,6 +4977,8 @@ static void hisi_smmu_check_errata(struct arm_smmu_device *smmu) } smmu->options |= ARM_SMMU_OPT_SYNC_BATCH; } +#else +static void hisi_smmu_check_errata(struct arm_smmu_device *smmu) {} #endif static int arm_smmu_device_hw_probe(struct arm_smmu_device *smmu) @@ -5213,9 +5211,7 @@ static int arm_smmu_device_hw_probe(struct arm_smmu_device *smmu) smmu->oas = 48; } -#ifdef CONFIG_HISILICON_ERRATUM_162100602 hisi_smmu_check_errata(smmu); -#endif if (arm_smmu_ops.pgsize_bitmap == -1UL) arm_smmu_ops.pgsize_bitmap = smmu->pgsize_bitmap; @@ -5248,6 +5244,25 @@ static int arm_smmu_device_hw_probe(struct arm_smmu_device *smmu) } #ifdef CONFIG_ACPI +static struct acpi_platform_list arm_smmu_v3_plat_info[] __initdata = { + /* HiSilicon Hip09 Platform */ + {"HISI ", "HIP09 ", 0, ACPI_SIG_IORT, greater_than_or_equal, + "Erratum #162100602", 0}, + {"HISI ", "HIP10 ", 0, ACPI_SIG_IORT, greater_than_or_equal, + "Erratum #162100602", 0}, + {"HISI ", "HIP11 ", 0, ACPI_SIG_IORT, greater_than_or_equal, + "Erratum #162100602", 0}, + { } +}; + +static void acpi_get_hisi_options(struct arm_smmu_device *smmu) +{ + if (acpi_match_platform_list(arm_smmu_v3_plat_info) < 0) + return; + + smmu->options |= ARM_SMMU_OPT_SYNC_MAP; +} + static void acpi_smmu_get_options(u32 model, struct arm_smmu_device *smmu) { switch (model) { @@ -5259,6 +5274,8 @@ static void acpi_smmu_get_options(u32 model, struct arm_smmu_device *smmu) break; } + acpi_get_hisi_options(smmu); + dev_notice(smmu->dev, "option mask 0x%x\n", smmu->options); } -- 2.17.1

2 1

[PATCH OLK-5.10] iommu/arm-smmu-v3: Change the style to identify the the hisi_platform
by Zhang Zekun 12 Jul '24

12 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IACKUP ---------------------------------------------- The code is isolated by CONFIG_ARCH_HISI which could also be opened in other platforms . Change the style to identify the hisi platform to minimize the code influence scope. Fixes: 46f0c5798ba5 ("iommu/arm-smmu-v3: Enable iotlb_sync_map according to SMMU_IIDR") Signed-off-by: Zhang Zekun <zhangzekun11(a)huawei.com> --- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 33 ++++++++++++++++----- 1 file changed, 25 insertions(+), 8 deletions(-) diff --git a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c index 7c818a17ca11..c5c25be54fd5 100644 --- a/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c +++ b/drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c @@ -129,6 +129,7 @@ struct arm_smmu_ctx_desc quiet_cd = { 0 }; static struct arm_smmu_option_prop arm_smmu_options[] = { { ARM_SMMU_OPT_SKIP_PREFETCH, "hisilicon,broken-prefetch-cmd" }, { ARM_SMMU_OPT_PAGE0_REGS_ONLY, "cavium,cn9900-broken-page1-regspace"}, + { ARM_SMMU_OPT_SYNC_MAP, "hisilicon,broken-prefetch-pgtbl"}, { 0, NULL}, }; @@ -4948,14 +4949,9 @@ static void hisi_smmu_check_errata(struct arm_smmu_device *smmu) { u32 reg, i; - /* IIDR */ - reg = readl_relaxed(smmu->base + ARM_SMMU_IIDR); - if (!(FIELD_GET(IIDR_VARIANT, reg) == 0x3) || - !(FIELD_GET(IIDR_REVISON, reg) == 0x2)) + if (!(smmu->options & ARM_SMMU_OPT_SYNC_MAP)) return; - smmu->options |= ARM_SMMU_OPT_SYNC_MAP; - reg = readl_relaxed(smmu->base + ARM_SMMU_USER_CFG1); reg = reg & GENMASK(15, 0); for (i = 0; i < 8; i++) { @@ -4981,6 +4977,8 @@ static void hisi_smmu_check_errata(struct arm_smmu_device *smmu) } smmu->options |= ARM_SMMU_OPT_SYNC_BATCH; } +#else +static void hisi_smmu_check_errata(struct arm_smmu_device *smmu) {} #endif static int arm_smmu_device_hw_probe(struct arm_smmu_device *smmu) @@ -5213,9 +5211,7 @@ static int arm_smmu_device_hw_probe(struct arm_smmu_device *smmu) smmu->oas = 48; } -#ifdef CONFIG_HISILICON_ERRATUM_162100602 hisi_smmu_check_errata(smmu); -#endif if (arm_smmu_ops.pgsize_bitmap == -1UL) arm_smmu_ops.pgsize_bitmap = smmu->pgsize_bitmap; @@ -5248,6 +5244,25 @@ static int arm_smmu_device_hw_probe(struct arm_smmu_device *smmu) } #ifdef CONFIG_ACPI +static struct acpi_platform_list arm_smmu_v3_plat_info[] __initdata = { + /* HiSilicon Hip09 Platform */ + {"HISI ", "HIP09 ", 0, ACPI_SIG_IORT, greater_than_or_equal, + "Erratum #162100602", 0}, + {"HISI ", "HIP10 ", 0, ACPI_SIG_IORT, greater_than_or_equal, + "Erratum #162100602", 0}, + {"HISI ", "HIP11 ", 0, ACPI_SIG_IORT, greater_than_or_equal, + "Erratum #162100602", 0}, + { } +}; + +static void acpi_get_hisi_options(struct arm_smmu_device *smmu) +{ + if (acpi_match_platform_list(arm_smmu_v3_plat_info) < 0) + return; + + smmu->options |= ARM_SMMU_OPT_SYNC_MAP; +} + static void acpi_smmu_get_options(u32 model, struct arm_smmu_device *smmu) { switch (model) { @@ -5259,6 +5274,8 @@ static void acpi_smmu_get_options(u32 model, struct arm_smmu_device *smmu) break; } + acpi_get_hisi_options(smmu); + dev_notice(smmu->dev, "option mask 0x%x\n", smmu->options); } -- 2.17.1

2 1

[PATCH openEuler-22.03-LTS-SP1] Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST
by Yongqiang Liu 12 Jul '24

12 Jul '24

From: Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> stable inclusion from stable-v5.10.212 commit df193568d61234c81de7ed4d540c01975de60277 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q8M1 CVE: CVE-2024-27416 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 7e74aa53a68bf60f6019bd5d9a9a1406ec4d4865 ] If we received HCI_EV_IO_CAPA_REQUEST while HCI_OP_READ_REMOTE_EXT_FEATURES is yet to be responded assume the remote does support SSP since otherwise this event shouldn't be generated. Link: https://lore.kernel.org/linux-bluetooth/CABBYNZ+9UdG1cMZVmdtN3U2aS16AKMCyTA… Fixes: c7f59461f5a7 ("Bluetooth: Fix a refcnt underflow problem for hci_conn") Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Rui Xiang <rui.xiang(a)huawei.com> --- net/bluetooth/hci_event.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/net/bluetooth/hci_event.c b/net/bluetooth/hci_event.c index e01159d8fabf..ff348a8a2424 100644 --- a/net/bluetooth/hci_event.c +++ b/net/bluetooth/hci_event.c @@ -4620,9 +4620,12 @@ static void hci_io_capa_request_evt(struct hci_dev *hdev, struct sk_buff *skb) hci_dev_lock(hdev); conn = hci_conn_hash_lookup_ba(hdev, ACL_LINK, &ev->bdaddr); - if (!conn || !hci_conn_ssp_enabled(conn)) + if (!conn || !hci_dev_test_flag(hdev, HCI_SSP_ENABLED)) goto unlock; + /* Assume remote supports SSP since it has triggered this event */ + set_bit(HCI_CONN_SSP_ENABLED, &conn->flags); + hci_conn_hold(conn); if (!hci_dev_test_flag(hdev, HCI_MGMT)) -- 2.34.1

2 1

[PATCH OLK-5.10] fs: improve dump_mapping() robustness
by Jinjiang Tu 12 Jul '24

12 Jul '24

From: Baolin Wang <baolin.wang(a)linux.alibaba.com> mainline inclusion from mainline-v6.9-rc1 commit 8b3d838139bcd1e552f1899191f734264ce2a1a5 category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IACHGW CVE: NA Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ------------------------------------------- We met a kernel crash issue when running stress-ng testing, and the system crashes when printing the dentry name in dump_mapping(). Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 pc : dentry_name+0xd8/0x224 lr : pointer+0x22c/0x370 sp : ffff800025f134c0 ...... Call trace: dentry_name+0xd8/0x224 pointer+0x22c/0x370 vsnprintf+0x1ec/0x730 vscnprintf+0x2c/0x60 vprintk_store+0x70/0x234 vprintk_emit+0xe0/0x24c vprintk_default+0x3c/0x44 vprintk_func+0x84/0x2d0 printk+0x64/0x88 __dump_page+0x52c/0x530 dump_page+0x14/0x20 set_migratetype_isolate+0x110/0x224 start_isolate_page_range+0xc4/0x20c offline_pages+0x124/0x474 memory_block_offline+0x44/0xf4 memory_subsys_offline+0x3c/0x70 device_offline+0xf0/0x120 ...... The root cause is that, one thread is doing page migration, and we will use the target page's ->mapping field to save 'anon_vma' pointer between page unmap and page move, and now the target page is locked and refcount is 1. Currently, there is another stress-ng thread performing memory hotplug, attempting to offline the target page that is being migrated. It discovers that the refcount of this target page is 1, preventing the offline operation, thus proceeding to dump the page. However, page_mapping() of the target page may return an incorrect file mapping to crash the system in dump_mapping(), since the target page->mapping only saves 'anon_vma' pointer without setting PAGE_MAPPING_ANON flag. The page migration issue has been fixed by commit d1adb25df711 ("mm: migrate: fix getting incorrect page mapping during page migration"). In addition, Matthew suggested we should also improve dump_mapping()'s robustness to resilient against the kernel crash [1]. With checking the 'dentry.parent' and 'dentry.d_name.name' used by dentry_name(), I can see dump_mapping() will output the invalid dentry instead of crashing the system when this issue is reproduced again. [12211.189128] page:fffff7de047741c0 refcount:1 mapcount:0 mapping:ffff989117f55ea0 index:0x1 pfn:0x211dd07 [12211.189144] aops:0x0 ino:1 invalid dentry:74786574206e6870 [12211.189148] flags: 0x57ffffc0000001(locked|node=1|zone=2|lastcpupid=0x1fffff) [12211.189150] page_type: 0xffffffff() [12211.189153] raw: 0057ffffc0000001 0000000000000000 dead000000000122 ffff989117f55ea0 [12211.189154] raw: 0000000000000001 0000000000000001 00000001ffffffff 0000000000000000 [12211.189155] page dumped because: unmovable page [1] https://lore.kernel.org/all/ZXxn%2F0oixJxxAnpF@casper.infradead.org/ Suggested-by: Matthew Wilcox <willy(a)infradead.org> Signed-off-by: Baolin Wang <baolin.wang(a)linux.alibaba.com> Link: https://lore.kernel.org/r/937ab1f87328516821d39be672b6bc18861d9d3e.17053914… Signed-off-by: Christian Brauner <brauner(a)kernel.org> Conflicts: fs/inode.c mm/debug.c [Prior cleanup commit 3e9d80a891df is not merged.] Signed-off-by: Jinjiang Tu <tujinjiang(a)huawei.com> --- mm/debug.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/mm/debug.c b/mm/debug.c index 8a40b3fefbeb..6ead410ec389 100644 --- a/mm/debug.c +++ b/mm/debug.c @@ -150,7 +150,8 @@ void __dump_page(struct page *page, const char *reason) } dentry_ptr = container_of(dentry_first, struct dentry, d_u.d_alias); - if (get_kernel_nofault(dentry, dentry_ptr)) { + if (get_kernel_nofault(dentry, dentry_ptr) || + !dentry.d_parent || !dentry.d_name.name) { pr_warn("aops:%ps ino:%lx with invalid dentry %px\n", a_ops, ino, dentry_ptr); } else { -- 2.25.1

2 1

[PATCH OLK-6.6 0/1] CVE-2024-39478
by Chen Ridong 12 Jul '24

12 Jul '24

*** BLURB HERE *** Jia Jie Ho (1): crypto: starfive - Do not free stack buffer drivers/crypto/starfive/jh7110-rsa.c | 1 - 1 file changed, 1 deletion(-) -- 2.34.1

2 2

[PATCH OLK-6.6] gfs2: Fix potential glock use-after-free on unmount
by Zeng Heng 12 Jul '24

12 Jul '24

From: Andreas Gruenbacher <agruenba(a)redhat.com> stable inclusion from stable-v6.6.33 commit 0636b34b44589b142700ac137b5f69802cfe2e37 category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IA74DQ Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit d98779e687726d8f8860f1c54b5687eec5f63a73 ] When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploiting this behavior to speed up filesystem unmount: gfs2 would simply free glocks it didn't want to unlock and then release the lockspace. This didn't take the bast callbacks for asynchronous lock contention notifications into account, which remain active until until a lock is unlocked or its lockspace is released. To prevent those callbacks from accessing deallocated objects, put the glocks that should not be unlocked on the sd_dead_glocks list, release the lockspace, and only then free those glocks. As an additional measure, ignore unexpected ast and bast callbacks if the receiving glock is dead. Fixes: fb6791d100d1b ("GFS2: skip dlm_unlock calls in unmount") Signed-off-by: Andreas Gruenbacher <agruenba(a)redhat.com> Cc: David Teigland <teigland(a)redhat.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Conflicts: fs/gfs2/glock.c fs/gfs2/glock.h [Resolve conflicts due to several refactor patches not merged.] Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- fs/gfs2/glock.c | 39 ++++++++++++++++++++++++++++++++++----- fs/gfs2/glock.h | 3 ++- fs/gfs2/incore.h | 1 + fs/gfs2/lock_dlm.c | 32 ++++++++++++++++++++++---------- fs/gfs2/ops_fstype.c | 1 + fs/gfs2/super.c | 3 --- 6 files changed, 60 insertions(+), 19 deletions(-) diff --git a/fs/gfs2/glock.c b/fs/gfs2/glock.c index 4a280be229a6..7739e6198d75 100644 --- a/fs/gfs2/glock.c +++ b/fs/gfs2/glock.c @@ -166,19 +166,46 @@ static bool glock_blocked_by_withdraw(struct gfs2_glock *gl) return true; } -void gfs2_glock_free(struct gfs2_glock *gl) +static void __gfs2_glock_free(struct gfs2_glock *gl) { - struct gfs2_sbd *sdp = gl->gl_name.ln_sbd; - gfs2_glock_assert_withdraw(gl, atomic_read(&gl->gl_revokes) == 0); rhashtable_remove_fast(&gl_hash_table, &gl->gl_node, ht_parms); smp_mb(); wake_up_glock(gl); call_rcu(&gl->gl_rcu, gfs2_glock_dealloc); +} + +void gfs2_glock_free(struct gfs2_glock *gl) { + struct gfs2_sbd *sdp = gl->gl_name.ln_sbd; + + __gfs2_glock_free(gl); if (atomic_dec_and_test(&sdp->sd_glock_disposal)) wake_up(&sdp->sd_kill_wait); } +void gfs2_glock_free_later(struct gfs2_glock *gl) { + struct gfs2_sbd *sdp = gl->gl_name.ln_sbd; + + spin_lock(&lru_lock); + list_add(&gl->gl_lru, &sdp->sd_dead_glocks); + spin_unlock(&lru_lock); + if (atomic_dec_and_test(&sdp->sd_glock_disposal)) + wake_up(&sdp->sd_kill_wait); +} + +static void gfs2_free_dead_glocks(struct gfs2_sbd *sdp) +{ + struct list_head *list = &sdp->sd_dead_glocks; + + while(!list_empty(list)) { + struct gfs2_glock *gl; + + gl = list_first_entry(list, struct gfs2_glock, gl_lru); + list_del_init(&gl->gl_lru); + __gfs2_glock_free(gl); + } +} + /** * gfs2_glock_hold() - increment reference count on glock * @gl: The glock to hold @@ -467,7 +494,7 @@ int gfs2_instantiate(struct gfs2_holder *gh) /** * do_promote - promote as many requests as possible on the current queue * @gl: The glock - * + * * Returns true on success (i.e., progress was made or there are no waiters). */ @@ -1468,7 +1495,7 @@ static inline bool pid_is_meaningful(const struct gfs2_holder *gh) * Eventually we should move the recursive locking trap to a * debugging option or something like that. This is the fast * path and needs to have the minimum number of distractions. - * + * */ static inline void add_to_queue(struct gfs2_holder *gh) @@ -2193,6 +2220,8 @@ void gfs2_gl_hash_clear(struct gfs2_sbd *sdp) wait_event_timeout(sdp->sd_kill_wait, atomic_read(&sdp->sd_glock_disposal) == 0, HZ * 600); + gfs2_lm_unmount(sdp); + gfs2_free_dead_glocks(sdp); glock_hash_walk(dump_glock_func, sdp); } diff --git a/fs/gfs2/glock.h b/fs/gfs2/glock.h index c8685ca7d2a2..a5d793026de8 100644 --- a/fs/gfs2/glock.h +++ b/fs/gfs2/glock.h @@ -84,7 +84,7 @@ enum { #define GL_SKIP 0x0100 #define GL_NOPID 0x0200 #define GL_NOCACHE 0x0400 - + /* * lm_async_cb return flags * @@ -266,6 +266,7 @@ extern void gfs2_gl_dq_holders(struct gfs2_sbd *sdp); extern void gfs2_glock_thaw(struct gfs2_sbd *sdp); extern void gfs2_glock_add_to_lru(struct gfs2_glock *gl); extern void gfs2_glock_free(struct gfs2_glock *gl); +extern void gfs2_glock_free_later(struct gfs2_glock *gl); extern int __init gfs2_glock_init(void); extern void gfs2_glock_exit(void); diff --git a/fs/gfs2/incore.h b/fs/gfs2/incore.h index a8c95c5293c6..d364daa87c81 100644 --- a/fs/gfs2/incore.h +++ b/fs/gfs2/incore.h @@ -838,6 +838,7 @@ struct gfs2_sbd { /* For quiescing the filesystem */ struct gfs2_holder sd_freeze_gh; struct mutex sd_freeze_mutex; + struct list_head sd_dead_glocks; char sd_fsname[GFS2_FSNAME_LEN + 3 * sizeof(int) + 2]; char sd_table_name[GFS2_FSNAME_LEN]; diff --git a/fs/gfs2/lock_dlm.c b/fs/gfs2/lock_dlm.c index 59ab18c79889..0bde45fb4963 100644 --- a/fs/gfs2/lock_dlm.c +++ b/fs/gfs2/lock_dlm.c @@ -121,6 +121,11 @@ static void gdlm_ast(void *arg) struct gfs2_glock *gl = arg; unsigned ret = gl->gl_state; + /* If the glock is dead, we only react to a dlm_unlock() reply. */ + if (__lockref_is_dead(&gl->gl_lockref) && + gl->gl_lksb.sb_status != -DLM_EUNLOCK) + return; + gfs2_update_reply_times(gl); BUG_ON(gl->gl_lksb.sb_flags & DLM_SBF_DEMOTED); @@ -171,6 +176,9 @@ static void gdlm_bast(void *arg, int mode) { struct gfs2_glock *gl = arg; + if (__lockref_is_dead(&gl->gl_lockref)) + return; + switch (mode) { case DLM_LOCK_EX: gfs2_glock_cb(gl, LM_ST_UNLOCKED); @@ -291,8 +299,12 @@ static void gdlm_put_lock(struct gfs2_glock *gl) struct lm_lockstruct *ls = &sdp->sd_lockstruct; int error; - if (gl->gl_lksb.sb_lkid == 0) - goto out_free; + BUG_ON(!__lockref_is_dead(&gl->gl_lockref)); + + if (gl->gl_lksb.sb_lkid == 0) { + gfs2_glock_free(gl); + return; + } clear_bit(GLF_BLOCKING, &gl->gl_flags); gfs2_glstats_inc(gl, GFS2_LKS_DCOUNT); @@ -300,13 +312,17 @@ static void gdlm_put_lock(struct gfs2_glock *gl) gfs2_update_request_times(gl); /* don't want to call dlm if we've unmounted the lock protocol */ - if (test_bit(DFL_UNMOUNT, &ls->ls_recover_flags)) - goto out_free; + if (test_bit(DFL_UNMOUNT, &ls->ls_recover_flags)) { + gfs2_glock_free(gl); + return; + } /* don't want to skip dlm_unlock writing the lvb when lock has one */ if (test_bit(SDF_SKIP_DLM_UNLOCK, &sdp->sd_flags) && - !gl->gl_lksb.sb_lvbptr) - goto out_free; + !gl->gl_lksb.sb_lvbptr) { + gfs2_glock_free_later(gl); + return; + } again: error = dlm_unlock(ls->ls_dlm, gl->gl_lksb.sb_lkid, DLM_LKF_VALBLK, @@ -321,10 +337,6 @@ static void gdlm_put_lock(struct gfs2_glock *gl) gl->gl_name.ln_type, (unsigned long long)gl->gl_name.ln_number, error); } - return; - -out_free: - gfs2_glock_free(gl); } static void gdlm_cancel(struct gfs2_glock *gl) diff --git a/fs/gfs2/ops_fstype.c b/fs/gfs2/ops_fstype.c index dd64140ae6d7..c5743f84a10d 100644 --- a/fs/gfs2/ops_fstype.c +++ b/fs/gfs2/ops_fstype.c @@ -136,6 +136,7 @@ static struct gfs2_sbd *init_sbd(struct super_block *sb) atomic_set(&sdp->sd_log_in_flight, 0); init_waitqueue_head(&sdp->sd_log_flush_wait); mutex_init(&sdp->sd_freeze_mutex); + INIT_LIST_HEAD(&sdp->sd_dead_glocks); return sdp; diff --git a/fs/gfs2/super.c b/fs/gfs2/super.c index 5f4ebe279aaa..b590d435a6cb 100644 --- a/fs/gfs2/super.c +++ b/fs/gfs2/super.c @@ -646,10 +646,7 @@ static void gfs2_put_super(struct super_block *sb) gfs2_gl_hash_clear(sdp); truncate_inode_pages_final(&sdp->sd_aspace); gfs2_delete_debugfs_file(sdp); - /* Unmount the locking protocol */ - gfs2_lm_unmount(sdp); - /* At this point, we're through participating in the lockspace */ gfs2_sys_fs_del(sdp); free_sbd(sdp); } -- 2.25.1

2 1

[PATCH OLK-6.6 V3 0/2] Fix xfs file creation issue
by Zizhi Wo 12 Jul '24

12 Jul '24

V3: Add a fix tag that was missing from the second patch. V2: Add a fix tag that was missing from the first patch. V1: Fix main problem. Zizhi Wo (2): Revert "xfs: Fix file creation failure" xfs: Avoid races with cnt_btree lastrec updates fs/xfs/libxfs/xfs_alloc.c | 125 +++++++++++++++++++++++++++++--- fs/xfs/libxfs/xfs_alloc_btree.c | 72 ------------------ fs/xfs/libxfs/xfs_btree.c | 51 ------------- fs/xfs/libxfs/xfs_btree.h | 19 +---- 4 files changed, 115 insertions(+), 152 deletions(-) -- 2.39.2

2 3

[openeuler:OLK-5.10] BUILD SUCCESS 9bb2f255d4cf060692e6f5240ace43b12ac72246
by kernel test robot 12 Jul '24

12 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-5.10 branch HEAD: 9bb2f255d4cf060692e6f5240ace43b12ac72246 !9745 CVE-2024-39469 elapsed time: 732m configs tested: 34 configs skipped: 128 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-14.1.0 arm64 randconfig-001-20240712 gcc-14.1.0 arm64 randconfig-002-20240712 gcc-14.1.0 arm64 randconfig-003-20240712 clang-19 arm64 randconfig-004-20240712 clang-17 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240712 clang-18 x86_64 buildonly-randconfig-002-20240712 clang-18 x86_64 buildonly-randconfig-003-20240712 clang-18 x86_64 buildonly-randconfig-004-20240712 clang-18 x86_64 buildonly-randconfig-005-20240712 clang-18 x86_64 buildonly-randconfig-006-20240712 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240712 gcc-12 x86_64 randconfig-002-20240712 gcc-13 x86_64 randconfig-003-20240712 gcc-12 x86_64 randconfig-004-20240712 clang-18 x86_64 randconfig-005-20240712 gcc-13 x86_64 randconfig-006-20240712 clang-18 x86_64 randconfig-011-20240712 clang-18 x86_64 randconfig-012-20240712 clang-18 x86_64 randconfig-013-20240712 clang-18 x86_64 randconfig-014-20240712 gcc-13 x86_64 randconfig-015-20240712 clang-18 x86_64 randconfig-016-20240712 clang-18 x86_64 randconfig-071-20240712 gcc-13 x86_64 randconfig-072-20240712 gcc-11 x86_64 randconfig-073-20240712 clang-18 x86_64 randconfig-074-20240712 gcc-9 x86_64 randconfig-075-20240712 clang-18 x86_64 randconfig-076-20240712 clang-18 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6 V2 0/2] Fix xfs file creation issue
by Zizhi Wo 12 Jul '24

12 Jul '24

V2: Add a fix tag that was missing from the first patch. V1: Fix main problem. Zizhi Wo (2): Revert "xfs: Fix file creation failure" xfs: Avoid races with cnt_btree lastrec updates fs/xfs/libxfs/xfs_alloc.c | 125 +++++++++++++++++++++++++++++--- fs/xfs/libxfs/xfs_alloc_btree.c | 72 ------------------ fs/xfs/libxfs/xfs_btree.c | 51 ------------- fs/xfs/libxfs/xfs_btree.h | 19 +---- 4 files changed, 115 insertions(+), 152 deletions(-) -- 2.39.2

2 3

[openeuler:openEuler-1.0-LTS] BUILD SUCCESS 8585cfc057fe5efb77b4d3582604b16fdf4ccc09
by kernel test robot 12 Jul '24

12 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS branch HEAD: 8585cfc057fe5efb77b4d3582604b16fdf4ccc09 !9858 khugepaged: fix null-pointer dereference due to race elapsed time: 736m configs tested: 30 configs skipped: 128 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig gcc-14.1.0 arm64 allnoconfig gcc-14.1.0 arm64 randconfig-001-20240712 gcc-14.1.0 arm64 randconfig-002-20240712 gcc-14.1.0 arm64 randconfig-003-20240712 gcc-14.1.0 arm64 randconfig-004-20240712 gcc-14.1.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240712 clang-18 x86_64 buildonly-randconfig-002-20240712 clang-18 x86_64 buildonly-randconfig-003-20240712 clang-18 x86_64 buildonly-randconfig-004-20240712 clang-18 x86_64 buildonly-randconfig-005-20240712 clang-18 x86_64 buildonly-randconfig-006-20240712 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240712 gcc-12 x86_64 randconfig-002-20240712 gcc-13 x86_64 randconfig-003-20240712 gcc-12 x86_64 randconfig-004-20240712 clang-18 x86_64 randconfig-005-20240712 gcc-13 x86_64 randconfig-006-20240712 clang-18 x86_64 randconfig-011-20240712 clang-18 x86_64 randconfig-012-20240712 clang-18 x86_64 randconfig-013-20240712 clang-18 x86_64 randconfig-014-20240712 gcc-13 x86_64 randconfig-015-20240712 clang-18 x86_64 randconfig-016-20240712 clang-18 x86_64 randconfig-071-20240712 gcc-13 x86_64 randconfig-072-20240712 gcc-11 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3761/10661] arch/loongarch/kvm/../../../virt/kvm/kvm_main.c:426:53: warning: 'kvmalloc_array' sizes specified with 'sizeof' in the earlier argument and not in the later argument
by kernel test robot 12 Jul '24

12 Jul '24

Hi Tianrui, First bad commit (maybe != root cause): tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 15f539c4a521c5ae892554d0046e24f050ec0e00 commit: 07db411edd838080fb7c42b9f56bc08dd60d9af6 [3761/10661] LoongArch: KVM: Enable kvm config and add the makefile config: loongarch-randconfig-001-20240711 (https://download.01.org/0day-ci/archive/20240712/202407120630.mHZS1KSZ-lkp@…) compiler: loongarch64-linux-gcc (GCC) 14.1.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20240712/202407120630.mHZS1KSZ-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407120630.mHZS1KSZ-lkp@intel.com/ All warnings (new ones prefixed by >>): arch/loongarch/kvm/../../../virt/kvm/kvm_main.c: In function '__kvm_mmu_topup_memory_cache': >> arch/loongarch/kvm/../../../virt/kvm/kvm_main.c:426:53: warning: 'kvmalloc_array' sizes specified with 'sizeof' in the earlier argument and not in the later argument [-Wcalloc-transposed-args] 426 | mc->objects = kvmalloc_array(sizeof(void *), capacity, gfp); | ^~~~ arch/loongarch/kvm/../../../virt/kvm/kvm_main.c:426:53: note: earlier argument should specify number of elements, later size of each element vim +426 arch/loongarch/kvm/../../../virt/kvm/kvm_main.c 6926f95accee3f Sean Christopherson 2020-07-02 413 837f66c7120754 David Matlack 2022-06-22 414 int __kvm_mmu_topup_memory_cache(struct kvm_mmu_memory_cache *mc, int capacity, int min) 6926f95accee3f Sean Christopherson 2020-07-02 415 { 63f4b210414b65 Paolo Bonzini 2022-07-29 416 gfp_t gfp = mc->gfp_custom ? mc->gfp_custom : GFP_KERNEL_ACCOUNT; 6926f95accee3f Sean Christopherson 2020-07-02 417 void *obj; 6926f95accee3f Sean Christopherson 2020-07-02 418 6926f95accee3f Sean Christopherson 2020-07-02 419 if (mc->nobjs >= min) 6926f95accee3f Sean Christopherson 2020-07-02 420 return 0; 837f66c7120754 David Matlack 2022-06-22 421 837f66c7120754 David Matlack 2022-06-22 422 if (unlikely(!mc->objects)) { 837f66c7120754 David Matlack 2022-06-22 423 if (WARN_ON_ONCE(!capacity)) 837f66c7120754 David Matlack 2022-06-22 424 return -EIO; 837f66c7120754 David Matlack 2022-06-22 425 837f66c7120754 David Matlack 2022-06-22 @426 mc->objects = kvmalloc_array(sizeof(void *), capacity, gfp); 837f66c7120754 David Matlack 2022-06-22 427 if (!mc->objects) 837f66c7120754 David Matlack 2022-06-22 428 return -ENOMEM; 837f66c7120754 David Matlack 2022-06-22 429 837f66c7120754 David Matlack 2022-06-22 430 mc->capacity = capacity; 837f66c7120754 David Matlack 2022-06-22 431 } 837f66c7120754 David Matlack 2022-06-22 432 837f66c7120754 David Matlack 2022-06-22 433 /* It is illegal to request a different capacity across topups. */ 837f66c7120754 David Matlack 2022-06-22 434 if (WARN_ON_ONCE(mc->capacity != capacity)) 837f66c7120754 David Matlack 2022-06-22 435 return -EIO; 837f66c7120754 David Matlack 2022-06-22 436 837f66c7120754 David Matlack 2022-06-22 437 while (mc->nobjs < mc->capacity) { 837f66c7120754 David Matlack 2022-06-22 438 obj = mmu_memory_cache_alloc_obj(mc, gfp); 6926f95accee3f Sean Christopherson 2020-07-02 439 if (!obj) 6926f95accee3f Sean Christopherson 2020-07-02 440 return mc->nobjs >= min ? 0 : -ENOMEM; 6926f95accee3f Sean Christopherson 2020-07-02 441 mc->objects[mc->nobjs++] = obj; 6926f95accee3f Sean Christopherson 2020-07-02 442 } 6926f95accee3f Sean Christopherson 2020-07-02 443 return 0; 6926f95accee3f Sean Christopherson 2020-07-02 444 } 6926f95accee3f Sean Christopherson 2020-07-02 445 :::::: The code at line 426 was first introduced by commit :::::: 837f66c71207542283831d0762c5dca3db5b397a KVM: Allow for different capacities in kvm_mmu_memory_cache structs :::::: TO: David Matlack <dmatlack(a)google.com> :::::: CC: Paolo Bonzini <pbonzini(a)redhat.com> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6] BUILD REGRESSION 15f539c4a521c5ae892554d0046e24f050ec0e00
by kernel test robot 12 Jul '24

12 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-6.6 branch HEAD: 15f539c4a521c5ae892554d0046e24f050ec0e00 !5260 [OLK-6.6] Support live migration for CSV/CSV2 guest, and support rebooting CSV/CSV2 guest Error/Warning reports: https://lore.kernel.org/oe-kbuild-all/202407120045.vP3mrDfe-lkp@intel.com https://lore.kernel.org/oe-kbuild-all/202407120236.foVeyRg9-lkp@intel.com Error/Warning: (recently discovered and may have been fixed) drivers/char/virtio_console.c:1460:63: warning: '%u' directive output may be truncated writing between 1 and 10 bytes into a region of size between 0 and 9 [-Wformat-truncation=] loongarch64-linux-ld: ls2k500sfb.c:(.text+0x1030): undefined reference to `fg_console' ls2k500sfb.c:(.text+0x102c): undefined reference to `fg_console' Error/Warning ids grouped by kconfigs: recent_errors |-- arm64-allmodconfig | `-- clang:warning:no-such-include-directory:drivers-infiniband-hw-hiroce3-include-mag |-- arm64-randconfig-003-20240711 | `-- drivers-char-virtio_console.c:warning:u-directive-output-may-be-truncated-writing-between-and-bytes-into-a-region-of-size-between-and `-- loongarch-randconfig-r133-20240711 |-- loongarch64-linux-ld:ls2k500sfb.c:(.text):undefined-reference-to-fg_console `-- ls2k500sfb.c:(.text):undefined-reference-to-fg_console elapsed time: 737m configs tested: 38 configs skipped: 107 tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-14.1.0 arm64 randconfig-001-20240711 clang-19 arm64 randconfig-002-20240711 gcc-14.1.0 arm64 randconfig-003-20240711 gcc-14.1.0 arm64 randconfig-004-20240711 gcc-14.1.0 loongarch allmodconfig gcc-14.1.0 loongarch allnoconfig gcc-14.1.0 loongarch randconfig-001-20240711 gcc-14.1.0 loongarch randconfig-002-20240711 gcc-14.1.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240711 clang-18 x86_64 buildonly-randconfig-002-20240711 clang-18 x86_64 buildonly-randconfig-003-20240711 clang-18 x86_64 buildonly-randconfig-004-20240711 clang-18 x86_64 buildonly-randconfig-005-20240711 gcc-13 x86_64 buildonly-randconfig-006-20240711 gcc-13 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240711 gcc-13 x86_64 randconfig-002-20240711 gcc-13 x86_64 randconfig-003-20240711 gcc-11 x86_64 randconfig-004-20240711 gcc-9 x86_64 randconfig-005-20240711 clang-18 x86_64 randconfig-006-20240711 gcc-13 x86_64 randconfig-011-20240711 gcc-13 x86_64 randconfig-012-20240711 clang-18 x86_64 randconfig-013-20240711 gcc-13 x86_64 randconfig-014-20240711 clang-18 x86_64 randconfig-015-20240711 clang-18 x86_64 randconfig-016-20240711 gcc-10 x86_64 randconfig-071-20240711 gcc-13 x86_64 randconfig-072-20240711 gcc-13 x86_64 randconfig-073-20240711 clang-18 x86_64 randconfig-074-20240711 gcc-13 x86_64 randconfig-075-20240711 clang-18 x86_64 randconfig-076-20240711 gcc-8 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 2431/10661] drivers/char/virtio_console.c:1460:63: warning: '%u' directive output may be truncated writing between 1 and 10 bytes into a region of size between 0 and 9
by kernel test robot 12 Jul '24

12 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 15f539c4a521c5ae892554d0046e24f050ec0e00 commit: f04c0f3eb9b49427c273cd3e4d5a2ff895855b4b [2431/10661] make OPTIMIZE_INLINING config editable config: arm64-randconfig-003-20240711 (https://download.01.org/0day-ci/archive/20240712/202407120236.foVeyRg9-lkp@…) compiler: aarch64-linux-gcc (GCC) 14.1.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20240712/202407120236.foVeyRg9-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407120236.foVeyRg9-lkp@intel.com/ All warnings (new ones prefixed by >>): drivers/char/virtio_console.c: In function 'add_port.isra': >> drivers/char/virtio_console.c:1460:63: warning: '%u' directive output may be truncated writing between 1 and 10 bytes into a region of size between 0 and 9 [-Wformat-truncation=] 1460 | snprintf(debugfs_name, sizeof(debugfs_name), "vport%up%u", | ^~ drivers/char/virtio_console.c:1460:54: note: directive argument in the range [0, 4294967294] 1460 | snprintf(debugfs_name, sizeof(debugfs_name), "vport%up%u", | ^~~~~~~~~~~~ drivers/char/virtio_console.c:1460:9: note: 'snprintf' output between 9 and 27 bytes into a destination of size 16 1460 | snprintf(debugfs_name, sizeof(debugfs_name), "vport%up%u", | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 1461 | port->portdev->vdev->index, id); | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ vim +1460 drivers/char/virtio_console.c 3eae0adea949d8 Amit Shah 2010-09-02 1354 c446f8fcc9fba3 Amit Shah 2010-05-19 1355 static int add_port(struct ports_device *portdev, u32 id) c446f8fcc9fba3 Amit Shah 2010-05-19 1356 { c446f8fcc9fba3 Amit Shah 2010-05-19 1357 char debugfs_name[16]; c446f8fcc9fba3 Amit Shah 2010-05-19 1358 struct port *port; c446f8fcc9fba3 Amit Shah 2010-05-19 1359 dev_t devt; c446f8fcc9fba3 Amit Shah 2010-05-19 1360 int err; c446f8fcc9fba3 Amit Shah 2010-05-19 1361 c446f8fcc9fba3 Amit Shah 2010-05-19 1362 port = kmalloc(sizeof(*port), GFP_KERNEL); c446f8fcc9fba3 Amit Shah 2010-05-19 1363 if (!port) { c446f8fcc9fba3 Amit Shah 2010-05-19 1364 err = -ENOMEM; c446f8fcc9fba3 Amit Shah 2010-05-19 1365 goto fail; c446f8fcc9fba3 Amit Shah 2010-05-19 1366 } b353a6b8216270 Amit Shah 2010-09-02 1367 kref_init(&port->kref); c446f8fcc9fba3 Amit Shah 2010-05-19 1368 c446f8fcc9fba3 Amit Shah 2010-05-19 1369 port->portdev = portdev; c446f8fcc9fba3 Amit Shah 2010-05-19 1370 port->id = id; c446f8fcc9fba3 Amit Shah 2010-05-19 1371 c446f8fcc9fba3 Amit Shah 2010-05-19 1372 port->name = NULL; c446f8fcc9fba3 Amit Shah 2010-05-19 1373 port->inbuf = NULL; c446f8fcc9fba3 Amit Shah 2010-05-19 1374 port->cons.hvc = NULL; 3eae0adea949d8 Amit Shah 2010-09-02 1375 port->async_queue = NULL; c446f8fcc9fba3 Amit Shah 2010-05-19 1376 9778829cffd4d8 Amit Shah 2010-05-06 1377 port->cons.ws.ws_row = port->cons.ws.ws_col = 0; 4b0a2c5ff72152 Pankaj Gupta 2019-03-19 1378 port->cons.vtermno = 0; 9778829cffd4d8 Amit Shah 2010-05-06 1379 c446f8fcc9fba3 Amit Shah 2010-05-19 1380 port->host_connected = port->guest_connected = false; 17e5b4f20adbe2 Amit Shah 2011-09-14 1381 port->stats = (struct port_stats) { 0 }; c446f8fcc9fba3 Amit Shah 2010-05-19 1382 cdfadfc1adb87f Amit Shah 2010-05-19 1383 port->outvq_full = false; cdfadfc1adb87f Amit Shah 2010-05-19 1384 c446f8fcc9fba3 Amit Shah 2010-05-19 1385 port->in_vq = portdev->in_vqs[port->id]; c446f8fcc9fba3 Amit Shah 2010-05-19 1386 port->out_vq = portdev->out_vqs[port->id]; c446f8fcc9fba3 Amit Shah 2010-05-19 1387 d22a69892bd8f2 Amit Shah 2010-09-02 1388 port->cdev = cdev_alloc(); d22a69892bd8f2 Amit Shah 2010-09-02 1389 if (!port->cdev) { d22a69892bd8f2 Amit Shah 2010-09-02 1390 dev_err(&port->portdev->vdev->dev, "Error allocating cdev\n"); d22a69892bd8f2 Amit Shah 2010-09-02 1391 err = -ENOMEM; d22a69892bd8f2 Amit Shah 2010-09-02 1392 goto free_port; d22a69892bd8f2 Amit Shah 2010-09-02 1393 } d22a69892bd8f2 Amit Shah 2010-09-02 1394 port->cdev->ops = &port_fops; c446f8fcc9fba3 Amit Shah 2010-05-19 1395 c446f8fcc9fba3 Amit Shah 2010-05-19 1396 devt = MKDEV(portdev->chr_major, id); d22a69892bd8f2 Amit Shah 2010-09-02 1397 err = cdev_add(port->cdev, devt, 1); c446f8fcc9fba3 Amit Shah 2010-05-19 1398 if (err < 0) { c446f8fcc9fba3 Amit Shah 2010-05-19 1399 dev_err(&port->portdev->vdev->dev, c446f8fcc9fba3 Amit Shah 2010-05-19 1400 "Error %d adding cdev for port %u\n", err, id); d22a69892bd8f2 Amit Shah 2010-09-02 1401 goto free_cdev; c446f8fcc9fba3 Amit Shah 2010-05-19 1402 } 11680fdf29cec5 Ivan Orlov 2023-06-20 1403 port->dev = device_create(&port_class, &port->portdev->vdev->dev, c446f8fcc9fba3 Amit Shah 2010-05-19 1404 devt, port, "vport%up%u", dc18f0800f5f16 Sjur Brændeland 2013-02-12 1405 port->portdev->vdev->index, id); c446f8fcc9fba3 Amit Shah 2010-05-19 1406 if (IS_ERR(port->dev)) { c446f8fcc9fba3 Amit Shah 2010-05-19 1407 err = PTR_ERR(port->dev); c446f8fcc9fba3 Amit Shah 2010-05-19 1408 dev_err(&port->portdev->vdev->dev, c446f8fcc9fba3 Amit Shah 2010-05-19 1409 "Error %d creating device for port %u\n", c446f8fcc9fba3 Amit Shah 2010-05-19 1410 err, id); c446f8fcc9fba3 Amit Shah 2010-05-19 1411 goto free_cdev; c446f8fcc9fba3 Amit Shah 2010-05-19 1412 } c446f8fcc9fba3 Amit Shah 2010-05-19 1413 c446f8fcc9fba3 Amit Shah 2010-05-19 1414 spin_lock_init(&port->inbuf_lock); cdfadfc1adb87f Amit Shah 2010-05-19 1415 spin_lock_init(&port->outvq_lock); c446f8fcc9fba3 Amit Shah 2010-05-19 1416 init_waitqueue_head(&port->waitqueue); c446f8fcc9fba3 Amit Shah 2010-05-19 1417 d791cfcbf98191 Laurent Vivier 2019-11-14 1418 /* We can safely ignore ENOSPC because it means d791cfcbf98191 Laurent Vivier 2019-11-14 1419 * the queue already has buffers. Buffers are removed d791cfcbf98191 Laurent Vivier 2019-11-14 1420 * only by virtcons_remove(), not by unplug_port() d791cfcbf98191 Laurent Vivier 2019-11-14 1421 */ d791cfcbf98191 Laurent Vivier 2019-11-14 1422 err = fill_queue(port->in_vq, &port->inbuf_lock); d791cfcbf98191 Laurent Vivier 2019-11-14 1423 if (err < 0 && err != -ENOSPC) { c446f8fcc9fba3 Amit Shah 2010-05-19 1424 dev_err(port->dev, "Error allocating inbufs\n"); c446f8fcc9fba3 Amit Shah 2010-05-19 1425 goto free_device; c446f8fcc9fba3 Amit Shah 2010-05-19 1426 } c446f8fcc9fba3 Amit Shah 2010-05-19 1427 1b6370463e88b0 Sjur Brændeland 2012-12-14 1428 if (is_rproc_serial(port->portdev->vdev)) c446f8fcc9fba3 Amit Shah 2010-05-19 1429 /* 1b6370463e88b0 Sjur Brændeland 2012-12-14 1430 * For rproc_serial assume remote processor is connected. 1b6370463e88b0 Sjur Brændeland 2012-12-14 1431 * rproc_serial does not want the console port, only 1b6370463e88b0 Sjur Brændeland 2012-12-14 1432 * the generic port implementation. 1b6370463e88b0 Sjur Brændeland 2012-12-14 1433 */ aabd6a8fa5a933 Sjur BrÃ¦ndeland 2013-03-18 1434 port->host_connected = true; 1b6370463e88b0 Sjur Brændeland 2012-12-14 1435 else if (!use_multiport(port->portdev)) { c446f8fcc9fba3 Amit Shah 2010-05-19 1436 /* 1b6370463e88b0 Sjur Brændeland 2012-12-14 1437 * If we're not using multiport support, 1b6370463e88b0 Sjur Brændeland 2012-12-14 1438 * this has to be a console port. c446f8fcc9fba3 Amit Shah 2010-05-19 1439 */ c446f8fcc9fba3 Amit Shah 2010-05-19 1440 err = init_port_console(port); c446f8fcc9fba3 Amit Shah 2010-05-19 1441 if (err) c446f8fcc9fba3 Amit Shah 2010-05-19 1442 goto free_inbufs; c446f8fcc9fba3 Amit Shah 2010-05-19 1443 } c446f8fcc9fba3 Amit Shah 2010-05-19 1444 c446f8fcc9fba3 Amit Shah 2010-05-19 1445 spin_lock_irq(&portdev->ports_lock); c446f8fcc9fba3 Amit Shah 2010-05-19 1446 list_add_tail(&port->list, &port->portdev->ports); c446f8fcc9fba3 Amit Shah 2010-05-19 1447 spin_unlock_irq(&portdev->ports_lock); c446f8fcc9fba3 Amit Shah 2010-05-19 1448 c446f8fcc9fba3 Amit Shah 2010-05-19 1449 /* c446f8fcc9fba3 Amit Shah 2010-05-19 1450 * Tell the Host we're set so that it can send us various c446f8fcc9fba3 Amit Shah 2010-05-19 1451 * configuration parameters for this port (eg, port name, c446f8fcc9fba3 Amit Shah 2010-05-19 1452 * caching, whether this is a console port, etc.) c446f8fcc9fba3 Amit Shah 2010-05-19 1453 */ c446f8fcc9fba3 Amit Shah 2010-05-19 1454 send_control_msg(port, VIRTIO_CONSOLE_PORT_READY, 1); c446f8fcc9fba3 Amit Shah 2010-05-19 1455 c446f8fcc9fba3 Amit Shah 2010-05-19 1456 /* c446f8fcc9fba3 Amit Shah 2010-05-19 1457 * Finally, create the debugfs file that we can use to c446f8fcc9fba3 Amit Shah 2010-05-19 1458 * inspect a port's state at any time c446f8fcc9fba3 Amit Shah 2010-05-19 1459 */ db1700685c0ad2 Dan Carpenter 2015-05-08 @1460 snprintf(debugfs_name, sizeof(debugfs_name), "vport%up%u", dc18f0800f5f16 Sjur Brændeland 2013-02-12 1461 port->portdev->vdev->index, id); c446f8fcc9fba3 Amit Shah 2010-05-19 1462 port->debugfs_file = debugfs_create_file(debugfs_name, 0444, c446f8fcc9fba3 Amit Shah 2010-05-19 1463 pdrvdata.debugfs_dir, fb11de92ac6e4a Greg Kroah-Hartman 2021-02-16 1464 port, &port_debugfs_fops); c446f8fcc9fba3 Amit Shah 2010-05-19 1465 return 0; c446f8fcc9fba3 Amit Shah 2010-05-19 1466 c446f8fcc9fba3 Amit Shah 2010-05-19 1467 free_inbufs: c446f8fcc9fba3 Amit Shah 2010-05-19 1468 free_device: 11680fdf29cec5 Ivan Orlov 2023-06-20 1469 device_destroy(&port_class, port->dev->devt); c446f8fcc9fba3 Amit Shah 2010-05-19 1470 free_cdev: d22a69892bd8f2 Amit Shah 2010-09-02 1471 cdev_del(port->cdev); c446f8fcc9fba3 Amit Shah 2010-05-19 1472 free_port: c446f8fcc9fba3 Amit Shah 2010-05-19 1473 kfree(port); c446f8fcc9fba3 Amit Shah 2010-05-19 1474 fail: c446f8fcc9fba3 Amit Shah 2010-05-19 1475 /* The host might want to notify management sw about port add failure */ 0643e4c6e4fd67 Julia Lawall 2010-05-15 1476 __send_control_msg(portdev, id, VIRTIO_CONSOLE_PORT_READY, 0); c446f8fcc9fba3 Amit Shah 2010-05-19 1477 return err; c446f8fcc9fba3 Amit Shah 2010-05-19 1478 } c446f8fcc9fba3 Amit Shah 2010-05-19 1479 :::::: The code at line 1460 was first introduced by commit :::::: db1700685c0ad2ecb9e42af6a568435a03bbc3fd virtio_console: silence a static checker warning :::::: TO: Dan Carpenter <dan.carpenter(a)oracle.com> :::::: CC: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 1625/10661] ls2k500sfb.c:undefined reference to `fg_console'
by kernel test robot 12 Jul '24

12 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 15f539c4a521c5ae892554d0046e24f050ec0e00 commit: 8248d42b7c5f4338a54f26d8efebec8614b43466 [1625/10661] fbdev: add ls2k500sfb driver for ls2k500 bmc. config: loongarch-randconfig-r133-20240711 (https://download.01.org/0day-ci/archive/20240712/202407120045.vP3mrDfe-lkp@…) compiler: loongarch64-linux-gcc (GCC) 13.3.0 reproduce: (https://download.01.org/0day-ci/archive/20240712/202407120045.vP3mrDfe-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407120045.vP3mrDfe-lkp@intel.com/ All errors (new ones prefixed by >>): loongarch64-linux-ld: drivers/video/fbdev/ls2k500sfb.o: in function `.L131': >> ls2k500sfb.c:(.text+0x102c): undefined reference to `fg_console' >> loongarch64-linux-ld: ls2k500sfb.c:(.text+0x1030): undefined reference to `fg_console' -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH openEuler-1.0-LTS] crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
by Ye Bin 11 Jul '24

11 Jul '24

From: Herbert Xu <herbert(a)gondor.apana.org.au> mainline inclusion from mainline-v6.10-rc1 commit d3b17c6d9dddc2db3670bc9be628b122416a3d26 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAC3MY CVE: CVE-2024-39493 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… --------------------------- Using completion_done to determine whether the caller has gone away only works after a complete call. Furthermore it's still possible that the caller has not yet called wait_for_completion, resulting in another potential UAF. Fix this by making the caller use cancel_work_sync and then freeing the memory safely. Fixes: 7d42e097607c ("crypto: qat - resolve race condition during AER recovery") Cc: <stable(a)vger.kernel.org> #6.8+ Signed-off-by: Herbert Xu <herbert(a)gondor.apana.org.au> Reviewed-by: Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> Signed-off-by: Herbert Xu <herbert(a)gondor.apana.org.au> Conflicts: drivers/crypto/qat/qat_common/adf_aer.c drivers/crypto/intel/qat/qat_common/adf_aer.c [Fix context diff] Signed-off-by: Ye Bin <yebin10(a)huawei.com> --- drivers/crypto/qat/qat_common/adf_aer.c | 19 +++++-------------- 1 file changed, 5 insertions(+), 14 deletions(-) diff --git a/drivers/crypto/qat/qat_common/adf_aer.c b/drivers/crypto/qat/qat_common/adf_aer.c index 7242a1ee86de..3811ca0b6e0b 100644 --- a/drivers/crypto/qat/qat_common/adf_aer.c +++ b/drivers/crypto/qat/qat_common/adf_aer.c @@ -139,8 +139,7 @@ static void adf_device_reset_worker(struct work_struct *work) if (adf_dev_init(accel_dev) || adf_dev_start(accel_dev)) { /* The device hanged and we can't restart it so stop here */ dev_err(&GET_DEV(accel_dev), "Restart device failed\n"); - if (reset_data->mode == ADF_DEV_RESET_ASYNC || - completion_done(&reset_data->compl)) + if (reset_data->mode == ADF_DEV_RESET_ASYNC) kfree(reset_data); WARN(1, "QAT: device restart failed. Device is unusable\n"); return; @@ -148,16 +147,8 @@ static void adf_device_reset_worker(struct work_struct *work) adf_dev_restarted_notify(accel_dev); clear_bit(ADF_STATUS_RESTARTING, &accel_dev->status); - /* - * The dev is back alive. Notify the caller if in sync mode - * - * If device restart will take a more time than expected, - * the schedule_reset() function can timeout and exit. This can be - * detected by calling the completion_done() function. In this case - * the reset_data structure needs to be freed here. - */ - if (reset_data->mode == ADF_DEV_RESET_ASYNC || - completion_done(&reset_data->compl)) + /* The dev is back alive. Notify the caller if in sync mode */ + if (reset_data->mode == ADF_DEV_RESET_ASYNC) kfree(reset_data); else complete(&reset_data->compl); @@ -192,10 +183,10 @@ static int adf_dev_aer_schedule_reset(struct adf_accel_dev *accel_dev, if (!timeout) { dev_err(&GET_DEV(accel_dev), "Reset device timeout expired\n"); + cancel_work_sync(&reset_data->reset_work); ret = -EFAULT; - } else { - kfree(reset_data); } + kfree(reset_data); return ret; } return 0; -- 2.31.1

2 1

[PATCH openEuler-22.03-LTS-SP1 0/2] CVE-2024-38570
by Zeng Heng 11 Jul '24

11 Jul '24

Andreas Gruenbacher (2): gfs2: Rename sd_{ glock => kill }_wait gfs2: Fix potential glock use-after-free on unmount fs/gfs2/glock.c | 45 ++++++++++++++++++++++++++++++++++++-------- fs/gfs2/glock.h | 1 + fs/gfs2/incore.h | 3 ++- fs/gfs2/lock_dlm.c | 14 ++++++++++++-- fs/gfs2/ops_fstype.c | 5 +++-- fs/gfs2/super.c | 3 --- 6 files changed, 55 insertions(+), 16 deletions(-) -- 2.25.1

2 3

[PATCH OLK-5.10 0/2] CVE-2024-38570
by Zeng Heng 11 Jul '24

11 Jul '24

Andreas Gruenbacher (2): gfs2: Rename sd_{ glock => kill }_wait gfs2: Fix potential glock use-after-free on unmount fs/gfs2/glock.c | 45 ++++++++++++++++++++++++++++++++++++-------- fs/gfs2/glock.h | 1 + fs/gfs2/incore.h | 3 ++- fs/gfs2/lock_dlm.c | 14 ++++++++++++-- fs/gfs2/ops_fstype.c | 5 +++-- fs/gfs2/super.c | 3 --- 6 files changed, 55 insertions(+), 16 deletions(-) -- 2.25.1

2 3

[PATCH OLK-5.10] cifs: Fix deadlock in cifs_writepages during reconnect
by Wang Zhaolong 11 Jul '24

11 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAASLU -------------------------------- When multiple processes or threads write to the same file concurrently, if a network disruption occurs during the write operation, it may lead to a deadlock situation as follow: Process 1 (dd) Process 2 (cifsd) Process 3 (cifsiod) cifs_writepages lock_page - [1] wait_on_page_writeback - [2] Waiting for writeback, blocked by [4] wait_on_page_bit cifs_demultiplex_thread cifs_read_from_socket cifs_readv_from_socket - If another process triggers reconnect at this point cifs_reconnect - mid->mid_state updated to MID_RETRY_NEEDED smb2_writev_callback mid_entry->callback() - mid_state leads to wdata->result = -EAGAIN wdata->result = -EAGAIN queue_work(cifsiod_wq, &wdata->work); cifs_writev_complete - work function - Condition satisfied - wdata->result == -EAGAIN cifs_writev_requeue lock_page - [3] Blocked by [1] end_page_writeback - [4] Won't execute, blocked by [3] unlock_page Mainline refactoring patch d08089f649a0 ("cifs: Change the I/O paths to use an iterator rather than a page list") unlock page while waiting for the writeback to complete, thus avoiding potential deadlocks caused by lock ordering issues during reconnection. Due to the large refactor of the mainline, the patch cannot be backport directly. Therefore, This patch only uses a part of the idea of the mainline patch to fix deadlock. Fixes: c28c89fc43e3 ("cifs: add cifs_async_writev") Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- fs/cifs/file.c | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/fs/cifs/file.c b/fs/cifs/file.c index 0b840555a175..e0c10fd93b64 100644 --- a/fs/cifs/file.c +++ b/fs/cifs/file.c @@ -2223,6 +2223,7 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, * back from swapper_space to tmpfs file mapping */ +relock_recheck: if (nr_pages == 0) lock_page(page); else if (!trylock_page(page)) @@ -2245,11 +2246,16 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, break; } - if (wbc->sync_mode != WB_SYNC_NONE) - wait_on_page_writeback(page); + if (PageWriteback(page)) { + unlock_page(page); + if (wbc->sync_mode != WB_SYNC_NONE) { + wait_on_page_writeback(page); + goto relock_recheck; + } + break; + } - if (PageWriteback(page) || - !clear_page_dirty_for_io(page)) { + if (!clear_page_dirty_for_io(page)) { unlock_page(page); break; } -- 2.39.2

2 1

[PATCH openEuler-1.0-LTS] cifs: Fix deadlock in cifs_writepages during reconnect
by Wang Zhaolong 11 Jul '24

11 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAASLU -------------------------------- When multiple processes or threads write to the same file concurrently, if a network disruption occurs during the write operation, it may lead to a deadlock situation as follow: Process 1 (dd) Process 2 (cifsd) Process 3 (cifsiod) cifs_writepages lock_page - [1] wait_on_page_writeback - [2] Waiting for writeback, blocked by [4] wait_on_page_bit cifs_demultiplex_thread cifs_read_from_socket cifs_readv_from_socket - If another process triggers reconnect at this point cifs_reconnect - mid->mid_state updated to MID_RETRY_NEEDED smb2_writev_callback mid_entry->callback() - mid_state leads to wdata->result = -EAGAIN wdata->result = -EAGAIN queue_work(cifsiod_wq, &wdata->work); cifs_writev_complete - work function - Condition satisfied - wdata->result == -EAGAIN cifs_writev_requeue lock_page - [3] Blocked by [1] end_page_writeback - [4] Won't execute, blocked by [3] unlock_page Mainline refactoring patch d08089f649a0 ("cifs: Change the I/O paths to use an iterator rather than a page list") unlock page while waiting for the writeback to complete, thus avoiding potential deadlocks caused by lock ordering issues during reconnection. Due to the large refactor of the mainline, the patch cannot be backport directly. Therefore, This patch only uses a part of the idea of the mainline patch to fix deadlock. Fixes: c28c89fc43e3 ("cifs: add cifs_async_writev") Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- fs/cifs/file.c | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/fs/cifs/file.c b/fs/cifs/file.c index 0b840555a175..e0c10fd93b64 100644 --- a/fs/cifs/file.c +++ b/fs/cifs/file.c @@ -2223,6 +2223,7 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, * back from swapper_space to tmpfs file mapping */ +relock_recheck: if (nr_pages == 0) lock_page(page); else if (!trylock_page(page)) @@ -2245,11 +2246,16 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, break; } - if (wbc->sync_mode != WB_SYNC_NONE) - wait_on_page_writeback(page); + if (PageWriteback(page)) { + unlock_page(page); + if (wbc->sync_mode != WB_SYNC_NONE) { + wait_on_page_writeback(page); + goto relock_recheck; + } + break; + } - if (PageWriteback(page) || - !clear_page_dirty_for_io(page)) { + if (!clear_page_dirty_for_io(page)) { unlock_page(page); break; } -- 2.39.2

2 1

[PATCH openEuler-22.03-LTS-SP1] cifs: Fix deadlock in cifs_writepages during reconnect
by Wang Zhaolong 11 Jul '24

11 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAASLU -------------------------------- When multiple processes or threads write to the same file concurrently, if a network disruption occurs during the write operation, it may lead to a deadlock situation as follow: Process 1 (dd) Process 2 (cifsd) Process 3 (cifsiod) cifs_writepages lock_page - [1] wait_on_page_writeback - [2] Waiting for writeback, blocked by [4] wait_on_page_bit cifs_demultiplex_thread cifs_read_from_socket cifs_readv_from_socket - If another process triggers reconnect at this point cifs_reconnect - mid->mid_state updated to MID_RETRY_NEEDED smb2_writev_callback mid_entry->callback() - mid_state leads to wdata->result = -EAGAIN wdata->result = -EAGAIN queue_work(cifsiod_wq, &wdata->work); cifs_writev_complete - work function - Condition satisfied - wdata->result == -EAGAIN cifs_writev_requeue lock_page - [3] Blocked by [1] end_page_writeback - [4] Won't execute, blocked by [3] unlock_page Mainline refactoring patch d08089f649a0 ("cifs: Change the I/O paths to use an iterator rather than a page list") unlock page while waiting for the writeback to complete, thus avoiding potential deadlocks caused by lock ordering issues during reconnection. Due to the large refactor of the mainline, the patch cannot be backport directly. Therefore, This patch only uses a part of the idea of the mainline patch to fix deadlock. Fixes: c28c89fc43e3 ("cifs: add cifs_async_writev") Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- fs/cifs/file.c | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/fs/cifs/file.c b/fs/cifs/file.c index 0b840555a175..e0c10fd93b64 100644 --- a/fs/cifs/file.c +++ b/fs/cifs/file.c @@ -2223,6 +2223,7 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, * back from swapper_space to tmpfs file mapping */ +relock_recheck: if (nr_pages == 0) lock_page(page); else if (!trylock_page(page)) @@ -2245,11 +2246,16 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, break; } - if (wbc->sync_mode != WB_SYNC_NONE) - wait_on_page_writeback(page); + if (PageWriteback(page)) { + unlock_page(page); + if (wbc->sync_mode != WB_SYNC_NONE) { + wait_on_page_writeback(page); + goto relock_recheck; + } + break; + } - if (PageWriteback(page) || - !clear_page_dirty_for_io(page)) { + if (!clear_page_dirty_for_io(page)) { unlock_page(page); break; } -- 2.39.2

2 1

[PATCH openEuler-1.0-LTS] usb: musb: tusb6010: check return value after calling platform_get_resource()
by Wang Zhaolong 11 Jul '24

11 Jul '24

From: Yang Yingliang <yangyingliang(a)huawei.com> mainline inclusion from mainline-v5.16-rc1 commit 14651496a3de6807a17c310f63c894ea0c5d858e category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNF2 CVE: CVE-2021-47181 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- It will cause null-ptr-deref if platform_get_resource() returns NULL, we need check the return value. Signed-off-by: Yang Yingliang <yangyingliang(a)huawei.com> Link: https://lore.kernel.org/r/20210915034925.2399823-1-yangyingliang@huawei.com Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- drivers/usb/musb/tusb6010.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/drivers/usb/musb/tusb6010.c b/drivers/usb/musb/tusb6010.c index 39453287b5c3..9629ddb943d5 100644 --- a/drivers/usb/musb/tusb6010.c +++ b/drivers/usb/musb/tusb6010.c @@ -1102,6 +1102,11 @@ static int tusb_musb_init(struct musb *musb) /* dma address for async dma */ mem = platform_get_resource(pdev, IORESOURCE_MEM, 0); + if (!mem) { + pr_debug("no async dma resource?\n"); + ret = -ENODEV; + goto done; + } musb->async = mem->start; /* dma address for sync dma */ -- 2.34.3

2 1

[PATCH OLK-6.6] x86: resctrl: Fix illegal access by the chips not having RDT
by Zeng Heng 11 Jul '24

11 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IA7L2U --------------------------- If the chip not having RDT function, resctrl_arch_system_num_rmid_idx() would return 0. rmid_ptrs points to an illegal buffer after kcalloc() allocation, which would cause illegal access fault when accessing. Consequently, when we found resctrl_arch_system_num_rmid_idx() return 0, just return EOPNOTSUPP immediatly and skip initializing the resctrl file system. Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- fs/resctrl/monitor.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/fs/resctrl/monitor.c b/fs/resctrl/monitor.c index 6ef878f5afdd..a7bd84f9a440 100644 --- a/fs/resctrl/monitor.c +++ b/fs/resctrl/monitor.c @@ -728,6 +728,9 @@ static int dom_data_init(struct rdt_resource *r) int err = 0, i; u32 idx; + if (!idx_limit) + return -EOPNOTSUPP; + mutex_lock(&rdtgroup_mutex); if (IS_ENABLED(CONFIG_RESCTRL_RMID_DEPENDS_ON_CLOSID)) { u32 *tmp; -- 2.25.1

2 1

[PATCH openEuler-1.0-LTS] usb: musb: tusb6010: check return value after calling platform_get_resource()
by Wang Zhaolong 11 Jul '24

11 Jul '24

From: Yang Yingliang <yangyingliang(a)huawei.com> mainline inclusion from mainline-v5.16-rc1v6.1 commit 14651496a3de6807a17c310f63c894ea0c5d858e category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNF2 CVE: CVE-2021-47181 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- It will cause null-ptr-deref if platform_get_resource() returns NULL, we need check the return value. Signed-off-by: Yang Yingliang <yangyingliang(a)huawei.com> Link: https://lore.kernel.org/r/20210915034925.2399823-1-yangyingliang@huawei.com Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- drivers/usb/musb/tusb6010.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/drivers/usb/musb/tusb6010.c b/drivers/usb/musb/tusb6010.c index 39453287b5c3..9629ddb943d5 100644 --- a/drivers/usb/musb/tusb6010.c +++ b/drivers/usb/musb/tusb6010.c @@ -1102,6 +1102,11 @@ static int tusb_musb_init(struct musb *musb) /* dma address for async dma */ mem = platform_get_resource(pdev, IORESOURCE_MEM, 0); + if (!mem) { + pr_debug("no async dma resource?\n"); + ret = -ENODEV; + goto done; + } musb->async = mem->start; /* dma address for sync dma */ -- 2.34.3

2 1

[PATCH openEuler-22.03-LTS-SP1] cifs: Fix deadlock in cifs_writepages during reconnect
by Wang Zhaolong 11 Jul '24

11 Jul '24

Offering: HULK hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAASLU -------------------------------- When multiple processes or threads write to the same file concurrently, if a network disruption occurs during the write operation, it may lead to a deadlock situation as follow: Process 1 (dd) Process 2 (cifsd) Process 3 (cifsiod) cifs_writepages lock_page - [1] wait_on_page_writeback - [2] Waiting for writeback, blocked by [4] wait_on_page_bit cifs_demultiplex_thread cifs_read_from_socket cifs_readv_from_socket - If another process triggers reconnect at this point cifs_reconnect - mid->mid_state updated to MID_RETRY_NEEDED smb2_writev_callback mid_entry->callback() - mid_state leads to wdata->result = -EAGAIN wdata->result = -EAGAIN queue_work(cifsiod_wq, &wdata->work); cifs_writev_complete - work function - Condition satisfied - wdata->result == -EAGAIN cifs_writev_requeue lock_page - [3] Blocked by [1] end_page_writeback - [4] Won't execute, blocked by [3] unlock_page Mainline refactoring patch d08089f649a0 ("cifs: Change the I/O paths to use an iterator rather than a page list") unlock page while waiting for the writeback to complete, thus avoiding potential deadlocks caused by lock ordering issues during reconnection. Due to the large refactor of the mainline, the patch cannot be backport directly. Therefore, This patch only uses a part of the idea of the mainline patch to fix deadlock. Fixes: c28c89fc43e3 ("cifs: add cifs_async_writev") Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- fs/cifs/file.c | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/fs/cifs/file.c b/fs/cifs/file.c index 0b840555a175..e0c10fd93b64 100644 --- a/fs/cifs/file.c +++ b/fs/cifs/file.c @@ -2223,6 +2223,7 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, * back from swapper_space to tmpfs file mapping */ +relock_recheck: if (nr_pages == 0) lock_page(page); else if (!trylock_page(page)) @@ -2245,11 +2246,16 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, break; } - if (wbc->sync_mode != WB_SYNC_NONE) - wait_on_page_writeback(page); + if (PageWriteback(page)) { + unlock_page(page); + if (wbc->sync_mode != WB_SYNC_NONE) { + wait_on_page_writeback(page); + goto relock_recheck; + } + break; + } - if (PageWriteback(page) || - !clear_page_dirty_for_io(page)) { + if (!clear_page_dirty_for_io(page)) { unlock_page(page); break; } -- 2.39.2

2 1

[PATCH OLK-5.10] cifs: Fix deadlock in cifs_writepages during reconnect
by Wang Zhaolong 11 Jul '24

11 Jul '24

Offering: HULK hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAASLU -------------------------------- When multiple processes or threads write to the same file concurrently, if a network disruption occurs during the write operation, it may lead to a deadlock situation as follow: Process 1 (dd) Process 2 (cifsd) Process 3 (cifsiod) cifs_writepages lock_page - [1] wait_on_page_writeback - [2] Waiting for writeback, blocked by [4] wait_on_page_bit cifs_demultiplex_thread cifs_read_from_socket cifs_readv_from_socket - If another process triggers reconnect at this point cifs_reconnect - mid->mid_state updated to MID_RETRY_NEEDED smb2_writev_callback mid_entry->callback() - mid_state leads to wdata->result = -EAGAIN wdata->result = -EAGAIN queue_work(cifsiod_wq, &wdata->work); cifs_writev_complete - work function - Condition satisfied - wdata->result == -EAGAIN cifs_writev_requeue lock_page - [3] Blocked by [1] end_page_writeback - [4] Won't execute, blocked by [3] unlock_page Mainline refactoring patch d08089f649a0 ("cifs: Change the I/O paths to use an iterator rather than a page list") unlock page while waiting for the writeback to complete, thus avoiding potential deadlocks caused by lock ordering issues during reconnection. Due to the large refactor of the mainline, the patch cannot be backport directly. Therefore, This patch only uses a part of the idea of the mainline patch to fix deadlock. Fixes: c28c89fc43e3 ("cifs: add cifs_async_writev") Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- fs/cifs/file.c | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/fs/cifs/file.c b/fs/cifs/file.c index e914f4f5cc83..dc7175b75c26 100644 --- a/fs/cifs/file.c +++ b/fs/cifs/file.c @@ -2226,6 +2226,7 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, * back from swapper_space to tmpfs file mapping */ +relock_recheck: if (nr_pages == 0) lock_page(page); else if (!trylock_page(page)) @@ -2248,11 +2249,16 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, break; } - if (wbc->sync_mode != WB_SYNC_NONE) - wait_on_page_writeback(page); + if (PageWriteback(page)) { + unlock_page(page); + if (wbc->sync_mode != WB_SYNC_NONE) { + wait_on_page_writeback(page); + goto relock_recheck; + } + break; + } - if (PageWriteback(page) || - !clear_page_dirty_for_io(page)) { + if (!clear_page_dirty_for_io(page)) { unlock_page(page); break; } -- 2.39.2

2 1

[PATCH openEuler-1.0-LTS] cifs: Fix deadlock in cifs_writepages during reconnect
by Wang Zhaolong 11 Jul '24

11 Jul '24

Offering: HULK hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAASLU -------------------------------- When multiple processes or threads write to the same file concurrently, if a network disruption occurs during the write operation, it may lead to a deadlock situation as follow: Process 1 (dd) Process 2 (cifsd) Process 3 (cifsiod) cifs_writepages lock_page - [1] wait_on_page_writeback - [2] Waiting for writeback, blocked by [4] wait_on_page_bit cifs_demultiplex_thread cifs_read_from_socket cifs_readv_from_socket - If another process triggers reconnect at this point cifs_reconnect - mid->mid_state updated to MID_RETRY_NEEDED smb2_writev_callback mid_entry->callback() - mid_state leads to wdata->result = -EAGAIN wdata->result = -EAGAIN queue_work(cifsiod_wq, &wdata->work); cifs_writev_complete - work function - Condition satisfied - wdata->result == -EAGAIN cifs_writev_requeue lock_page - [3] Blocked by [1] end_page_writeback - [4] Won't execute, blocked by [3] unlock_page Mainline refactoring patch d08089f649a0 ("cifs: Change the I/O paths to use an iterator rather than a page list") unlock page while waiting for the writeback to complete, thus avoiding potential deadlocks caused by lock ordering issues during reconnection. Due to the large refactor of the mainline, the patch cannot be backport directly. Therefore, This patch only uses a part of the idea of the mainline patch to fix deadlock. Fixes: c28c89fc43e3 ("cifs: add cifs_async_writev") Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- fs/cifs/file.c | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/fs/cifs/file.c b/fs/cifs/file.c index 875cb44ba573..e346e6c2227a 100644 --- a/fs/cifs/file.c +++ b/fs/cifs/file.c @@ -2056,6 +2056,7 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, * back from swapper_space to tmpfs file mapping */ +relock_recheck: if (nr_pages == 0) lock_page(page); else if (!trylock_page(page)) @@ -2078,11 +2079,16 @@ wdata_prepare_pages(struct cifs_writedata *wdata, unsigned int found_pages, break; } - if (wbc->sync_mode != WB_SYNC_NONE) - wait_on_page_writeback(page); + if (PageWriteback(page)) { + unlock_page(page); + if (wbc->sync_mode != WB_SYNC_NONE) { + wait_on_page_writeback(page); + goto relock_recheck; + } + break; + } - if (PageWriteback(page) || - !clear_page_dirty_for_io(page)) { + if (!clear_page_dirty_for_io(page)) { unlock_page(page); break; } -- 2.39.2

2 1

[PATCH OLK-6.6] ipvlan: Modify the value of ipvlan modes
by Zhengchao Shao 11 Jul '24

11 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAC95A CVE: NA -------------------------------- In order to make iproute compatible with other operation system like SUSE, rethad and etc, put IPVLAN_MODE_L2E last. Fixes: 53f51b3cd1e4 ("ipvlan: Introduce l2e mode") Signed-off-by: Zhengchao Shao <shaozhengchao(a)huawei.com> --- drivers/net/ipvlan/ipvlan_main.c | 2 +- include/uapi/linux/if_link.h | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/net/ipvlan/ipvlan_main.c b/drivers/net/ipvlan/ipvlan_main.c index 67d03a17dd3f..3870d7b2b652 100644 --- a/drivers/net/ipvlan/ipvlan_main.c +++ b/drivers/net/ipvlan/ipvlan_main.c @@ -17,7 +17,7 @@ int sysctl_ipvlan_loop_qlen = 131072; int sysctl_ipvlan_loop_delay = 10; static int ipvlan_default_mode = IPVLAN_MODE_L3; module_param(ipvlan_default_mode, int, 0400); -MODULE_PARM_DESC(ipvlan_default_mode, "set ipvlan default mode: 0 for l2, 1 for l3, 2 for l2e, 3 for l3s, others invalid now"); +MODULE_PARM_DESC(ipvlan_default_mode, "set ipvlan default mode: 0 for l2, 1 for l3, 2 for l3s, 3 for l2e, others invalid now"); static struct ctl_table_header *ipvlan_table_hrd; static struct ctl_table ipvlan_table[] = { diff --git a/include/uapi/linux/if_link.h b/include/uapi/linux/if_link.h index 96ecfe1709e0..e603ada6b5ea 100644 --- a/include/uapi/linux/if_link.h +++ b/include/uapi/linux/if_link.h @@ -741,8 +741,8 @@ enum { enum ipvlan_mode { IPVLAN_MODE_L2 = 0, IPVLAN_MODE_L3, - IPVLAN_MODE_L2E, IPVLAN_MODE_L3S, + IPVLAN_MODE_L2E, IPVLAN_MODE_MAX }; -- 2.34.1

2 1

[openeuler:OLK-6.6] BUILD SUCCESS 985826e1203e470bf196aab02c03859d95e4fc7f
by kernel test robot 11 Jul '24

11 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-6.6 branch HEAD: 985826e1203e470bf196aab02c03859d95e4fc7f !9829 fix CVE-2024-38620 Warning ids grouped by kconfigs: recent_errors `-- arm64-allmodconfig `-- clang:warning:no-such-include-directory:drivers-infiniband-hw-hiroce3-include-mag elapsed time: 744m configs tested: 39 configs skipped: 122 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240710 clang-19 arm64 randconfig-002-20240710 clang-19 arm64 randconfig-003-20240710 clang-17 arm64 randconfig-004-20240710 gcc-13.2.0 loongarch alldefconfig gcc-13.3.0 loongarch allmodconfig gcc-13.3.0 loongarch allnoconfig gcc-13.3.0 loongarch randconfig-001-20240710 gcc-13.3.0 loongarch randconfig-002-20240710 gcc-13.3.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240710 clang-18 x86_64 buildonly-randconfig-002-20240710 clang-18 x86_64 buildonly-randconfig-003-20240710 clang-18 x86_64 buildonly-randconfig-004-20240710 clang-18 x86_64 buildonly-randconfig-005-20240710 gcc-13 x86_64 buildonly-randconfig-006-20240710 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240710 gcc-13 x86_64 randconfig-002-20240710 clang-18 x86_64 randconfig-003-20240710 gcc-12 x86_64 randconfig-004-20240710 clang-18 x86_64 randconfig-005-20240710 clang-18 x86_64 randconfig-006-20240710 gcc-13 x86_64 randconfig-011-20240710 clang-18 x86_64 randconfig-012-20240710 clang-18 x86_64 randconfig-013-20240710 clang-18 x86_64 randconfig-014-20240710 clang-18 x86_64 randconfig-015-20240710 clang-18 x86_64 randconfig-016-20240710 gcc-13 x86_64 randconfig-071-20240710 gcc-13 x86_64 randconfig-072-20240710 clang-18 x86_64 randconfig-073-20240710 clang-18 x86_64 randconfig-074-20240710 gcc-7 x86_64 randconfig-075-20240710 clang-18 x86_64 randconfig-076-20240710 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-5.10] BUILD SUCCESS cf1d3c6a50d28b2cd5493204fe4e853383307ce4
by kernel test robot 11 Jul '24

11 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-5.10 branch HEAD: cf1d3c6a50d28b2cd5493204fe4e853383307ce4 !9851 net/sched: act_skbmod: prevent kernel-infoleak elapsed time: 735m configs tested: 34 configs skipped: 128 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240710 clang-19 arm64 randconfig-002-20240710 clang-19 arm64 randconfig-003-20240710 clang-17 arm64 randconfig-004-20240710 gcc-13.2.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240710 clang-18 x86_64 buildonly-randconfig-002-20240710 clang-18 x86_64 buildonly-randconfig-003-20240710 clang-18 x86_64 buildonly-randconfig-004-20240710 clang-18 x86_64 buildonly-randconfig-005-20240710 gcc-13 x86_64 buildonly-randconfig-006-20240710 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240710 gcc-13 x86_64 randconfig-002-20240710 clang-18 x86_64 randconfig-003-20240710 gcc-12 x86_64 randconfig-004-20240710 clang-18 x86_64 randconfig-005-20240710 clang-18 x86_64 randconfig-006-20240710 gcc-13 x86_64 randconfig-011-20240710 clang-18 x86_64 randconfig-012-20240710 clang-18 x86_64 randconfig-013-20240710 clang-18 x86_64 randconfig-014-20240710 clang-18 x86_64 randconfig-015-20240710 clang-18 x86_64 randconfig-016-20240710 gcc-13 x86_64 randconfig-071-20240710 gcc-13 x86_64 randconfig-072-20240710 clang-18 x86_64 randconfig-073-20240710 clang-18 x86_64 randconfig-074-20240710 gcc-7 x86_64 randconfig-075-20240710 clang-18 x86_64 randconfig-076-20240710 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:openEuler-1.0-LTS] BUILD SUCCESS dc5173acb0679d098a881e7e6b34ca61d8dc5d51
by kernel test robot 10 Jul '24

10 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS branch HEAD: dc5173acb0679d098a881e7e6b34ca61d8dc5d51 !9842 net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove Warning ids grouped by kconfigs: recent_errors `-- x86_64-buildonly-randconfig-005-20240710 `-- include-asm-generic-atomic-instrumented.h:warning:wait_req-may-be-used-uninitialized elapsed time: 726m configs tested: 34 configs skipped: 128 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig gcc-13.2.0 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240710 gcc-13.2.0 arm64 randconfig-002-20240710 gcc-13.2.0 arm64 randconfig-003-20240710 gcc-13.2.0 arm64 randconfig-004-20240710 gcc-13.2.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240710 clang-18 x86_64 buildonly-randconfig-002-20240710 clang-18 x86_64 buildonly-randconfig-003-20240710 clang-18 x86_64 buildonly-randconfig-004-20240710 clang-18 x86_64 buildonly-randconfig-005-20240710 gcc-13 x86_64 buildonly-randconfig-006-20240710 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240710 gcc-13 x86_64 randconfig-002-20240710 clang-18 x86_64 randconfig-003-20240710 gcc-12 x86_64 randconfig-004-20240710 clang-18 x86_64 randconfig-005-20240710 clang-18 x86_64 randconfig-006-20240710 gcc-13 x86_64 randconfig-011-20240710 clang-18 x86_64 randconfig-012-20240710 clang-18 x86_64 randconfig-013-20240710 clang-18 x86_64 randconfig-014-20240710 clang-18 x86_64 randconfig-015-20240710 clang-18 x86_64 randconfig-016-20240710 gcc-13 x86_64 randconfig-071-20240710 gcc-13 x86_64 randconfig-072-20240710 clang-18 x86_64 randconfig-073-20240710 clang-18 x86_64 randconfig-074-20240710 gcc-7 x86_64 randconfig-075-20240710 clang-18 x86_64 randconfig-076-20240710 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6] block: enable BLK_IO_HUNG_TASK_CHECK by default
by Li Lingfeng 10 Jul '24

10 Jul '24

hulk inclusion category: feature bugzilla: https://gitee.com/openeuler/kernel/issues/IAC2T6 -------------------------------- Enable BLK_IO_HUNG_TASK_CHECK by default like 5.10. Signed-off-by: Li Lingfeng <lilingfeng3(a)huawei.com> --- arch/arm64/configs/openeuler_defconfig | 2 +- arch/x86/configs/openeuler_defconfig | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/arch/arm64/configs/openeuler_defconfig b/arch/arm64/configs/openeuler_defconfig index 09e8452bba42..f4a8a774d53b 100644 --- a/arch/arm64/configs/openeuler_defconfig +++ b/arch/arm64/configs/openeuler_defconfig @@ -949,7 +949,7 @@ CONFIG_BLK_DEBUG_FS_ZONED=y # CONFIG_BLK_INLINE_ENCRYPTION is not set CONFIG_BLK_DEV_DETECT_WRITING_PART0=y CONFIG_BLK_DEV_WRITE_MOUNTED_DUMP=y -CONFIG_BLK_IO_HUNG_TASK_CHECK=n +CONFIG_BLK_IO_HUNG_TASK_CHECK=y # # Partition Types diff --git a/arch/x86/configs/openeuler_defconfig b/arch/x86/configs/openeuler_defconfig index e7859242cbbd..3d85395e74df 100644 --- a/arch/x86/configs/openeuler_defconfig +++ b/arch/x86/configs/openeuler_defconfig @@ -981,7 +981,7 @@ CONFIG_BLK_DEBUG_FS_ZONED=y # CONFIG_BLK_INLINE_ENCRYPTION is not set CONFIG_BLK_DEV_DETECT_WRITING_PART0=y CONFIG_BLK_DEV_WRITE_MOUNTED_DUMP=y -CONFIG_BLK_IO_HUNG_TASK_CHECK=n +CONFIG_BLK_IO_HUNG_TASK_CHECK=y # # Partition Types -- 2.31.1

2 1

[PATCH openEuler-1.0-LTS] khugepaged: fix null-pointer dereference due to race
by Liu Shixin 10 Jul '24

10 Jul '24

From: "Kirill A. Shutemov" <kirill.shutemov(a)linux.intel.com> mainline inclusion from mainline-v5.8-rc7 commit 594cced14ad3903166c8b091ff96adac7552f0b3 category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IABZNI CVE: NA Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- khugepaged has to drop mmap lock several times while collapsing a page. The situation can change while the lock is dropped and we need to re-validate that the VMA is still in place and the PMD is still subject for collapse. But we miss one corner case: while collapsing an anonymous pages the VMA could be replaced with file VMA. If the file VMA doesn't have any private pages we get NULL pointer dereference: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] anon_vma_lock_write include/linux/rmap.h:120 [inline] collapse_huge_page mm/khugepaged.c:1110 [inline] khugepaged_scan_pmd mm/khugepaged.c:1349 [inline] khugepaged_scan_mm_slot mm/khugepaged.c:2110 [inline] khugepaged_do_scan mm/khugepaged.c:2193 [inline] khugepaged+0x3bba/0x5a10 mm/khugepaged.c:2238 The fix is to make sure that the VMA is anonymous in hugepage_vma_revalidate(). The helper is only used for collapsing anonymous pages. Fixes: 99cb0dbd47a1 ("mm,thp: add read-only THP support for (non-shmem) FS") Reported-by: syzbot+ed318e8b790ca72c5ad0(a)syzkaller.appspotmail.com Signed-off-by: Kirill A. Shutemov <kirill.shutemov(a)linux.intel.com> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> Reviewed-by: David Hildenbrand <david(a)redhat.com> Acked-by: Yang Shi <yang.shi(a)linux.alibaba.com> Cc: <stable(a)vger.kernel.org> Link: http://lkml.kernel.org/r/20200722121439.44328-1-kirill.shutemov@linux.intel… Signed-off-by: Linus Torvalds <torvalds(a)linux-foundation.org> [ The Fixes tag is incorrect, the problem can triggered due to shmem_file. ] Signed-off-by: Liu Shixin <liushixin2(a)huawei.com> --- mm/khugepaged.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/mm/khugepaged.c b/mm/khugepaged.c index 04d0a3ee006e..88badbed7f73 100644 --- a/mm/khugepaged.c +++ b/mm/khugepaged.c @@ -893,6 +893,9 @@ static int hugepage_vma_revalidate(struct mm_struct *mm, unsigned long address, return SCAN_ADDRESS_RANGE; if (!hugepage_vma_check(vma, vma->vm_flags)) return SCAN_VMA_CHECK; + /* Anon VMA expected */ + if (!vma->anon_vma || vma->vm_ops) + return SCAN_VMA_CHECK; return 0; } -- 2.25.1

2 1

[PATCH OLK-6.6] drm/amdgpu/mes: fix use-after-free issue
by Li Huafei 10 Jul '24

10 Jul '24

From: Jack Xiao <Jack.Xiao(a)amd.com> stable inclusion from stable-v6.6.33 commit 39cfce75168c11421d70b8c0c65f6133edccb82a category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SIE CVE: CVE-2024-38581 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 948255282074d9367e01908b3f5dcf8c10fc9c3d ] Delete fence fallback timer to fix the ramdom use-after-free issue. v2: move to amdgpu_mes.c Signed-off-by: Jack Xiao <Jack.Xiao(a)amd.com> Acked-by: Lijo Lazar <lijo.lazar(a)amd.com> Acked-by: Christian König <christian.koenig(a)amd.com> Signed-off-by: Alex Deucher <alexander.deucher(a)amd.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Li Huafei <lihuafei1(a)huawei.com> --- drivers/gpu/drm/amd/amdgpu/amdgpu_mes.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/gpu/drm/amd/amdgpu/amdgpu_mes.c b/drivers/gpu/drm/amd/amdgpu/amdgpu_mes.c index 15c67fa404ff..c5c55e132af2 100644 --- a/drivers/gpu/drm/amd/amdgpu/amdgpu_mes.c +++ b/drivers/gpu/drm/amd/amdgpu/amdgpu_mes.c @@ -1098,6 +1098,7 @@ void amdgpu_mes_remove_ring(struct amdgpu_device *adev, return; amdgpu_mes_remove_hw_queue(adev, ring->hw_queue_id); + del_timer_sync(&ring->fence_drv.fallback_timer); amdgpu_ring_fini(ring); kfree(ring); } -- 2.25.1

2 1

[PATCH openEuler-1.0-LTS] btrfs: fix memory ordering between normal and ordered work functions
by Yifan Qiao 10 Jul '24

10 Jul '24

From: Nikolay Borisov <nborisov(a)suse.com> stable inclusion from stable-v4.19.218 commit ed058d735a70f4b063323f1a7bb33cda0f987513 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNFN CVE: CVE-2021-47189 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 45da9c1767ac31857df572f0a909fbe88fd5a7e9 upstream. Ordered work functions aren't guaranteed to be handled by the same thread which executed the normal work functions. The only way execution between normal/ordered functions is synchronized is via the WORK_DONE_BIT, unfortunately the used bitops don't guarantee any ordering whatsoever. This manifested as seemingly inexplicable crashes on ARM64, where async_chunk::inode is seen as non-null in async_cow_submit which causes submit_compressed_extents to be called and crash occurs because async_chunk::inode suddenly became NULL. The call trace was similar to: pc : submit_compressed_extents+0x38/0x3d0 lr : async_cow_submit+0x50/0xd0 sp : ffff800015d4bc20 <registers omitted for brevity> Call trace: submit_compressed_extents+0x38/0x3d0 async_cow_submit+0x50/0xd0 run_ordered_work+0xc8/0x280 btrfs_work_helper+0x98/0x250 process_one_work+0x1f0/0x4ac worker_thread+0x188/0x504 kthread+0x110/0x114 ret_from_fork+0x10/0x18 Fix this by adding respective barrier calls which ensure that all accesses preceding setting of WORK_DONE_BIT are strictly ordered before setting the flag. At the same time add a read barrier after reading of WORK_DONE_BIT in run_ordered_work which ensures all subsequent loads would be strictly ordered after reading the bit. This in turn ensures are all accesses before WORK_DONE_BIT are going to be strictly ordered before any access that can occur in ordered_func. Reported-by: Chris Murphy <lists(a)colorremedies.com> Fixes: 08a9ff326418 ("btrfs: Added btrfs_workqueue_struct implemented ordered execution based on kernel workqueue") CC: stable(a)vger.kernel.org # 4.4+ Link: https://bugzilla.redhat.com/show_bug.cgi?id=2011928 Reviewed-by: Josef Bacik <josef(a)toxicpanda.com> Tested-by: Chris Murphy <chris(a)colorremedies.com> Signed-off-by: Nikolay Borisov <nborisov(a)suse.com> Signed-off-by: David Sterba <dsterba(a)suse.com> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Yifan Qiao <qiaoyifan4(a)huawei.com> --- fs/btrfs/async-thread.c | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/fs/btrfs/async-thread.c b/fs/btrfs/async-thread.c index f79c0cb7697a..21f8f475c894 100644 --- a/fs/btrfs/async-thread.c +++ b/fs/btrfs/async-thread.c @@ -270,6 +270,13 @@ static void run_ordered_work(struct __btrfs_workqueue *wq, ordered_list); if (!test_bit(WORK_DONE_BIT, &work->flags)) break; + /* + * Orders all subsequent loads after reading WORK_DONE_BIT, + * paired with the smp_mb__before_atomic in btrfs_work_helper + * this guarantees that the ordered function will see all + * updates from ordinary work function. + */ + smp_rmb(); /* * we are going to call the ordered done function, but @@ -355,6 +362,13 @@ static void normal_work_helper(struct btrfs_work *work) thresh_exec_hook(wq); work->func(work); if (need_order) { + /* + * Ensures all memory accesses done in the work function are + * ordered before setting the WORK_DONE_BIT. Ensuring the thread + * which is going to executed the ordered work sees them. + * Pairs with the smp_rmb in run_ordered_work. + */ + smp_mb__before_atomic(); set_bit(WORK_DONE_BIT, &work->flags); run_ordered_work(wq, work); } -- 2.39.2

2 1

[openeuler:OLK-6.6] BUILD REGRESSION b752420db6600f7d154e7b1d9ccbf448a9cc3170
by kernel test robot 10 Jul '24

10 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-6.6 branch HEAD: b752420db6600f7d154e7b1d9ccbf448a9cc3170 !9779 CVE-2024-39461 Error/Warning ids grouped by kconfigs: recent_errors |-- arm64-allmodconfig | `-- clang:warning:no-such-include-directory:drivers-infiniband-hw-hiroce3-include-mag |-- arm64-randconfig-002-20240709 | `-- drivers-net-ethernet-mucse-rnpvf-rnpvf_main.c:error:called-object-type-int-is-not-a-function-or-function-pointer `-- loongarch-randconfig-002-20240709 `-- drivers-net-ethernet-mucse-rnpm-rnpm_main.c:warning:d-directive-output-may-be-truncated-writing-between-and-bytes-into-a-region-of-size-between-and elapsed time: 816m configs tested: 39 configs skipped: 133 tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-13.2.0 arm64 defconfig gcc-13.2.0 arm64 randconfig-001-20240709 clang-19 arm64 randconfig-002-20240709 clang-17 arm64 randconfig-003-20240709 clang-19 arm64 randconfig-004-20240709 clang-19 loongarch allnoconfig gcc-13.2.0 loongarch defconfig gcc-13.2.0 loongarch randconfig-001-20240709 gcc-13.2.0 loongarch randconfig-002-20240709 gcc-13.2.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240710 clang-18 x86_64 buildonly-randconfig-002-20240710 clang-18 x86_64 buildonly-randconfig-003-20240710 clang-18 x86_64 buildonly-randconfig-004-20240710 clang-18 x86_64 buildonly-randconfig-005-20240710 gcc-13 x86_64 buildonly-randconfig-006-20240710 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240710 gcc-13 x86_64 randconfig-002-20240710 clang-18 x86_64 randconfig-003-20240710 gcc-12 x86_64 randconfig-004-20240710 clang-18 x86_64 randconfig-005-20240710 clang-18 x86_64 randconfig-006-20240710 gcc-13 x86_64 randconfig-011-20240710 clang-18 x86_64 randconfig-012-20240710 clang-18 x86_64 randconfig-013-20240710 clang-18 x86_64 randconfig-014-20240710 clang-18 x86_64 randconfig-015-20240710 clang-18 x86_64 randconfig-016-20240710 gcc-13 x86_64 randconfig-071-20240710 gcc-13 x86_64 randconfig-072-20240710 clang-18 x86_64 randconfig-073-20240710 clang-18 x86_64 randconfig-074-20240710 gcc-7 x86_64 randconfig-075-20240710 clang-18 x86_64 randconfig-076-20240710 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-5.10] BUILD SUCCESS 223a7beb53529b66601db229f1cd1a5e6d278982
by kernel test robot 10 Jul '24

10 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-5.10 branch HEAD: 223a7beb53529b66601db229f1cd1a5e6d278982 !9643 f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() elapsed time: 729m configs tested: 34 configs skipped: 128 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240709 clang-19 arm64 randconfig-002-20240709 clang-17 arm64 randconfig-003-20240709 clang-19 arm64 randconfig-004-20240709 clang-19 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240709 gcc-11 x86_64 buildonly-randconfig-002-20240709 clang-18 x86_64 buildonly-randconfig-003-20240709 clang-18 x86_64 buildonly-randconfig-004-20240709 gcc-9 x86_64 buildonly-randconfig-005-20240709 gcc-13 x86_64 buildonly-randconfig-006-20240709 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240709 clang-18 x86_64 randconfig-002-20240709 gcc-10 x86_64 randconfig-003-20240709 clang-18 x86_64 randconfig-004-20240709 gcc-12 x86_64 randconfig-005-20240709 gcc-13 x86_64 randconfig-006-20240709 gcc-8 x86_64 randconfig-011-20240709 clang-18 x86_64 randconfig-012-20240709 clang-18 x86_64 randconfig-013-20240709 clang-18 x86_64 randconfig-014-20240709 clang-18 x86_64 randconfig-015-20240709 clang-18 x86_64 randconfig-016-20240709 clang-18 x86_64 randconfig-071-20240709 gcc-7 x86_64 randconfig-072-20240709 clang-18 x86_64 randconfig-073-20240709 gcc-13 x86_64 randconfig-074-20240709 gcc-13 x86_64 randconfig-075-20240709 gcc-11 x86_64 randconfig-076-20240709 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH openEuler-22.03-LTS-SP1] nilfs2: fix use-after-free of timer for log writer thread
by Guo Mengqi 09 Jul '24

09 Jul '24

From: Ryusuke Konishi <konishi.ryusuke(a)gmail.com> stable inclusion from stable-v5.10.219 commit 67fa90d4a2ccd9ebb0e1e168c7d0b5d0cf3c7148 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6S5D CVE: CVE-2024-38583 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit f5d4e04634c9cf68bdf23de08ada0bb92e8befe7 upstream. Patch series "nilfs2: fix log writer related issues". This bug fix series covers three nilfs2 log writer-related issues, including a timer use-after-free issue and potential deadlock issue on unmount, and a potential freeze issue in event synchronization found during their analysis. Details are described in each commit log. This patch (of 3): A use-after-free issue has been reported regarding the timer sc_timer on the nilfs_sc_info structure. The problem is that even though it is used to wake up a sleeping log writer thread, sc_timer is not shut down until the nilfs_sc_info structure is about to be freed, and is used regardless of the thread's lifetime. Fix this issue by limiting the use of sc_timer only while the log writer thread is alive. Link: https://lkml.kernel.org/r/20240520132621.4054-1-konishi.ryusuke@gmail.com Link: https://lkml.kernel.org/r/20240520132621.4054-2-konishi.ryusuke@gmail.com Fixes: fdce895ea5dd ("nilfs2: change sc_timer from a pointer to an embedded one in struct nilfs_sc_info") Signed-off-by: Ryusuke Konishi <konishi.ryusuke(a)gmail.com> Reported-by: "Bai, Shuangpeng" <sjb7183(a)psu.edu> Closes: https://groups.google.com/g/syzkaller/c/MK_LYqtt8ko/m/8rgdWeseAwAJ Tested-by: Ryusuke Konishi <konishi.ryusuke(a)gmail.com> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Guo Mengqi <guomengqi3(a)huawei.com> --- fs/nilfs2/segment.c | 25 +++++++++++++++++++------ 1 file changed, 19 insertions(+), 6 deletions(-) diff --git a/fs/nilfs2/segment.c b/fs/nilfs2/segment.c index 931f87d657fc..d4e518a31131 100644 --- a/fs/nilfs2/segment.c +++ b/fs/nilfs2/segment.c @@ -2129,8 +2129,10 @@ static void nilfs_segctor_start_timer(struct nilfs_sc_info *sci) { spin_lock(&sci->sc_state_lock); if (!(sci->sc_state & NILFS_SEGCTOR_COMMIT)) { - sci->sc_timer.expires = jiffies + sci->sc_interval; - add_timer(&sci->sc_timer); + if (sci->sc_task) { + sci->sc_timer.expires = jiffies + sci->sc_interval; + add_timer(&sci->sc_timer); + } sci->sc_state |= NILFS_SEGCTOR_COMMIT; } spin_unlock(&sci->sc_state_lock); @@ -2350,10 +2352,21 @@ int nilfs_construct_dsync_segment(struct super_block *sb, struct inode *inode, */ static void nilfs_segctor_accept(struct nilfs_sc_info *sci) { + bool thread_is_alive; + spin_lock(&sci->sc_state_lock); sci->sc_seq_accepted = sci->sc_seq_request; + thread_is_alive = (bool)sci->sc_task; spin_unlock(&sci->sc_state_lock); - del_timer_sync(&sci->sc_timer); + + /* + * This function does not race with the log writer thread's + * termination. Therefore, deleting sc_timer, which should not be + * done after the log writer thread exits, can be done safely outside + * the area protected by sc_state_lock. + */ + if (thread_is_alive) + del_timer_sync(&sci->sc_timer); } /** @@ -2379,7 +2392,7 @@ static void nilfs_segctor_notify(struct nilfs_sc_info *sci, int mode, int err) sci->sc_flush_request &= ~FLUSH_DAT_BIT; /* re-enable timer if checkpoint creation was not done */ - if ((sci->sc_state & NILFS_SEGCTOR_COMMIT) && + if ((sci->sc_state & NILFS_SEGCTOR_COMMIT) && sci->sc_task && time_before(jiffies, sci->sc_timer.expires)) add_timer(&sci->sc_timer); } @@ -2569,6 +2582,7 @@ static int nilfs_segctor_thread(void *arg) int timeout = 0; sci->sc_timer_task = current; + timer_setup(&sci->sc_timer, nilfs_construction_timeout, 0); /* start sync. */ sci->sc_task = current; @@ -2637,6 +2651,7 @@ static int nilfs_segctor_thread(void *arg) /* end sync. */ sci->sc_task = NULL; + del_timer_sync(&sci->sc_timer); wake_up(&sci->sc_wait_task); /* for nilfs_segctor_kill_thread() */ return 0; } @@ -2699,7 +2714,6 @@ static struct nilfs_sc_info *nilfs_segctor_new(struct super_block *sb, INIT_LIST_HEAD(&sci->sc_gc_inodes); INIT_LIST_HEAD(&sci->sc_iput_queue); INIT_WORK(&sci->sc_iput_work, nilfs_iput_work_func); - timer_setup(&sci->sc_timer, nilfs_construction_timeout, 0); sci->sc_interval = HZ * NILFS_SC_DEFAULT_TIMEOUT; sci->sc_mjcp_freq = HZ * NILFS_SC_DEFAULT_SR_FREQ; @@ -2785,7 +2799,6 @@ static void nilfs_segctor_destroy(struct nilfs_sc_info *sci) down_write(&nilfs->ns_segctor_sem); - del_timer_sync(&sci->sc_timer); kfree(sci); } -- 2.17.1

2 1

[PATCH OLK-5.10] nilfs2: fix use-after-free of timer for log writer thread
by Guo Mengqi 09 Jul '24

09 Jul '24

From: Ryusuke Konishi <konishi.ryusuke(a)gmail.com> stable inclusion from stable-v5.10.219 commit 67fa90d4a2ccd9ebb0e1e168c7d0b5d0cf3c7148 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6S5D CVE: CVE-2024-38583 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit f5d4e04634c9cf68bdf23de08ada0bb92e8befe7 upstream. Patch series "nilfs2: fix log writer related issues". This bug fix series covers three nilfs2 log writer-related issues, including a timer use-after-free issue and potential deadlock issue on unmount, and a potential freeze issue in event synchronization found during their analysis. Details are described in each commit log. This patch (of 3): A use-after-free issue has been reported regarding the timer sc_timer on the nilfs_sc_info structure. The problem is that even though it is used to wake up a sleeping log writer thread, sc_timer is not shut down until the nilfs_sc_info structure is about to be freed, and is used regardless of the thread's lifetime. Fix this issue by limiting the use of sc_timer only while the log writer thread is alive. Link: https://lkml.kernel.org/r/20240520132621.4054-1-konishi.ryusuke@gmail.com Link: https://lkml.kernel.org/r/20240520132621.4054-2-konishi.ryusuke@gmail.com Fixes: fdce895ea5dd ("nilfs2: change sc_timer from a pointer to an embedded one in struct nilfs_sc_info") Signed-off-by: Ryusuke Konishi <konishi.ryusuke(a)gmail.com> Reported-by: "Bai, Shuangpeng" <sjb7183(a)psu.edu> Closes: https://groups.google.com/g/syzkaller/c/MK_LYqtt8ko/m/8rgdWeseAwAJ Tested-by: Ryusuke Konishi <konishi.ryusuke(a)gmail.com> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Guo Mengqi <guomengqi3(a)huawei.com> --- fs/nilfs2/segment.c | 25 +++++++++++++++++++------ 1 file changed, 19 insertions(+), 6 deletions(-) diff --git a/fs/nilfs2/segment.c b/fs/nilfs2/segment.c index 3997f377f0e3..2eeae67ad298 100644 --- a/fs/nilfs2/segment.c +++ b/fs/nilfs2/segment.c @@ -2164,8 +2164,10 @@ static void nilfs_segctor_start_timer(struct nilfs_sc_info *sci) { spin_lock(&sci->sc_state_lock); if (!(sci->sc_state & NILFS_SEGCTOR_COMMIT)) { - sci->sc_timer.expires = jiffies + sci->sc_interval; - add_timer(&sci->sc_timer); + if (sci->sc_task) { + sci->sc_timer.expires = jiffies + sci->sc_interval; + add_timer(&sci->sc_timer); + } sci->sc_state |= NILFS_SEGCTOR_COMMIT; } spin_unlock(&sci->sc_state_lock); @@ -2385,10 +2387,21 @@ int nilfs_construct_dsync_segment(struct super_block *sb, struct inode *inode, */ static void nilfs_segctor_accept(struct nilfs_sc_info *sci) { + bool thread_is_alive; + spin_lock(&sci->sc_state_lock); sci->sc_seq_accepted = sci->sc_seq_request; + thread_is_alive = (bool)sci->sc_task; spin_unlock(&sci->sc_state_lock); - del_timer_sync(&sci->sc_timer); + + /* + * This function does not race with the log writer thread's + * termination. Therefore, deleting sc_timer, which should not be + * done after the log writer thread exits, can be done safely outside + * the area protected by sc_state_lock. + */ + if (thread_is_alive) + del_timer_sync(&sci->sc_timer); } /** @@ -2414,7 +2427,7 @@ static void nilfs_segctor_notify(struct nilfs_sc_info *sci, int mode, int err) sci->sc_flush_request &= ~FLUSH_DAT_BIT; /* re-enable timer if checkpoint creation was not done */ - if ((sci->sc_state & NILFS_SEGCTOR_COMMIT) && + if ((sci->sc_state & NILFS_SEGCTOR_COMMIT) && sci->sc_task && time_before(jiffies, sci->sc_timer.expires)) add_timer(&sci->sc_timer); } @@ -2604,6 +2617,7 @@ static int nilfs_segctor_thread(void *arg) int timeout = 0; sci->sc_timer_task = current; + timer_setup(&sci->sc_timer, nilfs_construction_timeout, 0); /* start sync. */ sci->sc_task = current; @@ -2670,6 +2684,7 @@ static int nilfs_segctor_thread(void *arg) end_thread: /* end sync. */ sci->sc_task = NULL; + del_timer_sync(&sci->sc_timer); wake_up(&sci->sc_wait_task); /* for nilfs_segctor_kill_thread() */ spin_unlock(&sci->sc_state_lock); return 0; @@ -2733,7 +2748,6 @@ static struct nilfs_sc_info *nilfs_segctor_new(struct super_block *sb, INIT_LIST_HEAD(&sci->sc_gc_inodes); INIT_LIST_HEAD(&sci->sc_iput_queue); INIT_WORK(&sci->sc_iput_work, nilfs_iput_work_func); - timer_setup(&sci->sc_timer, nilfs_construction_timeout, 0); sci->sc_interval = HZ * NILFS_SC_DEFAULT_TIMEOUT; sci->sc_mjcp_freq = HZ * NILFS_SC_DEFAULT_SR_FREQ; @@ -2819,7 +2833,6 @@ static void nilfs_segctor_destroy(struct nilfs_sc_info *sci) down_write(&nilfs->ns_segctor_sem); - del_timer_sync(&sci->sc_timer); kfree(sci); } -- 2.17.1

2 1

[PATCH openEuler-22.03-LTS-SP1] net/sched: act_skbmod: prevent kernel-infoleak
by Guo Mengqi 09 Jul '24

09 Jul '24

From: Eric Dumazet <edumazet(a)google.com> stable inclusion from stable-v5.10.215 commit 5e45dc4408857305f4685abfd7a528a1e58b51b5 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QG2F Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit d313eb8b77557a6d5855f42d2234bd592c7b50dd upstream. syzbot found that tcf_skbmod_dump() was copying four bytes from kernel stack to user space [1]. The issue here is that 'struct tc_skbmod' has a four bytes hole. We need to clear the structure before filling fields. [1] BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline] BUG: KMSAN: kernel-infoleak in copy_to_user_iter lib/iov_iter.c:24 [inline] BUG: KMSAN: kernel-infoleak in iterate_ubuf include/linux/iov_iter.h:29 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance2 include/linux/iov_iter.h:245 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance include/linux/iov_iter.h:271 [inline] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x366/0x2520 lib/iov_iter.c:185 instrument_copy_to_user include/linux/instrumented.h:114 [inline] copy_to_user_iter lib/iov_iter.c:24 [inline] iterate_ubuf include/linux/iov_iter.h:29 [inline] iterate_and_advance2 include/linux/iov_iter.h:245 [inline] iterate_and_advance include/linux/iov_iter.h:271 [inline] _copy_to_iter+0x366/0x2520 lib/iov_iter.c:185 copy_to_iter include/linux/uio.h:196 [inline] simple_copy_to_iter net/core/datagram.c:532 [inline] __skb_datagram_iter+0x185/0x1000 net/core/datagram.c:420 skb_copy_datagram_iter+0x5c/0x200 net/core/datagram.c:546 skb_copy_datagram_msg include/linux/skbuff.h:4050 [inline] netlink_recvmsg+0x432/0x1610 net/netlink/af_netlink.c:1962 sock_recvmsg_nosec net/socket.c:1046 [inline] sock_recvmsg+0x2c4/0x340 net/socket.c:1068 __sys_recvfrom+0x35a/0x5f0 net/socket.c:2242 __do_sys_recvfrom net/socket.c:2260 [inline] __se_sys_recvfrom net/socket.c:2256 [inline] __x64_sys_recvfrom+0x126/0x1d0 net/socket.c:2256 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Uninit was stored to memory at: pskb_expand_head+0x30f/0x19d0 net/core/skbuff.c:2253 netlink_trim+0x2c2/0x330 net/netlink/af_netlink.c:1317 netlink_unicast+0x9f/0x1260 net/netlink/af_netlink.c:1351 nlmsg_unicast include/net/netlink.h:1144 [inline] nlmsg_notify+0x21d/0x2f0 net/netlink/af_netlink.c:2610 rtnetlink_send+0x73/0x90 net/core/rtnetlink.c:741 rtnetlink_maybe_send include/linux/rtnetlink.h:17 [inline] tcf_add_notify net/sched/act_api.c:2048 [inline] tcf_action_add net/sched/act_api.c:2071 [inline] tc_ctl_action+0x146e/0x19d0 net/sched/act_api.c:2119 rtnetlink_rcv_msg+0x1737/0x1900 net/core/rtnetlink.c:6595 netlink_rcv_skb+0x375/0x650 net/netlink/af_netlink.c:2559 rtnetlink_rcv+0x34/0x40 net/core/rtnetlink.c:6613 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline] netlink_unicast+0xf4c/0x1260 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x10df/0x11f0 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x30f/0x380 net/socket.c:745 ____sys_sendmsg+0x877/0xb60 net/socket.c:2584 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638 __sys_sendmsg net/socket.c:2667 [inline] __do_sys_sendmsg net/socket.c:2676 [inline] __se_sys_sendmsg net/socket.c:2674 [inline] __x64_sys_sendmsg+0x307/0x4a0 net/socket.c:2674 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Uninit was stored to memory at: __nla_put lib/nlattr.c:1041 [inline] nla_put+0x1c6/0x230 lib/nlattr.c:1099 tcf_skbmod_dump+0x23f/0xc20 net/sched/act_skbmod.c:256 tcf_action_dump_old net/sched/act_api.c:1191 [inline] tcf_action_dump_1+0x85e/0x970 net/sched/act_api.c:1227 tcf_action_dump+0x1fd/0x460 net/sched/act_api.c:1251 tca_get_fill+0x519/0x7a0 net/sched/act_api.c:1628 tcf_add_notify_msg net/sched/act_api.c:2023 [inline] tcf_add_notify net/sched/act_api.c:2042 [inline] tcf_action_add net/sched/act_api.c:2071 [inline] tc_ctl_action+0x1365/0x19d0 net/sched/act_api.c:2119 rtnetlink_rcv_msg+0x1737/0x1900 net/core/rtnetlink.c:6595 netlink_rcv_skb+0x375/0x650 net/netlink/af_netlink.c:2559 rtnetlink_rcv+0x34/0x40 net/core/rtnetlink.c:6613 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline] netlink_unicast+0xf4c/0x1260 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x10df/0x11f0 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x30f/0x380 net/socket.c:745 ____sys_sendmsg+0x877/0xb60 net/socket.c:2584 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638 __sys_sendmsg net/socket.c:2667 [inline] __do_sys_sendmsg net/socket.c:2676 [inline] __se_sys_sendmsg net/socket.c:2674 [inline] __x64_sys_sendmsg+0x307/0x4a0 net/socket.c:2674 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Local variable opt created at: tcf_skbmod_dump+0x9d/0xc20 net/sched/act_skbmod.c:244 tcf_action_dump_old net/sched/act_api.c:1191 [inline] tcf_action_dump_1+0x85e/0x970 net/sched/act_api.c:1227 Bytes 188-191 of 248 are uninitialized Memory access of size 248 starts at ffff888117697680 Data copied to user address 00007ffe56d855f0 Fixes: 86da71b57383 ("net_sched: Introduce skbmod action") Signed-off-by: Eric Dumazet <edumazet(a)google.com> Acked-by: Jamal Hadi Salim <jhs(a)mojatatu.com> Link: https://lore.kernel.org/r/20240403130908.93421-1-edumazet@google.com Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Wang Hai <wanghai38(a)huawei.com> --- net/sched/act_skbmod.c | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/net/sched/act_skbmod.c b/net/sched/act_skbmod.c index 8d17a543cc9f..9a266fd33cfb 100644 --- a/net/sched/act_skbmod.c +++ b/net/sched/act_skbmod.c @@ -219,13 +219,13 @@ static int tcf_skbmod_dump(struct sk_buff *skb, struct tc_action *a, struct tcf_skbmod *d = to_skbmod(a); unsigned char *b = skb_tail_pointer(skb); struct tcf_skbmod_params *p; - struct tc_skbmod opt = { - .index = d->tcf_index, - .refcnt = refcount_read(&d->tcf_refcnt) - ref, - .bindcnt = atomic_read(&d->tcf_bindcnt) - bind, - }; + struct tc_skbmod opt; struct tcf_t t; + memset(&opt, 0, sizeof(opt)); + opt.index = d->tcf_index; + opt.refcnt = refcount_read(&d->tcf_refcnt) - ref, + opt.bindcnt = atomic_read(&d->tcf_bindcnt) - bind; spin_lock_bh(&d->tcf_lock); opt.action = d->tcf_action; p = rcu_dereference_protected(d->skbmod_p, -- 2.17.1

2 1

[PATCH OLK-5.10] net/sched: act_skbmod: prevent kernel-infoleak
by Guo Mengqi 09 Jul '24

09 Jul '24

From: Eric Dumazet <edumazet(a)google.com> stable inclusion from stable-v5.10.215 commit 5e45dc4408857305f4685abfd7a528a1e58b51b5 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9QG2F Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit d313eb8b77557a6d5855f42d2234bd592c7b50dd upstream. syzbot found that tcf_skbmod_dump() was copying four bytes from kernel stack to user space [1]. The issue here is that 'struct tc_skbmod' has a four bytes hole. We need to clear the structure before filling fields. [1] BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline] BUG: KMSAN: kernel-infoleak in copy_to_user_iter lib/iov_iter.c:24 [inline] BUG: KMSAN: kernel-infoleak in iterate_ubuf include/linux/iov_iter.h:29 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance2 include/linux/iov_iter.h:245 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance include/linux/iov_iter.h:271 [inline] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x366/0x2520 lib/iov_iter.c:185 instrument_copy_to_user include/linux/instrumented.h:114 [inline] copy_to_user_iter lib/iov_iter.c:24 [inline] iterate_ubuf include/linux/iov_iter.h:29 [inline] iterate_and_advance2 include/linux/iov_iter.h:245 [inline] iterate_and_advance include/linux/iov_iter.h:271 [inline] _copy_to_iter+0x366/0x2520 lib/iov_iter.c:185 copy_to_iter include/linux/uio.h:196 [inline] simple_copy_to_iter net/core/datagram.c:532 [inline] __skb_datagram_iter+0x185/0x1000 net/core/datagram.c:420 skb_copy_datagram_iter+0x5c/0x200 net/core/datagram.c:546 skb_copy_datagram_msg include/linux/skbuff.h:4050 [inline] netlink_recvmsg+0x432/0x1610 net/netlink/af_netlink.c:1962 sock_recvmsg_nosec net/socket.c:1046 [inline] sock_recvmsg+0x2c4/0x340 net/socket.c:1068 __sys_recvfrom+0x35a/0x5f0 net/socket.c:2242 __do_sys_recvfrom net/socket.c:2260 [inline] __se_sys_recvfrom net/socket.c:2256 [inline] __x64_sys_recvfrom+0x126/0x1d0 net/socket.c:2256 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Uninit was stored to memory at: pskb_expand_head+0x30f/0x19d0 net/core/skbuff.c:2253 netlink_trim+0x2c2/0x330 net/netlink/af_netlink.c:1317 netlink_unicast+0x9f/0x1260 net/netlink/af_netlink.c:1351 nlmsg_unicast include/net/netlink.h:1144 [inline] nlmsg_notify+0x21d/0x2f0 net/netlink/af_netlink.c:2610 rtnetlink_send+0x73/0x90 net/core/rtnetlink.c:741 rtnetlink_maybe_send include/linux/rtnetlink.h:17 [inline] tcf_add_notify net/sched/act_api.c:2048 [inline] tcf_action_add net/sched/act_api.c:2071 [inline] tc_ctl_action+0x146e/0x19d0 net/sched/act_api.c:2119 rtnetlink_rcv_msg+0x1737/0x1900 net/core/rtnetlink.c:6595 netlink_rcv_skb+0x375/0x650 net/netlink/af_netlink.c:2559 rtnetlink_rcv+0x34/0x40 net/core/rtnetlink.c:6613 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline] netlink_unicast+0xf4c/0x1260 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x10df/0x11f0 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x30f/0x380 net/socket.c:745 ____sys_sendmsg+0x877/0xb60 net/socket.c:2584 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638 __sys_sendmsg net/socket.c:2667 [inline] __do_sys_sendmsg net/socket.c:2676 [inline] __se_sys_sendmsg net/socket.c:2674 [inline] __x64_sys_sendmsg+0x307/0x4a0 net/socket.c:2674 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Uninit was stored to memory at: __nla_put lib/nlattr.c:1041 [inline] nla_put+0x1c6/0x230 lib/nlattr.c:1099 tcf_skbmod_dump+0x23f/0xc20 net/sched/act_skbmod.c:256 tcf_action_dump_old net/sched/act_api.c:1191 [inline] tcf_action_dump_1+0x85e/0x970 net/sched/act_api.c:1227 tcf_action_dump+0x1fd/0x460 net/sched/act_api.c:1251 tca_get_fill+0x519/0x7a0 net/sched/act_api.c:1628 tcf_add_notify_msg net/sched/act_api.c:2023 [inline] tcf_add_notify net/sched/act_api.c:2042 [inline] tcf_action_add net/sched/act_api.c:2071 [inline] tc_ctl_action+0x1365/0x19d0 net/sched/act_api.c:2119 rtnetlink_rcv_msg+0x1737/0x1900 net/core/rtnetlink.c:6595 netlink_rcv_skb+0x375/0x650 net/netlink/af_netlink.c:2559 rtnetlink_rcv+0x34/0x40 net/core/rtnetlink.c:6613 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline] netlink_unicast+0xf4c/0x1260 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x10df/0x11f0 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x30f/0x380 net/socket.c:745 ____sys_sendmsg+0x877/0xb60 net/socket.c:2584 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638 __sys_sendmsg net/socket.c:2667 [inline] __do_sys_sendmsg net/socket.c:2676 [inline] __se_sys_sendmsg net/socket.c:2674 [inline] __x64_sys_sendmsg+0x307/0x4a0 net/socket.c:2674 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Local variable opt created at: tcf_skbmod_dump+0x9d/0xc20 net/sched/act_skbmod.c:244 tcf_action_dump_old net/sched/act_api.c:1191 [inline] tcf_action_dump_1+0x85e/0x970 net/sched/act_api.c:1227 Bytes 188-191 of 248 are uninitialized Memory access of size 248 starts at ffff888117697680 Data copied to user address 00007ffe56d855f0 Fixes: 86da71b57383 ("net_sched: Introduce skbmod action") Signed-off-by: Eric Dumazet <edumazet(a)google.com> Acked-by: Jamal Hadi Salim <jhs(a)mojatatu.com> Link: https://lore.kernel.org/r/20240403130908.93421-1-edumazet@google.com Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Wang Hai <wanghai38(a)huawei.com> --- net/sched/act_skbmod.c | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/net/sched/act_skbmod.c b/net/sched/act_skbmod.c index aa98dcac94b9..934765a2edeb 100644 --- a/net/sched/act_skbmod.c +++ b/net/sched/act_skbmod.c @@ -219,13 +219,13 @@ static int tcf_skbmod_dump(struct sk_buff *skb, struct tc_action *a, struct tcf_skbmod *d = to_skbmod(a); unsigned char *b = skb_tail_pointer(skb); struct tcf_skbmod_params *p; - struct tc_skbmod opt = { - .index = d->tcf_index, - .refcnt = refcount_read(&d->tcf_refcnt) - ref, - .bindcnt = atomic_read(&d->tcf_bindcnt) - bind, - }; + struct tc_skbmod opt; struct tcf_t t; + memset(&opt, 0, sizeof(opt)); + opt.index = d->tcf_index; + opt.refcnt = refcount_read(&d->tcf_refcnt) - ref, + opt.bindcnt = atomic_read(&d->tcf_bindcnt) - bind; spin_lock_bh(&d->tcf_lock); opt.action = d->tcf_action; p = rcu_dereference_protected(d->skbmod_p, -- 2.17.1

2 1

[PATCH OLK-5.10] power: supply: bq27xxx-i2c: Do not free non existing IRQ
by Guo Mengqi 09 Jul '24

09 Jul '24

From: Hans de Goede <hdegoede(a)redhat.com> stable inclusion from stable-v5.10.212 commit d7acc4a569f5f4513120c85ea2b9f04909b7490f category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q8ME Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 2df70149e73e79783bcbc7db4fa51ecef0e2022c ] The bq27xxx i2c-client may not have an IRQ, in which case client->irq will be 0. bq27xxx_battery_i2c_probe() already has an if (client->irq) check wrapping the request_threaded_irq(). But bq27xxx_battery_i2c_remove() unconditionally calls free_irq(client->irq) leading to: [ 190.310742] ------------[ cut here ]------------ [ 190.310843] Trying to free already-free IRQ 0 [ 190.310861] WARNING: CPU: 2 PID: 1304 at kernel/irq/manage.c:1893 free_irq+0x1b8/0x310 Followed by a backtrace when unbinding the driver. Add an if (client->irq) to bq27xxx_battery_i2c_remove() mirroring probe() to fix this. Fixes: 444ff00734f3 ("power: supply: bq27xxx: Fix I2C IRQ race on remove") Signed-off-by: Hans de Goede <hdegoede(a)redhat.com> Link: https://lore.kernel.org/r/20240215155133.70537-1-hdegoede@redhat.com Signed-off-by: Sebastian Reichel <sebastian.reichel(a)collabora.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Wang Hai <wanghai38(a)huawei.com> --- drivers/power/supply/bq27xxx_battery_i2c.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/drivers/power/supply/bq27xxx_battery_i2c.c b/drivers/power/supply/bq27xxx_battery_i2c.c index 0e32efb10ee7..6fbae8fc2e50 100644 --- a/drivers/power/supply/bq27xxx_battery_i2c.c +++ b/drivers/power/supply/bq27xxx_battery_i2c.c @@ -209,7 +209,9 @@ static int bq27xxx_battery_i2c_remove(struct i2c_client *client) { struct bq27xxx_device_info *di = i2c_get_clientdata(client); - free_irq(client->irq, di); + if (client->irq) + free_irq(client->irq, di); + bq27xxx_battery_teardown(di); mutex_lock(&battery_mutex); -- 2.17.1

2 1

[PATCH openEuler-22.03-LTS-SP1] drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
by Guo Mengqi 09 Jul '24

09 Jul '24

From: Aleksandr Mishin <amishin(a)t-argos.ru> stable inclusion from stable-v6.6.33 commit dcf53e6103b26e7458be71491d0641f49fbd5840 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SEW CVE: CVE-2024-38548 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 935a92a1c400285545198ca2800a4c6c519c650a ] In cdns_mhdp_atomic_enable(), the return value of drm_mode_duplicate() is assigned to mhdp_state->current_mode, and there is a dereference of it in drm_mode_set_name(), which will lead to a NULL pointer dereference on failure of drm_mode_duplicate(). Fix this bug add a check of mhdp_state->current_mode. Fixes: fb43aa0acdfd ("drm: bridge: Add support for Cadence MHDP8546 DPI/DP bridge") Signed-off-by: Aleksandr Mishin <amishin(a)t-argos.ru> Reviewed-by: Robert Foss <rfoss(a)kernel.org> Signed-off-by: Robert Foss <rfoss(a)kernel.org> Link: https://patchwork.freedesktop.org/patch/msgid/20240408125810.21899-1-amishi… Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: ZhangPeng <zhangpeng362(a)huawei.com> Signed-off-by: Zheng Zucheng <zhengzucheng(a)huawei.com> --- drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c b/drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c index f56ff97c9899..ae99d04f0045 100644 --- a/drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c +++ b/drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c @@ -1978,6 +1978,9 @@ static void cdns_mhdp_atomic_enable(struct drm_bridge *bridge, mhdp_state = to_cdns_mhdp_bridge_state(new_state); mhdp_state->current_mode = drm_mode_duplicate(bridge->dev, mode); + if (!mhdp_state->current_mode) + return; + drm_mode_set_name(mhdp_state->current_mode); dev_dbg(mhdp->dev, "%s: Enabling mode %s\n", __func__, mode->name); -- 2.17.1

2 1

[PATCH OLK-5.10] power: supply: bq27xxx-i2c: Do not free non existing IRQ
by Guo Mengqi 09 Jul '24

09 Jul '24

From: Hans de Goede <hdegoede(a)redhat.com> stable inclusion from stable-v5.10.212 commit d7acc4a569f5f4513120c85ea2b9f04909b7490f category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q8ME Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 2df70149e73e79783bcbc7db4fa51ecef0e2022c ] The bq27xxx i2c-client may not have an IRQ, in which case client->irq will be 0. bq27xxx_battery_i2c_probe() already has an if (client->irq) check wrapping the request_threaded_irq(). But bq27xxx_battery_i2c_remove() unconditionally calls free_irq(client->irq) leading to: [ 190.310742] ------------[ cut here ]------------ [ 190.310843] Trying to free already-free IRQ 0 [ 190.310861] WARNING: CPU: 2 PID: 1304 at kernel/irq/manage.c:1893 free_irq+0x1b8/0x310 Followed by a backtrace when unbinding the driver. Add an if (client->irq) to bq27xxx_battery_i2c_remove() mirroring probe() to fix this. Fixes: 444ff00734f3 ("power: supply: bq27xxx: Fix I2C IRQ race on remove") Signed-off-by: Hans de Goede <hdegoede(a)redhat.com> Link: https://lore.kernel.org/r/20240215155133.70537-1-hdegoede@redhat.com Signed-off-by: Sebastian Reichel <sebastian.reichel(a)collabora.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Wang Hai <wanghai38(a)huawei.com> --- drivers/power/supply/bq27xxx_battery_i2c.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/drivers/power/supply/bq27xxx_battery_i2c.c b/drivers/power/supply/bq27xxx_battery_i2c.c index 0e32efb10ee7..6fbae8fc2e50 100644 --- a/drivers/power/supply/bq27xxx_battery_i2c.c +++ b/drivers/power/supply/bq27xxx_battery_i2c.c @@ -209,7 +209,9 @@ static int bq27xxx_battery_i2c_remove(struct i2c_client *client) { struct bq27xxx_device_info *di = i2c_get_clientdata(client); - free_irq(client->irq, di); + if (client->irq) + free_irq(client->irq, di); + bq27xxx_battery_teardown(di); mutex_lock(&battery_mutex); -- 2.17.1

2 1

[PATCH openEuler-22.03-LTS-SP1] of: Fix double free in of_parse_phandle_with_args_map
by Guo Mengqi 09 Jul '24

09 Jul '24

From: "Christian A. Ehrhardt" <lk(a)c--e.de> stable inclusion from stable-v5.10.209 commit d5f490343c77e6708b6c4aa7dbbfbcbb9546adea category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q9I4 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… ----------------------------------------- [ Upstream commit 4dde83569832f9377362e50f7748463340c5db6b ] In of_parse_phandle_with_args_map() the inner loop that iterates through the map entries calls of_node_put(new) to free the reference acquired by the previous iteration of the inner loop. This assumes that the value of "new" is NULL on the first iteration of the inner loop. Make sure that this is true in all iterations of the outer loop by setting "new" to NULL after its value is assigned to "cur". Extend the unittest to detect the double free and add an additional test case that actually triggers this path. Fixes: bd6f2fd5a1 ("of: Support parsing phandle argument lists through a nexus node") Cc: Stephen Boyd <stephen.boyd(a)linaro.org> Signed-off-by: "Christian A. Ehrhardt" <lk(a)c--e.de> Link: https://lore.kernel.org/r/20231229105411.1603434-1-lk@c--e.de Signed-off-by: Rob Herring <robh(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Wang Wensheng <wangwensheng4(a)huawei.com> --- drivers/of/base.c | 1 + drivers/of/unittest-data/tests-phandle.dtsi | 10 ++- drivers/of/unittest.c | 74 ++++++++++++--------- 3 files changed, 53 insertions(+), 32 deletions(-) diff --git a/drivers/of/base.c b/drivers/of/base.c index a44a0e7ba251..64600a9b18e8 100644 --- a/drivers/of/base.c +++ b/drivers/of/base.c @@ -1670,6 +1670,7 @@ int of_parse_phandle_with_args_map(const struct device_node *np, out_args->np = new; of_node_put(cur); cur = new; + new = NULL; } put: of_node_put(cur); diff --git a/drivers/of/unittest-data/tests-phandle.dtsi b/drivers/of/unittest-data/tests-phandle.dtsi index 6b33be4c4416..aa0d7027ffa6 100644 --- a/drivers/of/unittest-data/tests-phandle.dtsi +++ b/drivers/of/unittest-data/tests-phandle.dtsi @@ -38,6 +38,13 @@ phandle-map-pass-thru = <0x0 0xf0>; }; + provider5: provider5 { + #phandle-cells = <2>; + phandle-map = <2 7 &provider4 2 3>; + phandle-map-mask = <0xff 0xf>; + phandle-map-pass-thru = <0x0 0xf0>; + }; + consumer-a { phandle-list = <&provider1 1>, <&provider2 2 0>, @@ -64,7 +71,8 @@ <&provider4 4 0x100>, <&provider4 0 0x61>, <&provider0>, - <&provider4 19 0x20>; + <&provider4 19 0x20>, + <&provider5 2 7>; phandle-list-bad-phandle = <12345678 0 0>; phandle-list-bad-args = <&provider2 1 0>, <&provider4 0>; diff --git a/drivers/of/unittest.c b/drivers/of/unittest.c index 5407bbdb6439..19442d5e2bb0 100644 --- a/drivers/of/unittest.c +++ b/drivers/of/unittest.c @@ -447,6 +447,9 @@ static void __init of_unittest_parse_phandle_with_args(void) unittest(passed, "index %i - data error on node %pOF rc=%i\n", i, args.np, rc); + + if (rc == 0) + of_node_put(args.np); } /* Check for missing list property */ @@ -536,8 +539,9 @@ static void __init of_unittest_parse_phandle_with_args(void) static void __init of_unittest_parse_phandle_with_args_map(void) { - struct device_node *np, *p0, *p1, *p2, *p3; + struct device_node *np, *p[6] = {}; struct of_phandle_args args; + unsigned int prefs[6]; int i, rc; np = of_find_node_by_path("/testcase-data/phandle-tests/consumer-b"); @@ -546,34 +550,24 @@ static void __init of_unittest_parse_phandle_with_args_map(void) return; } - p0 = of_find_node_by_path("/testcase-data/phandle-tests/provider0"); - if (!p0) { - pr_err("missing testcase data\n"); - return; - } - - p1 = of_find_node_by_path("/testcase-data/phandle-tests/provider1"); - if (!p1) { - pr_err("missing testcase data\n"); - return; - } - - p2 = of_find_node_by_path("/testcase-data/phandle-tests/provider2"); - if (!p2) { - pr_err("missing testcase data\n"); - return; - } - - p3 = of_find_node_by_path("/testcase-data/phandle-tests/provider3"); - if (!p3) { - pr_err("missing testcase data\n"); - return; + p[0] = of_find_node_by_path("/testcase-data/phandle-tests/provider0"); + p[1] = of_find_node_by_path("/testcase-data/phandle-tests/provider1"); + p[2] = of_find_node_by_path("/testcase-data/phandle-tests/provider2"); + p[3] = of_find_node_by_path("/testcase-data/phandle-tests/provider3"); + p[4] = of_find_node_by_path("/testcase-data/phandle-tests/provider4"); + p[5] = of_find_node_by_path("/testcase-data/phandle-tests/provider5"); + for (i = 0; i < ARRAY_SIZE(p); ++i) { + if (!p[i]) { + pr_err("missing testcase data\n"); + return; + } + prefs[i] = kref_read(&p[i]->kobj.kref); } rc = of_count_phandle_with_args(np, "phandle-list", "#phandle-cells"); - unittest(rc == 7, "of_count_phandle_with_args() returned %i, expected 7\n", rc); + unittest(rc == 8, "of_count_phandle_with_args() returned %i, expected 7\n", rc); - for (i = 0; i < 8; i++) { + for (i = 0; i < 9; i++) { bool passed = true; memset(&args, 0, sizeof(args)); @@ -584,13 +578,13 @@ static void __init of_unittest_parse_phandle_with_args_map(void) switch (i) { case 0: passed &= !rc; - passed &= (args.np == p1); + passed &= (args.np == p[1]); passed &= (args.args_count == 1); passed &= (args.args[0] == 1); break; case 1: passed &= !rc; - passed &= (args.np == p3); + passed &= (args.np == p[3]); passed &= (args.args_count == 3); passed &= (args.args[0] == 2); passed &= (args.args[1] == 5); @@ -601,28 +595,36 @@ static void __init of_unittest_parse_phandle_with_args_map(void) break; case 3: passed &= !rc; - passed &= (args.np == p0); + passed &= (args.np == p[0]); passed &= (args.args_count == 0); break; case 4: passed &= !rc; - passed &= (args.np == p1); + passed &= (args.np == p[1]); passed &= (args.args_count == 1); passed &= (args.args[0] == 3); break; case 5: passed &= !rc; - passed &= (args.np == p0); + passed &= (args.np == p[0]); passed &= (args.args_count == 0); break; case 6: passed &= !rc; - passed &= (args.np == p2); + passed &= (args.np == p[2]); passed &= (args.args_count == 2); passed &= (args.args[0] == 15); passed &= (args.args[1] == 0x20); break; case 7: + passed &= !rc; + passed &= (args.np == p[3]); + passed &= (args.args_count == 3); + passed &= (args.args[0] == 2); + passed &= (args.args[1] == 5); + passed &= (args.args[2] == 3); + break; + case 8: passed &= (rc == -ENOENT); break; default: @@ -631,6 +633,9 @@ static void __init of_unittest_parse_phandle_with_args_map(void) unittest(passed, "index %i - data error on node %s rc=%i\n", i, args.np->full_name, rc); + + if (rc == 0) + of_node_put(args.np); } /* Check for missing list property */ @@ -677,6 +682,13 @@ static void __init of_unittest_parse_phandle_with_args_map(void) "OF: /testcase-data/phandle-tests/consumer-b: #phandle-cells = 2 found -1"); unittest(rc == -EINVAL, "expected:%i got:%i\n", -EINVAL, rc); + + for (i = 0; i < ARRAY_SIZE(p); ++i) { + unittest(prefs[i] == kref_read(&p[i]->kobj.kref), + "provider%d: expected:%d got:%d\n", + i, prefs[i], kref_read(&p[i]->kobj.kref)); + of_node_put(p[i]); + } } static void __init of_unittest_property_string(void) -- 2.17.1

2 1

[PATCH openEuler-22.03-LTS-SP1 v2 0/3] CVE-2024-38598
by Li Nan 09 Jul '24

09 Jul '24

Li Nan (2): Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter" md/raid10: check slab-out-of-bounds in md_bitmap_get_counter Yu Kuai (1): md: fix resync softlockup when bitmap size is less than array size drivers/md/md-bitmap.c | 24 +++++++++++------------- 1 file changed, 11 insertions(+), 13 deletions(-) -- 2.39.2

2 4

[PATCH OLK-6.6] xfs: fix log recovery buffer allocation for the legacy h_size fixup
by Long Li 09 Jul '24

09 Jul '24

From: Christoph Hellwig <hch(a)lst.de> mainline inclusion from mainline-v6.9-rc4 commit 45cf976008ddef4a9c9a30310c9b4fb2a9a6602a category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB0JY CVE: CVE-2024-39472 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Commit a70f9fe52daa ("xfs: detect and handle invalid iclog size set by mkfs") added a fixup for incorrect h_size values used for the initial umount record in old xfsprogs versions. Later commit 0c771b99d6c9 ("xfs: clean up calculation of LR header blocks") cleaned up the log reover buffer calculation, but stoped using the fixed up h_size value to size the log recovery buffer, which can lead to an out of bounds access when the incorrect h_size does not come from the old mkfs tool, but a fuzzer. Fix this by open coding xlog_logrec_hblks and taking the fixed h_size into account for this calculation. Fixes: 0c771b99d6c9 ("xfs: clean up calculation of LR header blocks") Reported-by: Sam Sun <samsun1006219(a)gmail.com> Signed-off-by: Christoph Hellwig <hch(a)lst.de> Reviewed-by: Brian Foster <bfoster(a)redhat.com> Reviewed-by: "Darrick J. Wong" <djwong(a)kernel.org> Signed-off-by: Chandan Babu R <chandanbabu(a)kernel.org> Conflicts: fs/xfs/xfs_log_recover.c [Conflicts due to mainline code use kvfree() in context] Signed-off-by: Long Li <leo.lilong(a)huawei.com> --- fs/xfs/xfs_log_recover.c | 20 ++++++++++++++------ 1 file changed, 14 insertions(+), 6 deletions(-) diff --git a/fs/xfs/xfs_log_recover.c b/fs/xfs/xfs_log_recover.c index a875c7237e2d..28acda900f03 100644 --- a/fs/xfs/xfs_log_recover.c +++ b/fs/xfs/xfs_log_recover.c @@ -2985,7 +2985,7 @@ xlog_do_recovery_pass( int error = 0, h_size, h_len; int error2 = 0; int bblks, split_bblks; - int hblks, split_hblks, wrapped_hblks; + int hblks = 1, split_hblks, wrapped_hblks; int i; struct hlist_head rhash[XLOG_RHASH_SIZE]; LIST_HEAD (buffer_list); @@ -3041,14 +3041,22 @@ xlog_do_recovery_pass( if (error) goto bread_err1; - hblks = xlog_logrec_hblks(log, rhead); - if (hblks != 1) { - kmem_free(hbp); - hbp = xlog_alloc_buffer(log, hblks); + /* + * This open codes xlog_logrec_hblks so that we can reuse the + * fixed up h_size value calculated above. Without that we'd + * still allocate the buffer based on the incorrect on-disk + * size. + */ + if (h_size > XLOG_HEADER_CYCLE_SIZE && + (rhead->h_version & cpu_to_be32(XLOG_VERSION_2))) { + hblks = DIV_ROUND_UP(h_size, XLOG_HEADER_CYCLE_SIZE); + if (hblks > 1) { + kmem_free(hbp); + hbp = xlog_alloc_buffer(log, hblks); + } } } else { ASSERT(log->l_sectBBsize == 1); - hblks = 1; hbp = xlog_alloc_buffer(log, 1); h_size = XLOG_BIG_RECORD_BSIZE; } -- 2.39.2

2 1

[PATCH openEuler-22.03-LTS-SP1] xfs: fix log recovery buffer allocation for the legacy h_size fixup
by Long Li 09 Jul '24

09 Jul '24

From: Christoph Hellwig <hch(a)lst.de> mainline inclusion from mainline-v6.9-rc4 commit 45cf976008ddef4a9c9a30310c9b4fb2a9a6602a category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB0JY CVE: CVE-2024-39472 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Commit a70f9fe52daa ("xfs: detect and handle invalid iclog size set by mkfs") added a fixup for incorrect h_size values used for the initial umount record in old xfsprogs versions. Later commit 0c771b99d6c9 ("xfs: clean up calculation of LR header blocks") cleaned up the log reover buffer calculation, but stoped using the fixed up h_size value to size the log recovery buffer, which can lead to an out of bounds access when the incorrect h_size does not come from the old mkfs tool, but a fuzzer. Fix this by open coding xlog_logrec_hblks and taking the fixed h_size into account for this calculation. Fixes: 0c771b99d6c9 ("xfs: clean up calculation of LR header blocks") Reported-by: Sam Sun <samsun1006219(a)gmail.com> Signed-off-by: Christoph Hellwig <hch(a)lst.de> Reviewed-by: Brian Foster <bfoster(a)redhat.com> Reviewed-by: "Darrick J. Wong" <djwong(a)kernel.org> Signed-off-by: Chandan Babu R <chandanbabu(a)kernel.org> Conflicts: fs/xfs/xfs_log_recover.c [Conflicts due to mainline code use kvfree() in context] Signed-off-by: Long Li <leo.lilong(a)huawei.com> --- fs/xfs/xfs_log_recover.c | 20 ++++++++++++++------ 1 file changed, 14 insertions(+), 6 deletions(-) diff --git a/fs/xfs/xfs_log_recover.c b/fs/xfs/xfs_log_recover.c index 331f568834a1..898c65b77457 100644 --- a/fs/xfs/xfs_log_recover.c +++ b/fs/xfs/xfs_log_recover.c @@ -2952,7 +2952,7 @@ xlog_do_recovery_pass( int error = 0, h_size, h_len; int error2 = 0; int bblks, split_bblks; - int hblks, split_hblks, wrapped_hblks; + int hblks = 1, split_hblks, wrapped_hblks; int i; struct hlist_head rhash[XLOG_RHASH_SIZE]; LIST_HEAD (buffer_list); @@ -3008,14 +3008,22 @@ xlog_do_recovery_pass( if (error) goto bread_err1; - hblks = xlog_logrec_hblks(log, rhead); - if (hblks != 1) { - kmem_free(hbp); - hbp = xlog_alloc_buffer(log, hblks); + /* + * This open codes xlog_logrec_hblks so that we can reuse the + * fixed up h_size value calculated above. Without that we'd + * still allocate the buffer based on the incorrect on-disk + * size. + */ + if (h_size > XLOG_HEADER_CYCLE_SIZE && + (rhead->h_version & cpu_to_be32(XLOG_VERSION_2))) { + hblks = DIV_ROUND_UP(h_size, XLOG_HEADER_CYCLE_SIZE); + if (hblks > 1) { + kmem_free(hbp); + hbp = xlog_alloc_buffer(log, hblks); + } } } else { ASSERT(log->l_sectBBsize == 1); - hblks = 1; hbp = xlog_alloc_buffer(log, 1); h_size = XLOG_BIG_RECORD_BSIZE; } -- 2.39.2

2 1

[PATCH OLK-5.10] xfs: fix log recovery buffer allocation for the legacy h_size fixup
by Long Li 09 Jul '24

09 Jul '24

From: Christoph Hellwig <hch(a)lst.de> mainline inclusion from mainline-v6.9-rc4 commit 45cf976008ddef4a9c9a30310c9b4fb2a9a6602a category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB0JY CVE: CVE-2024-39472 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Commit a70f9fe52daa ("xfs: detect and handle invalid iclog size set by mkfs") added a fixup for incorrect h_size values used for the initial umount record in old xfsprogs versions. Later commit 0c771b99d6c9 ("xfs: clean up calculation of LR header blocks") cleaned up the log reover buffer calculation, but stoped using the fixed up h_size value to size the log recovery buffer, which can lead to an out of bounds access when the incorrect h_size does not come from the old mkfs tool, but a fuzzer. Fix this by open coding xlog_logrec_hblks and taking the fixed h_size into account for this calculation. Fixes: 0c771b99d6c9 ("xfs: clean up calculation of LR header blocks") Reported-by: Sam Sun <samsun1006219(a)gmail.com> Signed-off-by: Christoph Hellwig <hch(a)lst.de> Reviewed-by: Brian Foster <bfoster(a)redhat.com> Reviewed-by: "Darrick J. Wong" <djwong(a)kernel.org> Signed-off-by: Chandan Babu R <chandanbabu(a)kernel.org> Conflicts: fs/xfs/xfs_log_recover.c [Conflicts due to mainline code use kvfree() in context] Signed-off-by: Long Li <leo.lilong(a)huawei.com> --- fs/xfs/xfs_log_recover.c | 20 ++++++++++++++------ 1 file changed, 14 insertions(+), 6 deletions(-) diff --git a/fs/xfs/xfs_log_recover.c b/fs/xfs/xfs_log_recover.c index 331f568834a1..898c65b77457 100644 --- a/fs/xfs/xfs_log_recover.c +++ b/fs/xfs/xfs_log_recover.c @@ -2952,7 +2952,7 @@ xlog_do_recovery_pass( int error = 0, h_size, h_len; int error2 = 0; int bblks, split_bblks; - int hblks, split_hblks, wrapped_hblks; + int hblks = 1, split_hblks, wrapped_hblks; int i; struct hlist_head rhash[XLOG_RHASH_SIZE]; LIST_HEAD (buffer_list); @@ -3008,14 +3008,22 @@ xlog_do_recovery_pass( if (error) goto bread_err1; - hblks = xlog_logrec_hblks(log, rhead); - if (hblks != 1) { - kmem_free(hbp); - hbp = xlog_alloc_buffer(log, hblks); + /* + * This open codes xlog_logrec_hblks so that we can reuse the + * fixed up h_size value calculated above. Without that we'd + * still allocate the buffer based on the incorrect on-disk + * size. + */ + if (h_size > XLOG_HEADER_CYCLE_SIZE && + (rhead->h_version & cpu_to_be32(XLOG_VERSION_2))) { + hblks = DIV_ROUND_UP(h_size, XLOG_HEADER_CYCLE_SIZE); + if (hblks > 1) { + kmem_free(hbp); + hbp = xlog_alloc_buffer(log, hblks); + } } } else { ASSERT(log->l_sectBBsize == 1); - hblks = 1; hbp = xlog_alloc_buffer(log, 1); h_size = XLOG_BIG_RECORD_BSIZE; } -- 2.39.2

2 1

[PATCH openEuler-1.0-LTS] net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
by Zhengchao Shao 09 Jul '24

09 Jul '24

From: Pavel Skripkin <paskripkin(a)gmail.com> mainline inclusion from mainline-v5.16-rc2 commit 9b5a333272a48c2f8b30add7a874e46e8b26129c category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNEY CVE: CVE-2021-47204 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Access to netdev after free_netdev() will cause use-after-free bug. Move debug log before free_netdev() call to avoid it. Fixes: 7472dd9f6499 ("staging: fsl-dpaa2/eth: Move print message") Signed-off-by: Pavel Skripkin <paskripkin(a)gmail.com> Signed-off-by: David S. Miller <davem(a)davemloft.net> Conflicts: drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c [The conflict occurs because the commit 34ff68465a17("dpaa2-eth: Move DPAA2 Ethernet driver from staging to drivers/net") is not merged] Signed-off-by: Zhengchao Shao <shaozhengchao(a)huawei.com> --- drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c b/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c index 9329fcad95ac..2f8f1f3f1bcd 100644 --- a/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c +++ b/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c @@ -2632,10 +2632,10 @@ static int dpaa2_eth_remove(struct fsl_mc_device *ls_dev) fsl_mc_portal_free(priv->mc_io); - free_netdev(net_dev); - dev_dbg(net_dev->dev.parent, "Removed interface %s\n", net_dev->name); + free_netdev(net_dev); + return 0; } -- 2.34.1

2 1

[PATCH OLK-6.6] ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension
by Xiongfeng Wang 09 Jul '24

09 Jul '24

From: Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> mainline inclusion from mainline-v6.10-rc2 commit ffa077b2f6ad124ec3d23fbddc5e4b0ff2647af8 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB05U CVE: CVE-2024-39473 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- If a process module does not have base config extension then the same format applies to all of it's inputs and the process->base_config_ext is NULL, causing NULL dereference when specifically crafted topology and sequences used. Fixes: 648fea128476 ("ASoC: SOF: ipc4-topology: set copier output format for process module") Signed-off-by: Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> Reviewed-by: Pierre-Louis Bossart <pierre-louis.bossart(a)linux.intel.com> Reviewed-by: Seppo Ingalsuo <seppo.ingalsuo(a)linux.intel.com> Reviewed-by: Ranjani Sridharan <ranjani.sridharan(a)linux.intel.com> Cc: stable(a)vger.kernel.org Link: https://msgid.link/r/20240529121201.14687-1-peter.ujfalusi@linux.intel.com Signed-off-by: Mark Brown <broonie(a)kernel.org> Signed-off-by: Xiongfeng Wang <wangxiongfeng2(a)huawei.com> --- sound/soc/sof/ipc4-topology.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/sound/soc/sof/ipc4-topology.c b/sound/soc/sof/ipc4-topology.c index 2c075afd237c..78ff129be772 100644 --- a/sound/soc/sof/ipc4-topology.c +++ b/sound/soc/sof/ipc4-topology.c @@ -195,6 +195,14 @@ sof_ipc4_get_input_pin_audio_fmt(struct snd_sof_widget *swidget, int pin_index) } process = swidget->private; + + /* + * For process modules without base config extension, base module config + * format is used for all input pins + */ + if (process->init_config != SOF_IPC4_MODULE_INIT_CONFIG_TYPE_BASE_CFG_WITH_EXT) + return &process->base_config.audio_fmt; + base_cfg_ext = process->base_config_ext; /* -- 2.20.1

2 1

[PATCH openEuler-22.03-LTS-SP1 0/1] cgroup: Fix AA deadlock caused by cgroup_bpf_release
by Chen Ridong 09 Jul '24

09 Jul '24

*** BLURB HERE *** Chen Ridong (1): cgroup: Fix AA deadlock caused by cgroup_bpf_release kernel/bpf/cgroup.c | 2 +- kernel/cgroup/cgroup-internal.h | 1 + kernel/cgroup/cgroup.c | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) -- 2.34.1

2 2

[PATCH OLK-5.10 0/1] cgroup: Fix AA deadlock caused by cgroup_bpf_release
by Chen Ridong 09 Jul '24

09 Jul '24

*** BLURB HERE *** Chen Ridong (1): cgroup: Fix AA deadlock caused by cgroup_bpf_release kernel/bpf/cgroup.c | 2 +- kernel/cgroup/cgroup-internal.h | 1 + kernel/cgroup/cgroup.c | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) -- 2.34.1

2 2

[PATCH OLK-6.6 0/1] cgroup: Fix AA deadlock caused by cgroup_bpf_release
by Chen Ridong 09 Jul '24

09 Jul '24

*** BLURB HERE *** Chen Ridong (1): cgroup: Fix AA deadlock caused by cgroup_bpf_release kernel/bpf/cgroup.c | 2 +- kernel/cgroup/cgroup-internal.h | 1 + kernel/cgroup/cgroup.c | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) -- 2.34.1

2 2

[PATCH openEuler-1.0-LTS] net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
by Zhengchao Shao 09 Jul '24

09 Jul '24

From: Pavel Skripkin <paskripkin(a)gmail.com> mainline inclusion from mainline-v5.16-rc2 commit 9b5a333272a48c2f8b30add7a874e46e8b26129c category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNEY CVE: CVE-2021-47204 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Access to netdev after free_netdev() will cause use-after-free bug. Move debug log before free_netdev() call to avoid it. Fixes: 7472dd9f6499 ("staging: fsl-dpaa2/eth: Move print message") Signed-off-by: Pavel Skripkin <paskripkin(a)gmail.com> Signed-off-by: David S. Miller <davem(a)davemloft.net> Conflicts: drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c [The conflict occurs because the commit 34ff68465a17("dpaa2-eth: Move DPAA2 Ethernet driver from staging to drivers/net") is not merged] Signed-off-by: Zhengchao Shao <shaozhengchao(a)huawei.com> --- drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c b/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c index 9329fcad95ac..2f8f1f3f1bcd 100644 --- a/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c +++ b/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c @@ -2632,10 +2632,10 @@ static int dpaa2_eth_remove(struct fsl_mc_device *ls_dev) fsl_mc_portal_free(priv->mc_io); - free_netdev(net_dev); - dev_dbg(net_dev->dev.parent, "Removed interface %s\n", net_dev->name); + free_netdev(net_dev); + return 0; } -- 2.34.1

2 1

[PATCH OLK-5.10] fpga: manager: add owner module and take its refcount
by Liu Chuang 09 Jul '24

09 Jul '24

From: Marco Pagani <marpagan(a)redhat.com> mainline inclusion from mainline-v6.10-rc1 commit 4d4d2d4346857bf778fafaa97d6f76bb1663e3c9 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA7YM1 CVE: CVE-2024-37021 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- The current implementation of the fpga manager assumes that the low-level module registers a driver for the parent device and uses its owner pointer to take the module's refcount. This approach is problematic since it can lead to a null pointer dereference while attempting to get the manager if the parent device does not have a driver. To address this problem, add a module owner pointer to the fpga_manager struct and use it to take the module's refcount. Modify the functions for registering the manager to take an additional owner module parameter and rename them to avoid conflicts. Use the old function names for helper macros that automatically set the module that registers the manager as the owner. This ensures compatibility with existing low-level control modules and reduces the chances of registering a manager without setting the owner. Also, update the documentation to keep it consistent with the new interface for registering an fpga manager. Other changes: opportunistically move put_device() from __fpga_mgr_get() to fpga_mgr_get() and of_fpga_mgr_get() to improve code clarity since the manager device is taken in these functions. Fixes: 654ba4cc0f3e ("fpga manager: ensure lifetime with of_fpga_mgr_get") Suggested-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Suggested-by: Xu Yilun <yilun.xu(a)intel.com> Signed-off-by: Marco Pagani <marpagan(a)redhat.com> Acked-by: Xu Yilun <yilun.xu(a)intel.com> Link: https://lore.kernel.org/r/20240305192926.84886-1-marpagan@redhat.com Signed-off-by: Xu Yilun <yilun.xu(a)linux.intel.com> Conflicts: drivers/fpga/fpga-mgr.c include/linux/fpga/fpga-mgr.h Documentation/driver-api/fpga/fpga-mgr.rst [Liu Chuang: add owner module.] Signed-off-by: Liu Chuang <liuchuang40(a)huawei.com> --- drivers/fpga/fpga-mgr.c | 62 ++++++++++++++++++++--------------- include/linux/fpga/fpga-mgr.h | 14 +++++--- 2 files changed, 46 insertions(+), 30 deletions(-) diff --git a/drivers/fpga/fpga-mgr.c b/drivers/fpga/fpga-mgr.c index f38bab01432e..f65ea09af2fb 100644 --- a/drivers/fpga/fpga-mgr.c +++ b/drivers/fpga/fpga-mgr.c @@ -444,20 +444,15 @@ static struct attribute *fpga_mgr_attrs[] = { }; ATTRIBUTE_GROUPS(fpga_mgr); -static struct fpga_manager *__fpga_mgr_get(struct device *dev) +static struct fpga_manager *__fpga_mgr_get(struct device *mgr_dev) { struct fpga_manager *mgr; - mgr = to_fpga_manager(dev); - - if (!try_module_get(dev->parent->driver->owner)) - goto err_dev; + mgr = to_fpga_manager(mgr_dev); + if (!try_module_get(mgr->mops_owner)) + mgr = ERR_PTR(-ENODEV); return mgr; - -err_dev: - put_device(dev); - return ERR_PTR(-ENODEV); } static int fpga_mgr_dev_match(struct device *dev, const void *data) @@ -473,12 +468,18 @@ static int fpga_mgr_dev_match(struct device *dev, const void *data) */ struct fpga_manager *fpga_mgr_get(struct device *dev) { - struct device *mgr_dev = class_find_device(fpga_mgr_class, NULL, dev, - fpga_mgr_dev_match); + struct fpga_manager *mgr; + struct device *mgr_dev; + + mgr_dev = class_find_device(fpga_mgr_class, NULL, dev, fpga_mgr_dev_match); if (!mgr_dev) return ERR_PTR(-ENODEV); - return __fpga_mgr_get(mgr_dev); + mgr = __fpga_mgr_get(mgr_dev); + if (IS_ERR(mgr)) + put_device(mgr_dev); + + return mgr; } EXPORT_SYMBOL_GPL(fpga_mgr_get); @@ -491,13 +492,18 @@ EXPORT_SYMBOL_GPL(fpga_mgr_get); */ struct fpga_manager *of_fpga_mgr_get(struct device_node *node) { - struct device *dev; + struct fpga_manager *mgr; + struct device *mgr_dev; - dev = class_find_device_by_of_node(fpga_mgr_class, node); - if (!dev) + mgr_dev = class_find_device_by_of_node(fpga_mgr_class, node); + if (!mgr_dev) return ERR_PTR(-ENODEV); - return __fpga_mgr_get(dev); + mgr = __fpga_mgr_get(mgr_dev); + if (IS_ERR(mgr)) + put_device(mgr_dev); + + return mgr; } EXPORT_SYMBOL_GPL(of_fpga_mgr_get); @@ -507,7 +513,7 @@ EXPORT_SYMBOL_GPL(of_fpga_mgr_get); */ void fpga_mgr_put(struct fpga_manager *mgr) { - module_put(mgr->dev.parent->driver->owner); + module_put(mgr->mops_owner); put_device(&mgr->dev); } EXPORT_SYMBOL_GPL(fpga_mgr_put); @@ -546,20 +552,21 @@ void fpga_mgr_unlock(struct fpga_manager *mgr) EXPORT_SYMBOL_GPL(fpga_mgr_unlock); /** - * fpga_mgr_create - create and initialize a FPGA manager struct + * __fpga_mgr_create - create and initialize a FPGA manager struct * @dev: fpga manager device from pdev * @name: fpga manager name * @mops: pointer to structure of fpga manager ops * @priv: fpga manager private data + * @owner: owner module containing the ops * * The caller of this function is responsible for freeing the struct with * fpga_mgr_free(). Using devm_fpga_mgr_create() instead is recommended. * * Return: pointer to struct fpga_manager or NULL */ -struct fpga_manager *fpga_mgr_create(struct device *dev, const char *name, +struct fpga_manager *__fpga_mgr_create(struct device *dev, const char *name, const struct fpga_manager_ops *mops, - void *priv) + void *priv, struct module *owner) { struct fpga_manager *mgr; int id, ret; @@ -586,6 +593,8 @@ struct fpga_manager *fpga_mgr_create(struct device *dev, const char *name, mutex_init(&mgr->ref_mutex); + mgr->mops_owner = owner; + mgr->name = name; mgr->mops = mops; mgr->priv = priv; @@ -610,7 +619,7 @@ struct fpga_manager *fpga_mgr_create(struct device *dev, const char *name, return NULL; } -EXPORT_SYMBOL_GPL(fpga_mgr_create); +EXPORT_SYMBOL_GPL(__fpga_mgr_create); /** * fpga_mgr_free - free a FPGA manager created with fpga_mgr_create() @@ -631,11 +640,12 @@ static void devm_fpga_mgr_release(struct device *dev, void *res) } /** - * devm_fpga_mgr_create - create and initialize a managed FPGA manager struct + * __devm_fpga_mgr_create - create and initialize a managed FPGA manager struct * @dev: fpga manager device from pdev * @name: fpga manager name * @mops: pointer to structure of fpga manager ops * @priv: fpga manager private data + * @owner: owner module containing the ops * * This function is intended for use in a FPGA manager driver's probe function. * After the manager driver creates the manager struct with @@ -647,9 +657,9 @@ static void devm_fpga_mgr_release(struct device *dev, void *res) * * Return: pointer to struct fpga_manager or NULL */ -struct fpga_manager *devm_fpga_mgr_create(struct device *dev, const char *name, +struct fpga_manager *__devm_fpga_mgr_create(struct device *dev, const char *name, const struct fpga_manager_ops *mops, - void *priv) + void *priv, struct module *owner) { struct fpga_manager **ptr, *mgr; @@ -657,7 +667,7 @@ struct fpga_manager *devm_fpga_mgr_create(struct device *dev, const char *name, if (!ptr) return NULL; - mgr = fpga_mgr_create(dev, name, mops, priv); + mgr = __fpga_mgr_create(dev, name, mops, priv, owner); if (!mgr) { devres_free(ptr); } else { @@ -667,7 +677,7 @@ struct fpga_manager *devm_fpga_mgr_create(struct device *dev, const char *name, return mgr; } -EXPORT_SYMBOL_GPL(devm_fpga_mgr_create); +EXPORT_SYMBOL_GPL(__devm_fpga_mgr_create); /** * fpga_mgr_register - register a FPGA manager diff --git a/include/linux/fpga/fpga-mgr.h b/include/linux/fpga/fpga-mgr.h index e8ca62b2cb5b..7c97e1c359b0 100644 --- a/include/linux/fpga/fpga-mgr.h +++ b/include/linux/fpga/fpga-mgr.h @@ -162,6 +162,7 @@ struct fpga_compat_id { * @state: state of fpga manager * @compat_id: FPGA manager id for compatibility check. * @mops: pointer to struct of fpga manager ops + * @mops_owner: module containing the mops * @priv: low level driver private date */ struct fpga_manager { @@ -171,6 +172,7 @@ struct fpga_manager { enum fpga_mgr_states state; struct fpga_compat_id *compat_id; const struct fpga_manager_ops *mops; + struct module *mops_owner; void *priv; }; @@ -191,15 +193,19 @@ struct fpga_manager *fpga_mgr_get(struct device *dev); void fpga_mgr_put(struct fpga_manager *mgr); -struct fpga_manager *fpga_mgr_create(struct device *dev, const char *name, +#define fpga_mgr_create(dev, name, mops, priv) \ + __fpga_mgr_create(dev, name, mops, priv, THIS_MODULE) +struct fpga_manager *__fpga_mgr_create(struct device *dev, const char *name, const struct fpga_manager_ops *mops, - void *priv); + void *priv, struct module *owner); void fpga_mgr_free(struct fpga_manager *mgr); int fpga_mgr_register(struct fpga_manager *mgr); void fpga_mgr_unregister(struct fpga_manager *mgr); -struct fpga_manager *devm_fpga_mgr_create(struct device *dev, const char *name, +#define devm_fpga_mgr_create(dev, name, mops, priv) \ + __devm_fpga_mgr_create(dev, name, mops, priv, THIS_MODULE) +struct fpga_manager *__devm_fpga_mgr_create(struct device *dev, const char *name, const struct fpga_manager_ops *mops, - void *priv); + void *priv, struct module *owner); #endif /*_LINUX_FPGA_MGR_H */ -- 2.34.1

2 1

[PATCH] Support selecting congestion control algorithms.
by Chengchang Tang 09 Jul '24

09 Jul '24

From: Xinghai Cen <cenxinghai(a)h-partners.com> Support configuring congestion control algorithms with hns direct verbs. New option: --congest_type Usage example: ./ib_send_bw -d hns_0 --congest_type=DCQCN ./ib_send_bw -d hns_0 --congest_type=DCQCN 192.168.100.100 update perftest.spec. Signed-off-by:Xinghai Cen <cenxinghai(a)partners.com> --- ...-selecting-congestion-control-algori.patch | 276 ++++++++++++++++++ perftest.spec | 9 +- 2 files changed, 284 insertions(+), 1 deletion(-) create mode 100644 0010-Perftest-Support-selecting-congestion-control-algori.patch diff --git a/0010-Perftest-Support-selecting-congestion-control-algori.patch b/0010-Perftest-Support-selecting-congestion-control-algori.patch new file mode 100644 index 0000000..ba539b2 --- /dev/null +++ b/0010-Perftest-Support-selecting-congestion-control-algori.patch @@ -0,0 +1,276 @@ +From d3d89123a650aa400be38d6ac939202a909783d4 Mon Sep 17 00:00:00 2001 +From: Guofeng Yue <yueguofeng(a)h-partners.com> +Date: Fri, 28 Jun 2024 10:56:09 +0800 +Subject: [PATCH] Perftest: Support selecting congestion control algorithms + +Support configuring congestion control algorithms with hns direct verbs. + + New option: --congest_type + + Usage example: + ./ib_send_bw -d hns_0 --congest_type=DCQCN + ./ib_send_bw -d hns_0 --congest_type=DCQCN 192.168.100.100 + +Signed-off-by: Guofeng Yue <yueguofeng(a)h-partners.com> +Signed-off-by: Junxian Huang <huangjunxian6(a)hisilicon.com> +--- + Makefile.am | 24 ++++++++--------- + configure.ac | 7 +++++ + src/perftest_parameters.c | 57 +++++++++++++++++++++++++++++++++++++++ + src/perftest_parameters.h | 1 + + src/perftest_resources.c | 12 +++++++++ + src/perftest_resources.h | 3 +++ + 6 files changed, 92 insertions(+), 12 deletions(-) + +diff --git a/Makefile.am b/Makefile.am +index dc3ca41..807e169 100755 +--- a/Makefile.am ++++ b/Makefile.am +@@ -104,41 +104,41 @@ LIBMLX4= + endif + + ib_send_bw_SOURCES = src/send_bw.c src/multicast_resources.c src/multicast_resources.h +-ib_send_bw_LDADD = libperftest.a $(LIBUMAD) $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++ib_send_bw_LDADD = libperftest.a $(LIBUMAD) $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + ib_send_lat_SOURCES = src/send_lat.c src/multicast_resources.c src/multicast_resources.h +-ib_send_lat_LDADD = libperftest.a $(LIBUMAD) $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++ib_send_lat_LDADD = libperftest.a $(LIBUMAD) $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + ib_write_lat_SOURCES = src/write_lat.c +-ib_write_lat_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++ib_write_lat_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + ib_write_bw_SOURCES = src/write_bw.c +-ib_write_bw_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++ib_write_bw_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + ib_read_lat_SOURCES = src/read_lat.c +-ib_read_lat_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++ib_read_lat_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + ib_read_bw_SOURCES = src/read_bw.c +-ib_read_bw_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++ib_read_bw_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + ib_atomic_lat_SOURCES = src/atomic_lat.c +-ib_atomic_lat_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++ib_atomic_lat_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + ib_atomic_bw_SOURCES = src/atomic_bw.c +-ib_atomic_bw_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++ib_atomic_bw_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + if HAVE_RAW_ETH + raw_ethernet_bw_SOURCES = src/raw_ethernet_send_bw.c +-raw_ethernet_bw_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++raw_ethernet_bw_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + raw_ethernet_lat_SOURCES = src/raw_ethernet_send_lat.c +-raw_ethernet_lat_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++raw_ethernet_lat_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + raw_ethernet_burst_lat_SOURCES = src/raw_ethernet_send_burst_lat.c +-raw_ethernet_burst_lat_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++raw_ethernet_burst_lat_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + raw_ethernet_fs_rate_SOURCES = src/raw_ethernet_fs_rate.c +-raw_ethernet_fs_rate_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) ++raw_ethernet_fs_rate_LDADD = libperftest.a $(LIBMATH) $(LIBMLX4) $(LIBMLX5) $(LIBEFA) $(LIBHNS) + + else + raw_ethernet_bw_SOURCES = +diff --git a/configure.ac b/configure.ac +index 71b8382..e59bf39 100755 +--- a/configure.ac ++++ b/configure.ac +@@ -382,6 +382,13 @@ if [test $HAVE_MLX5DV_LIB = yes] && [test $HAVE_MLX5DV = yes]; then + AC_SUBST([LIBMLX5]) + fi + ++AC_CHECK_LIB([hns], [hnsdv_query_device], [HAVE_HNSDV=yes LIBHNS=-lhns], [HAVE_HNSDV=no]) ++AM_CONDITIONAL([HAVE_HNSDV], [test "x$HAVE_HNSDV" = "xyes"]) ++if [test $HAVE_HNSDV = yes]; then ++ AC_DEFINE([HAVE_HNSDV], [1], [Have hns Direct Verbs support]) ++ AC_SUBST([LIBHNS]) ++fi ++ + CFLAGS="-g -Wall -D_GNU_SOURCE -O3 $CFLAGS" + LDFLAGS="$LDFLAGS" + LIBS=$LIBS" -lpthread" +diff --git a/src/perftest_parameters.c b/src/perftest_parameters.c +index dfa7241..cff1336 100755 +--- a/src/perftest_parameters.c ++++ b/src/perftest_parameters.c +@@ -34,6 +34,9 @@ static const char *portStates[] = {"Nop","Down","Init","Armed","","Active Defer" + static const char *qp_state[] = {"OFF","ON"}; + static const char *exchange_state[] = {"Ethernet","rdma_cm"}; + static const char *atomicTypesStr[] = {"CMP_AND_SWAP","FETCH_AND_ADD"}; ++#ifdef HAVE_HNSDV ++static const char *congestStr[] = {"DCQCN","LDCP","HC3","DIP"}; ++#endif + + /****************************************************************************** + * parse_mac_from_str. +@@ -438,6 +441,11 @@ static void usage(const char *argv0, VerbType verb, TestType tst, int connection + printf(" --cpu_util "); + printf(" Show CPU Utilization in report, valid only in Duration mode \n"); + ++ #ifdef HAVE_HNSDV ++ printf(" --congest_type=<DCQCN, LDCP, HC3, DIP> "); ++ printf(" Use the hnsdv interface to set congestion control algorithm.\n"); ++ #endif ++ + if (tst != FS_RATE) { + printf(" --dlid "); + printf(" Set a Destination LID instead of getting it from the other side.\n"); +@@ -863,6 +871,7 @@ static void init_perftest_params(struct perftest_parameters *user_param) + user_param->source_ip = NULL; + user_param->has_source_ip = 0; + user_param->use_write_with_imm = 0; ++ user_param->congest_type = OFF; + } + + static int open_file_write(const char* file_path) +@@ -961,6 +970,25 @@ static void change_conn_type(int *cptr, VerbType verb, const char *optarg) + exit(1); + } + } ++ ++#ifdef HAVE_HNSDV ++static void set_congest_type(int *cgtr, const char *optarg) ++{ ++ if (strcmp(congestStr[0], optarg) == 0) { ++ *cgtr = HNSDV_QP_CREATE_ENABLE_DCQCN; ++ } else if (strcmp(congestStr[1], optarg) == 0) { ++ *cgtr = HNSDV_QP_CREATE_ENABLE_LDCP; ++ } else if (strcmp(congestStr[2], optarg) == 0) { ++ *cgtr = HNSDV_QP_CREATE_ENABLE_HC3; ++ } else if (strcmp(congestStr[3], optarg) == 0) { ++ *cgtr = HNSDV_QP_CREATE_ENABLE_DIP; ++ } else { ++ fprintf(stderr, " Invalid congest type. Please choose from {DCQCN,LDCP,HC3,DIP}\n"); ++ exit(1); ++ } ++} ++#endif ++ + /****************************************************************************** + * + ******************************************************************************/ +@@ -1756,6 +1784,23 @@ static void force_dependecies(struct perftest_parameters *user_param) + } + } + ++ #ifdef HAVE_HNSDV ++ if (user_param->congest_type) { ++ if (user_param->work_rdma_cm == ON) ++ { ++ printf(RESULT_LINE); ++ fprintf(stderr, "rdma_cm does not support setting congest type.\n"); ++ exit(1); ++ } ++ ++ if (user_param->connection_type == XRC || user_param->connection_type == UD) { ++ printf(RESULT_LINE); ++ fprintf(stdout, "XRC/UD does not support setting congest type.\n"); ++ exit(1); ++ } ++ } ++ #endif ++ + return; + } + /****************************************************************************** +@@ -2273,6 +2318,9 @@ int parser(struct perftest_parameters *user_param,char *argv[], int argc) + static int credentials_path_flag = 0; + static int data_enc_key_app_path_flag = 0; + #endif ++ #ifdef HAVE_HNSDV ++ static int congest_type_flag = 0; ++ #endif + + char *server_ip = NULL; + char *client_ip = NULL; +@@ -2426,6 +2474,9 @@ int parser(struct perftest_parameters *user_param,char *argv[], int argc) + #if defined HAVE_OOO_ATTR + {.name = "use_ooo", .has_arg = 0, .flag = &use_ooo_flag, .val = 1}, + #endif ++ #ifdef HAVE_HNSDV ++ { .name = "congest_type", .has_arg = 1, .flag = &congest_type_flag, .val = 1}, ++ #endif + {.name = "bind_source_ip", .has_arg = 1, .flag = &source_ip_flag, .val = 1}, + {.name = "write_with_imm", .has_arg = 0, .flag = &use_write_with_imm_flag, .val = 1 }, + {0} +@@ -2720,6 +2771,12 @@ int parser(struct perftest_parameters *user_param,char *argv[], int argc) + free(duplicates_checker); + return FAILURE; + case 0: /* required for long options to work. */ ++ #ifdef HAVE_HNSDV ++ if (congest_type_flag) { ++ set_congest_type(&user_param->congest_type, optarg); ++ congest_type_flag = 0; ++ } ++ #endif + if (pkey_flag) { + CHECK_VALUE(user_param->pkey_index,int,"Pkey index",not_int_ptr); + pkey_flag = 0; +diff --git a/src/perftest_parameters.h b/src/perftest_parameters.h +index aa476f1..d26253d 100755 +--- a/src/perftest_parameters.h ++++ b/src/perftest_parameters.h +@@ -523,6 +523,7 @@ struct perftest_parameters { + int recv_post_list; + int duration; + int use_srq; ++ int congest_type; + int use_xrc; + int use_rss; + int srq_exists; +diff --git a/src/perftest_resources.c b/src/perftest_resources.c +index eeb679c..be3890c 100755 +--- a/src/perftest_resources.c ++++ b/src/perftest_resources.c +@@ -2219,6 +2219,9 @@ struct ibv_qp* ctx_qp_create(struct pingpong_context *ctx, + struct efadv_qp_init_attr efa_attr = {}; + #endif + #endif ++ #ifdef HAVE_HNSDV ++ struct hnsdv_qp_init_attr hns_attr = {}; ++ #endif + + attr.send_cq = ctx->send_cq; + attr.recv_cq = (user_param->verb == SEND || user_param->verb == WRITE_IMM) ? ctx->recv_cq : ctx->send_cq; +@@ -2382,6 +2385,15 @@ struct ibv_qp* ctx_qp_create(struct pingpong_context *ctx, + #endif // HAVE_AES_XTS + else + #endif // HAVE_MLX5DV ++ ++ #ifdef HAVE_HNSDV ++ if (user_param->congest_type) { ++ hns_attr.comp_mask = HNSDV_QP_INIT_ATTR_MASK_QP_CONGEST_TYPE; ++ hns_attr.congest_type = user_param->congest_type; ++ qp = hnsdv_create_qp(ctx->context, &attr_ex, &hns_attr); ++ } ++ else ++ #endif //HAVE_HNSDV + qp = ibv_create_qp_ex(ctx->context, &attr_ex); + } + else +diff --git a/src/perftest_resources.h b/src/perftest_resources.h +index 12386e2..565deda 100755 +--- a/src/perftest_resources.h ++++ b/src/perftest_resources.h +@@ -55,6 +55,9 @@ + #if defined(HAVE_MLX5DV) + #include <infiniband/mlx5dv.h> + #endif ++#if defined(HAVE_HNSDV) ++#include <infiniband/hnsdv.h> ++#endif + #include <rdma/rdma_cma.h> + #include <stdint.h> + #if defined(__FreeBSD__) +-- +2.33.0 + diff --git a/perftest.spec b/perftest.spec index c49d33d..c34a50b 100644 --- a/perftest.spec +++ b/perftest.spec @@ -1,6 +1,6 @@ Name: perftest Version: 4.5 -Release: 6 +Release: 7 License: GPLv2 or BSD Summary: RDMA Performance Testing Tools Url: https://github.com/linux-rdma/perftest @@ -15,6 +15,7 @@ Patch6: 0006-Perftest-Add-new-HNS-roce-device-ROH-to-support-new_.patch Patch7: 0007-add-loongarch-support-for-perftest.patch Patch8: 0008-Get-CPU-MHz-on-RISC-V.patch Patch9: 0009-Get-CPU-cycles-on-RISC-V.patch +Patch10: 0010-Perftest-Support-selecting-congestion-control-algori.patch BuildRequires: automake gcc libibverbs-devel >= 1.2.0 librdmacm-devel >= 1.0.21 libibumad-devel >= 1.3.10.2 BuildRequires: pciutils-devel libibverbs librdmacm libibumad @@ -41,6 +42,12 @@ done %_bindir/* %changelog +* Mon Jul 8 2024 Xinghai Cen <cenxinghai(a)h-partners.com> - 4.5-7 +- Type: feature +- ID: NA +- SUG: NA +- DESC: support selecting congestion control algorithms + * Fri Jan 19 2024 Chengchang Tang <tangchengchang(a)huawei.com> - 4.5-6 - Type: bugfix - ID: NA -- 2.33.0

1 0

[PATCH OLK-6.6] mmc: davinci: Don't strip remove function when driver is builtin
by Yi Yang 09 Jul '24

09 Jul '24

From: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> stable inclusion from stable-v6.6.34 commit 7590da4c04dd4aa9c262da0231e978263861c6eb category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB0L1 CVE: CVE-2024-39484 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 55c421b364482b61c4c45313a535e61ed5ae4ea3 upstream. Using __exit for the remove function results in the remove callback being discarded with CONFIG_MMC_DAVINCI=y. When such a device gets unbound (e.g. using sysfs or hotplug), the driver is just removed without the cleanup being performed. This results in resource leaks. Fix it by compiling in the remove callback unconditionally. This also fixes a W=1 modpost warning: WARNING: modpost: drivers/mmc/host/davinci_mmc: section mismatch in reference: davinci_mmcsd_driver+0x10 (section: .data) -> davinci_mmcsd_remove (section: .exit.text) Fixes: b4cff4549b7a ("DaVinci: MMC: MMC/SD controller driver for DaVinci family") Signed-off-by: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> Cc: stable(a)vger.kernel.org Link: https://lore.kernel.org/r/20240324114017.231936-2-u.kleine-koenig@pengutron… Signed-off-by: Ulf Hansson <ulf.hansson(a)linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Yi Yang <yiyang13(a)huawei.com> --- drivers/mmc/host/davinci_mmc.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/mmc/host/davinci_mmc.c b/drivers/mmc/host/davinci_mmc.c index ee3b1a4e0848..8fa6796787f4 100644 --- a/drivers/mmc/host/davinci_mmc.c +++ b/drivers/mmc/host/davinci_mmc.c @@ -1344,7 +1344,7 @@ static int davinci_mmcsd_probe(struct platform_device *pdev) return ret; } -static void __exit davinci_mmcsd_remove(struct platform_device *pdev) +static void davinci_mmcsd_remove(struct platform_device *pdev) { struct mmc_davinci_host *host = platform_get_drvdata(pdev); @@ -1399,7 +1399,7 @@ static struct platform_driver davinci_mmcsd_driver = { .of_match_table = davinci_mmc_dt_ids, }, .probe = davinci_mmcsd_probe, - .remove_new = __exit_p(davinci_mmcsd_remove), + .remove_new = davinci_mmcsd_remove, .id_table = davinci_mmc_devtype, }; -- 2.25.1

2 1

[PATCH openEuler-22.03-LTS] mmc: davinci: Don't strip remove function when driver is builtin
by Yi Yang 09 Jul '24

09 Jul '24

From: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> stable inclusion from stable-v5.10.221 commit 6ff7cfa02baabec907f6f29ea76634e6256d2ec4 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB0L1 CVE: CVE-2024-39484 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 55c421b364482b61c4c45313a535e61ed5ae4ea3 ] Using __exit for the remove function results in the remove callback being discarded with CONFIG_MMC_DAVINCI=y. When such a device gets unbound (e.g. using sysfs or hotplug), the driver is just removed without the cleanup being performed. This results in resource leaks. Fix it by compiling in the remove callback unconditionally. This also fixes a W=1 modpost warning: WARNING: modpost: drivers/mmc/host/davinci_mmc: section mismatch in reference: davinci_mmcsd_driver+0x10 (section: .data) -> davinci_mmcsd_remove (section: .exit.text) Fixes: b4cff4549b7a ("DaVinci: MMC: MMC/SD controller driver for DaVinci family") Signed-off-by: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> Cc: stable(a)vger.kernel.org Link: https://lore.kernel.org/r/20240324114017.231936-2-u.kleine-koenig@pengutron… Signed-off-by: Ulf Hansson <ulf.hansson(a)linaro.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Yi Yang <yiyang13(a)huawei.com> --- drivers/mmc/host/davinci_mmc.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/mmc/host/davinci_mmc.c b/drivers/mmc/host/davinci_mmc.c index 647928ab00a3..77258948440f 100644 --- a/drivers/mmc/host/davinci_mmc.c +++ b/drivers/mmc/host/davinci_mmc.c @@ -1347,7 +1347,7 @@ static int davinci_mmcsd_probe(struct platform_device *pdev) return ret; } -static int __exit davinci_mmcsd_remove(struct platform_device *pdev) +static int davinci_mmcsd_remove(struct platform_device *pdev) { struct mmc_davinci_host *host = platform_get_drvdata(pdev); @@ -1404,7 +1404,7 @@ static struct platform_driver davinci_mmcsd_driver = { .of_match_table = davinci_mmc_dt_ids, }, .probe = davinci_mmcsd_probe, - .remove = __exit_p(davinci_mmcsd_remove), + .remove = davinci_mmcsd_remove, .id_table = davinci_mmc_devtype, }; -- 2.25.1

2 5

[PATCH openEuler-22.03-LTS-SP1] mmc: davinci: Don't strip remove function when driver is builtin
by Yi Yang 09 Jul '24

09 Jul '24

From: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> stable inclusion from stable-v5.10.221 commit 6ff7cfa02baabec907f6f29ea76634e6256d2ec4 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB0L1 CVE: CVE-2024-39484 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 55c421b364482b61c4c45313a535e61ed5ae4ea3 ] Using __exit for the remove function results in the remove callback being discarded with CONFIG_MMC_DAVINCI=y. When such a device gets unbound (e.g. using sysfs or hotplug), the driver is just removed without the cleanup being performed. This results in resource leaks. Fix it by compiling in the remove callback unconditionally. This also fixes a W=1 modpost warning: WARNING: modpost: drivers/mmc/host/davinci_mmc: section mismatch in reference: davinci_mmcsd_driver+0x10 (section: .data) -> davinci_mmcsd_remove (section: .exit.text) Fixes: b4cff4549b7a ("DaVinci: MMC: MMC/SD controller driver for DaVinci family") Signed-off-by: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> Cc: stable(a)vger.kernel.org Link: https://lore.kernel.org/r/20240324114017.231936-2-u.kleine-koenig@pengutron… Signed-off-by: Ulf Hansson <ulf.hansson(a)linaro.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Yi Yang <yiyang13(a)huawei.com> --- drivers/mmc/host/davinci_mmc.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/mmc/host/davinci_mmc.c b/drivers/mmc/host/davinci_mmc.c index 647928ab00a3..77258948440f 100644 --- a/drivers/mmc/host/davinci_mmc.c +++ b/drivers/mmc/host/davinci_mmc.c @@ -1347,7 +1347,7 @@ static int davinci_mmcsd_probe(struct platform_device *pdev) return ret; } -static int __exit davinci_mmcsd_remove(struct platform_device *pdev) +static int davinci_mmcsd_remove(struct platform_device *pdev) { struct mmc_davinci_host *host = platform_get_drvdata(pdev); @@ -1404,7 +1404,7 @@ static struct platform_driver davinci_mmcsd_driver = { .of_match_table = davinci_mmc_dt_ids, }, .probe = davinci_mmcsd_probe, - .remove = __exit_p(davinci_mmcsd_remove), + .remove = davinci_mmcsd_remove, .id_table = davinci_mmc_devtype, }; -- 2.25.1

2 1

[PATCH OLK-5.10] mmc: davinci: Don't strip remove function when driver is builtin
by Yi Yang 09 Jul '24

09 Jul '24

From: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> stable inclusion from stable-v5.10.221 commit 6ff7cfa02baabec907f6f29ea76634e6256d2ec4 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB0L1 CVE: CVE-2024-39484 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 55c421b364482b61c4c45313a535e61ed5ae4ea3 ] Using __exit for the remove function results in the remove callback being discarded with CONFIG_MMC_DAVINCI=y. When such a device gets unbound (e.g. using sysfs or hotplug), the driver is just removed without the cleanup being performed. This results in resource leaks. Fix it by compiling in the remove callback unconditionally. This also fixes a W=1 modpost warning: WARNING: modpost: drivers/mmc/host/davinci_mmc: section mismatch in reference: davinci_mmcsd_driver+0x10 (section: .data) -> davinci_mmcsd_remove (section: .exit.text) Fixes: b4cff4549b7a ("DaVinci: MMC: MMC/SD controller driver for DaVinci family") Signed-off-by: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> Cc: stable(a)vger.kernel.org Link: https://lore.kernel.org/r/20240324114017.231936-2-u.kleine-koenig@pengutron… Signed-off-by: Ulf Hansson <ulf.hansson(a)linaro.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Yi Yang <yiyang13(a)huawei.com> --- drivers/mmc/host/davinci_mmc.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/mmc/host/davinci_mmc.c b/drivers/mmc/host/davinci_mmc.c index 647928ab00a3..77258948440f 100644 --- a/drivers/mmc/host/davinci_mmc.c +++ b/drivers/mmc/host/davinci_mmc.c @@ -1347,7 +1347,7 @@ static int davinci_mmcsd_probe(struct platform_device *pdev) return ret; } -static int __exit davinci_mmcsd_remove(struct platform_device *pdev) +static int davinci_mmcsd_remove(struct platform_device *pdev) { struct mmc_davinci_host *host = platform_get_drvdata(pdev); @@ -1404,7 +1404,7 @@ static struct platform_driver davinci_mmcsd_driver = { .of_match_table = davinci_mmc_dt_ids, }, .probe = davinci_mmcsd_probe, - .remove = __exit_p(davinci_mmcsd_remove), + .remove = davinci_mmcsd_remove, .id_table = davinci_mmc_devtype, }; -- 2.25.1

2 1

[PATCH openEuler-1.0-LTS] mmc: davinci: Don't strip remove function when driver is builtin
by Yi Yang 09 Jul '24

09 Jul '24

From: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> stable inclusion from stable-v5.10.221 commit 6ff7cfa02baabec907f6f29ea76634e6256d2ec4 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB0L1 CVE: CVE-2024-39484 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 55c421b364482b61c4c45313a535e61ed5ae4ea3 ] Using __exit for the remove function results in the remove callback being discarded with CONFIG_MMC_DAVINCI=y. When such a device gets unbound (e.g. using sysfs or hotplug), the driver is just removed without the cleanup being performed. This results in resource leaks. Fix it by compiling in the remove callback unconditionally. This also fixes a W=1 modpost warning: WARNING: modpost: drivers/mmc/host/davinci_mmc: section mismatch in reference: davinci_mmcsd_driver+0x10 (section: .data) -> davinci_mmcsd_remove (section: .exit.text) Fixes: b4cff4549b7a ("DaVinci: MMC: MMC/SD controller driver for DaVinci family") Signed-off-by: Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> Cc: stable(a)vger.kernel.org Link: https://lore.kernel.org/r/20240324114017.231936-2-u.kleine-koenig@pengutron… Signed-off-by: Ulf Hansson <ulf.hansson(a)linaro.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Yi Yang <yiyang13(a)huawei.com> --- drivers/mmc/host/davinci_mmc.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/mmc/host/davinci_mmc.c b/drivers/mmc/host/davinci_mmc.c index e6f14257a7d0..591cef502b59 100644 --- a/drivers/mmc/host/davinci_mmc.c +++ b/drivers/mmc/host/davinci_mmc.c @@ -1361,7 +1361,7 @@ static int davinci_mmcsd_probe(struct platform_device *pdev) return ret; } -static int __exit davinci_mmcsd_remove(struct platform_device *pdev) +static int davinci_mmcsd_remove(struct platform_device *pdev) { struct mmc_davinci_host *host = platform_get_drvdata(pdev); @@ -1413,7 +1413,7 @@ static struct platform_driver davinci_mmcsd_driver = { .of_match_table = davinci_mmc_dt_ids, }, .probe = davinci_mmcsd_probe, - .remove = __exit_p(davinci_mmcsd_remove), + .remove = davinci_mmcsd_remove, .id_table = davinci_mmc_devtype, }; -- 2.25.1

2 1

[PATCH OLK-6.6 0/5] fix CVE-2024-38620
by Jialin Zhang 09 Jul '24

09 Jul '24

Christophe JAILLET (1): Bluetooth: Remove usage of the deprecated ida_simple_xx() API Iulia Tanasescu (1): Bluetooth: ISO: Fix BIS cleanup Luiz Augusto von Dentz (1): Bluetooth: HCI: Remove HCI_AMP support Lukas Bulwahn (1): Bluetooth: hci_event: Remove code to removed CONFIG_BT_HS Pauli Virtanen (1): Bluetooth: fix connection setup in l2cap_connect drivers/bluetooth/btmrvl_main.c | 9 - drivers/bluetooth/btrsi.c | 1 - drivers/bluetooth/btsdio.c | 8 - drivers/bluetooth/btusb.c | 5 - drivers/bluetooth/hci_bcm4377.c | 1 - drivers/bluetooth/hci_ldisc.c | 6 - drivers/bluetooth/hci_serdev.c | 5 - drivers/bluetooth/hci_uart.h | 1 - drivers/bluetooth/hci_vhci.c | 10 +- drivers/bluetooth/virtio_bt.c | 2 - include/net/bluetooth/hci.h | 114 ------------ include/net/bluetooth/hci_core.h | 46 +---- include/net/bluetooth/hci_sync.h | 2 + include/uapi/linux/virtio_bt.h | 1 - net/bluetooth/hci_conn.c | 10 +- net/bluetooth/hci_core.c | 135 ++------------ net/bluetooth/hci_event.c | 310 ------------------------------- net/bluetooth/hci_sock.c | 9 +- net/bluetooth/hci_sync.c | 138 ++------------ net/bluetooth/l2cap_core.c | 21 +-- net/bluetooth/mgmt.c | 84 +++------ 21 files changed, 73 insertions(+), 845 deletions(-) -- 2.25.1

2 6

[PATCH openEuler-22.03-LTS-SP1] ksmbd: fix slab out of bounds write in smb_inherit_dacl()
by Wang Zhaolong 09 Jul '24

09 Jul '24

From: Yang Xiongwei <yangxiongwei6(a)huawei.com> mainline inclusion from mainline-v6.7-rc1 commit eebff19acaa35820cb09ce2ccb3d21bee2156ffb category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4LC CVE: CVE-2023-52755 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- slab out-of-bounds write is caused by that offsets is bigger than pntsd allocation size. This patch add the check to validate 3 offsets using allocation size. Reported-by: zdi-disclosures(a)trendmicro.com # ZDI-CAN-22271 Cc: stable(a)vger.kernel.org Signed-off-by: Namjae Jeon <linkinjeon(a)kernel.org> Signed-off-by: Steve French <stfrench(a)microsoft.com> Conflicts: fs/smb/server/smbacl.c fs/ksmbd/smbacl.c [lc:file path is not same] Signed-off-by: XiongWei Yang <yangxiongwei6(a)huawei.com> Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- fs/ksmbd/smbacl.c | 29 ++++++++++++++++++++++++++--- 1 file changed, 26 insertions(+), 3 deletions(-) diff --git a/fs/ksmbd/smbacl.c b/fs/ksmbd/smbacl.c index d76cee773b82..e173717330ff 100644 --- a/fs/ksmbd/smbacl.c +++ b/fs/ksmbd/smbacl.c @@ -1098,6 +1098,7 @@ int smb_inherit_dacl(struct ksmbd_conn *conn, struct smb_acl *pdacl; struct smb_sid *powner_sid = NULL, *pgroup_sid = NULL; int powner_sid_size = 0, pgroup_sid_size = 0, pntsd_size; + int pntsd_alloc_size; if (parent_pntsd->osidoffset) { powner_sid = (struct smb_sid *)((char *)parent_pntsd + @@ -1110,9 +1111,10 @@ int smb_inherit_dacl(struct ksmbd_conn *conn, pgroup_sid_size = 1 + 1 + 6 + (pgroup_sid->num_subauth * 4); } - pntsd = kzalloc(sizeof(struct smb_ntsd) + powner_sid_size + - pgroup_sid_size + sizeof(struct smb_acl) + - nt_size, GFP_KERNEL); + pntsd_alloc_size = sizeof(struct smb_ntsd) + powner_sid_size + + pgroup_sid_size + sizeof(struct smb_acl) + nt_size; + + pntsd = kzalloc(pntsd_alloc_size, GFP_KERNEL); if (!pntsd) { rc = -ENOMEM; goto free_aces_base; @@ -1127,6 +1129,27 @@ int smb_inherit_dacl(struct ksmbd_conn *conn, pntsd->gsidoffset = parent_pntsd->gsidoffset; pntsd->dacloffset = parent_pntsd->dacloffset; + if ((u64)le32_to_cpu(pntsd->osidoffset) + powner_sid_size > + pntsd_alloc_size) { + rc = -EINVAL; + kfree(pntsd); + goto free_aces_base; + } + + if ((u64)le32_to_cpu(pntsd->gsidoffset) + pgroup_sid_size > + pntsd_alloc_size) { + rc = -EINVAL; + kfree(pntsd); + goto free_aces_base; + } + + if ((u64)le32_to_cpu(pntsd->dacloffset) + sizeof(struct smb_acl) + nt_size > + pntsd_alloc_size) { + rc = -EINVAL; + kfree(pntsd); + goto free_aces_base; + } + if (pntsd->osidoffset) { struct smb_sid *owner_sid = (struct smb_sid *)((char *)pntsd + le32_to_cpu(pntsd->osidoffset)); -- 2.34.3

2 1

[PATCH OLK-5.10] ksmbd: fix slab out of bounds write in smb_inherit_dacl()
by Wang Zhaolong 09 Jul '24

09 Jul '24

From: Yang Xiongwei <yangxiongwei6(a)huawei.com> mainline inclusion from mainline-v6.7-rc1 commit eebff19acaa35820cb09ce2ccb3d21bee2156ffb category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4LC CVE: CVE-2023-52755 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- slab out-of-bounds write is caused by that offsets is bigger than pntsd allocation size. This patch add the check to validate 3 offsets using allocation size. Reported-by: zdi-disclosures(a)trendmicro.com # ZDI-CAN-22271 Cc: stable(a)vger.kernel.org Signed-off-by: Namjae Jeon <linkinjeon(a)kernel.org> Signed-off-by: Steve French <stfrench(a)microsoft.com> Conflicts: fs/smb/server/smbacl.c fs/ksmbd/smbacl.c [lc:file path is not same] Signed-off-by: XiongWei Yang <yangxiongwei6(a)huawei.com> Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- fs/ksmbd/smbacl.c | 29 ++++++++++++++++++++++++++--- 1 file changed, 26 insertions(+), 3 deletions(-) diff --git a/fs/ksmbd/smbacl.c b/fs/ksmbd/smbacl.c index d76cee773b82..e173717330ff 100644 --- a/fs/ksmbd/smbacl.c +++ b/fs/ksmbd/smbacl.c @@ -1098,6 +1098,7 @@ int smb_inherit_dacl(struct ksmbd_conn *conn, struct smb_acl *pdacl; struct smb_sid *powner_sid = NULL, *pgroup_sid = NULL; int powner_sid_size = 0, pgroup_sid_size = 0, pntsd_size; + int pntsd_alloc_size; if (parent_pntsd->osidoffset) { powner_sid = (struct smb_sid *)((char *)parent_pntsd + @@ -1110,9 +1111,10 @@ int smb_inherit_dacl(struct ksmbd_conn *conn, pgroup_sid_size = 1 + 1 + 6 + (pgroup_sid->num_subauth * 4); } - pntsd = kzalloc(sizeof(struct smb_ntsd) + powner_sid_size + - pgroup_sid_size + sizeof(struct smb_acl) + - nt_size, GFP_KERNEL); + pntsd_alloc_size = sizeof(struct smb_ntsd) + powner_sid_size + + pgroup_sid_size + sizeof(struct smb_acl) + nt_size; + + pntsd = kzalloc(pntsd_alloc_size, GFP_KERNEL); if (!pntsd) { rc = -ENOMEM; goto free_aces_base; @@ -1127,6 +1129,27 @@ int smb_inherit_dacl(struct ksmbd_conn *conn, pntsd->gsidoffset = parent_pntsd->gsidoffset; pntsd->dacloffset = parent_pntsd->dacloffset; + if ((u64)le32_to_cpu(pntsd->osidoffset) + powner_sid_size > + pntsd_alloc_size) { + rc = -EINVAL; + kfree(pntsd); + goto free_aces_base; + } + + if ((u64)le32_to_cpu(pntsd->gsidoffset) + pgroup_sid_size > + pntsd_alloc_size) { + rc = -EINVAL; + kfree(pntsd); + goto free_aces_base; + } + + if ((u64)le32_to_cpu(pntsd->dacloffset) + sizeof(struct smb_acl) + nt_size > + pntsd_alloc_size) { + rc = -EINVAL; + kfree(pntsd); + goto free_aces_base; + } + if (pntsd->osidoffset) { struct smb_sid *owner_sid = (struct smb_sid *)((char *)pntsd + le32_to_cpu(pntsd->osidoffset)); -- 2.34.3

2 1

[PATCH openEuler-22.03-LTS-SP1] smb: client: fix potential deadlock when releasing mids
by Wang Zhaolong 09 Jul '24

09 Jul '24

From: Paulo Alcantara <pc(a)manguebit.com> mainline inclusion from mainline-v6.7-rc1 commit e6322fd177c6885a21dd4609dc5e5c973d1a2eb7 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4KS CVE: CVE-2023-52757 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- All release_mid() callers seem to hold a reference of @mid so there is no need to call kref_put(&mid->refcount, __release_mid) under @server->mid_lock spinlock. If they don't, then an use-after-free bug would have occurred anyways. By getting rid of such spinlock also fixes a potential deadlock as shown below CPU 0 CPU 1 ------------------------------------------------------------------ cifs_demultiplex_thread() cifs_debug_data_proc_show() release_mid() spin_lock(&server->mid_lock); spin_lock(&cifs_tcp_ses_lock) spin_lock(&server->mid_lock) __release_mid() smb2_find_smb_tcon() spin_lock(&cifs_tcp_ses_lock) *deadlock* Cc: stable(a)vger.kernel.org Signed-off-by: Paulo Alcantara (SUSE) <pc(a)manguebit.com> Signed-off-by: Steve French <stfrench(a)microsoft.com> Conflicts: fs/smb/client/cifsproto.h fs/smb/client/smb2misc.c fs/smb/client/transport.c fs/cifs/cifsproto.h fs/cifs/smb2misc.c fs/cifs/transport.c [Path is changed and related functions has been refactored for a long time] Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- fs/cifs/cifsproto.h | 7 ++++++- fs/cifs/smb2misc.c | 2 +- fs/cifs/transport.c | 9 +-------- 3 files changed, 8 insertions(+), 10 deletions(-) diff --git a/fs/cifs/cifsproto.h b/fs/cifs/cifsproto.h index a6ca4eda9a5a..5ff518be107e 100644 --- a/fs/cifs/cifsproto.h +++ b/fs/cifs/cifsproto.h @@ -85,7 +85,7 @@ extern struct mid_q_entry *AllocMidQEntry(const struct smb_hdr *smb_buffer, struct TCP_Server_Info *server); extern void DeleteMidQEntry(struct mid_q_entry *midEntry); extern void cifs_delete_mid(struct mid_q_entry *mid); -extern void cifs_mid_q_entry_release(struct mid_q_entry *midEntry); +void _cifs_mid_q_entry_release(struct kref *refcount); extern void cifs_wake_up_task(struct mid_q_entry *mid); extern int cifs_handle_standard(struct TCP_Server_Info *server, struct mid_q_entry *mid); @@ -646,4 +646,9 @@ static inline int cifs_create_options(struct cifs_sb_info *cifs_sb, int options) return options; } +static inline void cifs_mid_q_entry_release(struct mid_q_entry *midEntry) +{ + kref_put(&midEntry->refcount, _cifs_mid_q_entry_release); +} + #endif /* _CIFSPROTO_H */ diff --git a/fs/cifs/smb2misc.c b/fs/cifs/smb2misc.c index 49686086a333..4652b681f5aa 100644 --- a/fs/cifs/smb2misc.c +++ b/fs/cifs/smb2misc.c @@ -786,7 +786,7 @@ __smb2_handle_cancelled_cmd(struct cifs_tcon *tcon, __u16 cmd, __u64 mid, { struct close_cancelled_open *cancelled; - cancelled = kzalloc(sizeof(*cancelled), GFP_ATOMIC); + cancelled = kzalloc(sizeof(*cancelled), GFP_KERNEL); if (!cancelled) return -ENOMEM; diff --git a/fs/cifs/transport.c b/fs/cifs/transport.c index d209f989bb70..231a86327316 100644 --- a/fs/cifs/transport.c +++ b/fs/cifs/transport.c @@ -88,7 +88,7 @@ AllocMidQEntry(const struct smb_hdr *smb_buffer, struct TCP_Server_Info *server) return temp; } -static void _cifs_mid_q_entry_release(struct kref *refcount) +void _cifs_mid_q_entry_release(struct kref *refcount) { struct mid_q_entry *midEntry = container_of(refcount, struct mid_q_entry, refcount); @@ -168,13 +168,6 @@ static void _cifs_mid_q_entry_release(struct kref *refcount) mempool_free(midEntry, cifs_mid_poolp); } -void cifs_mid_q_entry_release(struct mid_q_entry *midEntry) -{ - spin_lock(&GlobalMid_Lock); - kref_put(&midEntry->refcount, _cifs_mid_q_entry_release); - spin_unlock(&GlobalMid_Lock); -} - void DeleteMidQEntry(struct mid_q_entry *midEntry) { cifs_mid_q_entry_release(midEntry); -- 2.34.3

2 1

[PATCH OLK-5.10] smb: client: fix potential deadlock when releasing mids
by Wang Zhaolong 09 Jul '24

09 Jul '24

From: Paulo Alcantara <pc(a)manguebit.com> mainline inclusion from mainline-v6.7-rc1 commit e6322fd177c6885a21dd4609dc5e5c973d1a2eb7 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9R4KS CVE: CVE-2023-52757 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- All release_mid() callers seem to hold a reference of @mid so there is no need to call kref_put(&mid->refcount, __release_mid) under @server->mid_lock spinlock. If they don't, then an use-after-free bug would have occurred anyways. By getting rid of such spinlock also fixes a potential deadlock as shown below CPU 0 CPU 1 ------------------------------------------------------------------ cifs_demultiplex_thread() cifs_debug_data_proc_show() release_mid() spin_lock(&server->mid_lock); spin_lock(&cifs_tcp_ses_lock) spin_lock(&server->mid_lock) __release_mid() smb2_find_smb_tcon() spin_lock(&cifs_tcp_ses_lock) *deadlock* Cc: stable(a)vger.kernel.org Signed-off-by: Paulo Alcantara (SUSE) <pc(a)manguebit.com> Signed-off-by: Steve French <stfrench(a)microsoft.com> Conflicts: fs/smb/client/cifsproto.h fs/smb/client/smb2misc.c fs/smb/client/transport.c fs/cifs/cifsproto.h fs/cifs/smb2misc.c fs/cifs/transport.c [Path is changed and related functions has been refactored for a long time] Signed-off-by: Wang Zhaolong <wangzhaolong1(a)huawei.com> --- fs/cifs/cifsproto.h | 7 ++++++- fs/cifs/smb2misc.c | 2 +- fs/cifs/transport.c | 9 +-------- 3 files changed, 8 insertions(+), 10 deletions(-) diff --git a/fs/cifs/cifsproto.h b/fs/cifs/cifsproto.h index ca34cc1e1931..8c0ed2b60285 100644 --- a/fs/cifs/cifsproto.h +++ b/fs/cifs/cifsproto.h @@ -85,7 +85,7 @@ extern struct mid_q_entry *AllocMidQEntry(const struct smb_hdr *smb_buffer, struct TCP_Server_Info *server); extern void DeleteMidQEntry(struct mid_q_entry *midEntry); extern void cifs_delete_mid(struct mid_q_entry *mid); -extern void cifs_mid_q_entry_release(struct mid_q_entry *midEntry); +void _cifs_mid_q_entry_release(struct kref *refcount); extern void cifs_wake_up_task(struct mid_q_entry *mid); extern int cifs_handle_standard(struct TCP_Server_Info *server, struct mid_q_entry *mid); @@ -646,4 +646,9 @@ static inline int cifs_create_options(struct cifs_sb_info *cifs_sb, int options) return options; } +static inline void cifs_mid_q_entry_release(struct mid_q_entry *midEntry) +{ + kref_put(&midEntry->refcount, _cifs_mid_q_entry_release); +} + #endif /* _CIFSPROTO_H */ diff --git a/fs/cifs/smb2misc.c b/fs/cifs/smb2misc.c index c0b632331912..edffa5657d26 100644 --- a/fs/cifs/smb2misc.c +++ b/fs/cifs/smb2misc.c @@ -780,7 +780,7 @@ __smb2_handle_cancelled_cmd(struct cifs_tcon *tcon, __u16 cmd, __u64 mid, { struct close_cancelled_open *cancelled; - cancelled = kzalloc(sizeof(*cancelled), GFP_ATOMIC); + cancelled = kzalloc(sizeof(*cancelled), GFP_KERNEL); if (!cancelled) return -ENOMEM; diff --git a/fs/cifs/transport.c b/fs/cifs/transport.c index 488893962708..c6fd4223b3be 100644 --- a/fs/cifs/transport.c +++ b/fs/cifs/transport.c @@ -88,7 +88,7 @@ AllocMidQEntry(const struct smb_hdr *smb_buffer, struct TCP_Server_Info *server) return temp; } -static void _cifs_mid_q_entry_release(struct kref *refcount) +void _cifs_mid_q_entry_release(struct kref *refcount) { struct mid_q_entry *midEntry = container_of(refcount, struct mid_q_entry, refcount); @@ -168,13 +168,6 @@ static void _cifs_mid_q_entry_release(struct kref *refcount) mempool_free(midEntry, cifs_mid_poolp); } -void cifs_mid_q_entry_release(struct mid_q_entry *midEntry) -{ - spin_lock(&GlobalMid_Lock); - kref_put(&midEntry->refcount, _cifs_mid_q_entry_release); - spin_unlock(&GlobalMid_Lock); -} - void DeleteMidQEntry(struct mid_q_entry *midEntry) { cifs_mid_q_entry_release(midEntry); -- 2.34.3

2 1

[openeuler:OLK-6.6] BUILD REGRESSION 0dba2ca16050e1ea7b068850b6fa440dbeb6665b
by kernel test robot 09 Jul '24

09 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-6.6 branch HEAD: 0dba2ca16050e1ea7b068850b6fa440dbeb6665b !9807 drm: zynqmp_dpsub: Always register bridge Error/Warning reports: https://lore.kernel.org/oe-kbuild-all/202407090319.Lo3bXFwf-lkp@intel.com https://lore.kernel.org/oe-kbuild-all/202407090326.YKEPYjUd-lkp@intel.com Error/Warning: (recently discovered and may have been fixed) drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2911:41: warning: '%d' directive output may be truncated writing between 1 and 11 bytes into a region of size between 3 and 18 [-Wformat-truncation=] drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5599:32: error: called object type 'int' is not a function or function pointer Error/Warning ids grouped by kconfigs: recent_errors |-- arm64-allmodconfig | `-- clang:warning:no-such-include-directory:drivers-infiniband-hw-hiroce3-include-mag |-- arm64-randconfig-002-20240709 | `-- drivers-net-ethernet-mucse-rnpvf-rnpvf_main.c:error:called-object-type-int-is-not-a-function-or-function-pointer `-- loongarch-randconfig-002-20240709 `-- drivers-net-ethernet-mucse-rnpm-rnpm_main.c:warning:d-directive-output-may-be-truncated-writing-between-and-bytes-into-a-region-of-size-between-and elapsed time: 726m configs tested: 38 configs skipped: 134 tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240709 clang-19 arm64 randconfig-002-20240709 clang-17 arm64 randconfig-003-20240709 clang-19 arm64 randconfig-004-20240709 clang-19 loongarch allmodconfig gcc-13.2.0 loongarch allnoconfig gcc-13.2.0 loongarch randconfig-001-20240709 gcc-13.2.0 loongarch randconfig-002-20240709 gcc-13.2.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240709 gcc-11 x86_64 buildonly-randconfig-002-20240709 clang-18 x86_64 buildonly-randconfig-003-20240709 clang-18 x86_64 buildonly-randconfig-004-20240709 gcc-9 x86_64 buildonly-randconfig-005-20240709 gcc-13 x86_64 buildonly-randconfig-006-20240709 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240709 clang-18 x86_64 randconfig-002-20240709 gcc-10 x86_64 randconfig-003-20240709 clang-18 x86_64 randconfig-004-20240709 gcc-12 x86_64 randconfig-005-20240709 gcc-13 x86_64 randconfig-006-20240709 gcc-8 x86_64 randconfig-011-20240709 clang-18 x86_64 randconfig-012-20240709 clang-18 x86_64 randconfig-013-20240709 clang-18 x86_64 randconfig-014-20240709 clang-18 x86_64 randconfig-015-20240709 clang-18 x86_64 randconfig-016-20240709 clang-18 x86_64 randconfig-071-20240709 gcc-7 x86_64 randconfig-072-20240709 clang-18 x86_64 randconfig-073-20240709 gcc-13 x86_64 randconfig-074-20240709 gcc-13 x86_64 randconfig-075-20240709 gcc-11 x86_64 randconfig-076-20240709 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-5.10] BUILD SUCCESS dbbaf94ca58a3de34ab871764b0b837d8c5015ef
by kernel test robot 09 Jul '24

09 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-5.10 branch HEAD: dbbaf94ca58a3de34ab871764b0b837d8c5015ef !9799 null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' elapsed time: 730m configs tested: 35 configs skipped: 138 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-13.2.0 arm64 defconfig gcc-13.2.0 arm64 randconfig-001-20240708 gcc-13.2.0 arm64 randconfig-002-20240708 clang-19 arm64 randconfig-003-20240708 gcc-13.2.0 arm64 randconfig-004-20240708 gcc-13.2.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240708 gcc-13 x86_64 buildonly-randconfig-002-20240708 gcc-10 x86_64 buildonly-randconfig-003-20240708 gcc-10 x86_64 buildonly-randconfig-004-20240708 gcc-13 x86_64 buildonly-randconfig-005-20240708 gcc-8 x86_64 buildonly-randconfig-006-20240708 gcc-13 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240708 clang-18 x86_64 randconfig-002-20240708 gcc-13 x86_64 randconfig-003-20240708 gcc-13 x86_64 randconfig-004-20240708 gcc-13 x86_64 randconfig-005-20240708 gcc-7 x86_64 randconfig-006-20240708 gcc-13 x86_64 randconfig-011-20240708 clang-18 x86_64 randconfig-012-20240708 clang-18 x86_64 randconfig-013-20240708 gcc-12 x86_64 randconfig-014-20240708 clang-18 x86_64 randconfig-015-20240708 gcc-13 x86_64 randconfig-016-20240708 gcc-13 x86_64 randconfig-071-20240708 clang-18 x86_64 randconfig-072-20240708 gcc-13 x86_64 randconfig-073-20240708 clang-18 x86_64 randconfig-074-20240708 clang-18 x86_64 randconfig-075-20240708 gcc-8 x86_64 randconfig-076-20240708 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:openEuler-1.0-LTS] BUILD SUCCESS 50a2fbeb47f2becd24ba0e491a852e2501463390
by kernel test robot 09 Jul '24

09 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS branch HEAD: 50a2fbeb47f2becd24ba0e491a852e2501463390 !9803 v2 x86/ftrace: Disable lockdep check when execute ftrace_int3_handler() Warning ids grouped by kconfigs: recent_errors `-- x86_64-buildonly-randconfig-001-20240708 `-- include-asm-generic-atomic-instrumented.h:warning:wait_req-may-be-used-uninitialized elapsed time: 723m configs tested: 35 configs skipped: 138 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig gcc-13.2.0 arm64 allnoconfig gcc-13.2.0 arm64 defconfig gcc-13.2.0 arm64 randconfig-001-20240708 gcc-13.2.0 arm64 randconfig-002-20240708 gcc-13.2.0 arm64 randconfig-003-20240708 gcc-13.2.0 arm64 randconfig-004-20240708 gcc-13.2.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240708 gcc-13 x86_64 buildonly-randconfig-002-20240708 gcc-10 x86_64 buildonly-randconfig-003-20240708 gcc-10 x86_64 buildonly-randconfig-004-20240708 gcc-13 x86_64 buildonly-randconfig-005-20240708 gcc-8 x86_64 buildonly-randconfig-006-20240708 gcc-13 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240708 clang-18 x86_64 randconfig-002-20240708 gcc-13 x86_64 randconfig-003-20240708 gcc-13 x86_64 randconfig-004-20240708 gcc-13 x86_64 randconfig-005-20240708 gcc-7 x86_64 randconfig-006-20240708 gcc-13 x86_64 randconfig-011-20240708 clang-18 x86_64 randconfig-012-20240708 clang-18 x86_64 randconfig-013-20240708 gcc-12 x86_64 randconfig-014-20240708 clang-18 x86_64 randconfig-015-20240708 gcc-13 x86_64 randconfig-016-20240708 gcc-13 x86_64 randconfig-071-20240708 clang-18 x86_64 randconfig-072-20240708 gcc-13 x86_64 randconfig-073-20240708 clang-18 x86_64 randconfig-074-20240708 clang-18 x86_64 randconfig-075-20240708 gcc-8 x86_64 randconfig-076-20240708 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 4037/10605] drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2911:41: warning: '%d' directive output may be truncated writing between 1 and 11 bytes into a region of size between 3 and 18
by kernel test robot 09 Jul '24

09 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 0dba2ca16050e1ea7b068850b6fa440dbeb6665b commit: 5deaf74c4b3edcf88f67f18aa352690deb9dc212 [4037/10605] drivers: initial support for rnpm drivers from Mucse Technology config: loongarch-randconfig-002-20240709 (https://download.01.org/0day-ci/archive/20240709/202407090319.Lo3bXFwf-lkp@…) compiler: loongarch64-linux-gcc (GCC) 13.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20240709/202407090319.Lo3bXFwf-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407090319.Lo3bXFwf-lkp@intel.com/ All warnings (new ones prefixed by >>): drivers/net/ethernet/mucse/rnpm/rnpm_main.c:256:6: warning: no previous prototype for 'rnpm_pf_service_event_schedule' [-Wmissing-prototypes] 256 | void rnpm_pf_service_event_schedule(struct rnpm_pf_adapter *pf_adapter) | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:1137:5: warning: no previous prototype for 'rnpm_rx_ring_reinit' [-Wmissing-prototypes] 1137 | int rnpm_rx_ring_reinit(struct rnpm_adapter *adapter, struct rnpm_ring *rx_ring) | ^~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c: In function 'rnpm_clean_rx_irq': drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2015:14: warning: variable 'xdp_xmit' set but not used [-Wunused-but-set-variable] 2015 | bool xdp_xmit = false; | ^~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c: At top level: drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2207:6: warning: no previous prototype for 'rnpm_write_eitr' [-Wmissing-prototypes] 2207 | void rnpm_write_eitr(struct rnpm_q_vector *q_vector, bool is_rxframe) | ^~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3013:5: warning: no previous prototype for 'rnpm_xmit_nop_frame_ring' [-Wmissing-prototypes] 3013 | int rnpm_xmit_nop_frame_ring(struct rnpm_adapter *adapter, | ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3037:5: warning: no previous prototype for 'rnpm_xmit_nop_frame_ring_temp' [-Wmissing-prototypes] 3037 | int rnpm_xmit_nop_frame_ring_temp(struct rnpm_adapter *adapter, | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3909:6: warning: no previous prototype for 'rnpm_vlan_stags_flag' [-Wmissing-prototypes] 3909 | void rnpm_vlan_stags_flag(struct rnpm_adapter *adapter) | ^~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4031:6: warning: no previous prototype for 'control_mac_rx' [-Wmissing-prototypes] 4031 | void control_mac_rx(struct rnpm_adapter *adapter, bool on) | ^~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5803:6: warning: no previous prototype for 'rnpm_pf_service_timer' [-Wmissing-prototypes] 5803 | void rnpm_pf_service_timer(struct timer_list *t) | ^~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5821:6: warning: no previous prototype for 'rnpm_service_timer' [-Wmissing-prototypes] 5821 | void rnpm_service_timer(struct timer_list *t) | ^~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5962:21: warning: no previous prototype for 'wait_all_port_resetting' [-Wmissing-prototypes] 5962 | __maybe_unused void wait_all_port_resetting(struct rnpm_pf_adapter *pf_adapter) | ^~~~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5974:21: warning: no previous prototype for 'clean_all_port_resetting' [-Wmissing-prototypes] 5974 | __maybe_unused void clean_all_port_resetting(struct rnpm_pf_adapter *pf_adapter) | ^~~~~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6185:5: warning: no previous prototype for 'rnpm_check_mc_addr' [-Wmissing-prototypes] 6185 | int rnpm_check_mc_addr(struct rnpm_adapter *adapter) | ^~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6211:6: warning: no previous prototype for 'update_pf_vlan' [-Wmissing-prototypes] 6211 | void update_pf_vlan(struct rnpm_adapter *adapter) | ^~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6262:6: warning: no previous prototype for 'rnpm_pf_service_task' [-Wmissing-prototypes] 6262 | void rnpm_pf_service_task(struct work_struct *work) | ^~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7528:6: warning: no previous prototype for 'rnpm_clear_udp_tunnel_port' [-Wmissing-prototypes] 7528 | void rnpm_clear_udp_tunnel_port(struct rnpm_adapter *adapter) | ^~~~~~~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7692:6: warning: no previous prototype for 'rnpm_assign_netdev_ops' [-Wmissing-prototypes] 7692 | void rnpm_assign_netdev_ops(struct net_device *dev) | ^~~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7785:6: warning: no previous prototype for 'rnpm_fix_queue_number' [-Wmissing-prototypes] 7785 | void rnpm_fix_queue_number(struct rnpm_hw *hw) | ^~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8760:5: warning: no previous prototype for 'rnpm_can_rpu_start' [-Wmissing-prototypes] 8760 | int rnpm_can_rpu_start(struct rnpm_pf_adapter *pf_adapter) | ^~~~~~~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c: In function 'rnpm_request_msix_irqs': >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2911:41: warning: '%d' directive output may be truncated writing between 1 and 11 bytes into a region of size between 3 and 18 [-Wformat-truncation=] 2911 | "%s-%s-%d-%d", netdev->name, "TxRx", i, | ^~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2911:34: note: directive argument in the range [-2147483643, 2147483646] 2911 | "%s-%s-%d-%d", netdev->name, "TxRx", i, | ^~~~~~~~~~~~~ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2911:34: note: directive argument in the range [0, 65535] drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2910:25: note: 'snprintf' output between 10 and 39 bytes into a destination of size 24 2910 | snprintf(q_vector->name, sizeof(q_vector->name) - 1, | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 2911 | "%s-%s-%d-%d", netdev->name, "TxRx", i, | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 2912 | q_vector->v_idx); | ~~~~~~~~~~~~~~~~ vim +2911 drivers/net/ethernet/mucse/rnpm/rnpm_main.c 2887 2888 /** 2889 * rnpm_request_msix_irqs - Initialize MSI-X interrupts 2890 * @adapter: board private structure 2891 * 2892 * rnpm_request_msix_irqs allocates MSI-X vectors and requests 2893 * interrupts from the kernel. 2894 **/ 2895 static int rnpm_request_msix_irqs(struct rnpm_adapter *adapter) 2896 { 2897 struct net_device *netdev = adapter->netdev; 2898 int err; 2899 int i = 0; 2900 int cpu; 2901 2902 DPRINTK(IFUP, INFO, "num_q_vectors:%d\n", adapter->num_q_vectors); 2903 2904 for (i = 0; i < adapter->num_q_vectors; i++) { 2905 struct rnpm_q_vector *q_vector = adapter->q_vector[i]; 2906 struct msix_entry *entry = &adapter->msix_entries[i]; 2907 2908 // rnpm_dbg("use irq %d\n", entry->entry); 2909 if (q_vector->tx.ring && q_vector->rx.ring) { 2910 snprintf(q_vector->name, sizeof(q_vector->name) - 1, > 2911 "%s-%s-%d-%d", netdev->name, "TxRx", i, 2912 q_vector->v_idx); 2913 } else { 2914 WARN(!(q_vector->tx.ring && q_vector->rx.ring), 2915 "%s vector%d tx rx is null, v_idx:%d\n", 2916 netdev->name, i, q_vector->v_idx); 2917 /* skip this unused q_vector */ 2918 continue; 2919 } 2920 err = request_irq(entry->vector, &rnpm_msix_clean_rings, 0, 2921 q_vector->name, q_vector); 2922 if (err) { 2923 e_err(probe, 2924 "%s:request_irq failed for MSIX interrupt:%d Error: %d\n", 2925 netdev->name, entry->vector, err); 2926 goto free_queue_irqs; 2927 } 2928 /* register for affinity change notifications */ 2929 q_vector->affinity_notify.notify = rnpm_irq_affinity_notify; 2930 q_vector->affinity_notify.release = rnpm_irq_affinity_release; 2931 irq_set_affinity_notifier(entry->vector, 2932 &q_vector->affinity_notify); 2933 /* Spread affinity hints out across online CPUs. 2934 * 2935 * get_cpu_mask returns a static constant mask with 2936 * a permanent lifetime so it's ok to pass to 2937 * irq_set_affinity_hint without making a copy. 2938 */ 2939 cpu = cpumask_local_spread(q_vector->v_idx, -1); 2940 irq_set_affinity_hint(entry->vector, get_cpu_mask(cpu)); 2941 } 2942 2943 return 0; 2944 2945 free_queue_irqs: 2946 while (i) { 2947 i--; 2948 irq_set_affinity_hint(adapter->msix_entries[i].vector, NULL); 2949 irq_set_affinity_notifier(adapter->msix_entries[i].vector, 2950 NULL); 2951 irq_set_affinity_hint(adapter->msix_entries[i].vector, NULL); 2952 free_irq(adapter->msix_entries[i].vector, adapter->q_vector[i]); 2953 } 2954 2955 kfree(adapter->msix_entries); 2956 adapter->msix_entries = NULL; 2957 return err; 2958 } 2959 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 6865/10605] drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5599:32: error: called object type 'int' is not a function or function pointer
by kernel test robot 09 Jul '24

09 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 0dba2ca16050e1ea7b068850b6fa440dbeb6665b commit: 6adab536d69347a10c2366aaf6b86de963d5994b [6865/10605] drivers: initial support for rnpvf drivers from Mucse Technology config: arm64-randconfig-002-20240709 (https://download.01.org/0day-ci/archive/20240709/202407090326.YKEPYjUd-lkp@…) compiler: clang version 17.0.6 (https://github.com/llvm/llvm-project 6009708b4367171ccdbf4b5905cb6a803753fe18) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20240709/202407090326.YKEPYjUd-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407090326.YKEPYjUd-lkp@intel.com/ All errors (new ones prefixed by >>): | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:127:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 127 | void rnpvf_unmap_and_free_tx_resource(struct rnpvf_ring *ring, | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:1365:6: warning: no previous prototype for function 'rnpvf_alloc_rx_buffers' [-Wmissing-prototypes] 1365 | void rnpvf_alloc_rx_buffers(struct rnpvf_ring *rx_ring, u16 cleaned_count) | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:1365:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 1365 | void rnpvf_alloc_rx_buffers(struct rnpvf_ring *rx_ring, u16 cleaned_count) | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:1659:7: warning: variable 'xdp_xmit' set but not used [-Wunused-but-set-variable] 1659 | bool xdp_xmit = false; | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:1945:6: warning: no previous prototype for function 'update_rx_count' [-Wmissing-prototypes] 1945 | void update_rx_count(int cleaned, struct rnpvf_q_vector *q_vector) | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:1945:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 1945 | void update_rx_count(int cleaned, struct rnpvf_q_vector *q_vector) | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2420:6: warning: no previous prototype for function 'rnpvf_write_eitr_rx' [-Wmissing-prototypes] 2420 | void rnpvf_write_eitr_rx(struct rnpvf_q_vector *q_vector) | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2420:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 2420 | void rnpvf_write_eitr_rx(struct rnpvf_q_vector *q_vector) | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2523:6: warning: no previous prototype for function 'rnpvf_configure_tx_ring' [-Wmissing-prototypes] 2523 | void rnpvf_configure_tx_ring(struct rnpvf_adapter *adapter, | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2523:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 2523 | void rnpvf_configure_tx_ring(struct rnpvf_adapter *adapter, | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2589:6: warning: no previous prototype for function 'rnpvf_disable_rx_queue' [-Wmissing-prototypes] 2589 | void rnpvf_disable_rx_queue(struct rnpvf_adapter *adapter, | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2589:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 2589 | void rnpvf_disable_rx_queue(struct rnpvf_adapter *adapter, | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2595:6: warning: no previous prototype for function 'rnpvf_enable_rx_queue' [-Wmissing-prototypes] 2595 | void rnpvf_enable_rx_queue(struct rnpvf_adapter *adapter, | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2595:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 2595 | void rnpvf_enable_rx_queue(struct rnpvf_adapter *adapter, | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2601:6: warning: no previous prototype for function 'rnpvf_configure_rx_ring' [-Wmissing-prototypes] 2601 | void rnpvf_configure_rx_ring(struct rnpvf_adapter *adapter, | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2601:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 2601 | void rnpvf_configure_rx_ring(struct rnpvf_adapter *adapter, | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:2736:6: warning: variable 'err' set but not used [-Wunused-but-set-variable] 2736 | int err = -EOPNOTSUPP; | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:3307:6: warning: variable 'vector_threshold' set but not used [-Wunused-but-set-variable] 3307 | int vector_threshold; | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:3456:19: warning: variable 'hw' set but not used [-Wunused-but-set-variable] 3456 | struct rnpvf_hw *hw; | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:4590:6: warning: no previous prototype for function 'rnpvf_tx_ctxtdesc' [-Wmissing-prototypes] 4590 | void rnpvf_tx_ctxtdesc(struct rnpvf_ring *tx_ring, u16 mss_seg_len, | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:4590:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 4590 | void rnpvf_tx_ctxtdesc(struct rnpvf_ring *tx_ring, u16 mss_seg_len, | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5039:6: warning: no previous prototype for function 'rnpvf_maybe_tx_ctxtdesc' [-Wmissing-prototypes] 5039 | void rnpvf_maybe_tx_ctxtdesc(struct rnpvf_ring *tx_ring, | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5039:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 5039 | void rnpvf_maybe_tx_ctxtdesc(struct rnpvf_ring *tx_ring, | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5089:13: warning: no previous prototype for function 'rnpvf_xmit_frame_ring' [-Wmissing-prototypes] 5089 | netdev_tx_t rnpvf_xmit_frame_ring(struct sk_buff *skb, | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5089:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 5089 | netdev_tx_t rnpvf_xmit_frame_ring(struct sk_buff *skb, | ^ | static drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5484:6: warning: variable 'ring_csum_err' set but not used [-Wunused-but-set-variable] 5484 | u64 ring_csum_err = 0; | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5485:6: warning: variable 'ring_csum_good' set but not used [-Wunused-but-set-variable] 5485 | u64 ring_csum_good = 0; | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5580:6: warning: no previous prototype for function 'rnpvf_assign_netdev_ops' [-Wmissing-prototypes] 5580 | void rnpvf_assign_netdev_ops(struct net_device *dev) | ^ drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5580:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 5580 | void rnpvf_assign_netdev_ops(struct net_device *dev) | ^ | static >> drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c:5599:32: error: called object type 'int' is not a function or function pointer 5599 | v = rd32(hw, RNP_DMA_RX_START(ring)); | ~~~~~~~~~~~~~~~~^ drivers/net/ethernet/mucse/rnpvf/rnpvf_regs.h:116:53: note: expanded from macro 'rd32' 116 | #define rd32(hw, off) rnpvf_rd_reg((hw)->hw_addr + (off)) | ^~~ drivers/net/ethernet/mucse/rnpvf/rnpvf_regs.h:104:42: note: expanded from macro 'rnpvf_rd_reg' 104 | #define rnpvf_rd_reg(reg) readl((void *)(reg)) | ^~~ 18 warnings and 1 error generated. Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for RESCTRL_FS Depends on [n]: MISC_FILESYSTEMS [=n] && ARCH_HAS_CPU_RESCTRL [=y] Selected by [y]: - ARM64_MPAM [=y] vim +/int +5599 drivers/net/ethernet/mucse/rnpvf/rnpvf_main.c 5587 5588 static u8 rnpvf_vfnum(struct rnpvf_hw *hw) 5589 { 5590 u16 vf_num = -1; 5591 u32 pfvfnum_reg; 5592 5593 #if CONFIG_BAR4_PFVFNUM 5594 int ring, v; 5595 u16 func = 0; 5596 5597 func = ((hw->pdev->devfn & 0x1) ? 1 : 0); 5598 for (ring = 0; ring < 128; ring += 2) { > 5599 v = rd32(hw, RNP_DMA_RX_START(ring)); 5600 if ((v & 0xFFFF) == hw->pdev->vendor) { 5601 continue; 5602 } else { 5603 vf_num = (1 << 7) /*vf-active*/ | 5604 (func << 6) /*pf*/ | (ring / 2) /*vfnum*/; 5605 break; 5606 } 5607 } 5608 return vf_num; 5609 #else 5610 pfvfnum_reg = 5611 (VF_NUM_REG_N10 & (pci_resource_len(hw->pdev, 0) - 1)); 5612 vf_num = readl(hw->hw_addr_bar0 + pfvfnum_reg); 5613 #define VF_NUM_MASK_TEMP (0xff0) 5614 #define VF_NUM_OFF (4) 5615 return ((vf_num & VF_NUM_MASK_TEMP) >> VF_NUM_OFF); 5616 #endif 5617 } 5618 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6] kdb: Fix buffer overflow during tab-complete
by Tengda Wu 08 Jul '24

08 Jul '24

From: Daniel Thompson <daniel.thompson(a)linaro.org> stable inclusion from stable-v6.6.34 commit 107e825cc448b7834b31e8b1b3cf0f57426d46d5 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB05N CVE: CVE-2024-39480 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit e9730744bf3af04cda23799029342aa3cddbc454 upstream. Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer. Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around. Reported-by: Justin Stitt <justinstitt(a)google.com> Closes: https://lore.kernel.org/all/CAFhGd8qESuuifuHsNjFPR-Va3P80bxrw+LqvC8deA8GziU… Cc: stable(a)vger.kernel.org Reviewed-by: Douglas Anderson <dianders(a)chromium.org> Reviewed-by: Justin Stitt <justinstitt(a)google.com> Tested-by: Justin Stitt <justinstitt(a)google.com> Link: https://lore.kernel.org/r/20240424-kgdb_read_refactor-v3-1-f236dbe9828d@lin… Signed-off-by: Daniel Thompson <daniel.thompson(a)linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Fixes: 5d5314d6795f ("kdb: core for kgdb back end (1 of 2)") Signed-off-by: Tengda Wu <wutengda2(a)huawei.com> --- kernel/debug/kdb/kdb_io.c | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/kernel/debug/kdb/kdb_io.c b/kernel/debug/kdb/kdb_io.c index 9443bc63c5a2..06dfbccb1033 100644 --- a/kernel/debug/kdb/kdb_io.c +++ b/kernel/debug/kdb/kdb_io.c @@ -367,14 +367,19 @@ static char *kdb_read(char *buffer, size_t bufsize) kdb_printf(kdb_prompt_str); kdb_printf("%s", buffer); } else if (tab != 2 && count > 0) { - len_tmp = strlen(p_tmp); - strncpy(p_tmp+len_tmp, cp, lastchar-cp+1); - len_tmp = strlen(p_tmp); - strncpy(cp, p_tmp+len, len_tmp-len + 1); - len = len_tmp - len; - kdb_printf("%s", cp); - cp += len; - lastchar += len; + /* How many new characters do we want from tmpbuffer? */ + len_tmp = strlen(p_tmp) - len; + if (lastchar + len_tmp >= bufend) + len_tmp = bufend - lastchar; + + if (len_tmp) { + /* + 1 ensures the '\0' is memmove'd */ + memmove(cp+len_tmp, cp, (lastchar-cp) + 1); + memcpy(cp, p_tmp+len, len_tmp); + kdb_printf("%s", cp); + cp += len_tmp; + lastchar += len_tmp; + } } kdb_nextline = 1; /* reset output line number */ break; -- 2.34.1

2 1

[PATCH OLK-5.10] kdb: Fix buffer overflow during tab-complete
by Tengda Wu 08 Jul '24

08 Jul '24

From: Daniel Thompson <daniel.thompson(a)linaro.org> stable inclusion from stable-v5.10.219 commit cfdc2fa4db57503bc6d3817240547c8ddc55fa96 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB05N CVE: CVE-2024-39480 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit e9730744bf3af04cda23799029342aa3cddbc454 upstream. Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer. Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around. Reported-by: Justin Stitt <justinstitt(a)google.com> Closes: https://lore.kernel.org/all/CAFhGd8qESuuifuHsNjFPR-Va3P80bxrw+LqvC8deA8GziU… Cc: stable(a)vger.kernel.org Reviewed-by: Douglas Anderson <dianders(a)chromium.org> Reviewed-by: Justin Stitt <justinstitt(a)google.com> Tested-by: Justin Stitt <justinstitt(a)google.com> Link: https://lore.kernel.org/r/20240424-kgdb_read_refactor-v3-1-f236dbe9828d@lin… Signed-off-by: Daniel Thompson <daniel.thompson(a)linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Fixes: 5d5314d6795f ("kdb: core for kgdb back end (1 of 2)") Signed-off-by: Tengda Wu <wutengda2(a)huawei.com> --- kernel/debug/kdb/kdb_io.c | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/kernel/debug/kdb/kdb_io.c b/kernel/debug/kdb/kdb_io.c index 6735ac36b718..dcc7e13e98b3 100644 --- a/kernel/debug/kdb/kdb_io.c +++ b/kernel/debug/kdb/kdb_io.c @@ -354,14 +354,19 @@ static char *kdb_read(char *buffer, size_t bufsize) kdb_printf(kdb_prompt_str); kdb_printf("%s", buffer); } else if (tab != 2 && count > 0) { - len_tmp = strlen(p_tmp); - strncpy(p_tmp+len_tmp, cp, lastchar-cp+1); - len_tmp = strlen(p_tmp); - strncpy(cp, p_tmp+len, len_tmp-len + 1); - len = len_tmp - len; - kdb_printf("%s", cp); - cp += len; - lastchar += len; + /* How many new characters do we want from tmpbuffer? */ + len_tmp = strlen(p_tmp) - len; + if (lastchar + len_tmp >= bufend) + len_tmp = bufend - lastchar; + + if (len_tmp) { + /* + 1 ensures the '\0' is memmove'd */ + memmove(cp+len_tmp, cp, (lastchar-cp) + 1); + memcpy(cp, p_tmp+len, len_tmp); + kdb_printf("%s", cp); + cp += len_tmp; + lastchar += len_tmp; + } } kdb_nextline = 1; /* reset output line number */ break; -- 2.34.1

2 1

[PATCH openEuler-1.0-LTS] kdb: Fix buffer overflow during tab-complete
by Tengda Wu 08 Jul '24

08 Jul '24

From: Daniel Thompson <daniel.thompson(a)linaro.org> stable inclusion from stable-v4.19.316 commit fb824a99e148ff272a53d71d84122728b5f00992 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB05N CVE: CVE-2024-39480 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit e9730744bf3af04cda23799029342aa3cddbc454 upstream. Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer. Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around. Reported-by: Justin Stitt <justinstitt(a)google.com> Closes: https://lore.kernel.org/all/CAFhGd8qESuuifuHsNjFPR-Va3P80bxrw+LqvC8deA8GziU… Cc: stable(a)vger.kernel.org Reviewed-by: Douglas Anderson <dianders(a)chromium.org> Reviewed-by: Justin Stitt <justinstitt(a)google.com> Tested-by: Justin Stitt <justinstitt(a)google.com> Link: https://lore.kernel.org/r/20240424-kgdb_read_refactor-v3-1-f236dbe9828d@lin… Signed-off-by: Daniel Thompson <daniel.thompson(a)linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Fixes: 5d5314d6795f ("kdb: core for kgdb back end (1 of 2)") Signed-off-by: Tengda Wu <wutengda2(a)huawei.com> --- kernel/debug/kdb/kdb_io.c | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/kernel/debug/kdb/kdb_io.c b/kernel/debug/kdb/kdb_io.c index 6a4b41484afe..2ce307c86977 100644 --- a/kernel/debug/kdb/kdb_io.c +++ b/kernel/debug/kdb/kdb_io.c @@ -364,14 +364,19 @@ static char *kdb_read(char *buffer, size_t bufsize) kdb_printf(kdb_prompt_str); kdb_printf("%s", buffer); } else if (tab != 2 && count > 0) { - len_tmp = strlen(p_tmp); - strncpy(p_tmp+len_tmp, cp, lastchar-cp+1); - len_tmp = strlen(p_tmp); - strncpy(cp, p_tmp+len, len_tmp-len + 1); - len = len_tmp - len; - kdb_printf("%s", cp); - cp += len; - lastchar += len; + /* How many new characters do we want from tmpbuffer? */ + len_tmp = strlen(p_tmp) - len; + if (lastchar + len_tmp >= bufend) + len_tmp = bufend - lastchar; + + if (len_tmp) { + /* + 1 ensures the '\0' is memmove'd */ + memmove(cp+len_tmp, cp, (lastchar-cp) + 1); + memcpy(cp, p_tmp+len, len_tmp); + kdb_printf("%s", cp); + cp += len_tmp; + lastchar += len_tmp; + } } kdb_nextline = 1; /* reset output line number */ break; -- 2.34.1

2 1

[PATCH openEuler-22.03-LTS-SP1] kdb: Fix buffer overflow during tab-complete
by Tengda Wu 08 Jul '24

08 Jul '24

From: Daniel Thompson <daniel.thompson(a)linaro.org> stable inclusion from stable-v5.10.219 commit cfdc2fa4db57503bc6d3817240547c8ddc55fa96 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB05N CVE: CVE-2024-39480 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit e9730744bf3af04cda23799029342aa3cddbc454 upstream. Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer. Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around. Reported-by: Justin Stitt <justinstitt(a)google.com> Closes: https://lore.kernel.org/all/CAFhGd8qESuuifuHsNjFPR-Va3P80bxrw+LqvC8deA8GziU… Cc: stable(a)vger.kernel.org Reviewed-by: Douglas Anderson <dianders(a)chromium.org> Reviewed-by: Justin Stitt <justinstitt(a)google.com> Tested-by: Justin Stitt <justinstitt(a)google.com> Link: https://lore.kernel.org/r/20240424-kgdb_read_refactor-v3-1-f236dbe9828d@lin… Signed-off-by: Daniel Thompson <daniel.thompson(a)linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Fixes: 5d5314d6795f ("kdb: core for kgdb back end (1 of 2)") Signed-off-by: Tengda Wu <wutengda2(a)huawei.com> --- kernel/debug/kdb/kdb_io.c | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/kernel/debug/kdb/kdb_io.c b/kernel/debug/kdb/kdb_io.c index 6735ac36b718..dcc7e13e98b3 100644 --- a/kernel/debug/kdb/kdb_io.c +++ b/kernel/debug/kdb/kdb_io.c @@ -354,14 +354,19 @@ static char *kdb_read(char *buffer, size_t bufsize) kdb_printf(kdb_prompt_str); kdb_printf("%s", buffer); } else if (tab != 2 && count > 0) { - len_tmp = strlen(p_tmp); - strncpy(p_tmp+len_tmp, cp, lastchar-cp+1); - len_tmp = strlen(p_tmp); - strncpy(cp, p_tmp+len, len_tmp-len + 1); - len = len_tmp - len; - kdb_printf("%s", cp); - cp += len; - lastchar += len; + /* How many new characters do we want from tmpbuffer? */ + len_tmp = strlen(p_tmp) - len; + if (lastchar + len_tmp >= bufend) + len_tmp = bufend - lastchar; + + if (len_tmp) { + /* + 1 ensures the '\0' is memmove'd */ + memmove(cp+len_tmp, cp, (lastchar-cp) + 1); + memcpy(cp, p_tmp+len, len_tmp); + kdb_printf("%s", cp); + cp += len_tmp; + lastchar += len_tmp; + } } kdb_nextline = 1; /* reset output line number */ break; -- 2.34.1

2 1

[PATCH OLK-5.10] arm64: mm: Pass pbha-performance-only bit under chosen node
by Wupeng Ma 08 Jul '24

08 Jul '24

From: Ma Wupeng <mawupeng1(a)huawei.com> hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/I96IZH -------------------------------- Pass pbha-performance-only under chosen node to slove booting problem. Fixes: f43933b3f947 ("arm64: cpufeature: Enable PBHA for stage1 early via FDT") Signed-off-by: Ma Wupeng <mawupeng1(a)huawei.com> --- arch/arm64/kernel/cpufeature.c | 12 +++++++++++- drivers/firmware/efi/libstub/fdt.c | 7 ------- 2 files changed, 11 insertions(+), 8 deletions(-) diff --git a/arch/arm64/kernel/cpufeature.c b/arch/arm64/kernel/cpufeature.c index 9a4193991be5..36a426b0def2 100644 --- a/arch/arm64/kernel/cpufeature.c +++ b/arch/arm64/kernel/cpufeature.c @@ -1802,14 +1802,24 @@ void __init early_pbha_init(void) if (!fdt) goto unlock; + /* arm,pbha-performance-only may exist in both chosen and cpus node */ + node = fdt_path_offset(fdt, "/chosen"); + if (node < 0) + goto unlock; + + prop = fdt_getprop(fdt, node, "arm,pbha-performance-only", &size); + if (prop) + goto found; + node = fdt_path_offset(fdt, "/cpus"); if (node < 0) goto unlock; prop = fdt_getprop(fdt, node, "arm,pbha-performance-only", &size); - if (!prop) + if (prop) goto unlock; +found: if (!cpu_has_pbha()) goto unlock; diff --git a/drivers/firmware/efi/libstub/fdt.c b/drivers/firmware/efi/libstub/fdt.c index cb8e8e4e3f63..30aeb2b54569 100644 --- a/drivers/firmware/efi/libstub/fdt.c +++ b/drivers/firmware/efi/libstub/fdt.c @@ -57,13 +57,6 @@ static efi_status_t fdt_init_hbm_mode(void *fdt, int node) if (status) return EFI_LOAD_ERROR; - node = fdt_subnode_offset(fdt, 0, "cpus"); - if (node < 0) { - node = fdt_add_subnode(fdt, 0, "cpus"); - if (node < 0) - return EFI_LOAD_ERROR; - } - /* Current PBHA bit59 is need to enable PBHA bit0 mode. */ status = fdt_setprop_var(fdt, node, "arm,pbha-performance-only", arr); if (status) { -- 2.25.1

2 1

[PATCH OLK-6.6] mm: mem_reliable: Make counting reliable task usage compatible with folio
by Wupeng Ma 08 Jul '24

08 Jul '24

From: Ma Wupeng <mawupeng1(a)huawei.com> hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/I8USBA -------------------------------- Memory folio is enabled in current branch, however the counting of reliale memory task need some polish to make the counting right. In zap_present_folio_ptes, non-anon folio should also be counted. Fixes: b5be205e006a ("mm/memory: factor out zapping of present pte into zap_present_pte()") Signed-off-by: Ma Wupeng <mawupeng1(a)huawei.com> --- kernel/events/uprobes.c | 2 +- mm/huge_memory.c | 4 ++-- mm/khugepaged.c | 2 +- mm/ksm.c | 2 +- mm/memory.c | 7 ++++--- mm/rmap.c | 8 ++++---- 6 files changed, 13 insertions(+), 12 deletions(-) diff --git a/kernel/events/uprobes.c b/kernel/events/uprobes.c index 9f8d9baa7a2f..a80072c3f888 100644 --- a/kernel/events/uprobes.c +++ b/kernel/events/uprobes.c @@ -199,7 +199,7 @@ static int __replace_page(struct vm_area_struct *vma, unsigned long addr, set_pte_at_notify(mm, addr, pvmw.pte, mk_pte(new_page, vma->vm_page_prot)); - add_reliable_page_counter(old_page, mm, -1); + add_reliable_folio_counter(old_folio, mm, -1); folio_remove_rmap_pte(old_folio, old_page, vma); if (!folio_mapped(old_folio)) folio_free_swap(old_folio); diff --git a/mm/huge_memory.c b/mm/huge_memory.c index 32ddf09db52b..d743502c70f0 100644 --- a/mm/huge_memory.c +++ b/mm/huge_memory.c @@ -1608,7 +1608,7 @@ int copy_huge_pmd(struct mm_struct *dst_mm, struct mm_struct *src_mm, return -EAGAIN; } add_mm_counter(dst_mm, MM_ANONPAGES, HPAGE_PMD_NR); - add_reliable_page_counter(src_page, dst_mm, HPAGE_PMD_NR); + add_reliable_folio_counter(src_folio, dst_mm, HPAGE_PMD_NR); out_zero_page: mm_inc_nr_ptes(dst_mm); pgtable_trans_huge_deposit(dst_mm, dst_pmd, pgtable); @@ -2577,7 +2577,7 @@ static void __split_huge_pmd_locked(struct vm_area_struct *vma, pmd_t *pmd, folio_mark_dirty(folio); if (!folio_test_referenced(folio) && pmd_young(old_pmd)) folio_set_referenced(folio); - add_reliable_page_counter(page, mm, -HPAGE_PMD_NR); + add_reliable_folio_counter(folio, mm, -HPAGE_PMD_NR); folio_remove_rmap_pmd(folio, page, vma); folio_put(folio); } diff --git a/mm/khugepaged.c b/mm/khugepaged.c index fa787464662f..06f31ad4452e 100644 --- a/mm/khugepaged.c +++ b/mm/khugepaged.c @@ -1644,7 +1644,7 @@ int collapse_pte_mapped_thp(struct mm_struct *mm, unsigned long addr, */ ptep_clear(mm, addr, pte); folio_remove_rmap_pte(folio, page, vma); - add_reliable_page_counter(page, mm, -1); + add_reliable_folio_counter(folio, mm, -1); nr_ptes++; } diff --git a/mm/ksm.c b/mm/ksm.c index 94207293e6fc..09411079262b 100644 --- a/mm/ksm.c +++ b/mm/ksm.c @@ -1236,7 +1236,7 @@ static int replace_page(struct vm_area_struct *vma, struct page *page, */ if (!is_zero_pfn(page_to_pfn(kpage))) { folio_get(kfolio); - add_reliable_page_counter(kpage, mm, 1); + add_reliable_folio_counter(kfolio, mm, 1); folio_add_anon_rmap_pte(kfolio, kpage, vma, addr, RMAP_NONE); newpte = mk_pte(kpage, vma->vm_page_prot); } else { diff --git a/mm/memory.c b/mm/memory.c index fe10342687d0..49a5618661d8 100644 --- a/mm/memory.c +++ b/mm/memory.c @@ -1495,12 +1495,12 @@ static __always_inline void zap_present_folio_ptes(struct mmu_gather *tlb, if (pte_young(ptent) && likely(vma_has_recency(vma))) folio_mark_accessed(folio); rss[mm_counter(folio)] -= nr; - add_reliable_page_counter(page, mm, -nr); } else { /* We don't need up-to-date accessed/dirty bits. */ clear_full_ptes(mm, addr, pte, nr, tlb->fullmm); rss[MM_ANONPAGES] -= nr; } + add_reliable_folio_counter(folio, mm, -nr); /* Checking a single PTE in a batch is sufficient. */ arch_check_zapped_pte(vma, ptent); @@ -1637,7 +1637,7 @@ static unsigned long zap_pte_range(struct mmu_gather *tlb, */ WARN_ON_ONCE(!vma_is_anonymous(vma)); rss[mm_counter(folio)]--; - add_reliable_page_counter(page, mm, -1); + add_reliable_folio_counter(folio, mm, -1); if (is_device_private_entry(entry)) folio_remove_rmap_pte(folio, page, vma); folio_put(folio); @@ -1654,6 +1654,7 @@ static unsigned long zap_pte_range(struct mmu_gather *tlb, if (!should_zap_folio(details, folio)) continue; rss[mm_counter(folio)]--; + add_reliable_folio_counter(folio, mm, -1); } else if (pte_marker_entry_uffd_wp(entry)) { /* * For anon: always drop the marker; for file: only @@ -4643,7 +4644,7 @@ vm_fault_t do_set_pmd(struct vm_fault *vmf, struct page *page) entry = maybe_pmd_mkwrite(pmd_mkdirty(entry), vma); add_mm_counter(vma->vm_mm, mm_counter_file(folio), HPAGE_PMD_NR); - add_reliable_page_counter(page, vma->vm_mm, HPAGE_PMD_NR); + add_reliable_folio_counter(folio, vma->vm_mm, HPAGE_PMD_NR); folio_add_file_rmap_pmd(folio, page, vma); /* diff --git a/mm/rmap.c b/mm/rmap.c index d13003244e6a..d78bb701bda1 100644 --- a/mm/rmap.c +++ b/mm/rmap.c @@ -1757,7 +1757,7 @@ static bool try_to_unmap_one(struct folio *folio, struct vm_area_struct *vma, hsz); } else { dec_mm_counter(mm, mm_counter(folio)); - add_reliable_page_counter(&folio->page, mm, -1); + add_reliable_folio_counter(folio, mm, -1); set_pte_at(mm, address, pvmw.pte, pteval); } @@ -1773,7 +1773,7 @@ static bool try_to_unmap_one(struct folio *folio, struct vm_area_struct *vma, * copied pages. */ dec_mm_counter(mm, mm_counter(folio)); - add_reliable_page_counter(&folio->page, mm, -1); + add_reliable_folio_counter(folio, mm, -1); } else if (folio_test_anon(folio)) { swp_entry_t entry = page_swap_entry(subpage); pte_t swp_pte; @@ -2163,7 +2163,7 @@ static bool try_to_migrate_one(struct folio *folio, struct vm_area_struct *vma, hsz); } else { dec_mm_counter(mm, mm_counter(folio)); - add_reliable_page_counter(&folio->page, mm, -1); + add_reliable_folio_counter(folio, mm, -1); set_pte_at(mm, address, pvmw.pte, pteval); } @@ -2179,7 +2179,7 @@ static bool try_to_migrate_one(struct folio *folio, struct vm_area_struct *vma, * copied pages. */ dec_mm_counter(mm, mm_counter(folio)); - add_reliable_page_counter(&folio->page, mm, -1); + add_reliable_folio_counter(folio, mm, -1); } else { swp_entry_t entry; pte_t swp_pte; -- 2.25.1

2 1

[PATCH openEuler-22.03-LTS-SP1] kdb: Fix buffer overflow during tab-complete
by Tengda Wu 08 Jul '24

08 Jul '24

From: Daniel Thompson <daniel.thompson(a)linaro.org> stable inclusion from stable-v5.10.219 commit cfdc2fa4db57503bc6d3817240547c8ddc55fa96 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB05N CVE: CVE-2024-39480 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit e9730744bf3af04cda23799029342aa3cddbc454 upstream. Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer. Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around. Reported-by: Justin Stitt <justinstitt(a)google.com> Closes: https://lore.kernel.org/all/CAFhGd8qESuuifuHsNjFPR-Va3P80bxrw+LqvC8deA8GziU… Cc: stable(a)vger.kernel.org Reviewed-by: Douglas Anderson <dianders(a)chromium.org> Reviewed-by: Justin Stitt <justinstitt(a)google.com> Tested-by: Justin Stitt <justinstitt(a)google.com> Link: https://lore.kernel.org/r/20240424-kgdb_read_refactor-v3-1-f236dbe9828d@lin… Signed-off-by: Daniel Thompson <daniel.thompson(a)linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Fixes: 5d5314d6795f3c1c0f415348ff8c51f7de042b77 ("kdb: core for kgdb back end (1 of 2)") Signed-off-by: Tengda Wu <wutengda2(a)huawei.com> --- kernel/debug/kdb/kdb_io.c | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/kernel/debug/kdb/kdb_io.c b/kernel/debug/kdb/kdb_io.c index 6735ac36b718..dcc7e13e98b3 100644 --- a/kernel/debug/kdb/kdb_io.c +++ b/kernel/debug/kdb/kdb_io.c @@ -354,14 +354,19 @@ static char *kdb_read(char *buffer, size_t bufsize) kdb_printf(kdb_prompt_str); kdb_printf("%s", buffer); } else if (tab != 2 && count > 0) { - len_tmp = strlen(p_tmp); - strncpy(p_tmp+len_tmp, cp, lastchar-cp+1); - len_tmp = strlen(p_tmp); - strncpy(cp, p_tmp+len, len_tmp-len + 1); - len = len_tmp - len; - kdb_printf("%s", cp); - cp += len; - lastchar += len; + /* How many new characters do we want from tmpbuffer? */ + len_tmp = strlen(p_tmp) - len; + if (lastchar + len_tmp >= bufend) + len_tmp = bufend - lastchar; + + if (len_tmp) { + /* + 1 ensures the '\0' is memmove'd */ + memmove(cp+len_tmp, cp, (lastchar-cp) + 1); + memcpy(cp, p_tmp+len, len_tmp); + kdb_printf("%s", cp); + cp += len_tmp; + lastchar += len_tmp; + } } kdb_nextline = 1; /* reset output line number */ break; -- 2.34.1

2 1

[PATCH OLK-6.6] kdb: Fix buffer overflow during tab-complete
by Tengda Wu 08 Jul '24

08 Jul '24

From: Daniel Thompson <daniel.thompson(a)linaro.org> stable inclusion from stable-v6.6.34 commit 107e825cc448b7834b31e8b1b3cf0f57426d46d5 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB05N CVE: CVE-2024-39480 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit e9730744bf3af04cda23799029342aa3cddbc454 upstream. Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer. Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around. Reported-by: Justin Stitt <justinstitt(a)google.com> Closes: https://lore.kernel.org/all/CAFhGd8qESuuifuHsNjFPR-Va3P80bxrw+LqvC8deA8GziU… Cc: stable(a)vger.kernel.org Reviewed-by: Douglas Anderson <dianders(a)chromium.org> Reviewed-by: Justin Stitt <justinstitt(a)google.com> Tested-by: Justin Stitt <justinstitt(a)google.com> Link: https://lore.kernel.org/r/20240424-kgdb_read_refactor-v3-1-f236dbe9828d@lin… Signed-off-by: Daniel Thompson <daniel.thompson(a)linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Fixes: 5d5314d6795f3c1c0f415348ff8c51f7de042b77 ("kdb: core for kgdb back end (1 of 2)") Signed-off-by: Tengda Wu <wutengda2(a)huawei.com> --- kernel/debug/kdb/kdb_io.c | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/kernel/debug/kdb/kdb_io.c b/kernel/debug/kdb/kdb_io.c index 9443bc63c5a2..06dfbccb1033 100644 --- a/kernel/debug/kdb/kdb_io.c +++ b/kernel/debug/kdb/kdb_io.c @@ -367,14 +367,19 @@ static char *kdb_read(char *buffer, size_t bufsize) kdb_printf(kdb_prompt_str); kdb_printf("%s", buffer); } else if (tab != 2 && count > 0) { - len_tmp = strlen(p_tmp); - strncpy(p_tmp+len_tmp, cp, lastchar-cp+1); - len_tmp = strlen(p_tmp); - strncpy(cp, p_tmp+len, len_tmp-len + 1); - len = len_tmp - len; - kdb_printf("%s", cp); - cp += len; - lastchar += len; + /* How many new characters do we want from tmpbuffer? */ + len_tmp = strlen(p_tmp) - len; + if (lastchar + len_tmp >= bufend) + len_tmp = bufend - lastchar; + + if (len_tmp) { + /* + 1 ensures the '\0' is memmove'd */ + memmove(cp+len_tmp, cp, (lastchar-cp) + 1); + memcpy(cp, p_tmp+len, len_tmp); + kdb_printf("%s", cp); + cp += len_tmp; + lastchar += len_tmp; + } } kdb_nextline = 1; /* reset output line number */ break; -- 2.34.1

2 1

[PATCH OLK-5.10] kdb: Fix buffer overflow during tab-complete
by Tengda Wu 08 Jul '24

08 Jul '24

From: Daniel Thompson <daniel.thompson(a)linaro.org> stable inclusion from stable-v5.10.219 commit cfdc2fa4db57503bc6d3817240547c8ddc55fa96 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB05N CVE: CVE-2024-39480 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit e9730744bf3af04cda23799029342aa3cddbc454 upstream. Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer. Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around. Reported-by: Justin Stitt <justinstitt(a)google.com> Closes: https://lore.kernel.org/all/CAFhGd8qESuuifuHsNjFPR-Va3P80bxrw+LqvC8deA8GziU… Cc: stable(a)vger.kernel.org Reviewed-by: Douglas Anderson <dianders(a)chromium.org> Reviewed-by: Justin Stitt <justinstitt(a)google.com> Tested-by: Justin Stitt <justinstitt(a)google.com> Link: https://lore.kernel.org/r/20240424-kgdb_read_refactor-v3-1-f236dbe9828d@lin… Signed-off-by: Daniel Thompson <daniel.thompson(a)linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Fixes: 5d5314d6795f3c1c0f415348ff8c51f7de042b77 ("kdb: core for kgdb back end (1 of 2)") Signed-off-by: Tengda Wu <wutengda2(a)huawei.com> --- kernel/debug/kdb/kdb_io.c | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/kernel/debug/kdb/kdb_io.c b/kernel/debug/kdb/kdb_io.c index 6735ac36b718..dcc7e13e98b3 100644 --- a/kernel/debug/kdb/kdb_io.c +++ b/kernel/debug/kdb/kdb_io.c @@ -354,14 +354,19 @@ static char *kdb_read(char *buffer, size_t bufsize) kdb_printf(kdb_prompt_str); kdb_printf("%s", buffer); } else if (tab != 2 && count > 0) { - len_tmp = strlen(p_tmp); - strncpy(p_tmp+len_tmp, cp, lastchar-cp+1); - len_tmp = strlen(p_tmp); - strncpy(cp, p_tmp+len, len_tmp-len + 1); - len = len_tmp - len; - kdb_printf("%s", cp); - cp += len; - lastchar += len; + /* How many new characters do we want from tmpbuffer? */ + len_tmp = strlen(p_tmp) - len; + if (lastchar + len_tmp >= bufend) + len_tmp = bufend - lastchar; + + if (len_tmp) { + /* + 1 ensures the '\0' is memmove'd */ + memmove(cp+len_tmp, cp, (lastchar-cp) + 1); + memcpy(cp, p_tmp+len, len_tmp); + kdb_printf("%s", cp); + cp += len_tmp; + lastchar += len_tmp; + } } kdb_nextline = 1; /* reset output line number */ break; -- 2.34.1

2 1

[PATCH openEuler-1.0-LTS] kdb: Fix buffer overflow during tab-complete
by Tengda Wu 08 Jul '24

08 Jul '24

From: Daniel Thompson <daniel.thompson(a)linaro.org> stable inclusion from stable-v4.19.316 commit fb824a99e148ff272a53d71d84122728b5f00992 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB05N CVE: CVE-2024-39480 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit e9730744bf3af04cda23799029342aa3cddbc454 upstream. Currently, when the user attempts symbol completion with the Tab key, kdb will use strncpy() to insert the completed symbol into the command buffer. Unfortunately it passes the size of the source buffer rather than the destination to strncpy() with predictably horrible results. Most obviously if the command buffer is already full but cp, the cursor position, is in the middle of the buffer, then we will write past the end of the supplied buffer. Fix this by replacing the dubious strncpy() calls with memmove()/memcpy() calls plus explicit boundary checks to make sure we have enough space before we start moving characters around. Reported-by: Justin Stitt <justinstitt(a)google.com> Closes: https://lore.kernel.org/all/CAFhGd8qESuuifuHsNjFPR-Va3P80bxrw+LqvC8deA8GziU… Cc: stable(a)vger.kernel.org Reviewed-by: Douglas Anderson <dianders(a)chromium.org> Reviewed-by: Justin Stitt <justinstitt(a)google.com> Tested-by: Justin Stitt <justinstitt(a)google.com> Link: https://lore.kernel.org/r/20240424-kgdb_read_refactor-v3-1-f236dbe9828d@lin… Signed-off-by: Daniel Thompson <daniel.thompson(a)linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Fixes: 5d5314d6795f3c1c0f415348ff8c51f7de042b77 ("kdb: core for kgdb back end (1 of 2)") Signed-off-by: Tengda Wu <wutengda2(a)huawei.com> --- kernel/debug/kdb/kdb_io.c | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/kernel/debug/kdb/kdb_io.c b/kernel/debug/kdb/kdb_io.c index 6a4b41484afe..2ce307c86977 100644 --- a/kernel/debug/kdb/kdb_io.c +++ b/kernel/debug/kdb/kdb_io.c @@ -364,14 +364,19 @@ static char *kdb_read(char *buffer, size_t bufsize) kdb_printf(kdb_prompt_str); kdb_printf("%s", buffer); } else if (tab != 2 && count > 0) { - len_tmp = strlen(p_tmp); - strncpy(p_tmp+len_tmp, cp, lastchar-cp+1); - len_tmp = strlen(p_tmp); - strncpy(cp, p_tmp+len, len_tmp-len + 1); - len = len_tmp - len; - kdb_printf("%s", cp); - cp += len; - lastchar += len; + /* How many new characters do we want from tmpbuffer? */ + len_tmp = strlen(p_tmp) - len; + if (lastchar + len_tmp >= bufend) + len_tmp = bufend - lastchar; + + if (len_tmp) { + /* + 1 ensures the '\0' is memmove'd */ + memmove(cp+len_tmp, cp, (lastchar-cp) + 1); + memcpy(cp, p_tmp+len, len_tmp); + kdb_printf("%s", cp); + cp += len_tmp; + lastchar += len_tmp; + } } kdb_nextline = 1; /* reset output line number */ break; -- 2.34.1

2 1

[PATCH OLK-6.6 0/1] fix CVE-2024-39481
by Hongbo Li 08 Jul '24

08 Jul '24

Fix CVE-2024-39481. Tomi Valkeinen (1): media: mc: Fix graph walk in media_pipeline_start drivers/media/mc/mc-entity.c | 6 ++++++ 1 file changed, 6 insertions(+) -- 2.34.1

2 2

[PATCH OLK-6.6] KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked
by Zizhi Wo 08 Jul '24

08 Jul '24

From: Sean Christopherson <seanjc(a)google.com> stable inclusion from stable-v6.6.34 commit f79edaf7370986d73d204b36c50cc563a4c0f356 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAB16D CVE: CVE-2024-39483 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- commit b4bd556467477420ee3a91fbcba73c579669edc6 upstream. When requesting an NMI window, WARN on vNMI support being enabled if and only if NMIs are actually masked, i.e. if the vCPU is already handling an NMI. KVM's ABI for NMIs that arrive simultanesouly (from KVM's point of view) is to inject one NMI and pend the other. When using vNMI, KVM pends the second NMI simply by setting V_NMI_PENDING, and lets the CPU do the rest (hardware automatically sets V_NMI_BLOCKING when an NMI is injected). However, if KVM can't immediately inject an NMI, e.g. because the vCPU is in an STI shadow or is running with GIF=0, then KVM will request an NMI window and trigger the WARN (but still function correctly). Whether or not the GIF=0 case makes sense is debatable, as the intent of KVM's behavior is to provide functionality that is as close to real hardware as possible. E.g. if two NMIs are sent in quick succession, the probability of both NMIs arriving in an STI shadow is infinitesimally low on real hardware, but significantly larger in a virtual environment, e.g. if the vCPU is preempted in the STI shadow. For GIF=0, the argument isn't as clear cut, because the window where two NMIs can collide is much larger in bare metal (though still small). That said, KVM should not have divergent behavior for the GIF=0 case based on whether or not vNMI support is enabled. And KVM has allowed simultaneous NMIs with GIF=0 for over a decade, since commit 7460fb4a3400 ("KVM: Fix simultaneous NMIs"). I.e. KVM's GIF=0 handling shouldn't be modified without a *really* good reason to do so, and if KVM's behavior were to be modified, it should be done irrespective of vNMI support. Fixes: fa4c027a7956 ("KVM: x86: Add support for SVM's Virtual NMI") Cc: stable(a)vger.kernel.org Cc: Santosh Shukla <Santosh.Shukla(a)amd.com> Cc: Maxim Levitsky <mlevitsk(a)redhat.com> Signed-off-by: Sean Christopherson <seanjc(a)google.com> Message-ID: <20240522021435.1684366-1-seanjc(a)google.com> Signed-off-by: Paolo Bonzini <pbonzini(a)redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Zizhi Wo <wozizhi(a)huawei.com> --- arch/x86/kvm/svm/svm.c | 27 +++++++++++++++++++-------- 1 file changed, 19 insertions(+), 8 deletions(-) diff --git a/arch/x86/kvm/svm/svm.c b/arch/x86/kvm/svm/svm.c index 8adb6e31c113..1424eb898028 100644 --- a/arch/x86/kvm/svm/svm.c +++ b/arch/x86/kvm/svm/svm.c @@ -3860,16 +3860,27 @@ static void svm_enable_nmi_window(struct kvm_vcpu *vcpu) struct vcpu_svm *svm = to_svm(vcpu); /* - * KVM should never request an NMI window when vNMI is enabled, as KVM - * allows at most one to-be-injected NMI and one pending NMI, i.e. if - * two NMIs arrive simultaneously, KVM will inject one and set - * V_NMI_PENDING for the other. WARN, but continue with the standard - * single-step approach to try and salvage the pending NMI. + * If NMIs are outright masked, i.e. the vCPU is already handling an + * NMI, and KVM has not yet intercepted an IRET, then there is nothing + * more to do at this time as KVM has already enabled IRET intercepts. + * If KVM has already intercepted IRET, then single-step over the IRET, + * as NMIs aren't architecturally unmasked until the IRET completes. + * + * If vNMI is enabled, KVM should never request an NMI window if NMIs + * are masked, as KVM allows at most one to-be-injected NMI and one + * pending NMI. If two NMIs arrive simultaneously, KVM will inject one + * NMI and set V_NMI_PENDING for the other, but if and only if NMIs are + * unmasked. KVM _will_ request an NMI window in some situations, e.g. + * if the vCPU is in an STI shadow or if GIF=0, KVM can't immediately + * inject the NMI. In those situations, KVM needs to single-step over + * the STI shadow or intercept STGI. */ - WARN_ON_ONCE(is_vnmi_enabled(svm)); + if (svm_get_nmi_mask(vcpu)) { + WARN_ON_ONCE(is_vnmi_enabled(svm)); - if (svm_get_nmi_mask(vcpu) && !svm->awaiting_iret_completion) - return; /* IRET will cause a vm exit */ + if (!svm->awaiting_iret_completion) + return; /* IRET will cause a vm exit */ + } /* * SEV-ES guests are responsible for signaling when a vCPU is ready to -- 2.39.2

2 1

[openeuler:OLK-6.6 3342/10598] include/linux/pgplib.h:36:23: error: field has incomplete type 'enum pgp_key_version'
by kernel test robot 08 Jul '24

08 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 01c2a11a75f4f8b273ef3e34cca3974b10314a3a commit: 43d4042e06d2bf96adf67d25e8d91653507a4cf9 [3342/10598] KEYS: Provide a function to load keys from a PGP keyring blob config: arm64-randconfig-r131-20240707 (https://download.01.org/0day-ci/archive/20240708/202407081638.r5xQjyqM-lkp@…) compiler: clang version 19.0.0git (https://github.com/llvm/llvm-project a0c6b8aef853eedaa0980f07c0a502a5a8a9740e) reproduce: (https://download.01.org/0day-ci/archive/20240708/202407081638.r5xQjyqM-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407081638.r5xQjyqM-lkp@intel.com/ Note: the openeuler/OLK-6.6 HEAD 01c2a11a75f4f8b273ef3e34cca3974b10314a3a builds fine. It only hurts bisectability. All errors (new ones prefixed by >>): In file included from crypto/asymmetric_keys/pgp_preload.c:19: include/linux/pgplib.h:26:15: warning: declaration of 'enum pgp_packet_tag' will not be visible outside of this function [-Wvisibility] 26 | enum pgp_packet_tag type, | ^ >> include/linux/pgplib.h:36:23: error: field has incomplete type 'enum pgp_key_version' 36 | enum pgp_key_version version : 8; | ^ include/linux/pgplib.h:36:7: note: forward declaration of 'enum pgp_key_version' 36 | enum pgp_key_version version : 8; | ^ >> include/linux/pgplib.h:37:23: error: field has incomplete type 'enum pgp_pubkey_algo' 37 | enum pgp_pubkey_algo pubkey_algo : 8; | ^ include/linux/pgplib.h:37:7: note: forward declaration of 'enum pgp_pubkey_algo' 37 | enum pgp_pubkey_algo pubkey_algo : 8; | ^ crypto/asymmetric_keys/pgp_preload.c:63:10: warning: declaration of 'enum pgp_packet_tag' will not be visible outside of this function [-Wvisibility] 63 | enum pgp_packet_tag type, u8 headerlen, | ^ crypto/asymmetric_keys/pgp_preload.c:63:25: error: variable has incomplete type 'enum pgp_packet_tag' 63 | enum pgp_packet_tag type, u8 headerlen, | ^ crypto/asymmetric_keys/pgp_preload.c:63:10: note: forward declaration of 'enum pgp_packet_tag' 63 | enum pgp_packet_tag type, u8 headerlen, | ^ crypto/asymmetric_keys/pgp_preload.c:107:36: error: use of undeclared identifier 'PGP_PKT_PUBLIC_KEY' 107 | ctx.pgp.types_of_interest = (1 << PGP_PKT_PUBLIC_KEY); | ^ >> crypto/asymmetric_keys/pgp_preload.c:108:25: error: incompatible function pointer types assigning to 'int (*)(struct pgp_parse_context *, enum pgp_packet_tag, u8, const u8 *, size_t)' (aka 'int (*)(struct pgp_parse_context *, enum pgp_packet_tag, unsigned char, const unsigned char *, unsigned long)') from 'int (struct pgp_parse_context *, enum pgp_packet_tag, u8, const u8 *, size_t)' (aka 'int (struct pgp_parse_context *, enum pgp_packet_tag, unsigned char, const unsigned char *, unsigned long)') [-Wincompatible-function-pointer-types] 108 | ctx.pgp.process_packet = found_pgp_key; | ^ ~~~~~~~~~~~~~ crypto/asymmetric_keys/pgp_preload.c:101:12: warning: no previous prototype for function 'preload_pgp_keys' [-Wmissing-prototypes] 101 | int __init preload_pgp_keys(const u8 *pgpdata, size_t pgpdatalen, | ^ crypto/asymmetric_keys/pgp_preload.c:101:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 101 | int __init preload_pgp_keys(const u8 *pgpdata, size_t pgpdatalen, | ^ | static 3 warnings and 5 errors generated. -- In file included from crypto/asymmetric_keys/pgp_public_key.c:19: In file included from include/linux/mpi.h:21: In file included from include/linux/scatterlist.h:8: In file included from include/linux/mm.h:2193: include/linux/vmstat.h:522:36: warning: arithmetic between different enumeration types ('enum node_stat_item' and 'enum lru_list') [-Wenum-enum-conversion] 522 | return node_stat_name(NR_LRU_BASE + lru) + 3; // skip "nr_" | ~~~~~~~~~~~ ^ ~~~ In file included from crypto/asymmetric_keys/pgp_public_key.c:20: include/linux/pgplib.h:26:15: warning: declaration of 'enum pgp_packet_tag' will not be visible outside of this function [-Wvisibility] 26 | enum pgp_packet_tag type, | ^ >> include/linux/pgplib.h:36:23: error: field has incomplete type 'enum pgp_key_version' 36 | enum pgp_key_version version : 8; | ^ include/linux/pgplib.h:36:7: note: forward declaration of 'enum pgp_key_version' 36 | enum pgp_key_version version : 8; | ^ >> include/linux/pgplib.h:37:23: error: field has incomplete type 'enum pgp_pubkey_algo' 37 | enum pgp_pubkey_algo pubkey_algo : 8; | ^ include/linux/pgplib.h:37:7: note: forward declaration of 'enum pgp_pubkey_algo' 37 | enum pgp_pubkey_algo pubkey_algo : 8; | ^ crypto/asymmetric_keys/pgp_public_key.c:63:2: error: call to undeclared function 'kenter'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 63 | kenter(""); | ^ crypto/asymmetric_keys/pgp_public_key.c:65:22: error: use of undeclared identifier 'PGP_KEY_VERSION_4' 65 | n = (pgp->version < PGP_KEY_VERSION_4) ? 8 : 6; | ^ crypto/asymmetric_keys/pgp_public_key.c:67:9: error: call to undeclared function 'mpi_key_length'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 67 | ret = mpi_key_length(key_ptr, keylen, nb + i, nn + i); | ^ crypto/asymmetric_keys/pgp_public_key.c:95:21: error: use of undeclared identifier 'PGP_KEY_VERSION_4' 95 | if (pgp->version < PGP_KEY_VERSION_4) { | ^ crypto/asymmetric_keys/pgp_public_key.c:115:2: error: call to undeclared function 'kleave'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 115 | kleave(" = %d", ret); | ^ crypto/asymmetric_keys/pgp_public_key.c:134:42: error: use of undeclared identifier 'PGP_KEY_VERSION_4' 134 | tfm = crypto_alloc_shash(pgp->version < PGP_KEY_VERSION_4 ? | ^ crypto/asymmetric_keys/pgp_public_key.c:191:2: error: call to undeclared function 'kleave'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 191 | kleave(" = %d", ret); | ^ crypto/asymmetric_keys/pgp_public_key.c:199:12: warning: declaration of 'enum pgp_packet_tag' will not be visible outside of this function [-Wvisibility] 199 | enum pgp_packet_tag type, | ^ crypto/asymmetric_keys/pgp_public_key.c:199:27: error: variable has incomplete type 'enum pgp_packet_tag' 199 | enum pgp_packet_tag type, | ^ crypto/asymmetric_keys/pgp_public_key.c:199:12: note: forward declaration of 'enum pgp_packet_tag' 199 | enum pgp_packet_tag type, | ^ crypto/asymmetric_keys/pgp_public_key.c:211:2: error: call to undeclared function 'kenter'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 211 | kenter(",%u,%u,,%zu", type, headerlen, datalen); | ^ >> crypto/asymmetric_keys/pgp_public_key.c:213:14: error: use of undeclared identifier 'PGP_PKT_USER_ID' 213 | if (type == PGP_PKT_USER_ID) { | ^ crypto/asymmetric_keys/pgp_public_key.c:216:3: error: call to undeclared function 'kleave'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 216 | kleave(" = 0 [user ID]"); | ^ crypto/asymmetric_keys/pgp_public_key.c:221:3: error: call to undeclared function 'kleave'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 221 | kleave(" = -ENOKEY [already]"); | ^ >> crypto/asymmetric_keys/pgp_public_key.c:234:25: error: use of undeclared identifier 'PGP_PUBKEY__LAST' 234 | if (pgp.pubkey_algo >= PGP_PUBKEY__LAST) | ^ >> crypto/asymmetric_keys/pgp_public_key.c:236:9: error: use of undeclared identifier 'pgp_to_public_key_algo' 236 | algo = pgp_to_public_key_algo[pgp.pubkey_algo]; | ^ crypto/asymmetric_keys/pgp_public_key.c:252:2: error: call to undeclared function 'kleave'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 252 | kleave(" = 0 [use]"); | ^ crypto/asymmetric_keys/pgp_public_key.c:310:2: error: call to undeclared function 'kenter'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 310 | kenter(""); | ^ >> crypto/asymmetric_keys/pgp_public_key.c:313:36: error: use of undeclared identifier 'PGP_PKT_PUBLIC_KEY' 313 | ctx.pgp.types_of_interest = (1 << PGP_PKT_PUBLIC_KEY) | | ^ fatal error: too many errors emitted, stopping now [-ferror-limit=] 3 warnings and 20 errors generated. Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for PGP_KEY_PARSER Depends on [n]: CRYPTO [=y] && ASYMMETRIC_KEY_TYPE [=y] && ASYMMETRIC_PUBLIC_KEY_SUBTYPE [=n] Selected by [y]: - PGP_PRELOAD [=y] && CRYPTO [=y] && ASYMMETRIC_KEY_TYPE [=y] vim +36 include/linux/pgplib.h b78af6579e15dc David Howells 2023-09-12 31 b78af6579e15dc David Howells 2023-09-12 32 extern int pgp_parse_packets(const u8 *data, size_t datalen, b78af6579e15dc David Howells 2023-09-12 33 struct pgp_parse_context *ctx); b78af6579e15dc David Howells 2023-09-12 34 b78af6579e15dc David Howells 2023-09-12 35 struct pgp_parse_pubkey { b78af6579e15dc David Howells 2023-09-12 @36 enum pgp_key_version version : 8; b78af6579e15dc David Howells 2023-09-12 @37 enum pgp_pubkey_algo pubkey_algo : 8; b78af6579e15dc David Howells 2023-09-12 38 __kernel_old_time_t creation_time; b78af6579e15dc David Howells 2023-09-12 39 __kernel_old_time_t expires_at; b78af6579e15dc David Howells 2023-09-12 40 }; b78af6579e15dc David Howells 2023-09-12 41 :::::: The code at line 36 was first introduced by commit :::::: b78af6579e15dcdff86504da90af77f3e890270e PGPLIB: Basic packet parser :::::: TO: David Howells <dhowells(a)redhat.com> :::::: CC: zgzxx <zhangguangzhi3(a)huawei.com> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6] drm: zynqmp_dpsub: Always register bridge
by Zhang Changzhong 08 Jul '24

08 Jul '24

From: Sean Anderson <sean.anderson(a)linux.dev> stable inclusion from stable-v6.6.33 commit 6ead3eccf67bc8318b1ce95ed879b2cc05b4fce9 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA7YJM CVE: CVE-2024-38664 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit be3f3042391d061cfca2bd22630e0d101acea5fc ] We must always register the DRM bridge, since zynqmp_dp_hpd_work_func calls drm_bridge_hpd_notify, which in turn expects hpd_mutex to be initialized. We do this before zynqmp_dpsub_drm_init since that calls drm_bridge_attach. This fixes the following lockdep warning: [ 19.217084] ------------[ cut here ]------------ [ 19.227530] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 19.227768] WARNING: CPU: 0 PID: 140 at kernel/locking/mutex.c:582 __mutex_lock+0x4bc/0x550 [ 19.241696] Modules linked in: [ 19.244937] CPU: 0 PID: 140 Comm: kworker/0:4 Not tainted 6.6.20+ #96 [ 19.252046] Hardware name: xlnx,zynqmp (DT) [ 19.256421] Workqueue: events zynqmp_dp_hpd_work_func [ 19.261795] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 19.269104] pc : __mutex_lock+0x4bc/0x550 [ 19.273364] lr : __mutex_lock+0x4bc/0x550 [ 19.277592] sp : ffffffc085c5bbe0 [ 19.281066] x29: ffffffc085c5bbe0 x28: 0000000000000000 x27: ffffff88009417f8 [ 19.288624] x26: ffffff8800941788 x25: ffffff8800020008 x24: ffffffc082aa3000 [ 19.296227] x23: ffffffc080d90e3c x22: 0000000000000002 x21: 0000000000000000 [ 19.303744] x20: 0000000000000000 x19: ffffff88002f5210 x18: 0000000000000000 [ 19.311295] x17: 6c707369642e3030 x16: 3030613464662072 x15: 0720072007200720 [ 19.318922] x14: 0000000000000000 x13: 284e4f5f4e524157 x12: 0000000000000001 [ 19.326442] x11: 0001ffc085c5b940 x10: 0001ff88003f388b x9 : 0001ff88003f3888 [ 19.334003] x8 : 0001ff88003f3888 x7 : 0000000000000000 x6 : 0000000000000000 [ 19.341537] x5 : 0000000000000000 x4 : 0000000000001668 x3 : 0000000000000000 [ 19.349054] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffffff88003f3880 [ 19.356581] Call trace: [ 19.359160] __mutex_lock+0x4bc/0x550 [ 19.363032] mutex_lock_nested+0x24/0x30 [ 19.367187] drm_bridge_hpd_notify+0x2c/0x6c [ 19.371698] zynqmp_dp_hpd_work_func+0x44/0x54 [ 19.376364] process_one_work+0x3ac/0x988 [ 19.380660] worker_thread+0x398/0x694 [ 19.384736] kthread+0x1bc/0x1c0 [ 19.388241] ret_from_fork+0x10/0x20 [ 19.392031] irq event stamp: 183 [ 19.395450] hardirqs last enabled at (183): [<ffffffc0800b9278>] finish_task_switch.isra.0+0xa8/0x2d4 [ 19.405140] hardirqs last disabled at (182): [<ffffffc081ad3754>] __schedule+0x714/0xd04 [ 19.413612] softirqs last enabled at (114): [<ffffffc080133de8>] srcu_invoke_callbacks+0x158/0x23c [ 19.423128] softirqs last disabled at (110): [<ffffffc080133de8>] srcu_invoke_callbacks+0x158/0x23c [ 19.432614] ---[ end trace 0000000000000000 ]--- Fixes: eb2d64bfcc17 ("drm: xlnx: zynqmp_dpsub: Report HPD through the bridge") Signed-off-by: Sean Anderson <sean.anderson(a)linux.dev> Reviewed-by: Laurent Pinchart <laurent.pinchart(a)ideasonboard.com> Reviewed-by: Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> Signed-off-by: Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> Link: https://patchwork.freedesktop.org/patch/msgid/20240308204741.3631919-1-sean… Signed-off-by: Maarten Lankhorst <maarten.lankhorst(a)linux.intel.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zhang Changzhong <zhangchangzhong(a)huawei.com> --- drivers/gpu/drm/xlnx/zynqmp_dpsub.c | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/drivers/gpu/drm/xlnx/zynqmp_dpsub.c b/drivers/gpu/drm/xlnx/zynqmp_dpsub.c index 88eb33acd..face8d6 100644 --- a/drivers/gpu/drm/xlnx/zynqmp_dpsub.c +++ b/drivers/gpu/drm/xlnx/zynqmp_dpsub.c @@ -256,12 +256,12 @@ static int zynqmp_dpsub_probe(struct platform_device *pdev) if (ret) goto err_dp; + drm_bridge_add(dpsub->bridge); + if (dpsub->dma_enabled) { ret = zynqmp_dpsub_drm_init(dpsub); if (ret) goto err_disp; - } else { - drm_bridge_add(dpsub->bridge); } dev_info(&pdev->dev, "ZynqMP DisplayPort Subsystem driver probed"); @@ -288,9 +288,8 @@ static void zynqmp_dpsub_remove(struct platform_device *pdev) if (dpsub->drm) zynqmp_dpsub_drm_cleanup(dpsub); - else - drm_bridge_remove(dpsub->bridge); + drm_bridge_remove(dpsub->bridge); zynqmp_disp_remove(dpsub); zynqmp_dp_remove(dpsub); -- 2.9.5

2 1

[PATCH openEuler-22.03-LTS-SP1 0/2] CVE-2024-36478
by Li Nan 08 Jul '24

08 Jul '24

Damien Le Moal (1): null_blk: Move driver into its own directory Yu Kuai (1): null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' drivers/block/{ => null_blk}/null_blk.h | 0 .../{null_blk_trace.h => null_blk/trace.h} | 2 +- .../{null_blk_main.c => null_blk/main.c} | 43 +++++++++++-------- .../{null_blk_trace.c => null_blk/trace.c} | 2 +- .../{null_blk_zoned.c => null_blk/zoned.c} | 2 +- drivers/block/Kconfig | 8 +--- drivers/block/Makefile | 7 +-- drivers/block/null_blk/Kconfig | 12 ++++++ drivers/block/null_blk/Makefile | 11 +++++ 9 files changed, 54 insertions(+), 33 deletions(-) rename drivers/block/{ => null_blk}/null_blk.h (100%) rename drivers/block/{null_blk_trace.h => null_blk/trace.h} (97%) rename drivers/block/{null_blk_main.c => null_blk/main.c} (99%) rename drivers/block/{null_blk_trace.c => null_blk/trace.c} (93%) rename drivers/block/{null_blk_zoned.c => null_blk/zoned.c} (99%) create mode 100644 drivers/block/null_blk/Kconfig create mode 100644 drivers/block/null_blk/Makefile -- 2.39.2

2 3

[openeuler:OLK-6.6 3348/10598] security/integrity/ima/ima_digest_list.c:164:37: sparse: sparse: cast to restricted __le16
by kernel test robot 08 Jul '24

08 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 01c2a11a75f4f8b273ef3e34cca3974b10314a3a commit: 5fbe16a682d5af0c2f7145096851e31e3c921d64 [3348/10598] ima: Execute parser to upload digest lists not recognizable by the kernel config: arm64-randconfig-r131-20240707 (https://download.01.org/0day-ci/archive/20240708/202407081457.7NZpgJgk-lkp@…) compiler: clang version 19.0.0git (https://github.com/llvm/llvm-project a0c6b8aef853eedaa0980f07c0a502a5a8a9740e) reproduce: (https://download.01.org/0day-ci/archive/20240708/202407081457.7NZpgJgk-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407081457.7NZpgJgk-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) >> security/integrity/ima/ima_digest_list.c:164:37: sparse: sparse: cast to restricted __le16 security/integrity/ima/ima_digest_list.c:165:42: sparse: sparse: cast to restricted __le16 security/integrity/ima/ima_digest_list.c:166:37: sparse: sparse: cast to restricted __le16 >> security/integrity/ima/ima_digest_list.c:167:38: sparse: sparse: cast to restricted __le32 security/integrity/ima/ima_digest_list.c:168:40: sparse: sparse: cast to restricted __le32 >> security/integrity/ima/ima_digest_list.c:416:20: sparse: sparse: symbol 'parser_task' was not declared. Should it be static? vim +164 security/integrity/ima/ima_digest_list.c b3fef06570ef2b Roberto Sassu 2023-09-12 138 b3fef06570ef2b Roberto Sassu 2023-09-12 139 int ima_parse_compact_list(loff_t size, void *buf, int op) b3fef06570ef2b Roberto Sassu 2023-09-12 140 { b3fef06570ef2b Roberto Sassu 2023-09-12 141 u8 *digest; b3fef06570ef2b Roberto Sassu 2023-09-12 142 void *bufp = buf, *bufendp = buf + size; b3fef06570ef2b Roberto Sassu 2023-09-12 143 struct compact_list_hdr *hdr; b3fef06570ef2b Roberto Sassu 2023-09-12 144 size_t digest_len; b3fef06570ef2b Roberto Sassu 2023-09-12 145 int ret = 0, i; b3fef06570ef2b Roberto Sassu 2023-09-12 146 80701e75d21f48 Roberto Sassu 2023-09-12 147 if (!(ima_digest_list_actions & ima_policy_flag)) 80701e75d21f48 Roberto Sassu 2023-09-12 148 return -EACCES; 80701e75d21f48 Roberto Sassu 2023-09-12 149 b3fef06570ef2b Roberto Sassu 2023-09-12 150 while (bufp < bufendp) { b3fef06570ef2b Roberto Sassu 2023-09-12 151 if (bufp + sizeof(*hdr) > bufendp) { b3fef06570ef2b Roberto Sassu 2023-09-12 152 pr_err("compact list, invalid data\n"); b3fef06570ef2b Roberto Sassu 2023-09-12 153 return -EINVAL; b3fef06570ef2b Roberto Sassu 2023-09-12 154 } b3fef06570ef2b Roberto Sassu 2023-09-12 155 b3fef06570ef2b Roberto Sassu 2023-09-12 156 hdr = bufp; b3fef06570ef2b Roberto Sassu 2023-09-12 157 b3fef06570ef2b Roberto Sassu 2023-09-12 158 if (hdr->version != 1) { b3fef06570ef2b Roberto Sassu 2023-09-12 159 pr_err("compact list, unsupported version\n"); b3fef06570ef2b Roberto Sassu 2023-09-12 160 return -EINVAL; b3fef06570ef2b Roberto Sassu 2023-09-12 161 } b3fef06570ef2b Roberto Sassu 2023-09-12 162 b3fef06570ef2b Roberto Sassu 2023-09-12 163 if (ima_canonical_fmt) { b3fef06570ef2b Roberto Sassu 2023-09-12 @164 hdr->type = le16_to_cpu(hdr->type); b3fef06570ef2b Roberto Sassu 2023-09-12 165 hdr->modifiers = le16_to_cpu(hdr->modifiers); b3fef06570ef2b Roberto Sassu 2023-09-12 166 hdr->algo = le16_to_cpu(hdr->algo); b3fef06570ef2b Roberto Sassu 2023-09-12 @167 hdr->count = le32_to_cpu(hdr->count); b3fef06570ef2b Roberto Sassu 2023-09-12 168 hdr->datalen = le32_to_cpu(hdr->datalen); b3fef06570ef2b Roberto Sassu 2023-09-12 169 } b3fef06570ef2b Roberto Sassu 2023-09-12 170 b3fef06570ef2b Roberto Sassu 2023-09-12 171 if (hdr->algo >= HASH_ALGO__LAST) b3fef06570ef2b Roberto Sassu 2023-09-12 172 return -EINVAL; b3fef06570ef2b Roberto Sassu 2023-09-12 173 b3fef06570ef2b Roberto Sassu 2023-09-12 174 digest_len = hash_digest_size[hdr->algo]; b3fef06570ef2b Roberto Sassu 2023-09-12 175 b3fef06570ef2b Roberto Sassu 2023-09-12 176 if (hdr->type >= COMPACT__LAST) { b3fef06570ef2b Roberto Sassu 2023-09-12 177 pr_err("compact list, invalid type %d\n", hdr->type); b3fef06570ef2b Roberto Sassu 2023-09-12 178 return -EINVAL; b3fef06570ef2b Roberto Sassu 2023-09-12 179 } b3fef06570ef2b Roberto Sassu 2023-09-12 180 b3fef06570ef2b Roberto Sassu 2023-09-12 181 bufp += sizeof(*hdr); b3fef06570ef2b Roberto Sassu 2023-09-12 182 b3fef06570ef2b Roberto Sassu 2023-09-12 183 for (i = 0; i < hdr->count; i++) { b3fef06570ef2b Roberto Sassu 2023-09-12 184 if (bufp + digest_len > bufendp) { b3fef06570ef2b Roberto Sassu 2023-09-12 185 pr_err("compact list, invalid data\n"); b3fef06570ef2b Roberto Sassu 2023-09-12 186 return -EINVAL; b3fef06570ef2b Roberto Sassu 2023-09-12 187 } b3fef06570ef2b Roberto Sassu 2023-09-12 188 b3fef06570ef2b Roberto Sassu 2023-09-12 189 digest = bufp; b3fef06570ef2b Roberto Sassu 2023-09-12 190 bufp += digest_len; b3fef06570ef2b Roberto Sassu 2023-09-12 191 b3fef06570ef2b Roberto Sassu 2023-09-12 192 if (op == DIGEST_LIST_OP_ADD) b3fef06570ef2b Roberto Sassu 2023-09-12 193 ret = ima_add_digest_data_entry(digest, b3fef06570ef2b Roberto Sassu 2023-09-12 194 hdr->algo, hdr->type, hdr->modifiers); b3fef06570ef2b Roberto Sassu 2023-09-12 195 else if (op == DIGEST_LIST_OP_DEL) b3fef06570ef2b Roberto Sassu 2023-09-12 196 ima_del_digest_data_entry(digest, hdr->algo, b3fef06570ef2b Roberto Sassu 2023-09-12 197 hdr->type); b3fef06570ef2b Roberto Sassu 2023-09-12 198 if (ret < 0 && ret != -EEXIST) b3fef06570ef2b Roberto Sassu 2023-09-12 199 return ret; b3fef06570ef2b Roberto Sassu 2023-09-12 200 } b3fef06570ef2b Roberto Sassu 2023-09-12 201 b3fef06570ef2b Roberto Sassu 2023-09-12 202 if (i != hdr->count || b3fef06570ef2b Roberto Sassu 2023-09-12 203 bufp != (void *)hdr + sizeof(*hdr) + hdr->datalen) { b3fef06570ef2b Roberto Sassu 2023-09-12 204 pr_err("compact list, invalid data\n"); b3fef06570ef2b Roberto Sassu 2023-09-12 205 return -EINVAL; b3fef06570ef2b Roberto Sassu 2023-09-12 206 } b3fef06570ef2b Roberto Sassu 2023-09-12 207 } b3fef06570ef2b Roberto Sassu 2023-09-12 208 b3fef06570ef2b Roberto Sassu 2023-09-12 209 return bufp - buf; b3fef06570ef2b Roberto Sassu 2023-09-12 210 } 80701e75d21f48 Roberto Sassu 2023-09-12 211 :::::: The code at line 164 was first introduced by commit :::::: b3fef06570ef2b61dd7181e5c1d128bfcbf6b2ef ima: Add parser of compact digest list :::::: TO: Roberto Sassu <roberto.sassu(a)huawei.com> :::::: CC: zgzxx <zhangguangzhi3(a)huawei.com> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 7037/10596] drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1374:9: sparse: sparse: incorrect type in argument 1 (different address spaces)
by kernel test robot 08 Jul '24

08 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 3b421b6002e287e38790cbdad4a3e08baf7e1bc4 commit: f0db1bf5852542c46c16d0b305193069e265f769 [7037/10596] Huawei BMA: Adding Huawei BMA driver: host_edma_drv config: loongarch-randconfig-r132-20240707 (https://download.01.org/0day-ci/archive/20240708/202407081155.6fc6bMvH-lkp@…) compiler: loongarch64-linux-gcc (GCC) 13.2.0 reproduce: (https://download.01.org/0day-ci/archive/20240708/202407081155.6fc6bMvH-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407081155.6fc6bMvH-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:108:16: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:110:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:131:35: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:136:28: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:147:16: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:254:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:413:25: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:581:6: sparse: sparse: symbol 'host_dma_transfer_without_list' was not declared. Should it be static? drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:629:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:608:6: sparse: sparse: symbol 'host_dma_transfer_withlist' was not declared. Should it be static? drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:653:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:668:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:708:25: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:716:9: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:748:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:754:25: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:759:25: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:765:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:777:27: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:791:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:810:9: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:852:35: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:859:49: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:869:49: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:876:33: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:960:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:966:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:996:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1046:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1050:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1061:9: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1087:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1102:9: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1126:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1138:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1160:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1162:44: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1165:22: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1166:33: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got unsigned char * @@ drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1166:33: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1166:33: sparse: got unsigned char * drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1167:22: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1167:22: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got unsigned char * @@ drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1167:22: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1167:22: sparse: got unsigned char * drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1169:9: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1175:28: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1175:28: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1175:28: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1175:28: sparse: got void * drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1181:25: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1186:25: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1196:33: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1200:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1201:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1203:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1217:25: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1218:25: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1219:25: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1227:36: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1227:36: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1227:36: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1227:36: sparse: got void * drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1272:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1282:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1287:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1299:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1356:17: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1372:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1371:35: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected void [noderef] __iomem *edma_send_addr @@ got void * @@ drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1371:35: sparse: expected void [noderef] __iomem *edma_send_addr drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1371:35: sparse: got void * >> drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1374:9: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const * @@ got void [noderef] __iomem *edma_send_addr @@ drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1374:9: sparse: expected void const * drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1374:9: sparse: got void [noderef] __iomem *edma_send_addr >> drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1374:9: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const * @@ got void [noderef] __iomem *edma_send_addr @@ drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1374:9: sparse: expected void const * drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1374:9: sparse: got void [noderef] __iomem *edma_send_addr >> drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1374:9: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void * @@ got void [noderef] __iomem *edma_send_addr @@ drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1374:9: sparse: expected void * drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1374:9: sparse: got void [noderef] __iomem *edma_send_addr drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1377:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1376:35: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected void [noderef] __iomem *edma_recv_addr @@ got void * @@ drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1376:35: sparse: expected void [noderef] __iomem *edma_recv_addr drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1376:35: sparse: got void * drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1380:9: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1406:16: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1413:9: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c:1442:16: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c: note: in included file (through include/linux/rculist.h, include/linux/pid.h, include/linux/sched.h, ...): include/linux/list.h:83:21: sparse: sparse: self-comparison always evaluates to true vim +1374 drivers/net/ethernet/huawei/bma/edma_drv/edma_host.c 1268 1269 struct edma_user_inft_s *edma_host_get_user_inft(u32 type) 1270 { 1271 if (type >= TYPE_MAX) { > 1272 BMA_LOG(DLOG_ERROR, "type error %d\n", type); 1273 return NULL; 1274 } 1275 1276 return g_user_func[type]; 1277 } 1278 1279 int edma_host_user_register(u32 type, struct edma_user_inft_s *func) 1280 { 1281 if (type >= TYPE_MAX) { 1282 BMA_LOG(DLOG_ERROR, "type error %d\n", type); 1283 return -EFAULT; 1284 } 1285 1286 if (!func) { 1287 BMA_LOG(DLOG_ERROR, "func is NULL\n"); 1288 return -EFAULT; 1289 } 1290 1291 g_user_func[type] = func; 1292 1293 return 0; 1294 } 1295 1296 int edma_host_user_unregister(u32 type) 1297 { 1298 if (type >= TYPE_MAX) { 1299 BMA_LOG(DLOG_ERROR, "type error %d\n", type); 1300 return -EFAULT; 1301 } 1302 1303 g_user_func[type] = NULL; 1304 1305 return 0; 1306 } 1307 1308 int edma_host_init(struct edma_host_s *edma_host) 1309 { 1310 int ret = 0; 1311 struct bma_dev_s *bma_dev = NULL; 1312 struct notify_msg *pnm = NULL; 1313 1314 if (!edma_host) 1315 return -1; 1316 1317 bma_dev = list_entry(edma_host, struct bma_dev_s, edma_host); 1318 g_bma_dev = bma_dev; 1319 1320 edma_host->pdev = bma_dev->bma_pci_dev->pdev; 1321 1322 #ifdef EDMA_TIMER 1323 #ifdef HAVE_TIMER_SETUP 1324 timer_setup(&edma_host->timer, edma_host_timeout, 0); 1325 #else 1326 setup_timer(&edma_host->timer, edma_host_timeout, 1327 (unsigned long)edma_host); 1328 #endif 1329 (void)mod_timer(&edma_host->timer, jiffies_64 + TIMER_INTERVAL_CHECK); 1330 #ifdef USE_DMA 1331 #ifdef HAVE_TIMER_SETUP 1332 timer_setup(&edma_host->dma_timer, edma_host_dma_timeout, 0); 1333 1334 #else 1335 setup_timer(&edma_host->dma_timer, edma_host_dma_timeout, 1336 (unsigned long)edma_host); 1337 #endif 1338 (void)mod_timer(&edma_host->dma_timer, 1339 jiffies_64 + DMA_TIMER_INTERVAL_CHECK); 1340 #endif 1341 1342 #else 1343 init_completion(&edma_host->msg_ready); 1344 1345 edma_host->edma_thread = 1346 kthread_run(edma_host_thread, (void *)edma_host, "edma_host_msg"); 1347 1348 if (IS_ERR(edma_host->edma_thread)) { 1349 BMA_LOG(DLOG_ERROR, "kernel_run edma_host_msg failed\n"); 1350 return PTR_ERR(edma_host->edma_thread); 1351 } 1352 #endif 1353 1354 edma_host->msg_send_buf = kmalloc(HOST_MAX_SEND_MBX_LEN, GFP_KERNEL); 1355 if (!edma_host->msg_send_buf) { 1356 BMA_LOG(DLOG_ERROR, "malloc msg_send_buf failed!"); 1357 ret = -ENOMEM; 1358 goto failed1; 1359 } 1360 1361 edma_host->msg_send_write = 0; 1362 1363 spin_lock_init(&edma_host->send_msg_lock); 1364 1365 tasklet_init(&edma_host->tasklet, 1366 (void (*)(unsigned long))edma_host_isr_tasklet, 1367 (unsigned long)edma_host); 1368 1369 edma_host->edma_flag = bma_dev->bma_pci_dev->edma_swap_addr; 1370 > 1371 edma_host->edma_send_addr = 1372 (void *)((unsigned char *)bma_dev->bma_pci_dev->edma_swap_addr + 1373 HOST_DMA_FLAG_LEN); > 1374 memset(edma_host->edma_send_addr, 0, SIZE_OF_MBX_HDR); 1375 1376 edma_host->edma_recv_addr = 1377 (void *)((unsigned char *)edma_host->edma_send_addr + 1378 HOST_MAX_SEND_MBX_LEN); 1379 1380 BMA_LOG(DLOG_DEBUG, 1381 "edma_flag = %p, edma_send_addr = %p, edma_recv_addr = %p\n", 1382 edma_host->edma_flag, edma_host->edma_send_addr, 1383 edma_host->edma_recv_addr); 1384 1385 edma_host->hostrtc_viraddr = bma_dev->bma_pci_dev->hostrtc_viraddr; 1386 1387 init_waitqueue_head(&edma_host->wq_dmah2b); 1388 init_waitqueue_head(&edma_host->wq_dmab2h); 1389 1390 spin_lock_init(&edma_host->reg_lock); 1391 1392 edma_host->h2b_state = H2BSTATE_IDLE; 1393 edma_host->b2h_state = B2HSTATE_IDLE; 1394 1395 #ifdef HAVE_TIMER_SETUP 1396 timer_setup(&edma_host->heartbeat_timer, 1397 edma_host_heartbeat_timer, 0); 1398 #else 1399 setup_timer(&edma_host->heartbeat_timer, 1400 edma_host_heartbeat_timer, 1401 (unsigned long)edma_host); 1402 #endif 1403 (void)mod_timer(&edma_host->heartbeat_timer, 1404 jiffies_64 + HEARTBEAT_TIMER_INTERVAL_CHECK); 1405 1406 pnm = (struct notify_msg *)edma_host->edma_flag; 1407 if (pnm) 1408 pnm->host_registered = REGISTERED; 1409 1410 GET_SYS_SECONDS(edma_host->statistics.init_time); 1411 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH openEuler-22.03-LTS-SP1] null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
by Li Nan 08 Jul '24

08 Jul '24

From: Yu Kuai <yukuai3(a)huawei.com> mainline inclusion from mainline-v6.10-rc1 commit a2db328b0839312c169eb42746ec46fc1ab53ed2 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA7D6H CVE: CVE-2024-36478 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Writing 'power' and 'submit_queues' concurrently will trigger kernel panic: Test script: modprobe null_blk nr_devices=0 mkdir -p /sys/kernel/config/nullb/nullb0 while true; do echo 1 > submit_queues; echo 4 > submit_queues; done & while true; do echo 1 > power; echo 0 > power; done Test result: BUG: kernel NULL pointer dereference, address: 0000000000000148 Oops: 0000 [#1] PREEMPT SMP RIP: 0010:__lock_acquire+0x41d/0x28f0 Call Trace: <TASK> lock_acquire+0x121/0x450 down_write+0x5f/0x1d0 simple_recursive_removal+0x12f/0x5c0 blk_mq_debugfs_unregister_hctxs+0x7c/0x100 blk_mq_update_nr_hw_queues+0x4a3/0x720 nullb_update_nr_hw_queues+0x71/0xf0 [null_blk] nullb_device_submit_queues_store+0x79/0xf0 [null_blk] configfs_write_iter+0x119/0x1e0 vfs_write+0x326/0x730 ksys_write+0x74/0x150 This is because del_gendisk() can concurrent with blk_mq_update_nr_hw_queues(): nullb_device_power_store nullb_apply_submit_queues null_del_dev del_gendisk nullb_update_nr_hw_queues if (!dev->nullb) // still set while gendisk is deleted return 0 blk_mq_update_nr_hw_queues dev->nullb = NULL Fix this problem by resuing the global mutex to protect nullb_device_power_store() and nullb_update_nr_hw_queues() from configfs. Fixes: 45919fbfe1c4 ("null_blk: Enable modifying 'submit_queues' after an instance has been configured") Reported-and-tested-by: Yi Zhang <yi.zhang(a)redhat.com> Closes: https://lore.kernel.org/all/CAHj4cs9LgsHLnjg8z06LQ3Pr5cax-+Ps+xT7AP7TPnEjSt… Signed-off-by: Yu Kuai <yukuai3(a)huawei.com> Reviewed-by: Zhu Yanjun <yanjun.zhu(a)linux.dev> Link: https://lore.kernel.org/r/20240523153934.1937851-1-yukuai1@huaweicloud.com Signed-off-by: Jens Axboe <axboe(a)kernel.dk> Conflicts: drivers/block/null_blk/main.c [ A lot of conflict, this patch just expand the protection range of mutex, ignore conflict. ] Signed-off-by: Li Nan <linan122(a)huawei.com> --- drivers/block/null_blk/main.c | 43 +++++++++++++++++++++-------------- 1 file changed, 26 insertions(+), 17 deletions(-) diff --git a/drivers/block/null_blk/main.c b/drivers/block/null_blk/main.c index 35b390a785dd..91c8412442d0 100644 --- a/drivers/block/null_blk/main.c +++ b/drivers/block/null_blk/main.c @@ -323,11 +323,9 @@ CONFIGFS_ATTR(nullb_device_, NAME); static int nullb_apply_submit_queues(struct nullb_device *dev, unsigned int submit_queues) { - struct nullb *nullb = dev->nullb; + struct nullb *nullb; struct blk_mq_tag_set *set; - - if (!nullb) - return 0; + int ret = 0; /* * Make sure that null_init_hctx() does not access nullb->queues[] past @@ -335,9 +333,20 @@ static int nullb_apply_submit_queues(struct nullb_device *dev, */ if (submit_queues > nr_cpu_ids) return -EINVAL; + + mutex_lock(&lock); + + nullb = dev->nullb; + if (!nullb) + goto out; + set = nullb->tag_set; blk_mq_update_nr_hw_queues(set, submit_queues); - return set->nr_hw_queues == submit_queues ? 0 : -ENOMEM; + ret = set->nr_hw_queues == submit_queues ? 0 : -ENOMEM; + +out: + mutex_unlock(&lock); + return ret; } NULLB_DEVICE_ATTR(size, ulong, NULL); @@ -378,27 +387,31 @@ static ssize_t nullb_device_power_store(struct config_item *item, if (ret < 0) return ret; + ret = count; + mutex_lock(&lock); if (!dev->power && newp) { if (test_and_set_bit(NULLB_DEV_FL_UP, &dev->flags)) - return count; + goto out; + if (null_add_dev(dev)) { clear_bit(NULLB_DEV_FL_UP, &dev->flags); - return -ENOMEM; + ret = -ENOMEM; + goto out; } set_bit(NULLB_DEV_FL_CONFIGURED, &dev->flags); dev->power = newp; } else if (dev->power && !newp) { if (test_and_clear_bit(NULLB_DEV_FL_UP, &dev->flags)) { - mutex_lock(&lock); dev->power = newp; null_del_dev(dev->nullb); - mutex_unlock(&lock); } clear_bit(NULLB_DEV_FL_CONFIGURED, &dev->flags); } - return count; +out: + mutex_unlock(&lock); + return ret; } CONFIGFS_ATTR(nullb_device_, power); @@ -1880,15 +1893,11 @@ static int null_add_dev(struct nullb_device *dev) blk_queue_flag_set(QUEUE_FLAG_NONROT, nullb->q); blk_queue_flag_clear(QUEUE_FLAG_ADD_RANDOM, nullb->q); - mutex_lock(&lock); rv = ida_simple_get(&nullb_indexes, 0, 0, GFP_KERNEL); - if (rv < 0) { - mutex_unlock(&lock); + if (rv < 0) goto out_cleanup_zone; - } nullb->index = rv; dev->index = rv; - mutex_unlock(&lock); blk_queue_logical_block_size(nullb->q, dev->blocksize); blk_queue_physical_block_size(nullb->q, dev->blocksize); @@ -1901,9 +1910,7 @@ static int null_add_dev(struct nullb_device *dev) if (rv) goto out_ida_free; - mutex_lock(&lock); list_add_tail(&nullb->list, &nullb_list); - mutex_unlock(&lock); return 0; @@ -1985,7 +1992,9 @@ static int __init null_init(void) ret = -ENOMEM; goto err_dev; } + mutex_lock(&lock); ret = null_add_dev(dev); + mutex_unlock(&lock); if (ret) { null_free_dev(dev); goto err_dev; -- 2.39.2

2 1

[openeuler:OLK-6.6 3342/10596] include/linux/pgplib.h:26:15: warning: declaration of 'enum pgp_packet_tag' will not be visible outside of this function
by kernel test robot 08 Jul '24

08 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 3b421b6002e287e38790cbdad4a3e08baf7e1bc4 commit: 43d4042e06d2bf96adf67d25e8d91653507a4cf9 [3342/10596] KEYS: Provide a function to load keys from a PGP keyring blob config: arm64-randconfig-r131-20240707 (https://download.01.org/0day-ci/archive/20240708/202407081159.yhVjEfsw-lkp@…) compiler: clang version 19.0.0git (https://github.com/llvm/llvm-project a0c6b8aef853eedaa0980f07c0a502a5a8a9740e) reproduce: (https://download.01.org/0day-ci/archive/20240708/202407081159.yhVjEfsw-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407081159.yhVjEfsw-lkp@intel.com/ All warnings (new ones prefixed by >>): In file included from crypto/asymmetric_keys/pgp_preload.c:19: >> include/linux/pgplib.h:26:15: warning: declaration of 'enum pgp_packet_tag' will not be visible outside of this function [-Wvisibility] 26 | enum pgp_packet_tag type, | ^ include/linux/pgplib.h:36:23: error: field has incomplete type 'enum pgp_key_version' 36 | enum pgp_key_version version : 8; | ^ include/linux/pgplib.h:36:7: note: forward declaration of 'enum pgp_key_version' 36 | enum pgp_key_version version : 8; | ^ include/linux/pgplib.h:37:23: error: field has incomplete type 'enum pgp_pubkey_algo' 37 | enum pgp_pubkey_algo pubkey_algo : 8; | ^ include/linux/pgplib.h:37:7: note: forward declaration of 'enum pgp_pubkey_algo' 37 | enum pgp_pubkey_algo pubkey_algo : 8; | ^ crypto/asymmetric_keys/pgp_preload.c:63:10: warning: declaration of 'enum pgp_packet_tag' will not be visible outside of this function [-Wvisibility] 63 | enum pgp_packet_tag type, u8 headerlen, | ^ crypto/asymmetric_keys/pgp_preload.c:63:25: error: variable has incomplete type 'enum pgp_packet_tag' 63 | enum pgp_packet_tag type, u8 headerlen, | ^ crypto/asymmetric_keys/pgp_preload.c:63:10: note: forward declaration of 'enum pgp_packet_tag' 63 | enum pgp_packet_tag type, u8 headerlen, | ^ crypto/asymmetric_keys/pgp_preload.c:107:36: error: use of undeclared identifier 'PGP_PKT_PUBLIC_KEY' 107 | ctx.pgp.types_of_interest = (1 << PGP_PKT_PUBLIC_KEY); | ^ crypto/asymmetric_keys/pgp_preload.c:108:25: error: incompatible function pointer types assigning to 'int (*)(struct pgp_parse_context *, enum pgp_packet_tag, u8, const u8 *, size_t)' (aka 'int (*)(struct pgp_parse_context *, enum pgp_packet_tag, unsigned char, const unsigned char *, unsigned long)') from 'int (struct pgp_parse_context *, enum pgp_packet_tag, u8, const u8 *, size_t)' (aka 'int (struct pgp_parse_context *, enum pgp_packet_tag, unsigned char, const unsigned char *, unsigned long)') [-Wincompatible-function-pointer-types] 108 | ctx.pgp.process_packet = found_pgp_key; | ^ ~~~~~~~~~~~~~ crypto/asymmetric_keys/pgp_preload.c:101:12: warning: no previous prototype for function 'preload_pgp_keys' [-Wmissing-prototypes] 101 | int __init preload_pgp_keys(const u8 *pgpdata, size_t pgpdatalen, | ^ crypto/asymmetric_keys/pgp_preload.c:101:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 101 | int __init preload_pgp_keys(const u8 *pgpdata, size_t pgpdatalen, | ^ | static 3 warnings and 5 errors generated. -- In file included from crypto/asymmetric_keys/pgp_public_key.c:19: In file included from include/linux/mpi.h:21: In file included from include/linux/scatterlist.h:8: In file included from include/linux/mm.h:2193: include/linux/vmstat.h:522:36: warning: arithmetic between different enumeration types ('enum node_stat_item' and 'enum lru_list') [-Wenum-enum-conversion] 522 | return node_stat_name(NR_LRU_BASE + lru) + 3; // skip "nr_" | ~~~~~~~~~~~ ^ ~~~ In file included from crypto/asymmetric_keys/pgp_public_key.c:20: >> include/linux/pgplib.h:26:15: warning: declaration of 'enum pgp_packet_tag' will not be visible outside of this function [-Wvisibility] 26 | enum pgp_packet_tag type, | ^ include/linux/pgplib.h:36:23: error: field has incomplete type 'enum pgp_key_version' 36 | enum pgp_key_version version : 8; | ^ include/linux/pgplib.h:36:7: note: forward declaration of 'enum pgp_key_version' 36 | enum pgp_key_version version : 8; | ^ include/linux/pgplib.h:37:23: error: field has incomplete type 'enum pgp_pubkey_algo' 37 | enum pgp_pubkey_algo pubkey_algo : 8; | ^ include/linux/pgplib.h:37:7: note: forward declaration of 'enum pgp_pubkey_algo' 37 | enum pgp_pubkey_algo pubkey_algo : 8; | ^ crypto/asymmetric_keys/pgp_public_key.c:63:2: error: call to undeclared function 'kenter'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 63 | kenter(""); | ^ crypto/asymmetric_keys/pgp_public_key.c:65:22: error: use of undeclared identifier 'PGP_KEY_VERSION_4' 65 | n = (pgp->version < PGP_KEY_VERSION_4) ? 8 : 6; | ^ crypto/asymmetric_keys/pgp_public_key.c:67:9: error: call to undeclared function 'mpi_key_length'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 67 | ret = mpi_key_length(key_ptr, keylen, nb + i, nn + i); | ^ crypto/asymmetric_keys/pgp_public_key.c:95:21: error: use of undeclared identifier 'PGP_KEY_VERSION_4' 95 | if (pgp->version < PGP_KEY_VERSION_4) { | ^ crypto/asymmetric_keys/pgp_public_key.c:115:2: error: call to undeclared function 'kleave'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 115 | kleave(" = %d", ret); | ^ crypto/asymmetric_keys/pgp_public_key.c:134:42: error: use of undeclared identifier 'PGP_KEY_VERSION_4' 134 | tfm = crypto_alloc_shash(pgp->version < PGP_KEY_VERSION_4 ? | ^ crypto/asymmetric_keys/pgp_public_key.c:191:2: error: call to undeclared function 'kleave'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 191 | kleave(" = %d", ret); | ^ crypto/asymmetric_keys/pgp_public_key.c:199:12: warning: declaration of 'enum pgp_packet_tag' will not be visible outside of this function [-Wvisibility] 199 | enum pgp_packet_tag type, | ^ crypto/asymmetric_keys/pgp_public_key.c:199:27: error: variable has incomplete type 'enum pgp_packet_tag' 199 | enum pgp_packet_tag type, | ^ crypto/asymmetric_keys/pgp_public_key.c:199:12: note: forward declaration of 'enum pgp_packet_tag' 199 | enum pgp_packet_tag type, | ^ crypto/asymmetric_keys/pgp_public_key.c:211:2: error: call to undeclared function 'kenter'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 211 | kenter(",%u,%u,,%zu", type, headerlen, datalen); | ^ crypto/asymmetric_keys/pgp_public_key.c:213:14: error: use of undeclared identifier 'PGP_PKT_USER_ID' 213 | if (type == PGP_PKT_USER_ID) { | ^ crypto/asymmetric_keys/pgp_public_key.c:216:3: error: call to undeclared function 'kleave'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 216 | kleave(" = 0 [user ID]"); | ^ crypto/asymmetric_keys/pgp_public_key.c:221:3: error: call to undeclared function 'kleave'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 221 | kleave(" = -ENOKEY [already]"); | ^ crypto/asymmetric_keys/pgp_public_key.c:234:25: error: use of undeclared identifier 'PGP_PUBKEY__LAST' 234 | if (pgp.pubkey_algo >= PGP_PUBKEY__LAST) | ^ crypto/asymmetric_keys/pgp_public_key.c:236:9: error: use of undeclared identifier 'pgp_to_public_key_algo' 236 | algo = pgp_to_public_key_algo[pgp.pubkey_algo]; | ^ crypto/asymmetric_keys/pgp_public_key.c:252:2: error: call to undeclared function 'kleave'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 252 | kleave(" = 0 [use]"); | ^ crypto/asymmetric_keys/pgp_public_key.c:310:2: error: call to undeclared function 'kenter'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 310 | kenter(""); | ^ crypto/asymmetric_keys/pgp_public_key.c:313:36: error: use of undeclared identifier 'PGP_PKT_PUBLIC_KEY' 313 | ctx.pgp.types_of_interest = (1 << PGP_PKT_PUBLIC_KEY) | | ^ fatal error: too many errors emitted, stopping now [-ferror-limit=] 3 warnings and 20 errors generated. Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for PGP_KEY_PARSER Depends on [n]: CRYPTO [=y] && ASYMMETRIC_KEY_TYPE [=y] && ASYMMETRIC_PUBLIC_KEY_SUBTYPE [=n] Selected by [y]: - PGP_PRELOAD [=y] && CRYPTO [=y] && ASYMMETRIC_KEY_TYPE [=y] vim +26 include/linux/pgplib.h b78af6579e15dc David Howells 2023-09-12 19 b78af6579e15dc David Howells 2023-09-12 20 /* b78af6579e15dc David Howells 2023-09-12 21 * PGP library packet parser b78af6579e15dc David Howells 2023-09-12 22 */ b78af6579e15dc David Howells 2023-09-12 23 struct pgp_parse_context { b78af6579e15dc David Howells 2023-09-12 24 u64 types_of_interest; b78af6579e15dc David Howells 2023-09-12 25 int (*process_packet)(struct pgp_parse_context *context, b78af6579e15dc David Howells 2023-09-12 @26 enum pgp_packet_tag type, b78af6579e15dc David Howells 2023-09-12 27 u8 headerlen, b78af6579e15dc David Howells 2023-09-12 28 const u8 *data, b78af6579e15dc David Howells 2023-09-12 29 size_t datalen); b78af6579e15dc David Howells 2023-09-12 30 }; b78af6579e15dc David Howells 2023-09-12 31 :::::: The code at line 26 was first introduced by commit :::::: b78af6579e15dcdff86504da90af77f3e890270e PGPLIB: Basic packet parser :::::: TO: David Howells <dhowells(a)redhat.com> :::::: CC: zgzxx <zhangguangzhi3(a)huawei.com> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6] md: fix resync softlockup when bitmap size is less than array size
by Li Nan 08 Jul '24

08 Jul '24

From: Yu Kuai <yukuai3(a)huawei.com> mainline inclusion from mainline-v6.10-rc1 commit f0e729af2eb6bee9eb58c4df1087f14ebaefe26b category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SH1 CVE: CVE-2024-38598 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Is is reported that for dm-raid10, lvextend + lvchange --syncaction will trigger following softlockup: kernel:watchdog: BUG: soft lockup - CPU#3 stuck for 26s! [mdX_resync:6976] CPU: 7 PID: 3588 Comm: mdX_resync Kdump: loaded Not tainted 6.9.0-rc4-next-20240419 #1 RIP: 0010:_raw_spin_unlock_irq+0x13/0x30 Call Trace: <TASK> md_bitmap_start_sync+0x6b/0xf0 raid10_sync_request+0x25c/0x1b40 [raid10] md_do_sync+0x64b/0x1020 md_thread+0xa7/0x170 kthread+0xcf/0x100 ret_from_fork+0x30/0x50 ret_from_fork_asm+0x1a/0x30 And the detailed process is as follows: md_do_sync j = mddev->resync_min while (j < max_sectors) sectors = raid10_sync_request(mddev, j, &skipped) if (!md_bitmap_start_sync(..., &sync_blocks)) // md_bitmap_start_sync set sync_blocks to 0 return sync_blocks + sectors_skippe; // sectors = 0; j += sectors; // j never change Root cause is that commit 301867b1c168 ("md/raid10: check slab-out-of-bounds in md_bitmap_get_counter") return early from md_bitmap_get_counter(), without setting returned blocks. Fix this problem by always set returned blocks from md_bitmap_get_counter"(), as it used to be. Noted that this patch just fix the softlockup problem in kernel, the case that bitmap size doesn't match array size still need to be fixed. Fixes: 301867b1c168 ("md/raid10: check slab-out-of-bounds in md_bitmap_get_counter") Reported-and-tested-by: Nigel Croxon <ncroxon(a)redhat.com> Closes: https://lore.kernel.org/all/71ba5272-ab07-43ba-8232-d2da642acb4e@redhat.com/ Signed-off-by: Yu Kuai <yukuai3(a)huawei.com> Link: https://lore.kernel.org/r/20240422065824.2516-1-yukuai1@huaweicloud.com Signed-off-by: Song Liu <song(a)kernel.org> Signed-off-by: Li Nan <linan122(a)huawei.com> --- drivers/md/md-bitmap.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/drivers/md/md-bitmap.c b/drivers/md/md-bitmap.c index a4976ceae868..ee67da44641b 100644 --- a/drivers/md/md-bitmap.c +++ b/drivers/md/md-bitmap.c @@ -1427,7 +1427,7 @@ __acquires(bitmap->lock) sector_t chunk = offset >> bitmap->chunkshift; unsigned long page = chunk >> PAGE_COUNTER_SHIFT; unsigned long pageoff = (chunk & PAGE_COUNTER_MASK) << COUNTER_BYTE_SHIFT; - sector_t csize; + sector_t csize = ((sector_t)1) << bitmap->chunkshift; int err; if (page >= bitmap->pages) { @@ -1436,6 +1436,7 @@ __acquires(bitmap->lock) * End-of-device while looking for a whole page or * user set a huge number to sysfs bitmap_set_bits. */ + *blocks = csize - (offset & (csize - 1)); return NULL; } err = md_bitmap_checkpage(bitmap, page, create, 0); @@ -1444,8 +1445,7 @@ __acquires(bitmap->lock) bitmap->bp[page].map == NULL) csize = ((sector_t)1) << (bitmap->chunkshift + PAGE_COUNTER_SHIFT); - else - csize = ((sector_t)1) << bitmap->chunkshift; + *blocks = csize - (offset & (csize - 1)); if (err < 0) -- 2.39.2

2 1

[PATCH openEuler-22.03-LTS-SP1] null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
by Li Nan 08 Jul '24

08 Jul '24

From: Yu Kuai <yukuai3(a)huawei.com> mainline inclusion from mainline-v6.10-rc1 commit a2db328b0839312c169eb42746ec46fc1ab53ed2 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA7D6H CVE: CVE-2024-36478 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Writing 'power' and 'submit_queues' concurrently will trigger kernel panic: Test script: modprobe null_blk nr_devices=0 mkdir -p /sys/kernel/config/nullb/nullb0 while true; do echo 1 > submit_queues; echo 4 > submit_queues; done & while true; do echo 1 > power; echo 0 > power; done Test result: BUG: kernel NULL pointer dereference, address: 0000000000000148 Oops: 0000 [#1] PREEMPT SMP RIP: 0010:__lock_acquire+0x41d/0x28f0 Call Trace: <TASK> lock_acquire+0x121/0x450 down_write+0x5f/0x1d0 simple_recursive_removal+0x12f/0x5c0 blk_mq_debugfs_unregister_hctxs+0x7c/0x100 blk_mq_update_nr_hw_queues+0x4a3/0x720 nullb_update_nr_hw_queues+0x71/0xf0 [null_blk] nullb_device_submit_queues_store+0x79/0xf0 [null_blk] configfs_write_iter+0x119/0x1e0 vfs_write+0x326/0x730 ksys_write+0x74/0x150 This is because del_gendisk() can concurrent with blk_mq_update_nr_hw_queues(): nullb_device_power_store nullb_apply_submit_queues null_del_dev del_gendisk nullb_update_nr_hw_queues if (!dev->nullb) // still set while gendisk is deleted return 0 blk_mq_update_nr_hw_queues dev->nullb = NULL Fix this problem by resuing the global mutex to protect nullb_device_power_store() and nullb_update_nr_hw_queues() from configfs. Fixes: 45919fbfe1c4 ("null_blk: Enable modifying 'submit_queues' after an instance has been configured") Reported-and-tested-by: Yi Zhang <yi.zhang(a)redhat.com> Closes: https://lore.kernel.org/all/CAHj4cs9LgsHLnjg8z06LQ3Pr5cax-+Ps+xT7AP7TPnEjSt… Signed-off-by: Yu Kuai <yukuai3(a)huawei.com> Reviewed-by: Zhu Yanjun <yanjun.zhu(a)linux.dev> Link: https://lore.kernel.org/r/20240523153934.1937851-1-yukuai1@huaweicloud.com Signed-off-by: Jens Axboe <axboe(a)kernel.dk> Conflicts: drivers/block/null_blk/main.c [ A lot of conflict, this patch just expand the protection range of mutex, ignore conflict. ] Signed-off-by: Li Nan <linan122(a)huawei.com> --- drivers/block/null_blk/main.c | 43 +++++++++++++++++++++-------------- 1 file changed, 26 insertions(+), 17 deletions(-) diff --git a/drivers/block/null_blk/main.c b/drivers/block/null_blk/main.c index 35b390a785dd..91c8412442d0 100644 --- a/drivers/block/null_blk/main.c +++ b/drivers/block/null_blk/main.c @@ -323,11 +323,9 @@ CONFIGFS_ATTR(nullb_device_, NAME); static int nullb_apply_submit_queues(struct nullb_device *dev, unsigned int submit_queues) { - struct nullb *nullb = dev->nullb; + struct nullb *nullb; struct blk_mq_tag_set *set; - - if (!nullb) - return 0; + int ret = 0; /* * Make sure that null_init_hctx() does not access nullb->queues[] past @@ -335,9 +333,20 @@ static int nullb_apply_submit_queues(struct nullb_device *dev, */ if (submit_queues > nr_cpu_ids) return -EINVAL; + + mutex_lock(&lock); + + nullb = dev->nullb; + if (!nullb) + goto out; + set = nullb->tag_set; blk_mq_update_nr_hw_queues(set, submit_queues); - return set->nr_hw_queues == submit_queues ? 0 : -ENOMEM; + ret = set->nr_hw_queues == submit_queues ? 0 : -ENOMEM; + +out: + mutex_unlock(&lock); + return ret; } NULLB_DEVICE_ATTR(size, ulong, NULL); @@ -378,27 +387,31 @@ static ssize_t nullb_device_power_store(struct config_item *item, if (ret < 0) return ret; + ret = count; + mutex_lock(&lock); if (!dev->power && newp) { if (test_and_set_bit(NULLB_DEV_FL_UP, &dev->flags)) - return count; + goto out; + if (null_add_dev(dev)) { clear_bit(NULLB_DEV_FL_UP, &dev->flags); - return -ENOMEM; + ret = -ENOMEM; + goto out; } set_bit(NULLB_DEV_FL_CONFIGURED, &dev->flags); dev->power = newp; } else if (dev->power && !newp) { if (test_and_clear_bit(NULLB_DEV_FL_UP, &dev->flags)) { - mutex_lock(&lock); dev->power = newp; null_del_dev(dev->nullb); - mutex_unlock(&lock); } clear_bit(NULLB_DEV_FL_CONFIGURED, &dev->flags); } - return count; +out: + mutex_unlock(&lock); + return ret; } CONFIGFS_ATTR(nullb_device_, power); @@ -1880,15 +1893,11 @@ static int null_add_dev(struct nullb_device *dev) blk_queue_flag_set(QUEUE_FLAG_NONROT, nullb->q); blk_queue_flag_clear(QUEUE_FLAG_ADD_RANDOM, nullb->q); - mutex_lock(&lock); rv = ida_simple_get(&nullb_indexes, 0, 0, GFP_KERNEL); - if (rv < 0) { - mutex_unlock(&lock); + if (rv < 0) goto out_cleanup_zone; - } nullb->index = rv; dev->index = rv; - mutex_unlock(&lock); blk_queue_logical_block_size(nullb->q, dev->blocksize); blk_queue_physical_block_size(nullb->q, dev->blocksize); @@ -1901,9 +1910,7 @@ static int null_add_dev(struct nullb_device *dev) if (rv) goto out_ida_free; - mutex_lock(&lock); list_add_tail(&nullb->list, &nullb_list); - mutex_unlock(&lock); return 0; @@ -1985,7 +1992,9 @@ static int __init null_init(void) ret = -ENOMEM; goto err_dev; } + mutex_lock(&lock); ret = null_add_dev(dev); + mutex_unlock(&lock); if (ret) { null_free_dev(dev); goto err_dev; -- 2.39.2

2 1

[PATCH OLK-6.6 0/2] CVE-2024-36478
by Li Nan 08 Jul '24

08 Jul '24

Damien Le Moal (1): null_blk: Fix return value of nullb_device_power_store() Yu Kuai (1): null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' drivers/block/null_blk/main.c | 41 +++++++++++++++++++++++------------ 1 file changed, 27 insertions(+), 14 deletions(-) -- 2.39.2

2 3

[PATCH openEuler-1.0-LTS v2] x86/ftrace: Disable lockdep check when execute ftrace_int3_handler()
by Zheng Yejian 08 Jul '24

08 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAA3U5 CVE: NA --------------------------- After commit 5e66a5bdad69 ("ftrace: Fix rcu warn in ftrace_location()"), lockdep still complain that: include/linux/rcupdate.h:646 rcu_read_lock() used illegally while idle! As Xu suggested, lockdep check can be disabled when exectue ftrace_int3_handler(), refer to mainline commit ba1f2b2eaa2a ("x86/entry: Fix NMI vs IRQ state tracking"). Fixes: 5e66a5bdad69 ("ftrace: Fix rcu warn in ftrace_location()") Suggested-by: Xu Kuohai <xukuohai(a)huawei.com> Signed-off-by: Zheng Yejian <zhengyejian1(a)huawei.com> --- arch/x86/kernel/traps.c | 12 +++++++++--- kernel/trace/ftrace.c | 10 ++-------- 2 files changed, 11 insertions(+), 11 deletions(-) v1 -> v2: Fix check_format fail diff --git a/arch/x86/kernel/traps.c b/arch/x86/kernel/traps.c index e832a9becc19..343c21fa3fad 100644 --- a/arch/x86/kernel/traps.c +++ b/arch/x86/kernel/traps.c @@ -585,9 +585,15 @@ dotraplinkage void notrace do_int3(struct pt_regs *regs, long error_code) * ftrace must be first, everything else may cause a recursive crash. * See note by declaration of modifying_ftrace_code in ftrace.c */ - if (unlikely(atomic_read(&modifying_ftrace_code)) && - ftrace_int3_handler(regs)) - return; + if (unlikely(atomic_read(&modifying_ftrace_code))) { + int ret; + + lockdep_off(); + ret = ftrace_int3_handler(regs); + lockdep_on(); + if (ret) + return; + } #endif if (poke_int3_handler(regs)) return; diff --git a/kernel/trace/ftrace.c b/kernel/trace/ftrace.c index ad4440da5b78..6704150cb655 100644 --- a/kernel/trace/ftrace.c +++ b/kernel/trace/ftrace.c @@ -1581,12 +1581,7 @@ unsigned long ftrace_location_range(unsigned long start, unsigned long end) key.ip = start; key.flags = end; /* overload flags, as it is unsigned long */ - /* - * It is in atomic context when called from ftrace_int3_handler(), - * in this case rcu lock is not needed. - */ - if (!in_atomic()) - rcu_read_lock(); + rcu_read_lock(); for (pg = ftrace_pages_start; pg; pg = pg->next) { if (pg->index == 0 || end < pg->records[0].ip || @@ -1600,8 +1595,7 @@ unsigned long ftrace_location_range(unsigned long start, unsigned long end) break; } } - if (!in_atomic()) - rcu_read_unlock(); + rcu_read_unlock(); return ip; } -- 2.25.1

2 1

[PATCH OLK-6.6] ax25: Fix reference count leak issue of net_device
by Zhengchao Shao 08 Jul '24

08 Jul '24

From: Duoming Zhou <duoming(a)zju.edu.cn> stable inclusion from stable-v6.6.33 commit 965d940fb7414b310a22666503d2af69459c981b category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SG4 CVE: CVE-2024-38554 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- [ Upstream commit 36e56b1b002bb26440403053f19f9e1a8bc075b2 ] There is a reference count leak issue of the object "net_device" in ax25_dev_device_down(). When the ax25 device is shutting down, the ax25_dev_device_down() drops the reference count of net_device one or zero times depending on if we goto unlock_put or not, which will cause memory leak. In order to solve the above issue, decrease the reference count of net_device after dev->ax25_ptr is set to null. Fixes: d01ffb9eee4a ("ax25: add refcount in ax25_dev to avoid UAF bugs") Suggested-by: Dan Carpenter <dan.carpenter(a)linaro.org> Signed-off-by: Duoming Zhou <duoming(a)zju.edu.cn> Reviewed-by: Dan Carpenter <dan.carpenter(a)linaro.org> Link: https://lore.kernel.org/r/7ce3b23a40d9084657ba1125432f0ecc380cbc80.17152470… Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zhengchao Shao <shaozhengchao(a)huawei.com> --- net/ax25/ax25_dev.c | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/net/ax25/ax25_dev.c b/net/ax25/ax25_dev.c index 52ccc37d5687..c9d55b99a7a5 100644 --- a/net/ax25/ax25_dev.c +++ b/net/ax25/ax25_dev.c @@ -118,15 +118,10 @@ void ax25_dev_device_down(struct net_device *dev) list_for_each_entry(s, &ax25_dev_list, list) { if (s == ax25_dev) { list_del(&s->list); - goto unlock_put; + break; } } - dev->ax25_ptr = NULL; - spin_unlock_bh(&ax25_dev_lock); - ax25_dev_put(ax25_dev); - return; -unlock_put: dev->ax25_ptr = NULL; spin_unlock_bh(&ax25_dev_lock); netdev_put(dev, &ax25_dev->dev_tracker); -- 2.34.1

2 1

[PATCH openEuler-1.0-LTS] x86/ftrace: Disable lockdep check when execute ftrace_int3_handler()
by Zheng Yejian 08 Jul '24

08 Jul '24

After commit 5e66a5bdad69 ("ftrace: Fix rcu warn in ftrace_location()"), lockdep still complain that: include/linux/rcupdate.h:646 rcu_read_lock() used illegally while idle! As Xu suggested, lockdep check can be disabled when exectue ftrace_int3_handler(), refer to mainline commit ba1f2b2eaa2a ("x86/entry: Fix NMI vs IRQ state tracking"). Fixes: 5e66a5bdad69 ("ftrace: Fix rcu warn in ftrace_location()") Suggested-by: Xu Kuohai <xukuohai(a)huawei.com> Signed-off-by: Zheng Yejian <zhengyejian1(a)huawei.com> --- arch/x86/kernel/traps.c | 12 +++++++++--- kernel/trace/ftrace.c | 10 ++-------- 2 files changed, 11 insertions(+), 11 deletions(-) diff --git a/arch/x86/kernel/traps.c b/arch/x86/kernel/traps.c index e832a9becc19..343c21fa3fad 100644 --- a/arch/x86/kernel/traps.c +++ b/arch/x86/kernel/traps.c @@ -585,9 +585,15 @@ dotraplinkage void notrace do_int3(struct pt_regs *regs, long error_code) * ftrace must be first, everything else may cause a recursive crash. * See note by declaration of modifying_ftrace_code in ftrace.c */ - if (unlikely(atomic_read(&modifying_ftrace_code)) && - ftrace_int3_handler(regs)) - return; + if (unlikely(atomic_read(&modifying_ftrace_code))) { + int ret; + + lockdep_off(); + ret = ftrace_int3_handler(regs); + lockdep_on(); + if (ret) + return; + } #endif if (poke_int3_handler(regs)) return; diff --git a/kernel/trace/ftrace.c b/kernel/trace/ftrace.c index ad4440da5b78..6704150cb655 100644 --- a/kernel/trace/ftrace.c +++ b/kernel/trace/ftrace.c @@ -1581,12 +1581,7 @@ unsigned long ftrace_location_range(unsigned long start, unsigned long end) key.ip = start; key.flags = end; /* overload flags, as it is unsigned long */ - /* - * It is in atomic context when called from ftrace_int3_handler(), - * in this case rcu lock is not needed. - */ - if (!in_atomic()) - rcu_read_lock(); + rcu_read_lock(); for (pg = ftrace_pages_start; pg; pg = pg->next) { if (pg->index == 0 || end < pg->records[0].ip || @@ -1600,8 +1595,7 @@ unsigned long ftrace_location_range(unsigned long start, unsigned long end) break; } } - if (!in_atomic()) - rcu_read_unlock(); + rcu_read_unlock(); return ip; } -- 2.25.1

2 1

[openeuler:OLK-6.6 3272/10596] drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:4087:21: sparse: sparse: incorrect type in assignment (different address spaces)
by kernel test robot 08 Jul '24

08 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 3b421b6002e287e38790cbdad4a3e08baf7e1bc4 commit: 22129ea1b367d0101df8cc4a837b3f773021e556 [3272/10596] iommu/arm-smmu-v3: Add support for less than one ECMDQ per core config: arm64-randconfig-r131-20240707 (https://download.01.org/0day-ci/archive/20240708/202407080858.aAMctg7p-lkp@…) compiler: clang version 19.0.0git (https://github.com/llvm/llvm-project a0c6b8aef853eedaa0980f07c0a502a5a8a9740e) reproduce: (https://download.01.org/0day-ci/archive/20240708/202407080858.aAMctg7p-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407080858.aAMctg7p-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:4084:15: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected struct arm_smmu_ecmdq *ecmdq @@ got struct arm_smmu_ecmdq [noderef] __percpu * @@ drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:4084:15: sparse: expected struct arm_smmu_ecmdq *ecmdq drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:4084:15: sparse: got struct arm_smmu_ecmdq [noderef] __percpu * >> drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:4087:21: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected struct arm_smmu_ecmdq [noderef] __percpu *ecmdq @@ got struct arm_smmu_ecmdq *ecmdq @@ drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:4087:21: sparse: expected struct arm_smmu_ecmdq [noderef] __percpu *ecmdq drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:4087:21: sparse: got struct arm_smmu_ecmdq *ecmdq drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:4124:45: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const *addr @@ got void [noderef] __iomem *base @@ drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:4124:45: sparse: expected void const *addr drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:4124:45: sparse: got void [noderef] __iomem *base drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c: note: in included file (through arch/arm64/include/asm/atomic.h, include/linux/atomic.h, include/asm-generic/bitops/atomic.h, ...): arch/arm64/include/asm/cmpxchg.h:168:1: sparse: sparse: cast truncates bits from constant value (ffffffff80000000 becomes 0) arch/arm64/include/asm/cmpxchg.h:168:1: sparse: sparse: cast truncates bits from constant value (ffffffff80000000 becomes 0) vim +4087 drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c 4077 4078 #ifdef CONFIG_ARM_SMMU_V3_ECMDQ 4079 static int arm_smmu_ecmdq_layout(struct arm_smmu_device *smmu) 4080 { 4081 int cpu, host_cpu; 4082 struct arm_smmu_ecmdq *ecmdq; 4083 > 4084 ecmdq = devm_alloc_percpu(smmu->dev, *ecmdq); 4085 if (!ecmdq) 4086 return -ENOMEM; > 4087 smmu->ecmdq = ecmdq; 4088 4089 /* A core requires at most one ECMDQ */ 4090 if (num_possible_cpus() < smmu->nr_ecmdq) 4091 smmu->nr_ecmdq = num_possible_cpus(); 4092 4093 for_each_possible_cpu(cpu) { 4094 if (cpu < smmu->nr_ecmdq) { 4095 *per_cpu_ptr(smmu->ecmdqs, cpu) = per_cpu_ptr(smmu->ecmdq, cpu); 4096 } else { 4097 host_cpu = cpu % smmu->nr_ecmdq; 4098 ecmdq = per_cpu_ptr(smmu->ecmdq, host_cpu); 4099 ecmdq->cmdq.shared = 1; 4100 *per_cpu_ptr(smmu->ecmdqs, cpu) = ecmdq; 4101 } 4102 } 4103 4104 return 0; 4105 } 4106 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 4037/10596] drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:86:33: sparse: sparse: cast removes address space '__iomem' of expression
by kernel test robot 08 Jul '24

08 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 3b421b6002e287e38790cbdad4a3e08baf7e1bc4 commit: 5deaf74c4b3edcf88f67f18aa352690deb9dc212 [4037/10596] drivers: initial support for rnpm drivers from Mucse Technology config: loongarch-randconfig-r132-20240707 (https://download.01.org/0day-ci/archive/20240708/202407080814.NRFI4Oce-lkp@…) compiler: loongarch64-linux-gcc (GCC) 13.2.0 reproduce: (https://download.01.org/0day-ci/archive/20240708/202407080814.NRFI4Oce-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407080814.NRFI4Oce-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) >> drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:86:33: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:86:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:86:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:86:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:87:41: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:87:41: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:87:41: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:87:41: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:102:41: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:102:41: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:102:41: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c:102:41: sparse: got void * -- >> drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:16:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:16:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:16:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:16:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:17:17: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:17:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:17:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:17:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:28:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:28:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:28:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:28:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:29:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:29:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:29:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_pcs.c:29:9: sparse: got void * -- >> drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:76:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:76:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:76:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:79:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:79:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:79:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:81:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:81:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:81:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:107:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:107:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:107:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:113:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:113:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:113:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:116:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:116:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:116:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:125:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:125:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:125:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:126:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:126:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:126:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:130:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:130:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:130:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:189:23: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected char *rpu_base @@ got unsigned char [noderef] [usertype] __iomem *rpu_addr @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:189:23: sparse: expected char *rpu_base drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:189:23: sparse: got unsigned char [noderef] [usertype] __iomem *rpu_addr drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:214:43: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected char *rpu_base @@ got unsigned char [noderef] [usertype] __iomem *rpu_addr @@ drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:214:43: sparse: expected char *rpu_base drivers/net/ethernet/mucse/rnpm/rnpm_mpe.c:214:43: sparse: got unsigned char [noderef] [usertype] __iomem *rpu_addr -- >> drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:446:5: sparse: sparse: symbol 'rnpm_reset_pipeline_n10' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:476:26: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:476:26: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:476:26: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:476:26: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:478:20: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:478:20: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:478:20: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:478:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:479:26: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:479:26: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:479:26: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:479:26: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:481:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:481:20: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:481:20: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:481:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:483:26: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:483:26: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:483:26: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:483:26: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:485:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:485:20: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:485:20: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:485:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:486:26: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:486:26: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:486:26: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:486:26: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:488:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:488:20: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:488:20: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:488:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:553:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:553:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:553:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:553:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:555:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:555:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:555:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:555:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:556:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:556:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:556:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:556:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:558:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:558:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:558:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:558:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:561:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:561:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:561:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_n10.c:561:9: sparse: got void * -- >> drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:20:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:20:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:20:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:20:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:29:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:29:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:29:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:29:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:31:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:31:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:31:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_tc.c:31:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_tc.c: note: in included file: >> drivers/net/ethernet/mucse/rnpm/rnpm_tc_u32_parse.h:28:44: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] ip @@ got restricted __be32 @@ drivers/net/ethernet/mucse/rnpm/rnpm_tc_u32_parse.h:28:44: sparse: expected unsigned int [usertype] ip drivers/net/ethernet/mucse/rnpm/rnpm_tc_u32_parse.h:28:44: sparse: got restricted __be32 drivers/net/ethernet/mucse/rnpm/rnpm_tc_u32_parse.h:42:44: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] ip @@ got restricted __be32 @@ drivers/net/ethernet/mucse/rnpm/rnpm_tc_u32_parse.h:42:44: sparse: expected unsigned int [usertype] ip drivers/net/ethernet/mucse/rnpm/rnpm_tc_u32_parse.h:42:44: sparse: got restricted __be32 -- >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:369:17: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:369:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:369:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:369:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:373:21: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:373:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:373:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:373:21: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:417:38: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:417:38: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:417:38: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:417:38: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:437:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:437:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:437:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:437:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:453:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:453:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:453:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:453:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:500:26: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:500:26: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:500:26: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:500:26: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:504:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:504:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:504:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:504:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:518:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:518:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:518:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:518:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:537:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:537:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:537:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:537:21: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:542:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:542:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:542:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:542:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:545:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:545:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:545:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:545:13: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:549:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:549:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:549:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:549:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:551:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:551:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:551:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:551:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:552:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:552:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:552:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:552:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:555:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:555:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:555:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:555:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:568:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:568:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:568:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:568:29: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:573:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:573:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:573:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:573:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:576:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:576:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:576:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:576:21: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:580:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:580:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:580:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:580:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:585:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:585:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:585:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:585:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:588:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:588:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:588:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:588:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:589:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:589:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:589:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:589:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:593:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:593:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:593:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:593:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:595:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:595:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:595:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:595:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:599:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:599:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:599:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:599:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:600:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:600:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:600:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:600:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:603:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx.c:603:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ -- >> drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:61:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:61:9: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:61:9: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:61:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:61:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:61:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:61:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:61:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:67:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:67:9: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:67:9: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:67:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:69:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:69:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:69:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:69:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:70:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:70:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:70:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:70:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:71:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:71:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:71:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:71:13: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:73:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:73:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:73:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:73:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:75:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:75:9: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:75:9: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:75:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:75:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:75:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:75:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:75:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:210:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:210:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:210:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:210:13: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:212:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:212:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:212:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:212:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:361:19: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:361:19: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:361:19: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:361:19: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:362:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:362:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:362:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:362:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:380:27: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:380:27: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:380:27: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:380:27: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:382:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:382:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:382:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:382:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:424:35: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:424:35: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:424:35: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:424:35: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:427:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:427:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:427:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:427:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:643:41: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:643:41: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:643:41: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:643:41: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:645:44: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:645:44: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:645:44: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:645:44: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:773:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:773:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:773:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:773:21: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:976:5: sparse: sparse: symbol 'rnpm_get_vf_ringnum' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:989:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:989:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:989:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:989:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:996:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:996:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:996:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:996:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c:983:5: sparse: sparse: symbol 'rnpm_setup_ring_maxrate' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c: note: in included file (through include/linux/module.h): include/linux/list.h:83:21: sparse: sparse: self-comparison always evaluates to true drivers/net/ethernet/mucse/rnpm/rnpm_sriov.c: note: in included file (through drivers/net/ethernet/mucse/rnpm/rnpm.h): >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: got void * -- >> drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:18:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:18:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:18:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:18:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:24:21: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:24:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:24:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:24:21: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:56:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:56:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:56:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:56:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:67:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:67:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:67:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:67:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:69:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:69:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:69:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:69:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:71:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:71:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:71:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:71:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:76:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:76:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:76:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:76:23: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:94:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:94:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:94:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:94:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:95:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:95:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:95:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:95:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:97:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:97:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:97:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:97:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:99:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:99:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:99:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:99:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:102:26: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:102:26: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:102:26: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:102:26: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:125:14: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:125:14: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:125:14: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:125:14: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:127:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:127:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:127:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:127:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:136:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:136:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:136:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:136:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:164:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:164:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:164:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:164:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:172:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:172:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:172:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:172:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:174:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:174:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:174:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:174:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:177:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:177:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:177:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:177:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:179:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:179:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:179:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:179:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:184:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:184:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:184:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:184:23: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:316:5: sparse: sparse: symbol 'rnpm_ptp_setup_ptp' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:681:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:681:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:681:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:681:13: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:687:27: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:687:27: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:687:27: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:687:27: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:688:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:688:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:688:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:688:23: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:695:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:695:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:695:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:695:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:697:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:697:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:697:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:697:17: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:769:13: sparse: sparse: restricted __le16 degrades to integer >> drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:786:20: sparse: sparse: cast to restricted __be32 drivers/net/ethernet/mucse/rnpm/rnpm_ptp.c:787:20: sparse: sparse: cast to restricted __be32 -- >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:572:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:572:9: sparse: void drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:572:9: sparse: void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:926:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:926:9: sparse: void drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:926:9: sparse: void * >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1039:41: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1039:41: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1039:41: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1039:41: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1046:25: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1046:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1046:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1046:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1048:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1048:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1048:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1048:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1050:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1050:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1050:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1050:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1067:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1067:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1067:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1067:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1106:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1106:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1106:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1106:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1139:41: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1139:41: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1139:41: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1139:41: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1149:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1149:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1149:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1149:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1150:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1150:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1150:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1150:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1152:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1152:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1152:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1152:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1154:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1154:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1154:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1154:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1179:16: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1179:16: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1179:16: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1179:16: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1182:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1182:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1182:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1182:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1196:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1196:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1196:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1196:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1200:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1200:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1200:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1200:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1204:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1204:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1204:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1204:17: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1185:6: sparse: sparse: symbol 'rnpm_setup_layer2_remapping' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1221:17: sparse: sparse: cast from restricted __be32 >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1221:17: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1221:17: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1221:17: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1221:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1221:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1221:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1221:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1227:17: sparse: sparse: cast from restricted __be32 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1227:17: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1227:17: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1227:17: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1227:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1227:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1227:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1227:17: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1233:26: sparse: sparse: cast from restricted __be16 >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1233:22: sparse: sparse: invalid assignment: |= drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1233:22: sparse: left side has type unsigned int drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1233:22: sparse: right side has type restricted __be16 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1238:26: sparse: sparse: cast from restricted __be16 >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1238:26: sparse: sparse: restricted __be16 degrades to integer drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1243:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1243:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1243:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1243:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1267:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1267:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1267:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1267:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1272:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1272:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1272:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1272:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1275:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1275:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1275:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1275:17: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1209:6: sparse: sparse: symbol 'rnpm_setup_tuple5_remapping' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1293:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1293:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1293:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1293:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1297:17: sparse: sparse: cast from restricted __be32 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1297:17: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1297:17: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1297:17: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1297:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1297:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1297:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1297:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1299:17: sparse: sparse: cast from restricted __be32 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1299:17: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1299:17: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1299:17: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1299:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1299:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1299:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1299:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1302:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1302:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1302:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1302:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1303:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1303:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1303:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1303:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1306:17: sparse: sparse: cast from restricted __be32 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1306:17: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1306:17: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1306:17: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1306:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1306:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1306:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1306:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1308:17: sparse: sparse: cast from restricted __be32 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1308:17: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1308:17: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1308:17: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1308:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1308:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1308:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1308:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1311:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1311:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1311:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1311:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1312:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1312:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1312:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1312:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1315:26: sparse: sparse: cast from restricted __be16 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1315:26: sparse: sparse: restricted __be16 degrades to integer drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1316:31: sparse: sparse: cast from restricted __be16 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1316:31: sparse: sparse: restricted __be16 degrades to integer drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1320:26: sparse: sparse: cast from restricted __be16 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1320:22: sparse: sparse: invalid assignment: |= drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1320:22: sparse: left side has type unsigned int drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1320:22: sparse: right side has type restricted __be16 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1321:31: sparse: sparse: cast from restricted __be16 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1321:27: sparse: sparse: invalid assignment: |= drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1321:27: sparse: left side has type unsigned int drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1321:27: sparse: right side has type restricted __be16 drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1326:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1326:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1326:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1326:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1327:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1327:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1327:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1327:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1329:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1329:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1329:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1329:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1330:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1330:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1330:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1330:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1360:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1360:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1360:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1360:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1361:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1361:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1361:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1361:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1364:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1364:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1364:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1364:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1366:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1366:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1366:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1366:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1368:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1368:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1368:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1368:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1280:6: sparse: sparse: symbol 'rnpm_setup_tuple5_remapping_tcam' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1404:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1404:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1404:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1404:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1408:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1408:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1408:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1408:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1412:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1412:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1412:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1412:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1414:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1414:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1414:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1414:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1415:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1415:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1415:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1415:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1416:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1416:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1416:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1416:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1417:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1417:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1417:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1417:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1418:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1418:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1418:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1418:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1419:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1419:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1419:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1419:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1420:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1420:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1420:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1420:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1421:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1421:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1421:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1421:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1422:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1422:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1422:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1422:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1424:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1424:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1424:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1424:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1425:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1425:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1425:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1425:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1443:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1443:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1443:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1443:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1445:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1445:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1445:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1445:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1454:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1454:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1454:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1454:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1456:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1456:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1456:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1456:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1471:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1471:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1471:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1471:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1473:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1473:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1473:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1473:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1490:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1490:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1490:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1490:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1492:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1492:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1492:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1492:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1494:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1494:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1494:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:1494:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:469:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:469:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:469:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:469:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:469:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:469:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:469:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_lib.c:469:17: sparse: got void * -- >> drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1763:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1763:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1763:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1763:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:224:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:224:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:224:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:224:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:242:39: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_common.c:242:39: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:242:39: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:242:39: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:244:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:244:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:244:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:244:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:245:39: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:245:39: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:245:39: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:245:39: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:247:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:247:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:247:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:247:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:249:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:249:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:249:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:249:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:250:39: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:250:39: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:250:39: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:250:39: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:251:39: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:251:39: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:251:39: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:251:39: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:252:39: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:252:39: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:252:39: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:252:39: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:253:40: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:253:40: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:253:40: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:253:40: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:255:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:255:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:255:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:255:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:336:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:336:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:336:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:336:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:337:19: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:337:19: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:337:19: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:337:19: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:374:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:374:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:374:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:374:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:380:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:380:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:380:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:380:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:802:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:802:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:802:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:802:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:809:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:809:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:809:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:809:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:810:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:810:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:810:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:810:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:816:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:816:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:816:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:816:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:818:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:818:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:818:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:818:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:855:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:855:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:855:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:855:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:856:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:856:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:856:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:856:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:859:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:859:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:859:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:859:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:861:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:861:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:861:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:861:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:887:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:887:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:887:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:887:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:891:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:891:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:891:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:891:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:892:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:892:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ -- drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1322:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1322:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1322:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1322:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1331:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1331:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1331:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1331:29: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1332:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1332:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1332:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1332:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1343:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1343:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1343:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1343:29: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1345:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1345:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1345:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1345:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1409:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1409:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1409:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1409:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1415:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1415:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1415:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1415:21: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1416:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1416:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1416:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1416:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1441:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1441:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1441:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1441:29: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1443:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1443:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1443:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1443:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1445:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1445:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1445:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1445:29: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1447:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1447:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1447:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1447:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1466:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1466:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1466:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1466:21: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1468:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1468:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1468:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1468:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1515:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1515:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1515:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1515:21: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1519:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1519:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1519:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1519:32: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1574:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1574:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1574:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1574:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1577:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1577:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1577:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1577:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1588:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1588:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1588:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1588:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1590:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1590:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1590:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1590:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1871:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1871:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1871:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1871:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1893:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1893:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1893:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1893:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1906:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1906:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1906:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1906:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1932:24: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1932:24: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1932:24: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1932:24: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1966:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1966:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1966:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1966:17: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1968:13: sparse: sparse: incorrect type in assignment (different base types) @@ expected unsigned short [usertype] vid @@ got restricted __le16 [usertype] @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1968:13: sparse: expected unsigned short [usertype] vid drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1968:13: sparse: got restricted __le16 [usertype] drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1974:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1974:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1974:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:1974:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2015:16: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2015:16: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2015:16: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2015:16: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2036:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2036:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2036:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2036:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2055:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2055:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2055:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2055:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2057:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2057:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2057:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.c:2057:25: sparse: got void * -- >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:29:5: sparse: sparse: symbol 'rnpm_mbx_write_posted_locked' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:70:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:70:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:70:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:70:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:75:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:75:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:75:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:75:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:73:6: sparse: sparse: symbol 'rnpm_link_stat_mark_disable' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:78:5: sparse: sparse: symbol 'rnpm_mbx_fw_post_req' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:138:5: sparse: sparse: symbol 'rnpm_fw_send_cmd_wait' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:210:17: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:210:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:210:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:210:17: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:619:5: sparse: sparse: symbol 'rnpm_mbx_lldp_all_ports_enable' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:879:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:879:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:879:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:879:21: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:883:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:883:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:883:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:883:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:886:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:886:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:886:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:886:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:916:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:916:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:916:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:916:21: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:919:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:919:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:919:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:919:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:922:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:922:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:922:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:922:17: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:933:5: sparse: sparse: symbol 'rnpm_mbx_pluginout_evt_en' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:962:5: sparse: sparse: symbol 'rnpm_fw_get_capablity' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1178:5: sparse: sparse: symbol 'rnpm_fw_reg_read' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1205:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1205:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1205:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1205:13: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1212:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1212:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1212:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1212:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1224:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1224:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1224:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1224:13: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1233:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1233:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1233:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1233:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1477:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1477:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1477:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1477:13: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_mbx_fw.c:1470:5: sparse: sparse: symbol 'rnpm_get_port_stats2' was not declared. Should it be static? -- >> drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:39:5: sparse: sparse: symbol 'bar4_reg_val' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:40:5: sparse: sparse: symbol 'bar4_reg_addr' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:41:5: sparse: sparse: symbol 'pcs_phy_num' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:42:5: sparse: sparse: symbol 'pcs_cnt' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:192:31: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:192:31: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:192:31: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:192:31: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:222:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:222:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:222:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:222:21: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:224:33: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:224:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:224:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:224:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:227:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:227:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:227:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:227:25: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:263:5: sparse: sparse: symbol 'rnpm_mbx_get_pn_sn' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:409:60: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:409:60: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:409:60: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:409:60: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:429:53: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:429:53: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:429:53: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:429:53: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:738:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:738:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:738:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:738:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:742:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:742:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:742:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:742:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:746:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:746:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:746:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:746:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:752:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:752:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:752:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:752:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:756:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:756:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:756:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:756:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:760:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:760:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:760:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:760:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:766:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:766:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:766:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:766:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:770:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:770:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:770:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:770:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:776:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:776:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:776:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:776:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:780:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:780:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:780:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:780:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:784:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:784:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:784:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:784:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:790:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:790:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:790:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:790:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:794:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:794:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:794:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:794:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:800:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:800:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:800:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:800:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:804:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:804:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:804:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:804:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:808:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:808:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:808:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:808:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:812:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:812:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:812:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:812:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:816:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:816:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:816:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:816:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:820:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:820:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:820:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:820:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:824:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:824:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:824:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:824:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:828:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:828:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:828:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:828:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:832:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:832:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:832:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:832:15: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:836:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:836:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:836:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_sysfs.c:836:15: sparse: got void * -- >> drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:187:32: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:187:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:187:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:187:32: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:1145:33: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:1145:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:1145:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:1145:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2464:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2464:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2464:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2464:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2504:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2504:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2504:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2504:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2532:31: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2532:31: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2532:31: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2532:31: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2543:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2543:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2543:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2543:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2560:22: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2560:22: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2560:22: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2560:22: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2692:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2692:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2692:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2692:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2944:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2944:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2944:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2944:29: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2946:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2946:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2946:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:2946:29: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:3002:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:3002:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:3002:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:3002:29: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:3004:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:3004:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:3004:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:3004:29: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_ethtool.c:3246:6: sparse: sparse: symbol 'rnpm_get_phy_statistics' was not declared. Should it be static? -- >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:50:6: sparse: sparse: symbol 'rnpm_port_name' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:256:6: sparse: sparse: symbol 'rnpm_pf_service_event_schedule' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:306:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnpm/rnpm_main.c:306:9: sparse: void drivers/net/ethernet/mucse/rnpm/rnpm_main.c:306:9: sparse: void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:351:17: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:351:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:353:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:353:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:1061:37: sparse: sparse: restricted __le16 degrades to integer drivers/net/ethernet/mucse/rnpm/rnpm_main.c:1074:57: sparse: sparse: restricted __le16 degrades to integer drivers/net/ethernet/mucse/rnpm/rnpm_main.c:1167:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:1167:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:1137:5: sparse: sparse: symbol 'rnpm_rx_ring_reinit' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2215:56: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2215:56: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2220:56: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2220:56: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2207:6: sparse: sparse: symbol 'rnpm_write_eitr' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2775:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2775:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2787:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2787:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2902:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2902:9: sparse: void drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2902:9: sparse: void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2994:17: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2994:17: sparse: void drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2994:17: sparse: void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3033:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3033:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3033:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3033:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3013:5: sparse: sparse: symbol 'rnpm_xmit_nop_frame_ring' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3056:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3056:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3056:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3056:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3037:5: sparse: sparse: symbol 'rnpm_xmit_nop_frame_ring_temp' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3102:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3102:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3102:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3102:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3104:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3104:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3104:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3104:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3106:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3106:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3106:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3106:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3110:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3110:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3110:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3110:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3113:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3113:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3113:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3113:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3120:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3120:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3120:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3120:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3125:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3125:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3125:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3125:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3127:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3127:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3127:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3127:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3172:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3172:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3172:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3172:23: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3174:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3174:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3174:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3174:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3191:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3191:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3191:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3191:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3205:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3205:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3205:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3205:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3206:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3206:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3206:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3206:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3208:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3208:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3208:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3208:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3211:31: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3211:31: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3211:31: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3211:31: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3214:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3214:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3214:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3214:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3219:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3219:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3219:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3219:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3221:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3221:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3221:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3221:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3241:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3241:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3241:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3241:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3241:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3241:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3241:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3241:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3247:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3247:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3247:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3247:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3248:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3248:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3248:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3248:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3249:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3249:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3249:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3249:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3250:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3250:9: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3250:9: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3250:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3250:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3250:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3250:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3250:9: sparse: got void * -- drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3497:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3497:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3497:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3497:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3502:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3502:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3502:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3502:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3504:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3504:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3504:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3504:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3505:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3505:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3505:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3505:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3505:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3505:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3505:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3505:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3524:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3524:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3524:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3524:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3524:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3524:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3524:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3524:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3529:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3529:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3529:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3529:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3531:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3531:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3531:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3531:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3533:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3533:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3533:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3533:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3533:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3533:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3533:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3533:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3581:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3581:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3581:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3581:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3674:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3674:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3674:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3674:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3756:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3756:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3756:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3756:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3763:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3763:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3763:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3763:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3767:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3767:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3767:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3767:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3883:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3883:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3883:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3883:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3884:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3884:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3884:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3884:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3885:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3885:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3885:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3885:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3918:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3918:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3918:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3918:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3923:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3923:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3923:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3923:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3924:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3924:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3924:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3924:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3928:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3928:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3928:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3928:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3930:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3930:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3930:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3930:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3931:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3931:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3931:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3931:17: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3909:6: sparse: sparse: symbol 'rnpm_vlan_stags_flag' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3968:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3968:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3968:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3968:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3970:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3970:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3970:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3970:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3976:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3976:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3976:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3976:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3988:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3988:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3988:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3988:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3989:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3989:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3989:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:3989:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4039:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4039:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4039:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4039:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4042:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4042:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4042:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4042:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4042:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4042:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4042:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4042:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4046:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4046:33: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4046:33: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4046:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4054:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4054:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4054:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4054:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4054:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4054:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4054:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4054:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4058:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4058:33: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4058:33: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4058:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4066:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4066:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4066:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4066:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4066:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4066:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4066:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4066:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4069:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4069:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4069:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4069:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4069:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4069:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4069:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4069:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4072:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4072:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4072:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4072:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4076:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4076:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4076:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4076:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4076:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4076:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4076:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4076:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4080:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4080:33: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4080:33: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4080:33: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4031:6: sparse: sparse: symbol 'control_mac_rx' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4124:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4124:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4124:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4124:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4456:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4456:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4456:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4456:32: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4513:34: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4513:34: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4513:34: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4513:34: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4522:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4522:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4522:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4522:32: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4525:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4525:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4525:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4525:32: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4539:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4539:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4539:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4539:32: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4546:41: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4546:41: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4546:41: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4546:41: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4559:48: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4559:48: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4559:48: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4559:48: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4817:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4817:9: sparse: void drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4817:9: sparse: void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4917:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4917:9: sparse: void drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4917:9: sparse: void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4956:24: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4956:24: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4956:24: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:4956:24: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5139:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5139:9: sparse: void drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5139:9: sparse: void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5215:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5215:9: sparse: void drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5215:9: sparse: void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5299:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5299:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5299:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5299:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5300:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5300:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5300:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5300:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5301:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5301:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5301:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5301:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5302:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5302:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5302:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5302:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5308:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5308:33: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5308:33: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5308:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5313:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5313:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5313:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5313:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5318:35: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5318:35: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5318:35: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5318:35: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5319:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5319:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5319:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5319:32: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5322:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5322:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5322:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5322:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5328:43: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5328:43: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5328:43: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5328:43: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5332:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5332:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5332:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5332:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5335:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5335:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5335:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5335:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5338:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5338:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5338:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5338:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5340:43: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5340:43: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5340:43: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5340:43: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5343:43: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5343:43: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5343:43: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5343:43: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5347:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5347:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5347:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5347:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5354:43: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5354:43: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5354:43: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5354:43: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5357:43: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5357:43: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5357:43: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5357:43: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5364:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5364:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5364:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5364:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5366:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5366:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5366:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5366:23: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5370:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5370:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5370:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5370:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5372:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5372:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5372:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5372:23: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5377:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5377:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5377:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5377:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5379:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5379:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5379:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5379:23: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5382:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5382:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5382:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5382:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5384:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5384:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5384:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5384:23: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5803:6: sparse: sparse: symbol 'rnpm_pf_service_timer' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5821:6: sparse: sparse: symbol 'rnpm_service_timer' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5846:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5846:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5846:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5846:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5858:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5858:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5858:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5858:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5862:26: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5862:26: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5862:26: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5862:26: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5874:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5874:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5874:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5874:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5878:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5878:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5878:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5878:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5905:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5905:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5905:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5905:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5906:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5906:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5906:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5906:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5910:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5910:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5910:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5910:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5918:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5918:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5918:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5918:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5919:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5919:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5919:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5919:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5920:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5920:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5920:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5920:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5923:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5923:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5923:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5923:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5924:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5924:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5924:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5924:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5925:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5925:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5925:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5925:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5926:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5926:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5926:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5926:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5928:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5928:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5928:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5928:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5929:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5929:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5929:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5929:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5930:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5930:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5930:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5930:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5931:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5931:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5931:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5931:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5933:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5933:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5933:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5933:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5939:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5939:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5939:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5939:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5940:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5940:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5940:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5940:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5947:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5947:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5947:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5947:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5948:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5948:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5948:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5948:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5949:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5949:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5949:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5949:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5950:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5950:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5950:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5950:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5954:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5954:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5954:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5954:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5955:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5955:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5955:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5955:17: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5962:21: sparse: sparse: symbol 'wait_all_port_resetting' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:5974:21: sparse: sparse: symbol 'clean_all_port_resetting' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6003:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6003:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6003:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6003:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6185:5: sparse: sparse: symbol 'rnpm_check_mc_addr' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6211:6: sparse: sparse: symbol 'update_pf_vlan' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6262:6: sparse: sparse: symbol 'rnpm_pf_service_task' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6436:27: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __le32 [usertype] mac_ip_len @@ got long @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6436:27: sparse: expected restricted __le32 [usertype] mac_ip_len drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6436:27: sparse: got long >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6437:27: sparse: sparse: invalid assignment: |= drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6437:27: sparse: left side has type restricted __le32 drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6437:27: sparse: right side has type long >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6483:32: sparse: sparse: incorrect type in initializer (different base types) @@ expected unsigned short [usertype] old @@ got restricted __be16 [usertype] frag_off @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6483:32: sparse: expected unsigned short [usertype] old drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6483:32: sparse: got restricted __be16 [usertype] frag_off drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6485:33: sparse: sparse: invalid assignment: |= drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6485:33: sparse: left side has type restricted __be16 drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6485:33: sparse: right side has type int >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6489:58: sparse: sparse: restricted __be16 degrades to integer >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6489:69: sparse: sparse: incorrect type in argument 2 (different base types) @@ expected restricted __wsum [usertype] diff @@ got int @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6489:69: sparse: expected restricted __wsum [usertype] diff drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6489:69: sparse: got int >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6611:27: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __le32 [usertype] mac_ip_len @@ got int @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6611:27: sparse: expected restricted __le32 [usertype] mac_ip_len drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6611:27: sparse: got int >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6654:32: sparse: sparse: restricted __le32 degrades to integer drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6766:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6766:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6766:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6766:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6842:27: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __le32 [usertype] mac_ip_len @@ got int @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6842:27: sparse: expected restricted __le32 [usertype] mac_ip_len drivers/net/ethernet/mucse/rnpm/rnpm_main.c:6842:27: sparse: got int drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7422:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7422:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7422:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7422:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7425:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7425:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7425:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7425:33: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7437:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7437:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7437:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7437:29: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7445:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7445:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7445:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7445:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7492:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7492:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7492:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7492:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7492:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7492:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7492:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7492:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7496:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7496:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7496:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7496:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7496:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7496:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7496:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7496:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7535:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7535:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7535:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7535:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7528:6: sparse: sparse: symbol 'rnpm_clear_udp_tunnel_port' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7577:9: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be16 [usertype] vxlan_port @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7577:9: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7577:9: sparse: got restricted __be16 [usertype] vxlan_port drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7577:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7577:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7577:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7577:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7667:29: sparse: sparse: symbol 'rnpm_netdev_ops' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7692:6: sparse: sparse: symbol 'rnpm_assign_netdev_ops' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7785:6: sparse: sparse: symbol 'rnpm_fix_queue_number' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:7961:36: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8025:36: sparse: sparse: Using plain integer as NULL pointer drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8055:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8055:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8055:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8055:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8281:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8281:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8281:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8281:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8451:27: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8451:27: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8451:27: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8451:27: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8452:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8452:9: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8452:9: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8452:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_main.c:8760:5: sparse: sparse: symbol 'rnpm_can_rpu_start' was not declared. Should it be static? drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9034:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9034:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9034:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9034:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9035:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9035:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9035:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9035:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9036:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9036:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9036:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9036:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9039:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9039:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9039:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9039:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9040:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9040:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9040:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9040:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9041:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9041:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9041:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9041:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9042:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9042:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9042:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9042:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9044:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9044:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9044:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9044:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9045:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9045:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9045:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9045:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9046:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9046:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9046:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9046:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9047:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9047:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9047:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9047:25: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9049:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9049:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9049:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:9049:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:637:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:637:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:637:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:637:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:575:31: sparse: sparse: restricted __le16 degrades to integer drivers/net/ethernet/mucse/rnpm/rnpm_main.c:598:26: sparse: sparse: restricted __le16 degrades to integer drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c: note: in included file (through drivers/net/ethernet/mucse/rnpm/rnpm.h): >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: got void * >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.h:160:20: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_common.h:166:9: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2660:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnpm/rnpm_main.c:2671:17: sparse: got void * drivers/net/ethernet/mucse/rnpm/rnpm_main.c: note: in included file (through include/linux/skbuff.h, include/net/net_namespace.h, include/linux/netdevice.h): include/net/checksum.h:63:59: sparse: sparse: self-comparison always evaluates to false vim +/__iomem +86 drivers/net/ethernet/mucse/rnpm/rnpm_debugfs.c 47 48 /** 49 * rnpm_dbg_reg_ops_write - write into reg_ops datum 50 * @filp: the opened file 51 * @buffer: where to find the user's data 52 * @count: the length of the user's data 53 * @ppos: file position offset 54 **/ 55 static ssize_t rnpm_dbg_reg_ops_write(struct file *filp, 56 const char __user *buffer, size_t count, 57 loff_t *ppos) 58 { 59 struct rnpm_adapter *adapter = filp->private_data; 60 struct rnpm_hw *hw = &adapter->hw; 61 int len; 62 63 /* don't allow partial writes */ 64 if (*ppos != 0) 65 return 0; 66 if (count >= sizeof(rnpm_dbg_reg_ops_buf)) 67 return -ENOSPC; 68 69 len = simple_write_to_buffer(rnpm_dbg_reg_ops_buf, 70 sizeof(rnpm_dbg_reg_ops_buf) - 1, ppos, 71 buffer, count); 72 if (len < 0) 73 return len; 74 75 rnpm_dbg_reg_ops_buf[len] = '\0'; 76 77 if (strncmp(rnpm_dbg_reg_ops_buf, "write", 5) == 0) { 78 u32 reg, value; 79 int cnt; 80 81 cnt = sscanf(&rnpm_dbg_reg_ops_buf[5], "%x %x", &reg, &value); 82 if (cnt == 2) { 83 if (reg >= 0x30000000) { 84 rnpm_mbx_reg_write(hw, reg, value); 85 } else { > 86 rnpm_wr_reg(hw->hw_addr + reg, value); > 87 value = rnpm_rd_reg(hw->hw_addr + reg); 88 } 89 e_dev_info("write: 0x%08x = 0x%08x\n", reg, value); 90 } else { 91 e_dev_info("write <reg> <value>\n"); 92 } 93 } else if (strncmp(rnpm_dbg_reg_ops_buf, "read", 4) == 0) { 94 u32 reg, value; 95 int cnt; 96 97 cnt = sscanf(&rnpm_dbg_reg_ops_buf[4], "%x", &reg); 98 if (cnt == 1) { 99 if (reg >= 0x30000000) 100 value = rnpm_mbx_fw_reg_read(hw, reg); 101 else 102 value = rnpm_rd_reg(hw->hw_addr + reg); 103 snprintf(rnpm_dbg_reg_ops_buf, 104 sizeof(rnpm_dbg_reg_ops_buf), "0x%08x: 0x%08x", 105 reg, value); 106 e_dev_info("read 0x%08x = 0x%08x\n", reg, value); 107 } else { 108 e_dev_info("read <reg>\n"); 109 } 110 } else { 111 e_dev_info("Unknown command %s\n", rnpm_dbg_reg_ops_buf); 112 e_dev_info("Available commands:\n"); 113 e_dev_info(" read <reg>\n"); 114 e_dev_info(" write <reg> <value>\n"); 115 } 116 return count; 117 } 118 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3876/10596] drivers/net/ethernet/mucse/rnp/rnp_pcs.c:15:9: sparse: sparse: cast removes address space '__iomem' of expression
by kernel test robot 08 Jul '24

08 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 3b421b6002e287e38790cbdad4a3e08baf7e1bc4 commit: 455d45ae080810ae554f5e586adb9004230f9f70 [3876/10596] drivers: initial support for rnp drivers from Mucse Technology config: loongarch-randconfig-r132-20240707 (https://download.01.org/0day-ci/archive/20240708/202407080500.X6ek0A6W-lkp@…) compiler: loongarch64-linux-gcc (GCC) 13.2.0 reproduce: (https://download.01.org/0day-ci/archive/20240708/202407080500.X6ek0A6W-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407080500.X6ek0A6W-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) >> drivers/net/ethernet/mucse/rnp/rnp_pcs.c:15:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_pcs.c:15:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_pcs.c:15:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_pcs.c:15:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_pcs.c:16:17: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_pcs.c:16:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_pcs.c:16:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_pcs.c:16:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_pcs.c:26:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_pcs.c:26:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_pcs.c:26:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_pcs.c:26:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_pcs.c:27:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_pcs.c:27:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_pcs.c:27:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_pcs.c:27:9: sparse: got void * -- >> drivers/net/ethernet/mucse/rnp/rnp_param.c:275:33: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_param.c:275:33: sparse: void drivers/net/ethernet/mucse/rnp/rnp_param.c:275:33: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_param.c:277:33: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_param.c:277:33: sparse: void drivers/net/ethernet/mucse/rnp/rnp_param.c:277:33: sparse: void * -- >> drivers/net/ethernet/mucse/rnp/rnp_dcb.c:42:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_dcb.c:42:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_dcb.c:42:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_dcb.c:42:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_dcb.c:46:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_dcb.c:46:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_dcb.c:46:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_dcb.c:46:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_dcb.c:65:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_dcb.c:65:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_dcb.c:65:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_dcb.c:65:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_dcb.c:67:15: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_dcb.c:67:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_dcb.c:67:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_dcb.c:67:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_dcb.c:72:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_dcb.c:72:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_dcb.c:72:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_dcb.c:72:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_dcb.c:94:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_dcb.c:94:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_dcb.c:94:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_dcb.c:94:25: sparse: got void * >> drivers/net/ethernet/mucse/rnp/rnp_dcb.c:297:29: sparse: sparse: symbol 'rnp_dcbnl_ops' was not declared. Should it be static? -- >> drivers/net/ethernet/mucse/rnp/rnp_mbx.c:352:17: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_mbx.c:352:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:352:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:352:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:356:21: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_mbx.c:356:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:356:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:356:21: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:403:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:403:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:403:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:403:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:422:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:422:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:422:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:422:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:464:26: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:464:26: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:464:26: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:464:26: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:468:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:468:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:468:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:468:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:482:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:482:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:482:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:482:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:493:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:493:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:493:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:493:21: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:496:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:496:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:496:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:496:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:499:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:499:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:499:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:499:13: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:502:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:502:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:502:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:502:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:505:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:505:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:505:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:505:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:507:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:507:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:507:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:507:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:511:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:511:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:511:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:511:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:522:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:522:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:522:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:522:29: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:525:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:525:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:525:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:525:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:528:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:528:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:528:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:528:21: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:532:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:532:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:532:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:532:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:536:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:536:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:536:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:536:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:539:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:539:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:539:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:539:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:542:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:542:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:542:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:542:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:545:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:545:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:545:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:545:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:547:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:547:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:547:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:547:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:553:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:553:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:553:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:553:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:555:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:555:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:555:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:555:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:558:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:558:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx.c:558:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx.c:558:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx.c:562:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx.c:562:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ -- >> drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:89:33: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:89:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:89:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:89:33: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:90:41: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:90:41: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:90:41: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:90:41: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:106:41: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:106:41: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:106:41: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_debugfs.c:106:41: sparse: got void * -- >> drivers/net/ethernet/mucse/rnp/rnp_mpe.c:72:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:72:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mpe.c:72:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mpe.c:73:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:73:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mpe.c:73:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mpe.c:74:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:74:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mpe.c:74:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mpe.c:96:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:96:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mpe.c:96:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mpe.c:102:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:102:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mpe.c:102:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mpe.c:105:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:105:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mpe.c:105:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mpe.c:112:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:112:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mpe.c:112:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mpe.c:113:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:113:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mpe.c:113:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mpe.c:116:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:116:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mpe.c:116:9: sparse: got void * >> drivers/net/ethernet/mucse/rnp/rnp_mpe.c:175:23: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected char *rpu_base @@ got unsigned char [noderef] [usertype] __iomem *rpu_addr @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:175:23: sparse: expected char *rpu_base drivers/net/ethernet/mucse/rnp/rnp_mpe.c:175:23: sparse: got unsigned char [noderef] [usertype] __iomem *rpu_addr drivers/net/ethernet/mucse/rnp/rnp_mpe.c:201:42: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected char *rpu_base @@ got unsigned char [noderef] [usertype] __iomem *rpu_addr @@ drivers/net/ethernet/mucse/rnp/rnp_mpe.c:201:42: sparse: expected char *rpu_base drivers/net/ethernet/mucse/rnp/rnp_mpe.c:201:42: sparse: got unsigned char [noderef] [usertype] __iomem *rpu_addr -- drivers/net/ethernet/mucse/rnp/rnp_lib.c:439:5: sparse: sparse: symbol 'rnp_acquire_msix_vectors' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnp/rnp_lib.c:531:33: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_lib.c:531:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:531:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:531:33: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:550:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:550:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:550:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:550:33: sparse: got void * >> drivers/net/ethernet/mucse/rnp/rnp_lib.c:596:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_lib.c:596:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_lib.c:596:9: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:600:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_lib.c:600:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_lib.c:600:9: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:984:6: sparse: sparse: symbol 'rnp_print_ring_info' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_lib.c:1049:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_lib.c:1049:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_lib.c:1049:9: sparse: void * >> drivers/net/ethernet/mucse/rnp/rnp_lib.c:1135:61: sparse: sparse: invalid assignment: |= drivers/net/ethernet/mucse/rnp/rnp_lib.c:1135:61: sparse: left side has type restricted __le32 drivers/net/ethernet/mucse/rnp/rnp_lib.c:1135:61: sparse: right side has type int drivers/net/ethernet/mucse/rnp/rnp_lib.c:1256:16: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_lib.c:1256:16: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1256:16: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1256:16: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:1259:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:1259:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1259:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1259:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:1303:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:1303:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1303:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1303:20: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:1304:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:1304:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1304:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1304:20: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:1312:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:1312:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1312:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1312:20: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:1313:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:1313:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1313:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1313:20: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:1327:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:1327:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1327:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1327:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:1329:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:1329:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1329:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1329:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:1346:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:1346:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1346:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1346:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:1348:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:1348:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1348:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1348:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:1350:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:1350:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:1350:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:1350:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:491:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:491:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:491:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:491:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_lib.c:481:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_lib.c:481:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_lib.c:481:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_lib.c:481:17: sparse: got void * -- >> drivers/net/ethernet/mucse/rnp/rnp_ptp.c:122:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_ptp.c:122:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_ptp.c:122:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_ptp.c:122:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_ptp.c:277:5: sparse: sparse: symbol 'rnp_ptp_setup_ptp' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_ptp.c:608:13: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_ptp.c:608:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_ptp.c:608:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_ptp.c:608:13: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_ptp.c:614:27: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_ptp.c:614:27: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_ptp.c:614:27: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_ptp.c:614:27: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_ptp.c:615:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_ptp.c:615:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_ptp.c:615:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_ptp.c:615:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_ptp.c:621:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_ptp.c:621:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_ptp.c:621:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_ptp.c:621:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_ptp.c:623:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_ptp.c:623:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_ptp.c:623:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_ptp.c:623:17: sparse: got void * >> drivers/net/ethernet/mucse/rnp/rnp_ptp.c:676:13: sparse: sparse: restricted __le16 degrades to integer >> drivers/net/ethernet/mucse/rnp/rnp_ptp.c:693:20: sparse: sparse: cast to restricted __be32 drivers/net/ethernet/mucse/rnp/rnp_ptp.c:694:20: sparse: sparse: cast to restricted __be32 -- >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:213:33: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:213:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:213:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:213:33: sparse: got void * >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1176:45: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __be16 [usertype] h_proto @@ got int @@ drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1176:45: sparse: expected restricted __be16 [usertype] h_proto drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1176:45: sparse: got int >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1192:52: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __be16 [usertype] psrc @@ got int @@ drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1192:52: sparse: expected restricted __be16 [usertype] psrc drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1192:52: sparse: got int >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1193:52: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __be16 [usertype] pdst @@ got int @@ drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1193:52: sparse: expected restricted __be16 [usertype] pdst drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1193:52: sparse: got int >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1194:54: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __be32 [usertype] ip4src @@ got unsigned int @@ drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1194:54: sparse: expected restricted __be32 [usertype] ip4src drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1194:54: sparse: got unsigned int >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1195:54: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __be32 [usertype] ip4dst @@ got unsigned int @@ drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1195:54: sparse: expected restricted __be32 [usertype] ip4dst drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1195:54: sparse: got unsigned int >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1440:51: sparse: sparse: restricted __be32 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1445:51: sparse: sparse: restricted __be32 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1473:51: sparse: sparse: restricted __be32 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1478:51: sparse: sparse: restricted __be32 degrades to integer >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1483:51: sparse: sparse: restricted __be16 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1488:51: sparse: sparse: restricted __be16 degrades to integer >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1711:55: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __be16 [usertype] src_port_mask @@ got int @@ drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1711:55: sparse: expected restricted __be16 [usertype] src_port_mask drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1711:55: sparse: got int >> drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1713:55: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __be16 [usertype] dst_port_mask @@ got int @@ drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1713:55: sparse: expected restricted __be16 [usertype] dst_port_mask drivers/net/ethernet/mucse/rnp/rnp_ethtool.c:1713:55: sparse: got int -- >> drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:67:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:67:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:67:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:67:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:72:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:72:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:72:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:72:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:189:17: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:189:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:189:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:189:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:192:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:192:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:192:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:192:21: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:831:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:831:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:831:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:831:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:835:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:835:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:835:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:835:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:837:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:837:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:837:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:837:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1141:5: sparse: sparse: symbol 'rnp_fw_reg_read' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1178:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1178:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1178:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1178:13: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1187:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1187:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1187:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1187:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1201:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1201:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1201:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1201:13: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1212:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1212:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1212:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1212:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_mbx_fw.c:1456:5: sparse: sparse: symbol 'rnp_mbx_lldp_all_ports_enable' was not declared. Should it be static? -- >> drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:823:15: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:823:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:823:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:823:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:827:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:827:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:827:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:827:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:831:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:831:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:831:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:831:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:837:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:837:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:837:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:837:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:841:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:841:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:841:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:841:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:847:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:847:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:847:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:847:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:851:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:851:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:851:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:851:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:855:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:855:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:855:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:855:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:861:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:861:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:861:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:861:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:865:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:865:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:865:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:865:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:871:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:871:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:871:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:871:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:875:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:875:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:875:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:875:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:879:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:879:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:879:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:879:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:883:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:883:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:883:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:883:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:887:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:887:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:887:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:887:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:891:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:891:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:891:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:891:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:895:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:895:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:895:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:895:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:918:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:918:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:918:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:918:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:922:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:922:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:922:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:922:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:926:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:926:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:926:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:926:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:931:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:931:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:931:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:931:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:936:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:936:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:936:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:936:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:941:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:941:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:941:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:941:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:946:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:946:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:946:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:946:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:951:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:951:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:951:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:951:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:956:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:956:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ -- drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1035:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1035:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1035:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1039:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1039:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1039:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1039:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1043:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1043:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1043:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1043:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1048:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1048:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1048:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1048:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1054:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1054:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1054:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1054:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1058:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1058:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1058:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1058:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1062:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1062:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1062:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1062:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1066:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1066:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1066:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1066:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1070:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1070:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1070:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1070:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1074:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1074:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1074:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1074:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1078:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1078:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1078:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1078:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1082:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1082:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1082:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1082:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1086:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1086:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1086:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1086:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1090:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1090:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1090:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1090:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1094:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1094:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1094:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1094:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1098:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1098:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1098:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1098:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1105:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1105:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1105:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1105:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1109:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1109:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1109:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1109:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1113:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1113:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1113:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1113:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1117:15: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1117:15: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1117:15: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1117:15: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1124:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1124:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1124:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1124:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1128:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1128:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1128:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1128:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1132:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1132:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1132:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1132:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1154:31: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1154:31: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1154:31: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1154:31: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1186:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1186:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1186:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1186:21: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1188:33: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1188:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1188:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1188:33: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1192:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1192:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1192:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1192:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1214:5: sparse: sparse: symbol 'rnp_mbx_get_pn_sn' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1312:60: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1312:60: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1312:60: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1312:60: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1531:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1531:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1531:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1531:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1533:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1533:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1533:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1533:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1539:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1539:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1539:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1539:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1540:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1540:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1540:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1540:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1926:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1926:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1926:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1926:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1930:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1930:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1930:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1930:13: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1936:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1936:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1936:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1936:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1938:13: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1938:13: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1938:13: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1938:13: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1943:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1943:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1943:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1943:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1946:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1946:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1946:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sysfs.c:1946:9: sparse: got void * -- drivers/net/ethernet/mucse/rnp/rnp_sriov.c:305:6: sparse: sparse: symbol 'check_ari_mode' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnp/rnp_sriov.c:724:40: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_sriov.c:724:40: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sriov.c:724:40: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sriov.c:724:40: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sriov.c:726:43: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sriov.c:726:43: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sriov.c:726:43: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sriov.c:726:43: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sriov.c:898:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sriov.c:898:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sriov.c:898:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sriov.c:898:21: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sriov.c:1140:5: sparse: sparse: symbol 'rnp_msg_post_status_signle_link' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_sriov.c:1290:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_sriov.c:1290:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sriov.c:1290:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sriov.c:1290:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sriov.c:1292:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_sriov.c:1292:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_sriov.c:1292:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_sriov.c:1292:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_sriov.c: note: in included file (through include/linux/module.h): include/linux/list.h:83:21: sparse: sparse: self-comparison always evaluates to true include/linux/list.h:83:21: sparse: sparse: self-comparison always evaluates to true -- >> drivers/net/ethernet/mucse/rnp/rnp_n10.c:65:17: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_n10.c:65:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:65:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:65:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:67:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:67:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:67:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:67:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:69:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:69:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:69:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:69:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:82:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:82:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:82:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:82:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:93:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:93:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:93:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:93:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:95:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:95:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:95:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:95:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:97:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:97:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:97:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:97:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:99:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:99:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:99:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:99:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:151:20: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_n10.c:151:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:151:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:151:20: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:158:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:158:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:158:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:158:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:159:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:159:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:159:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:159:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:165:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:165:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:165:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:165:20: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:167:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:167:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:167:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:167:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:122:5: sparse: sparse: symbol 'rnp_eth_set_rar_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:195:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:195:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:195:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:195:20: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:198:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:198:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:198:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:198:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:199:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:199:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:199:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:199:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:179:5: sparse: sparse: symbol 'rnp_eth_clear_rar_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:231:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:231:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:231:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:231:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:233:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:233:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:233:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:233:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:214:5: sparse: sparse: symbol 'rnp_eth_set_vmdq_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:254:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:254:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:254:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:254:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:244:5: sparse: sparse: symbol 'rnp_eth_clear_vmdq_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:328:4: sparse: sparse: symbol 'rnp_addr_list_itr' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:420:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:420:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:420:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:420:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:428:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:428:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:428:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:428:29: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:429:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:429:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:429:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:429:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:359:5: sparse: sparse: symbol 'rnp_eth_update_mc_addr_list_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:447:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:447:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:447:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:447:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:442:6: sparse: sparse: symbol 'rnp_eth_clr_mc_addr_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:474:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:474:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:474:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:474:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:478:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:478:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:478:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:478:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:457:6: sparse: sparse: symbol 'rnp_eth_update_rss_key_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:497:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:497:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:497:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:497:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:501:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:501:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:501:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:501:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:488:6: sparse: sparse: symbol 'rnp_eth_update_rss_table_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:533:16: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:533:16: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:533:16: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:533:16: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:548:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:548:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:548:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:548:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:513:5: sparse: sparse: symbol 'rnp_eth_set_vfta_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:558:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:558:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:558:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:558:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:553:6: sparse: sparse: symbol 'rnp_eth_clr_vfta_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:570:21: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:570:21: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:570:21: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:570:21: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:576:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:576:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:576:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:576:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:579:5: sparse: sparse: symbol 'rnp_layer2_pritologic_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:592:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:592:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:592:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:592:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:597:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:597:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:597:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:597:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:600:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:600:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:600:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:600:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:604:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:604:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:604:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:604:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:584:6: sparse: sparse: symbol 'rnp_eth_set_layer2_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:615:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:615:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:615:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:615:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:610:6: sparse: sparse: symbol 'rnp_eth_clr_layer2_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:623:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:623:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:623:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:623:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:618:6: sparse: sparse: symbol 'rnp_eth_clr_all_layer2_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:626:5: sparse: sparse: symbol 'rnp_tuple5_pritologic_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:631:5: sparse: sparse: symbol 'rnp_tuple5_pritologic_tcam_n10' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnp/rnp_n10.c:667:25: sparse: sparse: cast from restricted __be32 >> drivers/net/ethernet/mucse/rnp/rnp_n10.c:667:25: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:667:25: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnp/rnp_n10.c:667:25: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnp/rnp_n10.c:667:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:667:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:667:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:667:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:673:25: sparse: sparse: cast from restricted __be32 drivers/net/ethernet/mucse/rnp/rnp_n10.c:673:25: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:673:25: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnp/rnp_n10.c:673:25: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnp/rnp_n10.c:673:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:673:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:673:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:673:25: sparse: got void * >> drivers/net/ethernet/mucse/rnp/rnp_n10.c:679:34: sparse: sparse: cast from restricted __be16 >> drivers/net/ethernet/mucse/rnp/rnp_n10.c:679:30: sparse: sparse: invalid assignment: |= drivers/net/ethernet/mucse/rnp/rnp_n10.c:679:30: sparse: left side has type unsigned int drivers/net/ethernet/mucse/rnp/rnp_n10.c:679:30: sparse: right side has type restricted __be16 drivers/net/ethernet/mucse/rnp/rnp_n10.c:683:34: sparse: sparse: cast from restricted __be16 >> drivers/net/ethernet/mucse/rnp/rnp_n10.c:683:34: sparse: sparse: restricted __be16 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_n10.c:688:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:688:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:688:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:688:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:712:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:712:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:712:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:712:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:718:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:718:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:718:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:718:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:722:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:722:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:722:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:722:33: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:727:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:727:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:727:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:727:33: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:743:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:743:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:743:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:743:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:745:25: sparse: sparse: cast from restricted __be32 drivers/net/ethernet/mucse/rnp/rnp_n10.c:745:25: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:745:25: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnp/rnp_n10.c:745:25: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnp/rnp_n10.c:745:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:745:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:745:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:745:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:747:25: sparse: sparse: cast from restricted __be32 drivers/net/ethernet/mucse/rnp/rnp_n10.c:747:25: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:747:25: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnp/rnp_n10.c:747:25: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnp/rnp_n10.c:747:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:747:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:747:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:747:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:750:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:750:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:750:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:750:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:751:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:751:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:751:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:751:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:754:25: sparse: sparse: cast from restricted __be32 drivers/net/ethernet/mucse/rnp/rnp_n10.c:754:25: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:754:25: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnp/rnp_n10.c:754:25: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnp/rnp_n10.c:754:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:754:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:754:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:754:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:756:25: sparse: sparse: cast from restricted __be32 drivers/net/ethernet/mucse/rnp/rnp_n10.c:756:25: sparse: sparse: incorrect type in argument 1 (different base types) @@ expected unsigned int [usertype] value @@ got restricted __be32 [usertype] @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:756:25: sparse: expected unsigned int [usertype] value drivers/net/ethernet/mucse/rnp/rnp_n10.c:756:25: sparse: got restricted __be32 [usertype] drivers/net/ethernet/mucse/rnp/rnp_n10.c:756:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:756:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:756:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:756:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:759:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:759:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:759:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:759:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:760:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:760:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:760:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:760:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:763:34: sparse: sparse: cast from restricted __be16 drivers/net/ethernet/mucse/rnp/rnp_n10.c:763:34: sparse: sparse: restricted __be16 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_n10.c:764:39: sparse: sparse: cast from restricted __be16 drivers/net/ethernet/mucse/rnp/rnp_n10.c:764:39: sparse: sparse: restricted __be16 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_n10.c:769:34: sparse: sparse: cast from restricted __be16 drivers/net/ethernet/mucse/rnp/rnp_n10.c:769:30: sparse: sparse: invalid assignment: |= drivers/net/ethernet/mucse/rnp/rnp_n10.c:769:30: sparse: left side has type unsigned int drivers/net/ethernet/mucse/rnp/rnp_n10.c:769:30: sparse: right side has type restricted __be16 drivers/net/ethernet/mucse/rnp/rnp_n10.c:771:34: sparse: sparse: cast from restricted __be16 drivers/net/ethernet/mucse/rnp/rnp_n10.c:770:35: sparse: sparse: invalid assignment: |= drivers/net/ethernet/mucse/rnp/rnp_n10.c:770:35: sparse: left side has type unsigned int drivers/net/ethernet/mucse/rnp/rnp_n10.c:770:35: sparse: right side has type restricted __be16 drivers/net/ethernet/mucse/rnp/rnp_n10.c:776:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:776:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:776:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:776:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:777:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:777:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:777:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:777:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:780:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:780:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:780:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:780:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:781:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:781:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:781:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:781:25: sparse: got void * -- drivers/net/ethernet/mucse/rnp/rnp_n10.c:2109:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2109:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2109:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2109:32: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2117:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2117:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2117:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2117:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2120:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2120:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2120:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2120:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2121:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2121:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2121:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2121:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2122:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2122:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2122:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2122:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2123:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2123:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2123:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2123:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2124:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2124:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2124:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2124:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2125:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2125:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2125:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2125:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2126:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2126:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2126:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2126:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2130:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2130:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2130:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2130:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2132:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2132:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2132:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2132:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2133:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2133:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2133:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2133:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2135:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2135:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2135:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2135:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2137:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2137:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2137:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2137:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2139:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2139:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2139:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2139:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2141:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2141:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2141:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2141:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2143:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2143:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2143:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2143:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2145:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2145:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2145:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2145:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2147:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2147:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2147:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2147:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2149:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2149:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2149:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2149:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2151:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2151:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2151:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2151:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2153:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2153:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2153:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2153:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2155:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2155:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2155:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2155:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2158:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2158:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2158:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2158:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:2160:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:2160:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:2160:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:2160:23: sparse: got void * >> drivers/net/ethernet/mucse/rnp/rnp_n10.c:2196:24: sparse: sparse: symbol 'rnp10_gstrings_net_stats' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:2805:5: sparse: sparse: symbol 'rnp10_get_link_ksettings' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:3003:5: sparse: sparse: symbol 'rnp10_set_link_ksettings' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:3246:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:3246:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:3246:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:3246:32: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:3249:5: sparse: sparse: symbol 'rnp_nway_reset' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:3269:6: sparse: sparse: symbol 'rnp_device_supports_autoneg_fc' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:3587:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:3587:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:3587:20: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:3587:20: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:3674:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:3674:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:3674:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:3674:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:3679:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:3679:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:3679:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:3679:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:3720:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:3720:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:3720:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:3720:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:3826:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:3826:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:3826:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:3826:29: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:3827:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:3827:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:3827:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:3827:29: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:3889:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:3889:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:3889:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:3889:29: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:3890:29: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:3890:29: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:3890:29: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:3890:29: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:3950:6: sparse: sparse: symbol 'rnp_set_ethtool_hw_ops_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:3960:5: sparse: sparse: symbol 'rnp_get_thermal_sensor_data_hw_ops_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:3976:5: sparse: sparse: symbol 'rnp_init_thermal_sensor_thresh_hw_ops_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:3990:5: sparse: sparse: symbol 'rnp_phy_read_reg_hw_ops_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:4002:5: sparse: sparse: symbol 'rnp_phy_write_reg_hw_ops_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:4012:6: sparse: sparse: symbol 'rnp_set_vf_vlan_mode_hw_ops_n10' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_n10.c:4086:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4086:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4086:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4086:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4086:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4086:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4086:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4086:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4090:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4090:33: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4090:33: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4090:33: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4099:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4099:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4099:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4099:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4100:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4100:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4100:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4100:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4103:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4103:33: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4103:33: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4103:33: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4103:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4103:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4103:33: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4103:33: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4107:41: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4107:41: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4107:41: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4107:41: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4114:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4114:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4114:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4114:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4118:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4118:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4118:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4118:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4118:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4118:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4118:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4118:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4121:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4121:33: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4121:33: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4121:33: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4128:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4128:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_n10.c:4128:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_n10.c:4128:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_n10.c:4136:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_n10.c:4136:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ -- >> drivers/net/ethernet/mucse/rnp/rnp_main.c:166:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:166:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:166:9: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:175:6: sparse: sparse: symbol 'rnp_unmap_and_free_tx_resource' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnp/rnp_main.c:202:20: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_main.c:202:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:203:20: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:203:20: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ >> drivers/net/ethernet/mucse/rnp/rnp_main.c:602:29: sparse: sparse: restricted __le16 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_main.c:613:64: sparse: sparse: restricted __le16 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_main.c:702:9: sparse: sparse: cast removes address space '__iomem' of expression >> drivers/net/ethernet/mucse/rnp/rnp_main.c:702:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:670:5: sparse: sparse: symbol 'rnp_rx_ring_reinit' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:2021:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2021:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2012:6: sparse: sparse: symbol 'rnp_write_eitr_rx' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:2225:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2225:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2236:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2236:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2272:49: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2272:49: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2293:33: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2293:33: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2311:41: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2311:41: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2392:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:2392:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:2392:9: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2426:17: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:2426:17: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:2426:17: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2469:17: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:2469:17: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:2469:17: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2550:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2550:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2550:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2550:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2551:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2551:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2551:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2551:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2591:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2591:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2591:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2591:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2593:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2593:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2593:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2593:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2595:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2595:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2595:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2595:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2599:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2599:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2599:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2599:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2602:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2602:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2602:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2602:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2605:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2605:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2605:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2605:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2612:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2612:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2612:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2612:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2618:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2618:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2618:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2618:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2620:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2620:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2620:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2620:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2659:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2659:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2659:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2659:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2661:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2661:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2661:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2661:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2671:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2671:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2671:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2671:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2685:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2685:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2685:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2685:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2687:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2687:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2687:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2687:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2689:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2689:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2689:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2689:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2693:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2693:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2693:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2693:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2697:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2697:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2697:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2697:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2700:17: sparse: sparse: cast removes address space '__iomem' of expression -- drivers/net/ethernet/mucse/rnp/rnp_main.c:2728:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2728:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2730:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2730:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2730:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2730:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2752:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2752:17: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2752:17: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2752:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2752:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2752:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2752:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2752:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2833:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2833:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2833:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2833:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2840:23: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2840:23: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2840:23: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2840:23: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2842:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2842:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2842:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2842:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3146:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:3146:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:3146:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:3146:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3147:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:3147:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:3147:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:3147:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3148:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:3148:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:3148:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:3148:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3176:6: sparse: sparse: symbol 'rnp_vlan_stags_flag' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:3284:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:3284:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:3284:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:3284:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3601:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:3601:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:3601:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:3601:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3580:5: sparse: sparse: symbol 'rnp_xmit_nop_frame_ring' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:3662:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:3662:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:3662:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:3662:32: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3712:42: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:3712:42: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:3712:42: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:3712:42: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3722:32: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:3722:32: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:3722:32: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:3722:32: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3728:41: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:3728:41: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:3728:41: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:3728:41: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3738:48: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:3738:48: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:3738:48: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:3738:48: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3920:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:3920:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:3920:9: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:3923:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:3923:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:3923:9: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:4017:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:4017:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:4017:9: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:4020:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:4020:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:4020:9: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:4052:24: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:4052:24: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:4052:24: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:4052:24: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:4237:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:4237:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:4237:9: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:4305:9: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:4305:9: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:4305:9: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:4358:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:4358:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:4358:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:4358:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:4842:6: sparse: sparse: symbol 'rnp_service_timer' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:4950:6: sparse: sparse: symbol 'rnp_service_task' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:5384:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:5384:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:5384:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:5384:17: sparse: got void * >> drivers/net/ethernet/mucse/rnp/rnp_main.c:5515:42: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __be16 [usertype] priv_tags @@ got int @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:5515:42: sparse: expected restricted __be16 [usertype] priv_tags drivers/net/ethernet/mucse/rnp/rnp_main.c:5515:42: sparse: got int drivers/net/ethernet/mucse/rnp/rnp_main.c:5972:5: sparse: sparse: symbol 'rnp_delete_knode' was not declared. Should it be static? >> drivers/net/ethernet/mucse/rnp/rnp_main.c:6036:21: sparse: sparse: incorrect type in assignment (different base types) @@ expected restricted __be32 [usertype] off @@ got int off @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:6036:21: sparse: expected restricted __be32 [usertype] off drivers/net/ethernet/mucse/rnp/rnp_main.c:6036:21: sparse: got int off >> drivers/net/ethernet/mucse/rnp/rnp_main.c:6044:29: sparse: sparse: restricted __be32 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_main.c:6061:5: sparse: sparse: symbol 'rnp_config_knode' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:6120:5: sparse: sparse: symbol 'rnp_setup_tc_cls_u32' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:6197:6: sparse: sparse: symbol 'rnp_do_reset' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:6348:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:6348:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:6348:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:6348:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:6348:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:6348:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:6348:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:6348:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:6352:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:6352:25: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:6352:25: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:6352:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:6352:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:6352:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:6352:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:6352:25: sparse: got void * >> drivers/net/ethernet/mucse/rnp/rnp_main.c:6418:29: sparse: sparse: symbol 'rnp10_netdev_ops' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:6452:6: sparse: sparse: symbol 'rnp_assign_netdev_ops' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:6609:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:6609:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:6609:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:6609:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:6628:5: sparse: sparse: symbol 'rnp_can_rpu_start' was not declared. Should it be static? drivers/net/ethernet/mucse/rnp/rnp_main.c:6692:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:6692:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:6692:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:6692:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:6713:31: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:6713:31: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:6713:31: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:6713:31: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:6737:31: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:6737:31: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:6737:31: sparse: expected void const volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:6737:31: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:7010:17: sparse: sparse: incompatible types in conditional expression (different types): drivers/net/ethernet/mucse/rnp/rnp_main.c:7010:17: sparse: void drivers/net/ethernet/mucse/rnp/rnp_main.c:7010:17: sparse: void * drivers/net/ethernet/mucse/rnp/rnp_main.c:412:31: sparse: sparse: restricted __le16 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_main.c:435:33: sparse: sparse: restricted __le16 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_main.c: note: in included file (through drivers/net/ethernet/mucse/rnp/rnp_tc_u32_parse.h): >> drivers/net/ethernet/mucse/rnp/rnp.h:1143:13: sparse: sparse: cast from restricted __le16 >> drivers/net/ethernet/mucse/rnp/rnp.h:1143:13: sparse: sparse: restricted __le16 degrades to integer drivers/net/ethernet/mucse/rnp/rnp_main.c:470:9: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:470:9: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:470:9: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:470:9: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2040:17: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2051:25: sparse: got void * drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: sparse: cast removes address space '__iomem' of expression drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: expected void volatile [noderef] __iomem *addr drivers/net/ethernet/mucse/rnp/rnp_main.c:2055:17: sparse: got void * vim +/__iomem +15 drivers/net/ethernet/mucse/rnp/rnp_pcs.c 7 8 static u32 rnp_read_pcs(struct rnp_hw *hw, int num, u32 addr) 9 { 10 u32 reg_hi, reg_lo; 11 u32 value; 12 13 reg_hi = addr >> 8; 14 reg_lo = (addr & 0xff) << 2; > 15 wr32(hw, RNP_PCS_BASE(num) + (0xff << 2), reg_hi); > 16 value = rd32(hw, RNP_PCS_BASE(num) + reg_lo); 17 return value; 18 } 19 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3269/10596] drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3942:23: sparse: sparse: incorrect type in assignment (different address spaces)
by kernel test robot 08 Jul '24

08 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 3b421b6002e287e38790cbdad4a3e08baf7e1bc4 commit: 86b90dc581ce2fcc6b724b4ffaea6103122a4b68 [3269/10596] iommu/arm-smmu-v3: Add support for ECMDQ register mode config: arm64-randconfig-r131-20240707 (https://download.01.org/0day-ci/archive/20240708/202407080437.gW9dgdMn-lkp@…) compiler: clang version 19.0.0git (https://github.com/llvm/llvm-project a0c6b8aef853eedaa0980f07c0a502a5a8a9740e) reproduce: (https://download.01.org/0day-ci/archive/20240708/202407080437.gW9dgdMn-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407080437.gW9dgdMn-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) >> drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3942:23: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected struct arm_smmu_ecmdq *ecmdq @@ got struct arm_smmu_ecmdq [noderef] __percpu * @@ drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3942:23: sparse: expected struct arm_smmu_ecmdq *ecmdq drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3942:23: sparse: got struct arm_smmu_ecmdq [noderef] __percpu * drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3947:58: sparse: sparse: incorrect type in initializer (different address spaces) @@ expected void const [noderef] __percpu *__vpp_verify @@ got struct arm_smmu_ecmdq * @@ drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3947:58: sparse: expected void const [noderef] __percpu *__vpp_verify drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3947:58: sparse: got struct arm_smmu_ecmdq * >> drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3973:45: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const *addr @@ got void [noderef] __iomem *base @@ drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3973:45: sparse: expected void const *addr drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c:3973:45: sparse: got void [noderef] __iomem *base drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c: note: in included file (through arch/arm64/include/asm/atomic.h, include/linux/atomic.h, include/asm-generic/bitops/atomic.h, ...): arch/arm64/include/asm/cmpxchg.h:168:1: sparse: sparse: cast truncates bits from constant value (ffffffff80000000 becomes 0) arch/arm64/include/asm/cmpxchg.h:168:1: sparse: sparse: cast truncates bits from constant value (ffffffff80000000 becomes 0) vim +3942 drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c 3934 3935 #ifdef CONFIG_ARM_SMMU_V3_ECMDQ 3936 static int arm_smmu_ecmdq_layout(struct arm_smmu_device *smmu) 3937 { 3938 int cpu; 3939 struct arm_smmu_ecmdq *ecmdq; 3940 3941 if (num_possible_cpus() <= smmu->nr_ecmdq) { > 3942 ecmdq = devm_alloc_percpu(smmu->dev, *ecmdq); 3943 if (!ecmdq) 3944 return -ENOMEM; 3945 3946 for_each_possible_cpu(cpu) 3947 *per_cpu_ptr(smmu->ecmdq, cpu) = per_cpu_ptr(ecmdq, cpu); 3948 3949 /* A core requires at most one ECMDQ */ 3950 smmu->nr_ecmdq = num_possible_cpus(); 3951 3952 return 0; 3953 } 3954 3955 return -ENOSPC; 3956 } 3957 3958 static int arm_smmu_ecmdq_probe(struct arm_smmu_device *smmu) 3959 { 3960 int ret, cpu; 3961 u32 i, nump, numq, gap; 3962 u32 reg, shift_increment; 3963 u64 addr, smmu_dma_base; 3964 void __iomem *cp_regs, *cp_base; 3965 3966 /* IDR6 */ 3967 reg = readl_relaxed(smmu->base + ARM_SMMU_IDR6); 3968 nump = 1 << FIELD_GET(IDR6_LOG2NUMP, reg); 3969 numq = 1 << FIELD_GET(IDR6_LOG2NUMQ, reg); 3970 smmu->nr_ecmdq = nump * numq; 3971 gap = ECMDQ_CP_RRESET_SIZE >> FIELD_GET(IDR6_LOG2NUMQ, reg); 3972 > 3973 smmu_dma_base = (vmalloc_to_pfn(smmu->base) << PAGE_SHIFT); 3974 cp_regs = ioremap(smmu_dma_base + ARM_SMMU_ECMDQ_CP_BASE, PAGE_SIZE); 3975 if (!cp_regs) 3976 return -ENOMEM; 3977 3978 for (i = 0; i < nump; i++) { 3979 u64 val, pre_addr; 3980 3981 val = readq_relaxed(cp_regs + 32 * i); 3982 if (!(val & ECMDQ_CP_PRESET)) { 3983 iounmap(cp_regs); 3984 dev_err(smmu->dev, "ecmdq control page %u is memory mode\n", i); 3985 return -EFAULT; 3986 } 3987 3988 if (i && ((val & ECMDQ_CP_ADDR) != (pre_addr + ECMDQ_CP_RRESET_SIZE))) { 3989 iounmap(cp_regs); 3990 dev_err(smmu->dev, "ecmdq_cp memory region is not contiguous\n"); 3991 return -EFAULT; 3992 } 3993 3994 pre_addr = val & ECMDQ_CP_ADDR; 3995 } 3996 3997 addr = readl_relaxed(cp_regs) & ECMDQ_CP_ADDR; 3998 iounmap(cp_regs); 3999 4000 cp_base = devm_ioremap(smmu->dev, smmu_dma_base + addr, ECMDQ_CP_RRESET_SIZE * nump); 4001 if (!cp_base) 4002 return -ENOMEM; 4003 4004 smmu->ecmdq = devm_alloc_percpu(smmu->dev, struct arm_smmu_ecmdq *); 4005 if (!smmu->ecmdq) 4006 return -ENOMEM; 4007 4008 ret = arm_smmu_ecmdq_layout(smmu); 4009 if (ret) 4010 return ret; 4011 4012 shift_increment = order_base_2(num_possible_cpus() / smmu->nr_ecmdq); 4013 4014 addr = 0; 4015 for_each_possible_cpu(cpu) { 4016 struct arm_smmu_ecmdq *ecmdq; 4017 struct arm_smmu_queue *q; 4018 4019 ecmdq = *per_cpu_ptr(smmu->ecmdq, cpu); 4020 ecmdq->base = cp_base + addr; 4021 4022 q = &ecmdq->cmdq.q; 4023 4024 q->llq.max_n_shift = ECMDQ_MAX_SZ_SHIFT + shift_increment; 4025 ret = arm_smmu_init_one_queue(smmu, q, ecmdq->base, ARM_SMMU_ECMDQ_PROD, 4026 ARM_SMMU_ECMDQ_CONS, CMDQ_ENT_DWORDS, "ecmdq"); 4027 if (ret) 4028 return ret; 4029 4030 q->ecmdq_prod = ECMDQ_PROD_EN; 4031 rwlock_init(&q->ecmdq_lock); 4032 4033 ret = arm_smmu_ecmdq_init(&ecmdq->cmdq); 4034 if (ret) { 4035 dev_err(smmu->dev, "ecmdq[%d] init failed\n", i); 4036 return ret; 4037 } 4038 4039 addr += gap; 4040 } 4041 4042 return 0; 4043 } 4044 #endif 4045 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3778/10596] drivers/video/fbdev/ls2k500sfb.c:322:49: sparse: sparse: incorrect type in argument 2 (different address spaces)
by kernel test robot 08 Jul '24

08 Jul '24

Hi Xianglai, First bad commit (maybe != root cause): tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 3b421b6002e287e38790cbdad4a3e08baf7e1bc4 commit: 351aa968603500987e891b20cc97a677602ae7c2 [3778/10596] loongarch/kernel: Fix loongarch compilation error config: loongarch-randconfig-r132-20240707 (https://download.01.org/0day-ci/archive/20240708/202407080311.6JOR7V5E-lkp@…) compiler: loongarch64-linux-gcc (GCC) 13.2.0 reproduce: (https://download.01.org/0day-ci/archive/20240708/202407080311.6JOR7V5E-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407080311.6JOR7V5E-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) drivers/video/fbdev/ls2k500sfb.c:144:27: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected void *static p @@ got void [noderef] __iomem * @@ drivers/video/fbdev/ls2k500sfb.c:144:27: sparse: expected void *static p drivers/video/fbdev/ls2k500sfb.c:144:27: sparse: got void [noderef] __iomem * drivers/video/fbdev/ls2k500sfb.c:146:30: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void *static p @@ drivers/video/fbdev/ls2k500sfb.c:146:30: sparse: expected void const volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:146:30: sparse: got void *static p drivers/video/fbdev/ls2k500sfb.c:201:36: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void *static p @@ drivers/video/fbdev/ls2k500sfb.c:201:36: sparse: expected void volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:201:36: sparse: got void *static p drivers/video/fbdev/ls2k500sfb.c:203:37: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/video/fbdev/ls2k500sfb.c:203:37: sparse: expected void const volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:203:37: sparse: got void * drivers/video/fbdev/ls2k500sfb.c:256:13: sparse: sparse: symbol 'ls2k500sfb_interrupt' was not declared. Should it be static? drivers/video/fbdev/ls2k500sfb.c:322:22: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/video/fbdev/ls2k500sfb.c:322:22: sparse: expected void const volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:322:22: sparse: got void * >> drivers/video/fbdev/ls2k500sfb.c:322:49: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/video/fbdev/ls2k500sfb.c:322:49: sparse: expected void volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:322:49: sparse: got void * drivers/video/fbdev/ls2k500sfb.c:323:22: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/video/fbdev/ls2k500sfb.c:323:22: sparse: expected void const volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:323:22: sparse: got void * drivers/video/fbdev/ls2k500sfb.c:323:53: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/video/fbdev/ls2k500sfb.c:323:53: sparse: expected void volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:323:53: sparse: got void * drivers/video/fbdev/ls2k500sfb.c:324:22: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/video/fbdev/ls2k500sfb.c:324:22: sparse: expected void const volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:324:22: sparse: got void * drivers/video/fbdev/ls2k500sfb.c:324:53: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/video/fbdev/ls2k500sfb.c:324:53: sparse: expected void volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:324:53: sparse: got void * drivers/video/fbdev/ls2k500sfb.c:325:22: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got void * @@ drivers/video/fbdev/ls2k500sfb.c:325:22: sparse: expected void const volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:325:22: sparse: got void * drivers/video/fbdev/ls2k500sfb.c:325:51: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got void * @@ drivers/video/fbdev/ls2k500sfb.c:325:51: sparse: expected void volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:325:51: sparse: got void * drivers/video/fbdev/ls2k500sfb.c:458:28: sparse: sparse: incorrect type in argument 1 (different address spaces) @@ expected void const volatile [noderef] __iomem *addr @@ got char *preg @@ drivers/video/fbdev/ls2k500sfb.c:458:28: sparse: expected void const volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:458:28: sparse: got char *preg drivers/video/fbdev/ls2k500sfb.c:459:32: sparse: sparse: incorrect type in argument 2 (different address spaces) @@ expected void volatile [noderef] __iomem *addr @@ got char *preg @@ drivers/video/fbdev/ls2k500sfb.c:459:32: sparse: expected void volatile [noderef] __iomem *addr drivers/video/fbdev/ls2k500sfb.c:459:32: sparse: got char *preg drivers/video/fbdev/ls2k500sfb.c:571:19: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected char *penv @@ got void [noderef] __iomem * @@ drivers/video/fbdev/ls2k500sfb.c:571:19: sparse: expected char *penv drivers/video/fbdev/ls2k500sfb.c:571:19: sparse: got void [noderef] __iomem * drivers/video/fbdev/ls2k500sfb.c:572:19: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected char *preg @@ got void [noderef] __iomem * @@ drivers/video/fbdev/ls2k500sfb.c:572:19: sparse: expected char *preg drivers/video/fbdev/ls2k500sfb.c:572:19: sparse: got void [noderef] __iomem * drivers/video/fbdev/ls2k500sfb.c:674:14: sparse: sparse: incorrect type in assignment (different address spaces) @@ expected char *penv @@ got void [noderef] __iomem * @@ drivers/video/fbdev/ls2k500sfb.c:674:14: sparse: expected char *penv drivers/video/fbdev/ls2k500sfb.c:674:14: sparse: got void [noderef] __iomem * vim +322 drivers/video/fbdev/ls2k500sfb.c 8248d42b7c5f433 Chong Qiao 2023-12-11 113 4fbeaa84ef36adc Chong Qiao 2023-12-11 114 static unsigned long event_jiffies; 8248d42b7c5f433 Chong Qiao 2023-12-11 115 static void ls2k500sfb_events_fn(struct work_struct *work) 8248d42b7c5f433 Chong Qiao 2023-12-11 116 { 8248d42b7c5f433 Chong Qiao 2023-12-11 117 struct ls2k500sfb_struct *priv = container_of(work, struct ls2k500sfb_struct, work); 8248d42b7c5f433 Chong Qiao 2023-12-11 118 struct pci_dev *pdev = priv->dev; 8248d42b7c5f433 Chong Qiao 2023-12-11 119 struct pci_dev *ppdev = pdev->bus->self; 8248d42b7c5f433 Chong Qiao 2023-12-11 120 uint32_t i, d, timeout, retry = 0; 8248d42b7c5f433 Chong Qiao 2023-12-11 121 static const uint32_t index[] = { 8248d42b7c5f433 Chong Qiao 2023-12-11 122 0x10, 0x14, 0x18, 0x1c, 0x20, 0x24, 0x30, 0x3c, 0x54, 0x58, 0x78, 0x7c, 0x80, 4 8248d42b7c5f433 Chong Qiao 2023-12-11 123 }; 8248d42b7c5f433 Chong Qiao 2023-12-11 124 8248d42b7c5f433 Chong Qiao 2023-12-11 125 static uint32_t data[sizeof(index) / 4]; 8248d42b7c5f433 Chong Qiao 2023-12-11 126 static const uint32_t cindex[] = { 0x10, 0x3c, 4 }; 8248d42b7c5f433 Chong Qiao 2023-12-11 127 8248d42b7c5f433 Chong Qiao 2023-12-11 128 static uint32_t cdata[sizeof(cindex) / 4]; 8248d42b7c5f433 Chong Qiao 2023-12-11 129 static uint32_t d80c, d71c, ctrl; 8248d42b7c5f433 Chong Qiao 2023-12-11 130 static void *p; 8248d42b7c5f433 Chong Qiao 2023-12-11 131 8248d42b7c5f433 Chong Qiao 2023-12-11 132 if (!priv->running) { 8248d42b7c5f433 Chong Qiao 2023-12-11 133 for (i = 0; i < ARRAY_SIZE(index); i++) 8248d42b7c5f433 Chong Qiao 2023-12-11 134 pci_read_config_dword(ppdev, index[i], &data[i]); 8248d42b7c5f433 Chong Qiao 2023-12-11 135 for (i = 0; i < ARRAY_SIZE(cindex); i++) 8248d42b7c5f433 Chong Qiao 2023-12-11 136 pci_read_config_dword(pdev, cindex[i], &cdata[i]); 8248d42b7c5f433 Chong Qiao 2023-12-11 137 if (ppdev->vendor == 0x14) { 8248d42b7c5f433 Chong Qiao 2023-12-11 138 pci_read_config_dword(ppdev, 0x80c, &d80c); 8248d42b7c5f433 Chong Qiao 2023-12-11 139 d80c = (d80c & ~(3 << 17)) | (1 << 17); 8248d42b7c5f433 Chong Qiao 2023-12-11 140 8248d42b7c5f433 Chong Qiao 2023-12-11 141 pci_read_config_dword(ppdev, 0x71c, &d71c); 8248d42b7c5f433 Chong Qiao 2023-12-11 142 d71c |= 1 << 26; 8248d42b7c5f433 Chong Qiao 2023-12-11 143 8248d42b7c5f433 Chong Qiao 2023-12-11 144 p = pci_iomap(ppdev, 0, 0x100); 8248d42b7c5f433 Chong Qiao 2023-12-11 145 } 8248d42b7c5f433 Chong Qiao 2023-12-11 146 ctrl = readl(p); 8248d42b7c5f433 Chong Qiao 2023-12-11 147 return; 8248d42b7c5f433 Chong Qiao 2023-12-11 148 } 8248d42b7c5f433 Chong Qiao 2023-12-11 149 local_bh_disable(); 8248d42b7c5f433 Chong Qiao 2023-12-11 150 pciebreak_smp_send_stop(100); 8248d42b7c5f433 Chong Qiao 2023-12-11 151 wmb(); /* flush all write before we disable pcie window */ 8248d42b7c5f433 Chong Qiao 2023-12-11 152 pci_write_config_dword(ppdev, 0x18, 0); 8248d42b7c5f433 Chong Qiao 2023-12-11 153 pci_write_config_dword(ppdev, 0x1c, 0); 8248d42b7c5f433 Chong Qiao 2023-12-11 154 pci_write_config_dword(ppdev, 0x20, 0); 4fbeaa84ef36adc Chong Qiao 2023-12-11 155 event_jiffies = jiffies; 8248d42b7c5f433 Chong Qiao 2023-12-11 156 atomic_set(&waiting_for_pciebreak_ipi, 0); 8248d42b7c5f433 Chong Qiao 2023-12-11 157 wmb(); /* flush all write after change pcie window */ 8248d42b7c5f433 Chong Qiao 2023-12-11 158 local_bh_enable(); 8248d42b7c5f433 Chong Qiao 2023-12-11 159 if (ppdev->vendor == 0x14) { 8248d42b7c5f433 Chong Qiao 2023-12-11 160 timeout = 10000; 8248d42b7c5f433 Chong Qiao 2023-12-11 161 while (timeout) { 8248d42b7c5f433 Chong Qiao 2023-12-11 162 pci_read_config_dword(ppdev, 0x10, &d); 8248d42b7c5f433 Chong Qiao 2023-12-11 163 d &= ~0xf; 8248d42b7c5f433 Chong Qiao 2023-12-11 164 if (!d) 8248d42b7c5f433 Chong Qiao 2023-12-11 165 break; 8248d42b7c5f433 Chong Qiao 2023-12-11 166 mdelay(1); 8248d42b7c5f433 Chong Qiao 2023-12-11 167 timeout--; 8248d42b7c5f433 Chong Qiao 2023-12-11 168 }; 8248d42b7c5f433 Chong Qiao 2023-12-11 169 if (!timeout) 8248d42b7c5f433 Chong Qiao 2023-12-11 170 pr_info("bar not clear 0\n"); 8248d42b7c5f433 Chong Qiao 2023-12-11 171 8248d42b7c5f433 Chong Qiao 2023-12-11 172 pci_read_config_dword(ppdev, 0x0, &d); 8248d42b7c5f433 Chong Qiao 2023-12-11 173 pr_info("pcie port deviceid=0x%x recover begin\n", d); 8248d42b7c5f433 Chong Qiao 2023-12-11 174 retrain: 8248d42b7c5f433 Chong Qiao 2023-12-11 175 while (1) { 8248d42b7c5f433 Chong Qiao 2023-12-11 176 pci_write_config_dword(ppdev, index[0], data[0]); 8248d42b7c5f433 Chong Qiao 2023-12-11 177 pci_read_config_dword(ppdev, index[0], &d); 8248d42b7c5f433 Chong Qiao 2023-12-11 178 d &= ~0xf; 8248d42b7c5f433 Chong Qiao 2023-12-11 179 if (d) 8248d42b7c5f433 Chong Qiao 2023-12-11 180 break; 8248d42b7c5f433 Chong Qiao 2023-12-11 181 mdelay(1); 8248d42b7c5f433 Chong Qiao 2023-12-11 182 } 8248d42b7c5f433 Chong Qiao 2023-12-11 183 8248d42b7c5f433 Chong Qiao 2023-12-11 184 while (1) { 8248d42b7c5f433 Chong Qiao 2023-12-11 185 for (i = 0; i < ARRAY_SIZE(index); i++) { 8248d42b7c5f433 Chong Qiao 2023-12-11 186 if (index[i] != 0x18 && index[i] != 0x1c && index[i] != 0x20) 8248d42b7c5f433 Chong Qiao 2023-12-11 187 pci_write_config_dword(ppdev, index[i], data[i]); 8248d42b7c5f433 Chong Qiao 2023-12-11 188 } 8248d42b7c5f433 Chong Qiao 2023-12-11 189 pci_write_config_dword(ppdev, 0x80c, d80c); 8248d42b7c5f433 Chong Qiao 2023-12-11 190 pci_write_config_dword(ppdev, 0x71c, d71c); 8248d42b7c5f433 Chong Qiao 2023-12-11 191 8248d42b7c5f433 Chong Qiao 2023-12-11 192 pci_read_config_dword(ppdev, 0x10, &d); 8248d42b7c5f433 Chong Qiao 2023-12-11 193 d &= ~0xf; 8248d42b7c5f433 Chong Qiao 2023-12-11 194 if (d) 8248d42b7c5f433 Chong Qiao 2023-12-11 195 break; 8248d42b7c5f433 Chong Qiao 2023-12-11 196 mdelay(1); 8248d42b7c5f433 Chong Qiao 2023-12-11 197 } 8248d42b7c5f433 Chong Qiao 2023-12-11 198 8248d42b7c5f433 Chong Qiao 2023-12-11 199 timeout = 10000; 8248d42b7c5f433 Chong Qiao 2023-12-11 200 8248d42b7c5f433 Chong Qiao 2023-12-11 @201 writel(ctrl | 0x8, p); 8248d42b7c5f433 Chong Qiao 2023-12-11 202 while (1) { 8248d42b7c5f433 Chong Qiao 2023-12-11 203 d = readl(p + 0xc); 8248d42b7c5f433 Chong Qiao 2023-12-11 204 if ((d & 0x11) == 0x11) { 8248d42b7c5f433 Chong Qiao 2023-12-11 205 break; 8248d42b7c5f433 Chong Qiao 2023-12-11 206 } else if (!timeout) { 8248d42b7c5f433 Chong Qiao 2023-12-11 207 pr_info("pcie train failed status=0x%x\n", d); 8248d42b7c5f433 Chong Qiao 2023-12-11 208 goto out; 8248d42b7c5f433 Chong Qiao 2023-12-11 209 } 8248d42b7c5f433 Chong Qiao 2023-12-11 210 mdelay(1); 8248d42b7c5f433 Chong Qiao 2023-12-11 211 timeout--; 8248d42b7c5f433 Chong Qiao 2023-12-11 212 } 8248d42b7c5f433 Chong Qiao 2023-12-11 213 8248d42b7c5f433 Chong Qiao 2023-12-11 214 8248d42b7c5f433 Chong Qiao 2023-12-11 215 pr_info("pcie recovered done\n"); 8248d42b7c5f433 Chong Qiao 2023-12-11 216 8248d42b7c5f433 Chong Qiao 2023-12-11 217 if (!retry) { 8248d42b7c5f433 Chong Qiao 2023-12-11 218 /*wait u-boot ddr config */ 8248d42b7c5f433 Chong Qiao 2023-12-11 219 set_current_state(TASK_UNINTERRUPTIBLE); 8248d42b7c5f433 Chong Qiao 2023-12-11 220 schedule_timeout(HZ*resetbootwait); 8248d42b7c5f433 Chong Qiao 2023-12-11 221 set_current_state(TASK_RUNNING); 8248d42b7c5f433 Chong Qiao 2023-12-11 222 pci_read_config_dword(ppdev, 0x10, &d); 8248d42b7c5f433 Chong Qiao 2023-12-11 223 d &= ~0xf; 8248d42b7c5f433 Chong Qiao 2023-12-11 224 if (!d) { 8248d42b7c5f433 Chong Qiao 2023-12-11 225 retry = 1; 8248d42b7c5f433 Chong Qiao 2023-12-11 226 goto retrain; 8248d42b7c5f433 Chong Qiao 2023-12-11 227 } 8248d42b7c5f433 Chong Qiao 2023-12-11 228 } 8248d42b7c5f433 Chong Qiao 2023-12-11 229 } else { 8248d42b7c5f433 Chong Qiao 2023-12-11 230 set_current_state(TASK_UNINTERRUPTIBLE); 8248d42b7c5f433 Chong Qiao 2023-12-11 231 schedule_timeout(HZ*resetbootwait); 8248d42b7c5f433 Chong Qiao 2023-12-11 232 set_current_state(TASK_RUNNING); 8248d42b7c5f433 Chong Qiao 2023-12-11 233 } 8248d42b7c5f433 Chong Qiao 2023-12-11 234 local_bh_disable(); 8248d42b7c5f433 Chong Qiao 2023-12-11 235 pciebreak_smp_send_stop(10000); 8248d42b7c5f433 Chong Qiao 2023-12-11 236 wmb(); /* flush all write before we update pcie window */ 8248d42b7c5f433 Chong Qiao 2023-12-11 237 for (i = 0; i < ARRAY_SIZE(index); i++) 8248d42b7c5f433 Chong Qiao 2023-12-11 238 pci_write_config_dword(ppdev, index[i], data[i]); 8248d42b7c5f433 Chong Qiao 2023-12-11 239 8248d42b7c5f433 Chong Qiao 2023-12-11 240 for (i = 0; i < ARRAY_SIZE(cindex); i++) 8248d42b7c5f433 Chong Qiao 2023-12-11 241 pci_write_config_dword(pdev, cindex[i], cdata[i]); 8248d42b7c5f433 Chong Qiao 2023-12-11 242 atomic_set(&waiting_for_pciebreak_ipi, 0); 8248d42b7c5f433 Chong Qiao 2023-12-11 243 wmb(); /* flush all write after we update pcie window */ 8248d42b7c5f433 Chong Qiao 2023-12-11 244 local_bh_enable(); 8248d42b7c5f433 Chong Qiao 2023-12-11 245 8248d42b7c5f433 Chong Qiao 2023-12-11 246 8248d42b7c5f433 Chong Qiao 2023-12-11 247 pr_info("redraw console\n"); 8248d42b7c5f433 Chong Qiao 2023-12-11 248 8248d42b7c5f433 Chong Qiao 2023-12-11 249 saved_console = fg_console; 8248d42b7c5f433 Chong Qiao 2023-12-11 250 switch_console(fg_console > 0?fg_console - 1 : fg_console + 1); 8248d42b7c5f433 Chong Qiao 2023-12-11 251 queue_delayed_work(priv->wq, &priv->redraw_work, HZ); 8248d42b7c5f433 Chong Qiao 2023-12-11 252 out: 8248d42b7c5f433 Chong Qiao 2023-12-11 253 priv->running = 0; 8248d42b7c5f433 Chong Qiao 2023-12-11 254 } 8248d42b7c5f433 Chong Qiao 2023-12-11 255 8248d42b7c5f433 Chong Qiao 2023-12-11 256 irqreturn_t ls2k500sfb_interrupt(int irq, void *arg) 8248d42b7c5f433 Chong Qiao 2023-12-11 257 { 8248d42b7c5f433 Chong Qiao 2023-12-11 258 struct ls2k500sfb_struct *priv = arg; 8248d42b7c5f433 Chong Qiao 2023-12-11 259 struct pci_dev *pdev = priv->dev; 8248d42b7c5f433 Chong Qiao 2023-12-11 260 8248d42b7c5f433 Chong Qiao 2023-12-11 261 if (irq == pdev->irq) 8248d42b7c5f433 Chong Qiao 2023-12-11 262 pr_info("ls2k500sfb pcie interrupt\n"); 8248d42b7c5f433 Chong Qiao 2023-12-11 263 else 8248d42b7c5f433 Chong Qiao 2023-12-11 264 pr_info("ls2k500sfb gpio interrupt\n"); 8248d42b7c5f433 Chong Qiao 2023-12-11 265 if (system_state != SYSTEM_RUNNING) 8248d42b7c5f433 Chong Qiao 2023-12-11 266 return IRQ_HANDLED; 8248d42b7c5f433 Chong Qiao 2023-12-11 267 8248d42b7c5f433 Chong Qiao 2023-12-11 268 if (!priv->running) { 8248d42b7c5f433 Chong Qiao 2023-12-11 269 if (!resetdelay || time_after(jiffies, priv->reset_time + resetdelay * HZ)) { 8248d42b7c5f433 Chong Qiao 2023-12-11 270 priv->running = 1; 8248d42b7c5f433 Chong Qiao 2023-12-11 271 queue_work(priv->wq, &priv->work); 8248d42b7c5f433 Chong Qiao 2023-12-11 272 } 8248d42b7c5f433 Chong Qiao 2023-12-11 273 priv->reset_time = jiffies; 8248d42b7c5f433 Chong Qiao 2023-12-11 274 } 8248d42b7c5f433 Chong Qiao 2023-12-11 275 return IRQ_HANDLED; 8248d42b7c5f433 Chong Qiao 2023-12-11 276 } 8248d42b7c5f433 Chong Qiao 2023-12-11 277 8248d42b7c5f433 Chong Qiao 2023-12-11 278 #ifdef CONFIG_LOONGARCH 8248d42b7c5f433 Chong Qiao 2023-12-11 279 #define GPIO_OEN ((void *)IO_BASE+0x1fe00000+0x500) 8248d42b7c5f433 Chong Qiao 2023-12-11 280 #define GPIO_FUNCEN ((void *)IO_BASE+0x1fe00000+0x504) 8248d42b7c5f433 Chong Qiao 2023-12-11 281 #define GPIO_OUT ((void *)IO_BASE+0x1fe00000+0x508) 8248d42b7c5f433 Chong Qiao 2023-12-11 282 #define GPIO_IN ((void *)IO_BASE+0x1fe00000+0x50c) 8248d42b7c5f433 Chong Qiao 2023-12-11 283 #define GPIO_INTPOL ((void *)IO_BASE+0x1fe00000+0x510) 8248d42b7c5f433 Chong Qiao 2023-12-11 284 #define GPIO_INTEN ((void *)IO_BASE+0x1fe00000+0x514) 8248d42b7c5f433 Chong Qiao 2023-12-11 285 8248d42b7c5f433 Chong Qiao 2023-12-11 286 static int gpiochip_match_name(struct gpio_chip *chip, void *data) 8248d42b7c5f433 Chong Qiao 2023-12-11 287 { 8248d42b7c5f433 Chong Qiao 2023-12-11 288 const char *name = data; 8248d42b7c5f433 Chong Qiao 2023-12-11 289 8248d42b7c5f433 Chong Qiao 2023-12-11 290 return !strcmp(chip->label, name); 8248d42b7c5f433 Chong Qiao 2023-12-11 291 } 8248d42b7c5f433 Chong Qiao 2023-12-11 292 static int get_gpio_irq_from_acpi_table(int gpio) 8248d42b7c5f433 Chong Qiao 2023-12-11 293 { 8248d42b7c5f433 Chong Qiao 2023-12-11 294 struct gpio_chip *chip; 8248d42b7c5f433 Chong Qiao 2023-12-11 295 struct gpio_desc *desc; 8248d42b7c5f433 Chong Qiao 2023-12-11 296 8248d42b7c5f433 Chong Qiao 2023-12-11 297 chip = gpiochip_find("LOON0007:00", gpiochip_match_name); 8248d42b7c5f433 Chong Qiao 2023-12-11 298 if (!chip) 8248d42b7c5f433 Chong Qiao 2023-12-11 299 return -ENOENT; 8248d42b7c5f433 Chong Qiao 2023-12-11 300 desc = gpiochip_request_own_desc(chip, gpio, "reboot", GPIO_LOOKUP_FLAGS_DEFAULT, GPIOD_IN); 8248d42b7c5f433 Chong Qiao 2023-12-11 301 if (!desc) 8248d42b7c5f433 Chong Qiao 2023-12-11 302 return -ENOENT; 8248d42b7c5f433 Chong Qiao 2023-12-11 303 return gpiod_to_irq(desc); 8248d42b7c5f433 Chong Qiao 2023-12-11 304 } 8248d42b7c5f433 Chong Qiao 2023-12-11 305 8248d42b7c5f433 Chong Qiao 2023-12-11 306 static int get_gpio_irq_from_acpi_gsi(int gpio) 8248d42b7c5f433 Chong Qiao 2023-12-11 307 { 8248d42b7c5f433 Chong Qiao 2023-12-11 308 int gsi = 16 + (gpio & 7); 8248d42b7c5f433 Chong Qiao 2023-12-11 309 8248d42b7c5f433 Chong Qiao 2023-12-11 310 return acpi_register_gsi(NULL, gsi, ACPI_EDGE_SENSITIVE, ACPI_ACTIVE_LOW); 8248d42b7c5f433 Chong Qiao 2023-12-11 311 } 8248d42b7c5f433 Chong Qiao 2023-12-11 312 8248d42b7c5f433 Chong Qiao 2023-12-11 313 static int register_gpio_reboot_handler(struct ls2k500sfb_struct *priv) 8248d42b7c5f433 Chong Qiao 2023-12-11 314 { 8248d42b7c5f433 Chong Qiao 2023-12-11 315 int irq = get_gpio_irq_from_acpi_table(GPIO); 8248d42b7c5f433 Chong Qiao 2023-12-11 316 8248d42b7c5f433 Chong Qiao 2023-12-11 317 if (irq < 0) { 8248d42b7c5f433 Chong Qiao 2023-12-11 318 irq = get_gpio_irq_from_acpi_gsi(GPIO); 8248d42b7c5f433 Chong Qiao 2023-12-11 319 pr_notice("gsi gpio irq %d\n", irq); 8248d42b7c5f433 Chong Qiao 2023-12-11 320 } else 8248d42b7c5f433 Chong Qiao 2023-12-11 321 pr_notice("acpi gpio irq %d\n", irq); 8248d42b7c5f433 Chong Qiao 2023-12-11 @322 writel(readl(GPIO_OEN) | (0x1 << GPIO), GPIO_OEN); 8248d42b7c5f433 Chong Qiao 2023-12-11 323 writel(readl(GPIO_FUNCEN) & ~(0x1 << GPIO), GPIO_FUNCEN); 8248d42b7c5f433 Chong Qiao 2023-12-11 324 writel(readl(GPIO_INTPOL) & ~(0x1 << GPIO), GPIO_INTPOL); 8248d42b7c5f433 Chong Qiao 2023-12-11 325 writel(readl(GPIO_INTEN) | (0x1 << GPIO), GPIO_INTEN); 8248d42b7c5f433 Chong Qiao 2023-12-11 326 if (request_irq(irq, ls2k500sfb_interrupt, IRQF_SHARED | IRQF_TRIGGER_FALLING, 8248d42b7c5f433 Chong Qiao 2023-12-11 327 "ls2k500sfb", priv)) 8248d42b7c5f433 Chong Qiao 2023-12-11 328 pr_err("request_irq(%d) failed\n", irq); 8248d42b7c5f433 Chong Qiao 2023-12-11 329 return 0; 8248d42b7c5f433 Chong Qiao 2023-12-11 330 } 8248d42b7c5f433 Chong Qiao 2023-12-11 331 #endif 8248d42b7c5f433 Chong Qiao 2023-12-11 332 :::::: The code at line 322 was first introduced by commit :::::: 8248d42b7c5f4338a54f26d8efebec8614b43466 fbdev: add ls2k500sfb driver for ls2k500 bmc. :::::: TO: Chong Qiao <qiaochong(a)loongson.cn> :::::: CC: Hongchen Zhang <zhanghongchen(a)loongson.cn> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6] BUILD SUCCESS 3b421b6002e287e38790cbdad4a3e08baf7e1bc4
by kernel test robot 07 Jul '24

07 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-6.6 branch HEAD: 3b421b6002e287e38790cbdad4a3e08baf7e1bc4 !9770 Add a switch to enable hungtask check for io Warning ids grouped by kconfigs: recent_errors `-- arm64-allmodconfig `-- clang:warning:no-such-include-directory:drivers-infiniband-hw-hiroce3-include-mag elapsed time: 723m configs tested: 38 configs skipped: 123 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240706 gcc-13.2.0 arm64 randconfig-002-20240706 gcc-13.2.0 arm64 randconfig-003-20240706 clang-16 arm64 randconfig-004-20240706 clang-19 loongarch allmodconfig gcc-13.2.0 loongarch allnoconfig gcc-13.2.0 loongarch randconfig-001-20240706 gcc-13.2.0 loongarch randconfig-002-20240706 gcc-13.2.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240706 clang-18 x86_64 buildonly-randconfig-002-20240706 clang-18 x86_64 buildonly-randconfig-003-20240706 clang-18 x86_64 buildonly-randconfig-004-20240706 clang-18 x86_64 buildonly-randconfig-005-20240706 gcc-13 x86_64 buildonly-randconfig-006-20240706 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240706 gcc-9 x86_64 randconfig-002-20240706 clang-18 x86_64 randconfig-003-20240706 clang-18 x86_64 randconfig-004-20240706 clang-18 x86_64 randconfig-005-20240706 clang-18 x86_64 randconfig-006-20240706 clang-18 x86_64 randconfig-011-20240706 gcc-12 x86_64 randconfig-012-20240706 gcc-12 x86_64 randconfig-013-20240706 clang-18 x86_64 randconfig-014-20240706 gcc-13 x86_64 randconfig-015-20240706 gcc-13 x86_64 randconfig-016-20240706 gcc-13 x86_64 randconfig-071-20240706 gcc-12 x86_64 randconfig-072-20240706 gcc-13 x86_64 randconfig-073-20240706 gcc-12 x86_64 randconfig-074-20240706 gcc-13 x86_64 randconfig-075-20240706 clang-18 x86_64 randconfig-076-20240706 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-5.10] BUILD SUCCESS 1cc61a82256cf82a5f06287eb7c64d9b94f43786
by kernel test robot 07 Jul '24

07 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-5.10 branch HEAD: 1cc61a82256cf82a5f06287eb7c64d9b94f43786 !9792 v3 net: fix one NULL pointer dereference bug in net_rship module Warning ids grouped by kconfigs: recent_errors `-- x86_64-allnoconfig `-- drivers-arm-spe-spe.c:linux-perf-arm_pmu.h-is-included-more-than-once. elapsed time: 727m configs tested: 34 configs skipped: 126 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240706 gcc-13.2.0 arm64 randconfig-002-20240706 gcc-13.2.0 arm64 randconfig-003-20240706 clang-16 arm64 randconfig-004-20240706 clang-19 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240706 clang-18 x86_64 buildonly-randconfig-002-20240706 clang-18 x86_64 buildonly-randconfig-003-20240706 clang-18 x86_64 buildonly-randconfig-004-20240706 clang-18 x86_64 buildonly-randconfig-005-20240706 gcc-13 x86_64 buildonly-randconfig-006-20240706 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240706 gcc-9 x86_64 randconfig-002-20240706 clang-18 x86_64 randconfig-003-20240706 clang-18 x86_64 randconfig-004-20240706 clang-18 x86_64 randconfig-005-20240706 clang-18 x86_64 randconfig-006-20240706 clang-18 x86_64 randconfig-011-20240706 gcc-12 x86_64 randconfig-012-20240706 gcc-12 x86_64 randconfig-013-20240706 clang-18 x86_64 randconfig-014-20240706 gcc-13 x86_64 randconfig-015-20240706 gcc-13 x86_64 randconfig-016-20240706 gcc-13 x86_64 randconfig-071-20240706 gcc-12 x86_64 randconfig-072-20240706 gcc-13 x86_64 randconfig-073-20240706 gcc-12 x86_64 randconfig-074-20240706 gcc-13 x86_64 randconfig-075-20240706 clang-18 x86_64 randconfig-076-20240706 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:openEuler-1.0-LTS] BUILD SUCCESS d127ee13b4d5627947830da5f044541d1144dc44
by kernel test robot 07 Jul '24

07 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS branch HEAD: d127ee13b4d5627947830da5f044541d1144dc44 !9797 sch_cake: do not call cake_destroy() from cake_init() elapsed time: 726m configs tested: 34 configs skipped: 127 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig gcc-13.2.0 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240706 gcc-13.2.0 arm64 randconfig-002-20240706 gcc-13.2.0 arm64 randconfig-003-20240706 gcc-13.2.0 arm64 randconfig-004-20240706 gcc-13.2.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240706 clang-18 x86_64 buildonly-randconfig-002-20240706 clang-18 x86_64 buildonly-randconfig-003-20240706 clang-18 x86_64 buildonly-randconfig-004-20240706 clang-18 x86_64 buildonly-randconfig-005-20240706 gcc-13 x86_64 buildonly-randconfig-006-20240706 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240706 gcc-9 x86_64 randconfig-002-20240706 clang-18 x86_64 randconfig-003-20240706 clang-18 x86_64 randconfig-004-20240706 clang-18 x86_64 randconfig-005-20240706 clang-18 x86_64 randconfig-006-20240706 clang-18 x86_64 randconfig-011-20240706 gcc-12 x86_64 randconfig-012-20240706 gcc-12 x86_64 randconfig-013-20240706 clang-18 x86_64 randconfig-014-20240706 gcc-13 x86_64 randconfig-015-20240706 gcc-13 x86_64 randconfig-016-20240706 gcc-13 x86_64 randconfig-071-20240706 gcc-12 x86_64 randconfig-072-20240706 gcc-13 x86_64 randconfig-073-20240706 gcc-12 x86_64 randconfig-074-20240706 gcc-13 x86_64 randconfig-075-20240706 clang-18 x86_64 randconfig-076-20240706 gcc-13 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH openEuler-22.03-LTS-SP1] null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
by Li Nan 06 Jul '24

06 Jul '24

From: Yu Kuai <yukuai3(a)huawei.com> mainline inclusion from mainline-v6.10-rc1 commit a2db328b0839312c169eb42746ec46fc1ab53ed2 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA7D6H CVE: CVE-2024-36478 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Writing 'power' and 'submit_queues' concurrently will trigger kernel panic: Test script: modprobe null_blk nr_devices=0 mkdir -p /sys/kernel/config/nullb/nullb0 while true; do echo 1 > submit_queues; echo 4 > submit_queues; done & while true; do echo 1 > power; echo 0 > power; done Test result: BUG: kernel NULL pointer dereference, address: 0000000000000148 Oops: 0000 [#1] PREEMPT SMP RIP: 0010:__lock_acquire+0x41d/0x28f0 Call Trace: <TASK> lock_acquire+0x121/0x450 down_write+0x5f/0x1d0 simple_recursive_removal+0x12f/0x5c0 blk_mq_debugfs_unregister_hctxs+0x7c/0x100 blk_mq_update_nr_hw_queues+0x4a3/0x720 nullb_update_nr_hw_queues+0x71/0xf0 [null_blk] nullb_device_submit_queues_store+0x79/0xf0 [null_blk] configfs_write_iter+0x119/0x1e0 vfs_write+0x326/0x730 ksys_write+0x74/0x150 This is because del_gendisk() can concurrent with blk_mq_update_nr_hw_queues(): nullb_device_power_store nullb_apply_submit_queues null_del_dev del_gendisk nullb_update_nr_hw_queues if (!dev->nullb) // still set while gendisk is deleted return 0 blk_mq_update_nr_hw_queues dev->nullb = NULL Fix this problem by resuing the global mutex to protect nullb_device_power_store() and nullb_update_nr_hw_queues() from configfs. Fixes: 45919fbfe1c4 ("null_blk: Enable modifying 'submit_queues' after an instance has been configured") Reported-and-tested-by: Yi Zhang <yi.zhang(a)redhat.com> Closes: https://lore.kernel.org/all/CAHj4cs9LgsHLnjg8z06LQ3Pr5cax-+Ps+xT7AP7TPnEjSt… Signed-off-by: Yu Kuai <yukuai3(a)huawei.com> Reviewed-by: Zhu Yanjun <yanjun.zhu(a)linux.dev> Link: https://lore.kernel.org/r/20240523153934.1937851-1-yukuai1@huaweicloud.com Signed-off-by: Jens Axboe <axboe(a)kernel.dk> Conflicts: drivers/block/null_blk/main.c [ A lot of conflict, this patch just expand the protection range of mutex, ignore conflict. ] Signed-off-by: Li Nan <linan122(a)huawei.com> --- drivers/block/null_blk/main.c | 43 +++++++++++++++++++++-------------- 1 file changed, 26 insertions(+), 17 deletions(-) diff --git a/drivers/block/null_blk/main.c b/drivers/block/null_blk/main.c index 35b390a785dd..91c8412442d0 100644 --- a/drivers/block/null_blk/main.c +++ b/drivers/block/null_blk/main.c @@ -323,11 +323,9 @@ CONFIGFS_ATTR(nullb_device_, NAME); static int nullb_apply_submit_queues(struct nullb_device *dev, unsigned int submit_queues) { - struct nullb *nullb = dev->nullb; + struct nullb *nullb; struct blk_mq_tag_set *set; - - if (!nullb) - return 0; + int ret = 0; /* * Make sure that null_init_hctx() does not access nullb->queues[] past @@ -335,9 +333,20 @@ static int nullb_apply_submit_queues(struct nullb_device *dev, */ if (submit_queues > nr_cpu_ids) return -EINVAL; + + mutex_lock(&lock); + + nullb = dev->nullb; + if (!nullb) + goto out; + set = nullb->tag_set; blk_mq_update_nr_hw_queues(set, submit_queues); - return set->nr_hw_queues == submit_queues ? 0 : -ENOMEM; + ret = set->nr_hw_queues == submit_queues ? 0 : -ENOMEM; + +out: + mutex_unlock(&lock); + return ret; } NULLB_DEVICE_ATTR(size, ulong, NULL); @@ -378,27 +387,31 @@ static ssize_t nullb_device_power_store(struct config_item *item, if (ret < 0) return ret; + ret = count; + mutex_lock(&lock); if (!dev->power && newp) { if (test_and_set_bit(NULLB_DEV_FL_UP, &dev->flags)) - return count; + goto out; + if (null_add_dev(dev)) { clear_bit(NULLB_DEV_FL_UP, &dev->flags); - return -ENOMEM; + ret = -ENOMEM; + goto out; } set_bit(NULLB_DEV_FL_CONFIGURED, &dev->flags); dev->power = newp; } else if (dev->power && !newp) { if (test_and_clear_bit(NULLB_DEV_FL_UP, &dev->flags)) { - mutex_lock(&lock); dev->power = newp; null_del_dev(dev->nullb); - mutex_unlock(&lock); } clear_bit(NULLB_DEV_FL_CONFIGURED, &dev->flags); } - return count; +out: + mutex_unlock(&lock); + return ret; } CONFIGFS_ATTR(nullb_device_, power); @@ -1880,15 +1893,11 @@ static int null_add_dev(struct nullb_device *dev) blk_queue_flag_set(QUEUE_FLAG_NONROT, nullb->q); blk_queue_flag_clear(QUEUE_FLAG_ADD_RANDOM, nullb->q); - mutex_lock(&lock); rv = ida_simple_get(&nullb_indexes, 0, 0, GFP_KERNEL); - if (rv < 0) { - mutex_unlock(&lock); + if (rv < 0) goto out_cleanup_zone; - } nullb->index = rv; dev->index = rv; - mutex_unlock(&lock); blk_queue_logical_block_size(nullb->q, dev->blocksize); blk_queue_physical_block_size(nullb->q, dev->blocksize); @@ -1901,9 +1910,7 @@ static int null_add_dev(struct nullb_device *dev) if (rv) goto out_ida_free; - mutex_lock(&lock); list_add_tail(&nullb->list, &nullb_list); - mutex_unlock(&lock); return 0; @@ -1985,7 +1992,9 @@ static int __init null_init(void) ret = -ENOMEM; goto err_dev; } + mutex_lock(&lock); ret = null_add_dev(dev); + mutex_unlock(&lock); if (ret) { null_free_dev(dev); goto err_dev; -- 2.39.2

2 1

[PATCH OLK-5.10] null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
by Li Nan 06 Jul '24

06 Jul '24

From: Yu Kuai <yukuai3(a)huawei.com> mainline inclusion from mainline-v6.10-rc1 commit a2db328b0839312c169eb42746ec46fc1ab53ed2 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA7D6H CVE: CVE-2024-36478 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Writing 'power' and 'submit_queues' concurrently will trigger kernel panic: Test script: modprobe null_blk nr_devices=0 mkdir -p /sys/kernel/config/nullb/nullb0 while true; do echo 1 > submit_queues; echo 4 > submit_queues; done & while true; do echo 1 > power; echo 0 > power; done Test result: BUG: kernel NULL pointer dereference, address: 0000000000000148 Oops: 0000 [#1] PREEMPT SMP RIP: 0010:__lock_acquire+0x41d/0x28f0 Call Trace: <TASK> lock_acquire+0x121/0x450 down_write+0x5f/0x1d0 simple_recursive_removal+0x12f/0x5c0 blk_mq_debugfs_unregister_hctxs+0x7c/0x100 blk_mq_update_nr_hw_queues+0x4a3/0x720 nullb_update_nr_hw_queues+0x71/0xf0 [null_blk] nullb_device_submit_queues_store+0x79/0xf0 [null_blk] configfs_write_iter+0x119/0x1e0 vfs_write+0x326/0x730 ksys_write+0x74/0x150 This is because del_gendisk() can concurrent with blk_mq_update_nr_hw_queues(): nullb_device_power_store nullb_apply_submit_queues null_del_dev del_gendisk nullb_update_nr_hw_queues if (!dev->nullb) // still set while gendisk is deleted return 0 blk_mq_update_nr_hw_queues dev->nullb = NULL Fix this problem by resuing the global mutex to protect nullb_device_power_store() and nullb_update_nr_hw_queues() from configfs. Fixes: 45919fbfe1c4 ("null_blk: Enable modifying 'submit_queues' after an instance has been configured") Reported-and-tested-by: Yi Zhang <yi.zhang(a)redhat.com> Closes: https://lore.kernel.org/all/CAHj4cs9LgsHLnjg8z06LQ3Pr5cax-+Ps+xT7AP7TPnEjSt… Signed-off-by: Yu Kuai <yukuai3(a)huawei.com> Reviewed-by: Zhu Yanjun <yanjun.zhu(a)linux.dev> Link: https://lore.kernel.org/r/20240523153934.1937851-1-yukuai1@huaweicloud.com Signed-off-by: Jens Axboe <axboe(a)kernel.dk> Conflicts: drivers/block/null_blk/main.c [ A lot of conflict, this patch just expand the protection range of mutex, ignore conflict. ] Signed-off-by: Li Nan <linan122(a)huawei.com> --- drivers/block/null_blk/main.c | 43 +++++++++++++++++++++-------------- 1 file changed, 26 insertions(+), 17 deletions(-) diff --git a/drivers/block/null_blk/main.c b/drivers/block/null_blk/main.c index 35b390a785dd..91c8412442d0 100644 --- a/drivers/block/null_blk/main.c +++ b/drivers/block/null_blk/main.c @@ -323,11 +323,9 @@ CONFIGFS_ATTR(nullb_device_, NAME); static int nullb_apply_submit_queues(struct nullb_device *dev, unsigned int submit_queues) { - struct nullb *nullb = dev->nullb; + struct nullb *nullb; struct blk_mq_tag_set *set; - - if (!nullb) - return 0; + int ret = 0; /* * Make sure that null_init_hctx() does not access nullb->queues[] past @@ -335,9 +333,20 @@ static int nullb_apply_submit_queues(struct nullb_device *dev, */ if (submit_queues > nr_cpu_ids) return -EINVAL; + + mutex_lock(&lock); + + nullb = dev->nullb; + if (!nullb) + goto out; + set = nullb->tag_set; blk_mq_update_nr_hw_queues(set, submit_queues); - return set->nr_hw_queues == submit_queues ? 0 : -ENOMEM; + ret = set->nr_hw_queues == submit_queues ? 0 : -ENOMEM; + +out: + mutex_unlock(&lock); + return ret; } NULLB_DEVICE_ATTR(size, ulong, NULL); @@ -378,27 +387,31 @@ static ssize_t nullb_device_power_store(struct config_item *item, if (ret < 0) return ret; + ret = count; + mutex_lock(&lock); if (!dev->power && newp) { if (test_and_set_bit(NULLB_DEV_FL_UP, &dev->flags)) - return count; + goto out; + if (null_add_dev(dev)) { clear_bit(NULLB_DEV_FL_UP, &dev->flags); - return -ENOMEM; + ret = -ENOMEM; + goto out; } set_bit(NULLB_DEV_FL_CONFIGURED, &dev->flags); dev->power = newp; } else if (dev->power && !newp) { if (test_and_clear_bit(NULLB_DEV_FL_UP, &dev->flags)) { - mutex_lock(&lock); dev->power = newp; null_del_dev(dev->nullb); - mutex_unlock(&lock); } clear_bit(NULLB_DEV_FL_CONFIGURED, &dev->flags); } - return count; +out: + mutex_unlock(&lock); + return ret; } CONFIGFS_ATTR(nullb_device_, power); @@ -1880,15 +1893,11 @@ static int null_add_dev(struct nullb_device *dev) blk_queue_flag_set(QUEUE_FLAG_NONROT, nullb->q); blk_queue_flag_clear(QUEUE_FLAG_ADD_RANDOM, nullb->q); - mutex_lock(&lock); rv = ida_simple_get(&nullb_indexes, 0, 0, GFP_KERNEL); - if (rv < 0) { - mutex_unlock(&lock); + if (rv < 0) goto out_cleanup_zone; - } nullb->index = rv; dev->index = rv; - mutex_unlock(&lock); blk_queue_logical_block_size(nullb->q, dev->blocksize); blk_queue_physical_block_size(nullb->q, dev->blocksize); @@ -1901,9 +1910,7 @@ static int null_add_dev(struct nullb_device *dev) if (rv) goto out_ida_free; - mutex_lock(&lock); list_add_tail(&nullb->list, &nullb_list); - mutex_unlock(&lock); return 0; @@ -1985,7 +1992,9 @@ static int __init null_init(void) ret = -ENOMEM; goto err_dev; } + mutex_lock(&lock); ret = null_add_dev(dev); + mutex_unlock(&lock); if (ret) { null_free_dev(dev); goto err_dev; -- 2.39.2

2 1

[PATCH openEuler-1.0-LTS] ftrace: Use preempt disable instead of rcu lock in ftrace_location_range()
by Zheng Yejian 06 Jul '24

06 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAA3U5 CVE: NA -------------------------------- After commit 5e66a5bdad69 ("ftrace: Fix rcu warn in ftrace_location()"), syzkaller reports following warning: WARNING: lock held when returning to user space! 4.18.0+ #16 Tainted: G W ---------r- - ------------------------------------------------ modprobe/4255 is leaving the kernel with locks still held! 1 lock held by modprobe/4255: #0: 0000000012ba3568 (rcu_read_lock){....}, at: ftrace_location_range+0x292/0x440 BUG: scheduling while atomic: modprobe/4255/0x00000002 ============================= BUG: scheduling while atomic: modprobe/4256/0x00000002 INFO: lockdep is turned off. Modules linked in: Kernel panic - not syncing: scheduling while atomic It seems that rcu_read_lock() is held but rcu_read_unlock() is not called, this is most likely due to the inconsistent state when calling in_atomic(). To fix it, use preemt_{disable,enable}_notrace() instead of rcu_read_{,un}lock(). Fixes: 5e66a5bdad69 ("ftrace: Fix rcu warn in ftrace_location()") Signed-off-by: Zheng Yejian <zhengyejian1(a)huawei.com> --- kernel/trace/ftrace.c | 10 ++-------- 1 file changed, 2 insertions(+), 8 deletions(-) diff --git a/kernel/trace/ftrace.c b/kernel/trace/ftrace.c index ad4440da5b78..ceb4bab432f1 100644 --- a/kernel/trace/ftrace.c +++ b/kernel/trace/ftrace.c @@ -1581,12 +1581,7 @@ unsigned long ftrace_location_range(unsigned long start, unsigned long end) key.ip = start; key.flags = end; /* overload flags, as it is unsigned long */ - /* - * It is in atomic context when called from ftrace_int3_handler(), - * in this case rcu lock is not needed. - */ - if (!in_atomic()) - rcu_read_lock(); + preempt_disable_notrace(); for (pg = ftrace_pages_start; pg; pg = pg->next) { if (pg->index == 0 || end < pg->records[0].ip || @@ -1600,8 +1595,7 @@ unsigned long ftrace_location_range(unsigned long start, unsigned long end) break; } } - if (!in_atomic()) - rcu_read_unlock(); + preempt_enable_notrace(); return ip; } -- 2.25.1

2 1

[PATCH openEuler-1.0-LTS] sch_cake: do not call cake_destroy() from cake_init()
by Xiang Yang 06 Jul '24

06 Jul '24

From: Eric Dumazet <edumazet(a)google.com> stable inclusion from stable-v4.19.222 commit 4e388232e630ebe4f94b4a0715ec98c0e2b314a3 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SGX CVE: CVE-2021-47598 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=… -------------------------------- [ Upstream commit ab443c53916730862cec202078d36fd4008bea79 ] qdiscs are not supposed to call their own destroy() method from init(), because core stack already does that. syzbot was able to trigger use after free: DEBUG_LOCKS_WARN_ON(lock->magic != lock) WARNING: CPU: 0 PID: 21902 at kernel/locking/mutex.c:586 __mutex_lock_common kernel/locking/mutex.c:586 [inline] WARNING: CPU: 0 PID: 21902 at kernel/locking/mutex.c:586 __mutex_lock+0x9ec/0x12f0 kernel/locking/mutex.c:740 Modules linked in: CPU: 0 PID: 21902 Comm: syz-executor189 Not tainted 5.16.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__mutex_lock_common kernel/locking/mutex.c:586 [inline] RIP: 0010:__mutex_lock+0x9ec/0x12f0 kernel/locking/mutex.c:740 Code: 08 84 d2 0f 85 19 08 00 00 8b 05 97 38 4b 04 85 c0 0f 85 27 f7 ff ff 48 c7 c6 20 00 ac 89 48 c7 c7 a0 fe ab 89 e8 bf 76 ba ff <0f> 0b e9 0d f7 ff ff 48 8b 44 24 40 48 8d b8 c8 08 00 00 48 89 f8 RSP: 0018:ffffc9000627f290 EFLAGS: 00010282 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff88802315d700 RSI: ffffffff815f1db8 RDI: fffff52000c4fe44 RBP: ffff88818f28e000 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff815ebb5e R11: 0000000000000000 R12: 0000000000000000 R13: dffffc0000000000 R14: ffffc9000627f458 R15: 0000000093c30000 FS: 0000555556abc400(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fda689c3303 CR3: 000000001cfbb000 CR4: 0000000000350ef0 Call Trace: <TASK> tcf_chain0_head_change_cb_del+0x2e/0x3d0 net/sched/cls_api.c:810 tcf_block_put_ext net/sched/cls_api.c:1381 [inline] tcf_block_put_ext net/sched/cls_api.c:1376 [inline] tcf_block_put+0xbc/0x130 net/sched/cls_api.c:1394 cake_destroy+0x3f/0x80 net/sched/sch_cake.c:2695 qdisc_create.constprop.0+0x9da/0x10f0 net/sched/sch_api.c:1293 tc_modify_qdisc+0x4c5/0x1980 net/sched/sch_api.c:1660 rtnetlink_rcv_msg+0x413/0xb80 net/core/rtnetlink.c:5571 netlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2496 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x533/0x7d0 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x904/0xdf0 net/netlink/af_netlink.c:1921 sock_sendmsg_nosec net/socket.c:704 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:724 ____sys_sendmsg+0x6e8/0x810 net/socket.c:2409 ___sys_sendmsg+0xf3/0x170 net/socket.c:2463 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2492 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f1bb06badb9 Code: Unable to access opcode bytes at RIP 0x7f1bb06bad8f. RSP: 002b:00007fff3012a658 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f1bb06badb9 RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000003 R10: 0000000000000003 R11: 0000000000000246 R12: 00007fff3012a688 R13: 00007fff3012a6a0 R14: 00007fff3012a6e0 R15: 00000000000013c2 </TASK> Fixes: 046f6fd5daef ("sched: Add Common Applications Kept Enhanced (cake) qdisc") Signed-off-by: Eric Dumazet <edumazet(a)google.com> Reported-by: syzbot <syzkaller(a)googlegroups.com> Acked-by: Toke Høiland-Jørgensen <toke(a)toke.dk> Link: https://lore.kernel.org/r/20211210142046.698336-1-eric.dumazet@gmail.com Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Xiang Yang <xiangyang3(a)huawei.com> --- net/sched/sch_cake.c | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/net/sched/sch_cake.c b/net/sched/sch_cake.c index 2025f0f559de..18c207b85d51 100644 --- a/net/sched/sch_cake.c +++ b/net/sched/sch_cake.c @@ -2675,7 +2675,7 @@ static int cake_init(struct Qdisc *sch, struct nlattr *opt, q->tins = kvcalloc(CAKE_MAX_TINS, sizeof(struct cake_tin_data), GFP_KERNEL); if (!q->tins) - goto nomem; + return -ENOMEM; for (i = 0; i < CAKE_MAX_TINS; i++) { struct cake_tin_data *b = q->tins + i; @@ -2705,10 +2705,6 @@ static int cake_init(struct Qdisc *sch, struct nlattr *opt, q->min_netlen = ~0; q->min_adjlen = ~0; return 0; - -nomem: - cake_destroy(sch); - return -ENOMEM; } static int cake_dump(struct Qdisc *sch, struct sk_buff *skb) -- 2.34.1

2 1

[PATCH OLK-5.10] drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
by Zheng Zucheng 06 Jul '24

06 Jul '24

From: Aleksandr Mishin <amishin(a)t-argos.ru> stable inclusion from stable-v6.6.33 commit dcf53e6103b26e7458be71491d0641f49fbd5840 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SEW CVE: CVE-2024-38548 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 935a92a1c400285545198ca2800a4c6c519c650a ] In cdns_mhdp_atomic_enable(), the return value of drm_mode_duplicate() is assigned to mhdp_state->current_mode, and there is a dereference of it in drm_mode_set_name(), which will lead to a NULL pointer dereference on failure of drm_mode_duplicate(). Fix this bug add a check of mhdp_state->current_mode. Fixes: fb43aa0acdfd ("drm: bridge: Add support for Cadence MHDP8546 DPI/DP bridge") Signed-off-by: Aleksandr Mishin <amishin(a)t-argos.ru> Reviewed-by: Robert Foss <rfoss(a)kernel.org> Signed-off-by: Robert Foss <rfoss(a)kernel.org> Link: https://patchwork.freedesktop.org/patch/msgid/20240408125810.21899-1-amishi… Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: ZhangPeng <zhangpeng362(a)huawei.com> Signed-off-by: Zheng Zucheng <zhengzucheng(a)huawei.com> --- drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c b/drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c index 6af565ac307a..858f5b650849 100644 --- a/drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c +++ b/drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c @@ -2057,6 +2057,9 @@ static void cdns_mhdp_atomic_enable(struct drm_bridge *bridge, mhdp_state = to_cdns_mhdp_bridge_state(new_state); mhdp_state->current_mode = drm_mode_duplicate(bridge->dev, mode); + if (!mhdp_state->current_mode) + return; + drm_mode_set_name(mhdp_state->current_mode); dev_dbg(mhdp->dev, "%s: Enabling mode %s\n", __func__, mode->name); -- 2.34.1

2 1

[PATCH openEuler-22.03-LTS-SP1] drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
by Zheng Zucheng 06 Jul '24

06 Jul '24

From: Aleksandr Mishin <amishin(a)t-argos.ru> stable inclusion from stable-v6.6.33 commit dcf53e6103b26e7458be71491d0641f49fbd5840 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SEW CVE: CVE-2024-38548 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 935a92a1c400285545198ca2800a4c6c519c650a ] In cdns_mhdp_atomic_enable(), the return value of drm_mode_duplicate() is assigned to mhdp_state->current_mode, and there is a dereference of it in drm_mode_set_name(), which will lead to a NULL pointer dereference on failure of drm_mode_duplicate(). Fix this bug add a check of mhdp_state->current_mode. Fixes: fb43aa0acdfd ("drm: bridge: Add support for Cadence MHDP8546 DPI/DP bridge") Signed-off-by: Aleksandr Mishin <amishin(a)t-argos.ru> Reviewed-by: Robert Foss <rfoss(a)kernel.org> Signed-off-by: Robert Foss <rfoss(a)kernel.org> Link: https://patchwork.freedesktop.org/patch/msgid/20240408125810.21899-1-amishi… Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: ZhangPeng <zhangpeng362(a)huawei.com> Signed-off-by: Zheng Zucheng <zhengzucheng(a)huawei.com> --- drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c b/drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c index 6af565ac307a..858f5b650849 100644 --- a/drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c +++ b/drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c @@ -2057,6 +2057,9 @@ static void cdns_mhdp_atomic_enable(struct drm_bridge *bridge, mhdp_state = to_cdns_mhdp_bridge_state(new_state); mhdp_state->current_mode = drm_mode_duplicate(bridge->dev, mode); + if (!mhdp_state->current_mode) + return; + drm_mode_set_name(mhdp_state->current_mode); dev_dbg(mhdp->dev, "%s: Enabling mode %s\n", __func__, mode->name); -- 2.34.1

2 1

[PATCH OLK-6.6] drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
by Zheng Zucheng 06 Jul '24

06 Jul '24

From: Aleksandr Mishin <amishin(a)t-argos.ru> stable inclusion from stable-v6.6.33 commit dcf53e6103b26e7458be71491d0641f49fbd5840 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SEW CVE: CVE-2024-38548 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 935a92a1c400285545198ca2800a4c6c519c650a ] In cdns_mhdp_atomic_enable(), the return value of drm_mode_duplicate() is assigned to mhdp_state->current_mode, and there is a dereference of it in drm_mode_set_name(), which will lead to a NULL pointer dereference on failure of drm_mode_duplicate(). Fix this bug add a check of mhdp_state->current_mode. Fixes: fb43aa0acdfd ("drm: bridge: Add support for Cadence MHDP8546 DPI/DP bridge") Signed-off-by: Aleksandr Mishin <amishin(a)t-argos.ru> Reviewed-by: Robert Foss <rfoss(a)kernel.org> Signed-off-by: Robert Foss <rfoss(a)kernel.org> Link: https://patchwork.freedesktop.org/patch/msgid/20240408125810.21899-1-amishi… Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: ZhangPeng <zhangpeng362(a)huawei.com> Signed-off-by: Zheng Zucheng <zhengzucheng(a)huawei.com> --- drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c b/drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c index 6af565ac307a..858f5b650849 100644 --- a/drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c +++ b/drivers/gpu/drm/bridge/cadence/cdns-mhdp8546-core.c @@ -2057,6 +2057,9 @@ static void cdns_mhdp_atomic_enable(struct drm_bridge *bridge, mhdp_state = to_cdns_mhdp_bridge_state(new_state); mhdp_state->current_mode = drm_mode_duplicate(bridge->dev, mode); + if (!mhdp_state->current_mode) + return; + drm_mode_set_name(mhdp_state->current_mode); dev_dbg(mhdp->dev, "%s: Enabling mode %s\n", __func__, mode->name); -- 2.34.1

2 1

[PATCH OLK-5.10 v3] net: fix one NULL pointer dereference bug in net_rship module
by Liu Jian 06 Jul '24

06 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAAZJ8 -------------------------------- The call trace as below: Call trace: __netdev_alloc_skb+0x8c/0x1e0 ad_lacpdu_send+0x34/0x18c [bonding] ad_tx_machine+0xcc/0x174 [bonding] bond_3ad_state_machine_handler+0x120/0x470 [bonding] process_one_work+0x1d8/0x4e0 worker_thread+0x154/0x420 kthread+0x108/0x150 ret_from_fork+0x10/0x18 It is caused by null pointer dereference in net_rship module. The code path is as follows: ad_lacpdu_send dev_alloc_skb netdev_alloc_skb(NULL, length) // dev is NULL __netdev_alloc_skb(dev, length, GFP_ATOMIC) net_rship_skb_record_dev_rxinfo(skb, dev) // here dereference dev, it is NULL pointer, trigger issue. So we should add null pointer check to avoid the issue. Fixes: 64ba5634c4c6 ("net: add some bpf hooks in tcp stack for network numa relationship") Signed-off-by: Liu Jian <liujian56(a)huawei.com> --- include/net/net_rship.h | 3 +++ 1 file changed, 3 insertions(+) diff --git a/include/net/net_rship.h b/include/net/net_rship.h index ad8af5a5cb9b..dda4dd732bd0 100644 --- a/include/net/net_rship.h +++ b/include/net/net_rship.h @@ -222,6 +222,9 @@ static inline void net_rship_skb_record_dev_rxinfo(struct sk_buff *skb, struct n if (gnet_bpf_enabled(GNET_RCV_NIC_NODE)) { struct sched_net_rship_skb *ext = __get_skb_net_rship(skb); + if (!dev) + return; + ext->rx_dev_idx = dev->ifindex; ext->rx_dev_net_cookie = dev_net(dev)->net_cookie; } -- 2.34.1

2 1

[openeuler:openEuler-1.0-LTS] BUILD SUCCESS 4949c9455d5ad3ecd338b3fe8c5aafe54dfeacda
by kernel test robot 06 Jul '24

06 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS branch HEAD: 4949c9455d5ad3ecd338b3fe8c5aafe54dfeacda !9786 drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() elapsed time: 733m configs tested: 34 configs skipped: 127 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig gcc-13.2.0 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240705 gcc-13.2.0 arm64 randconfig-002-20240705 gcc-13.2.0 arm64 randconfig-003-20240705 gcc-13.2.0 arm64 randconfig-004-20240705 gcc-13.2.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240705 gcc-7 x86_64 buildonly-randconfig-002-20240705 gcc-13 x86_64 buildonly-randconfig-003-20240705 clang-18 x86_64 buildonly-randconfig-004-20240705 clang-18 x86_64 buildonly-randconfig-005-20240705 clang-18 x86_64 buildonly-randconfig-006-20240705 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240705 clang-18 x86_64 randconfig-002-20240705 gcc-13 x86_64 randconfig-003-20240705 clang-18 x86_64 randconfig-004-20240705 gcc-13 x86_64 randconfig-005-20240705 gcc-13 x86_64 randconfig-006-20240705 gcc-13 x86_64 randconfig-011-20240705 clang-18 x86_64 randconfig-012-20240705 gcc-9 x86_64 randconfig-013-20240705 clang-18 x86_64 randconfig-014-20240705 gcc-13 x86_64 randconfig-015-20240705 clang-18 x86_64 randconfig-016-20240705 gcc-9 x86_64 randconfig-071-20240705 gcc-13 x86_64 randconfig-072-20240705 gcc-13 x86_64 randconfig-073-20240705 clang-18 x86_64 randconfig-074-20240705 gcc-13 x86_64 randconfig-075-20240705 clang-18 x86_64 randconfig-076-20240705 clang-18 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6] BUILD REGRESSION ea4dd5f0e87fde262e6fa081be0fb7f9e103057f
by kernel test robot 06 Jul '24

06 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-6.6 branch HEAD: ea4dd5f0e87fde262e6fa081be0fb7f9e103057f !9649 f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() Error/Warning ids grouped by kconfigs: recent_errors |-- arm64-allmodconfig | `-- clang:warning:no-such-include-directory:drivers-infiniband-hw-hiroce3-include-mag `-- x86_64-randconfig-014-20240705 |-- crypto-asymmetric_keys-pgp_public_key.c:(.text):undefined-reference-to-public_key_subtype |-- ld:crypto-asymmetric_keys-pgp_public_key.c:(.text):undefined-reference-to-public_key_free `-- ld:crypto-asymmetric_keys-pgp_public_key.c:(.text):undefined-reference-to-public_key_subtype elapsed time: 730m configs tested: 38 configs skipped: 123 tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240705 clang-19 arm64 randconfig-002-20240705 clang-19 arm64 randconfig-003-20240705 clang-19 arm64 randconfig-004-20240705 clang-19 loongarch allmodconfig gcc-13.2.0 loongarch allnoconfig gcc-13.2.0 loongarch randconfig-001-20240705 gcc-13.2.0 loongarch randconfig-002-20240705 gcc-13.2.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240705 gcc-7 x86_64 buildonly-randconfig-002-20240705 gcc-13 x86_64 buildonly-randconfig-003-20240705 clang-18 x86_64 buildonly-randconfig-004-20240705 clang-18 x86_64 buildonly-randconfig-005-20240705 clang-18 x86_64 buildonly-randconfig-006-20240705 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240705 clang-18 x86_64 randconfig-002-20240705 gcc-13 x86_64 randconfig-003-20240705 clang-18 x86_64 randconfig-004-20240705 gcc-13 x86_64 randconfig-005-20240705 gcc-13 x86_64 randconfig-006-20240705 gcc-13 x86_64 randconfig-011-20240705 clang-18 x86_64 randconfig-012-20240705 gcc-9 x86_64 randconfig-013-20240705 clang-18 x86_64 randconfig-014-20240705 gcc-13 x86_64 randconfig-015-20240705 clang-18 x86_64 randconfig-016-20240705 gcc-9 x86_64 randconfig-071-20240705 gcc-13 x86_64 randconfig-072-20240705 gcc-13 x86_64 randconfig-073-20240705 clang-18 x86_64 randconfig-074-20240705 gcc-13 x86_64 randconfig-075-20240705 clang-18 x86_64 randconfig-076-20240705 clang-18 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-5.10] BUILD SUCCESS 3486fdb9082a474750f2067f80fb835c2f480a18
by kernel test robot 06 Jul '24

06 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-5.10 branch HEAD: 3486fdb9082a474750f2067f80fb835c2f480a18 !9373 ALSA: core: Fix NULL module pointer assignment at card init Warning ids grouped by kconfigs: recent_errors `-- x86_64-allnoconfig `-- drivers-arm-spe-spe.c:linux-perf-arm_pmu.h-is-included-more-than-once. elapsed time: 729m configs tested: 34 configs skipped: 127 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240705 clang-19 arm64 randconfig-002-20240705 clang-19 arm64 randconfig-003-20240705 clang-19 arm64 randconfig-004-20240705 clang-19 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240705 gcc-7 x86_64 buildonly-randconfig-002-20240705 gcc-13 x86_64 buildonly-randconfig-003-20240705 clang-18 x86_64 buildonly-randconfig-004-20240705 clang-18 x86_64 buildonly-randconfig-005-20240705 clang-18 x86_64 buildonly-randconfig-006-20240705 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240705 clang-18 x86_64 randconfig-002-20240705 gcc-13 x86_64 randconfig-003-20240705 clang-18 x86_64 randconfig-004-20240705 gcc-13 x86_64 randconfig-005-20240705 gcc-13 x86_64 randconfig-006-20240705 gcc-13 x86_64 randconfig-011-20240705 clang-18 x86_64 randconfig-012-20240705 gcc-9 x86_64 randconfig-013-20240705 clang-18 x86_64 randconfig-014-20240705 gcc-13 x86_64 randconfig-015-20240705 clang-18 x86_64 randconfig-016-20240705 gcc-9 x86_64 randconfig-071-20240705 gcc-13 x86_64 randconfig-072-20240705 gcc-13 x86_64 randconfig-073-20240705 clang-18 x86_64 randconfig-074-20240705 gcc-13 x86_64 randconfig-075-20240705 clang-18 x86_64 randconfig-076-20240705 clang-18 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH openEuler-22.03-LTS-SP1 0/3] CVE-2024-27017
by Wang Hai 05 Jul '24

05 Jul '24

CVE-2024-27017 Pablo Neira Ayuso (3): netfilter: nft_set_pipapo: .walk does not deal with generations netfilter: nft_set_pipapo: walk over current view on netlink dump netfilter: nf_tables: missing iterator type in lookup walk include/net/netfilter/nf_tables.h | 13 +++++++++++++ net/netfilter/nf_tables_api.c | 6 ++++++ net/netfilter/nft_lookup.c | 1 + net/netfilter/nft_set_pipapo.c | 8 +++++++- 4 files changed, 27 insertions(+), 1 deletion(-) -- 2.17.1

2 4

[PATCH openEuler-22.03-LTS-SP1] clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
by Wang Hai 05 Jul '24

05 Jul '24

From: Jiasheng Jiang <jiasheng(a)iscas.ac.cn> stable inclusion from stable-v5.10.201 commit 3994387ba3564976731179c4d4a6d7850ddda71a category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9RFZV CVE: CVE-2023-52873 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 1f57f78fbacf630430bf954e5a84caafdfea30c0 ] Add the check for the return value of mtk_alloc_clk_data() in order to avoid NULL pointer dereference. Fixes: 710774e04861 ("clk: mediatek: Add MT6779 clock support") Signed-off-by: Jiasheng Jiang <jiasheng(a)iscas.ac.cn> Link: https://lore.kernel.org/r/20230912093407.21505-2-jiasheng@iscas.ac.cn Reviewed-by: AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> Signed-off-by: Stephen Boyd <sboyd(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Wang Hai <wanghai38(a)huawei.com> --- drivers/clk/mediatek/clk-mt6779.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/drivers/clk/mediatek/clk-mt6779.c b/drivers/clk/mediatek/clk-mt6779.c index 6e0d3a166729..cf720651fc53 100644 --- a/drivers/clk/mediatek/clk-mt6779.c +++ b/drivers/clk/mediatek/clk-mt6779.c @@ -1216,6 +1216,8 @@ static int clk_mt6779_apmixed_probe(struct platform_device *pdev) struct device_node *node = pdev->dev.of_node; clk_data = mtk_alloc_clk_data(CLK_APMIXED_NR_CLK); + if (!clk_data) + return -ENOMEM; mtk_clk_register_plls(node, plls, ARRAY_SIZE(plls), clk_data); @@ -1236,6 +1238,8 @@ static int clk_mt6779_top_probe(struct platform_device *pdev) return PTR_ERR(base); clk_data = mtk_alloc_clk_data(CLK_TOP_NR_CLK); + if (!clk_data) + return -ENOMEM; mtk_clk_register_fixed_clks(top_fixed_clks, ARRAY_SIZE(top_fixed_clks), clk_data); -- 2.17.1

2 1

[PATCH OLK-5.10 v2] net: fix one NULL pointer dereference bug in net_rship module
by Liu Jian 05 Jul '24

05 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAAZJ8 -------------------------------- The call trace as below: Call trace: __netdev_alloc_skb+0x8c/0x1e0 ad_lacpdu_send+0x34/0x18c [bonding] ad_tx_machine+0xcc/0x174 [bonding] bond_3ad_state_machine_handler+0x120/0x470 [bonding] process_one_work+0x1d8/0x4e0 worker_thread+0x154/0x420 kthread+0x108/0x150 ret_from_fork+0x10/0x18 Fixes: 64ba5634c4c6 ("net: add some bpf hooks in tcp stack for network numa relationship") Signed-off-by: Liu Jian <liujian56(a)huawei.com> --- include/net/net_rship.h | 3 +++ 1 file changed, 3 insertions(+) diff --git a/include/net/net_rship.h b/include/net/net_rship.h index ad8af5a5cb9b..dda4dd732bd0 100644 --- a/include/net/net_rship.h +++ b/include/net/net_rship.h @@ -222,6 +222,9 @@ static inline void net_rship_skb_record_dev_rxinfo(struct sk_buff *skb, struct n if (gnet_bpf_enabled(GNET_RCV_NIC_NODE)) { struct sched_net_rship_skb *ext = __get_skb_net_rship(skb); + if (!dev) + return; + ext->rx_dev_idx = dev->ifindex; ext->rx_dev_net_cookie = dev_net(dev)->net_cookie; } -- 2.34.1

2 1

[openeuler:OLK-6.6 3342/10589] crypto/asymmetric_keys/pgp_public_key.c:359:undefined reference to `public_key_subtype'
by kernel test robot 05 Jul '24

05 Jul '24

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 17b5ba51d6bc20767e5e5c03df0acf15609b6d11 commit: 43d4042e06d2bf96adf67d25e8d91653507a4cf9 [3342/10589] KEYS: Provide a function to load keys from a PGP keyring blob config: x86_64-randconfig-014-20240705 (https://download.01.org/0day-ci/archive/20240705/202407051911.Va4emssv-lkp@…) compiler: gcc-13 (Ubuntu 13.2.0-4ubuntu3) 13.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20240705/202407051911.Va4emssv-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407051911.Va4emssv-lkp@intel.com/ All errors (new ones prefixed by >>): ld: vmlinux.o: in function `pgp_key_parse': >> crypto/asymmetric_keys/pgp_public_key.c:359:(.text+0x1b11e1c): undefined reference to `public_key_subtype' >> ld: crypto/asymmetric_keys/pgp_public_key.c:359:(.text+0x1b11e3b): undefined reference to `public_key_subtype' ld: crypto/asymmetric_keys/pgp_public_key.c:360:(.text+0x1b11e67): undefined reference to `public_key_subtype' >> ld: crypto/asymmetric_keys/pgp_public_key.c:369:(.text+0x1b11f38): undefined reference to `public_key_free' ld: crypto/asymmetric_keys/pgp_public_key.c:359:(.text+0x1b11fbf): undefined reference to `public_key_subtype' Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for PGP_KEY_PARSER Depends on [n]: CRYPTO [=y] && ASYMMETRIC_KEY_TYPE [=y] && ASYMMETRIC_PUBLIC_KEY_SUBTYPE [=n] Selected by [y]: - PGP_PRELOAD [=y] && CRYPTO [=y] && ASYMMETRIC_KEY_TYPE [=y] vim +359 crypto/asymmetric_keys/pgp_public_key.c 4e59d757dc3f7f Roberto Sassu 2023-09-12 300 4e59d757dc3f7f Roberto Sassu 2023-09-12 301 /* 4e59d757dc3f7f Roberto Sassu 2023-09-12 302 * Attempt to parse the instantiation data blob for a key as a PGP packet 4e59d757dc3f7f Roberto Sassu 2023-09-12 303 * message holding a key. 4e59d757dc3f7f Roberto Sassu 2023-09-12 304 */ 4e59d757dc3f7f Roberto Sassu 2023-09-12 305 static int pgp_key_parse(struct key_preparsed_payload *prep) 4e59d757dc3f7f Roberto Sassu 2023-09-12 306 { 4e59d757dc3f7f Roberto Sassu 2023-09-12 307 struct pgp_key_data_parse_context ctx; 4e59d757dc3f7f Roberto Sassu 2023-09-12 308 int ret; 4e59d757dc3f7f Roberto Sassu 2023-09-12 309 4e59d757dc3f7f Roberto Sassu 2023-09-12 310 kenter(""); 4e59d757dc3f7f Roberto Sassu 2023-09-12 311 4e59d757dc3f7f Roberto Sassu 2023-09-12 312 memset(&ctx, 0, sizeof(ctx)); e8c01f299ab793 David Howells 2023-09-12 313 ctx.pgp.types_of_interest = (1 << PGP_PKT_PUBLIC_KEY) | e8c01f299ab793 David Howells 2023-09-12 314 (1 << PGP_PKT_USER_ID); 4e59d757dc3f7f Roberto Sassu 2023-09-12 315 ctx.pgp.process_packet = pgp_process_public_key; 4e59d757dc3f7f Roberto Sassu 2023-09-12 316 4e59d757dc3f7f Roberto Sassu 2023-09-12 317 ret = pgp_parse_packets(prep->data, prep->datalen, &ctx.pgp); 4e59d757dc3f7f Roberto Sassu 2023-09-12 318 if (ret < 0) 4e59d757dc3f7f Roberto Sassu 2023-09-12 319 goto error; 4e59d757dc3f7f Roberto Sassu 2023-09-12 320 e8c01f299ab793 David Howells 2023-09-12 321 if (!ctx.fingerprint) { e8c01f299ab793 David Howells 2023-09-12 322 ret = -EINVAL; e8c01f299ab793 David Howells 2023-09-12 323 goto error; e8c01f299ab793 David Howells 2023-09-12 324 } e8c01f299ab793 David Howells 2023-09-12 325 e8c01f299ab793 David Howells 2023-09-12 326 if (ctx.user_id && ctx.user_id_len > 0) { e8c01f299ab793 David Howells 2023-09-12 327 /* Propose a description for the key e8c01f299ab793 David Howells 2023-09-12 328 * (user ID without the comment) e8c01f299ab793 David Howells 2023-09-12 329 */ e8c01f299ab793 David Howells 2023-09-12 330 size_t ulen = ctx.user_id_len, flen = ctx.fingerprint_len; e8c01f299ab793 David Howells 2023-09-12 331 const char *p; e8c01f299ab793 David Howells 2023-09-12 332 e8c01f299ab793 David Howells 2023-09-12 333 p = memchr(ctx.user_id, '(', ulen); e8c01f299ab793 David Howells 2023-09-12 334 if (p) { e8c01f299ab793 David Howells 2023-09-12 335 /* Remove the comment */ e8c01f299ab793 David Howells 2023-09-12 336 do { e8c01f299ab793 David Howells 2023-09-12 337 p--; e8c01f299ab793 David Howells 2023-09-12 338 } while (*p == ' ' && p > ctx.user_id); e8c01f299ab793 David Howells 2023-09-12 339 if (*p != ' ') e8c01f299ab793 David Howells 2023-09-12 340 p++; e8c01f299ab793 David Howells 2023-09-12 341 ulen = p - ctx.user_id; e8c01f299ab793 David Howells 2023-09-12 342 } e8c01f299ab793 David Howells 2023-09-12 343 e8c01f299ab793 David Howells 2023-09-12 344 if (ulen > 255 - 9) e8c01f299ab793 David Howells 2023-09-12 345 ulen = 255 - 9; e8c01f299ab793 David Howells 2023-09-12 346 prep->description = kmalloc(ulen + 1 + 8 + 1, GFP_KERNEL); e8c01f299ab793 David Howells 2023-09-12 347 ret = -ENOMEM; e8c01f299ab793 David Howells 2023-09-12 348 if (!prep->description) e8c01f299ab793 David Howells 2023-09-12 349 goto error; e8c01f299ab793 David Howells 2023-09-12 350 memcpy(prep->description, ctx.user_id, ulen); e8c01f299ab793 David Howells 2023-09-12 351 prep->description[ulen] = ' '; e8c01f299ab793 David Howells 2023-09-12 352 memcpy(prep->description + ulen + 1, e8c01f299ab793 David Howells 2023-09-12 353 ctx.fingerprint + flen - 8, 8); e8c01f299ab793 David Howells 2023-09-12 354 prep->description[ulen + 9] = 0; e8c01f299ab793 David Howells 2023-09-12 355 pr_debug("desc '%s'\n", prep->description); e8c01f299ab793 David Howells 2023-09-12 356 } e8c01f299ab793 David Howells 2023-09-12 357 4e59d757dc3f7f Roberto Sassu 2023-09-12 358 /* We're pinning the module by being linked against it */ 4e59d757dc3f7f Roberto Sassu 2023-09-12 @359 __module_get(public_key_subtype.owner); 4e59d757dc3f7f Roberto Sassu 2023-09-12 360 prep->payload.data[asym_subtype] = &public_key_subtype; 4e59d757dc3f7f Roberto Sassu 2023-09-12 361 prep->payload.data[asym_key_ids] = pgp_key_generate_id(&ctx); 4e59d757dc3f7f Roberto Sassu 2023-09-12 362 prep->payload.data[asym_crypto] = ctx.pub; 4e59d757dc3f7f Roberto Sassu 2023-09-12 363 prep->quotalen = 100; 4e59d757dc3f7f Roberto Sassu 2023-09-12 364 kfree(ctx.fingerprint); 4e59d757dc3f7f Roberto Sassu 2023-09-12 365 kfree(ctx.raw_fingerprint); 4e59d757dc3f7f Roberto Sassu 2023-09-12 366 return 0; 4e59d757dc3f7f Roberto Sassu 2023-09-12 367 4e59d757dc3f7f Roberto Sassu 2023-09-12 368 error: 4e59d757dc3f7f Roberto Sassu 2023-09-12 @369 public_key_free(ctx.pub); 4e59d757dc3f7f Roberto Sassu 2023-09-12 370 kfree(ctx.fingerprint); 4e59d757dc3f7f Roberto Sassu 2023-09-12 371 kfree(ctx.raw_fingerprint); 4e59d757dc3f7f Roberto Sassu 2023-09-12 372 return ret; 4e59d757dc3f7f Roberto Sassu 2023-09-12 373 } 4e59d757dc3f7f Roberto Sassu 2023-09-12 374 :::::: The code at line 359 was first introduced by commit :::::: 4e59d757dc3f7f2e2a646a2e3f0f271ae4599eeb KEYS: PGP data parser :::::: TO: Roberto Sassu <roberto.sassu(a)huawei.com> :::::: CC: zgzxx <zhangguangzhi3(a)huawei.com> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6] net: fix wrong return value in bpf_sock_ops_get_uid_gid
by Liu Jian 05 Jul '24

05 Jul '24

hulk inclusion category: feature bugzilla: https://gitee.com/openeuler/kernel/issues/I8KU3B CVE: NA -------------------------------- We should return 0 on success. Fixes: e62b4a1c5593 ("bpf: Add bpf_get_sockops_uid_gid helper function") Signed-off-by: Liu Jian <liujian56(a)huawei.com> --- net/core/filter.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/net/core/filter.c b/net/core/filter.c index 6ec353bf36f3..c88f51f7d3f9 100644 --- a/net/core/filter.c +++ b/net/core/filter.c @@ -5675,7 +5675,7 @@ static int bpf_sock_ops_get_uid_gid(struct bpf_sock_ops_kern *bpf_sock, *(u32 *)optval = from_kgid_munged(sock_net(sk)->user_ns, gid); *((u32 *)optval + 1) = from_kuid_munged(sock_net(sk)->user_ns, uid); - return sizeof(u64); + return 0; } static int bpf_sk_original_addr(struct bpf_sock_ops_kern *bpf_sock, -- 2.34.1

2 1

[PATCH OLK-5.10] net: fix one NULL pointer dereference bug in net_rship module
by Liu Jian 05 Jul '24

05 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAAZJ8 -------------------------------- The call trace as below: Call trace: __netdev_alloc_skb+0x8c/0x1e0 ad_lacpdu_send+0x34/0x18c [bonding] ad_tx_machine+0xcc/0x174 [bonding] bond_3ad_state_machine_handler+0x120/0x470 [bonding] process_one_work+0x1d8/0x4e0 worker_thread+0x154/0x420 kthread+0x108/0x150 ret_from_fork+0x10/0x18 Signed-off-by: Liu Jian <liujian56(a)huawei.com> --- include/net/net_rship.h | 3 +++ 1 file changed, 3 insertions(+) diff --git a/include/net/net_rship.h b/include/net/net_rship.h index ad8af5a5cb9b..dda4dd732bd0 100644 --- a/include/net/net_rship.h +++ b/include/net/net_rship.h @@ -222,6 +222,9 @@ static inline void net_rship_skb_record_dev_rxinfo(struct sk_buff *skb, struct n if (gnet_bpf_enabled(GNET_RCV_NIC_NODE)) { struct sched_net_rship_skb *ext = __get_skb_net_rship(skb); + if (!dev) + return; + ext->rx_dev_idx = dev->ifindex; ext->rx_dev_net_cookie = dev_net(dev)->net_cookie; } -- 2.34.1

2 1

[PATCH openEuler-1.0-LTS] drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
by Hui Tang 05 Jul '24

05 Jul '24

From: Tuo Li <islituo(a)gmail.com> mainline inclusion from mainline-v6.6-rc1 commit 2e63972a2de14482d0eae1a03a73e379f1c3f44c category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I917IV CVE: CVE-2024-22386 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ----------------------------------- The variable crtc->state->event is often protected by the lock crtc->dev->event_lock when is accessed. However, it is accessed as a condition of an if statement in exynos_drm_crtc_atomic_disable() without holding the lock: if (crtc->state->event && !crtc->state->active) However, if crtc->state->event is changed to NULL by another thread right after the conditions of the if statement is checked to be true, a null-pointer dereference can occur in drm_crtc_send_vblank_event(): e->pipe = pipe; To fix this possible null-pointer dereference caused by data race, the spin lock coverage is extended to protect the if statement as well as the function call to drm_crtc_send_vblank_event(). Reported-by: BassCheck <bass(a)buaa.edu.cn> Link: https://sites.google.com/view/basscheck/home Signed-off-by: Tuo Li <islituo(a)gmail.com> Reviewed-by: Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> Added relevant link. Signed-off-by: Inki Dae <inki.dae(a)samsung.com> Signed-off-by: Hui Tang <tanghui20(a)huawei.com> --- drivers/gpu/drm/exynos/exynos_drm_crtc.c | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/drivers/gpu/drm/exynos/exynos_drm_crtc.c b/drivers/gpu/drm/exynos/exynos_drm_crtc.c index 2696289ecc78..b3e23ace5869 100644 --- a/drivers/gpu/drm/exynos/exynos_drm_crtc.c +++ b/drivers/gpu/drm/exynos/exynos_drm_crtc.c @@ -43,13 +43,12 @@ static void exynos_drm_crtc_atomic_disable(struct drm_crtc *crtc, if (exynos_crtc->ops->disable) exynos_crtc->ops->disable(exynos_crtc); + spin_lock_irq(&crtc->dev->event_lock); if (crtc->state->event && !crtc->state->active) { - spin_lock_irq(&crtc->dev->event_lock); drm_crtc_send_vblank_event(crtc, crtc->state->event); - spin_unlock_irq(&crtc->dev->event_lock); - crtc->state->event = NULL; } + spin_unlock_irq(&crtc->dev->event_lock); } static int exynos_crtc_atomic_check(struct drm_crtc *crtc, -- 2.34.1

2 1

[PATCH openEuler-1.0-LTS] drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
by Hui Tang 05 Jul '24

05 Jul '24

From: Tuo Li <islituo(a)gmail.com> stable inclusion from stable-v6.6-rc1 commit 2e63972a2de14482d0eae1a03a73e379f1c3f44c category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I917IV CVE: CVE-2024-22386 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… --------------------------- The variable crtc->state->event is often protected by the lock crtc->dev->event_lock when is accessed. However, it is accessed as a condition of an if statement in exynos_drm_crtc_atomic_disable() without holding the lock: if (crtc->state->event && !crtc->state->active) However, if crtc->state->event is changed to NULL by another thread right after the conditions of the if statement is checked to be true, a null-pointer dereference can occur in drm_crtc_send_vblank_event(): e->pipe = pipe; To fix this possible null-pointer dereference caused by data race, the spin lock coverage is extended to protect the if statement as well as the function call to drm_crtc_send_vblank_event(). Reported-by: BassCheck <bass(a)buaa.edu.cn> Link: https://sites.google.com/view/basscheck/home Signed-off-by: Tuo Li <islituo(a)gmail.com> Reviewed-by: Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> Added relevant link. Signed-off-by: Inki Dae <inki.dae(a)samsung.com> Signed-off-by: Hui Tang <tanghui20(a)huawei.com> --- drivers/gpu/drm/exynos/exynos_drm_crtc.c | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/drivers/gpu/drm/exynos/exynos_drm_crtc.c b/drivers/gpu/drm/exynos/exynos_drm_crtc.c index 2696289ecc78..b3e23ace5869 100644 --- a/drivers/gpu/drm/exynos/exynos_drm_crtc.c +++ b/drivers/gpu/drm/exynos/exynos_drm_crtc.c @@ -43,13 +43,12 @@ static void exynos_drm_crtc_atomic_disable(struct drm_crtc *crtc, if (exynos_crtc->ops->disable) exynos_crtc->ops->disable(exynos_crtc); + spin_lock_irq(&crtc->dev->event_lock); if (crtc->state->event && !crtc->state->active) { - spin_lock_irq(&crtc->dev->event_lock); drm_crtc_send_vblank_event(crtc, crtc->state->event); - spin_unlock_irq(&crtc->dev->event_lock); - crtc->state->event = NULL; } + spin_unlock_irq(&crtc->dev->event_lock); } static int exynos_crtc_atomic_check(struct drm_crtc *crtc, -- 2.34.1

2 1

[PATCH openEuler-22.03-LTS-SP1 0/3] CVE-2024-38598
by Li Nan 05 Jul '24

05 Jul '24

Li Nan (2): Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter" md/raid10: check slab-out-of-bounds in md_bitmap_get_counter Yu Kuai (1): md: fix resync softlockup when bitmap size is less than array size drivers/md/md-bitmap.c | 24 +++++++++++------------- 1 file changed, 11 insertions(+), 13 deletions(-) -- 2.39.2

2 4

[PATCH OLK-5.10 0/3] CVE-2024-38598
by Li Nan 05 Jul '24

05 Jul '24

Li Nan (2): Revert "md/raid10: fix slab-out-of-bounds in md_bitmap_get_counter" md/raid10: check slab-out-of-bounds in md_bitmap_get_counter Yu Kuai (1): md: fix resync softlockup when bitmap size is less than array size drivers/md/md-bitmap.c | 24 +++++++++++------------- 1 file changed, 11 insertions(+), 13 deletions(-) -- 2.39.2

2 4

[OLK-6.6] usb-storage: alauda: Check whether the media is initialized
by Jinjiang Tu 05 Jul '24

05 Jul '24

From: Shichao Lai <shichaorai(a)gmail.com> mainline inclusion from mainline-v6.10-rc4 commit 16637fea001ab3c8df528a8995b3211906165a30 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6YQV CVE: CVE-2024-38619 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- The member "uzonesize" of struct alauda_info will remain 0 if alauda_init_media() fails, potentially causing divide errors in alauda_read_data() and alauda_write_lba(). - Add a member "media_initialized" to struct alauda_info. - Change a condition in alauda_check_media() to ensure the first initialization. - Add an error check for the return value of alauda_init_media(). Fixes: e80b0fade09e ("[PATCH] USB Storage: add alauda support") Reported-by: xingwei lee <xrivendell7(a)gmail.com> Reported-by: yue sun <samsun1006219(a)gmail.com> Reviewed-by: Alan Stern <stern(a)rowland.harvard.edu> Signed-off-by: Shichao Lai <shichaorai(a)gmail.com> Link: https://lore.kernel.org/r/20240526012745.2852061-1-shichaorai@gmail.com Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Jinjiang Tu <tujinjiang(a)huawei.com> --- drivers/usb/storage/alauda.c | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/drivers/usb/storage/alauda.c b/drivers/usb/storage/alauda.c index 115f05a6201a..40d34cc28344 100644 --- a/drivers/usb/storage/alauda.c +++ b/drivers/usb/storage/alauda.c @@ -105,6 +105,8 @@ struct alauda_info { unsigned char sense_key; unsigned long sense_asc; /* additional sense code */ unsigned long sense_ascq; /* additional sense code qualifier */ + + bool media_initialized; }; #define short_pack(lsb,msb) ( ((u16)(lsb)) | ( ((u16)(msb))<<8 ) ) @@ -476,11 +478,12 @@ static int alauda_check_media(struct us_data *us) } /* Check for media change */ - if (status[0] & 0x08) { + if (status[0] & 0x08 || !info->media_initialized) { usb_stor_dbg(us, "Media change detected\n"); alauda_free_maps(&MEDIA_INFO(us)); - alauda_init_media(us); - + rc = alauda_init_media(us); + if (rc == USB_STOR_TRANSPORT_GOOD) + info->media_initialized = true; info->sense_key = UNIT_ATTENTION; info->sense_asc = 0x28; info->sense_ascq = 0x00; -- 2.25.1

1 0

[openEuler-22.03-LTS-SP1] ksmbd: fix wrong DataOffset validation of create context
by Jinjiang Tu 05 Jul '24

05 Jul '24

From: Namjae Jeon <linkinjeon(a)kernel.org> mainline inclusion from mainline-v6.6-rc1 commit 17d5b135bb720832364e8f55f6a887a3c7ec8fdb category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAAVBH CVE: CVE-2023-4458 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- If ->DataOffset of create context is 0, DataBuffer size is not correctly validated. This patch change wrong validation code and consider tag length in request. Cc: stable(a)vger.kernel.org Reported-by: zdi-disclosures(a)trendmicro.com # ZDI-CAN-21824 Signed-off-by: Namjae Jeon <linkinjeon(a)kernel.org> Signed-off-by: Steve French <stfrench(a)microsoft.com> Conflicts: fs/ksmbd/oplock.c fs/smb/server/oplock.c [oplock.c hasn't moved from fs/ksmbd to fs/smb/server.] Signed-off-by: Jinjiang Tu <tujinjiang(a)huawei.com> --- fs/ksmbd/oplock.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fs/ksmbd/oplock.c b/fs/ksmbd/oplock.c index fc5b2137002f..6df455a54b70 100644 --- a/fs/ksmbd/oplock.c +++ b/fs/ksmbd/oplock.c @@ -1488,7 +1488,7 @@ struct create_context *smb2_find_context_vals(void *open_req, const char *tag, i name_len < 4 || name_off + name_len > cc_len || (value_off & 0x7) != 0 || - (value_off && (value_off < name_off + name_len)) || + (value_len && value_off < name_off + (name_len < 8 ? 8 : name_len)) || ((u64)value_off + value_len > cc_len)) return ERR_PTR(-EINVAL); -- 2.25.1

1 0

[OLK-5.10] ksmbd: fix wrong DataOffset validation of create context
by Jinjiang Tu 05 Jul '24

05 Jul '24

From: Namjae Jeon <linkinjeon(a)kernel.org> mainline inclusion from mainline-v6.6-rc1 commit 17d5b135bb720832364e8f55f6a887a3c7ec8fdb category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAAVBH CVE: CVE-2023-4458 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- If ->DataOffset of create context is 0, DataBuffer size is not correctly validated. This patch change wrong validation code and consider tag length in request. Cc: stable(a)vger.kernel.org Reported-by: zdi-disclosures(a)trendmicro.com # ZDI-CAN-21824 Signed-off-by: Namjae Jeon <linkinjeon(a)kernel.org> Signed-off-by: Steve French <stfrench(a)microsoft.com> Conflicts: fs/ksmbd/oplock.c fs/smb/server/oplock.c [oplock.c hasn't moved from fs/ksmbd to fs/smb/server.] Signed-off-by: Jinjiang Tu <tujinjiang(a)huawei.com> --- fs/ksmbd/oplock.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fs/ksmbd/oplock.c b/fs/ksmbd/oplock.c index fc5b2137002f..6df455a54b70 100644 --- a/fs/ksmbd/oplock.c +++ b/fs/ksmbd/oplock.c @@ -1488,7 +1488,7 @@ struct create_context *smb2_find_context_vals(void *open_req, const char *tag, i name_len < 4 || name_off + name_len > cc_len || (value_off & 0x7) != 0 || - (value_off && (value_off < name_off + name_len)) || + (value_len && value_off < name_off + (name_len < 8 ? 8 : name_len)) || ((u64)value_off + value_len > cc_len)) return ERR_PTR(-EINVAL); -- 2.25.1

1 0

[PATCH OLK-6.6] usb-storage: alauda: Check whether the media is initialized
by Jinjiang Tu 05 Jul '24

05 Jul '24

From: Shichao Lai <shichaorai(a)gmail.com> mainline inclusion from mainline-v6.10-rc4 commit 16637fea001ab3c8df528a8995b3211906165a30 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6YQV CVE: CVE-2024-38619 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- The member "uzonesize" of struct alauda_info will remain 0 if alauda_init_media() fails, potentially causing divide errors in alauda_read_data() and alauda_write_lba(). - Add a member "media_initialized" to struct alauda_info. - Change a condition in alauda_check_media() to ensure the first initialization. - Add an error check for the return value of alauda_init_media(). Fixes: e80b0fade09e ("[PATCH] USB Storage: add alauda support") Reported-by: xingwei lee <xrivendell7(a)gmail.com> Reported-by: yue sun <samsun1006219(a)gmail.com> Reviewed-by: Alan Stern <stern(a)rowland.harvard.edu> Signed-off-by: Shichao Lai <shichaorai(a)gmail.com> Link: https://lore.kernel.org/r/20240526012745.2852061-1-shichaorai@gmail.com Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Jinjiang Tu <tujinjiang(a)huawei.com> --- drivers/usb/storage/alauda.c | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/drivers/usb/storage/alauda.c b/drivers/usb/storage/alauda.c index 115f05a6201a..40d34cc28344 100644 --- a/drivers/usb/storage/alauda.c +++ b/drivers/usb/storage/alauda.c @@ -105,6 +105,8 @@ struct alauda_info { unsigned char sense_key; unsigned long sense_asc; /* additional sense code */ unsigned long sense_ascq; /* additional sense code qualifier */ + + bool media_initialized; }; #define short_pack(lsb,msb) ( ((u16)(lsb)) | ( ((u16)(msb))<<8 ) ) @@ -476,11 +478,12 @@ static int alauda_check_media(struct us_data *us) } /* Check for media change */ - if (status[0] & 0x08) { + if (status[0] & 0x08 || !info->media_initialized) { usb_stor_dbg(us, "Media change detected\n"); alauda_free_maps(&MEDIA_INFO(us)); - alauda_init_media(us); - + rc = alauda_init_media(us); + if (rc == USB_STOR_TRANSPORT_GOOD) + info->media_initialized = true; info->sense_key = UNIT_ATTENTION; info->sense_asc = 0x28; info->sense_ascq = 0x00; -- 2.25.1

2 1

[PATCH openEuler-22.03-LTS-SP1] ksmbd: fix wrong DataOffset validation of create context
by Jinjiang Tu 05 Jul '24

05 Jul '24

From: Namjae Jeon <linkinjeon(a)kernel.org> mainline inclusion from mainline-v6.6-rc1 commit 17d5b135bb720832364e8f55f6a887a3c7ec8fdb category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAAVBH CVE: CVE-2023-4458 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- If ->DataOffset of create context is 0, DataBuffer size is not correctly validated. This patch change wrong validation code and consider tag length in request. Cc: stable(a)vger.kernel.org Reported-by: zdi-disclosures(a)trendmicro.com # ZDI-CAN-21824 Signed-off-by: Namjae Jeon <linkinjeon(a)kernel.org> Signed-off-by: Steve French <stfrench(a)microsoft.com> Conflicts: fs/ksmbd/oplock.c fs/smb/server/oplock.c [oplock.c hasn't moved from fs/ksmbd to fs/smb/server.] Signed-off-by: Jinjiang Tu <tujinjiang(a)huawei.com> --- fs/ksmbd/oplock.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fs/ksmbd/oplock.c b/fs/ksmbd/oplock.c index fc5b2137002f..6df455a54b70 100644 --- a/fs/ksmbd/oplock.c +++ b/fs/ksmbd/oplock.c @@ -1488,7 +1488,7 @@ struct create_context *smb2_find_context_vals(void *open_req, const char *tag, i name_len < 4 || name_off + name_len > cc_len || (value_off & 0x7) != 0 || - (value_off && (value_off < name_off + name_len)) || + (value_len && value_off < name_off + (name_len < 8 ? 8 : name_len)) || ((u64)value_off + value_len > cc_len)) return ERR_PTR(-EINVAL); -- 2.25.1

2 1

[PATCH OLK-5.10] ksmbd: fix wrong DataOffset validation of create context
by Jinjiang Tu 05 Jul '24

05 Jul '24

From: Namjae Jeon <linkinjeon(a)kernel.org> mainline inclusion from mainline-v6.6-rc1 commit 17d5b135bb720832364e8f55f6a887a3c7ec8fdb category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IAAVBH CVE: CVE-2023-4458 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- If ->DataOffset of create context is 0, DataBuffer size is not correctly validated. This patch change wrong validation code and consider tag length in request. Cc: stable(a)vger.kernel.org Reported-by: zdi-disclosures(a)trendmicro.com # ZDI-CAN-21824 Signed-off-by: Namjae Jeon <linkinjeon(a)kernel.org> Signed-off-by: Steve French <stfrench(a)microsoft.com> Conflicts: fs/ksmbd/oplock.c fs/smb/server/oplock.c [oplock.c hasn't moved from fs/ksmbd to fs/smb/server.] Signed-off-by: Jinjiang Tu <tujinjiang(a)huawei.com> --- fs/ksmbd/oplock.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fs/ksmbd/oplock.c b/fs/ksmbd/oplock.c index fc5b2137002f..6df455a54b70 100644 --- a/fs/ksmbd/oplock.c +++ b/fs/ksmbd/oplock.c @@ -1488,7 +1488,7 @@ struct create_context *smb2_find_context_vals(void *open_req, const char *tag, i name_len < 4 || name_off + name_len > cc_len || (value_off & 0x7) != 0 || - (value_off && (value_off < name_off + name_len)) || + (value_len && value_off < name_off + (name_len < 8 ? 8 : name_len)) || ((u64)value_off + value_len > cc_len)) return ERR_PTR(-EINVAL); -- 2.25.1

2 1

[PATCH OLK-6.6 0/1] CVE-2024-39461
by Yongqiang Liu 05 Jul '24

05 Jul '24

Nathan Chancellor (1): clk: bcm: rpi: Assign ->num before accessing ->hws drivers/clk/bcm/clk-raspberrypi.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) -- 2.34.1

2 2

[PATCH OLK-5.10 0/2] CVE-2024-23848
by Yongqiang Liu 05 Jul '24

05 Jul '24

Hans Verkuil (2): media: cec: cec-adap: always cancel work in cec_transmit_msg_fh media: cec: cec-api: add locking in cec_release() drivers/media/cec/core/cec-adap.c | 3 +-- drivers/media/cec/core/cec-api.c | 3 +++ 2 files changed, 4 insertions(+), 2 deletions(-) -- 2.34.1

2 3

[PATCH openEuler-1.0-LTS 0/2] CVE-2024-23848
by Yongqiang Liu 05 Jul '24

05 Jul '24

CVE-2024-23848 Hans Verkuil (2): media: cec: cec-adap: always cancel work in cec_transmit_msg_fh media: cec: cec-api: add locking in cec_release() drivers/media/cec/cec-adap.c | 3 +-- drivers/media/cec/cec-api.c | 3 +++ 2 files changed, 4 insertions(+), 2 deletions(-) -- 2.34.1

2 3

[PATCH openEuler-22.03-LTS-SP1] wifi: ar5523: enable proper endpoint verification
by Chen Zhongjin 05 Jul '24

05 Jul '24

From: Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> stable inclusion from stable-v5.10.219 commit ee25389df80138907bc9dcdf4a2be2067cde9a81 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SCR CVE: CVE-2024-38565 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit e120b6388d7d88635d67dcae6483f39c37111850 ] Syzkaller reports [1] hitting a warning about an endpoint in use not having an expected type to it. Fix the issue by checking for the existence of all proper endpoints with their according types intact. Sadly, this patch has not been tested on real hardware. [1] Syzkaller report: ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 0 PID: 3643 at drivers/usb/core/urb.c:504 usb_submit_urb+0xed6/0x1880 drivers/usb/core/urb.c:504 ... Call Trace: <TASK> ar5523_cmd+0x41b/0x780 drivers/net/wireless/ath/ar5523/ar5523.c:275 ar5523_cmd_read drivers/net/wireless/ath/ar5523/ar5523.c:302 [inline] ar5523_host_available drivers/net/wireless/ath/ar5523/ar5523.c:1376 [inline] ar5523_probe+0x14b0/0x1d10 drivers/net/wireless/ath/ar5523/ar5523.c:1655 usb_probe_interface+0x30f/0x7f0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:560 [inline] really_probe+0x249/0xb90 drivers/base/dd.c:639 __driver_probe_device+0x1df/0x4d0 drivers/base/dd.c:778 driver_probe_device+0x4c/0x1a0 drivers/base/dd.c:808 __device_attach_driver+0x1d4/0x2e0 drivers/base/dd.c:936 bus_for_each_drv+0x163/0x1e0 drivers/base/bus.c:427 __device_attach+0x1e4/0x530 drivers/base/dd.c:1008 bus_probe_device+0x1e8/0x2a0 drivers/base/bus.c:487 device_add+0xbd9/0x1e90 drivers/base/core.c:3517 usb_set_configuration+0x101d/0x1900 drivers/usb/core/message.c:2170 usb_generic_driver_probe+0xbe/0x100 drivers/usb/core/generic.c:238 usb_probe_device+0xd8/0x2c0 drivers/usb/core/driver.c:293 call_driver_probe drivers/base/dd.c:560 [inline] really_probe+0x249/0xb90 drivers/base/dd.c:639 __driver_probe_device+0x1df/0x4d0 drivers/base/dd.c:778 driver_probe_device+0x4c/0x1a0 drivers/base/dd.c:808 __device_attach_driver+0x1d4/0x2e0 drivers/base/dd.c:936 bus_for_each_drv+0x163/0x1e0 drivers/base/bus.c:427 __device_attach+0x1e4/0x530 drivers/base/dd.c:1008 bus_probe_device+0x1e8/0x2a0 drivers/base/bus.c:487 device_add+0xbd9/0x1e90 drivers/base/core.c:3517 usb_new_device.cold+0x685/0x10ad drivers/usb/core/hub.c:2573 hub_port_connect drivers/usb/core/hub.c:5353 [inline] hub_port_connect_change drivers/usb/core/hub.c:5497 [inline] port_event drivers/usb/core/hub.c:5653 [inline] hub_event+0x26cb/0x45d0 drivers/usb/core/hub.c:5735 process_one_work+0x9bf/0x1710 kernel/workqueue.c:2289 worker_thread+0x669/0x1090 kernel/workqueue.c:2436 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 </TASK> Reported-and-tested-by: syzbot+1bc2c2afd44f820a669f(a)syzkaller.appspotmail.com Fixes: b7d572e1871d ("ar5523: Add new driver") Signed-off-by: Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> Signed-off-by: Kalle Valo <quic_kvalo(a)quicinc.com> Link: https://msgid.link/20240408121425.29392-1-n.zhandarovich@fintech.ru Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Chen Zhongjin <chenzhongjin(a)huawei.com> --- drivers/net/wireless/ath/ar5523/ar5523.c | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/drivers/net/wireless/ath/ar5523/ar5523.c b/drivers/net/wireless/ath/ar5523/ar5523.c index efe38b2c1df7..71c2bf8817dc 100644 --- a/drivers/net/wireless/ath/ar5523/ar5523.c +++ b/drivers/net/wireless/ath/ar5523/ar5523.c @@ -1590,6 +1590,20 @@ static int ar5523_probe(struct usb_interface *intf, struct ar5523 *ar; int error = -ENOMEM; + static const u8 bulk_ep_addr[] = { + AR5523_CMD_TX_PIPE | USB_DIR_OUT, + AR5523_DATA_TX_PIPE | USB_DIR_OUT, + AR5523_CMD_RX_PIPE | USB_DIR_IN, + AR5523_DATA_RX_PIPE | USB_DIR_IN, + 0}; + + if (!usb_check_bulk_endpoints(intf, bulk_ep_addr)) { + dev_err(&dev->dev, + "Could not find all expected endpoints\n"); + error = -ENODEV; + goto out; + } + /* * Load firmware if the device requires it. This will return * -ENXIO on success and we'll get called back afer the usb -- 2.25.1

2 1

[PATCH OLK-6.6] mm/slub: Reduce memory consumption in extreme scenarios
by Liu Shixin 05 Jul '24

05 Jul '24

From: Chen Jun <chenjun102(a)huawei.com> mainline inclusion from mainline-v6.10-rc1 commit 9198ffbd2b494daae3a67cac1d59c3a2754e64cd category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAATAS Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- When kmalloc_node() is called without __GFP_THISNODE and the target node lacks sufficient memory, SLUB allocates a folio from a different node other than the requested node, instead of taking a partial slab from it. However, since the allocated folio does not belong to the requested node, on the following allocation it is deactivated and added to the partial slab list of the node it belongs to. This behavior can result in excessive memory usage when the requested node has insufficient memory, as SLUB will repeatedly allocate folios from other nodes without reusing the previously allocated ones. To prevent memory wastage, when a preferred node is indicated (not NUMA_NO_NODE) but without a prior __GFP_THISNODE constraint: 1) try to get a partial slab from target node only by having __GFP_THISNODE in pc.flags for get_partial() 2) if 1) failed, try to allocate a new slab from target node with GFP_NOWAIT | __GFP_THISNODE opportunistically. 3) if 2) failed, retry with original gfpflags which will allow get_partial() try partial lists of other nodes before potentially allocating new page from other nodes Without a preferred node, or with __GFP_THISNODE constraint, the behavior remains unchanged. On qemu with 4 numa nodes and each numa has 1G memory. Write a test ko to call kmalloc_node(196, GFP_KERNEL, 3) for (4 * 1024 + 4) * 1024 times. cat /proc/slabinfo shows: kmalloc-256 4200530 13519712 256 32 2 : tunables.. after this patch, cat /proc/slabinfo shows: kmalloc-256 4200558 4200768 256 32 2 : tunables.. Signed-off-by: Chen Jun <chenjun102(a)huawei.com> Signed-off-by: Kefeng Wang <wangkefeng.wang(a)huawei.com> Signed-off-by: Vlastimil Babka <vbabka(a)suse.cz> Signed-off-by: Liu Shixin <liushixin2(a)huawei.com> --- mm/slub.c | 25 +++++++++++++++++++++++-- 1 file changed, 23 insertions(+), 2 deletions(-) diff --git a/mm/slub.c b/mm/slub.c index ee3e32cdb7fd..7fcd18261c1e 100644 --- a/mm/slub.c +++ b/mm/slub.c @@ -2392,7 +2392,7 @@ static struct slab *get_partial(struct kmem_cache *s, int node, searchnode = numa_mem_id(); slab = get_partial_node(s, get_node(s, searchnode), pc); - if (slab || node != NUMA_NO_NODE) + if (slab || (node != NUMA_NO_NODE && (pc->flags & __GFP_THISNODE))) return slab; return get_any_partial(s, pc); @@ -3068,6 +3068,7 @@ static void *___slab_alloc(struct kmem_cache *s, gfp_t gfpflags, int node, struct slab *slab; unsigned long flags; struct partial_context pc; + bool try_thisnode = true; stat(s, ALLOC_SLOWPATH); @@ -3194,6 +3195,21 @@ static void *___slab_alloc(struct kmem_cache *s, gfp_t gfpflags, int node, new_objects: pc.flags = gfpflags; + /* + * When a preferred node is indicated but no __GFP_THISNODE + * + * 1) try to get a partial slab from target node only by having + * __GFP_THISNODE in pc.flags for get_partial() + * 2) if 1) failed, try to allocate a new slab from target node with + * GPF_NOWAIT | __GFP_THISNODE opportunistically + * 3) if 2) failed, retry with original gfpflags which will allow + * get_partial() try partial lists of other nodes before potentially + * allocating new page from other nodes + */ + if (unlikely(node != NUMA_NO_NODE && !(gfpflags & __GFP_THISNODE) + && try_thisnode)) + pc.flags = GFP_NOWAIT | __GFP_THISNODE; + pc.orig_size = orig_size; slab = get_partial(s, node, &pc); if (slab) { @@ -3215,10 +3231,15 @@ static void *___slab_alloc(struct kmem_cache *s, gfp_t gfpflags, int node, } slub_put_cpu_ptr(s->cpu_slab); - slab = new_slab(s, gfpflags, node); + slab = new_slab(s, pc.flags, node); c = slub_get_cpu_ptr(s->cpu_slab); if (unlikely(!slab)) { + if (node != NUMA_NO_NODE && !(gfpflags & __GFP_THISNODE) + && try_thisnode) { + try_thisnode = false; + goto new_objects; + } slab_out_of_memory(s, gfpflags, node); return NULL; } -- 2.25.1

2 1

[PATCH openEuler-22.03-LTS-SP1] net: openvswitch: fix overwriting ct original tuple for ICMPv6
by Jinjie Ruan 05 Jul '24

05 Jul '24

From: Ilya Maximets <i.maximets(a)ovn.org> stable inclusion from stable-v5.10.219 commit 5ab6aecbede080b44b8e34720ab72050bf1e6982 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SH5 CVE: CVE-2024-38558 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 7c988176b6c16c516474f6fceebe0f055af5eb56 ] OVS_PACKET_CMD_EXECUTE has 3 main attributes: - OVS_PACKET_ATTR_KEY - Packet metadata in a netlink format. - OVS_PACKET_ATTR_PACKET - Binary packet content. - OVS_PACKET_ATTR_ACTIONS - Actions to execute on the packet. OVS_PACKET_ATTR_KEY is parsed first to populate sw_flow_key structure with the metadata like conntrack state, input port, recirculation id, etc. Then the packet itself gets parsed to populate the rest of the keys from the packet headers. Whenever the packet parsing code starts parsing the ICMPv6 header, it first zeroes out fields in the key corresponding to Neighbor Discovery information even if it is not an ND packet. It is an 'ipv6.nd' field. However, the 'ipv6' is a union that shares the space between 'nd' and 'ct_orig' that holds the original tuple conntrack metadata parsed from the OVS_PACKET_ATTR_KEY. ND packets should not normally have conntrack state, so it's fine to share the space, but normal ICMPv6 Echo packets or maybe other types of ICMPv6 can have the state attached and it should not be overwritten. The issue results in all but the last 4 bytes of the destination address being wiped from the original conntrack tuple leading to incorrect packet matching and potentially executing wrong actions in case this packet recirculates within the datapath or goes back to userspace. ND fields should not be accessed in non-ND packets, so not clearing them should be fine. Executing memset() only for actual ND packets to avoid the issue. Initializing the whole thing before parsing is needed because ND packet may not contain all the options. The issue only affects the OVS_PACKET_CMD_EXECUTE path and doesn't affect packets entering OVS datapath from network interfaces, because in this case CT metadata is populated from skb after the packet is already parsed. Fixes: 9dd7f8907c37 ("openvswitch: Add original direction conntrack tuple to sw_flow_key.") Reported-by: Antonin Bas <antonin.bas(a)broadcom.com> Closes: https://github.com/openvswitch/ovs-issues/issues/327 Signed-off-by: Ilya Maximets <i.maximets(a)ovn.org> Acked-by: Aaron Conole <aconole(a)redhat.com> Acked-by: Eelco Chaudron <echaudro(a)redhat.com> Link: https://lore.kernel.org/r/20240509094228.1035477-1-i.maximets@ovn.org Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Jinjie Ruan <ruanjinjie(a)huawei.com> --- net/openvswitch/flow.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/net/openvswitch/flow.c b/net/openvswitch/flow.c index c9ba61413c98..9bad601c7fe8 100644 --- a/net/openvswitch/flow.c +++ b/net/openvswitch/flow.c @@ -412,7 +412,6 @@ static int parse_icmpv6(struct sk_buff *skb, struct sw_flow_key *key, */ key->tp.src = htons(icmp->icmp6_type); key->tp.dst = htons(icmp->icmp6_code); - memset(&key->ipv6.nd, 0, sizeof(key->ipv6.nd)); if (icmp->icmp6_code == 0 && (icmp->icmp6_type == NDISC_NEIGHBOUR_SOLICITATION || @@ -421,6 +420,8 @@ static int parse_icmpv6(struct sk_buff *skb, struct sw_flow_key *key, struct nd_msg *nd; int offset; + memset(&key->ipv6.nd, 0, sizeof(key->ipv6.nd)); + /* In order to process neighbor discovery options, we need the * entire packet. */ -- 2.34.1

2 1

[PATCH openEuler-22.03-LTS-SP1] btrfs: fix use-after-free after failure to create a snapshot
by Baokun Li 05 Jul '24

05 Jul '24

From: Filipe Manana <fdmanana(a)suse.com> mainline inclusion from mainline-v5.17-rc3 commit 28b21c558a3753171097193b6f6602a94169093a category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA72FO CVE: CVE-2022-48733 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- At ioctl.c:create_snapshot(), we allocate a pending snapshot structure and then attach it to the transaction's list of pending snapshots. After that we call btrfs_commit_transaction(), and if that returns an error we jump to 'fail' label, where we kfree() the pending snapshot structure. This can result in a later use-after-free of the pending snapshot: 1) We allocated the pending snapshot and added it to the transaction's list of pending snapshots; 2) We call btrfs_commit_transaction(), and it fails either at the first call to btrfs_run_delayed_refs() or btrfs_start_dirty_block_groups(). In both cases, we don't abort the transaction and we release our transaction handle. We jump to the 'fail' label and free the pending snapshot structure. We return with the pending snapshot still in the transaction's list; 3) Another task commits the transaction. This time there's no error at all, and then during the transaction commit it accesses a pointer to the pending snapshot structure that the snapshot creation task has already freed, resulting in a user-after-free. This issue could actually be detected by smatch, which produced the following warning: fs/btrfs/ioctl.c:843 create_snapshot() warn: '&pending_snapshot->list' not removed from list So fix this by not having the snapshot creation ioctl directly add the pending snapshot to the transaction's list. Instead add the pending snapshot to the transaction handle, and then at btrfs_commit_transaction() we add the snapshot to the list only when we can guarantee that any error returned after that point will result in a transaction abort, in which case the ioctl code can safely free the pending snapshot and no one can access it anymore. CC: stable(a)vger.kernel.org # 5.10+ Signed-off-by: Filipe Manana <fdmanana(a)suse.com> Signed-off-by: David Sterba <dsterba(a)suse.com> Conflicts: fs/btrfs/ioctl.c fs/btrfs/transaction.c [Because commit 74e97958121a ("btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations") was merged before this commit and current commit d0c2f4fa555eh ("btrfs: make concurrent fsyncs wait less when waiting for a transaction commit") has not been merged yet.] Signed-off-by: Baokun Li <libaokun1(a)huawei.com> --- fs/btrfs/ioctl.c | 5 +---- fs/btrfs/transaction.c | 24 ++++++++++++++++++++++++ fs/btrfs/transaction.h | 2 ++ 3 files changed, 27 insertions(+), 4 deletions(-) diff --git a/fs/btrfs/ioctl.c b/fs/btrfs/ioctl.c index 3d96eef71e2b..ca0894de2ecd 100644 --- a/fs/btrfs/ioctl.c +++ b/fs/btrfs/ioctl.c @@ -868,10 +868,7 @@ static int create_snapshot(struct btrfs_root *root, struct inode *dir, btrfs_qgroup_convert_reserved_meta(root, qgroup_reserved); qgroup_reserved = 0; - spin_lock(&fs_info->trans_lock); - list_add(&pending_snapshot->list, - &trans->transaction->pending_snapshots); - spin_unlock(&fs_info->trans_lock); + trans->pending_snapshot = pending_snapshot; ret = btrfs_commit_transaction(trans); if (ret) diff --git a/fs/btrfs/transaction.c b/fs/btrfs/transaction.c index eb9ab3d3a7b3..897ea85e04e4 100644 --- a/fs/btrfs/transaction.c +++ b/fs/btrfs/transaction.c @@ -2031,6 +2031,27 @@ static inline void btrfs_wait_delalloc_flush(struct btrfs_fs_info *fs_info) btrfs_wait_ordered_roots(fs_info, U64_MAX, 0, (u64)-1); } +/* + * Add a pending snapshot associated with the given transaction handle to the + * respective handle. This must be called after the transaction commit started + * and while holding fs_info->trans_lock. + * This serves to guarantee a caller of btrfs_commit_transaction() that it can + * safely free the pending snapshot pointer in case btrfs_commit_transaction() + * returns an error. + */ +static void add_pending_snapshot(struct btrfs_trans_handle *trans) +{ + struct btrfs_transaction *cur_trans = trans->transaction; + + if (!trans->pending_snapshot) + return; + + lockdep_assert_held(&trans->fs_info->trans_lock); + ASSERT(cur_trans->state >= TRANS_STATE_COMMIT_START); + + list_add(&trans->pending_snapshot->list, &cur_trans->pending_snapshots); +} + int btrfs_commit_transaction(struct btrfs_trans_handle *trans) { struct btrfs_fs_info *fs_info = trans->fs_info; @@ -2117,6 +2138,8 @@ int btrfs_commit_transaction(struct btrfs_trans_handle *trans) spin_lock(&fs_info->trans_lock); if (cur_trans->state >= TRANS_STATE_COMMIT_START) { + add_pending_snapshot(trans); + spin_unlock(&fs_info->trans_lock); refcount_inc(&cur_trans->use_count); ret = btrfs_end_transaction(trans); @@ -2199,6 +2222,7 @@ int btrfs_commit_transaction(struct btrfs_trans_handle *trans) * COMMIT_DOING so make sure to wait for num_writers to == 1 again. */ spin_lock(&fs_info->trans_lock); + add_pending_snapshot(trans); cur_trans->state = TRANS_STATE_COMMIT_DOING; spin_unlock(&fs_info->trans_lock); wait_event(cur_trans->writer_wait, diff --git a/fs/btrfs/transaction.h b/fs/btrfs/transaction.h index f73654d93fa0..eb26eb068fe8 100644 --- a/fs/btrfs/transaction.h +++ b/fs/btrfs/transaction.h @@ -122,6 +122,8 @@ struct btrfs_trans_handle { struct btrfs_transaction *transaction; struct btrfs_block_rsv *block_rsv; struct btrfs_block_rsv *orig_rsv; + /* Set by a task that wants to create a snapshot. */ + struct btrfs_pending_snapshot *pending_snapshot; refcount_t use_count; unsigned int type; /* -- 2.31.1

2 1

[PATCH OLK-5.10] btrfs: fix use-after-free after failure to create a snapshot
by Baokun Li 05 Jul '24

05 Jul '24

From: Filipe Manana <fdmanana(a)suse.com> mainline inclusion from mainline-v5.17-rc3 commit 28b21c558a3753171097193b6f6602a94169093a category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA72FO CVE: CVE-2022-48733 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- At ioctl.c:create_snapshot(), we allocate a pending snapshot structure and then attach it to the transaction's list of pending snapshots. After that we call btrfs_commit_transaction(), and if that returns an error we jump to 'fail' label, where we kfree() the pending snapshot structure. This can result in a later use-after-free of the pending snapshot: 1) We allocated the pending snapshot and added it to the transaction's list of pending snapshots; 2) We call btrfs_commit_transaction(), and it fails either at the first call to btrfs_run_delayed_refs() or btrfs_start_dirty_block_groups(). In both cases, we don't abort the transaction and we release our transaction handle. We jump to the 'fail' label and free the pending snapshot structure. We return with the pending snapshot still in the transaction's list; 3) Another task commits the transaction. This time there's no error at all, and then during the transaction commit it accesses a pointer to the pending snapshot structure that the snapshot creation task has already freed, resulting in a user-after-free. This issue could actually be detected by smatch, which produced the following warning: fs/btrfs/ioctl.c:843 create_snapshot() warn: '&pending_snapshot->list' not removed from list So fix this by not having the snapshot creation ioctl directly add the pending snapshot to the transaction's list. Instead add the pending snapshot to the transaction handle, and then at btrfs_commit_transaction() we add the snapshot to the list only when we can guarantee that any error returned after that point will result in a transaction abort, in which case the ioctl code can safely free the pending snapshot and no one can access it anymore. CC: stable(a)vger.kernel.org # 5.10+ Signed-off-by: Filipe Manana <fdmanana(a)suse.com> Signed-off-by: David Sterba <dsterba(a)suse.com> Conflicts: fs/btrfs/ioctl.c fs/btrfs/transaction.c [Because commit 74e97958121a ("btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations") was merged before this commit and current commit d0c2f4fa555eh ("btrfs: make concurrent fsyncs wait less when waiting for a transaction commit") has not been merged yet.] Signed-off-by: Baokun Li <libaokun1(a)huawei.com> --- fs/btrfs/ioctl.c | 5 +---- fs/btrfs/transaction.c | 24 ++++++++++++++++++++++++ fs/btrfs/transaction.h | 2 ++ 3 files changed, 27 insertions(+), 4 deletions(-) diff --git a/fs/btrfs/ioctl.c b/fs/btrfs/ioctl.c index f625c42f48a3..358b9a5937a4 100644 --- a/fs/btrfs/ioctl.c +++ b/fs/btrfs/ioctl.c @@ -868,10 +868,7 @@ static int create_snapshot(struct btrfs_root *root, struct inode *dir, btrfs_qgroup_convert_reserved_meta(root, qgroup_reserved); qgroup_reserved = 0; - spin_lock(&fs_info->trans_lock); - list_add(&pending_snapshot->list, - &trans->transaction->pending_snapshots); - spin_unlock(&fs_info->trans_lock); + trans->pending_snapshot = pending_snapshot; ret = btrfs_commit_transaction(trans); if (ret) diff --git a/fs/btrfs/transaction.c b/fs/btrfs/transaction.c index 968f5b45062c..a73b400450ce 100644 --- a/fs/btrfs/transaction.c +++ b/fs/btrfs/transaction.c @@ -2038,6 +2038,27 @@ static inline void btrfs_wait_delalloc_flush(struct btrfs_fs_info *fs_info) btrfs_wait_ordered_roots(fs_info, U64_MAX, 0, (u64)-1); } +/* + * Add a pending snapshot associated with the given transaction handle to the + * respective handle. This must be called after the transaction commit started + * and while holding fs_info->trans_lock. + * This serves to guarantee a caller of btrfs_commit_transaction() that it can + * safely free the pending snapshot pointer in case btrfs_commit_transaction() + * returns an error. + */ +static void add_pending_snapshot(struct btrfs_trans_handle *trans) +{ + struct btrfs_transaction *cur_trans = trans->transaction; + + if (!trans->pending_snapshot) + return; + + lockdep_assert_held(&trans->fs_info->trans_lock); + ASSERT(cur_trans->state >= TRANS_STATE_COMMIT_START); + + list_add(&trans->pending_snapshot->list, &cur_trans->pending_snapshots); +} + int btrfs_commit_transaction(struct btrfs_trans_handle *trans) { struct btrfs_fs_info *fs_info = trans->fs_info; @@ -2124,6 +2145,8 @@ int btrfs_commit_transaction(struct btrfs_trans_handle *trans) spin_lock(&fs_info->trans_lock); if (cur_trans->state >= TRANS_STATE_COMMIT_START) { + add_pending_snapshot(trans); + spin_unlock(&fs_info->trans_lock); refcount_inc(&cur_trans->use_count); ret = btrfs_end_transaction(trans); @@ -2206,6 +2229,7 @@ int btrfs_commit_transaction(struct btrfs_trans_handle *trans) * COMMIT_DOING so make sure to wait for num_writers to == 1 again. */ spin_lock(&fs_info->trans_lock); + add_pending_snapshot(trans); cur_trans->state = TRANS_STATE_COMMIT_DOING; spin_unlock(&fs_info->trans_lock); wait_event(cur_trans->writer_wait, diff --git a/fs/btrfs/transaction.h b/fs/btrfs/transaction.h index f73654d93fa0..eb26eb068fe8 100644 --- a/fs/btrfs/transaction.h +++ b/fs/btrfs/transaction.h @@ -122,6 +122,8 @@ struct btrfs_trans_handle { struct btrfs_transaction *transaction; struct btrfs_block_rsv *block_rsv; struct btrfs_block_rsv *orig_rsv; + /* Set by a task that wants to create a snapshot. */ + struct btrfs_pending_snapshot *pending_snapshot; refcount_t use_count; unsigned int type; /* -- 2.31.1

2 1

[PATCH openEuler-22.03-LTS-SP1 0/7] Sync bugfix from OLK-5.10
by Zheng Yejian 05 Jul '24

05 Jul '24

Daniel Borkmann (1): bpf: Fix __reg_bound_offset 64->32 var_off subreg propagation Krister Johansen (1): bpf: ensure main program has an extable Kumar Kartikeya Dwivedi (1): bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID Martin KaFai Lau (1): bpf: Check the other end of slot_type for STACK_SPILL Stanislav Fomichev (2): bpf: Don't EFAULT for getsockopt with optval=NULL bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen Wang Yufen (1): bpf: Fix memory leaks in __check_func_call kernel/bpf/cgroup.c | 24 +++++++- kernel/bpf/verifier.c | 61 ++++++++++++------- .../testing/selftests/bpf/prog_tests/align.c | 4 +- 3 files changed, 61 insertions(+), 28 deletions(-) -- 2.25.1

2 8

[openeuler:openEuler-1.0-LTS] BUILD SUCCESS 1b4ca2a2c1253c9e2d2428cc4fae541fdf3b326d
by kernel test robot 05 Jul '24

05 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS branch HEAD: 1b4ca2a2c1253c9e2d2428cc4fae541fdf3b326d !9765 i40e: Fix queues reservation for XDP Unverified Warning (likely false positive, please contact us if interested): drivers/uio/uio_hv_generic.c:311 hv_uio_probe() warn: 'pdata->recv_buf' double freed drivers/uio/uio_hv_generic.c:311 hv_uio_probe() warn: 'pdata->send_buf' double freed Warning ids grouped by kconfigs: recent_errors `-- x86_64-randconfig-161-20240704 |-- drivers-uio-uio_hv_generic.c-hv_uio_probe()-warn:pdata-recv_buf-double-freed `-- drivers-uio-uio_hv_generic.c-hv_uio_probe()-warn:pdata-send_buf-double-freed elapsed time: 734m configs tested: 34 configs skipped: 128 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig gcc-13.2.0 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240705 gcc-13.2.0 arm64 randconfig-002-20240705 gcc-13.2.0 arm64 randconfig-003-20240705 gcc-13.2.0 arm64 randconfig-004-20240705 gcc-13.2.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240705 gcc-7 x86_64 buildonly-randconfig-002-20240705 gcc-13 x86_64 buildonly-randconfig-003-20240705 clang-18 x86_64 buildonly-randconfig-004-20240705 clang-18 x86_64 buildonly-randconfig-005-20240705 clang-18 x86_64 buildonly-randconfig-006-20240705 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240705 clang-18 x86_64 randconfig-002-20240705 gcc-13 x86_64 randconfig-003-20240705 clang-18 x86_64 randconfig-004-20240705 gcc-13 x86_64 randconfig-005-20240705 gcc-13 x86_64 randconfig-006-20240705 gcc-13 x86_64 randconfig-011-20240705 clang-18 x86_64 randconfig-012-20240705 gcc-9 x86_64 randconfig-013-20240705 clang-18 x86_64 randconfig-014-20240705 gcc-13 x86_64 randconfig-015-20240705 clang-18 x86_64 randconfig-016-20240705 gcc-9 x86_64 randconfig-071-20240705 gcc-13 x86_64 randconfig-072-20240705 gcc-13 x86_64 randconfig-073-20240705 clang-18 x86_64 randconfig-074-20240705 gcc-13 x86_64 randconfig-075-20240705 clang-18 x86_64 randconfig-076-20240705 clang-18 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6] BUILD SUCCESS b206e4b36a7f6d4d7806d653f1e71867dd56571d
by kernel test robot 05 Jul '24

05 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-6.6 branch HEAD: b206e4b36a7f6d4d7806d653f1e71867dd56571d !9757 net: openvswitch: fix overwriting ct original tuple for ICMPv6 Warning ids grouped by kconfigs: recent_errors `-- arm64-allmodconfig `-- clang:warning:no-such-include-directory:drivers-infiniband-hw-hiroce3-include-mag elapsed time: 723m configs tested: 21 configs skipped: 124 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240705 clang-19 arm64 randconfig-002-20240705 clang-19 arm64 randconfig-003-20240705 clang-19 arm64 randconfig-004-20240705 clang-19 loongarch allmodconfig gcc-13.2.0 loongarch allnoconfig gcc-13.2.0 loongarch randconfig-001-20240705 gcc-13.2.0 loongarch randconfig-002-20240705 gcc-13.2.0 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240705 gcc-7 x86_64 buildonly-randconfig-002-20240705 gcc-13 x86_64 buildonly-randconfig-003-20240705 clang-18 x86_64 buildonly-randconfig-004-20240705 clang-18 x86_64 buildonly-randconfig-005-20240705 clang-18 x86_64 buildonly-randconfig-006-20240705 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240705 clang-18 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6 0/2] Add a switch to enable hungtask check for io
by Li Lingfeng 05 Jul '24

05 Jul '24

Add a switch to enable hungtask check for io Li Lingfeng (1): block: disable BLK_IO_HUNG_TASK_CHECK by default Yu Kuai (1): block: add a switch to enable hungtask check for io arch/arm64/configs/openeuler_defconfig | 1 + arch/x86/configs/openeuler_defconfig | 1 + block/Kconfig | 9 +++++++++ block/bio.c | 2 +- block/blk-core.c | 13 ++++++++++++- block/blk-mq.c | 2 +- block/blk.h | 1 + 7 files changed, 26 insertions(+), 3 deletions(-) -- 2.31.1

2 3

[PATCH openEuler-22.03-LTS-SP1] iomap: Don't finish dio under irq when there exists pages
by Zhihao Cheng 05 Jul '24

05 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IA4DAW CVE: NA -------------------------------- Since commit 6fac6d0e975afe1dec ("ext4: Optimize endio process for DIO overwrites"), pages invalidating won't be done in io completeing process, which could make generic/451 failed. In generic 451, there are two concurrent tasks: task A is reading(with page cache) a file, task B is directly writing and reading to verify content. Task B will verify failed in following process: task A task B direct_write(offs=L, content_Y) submit_IO content_X = read_page(offs=L) // stale data, because IO is not completed content_X = find_page(offs=L) // content_Y != content_X Fixes: 6fac6d0e975a ("ext4: Optimize endio process for DIO overwrites") Signed-off-by: Zhihao Cheng <chengzhihao(a)huaweicloud.com> --- fs/iomap/direct-io.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/fs/iomap/direct-io.c b/fs/iomap/direct-io.c index ad12ffcc5085..4760a481e444 100644 --- a/fs/iomap/direct-io.c +++ b/fs/iomap/direct-io.c @@ -180,6 +180,11 @@ static void iomap_dio_bio_end_io(struct bio *bio) goto release_bio; } + if ((dio->flags & IOMAP_DIO_INLINE_COMP) && dio->size && + (dio->flags & IOMAP_DIO_WRITE) && + file_inode(iocb->ki_filp)->i_mapping->nrpages) + dio->flags &= ~IOMAP_DIO_INLINE_COMP; + /* * Flagged with IOMAP_DIO_INLINE_COMP, we can complete it inline */ -- 2.31.1

2 1

[PATCH OLK-5.10] iomap: Don't finish dio under irq when there exists pages
by Zhihao Cheng 05 Jul '24

05 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IA4DAW CVE: NA -------------------------------- Since commit 48774b90b5677bdb4 ("ext4: Optimize endio process for DIO overwrites"), pages invalidating won't be done in io completeing process, which could make generic/451 failed. In generic 451, there are two concurrent tasks: task A is reading(with page cache) a file, task B is directly writing and reading to verify content. Task B will verify failed in following process: task A task B direct_write(offs=L, content_Y) submit_IO content_X = read_page(offs=L) // stale data, because IO is not completed content_X = find_page(offs=L) // content_Y != content_X Fixes: 48774b90b567 ("ext4: Optimize endio process for DIO overwrites") Signed-off-by: Zhihao Cheng <chengzhihao(a)huaweicloud.com> --- fs/iomap/direct-io.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/fs/iomap/direct-io.c b/fs/iomap/direct-io.c index 61cc9a13a40a..fc9908d79f93 100644 --- a/fs/iomap/direct-io.c +++ b/fs/iomap/direct-io.c @@ -180,6 +180,11 @@ static void iomap_dio_bio_end_io(struct bio *bio) goto release_bio; } + if ((dio->flags & IOMAP_DIO_INLINE_COMP) && dio->size && + (dio->flags & IOMAP_DIO_WRITE) && + file_inode(iocb->ki_filp)->i_mapping->nrpages) + dio->flags &= ~IOMAP_DIO_INLINE_COMP; + /* * Flagged with IOMAP_DIO_INLINE_COMP, we can complete it inline */ -- 2.31.1

2 1

[openeuler:OLK-5.10] BUILD SUCCESS 451734a9a63432990e3124ae33b413c8bb221f5a
by kernel test robot 05 Jul '24

05 Jul '24

tree/branch: https://gitee.com/openeuler/kernel.git OLK-5.10 branch HEAD: 451734a9a63432990e3124ae33b413c8bb221f5a !9716 ax25: Fix reference count leak issues of ax25_dev Warning ids grouped by kconfigs: recent_errors `-- x86_64-allnoconfig `-- drivers-arm-spe-spe.c:linux-perf-arm_pmu.h-is-included-more-than-once. elapsed time: 725m configs tested: 34 configs skipped: 128 The following configs have been built successfully. More configs may be tested in the coming days. tested configs: arm64 allmodconfig clang-19 arm64 allnoconfig gcc-13.2.0 arm64 randconfig-001-20240705 clang-19 arm64 randconfig-002-20240705 clang-19 arm64 randconfig-003-20240705 clang-19 arm64 randconfig-004-20240705 clang-19 x86_64 allnoconfig clang-18 x86_64 allyesconfig clang-18 x86_64 buildonly-randconfig-001-20240705 gcc-7 x86_64 buildonly-randconfig-002-20240705 gcc-13 x86_64 buildonly-randconfig-003-20240705 clang-18 x86_64 buildonly-randconfig-004-20240705 clang-18 x86_64 buildonly-randconfig-005-20240705 clang-18 x86_64 buildonly-randconfig-006-20240705 clang-18 x86_64 defconfig gcc-13 x86_64 randconfig-001-20240705 clang-18 x86_64 randconfig-002-20240705 gcc-13 x86_64 randconfig-003-20240705 clang-18 x86_64 randconfig-004-20240705 gcc-13 x86_64 randconfig-005-20240705 gcc-13 x86_64 randconfig-006-20240705 gcc-13 x86_64 randconfig-011-20240705 clang-18 x86_64 randconfig-012-20240705 gcc-9 x86_64 randconfig-013-20240705 clang-18 x86_64 randconfig-014-20240705 gcc-13 x86_64 randconfig-015-20240705 clang-18 x86_64 randconfig-016-20240705 gcc-9 x86_64 randconfig-071-20240705 gcc-13 x86_64 randconfig-072-20240705 gcc-13 x86_64 randconfig-073-20240705 clang-18 x86_64 randconfig-074-20240705 gcc-13 x86_64 randconfig-075-20240705 clang-18 x86_64 randconfig-076-20240705 clang-18 x86_64 rhel-8.3-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH openEuler-22.03-LTS-SP1] f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
by Baokun Li 04 Jul '24

04 Jul '24

From: Chao Yu <chao(a)kernel.org> stable inclusion from stable-v5.10.219 commit a6e1f7744e9b84f86a629a76024bba8468aa153b category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA7YN0 CVE: CVE-2024-34027 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 0a4ed2d97cb6d044196cc3e726b6699222b41019 ] It needs to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock to avoid racing with checkpoint, otherwise, filesystem metadata including blkaddr in dnode, inode fields and .total_valid_block_count may be corrupted after SPO case. Fixes: ef8d563f184e ("f2fs: introduce F2FS_IOC_RELEASE_COMPRESS_BLOCKS") Fixes: c75488fb4d82 ("f2fs: introduce F2FS_IOC_RESERVE_COMPRESS_BLOCKS") Signed-off-by: Chao Yu <chao(a)kernel.org> Signed-off-by: Jaegeuk Kim <jaegeuk(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Baokun Li <libaokun1(a)huawei.com> --- fs/f2fs/file.c | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/fs/f2fs/file.c b/fs/f2fs/file.c index 38510a24861d..ab708374d88e 100644 --- a/fs/f2fs/file.c +++ b/fs/f2fs/file.c @@ -3572,9 +3572,12 @@ static int f2fs_release_compress_blocks(struct file *filp, unsigned long arg) struct dnode_of_data dn; pgoff_t end_offset, count; + f2fs_lock_op(sbi); + set_new_dnode(&dn, inode, NULL, NULL, 0); ret = f2fs_get_dnode_of_data(&dn, page_idx, LOOKUP_NODE); if (ret) { + f2fs_unlock_op(sbi); if (ret == -ENOENT) { page_idx = f2fs_get_next_page_offset(&dn, page_idx); @@ -3592,6 +3595,8 @@ static int f2fs_release_compress_blocks(struct file *filp, unsigned long arg) f2fs_put_dnode(&dn); + f2fs_unlock_op(sbi); + if (ret < 0) break; @@ -3725,9 +3730,12 @@ static int f2fs_reserve_compress_blocks(struct file *filp, unsigned long arg) struct dnode_of_data dn; pgoff_t end_offset, count; + f2fs_lock_op(sbi); + set_new_dnode(&dn, inode, NULL, NULL, 0); ret = f2fs_get_dnode_of_data(&dn, page_idx, LOOKUP_NODE); if (ret) { + f2fs_unlock_op(sbi); if (ret == -ENOENT) { page_idx = f2fs_get_next_page_offset(&dn, page_idx); @@ -3745,6 +3753,8 @@ static int f2fs_reserve_compress_blocks(struct file *filp, unsigned long arg) f2fs_put_dnode(&dn); + f2fs_unlock_op(sbi); + if (ret < 0) break; -- 2.31.1

2 1

[PATCH OLK-5.10] f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
by Baokun Li 04 Jul '24

04 Jul '24

From: Chao Yu <chao(a)kernel.org> stable inclusion from stable-v5.10.219 commit a6e1f7744e9b84f86a629a76024bba8468aa153b category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA7YN0 CVE: CVE-2024-34027 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 0a4ed2d97cb6d044196cc3e726b6699222b41019 ] It needs to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock to avoid racing with checkpoint, otherwise, filesystem metadata including blkaddr in dnode, inode fields and .total_valid_block_count may be corrupted after SPO case. Fixes: ef8d563f184e ("f2fs: introduce F2FS_IOC_RELEASE_COMPRESS_BLOCKS") Fixes: c75488fb4d82 ("f2fs: introduce F2FS_IOC_RESERVE_COMPRESS_BLOCKS") Signed-off-by: Chao Yu <chao(a)kernel.org> Signed-off-by: Jaegeuk Kim <jaegeuk(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Baokun Li <libaokun1(a)huawei.com> --- fs/f2fs/file.c | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/fs/f2fs/file.c b/fs/f2fs/file.c index 01995d1b2437..eff0b359f1a3 100644 --- a/fs/f2fs/file.c +++ b/fs/f2fs/file.c @@ -3579,9 +3579,12 @@ static int f2fs_release_compress_blocks(struct file *filp, unsigned long arg) struct dnode_of_data dn; pgoff_t end_offset, count; + f2fs_lock_op(sbi); + set_new_dnode(&dn, inode, NULL, NULL, 0); ret = f2fs_get_dnode_of_data(&dn, page_idx, LOOKUP_NODE); if (ret) { + f2fs_unlock_op(sbi); if (ret == -ENOENT) { page_idx = f2fs_get_next_page_offset(&dn, page_idx); @@ -3599,6 +3602,8 @@ static int f2fs_release_compress_blocks(struct file *filp, unsigned long arg) f2fs_put_dnode(&dn); + f2fs_unlock_op(sbi); + if (ret < 0) break; @@ -3732,9 +3737,12 @@ static int f2fs_reserve_compress_blocks(struct file *filp, unsigned long arg) struct dnode_of_data dn; pgoff_t end_offset, count; + f2fs_lock_op(sbi); + set_new_dnode(&dn, inode, NULL, NULL, 0); ret = f2fs_get_dnode_of_data(&dn, page_idx, LOOKUP_NODE); if (ret) { + f2fs_unlock_op(sbi); if (ret == -ENOENT) { page_idx = f2fs_get_next_page_offset(&dn, page_idx); @@ -3752,6 +3760,8 @@ static int f2fs_reserve_compress_blocks(struct file *filp, unsigned long arg) f2fs_put_dnode(&dn); + f2fs_unlock_op(sbi); + if (ret < 0) break; -- 2.31.1

2 1

[PATCH openEuler-1.0-LTS] i40e: Fix queues reservation for XDP
by Zeng Heng 04 Jul '24

04 Jul '24

From: Sylwester Dziedziuch <sylwesterx.dziedziuch(a)intel.com> stable inclusion from stable-v4.19.228 commit d46fa4ea9756ef6cbcf9752d0832cc66e2d7121b category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA72DT CVE: CVE-2021-47619 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 92947844b8beee988c0ce17082b705c2f75f0742 upstream. When XDP was configured on a system with large number of CPUs and X722 NIC there was a call trace with NULL pointer dereference. i40e 0000:87:00.0: failed to get tracking for 256 queues for VSI 0 err -12 i40e 0000:87:00.0: setup of MAIN VSI failed BUG: kernel NULL pointer dereference, address: 0000000000000000 RIP: 0010:i40e_xdp+0xea/0x1b0 [i40e] Call Trace: ? i40e_reconfig_rss_queues+0x130/0x130 [i40e] dev_xdp_install+0x61/0xe0 dev_xdp_attach+0x18a/0x4c0 dev_change_xdp_fd+0x1e6/0x220 do_setlink+0x616/0x1030 ? ahci_port_stop+0x80/0x80 ? ata_qc_issue+0x107/0x1e0 ? lock_timer_base+0x61/0x80 ? __mod_timer+0x202/0x380 rtnl_setlink+0xe5/0x170 ? bpf_lsm_binder_transaction+0x10/0x10 ? security_capable+0x36/0x50 rtnetlink_rcv_msg+0x121/0x350 ? rtnl_calcit.isra.0+0x100/0x100 netlink_rcv_skb+0x50/0xf0 netlink_unicast+0x1d3/0x2a0 netlink_sendmsg+0x22a/0x440 sock_sendmsg+0x5e/0x60 __sys_sendto+0xf0/0x160 ? __sys_getsockname+0x7e/0xc0 ? _copy_from_user+0x3c/0x80 ? __sys_setsockopt+0xc8/0x1a0 __x64_sys_sendto+0x20/0x30 do_syscall_64+0x33/0x40 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f83fa7a39e0 This was caused by PF queue pile fragmentation due to flow director VSI queue being placed right after main VSI. Because of this main VSI was not able to resize its queue allocation for XDP resulting in no queues allocated for main VSI when XDP was turned on. Fix this by always allocating last queue in PF queue pile for a flow director VSI. Fixes: 41c445ff0f48 ("i40e: main driver core") Fixes: 74608d17fe29 ("i40e: add support for XDP_TX action") Signed-off-by: Sylwester Dziedziuch <sylwesterx.dziedziuch(a)intel.com> Signed-off-by: Mateusz Palczewski <mateusz.palczewski(a)intel.com> Reviewed-by: Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> Tested-by: Kiran Bhandare <kiranx.bhandare(a)intel.com> Signed-off-by: Tony Nguyen <anthony.l.nguyen(a)intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/net/ethernet/intel/i40e/i40e_main.c | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/drivers/net/ethernet/intel/i40e/i40e_main.c b/drivers/net/ethernet/intel/i40e/i40e_main.c index 74cf22982f59..bfa5e286c489 100644 --- a/drivers/net/ethernet/intel/i40e/i40e_main.c +++ b/drivers/net/ethernet/intel/i40e/i40e_main.c @@ -193,6 +193,20 @@ static int i40e_get_lump(struct i40e_pf *pf, struct i40e_lump_tracking *pile, return -EINVAL; } + /* Allocate last queue in the pile for FDIR VSI queue + * so it doesn't fragment the qp_pile + */ + if (pile == pf->qp_pile && pf->vsi[id]->type == I40E_VSI_FDIR) { + if (pile->list[pile->num_entries - 1] & I40E_PILE_VALID_BIT) { + dev_err(&pf->pdev->dev, + "Cannot allocate queue %d for I40E_VSI_FDIR\n", + pile->num_entries - 1); + return -ENOMEM; + } + pile->list[pile->num_entries - 1] = id | I40E_PILE_VALID_BIT; + return pile->num_entries - 1; + } + /* start the linear search with an imperfect hint */ i = pile->search_hint; while (i < pile->num_entries) { -- 2.25.1

2 1

[PATCH OLK-5.10] wifi: ar5523: enable proper endpoint verification
by Chen Zhongjin 04 Jul '24

04 Jul '24

From: Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> stable inclusion from stable-v5.10.219 commit ee25389df80138907bc9dcdf4a2be2067cde9a81 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SCR CVE: CVE-2024-38565 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit e120b6388d7d88635d67dcae6483f39c37111850 ] Syzkaller reports [1] hitting a warning about an endpoint in use not having an expected type to it. Fix the issue by checking for the existence of all proper endpoints with their according types intact. Sadly, this patch has not been tested on real hardware. [1] Syzkaller report: ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 0 PID: 3643 at drivers/usb/core/urb.c:504 usb_submit_urb+0xed6/0x1880 drivers/usb/core/urb.c:504 ... Call Trace: <TASK> ar5523_cmd+0x41b/0x780 drivers/net/wireless/ath/ar5523/ar5523.c:275 ar5523_cmd_read drivers/net/wireless/ath/ar5523/ar5523.c:302 [inline] ar5523_host_available drivers/net/wireless/ath/ar5523/ar5523.c:1376 [inline] ar5523_probe+0x14b0/0x1d10 drivers/net/wireless/ath/ar5523/ar5523.c:1655 usb_probe_interface+0x30f/0x7f0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:560 [inline] really_probe+0x249/0xb90 drivers/base/dd.c:639 __driver_probe_device+0x1df/0x4d0 drivers/base/dd.c:778 driver_probe_device+0x4c/0x1a0 drivers/base/dd.c:808 __device_attach_driver+0x1d4/0x2e0 drivers/base/dd.c:936 bus_for_each_drv+0x163/0x1e0 drivers/base/bus.c:427 __device_attach+0x1e4/0x530 drivers/base/dd.c:1008 bus_probe_device+0x1e8/0x2a0 drivers/base/bus.c:487 device_add+0xbd9/0x1e90 drivers/base/core.c:3517 usb_set_configuration+0x101d/0x1900 drivers/usb/core/message.c:2170 usb_generic_driver_probe+0xbe/0x100 drivers/usb/core/generic.c:238 usb_probe_device+0xd8/0x2c0 drivers/usb/core/driver.c:293 call_driver_probe drivers/base/dd.c:560 [inline] really_probe+0x249/0xb90 drivers/base/dd.c:639 __driver_probe_device+0x1df/0x4d0 drivers/base/dd.c:778 driver_probe_device+0x4c/0x1a0 drivers/base/dd.c:808 __device_attach_driver+0x1d4/0x2e0 drivers/base/dd.c:936 bus_for_each_drv+0x163/0x1e0 drivers/base/bus.c:427 __device_attach+0x1e4/0x530 drivers/base/dd.c:1008 bus_probe_device+0x1e8/0x2a0 drivers/base/bus.c:487 device_add+0xbd9/0x1e90 drivers/base/core.c:3517 usb_new_device.cold+0x685/0x10ad drivers/usb/core/hub.c:2573 hub_port_connect drivers/usb/core/hub.c:5353 [inline] hub_port_connect_change drivers/usb/core/hub.c:5497 [inline] port_event drivers/usb/core/hub.c:5653 [inline] hub_event+0x26cb/0x45d0 drivers/usb/core/hub.c:5735 process_one_work+0x9bf/0x1710 kernel/workqueue.c:2289 worker_thread+0x669/0x1090 kernel/workqueue.c:2436 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 </TASK> Reported-and-tested-by: syzbot+1bc2c2afd44f820a669f(a)syzkaller.appspotmail.com Fixes: b7d572e1871d ("ar5523: Add new driver") Signed-off-by: Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> Signed-off-by: Kalle Valo <quic_kvalo(a)quicinc.com> Link: https://msgid.link/20240408121425.29392-1-n.zhandarovich@fintech.ru Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Chen Zhongjin <chenzhongjin(a)huawei.com> --- drivers/net/wireless/ath/ar5523/ar5523.c | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/drivers/net/wireless/ath/ar5523/ar5523.c b/drivers/net/wireless/ath/ar5523/ar5523.c index efe38b2c1df7..71c2bf8817dc 100644 --- a/drivers/net/wireless/ath/ar5523/ar5523.c +++ b/drivers/net/wireless/ath/ar5523/ar5523.c @@ -1590,6 +1590,20 @@ static int ar5523_probe(struct usb_interface *intf, struct ar5523 *ar; int error = -ENOMEM; + static const u8 bulk_ep_addr[] = { + AR5523_CMD_TX_PIPE | USB_DIR_OUT, + AR5523_DATA_TX_PIPE | USB_DIR_OUT, + AR5523_CMD_RX_PIPE | USB_DIR_IN, + AR5523_DATA_RX_PIPE | USB_DIR_IN, + 0}; + + if (!usb_check_bulk_endpoints(intf, bulk_ep_addr)) { + dev_err(&dev->dev, + "Could not find all expected endpoints\n"); + error = -ENODEV; + goto out; + } + /* * Load firmware if the device requires it. This will return * -ENXIO on success and we'll get called back afer the usb -- 2.25.1

2 1

[PATCH OLK-6.6 0/2] Fix xfs file creation issue
by Zizhi Wo 04 Jul '24

04 Jul '24

Revert the previous fix patch and adapt to the latest repair solution. Zizhi Wo (2): Revert "xfs: Fix file creation failure" xfs: Avoid races with cnt_btree lastrec updates fs/xfs/libxfs/xfs_alloc.c | 125 +++++++++++++++++++++++++++++--- fs/xfs/libxfs/xfs_alloc_btree.c | 72 ------------------ fs/xfs/libxfs/xfs_btree.c | 51 ------------- fs/xfs/libxfs/xfs_btree.h | 19 +---- 4 files changed, 115 insertions(+), 152 deletions(-) -- 2.39.2

2 3

[PATCH openEuler-22.03-LTS-SP1 0/2] CVE-2024-26816
by liwei 04 Jul '24

04 Jul '24

CVE-2024-26816 Guixiong Wei (1): x86/boot: Ignore relocations in .notes sections in walk_relocs() too Kees Cook (1): x86, relocs: Ignore relocations in .notes section arch/x86/tools/relocs.c | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) -- 2.25.1

2 3

[PATCH OLK-5.10 0/2] CVE-2024-26816
by liwei 04 Jul '24

04 Jul '24

CVE-2024-26816 Guixiong Wei (1): x86/boot: Ignore relocations in .notes sections in walk_relocs() too Kees Cook (1): x86, relocs: Ignore relocations in .notes section arch/x86/tools/relocs.c | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) -- 2.25.1

2 3

[PATCH openEuler-1.0-LTS 0/2] CVE-2024-26816
by liwei 04 Jul '24

04 Jul '24

CVE-2024-26816 Guixiong Wei (1): x86/boot: Ignore relocations in .notes sections in walk_relocs() too Kees Cook (1): x86, relocs: Ignore relocations in .notes section arch/x86/tools/relocs.c | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) -- 2.25.1

2 3

[PATCH openEuler-1.0-LTS 0/3] CVE-2024-23848
by Yongqiang Liu 04 Jul '24

04 Jul '24

Hans Verkuil (3): media: cec: cec-adap: always cancel work in cec_transmit_msg_fh media: cec: cec-api: add locking in cec_release() media: cec: core: avoid recursive cec_claim_log_addrs drivers/media/cec/cec-adap.c | 9 ++++++--- drivers/media/cec/cec-api.c | 5 ++++- include/media/cec.h | 1 + 3 files changed, 11 insertions(+), 4 deletions(-) -- 2.34.1

2 4

[PATCH v2 OLK-5.10] x86, relocs: Ignore relocations in .notes section
by liwei 04 Jul '24

04 Jul '24

From: Kees Cook <keescook(a)chromium.org> mainline inclusion from mainline-v6.9-rc1 commit aaa8736370db1a78f0e8434344a484f9fd20be3b category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNFG CVE: CVE-2024-26816 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ---------------------------------- When building with CONFIG_XEN_PV=y, .text symbols are emitted into the .notes section so that Xen can find the "startup_xen" entry point. This information is used prior to booting the kernel, so relocations are not useful. In fact, performing relocations against the .notes section means that the KASLR base is exposed since /sys/kernel/notes is world-readable. To avoid leaking the KASLR base without breaking unprivileged tools that are expecting to read /sys/kernel/notes, skip performing relocations in the .notes section. The values readable in .notes are then identical to those found in System.map. Reported-by: Guixiong Wei <guixiongwei(a)gmail.com> Closes: https://lore.kernel.org/all/20240218073501.54555-1-guixiongwei@gmail.com/ Fixes: 5ead97c84fa7 ("xen: Core Xen implementation") Fixes: da1a679cde9b ("Add /sys/kernel/notes") Reviewed-by: Juergen Gross <jgross(a)suse.com> Signed-off-by: Kees Cook <keescook(a)chromium.org> Signed-off-by: liwei <liwei728(a)huawei.com> --- arch/x86/tools/relocs.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/arch/x86/tools/relocs.c b/arch/x86/tools/relocs.c index 1c3a1962cade..0043fd374a62 100644 --- a/arch/x86/tools/relocs.c +++ b/arch/x86/tools/relocs.c @@ -596,6 +596,14 @@ static void print_absolute_relocs(void) if (!(sec_applies->shdr.sh_flags & SHF_ALLOC)) { continue; } + /* + * Do not perform relocations in .notes section; any + * values there are meant for pre-boot consumption (e.g. + * startup_xen). + */ + if (sec_applies->shdr.sh_type == SHT_NOTE) { + continue; + } sh_symtab = sec_symtab->symtab; sym_strtab = sec_symtab->link->strtab; for (j = 0; j < sec->shdr.sh_size/sizeof(Elf_Rel); j++) { -- 2.25.1

2 1

[PATCH OLK-6.6] net: openvswitch: fix overwriting ct original tuple for ICMPv6
by Jinjie Ruan 04 Jul '24

04 Jul '24

From: Ilya Maximets <i.maximets(a)ovn.org> stable inclusion from stable-v5.10.219 commit 5ab6aecbede080b44b8e34720ab72050bf1e6982 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SH5 CVE: CVE-2024-38558 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 7c988176b6c16c516474f6fceebe0f055af5eb56 ] OVS_PACKET_CMD_EXECUTE has 3 main attributes: - OVS_PACKET_ATTR_KEY - Packet metadata in a netlink format. - OVS_PACKET_ATTR_PACKET - Binary packet content. - OVS_PACKET_ATTR_ACTIONS - Actions to execute on the packet. OVS_PACKET_ATTR_KEY is parsed first to populate sw_flow_key structure with the metadata like conntrack state, input port, recirculation id, etc. Then the packet itself gets parsed to populate the rest of the keys from the packet headers. Whenever the packet parsing code starts parsing the ICMPv6 header, it first zeroes out fields in the key corresponding to Neighbor Discovery information even if it is not an ND packet. It is an 'ipv6.nd' field. However, the 'ipv6' is a union that shares the space between 'nd' and 'ct_orig' that holds the original tuple conntrack metadata parsed from the OVS_PACKET_ATTR_KEY. ND packets should not normally have conntrack state, so it's fine to share the space, but normal ICMPv6 Echo packets or maybe other types of ICMPv6 can have the state attached and it should not be overwritten. The issue results in all but the last 4 bytes of the destination address being wiped from the original conntrack tuple leading to incorrect packet matching and potentially executing wrong actions in case this packet recirculates within the datapath or goes back to userspace. ND fields should not be accessed in non-ND packets, so not clearing them should be fine. Executing memset() only for actual ND packets to avoid the issue. Initializing the whole thing before parsing is needed because ND packet may not contain all the options. The issue only affects the OVS_PACKET_CMD_EXECUTE path and doesn't affect packets entering OVS datapath from network interfaces, because in this case CT metadata is populated from skb after the packet is already parsed. Fixes: 9dd7f8907c37 ("openvswitch: Add original direction conntrack tuple to sw_flow_key.") Reported-by: Antonin Bas <antonin.bas(a)broadcom.com> Closes: https://github.com/openvswitch/ovs-issues/issues/327 Signed-off-by: Ilya Maximets <i.maximets(a)ovn.org> Acked-by: Aaron Conole <aconole(a)redhat.com> Acked-by: Eelco Chaudron <echaudro(a)redhat.com> Link: https://lore.kernel.org/r/20240509094228.1035477-1-i.maximets@ovn.org Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Jinjie Ruan <ruanjinjie(a)huawei.com> --- net/openvswitch/flow.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/net/openvswitch/flow.c b/net/openvswitch/flow.c index 33b21a0c0548..8a848ce72e29 100644 --- a/net/openvswitch/flow.c +++ b/net/openvswitch/flow.c @@ -561,7 +561,6 @@ static int parse_icmpv6(struct sk_buff *skb, struct sw_flow_key *key, */ key->tp.src = htons(icmp->icmp6_type); key->tp.dst = htons(icmp->icmp6_code); - memset(&key->ipv6.nd, 0, sizeof(key->ipv6.nd)); if (icmp->icmp6_code == 0 && (icmp->icmp6_type == NDISC_NEIGHBOUR_SOLICITATION || @@ -570,6 +569,8 @@ static int parse_icmpv6(struct sk_buff *skb, struct sw_flow_key *key, struct nd_msg *nd; int offset; + memset(&key->ipv6.nd, 0, sizeof(key->ipv6.nd)); + /* In order to process neighbor discovery options, we need the * entire packet. */ -- 2.34.1

2 1

[PATCH OLK-5.10] net: openvswitch: fix overwriting ct original tuple for ICMPv6
by Jinjie Ruan 04 Jul '24

04 Jul '24

From: Ilya Maximets <i.maximets(a)ovn.org> stable inclusion from stable-v5.10.219 commit 5ab6aecbede080b44b8e34720ab72050bf1e6982 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SH5 CVE: CVE-2024-38558 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 7c988176b6c16c516474f6fceebe0f055af5eb56 ] OVS_PACKET_CMD_EXECUTE has 3 main attributes: - OVS_PACKET_ATTR_KEY - Packet metadata in a netlink format. - OVS_PACKET_ATTR_PACKET - Binary packet content. - OVS_PACKET_ATTR_ACTIONS - Actions to execute on the packet. OVS_PACKET_ATTR_KEY is parsed first to populate sw_flow_key structure with the metadata like conntrack state, input port, recirculation id, etc. Then the packet itself gets parsed to populate the rest of the keys from the packet headers. Whenever the packet parsing code starts parsing the ICMPv6 header, it first zeroes out fields in the key corresponding to Neighbor Discovery information even if it is not an ND packet. It is an 'ipv6.nd' field. However, the 'ipv6' is a union that shares the space between 'nd' and 'ct_orig' that holds the original tuple conntrack metadata parsed from the OVS_PACKET_ATTR_KEY. ND packets should not normally have conntrack state, so it's fine to share the space, but normal ICMPv6 Echo packets or maybe other types of ICMPv6 can have the state attached and it should not be overwritten. The issue results in all but the last 4 bytes of the destination address being wiped from the original conntrack tuple leading to incorrect packet matching and potentially executing wrong actions in case this packet recirculates within the datapath or goes back to userspace. ND fields should not be accessed in non-ND packets, so not clearing them should be fine. Executing memset() only for actual ND packets to avoid the issue. Initializing the whole thing before parsing is needed because ND packet may not contain all the options. The issue only affects the OVS_PACKET_CMD_EXECUTE path and doesn't affect packets entering OVS datapath from network interfaces, because in this case CT metadata is populated from skb after the packet is already parsed. Fixes: 9dd7f8907c37 ("openvswitch: Add original direction conntrack tuple to sw_flow_key.") Reported-by: Antonin Bas <antonin.bas(a)broadcom.com> Closes: https://github.com/openvswitch/ovs-issues/issues/327 Signed-off-by: Ilya Maximets <i.maximets(a)ovn.org> Acked-by: Aaron Conole <aconole(a)redhat.com> Acked-by: Eelco Chaudron <echaudro(a)redhat.com> Link: https://lore.kernel.org/r/20240509094228.1035477-1-i.maximets@ovn.org Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Jinjie Ruan <ruanjinjie(a)huawei.com> --- net/openvswitch/flow.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/net/openvswitch/flow.c b/net/openvswitch/flow.c index c9ba61413c98..9bad601c7fe8 100644 --- a/net/openvswitch/flow.c +++ b/net/openvswitch/flow.c @@ -412,7 +412,6 @@ static int parse_icmpv6(struct sk_buff *skb, struct sw_flow_key *key, */ key->tp.src = htons(icmp->icmp6_type); key->tp.dst = htons(icmp->icmp6_code); - memset(&key->ipv6.nd, 0, sizeof(key->ipv6.nd)); if (icmp->icmp6_code == 0 && (icmp->icmp6_type == NDISC_NEIGHBOUR_SOLICITATION || @@ -421,6 +420,8 @@ static int parse_icmpv6(struct sk_buff *skb, struct sw_flow_key *key, struct nd_msg *nd; int offset; + memset(&key->ipv6.nd, 0, sizeof(key->ipv6.nd)); + /* In order to process neighbor discovery options, we need the * entire packet. */ -- 2.34.1

2 1

[PATCH openEuler-1.0-LTS] wifi: ar5523: enable proper endpoint verification
by Chen Zhongjin 04 Jul '24

04 Jul '24

From: Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> stable inclusion from stable-v4.19.316 commit 79ddf5f2020fd593d50f1363bb5131283d74f78f category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SCR CVE: CVE-2024-38565 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit e120b6388d7d88635d67dcae6483f39c37111850 ] Syzkaller reports [1] hitting a warning about an endpoint in use not having an expected type to it. Fix the issue by checking for the existence of all proper endpoints with their according types intact. Sadly, this patch has not been tested on real hardware. [1] Syzkaller report: ------------[ cut here ]------------ usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 0 PID: 3643 at drivers/usb/core/urb.c:504 usb_submit_urb+0xed6/0x1880 drivers/usb/core/urb.c:504 ... Call Trace: <TASK> ar5523_cmd+0x41b/0x780 drivers/net/wireless/ath/ar5523/ar5523.c:275 ar5523_cmd_read drivers/net/wireless/ath/ar5523/ar5523.c:302 [inline] ar5523_host_available drivers/net/wireless/ath/ar5523/ar5523.c:1376 [inline] ar5523_probe+0x14b0/0x1d10 drivers/net/wireless/ath/ar5523/ar5523.c:1655 usb_probe_interface+0x30f/0x7f0 drivers/usb/core/driver.c:396 call_driver_probe drivers/base/dd.c:560 [inline] really_probe+0x249/0xb90 drivers/base/dd.c:639 __driver_probe_device+0x1df/0x4d0 drivers/base/dd.c:778 driver_probe_device+0x4c/0x1a0 drivers/base/dd.c:808 __device_attach_driver+0x1d4/0x2e0 drivers/base/dd.c:936 bus_for_each_drv+0x163/0x1e0 drivers/base/bus.c:427 __device_attach+0x1e4/0x530 drivers/base/dd.c:1008 bus_probe_device+0x1e8/0x2a0 drivers/base/bus.c:487 device_add+0xbd9/0x1e90 drivers/base/core.c:3517 usb_set_configuration+0x101d/0x1900 drivers/usb/core/message.c:2170 usb_generic_driver_probe+0xbe/0x100 drivers/usb/core/generic.c:238 usb_probe_device+0xd8/0x2c0 drivers/usb/core/driver.c:293 call_driver_probe drivers/base/dd.c:560 [inline] really_probe+0x249/0xb90 drivers/base/dd.c:639 __driver_probe_device+0x1df/0x4d0 drivers/base/dd.c:778 driver_probe_device+0x4c/0x1a0 drivers/base/dd.c:808 __device_attach_driver+0x1d4/0x2e0 drivers/base/dd.c:936 bus_for_each_drv+0x163/0x1e0 drivers/base/bus.c:427 __device_attach+0x1e4/0x530 drivers/base/dd.c:1008 bus_probe_device+0x1e8/0x2a0 drivers/base/bus.c:487 device_add+0xbd9/0x1e90 drivers/base/core.c:3517 usb_new_device.cold+0x685/0x10ad drivers/usb/core/hub.c:2573 hub_port_connect drivers/usb/core/hub.c:5353 [inline] hub_port_connect_change drivers/usb/core/hub.c:5497 [inline] port_event drivers/usb/core/hub.c:5653 [inline] hub_event+0x26cb/0x45d0 drivers/usb/core/hub.c:5735 process_one_work+0x9bf/0x1710 kernel/workqueue.c:2289 worker_thread+0x669/0x1090 kernel/workqueue.c:2436 kthread+0x2e8/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:306 </TASK> Reported-and-tested-by: syzbot+1bc2c2afd44f820a669f(a)syzkaller.appspotmail.com Fixes: b7d572e1871d ("ar5523: Add new driver") Signed-off-by: Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> Signed-off-by: Kalle Valo <quic_kvalo(a)quicinc.com> Link: https://msgid.link/20240408121425.29392-1-n.zhandarovich@fintech.ru Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Chen Zhongjin <chenzhongjin(a)huawei.com> --- drivers/net/wireless/ath/ar5523/ar5523.c | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/drivers/net/wireless/ath/ar5523/ar5523.c b/drivers/net/wireless/ath/ar5523/ar5523.c index da2d179430ca..91b524ca3243 100644 --- a/drivers/net/wireless/ath/ar5523/ar5523.c +++ b/drivers/net/wireless/ath/ar5523/ar5523.c @@ -1580,6 +1580,20 @@ static int ar5523_probe(struct usb_interface *intf, struct ar5523 *ar; int error = -ENOMEM; + static const u8 bulk_ep_addr[] = { + AR5523_CMD_TX_PIPE | USB_DIR_OUT, + AR5523_DATA_TX_PIPE | USB_DIR_OUT, + AR5523_CMD_RX_PIPE | USB_DIR_IN, + AR5523_DATA_RX_PIPE | USB_DIR_IN, + 0}; + + if (!usb_check_bulk_endpoints(intf, bulk_ep_addr)) { + dev_err(&dev->dev, + "Could not find all expected endpoints\n"); + error = -ENODEV; + goto out; + } + /* * Load firmware if the device requires it. This will return * -ENXIO on success and we'll get called back afer the usb -- 2.25.1

2 1

[PATCH openEuler-1.0-LTS] net: openvswitch: fix overwriting ct original tuple for ICMPv6
by Jinjie Ruan 04 Jul '24

04 Jul '24

From: Ilya Maximets <i.maximets(a)ovn.org> stable inclusion from stable-v5.10.219 commit 5ab6aecbede080b44b8e34720ab72050bf1e6982 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SH5 CVE: CVE-2024-38558 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 7c988176b6c16c516474f6fceebe0f055af5eb56 ] OVS_PACKET_CMD_EXECUTE has 3 main attributes: - OVS_PACKET_ATTR_KEY - Packet metadata in a netlink format. - OVS_PACKET_ATTR_PACKET - Binary packet content. - OVS_PACKET_ATTR_ACTIONS - Actions to execute on the packet. OVS_PACKET_ATTR_KEY is parsed first to populate sw_flow_key structure with the metadata like conntrack state, input port, recirculation id, etc. Then the packet itself gets parsed to populate the rest of the keys from the packet headers. Whenever the packet parsing code starts parsing the ICMPv6 header, it first zeroes out fields in the key corresponding to Neighbor Discovery information even if it is not an ND packet. It is an 'ipv6.nd' field. However, the 'ipv6' is a union that shares the space between 'nd' and 'ct_orig' that holds the original tuple conntrack metadata parsed from the OVS_PACKET_ATTR_KEY. ND packets should not normally have conntrack state, so it's fine to share the space, but normal ICMPv6 Echo packets or maybe other types of ICMPv6 can have the state attached and it should not be overwritten. The issue results in all but the last 4 bytes of the destination address being wiped from the original conntrack tuple leading to incorrect packet matching and potentially executing wrong actions in case this packet recirculates within the datapath or goes back to userspace. ND fields should not be accessed in non-ND packets, so not clearing them should be fine. Executing memset() only for actual ND packets to avoid the issue. Initializing the whole thing before parsing is needed because ND packet may not contain all the options. The issue only affects the OVS_PACKET_CMD_EXECUTE path and doesn't affect packets entering OVS datapath from network interfaces, because in this case CT metadata is populated from skb after the packet is already parsed. Fixes: 9dd7f8907c37 ("openvswitch: Add original direction conntrack tuple to sw_flow_key.") Reported-by: Antonin Bas <antonin.bas(a)broadcom.com> Closes: https://github.com/openvswitch/ovs-issues/issues/327 Signed-off-by: Ilya Maximets <i.maximets(a)ovn.org> Acked-by: Aaron Conole <aconole(a)redhat.com> Acked-by: Eelco Chaudron <echaudro(a)redhat.com> Link: https://lore.kernel.org/r/20240509094228.1035477-1-i.maximets@ovn.org Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Jinjie Ruan <ruanjinjie(a)huawei.com> --- net/openvswitch/flow.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/net/openvswitch/flow.c b/net/openvswitch/flow.c index 56b8e7167790..857b1ffe3d85 100644 --- a/net/openvswitch/flow.c +++ b/net/openvswitch/flow.c @@ -427,7 +427,6 @@ static int parse_icmpv6(struct sk_buff *skb, struct sw_flow_key *key, */ key->tp.src = htons(icmp->icmp6_type); key->tp.dst = htons(icmp->icmp6_code); - memset(&key->ipv6.nd, 0, sizeof(key->ipv6.nd)); if (icmp->icmp6_code == 0 && (icmp->icmp6_type == NDISC_NEIGHBOUR_SOLICITATION || @@ -436,6 +435,8 @@ static int parse_icmpv6(struct sk_buff *skb, struct sw_flow_key *key, struct nd_msg *nd; int offset; + memset(&key->ipv6.nd, 0, sizeof(key->ipv6.nd)); + /* In order to process neighbor discovery options, we need the * entire packet. */ -- 2.34.1

2 1

[PATCH v2 OLK-5.10] arm64: arm_pmuv3: Correctly extract and check the PMUVer
by Junhao He 04 Jul '24

04 Jul '24

mainline inclusion from mainline-v6.10-rc1 commit b782e8d07baac95a5ce3f8773cc61f4ed7d0ccbc category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/I9J01A CVE: NA Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ---------------------------------------------------------------------- Currently we're using "sbfx" to extract the PMUVer from ID_AA64DFR0_EL1 and skip the init/reset if no PMU present when the extracted PMUVer is negative or is zero. However for PMUv3p8 the PMUVer will be 0b1000 and PMUVer extracted by "sbfx" will always be negative and we'll skip the init/reset in __init_el2_debug/reset_pmuserenr_el0 unexpectedly. So this patch use "ubfx" instead of "sbfx" to extract the PMUVer. If the PMUVer is implementation defined (0b1111) or not implemented(0b0000) then skip the reset/init. Previously we'll also skip the init/reset if the PMUVer is higher than the version we known (currently PMUv3p9), with this patch we'll only skip if the PMU is not implemented or implementation defined. This keeps consistence with how we probe the PMU in the driver with pmuv3_implemented(). Signed-off-by: Yicong Yang <yangyicong(a)hisilicon.com> Link: https://lore.kernel.org/r/20240411123030.7201-1-yangyicong@huawei.com Signed-off-by: Will Deacon <will(a)kernel.org> Signed-off-by: Junhao He <hejunhao3(a)huawei.com> --- arch/arm64/include/asm/assembler.h | 7 ++++--- arch/arm64/include/asm/sysreg.h | 1 + arch/arm64/kernel/head.S | 9 +++++---- 3 files changed, 10 insertions(+), 7 deletions(-) diff --git a/arch/arm64/include/asm/assembler.h b/arch/arm64/include/asm/assembler.h index 5e6bacda05d8..63db8e5ec9f8 100644 --- a/arch/arm64/include/asm/assembler.h +++ b/arch/arm64/include/asm/assembler.h @@ -466,9 +466,10 @@ USER(\label, ic ivau, \tmp2) // invalidate I line PoU */ .macro reset_pmuserenr_el0, tmpreg mrs \tmpreg, id_aa64dfr0_el1 - sbfx \tmpreg, \tmpreg, #ID_AA64DFR0_PMUVER_SHIFT, #4 - cmp \tmpreg, #1 // Skip if no PMU present - b.lt 9000f + ubfx \tmpreg, \tmpreg, #ID_AA64DFR0_PMUVER_SHIFT, #4 + cmp \tmpreg, #ID_AA64DFR0_PMUVER_NI + ccmp \tmpreg, #ID_AA64DFR0_PMUVER_IMP_DEF, #4, ne + b.eq 9000f msr pmuserenr_el0, xzr // Disable PMU access from EL0 9000: .endm diff --git a/arch/arm64/include/asm/sysreg.h b/arch/arm64/include/asm/sysreg.h index 8bcc9ac9963e..9705f7abd428 100644 --- a/arch/arm64/include/asm/sysreg.h +++ b/arch/arm64/include/asm/sysreg.h @@ -1488,6 +1488,7 @@ #define ID_AA64DFR0_EL1_BRBE_NI 0x0 #define ID_AA64DFR0_EL1_BRBE_IMP 0x1 #define ID_AA64DFR0_EL1_BRBE_BRBE_V1P1 0x2 +#define ID_AA64DFR0_PMUVER_NI 0x0 #define ID_AA64DFR0_PMUVER_8_0 0x1 #define ID_AA64DFR0_PMUVER_8_1 0x4 #define ID_AA64DFR0_PMUVER_8_4 0x5 diff --git a/arch/arm64/kernel/head.S b/arch/arm64/kernel/head.S index 91890de6cefa..b44213388bab 100644 --- a/arch/arm64/kernel/head.S +++ b/arch/arm64/kernel/head.S @@ -623,13 +623,14 @@ set_hcr: /* EL2 debug */ mrs x1, id_aa64dfr0_el1 - sbfx x0, x1, #ID_AA64DFR0_PMUVER_SHIFT, #4 - cmp x0, #1 - b.lt 4f // Skip if no PMU present + ubfx x0, x1, #ID_AA64DFR0_PMUVER_SHIFT, #4 + cmp x0, #ID_AA64DFR0_PMUVER_NI + ccmp x0, #ID_AA64DFR0_PMUVER_IMP_DEF, #4, ne + b.eq 4f // Skip if no PMU present mrs x0, pmcr_el0 // Disable debug access traps ubfx x0, x0, #11, #5 // to EL2 and allow access to 4: - csel x3, xzr, x0, lt // all PMU counters from EL1 + csel x3, xzr, x0, eq // all PMU counters from EL1 /* Statistical profiling */ ubfx x0, x1, #ID_AA64DFR0_PMSVER_SHIFT, #4 -- 2.33.0

2 1

[PATCH openEuler-22.03-LTS-SP1] x86, relocs: Ignore relocations in .notes section
by liwei 04 Jul '24

04 Jul '24

From: Kees Cook <keescook(a)chromium.org> mainline inclusion from mainline-v6.9-rc1 commit aaa8736370db1a78f0e8434344a484f9fd20be3b category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNFG CVE: CVE-2024-26816 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ---------------------------------- When building with CONFIG_XEN_PV=y, .text symbols are emitted into the .notes section so that Xen can find the "startup_xen" entry point. This information is used prior to booting the kernel, so relocations are not useful. In fact, performing relocations against the .notes section means that the KASLR base is exposed since /sys/kernel/notes is world-readable. To avoid leaking the KASLR base without breaking unprivileged tools that are expecting to read /sys/kernel/notes, skip performing relocations in the .notes section. The values readable in .notes are then identical to those found in System.map. Reported-by: Guixiong Wei <guixiongwei(a)gmail.com> Closes: https://lore.kernel.org/all/20240218073501.54555-1-guixiongwei@gmail.com/ Fixes: 5ead97c84fa7 ("xen: Core Xen implementation") Fixes: da1a679cde9b ("Add /sys/kernel/notes") Reviewed-by: Juergen Gross <jgross(a)suse.com> Signed-off-by: Kees Cook <keescook(a)chromium.org> Signed-off-by: liwei <liwei728(a)huawei.com> --- arch/x86/tools/relocs.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/arch/x86/tools/relocs.c b/arch/x86/tools/relocs.c index 1c3a1962cade..0043fd374a62 100644 --- a/arch/x86/tools/relocs.c +++ b/arch/x86/tools/relocs.c @@ -596,6 +596,14 @@ static void print_absolute_relocs(void) if (!(sec_applies->shdr.sh_flags & SHF_ALLOC)) { continue; } + /* + * Do not perform relocations in .notes section; any + * values there are meant for pre-boot consumption (e.g. + * startup_xen). + */ + if (sec_applies->shdr.sh_type == SHT_NOTE) { + continue; + } sh_symtab = sec_symtab->symtab; sym_strtab = sec_symtab->link->strtab; for (j = 0; j < sec->shdr.sh_size/sizeof(Elf_Rel); j++) { -- 2.25.1

2 1

[PATCH OLK-5.10] x86, relocs: Ignore relocations in .notes section
by liwei 04 Jul '24

04 Jul '24

From: Kees Cook <keescook(a)chromium.org> mainline inclusion from mainline-v6.9-rc1 commit aaa8736370db1a78f0e8434344a484f9fd20be3b category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNFG CVE: CVE-2024-26816 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ---------------------------------- When building with CONFIG_XEN_PV=y, .text symbols are emitted into the .notes section so that Xen can find the "startup_xen" entry point. This information is used prior to booting the kernel, so relocations are not useful. In fact, performing relocations against the .notes section means that the KASLR base is exposed since /sys/kernel/notes is world-readable. To avoid leaking the KASLR base without breaking unprivileged tools that are expecting to read /sys/kernel/notes, skip performing relocations in the .notes section. The values readable in .notes are then identical to those found in System.map. Reported-by: Guixiong Wei <guixiongwei(a)gmail.com> Closes: https://lore.kernel.org/all/20240218073501.54555-1-guixiongwei@gmail.com/ Fixes: 5ead97c84fa7 ("xen: Core Xen implementation") Fixes: da1a679cde9b ("Add /sys/kernel/notes") Reviewed-by: Juergen Gross <jgross(a)suse.com> Signed-off-by: Kees Cook <keescook(a)chromium.org> Signed-off-by: liwei <liwei728(a)huawei.com> --- arch/x86/tools/relocs.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/arch/x86/tools/relocs.c b/arch/x86/tools/relocs.c index 3a6c8ebc8032..4fe8eab9152f 100644 --- a/arch/x86/tools/relocs.c +++ b/arch/x86/tools/relocs.c @@ -579,6 +579,14 @@ static void print_absolute_relocs(void) if (!(sec_applies->shdr.sh_flags & SHF_ALLOC)) { continue; } + /* + * Do not perform relocations in .notes section; any + * values there are meant for pre-boot consumption (e.g. + * startup_xen). + */ + if (sec_applies->shdr.sh_type == SHT_NOTE) { + continue; + } sh_symtab = sec_symtab->symtab; sym_strtab = sec_symtab->link->strtab; for (j = 0; j < sec->shdr.sh_size/sizeof(Elf_Rel); j++) { -- 2.25.1

2 1

[PATCH OLK-5.10] arm64: arm_pmuv3: Correctly extract and check the PMUVer
by Junhao He 04 Jul '24

04 Jul '24

mainline inclusion from mainline-v6.10-rc1 commit b782e8d07baac95a5ce3f8773cc61f4ed7d0ccbc category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/I9GLIG CVE: NA Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ---------------------------------------------------------------------- Currently we're using "sbfx" to extract the PMUVer from ID_AA64DFR0_EL1 and skip the init/reset if no PMU present when the extracted PMUVer is negative or is zero. However for PMUv3p8 the PMUVer will be 0b1000 and PMUVer extracted by "sbfx" will always be negative and we'll skip the init/reset in __init_el2_debug/reset_pmuserenr_el0 unexpectedly. So this patch use "ubfx" instead of "sbfx" to extract the PMUVer. If the PMUVer is implementation defined (0b1111) or not implemented(0b0000) then skip the reset/init. Previously we'll also skip the init/reset if the PMUVer is higher than the version we known (currently PMUv3p9), with this patch we'll only skip if the PMU is not implemented or implementation defined. This keeps consistence with how we probe the PMU in the driver with pmuv3_implemented(). Signed-off-by: Yicong Yang <yangyicong(a)hisilicon.com> Link: https://lore.kernel.org/r/20240411123030.7201-1-yangyicong@huawei.com Signed-off-by: Will Deacon <will(a)kernel.org> Signed-off-by: Junhao He <hejunhao3(a)huawei.com> --- arch/arm64/include/asm/assembler.h | 7 ++++--- arch/arm64/include/asm/sysreg.h | 1 + arch/arm64/kernel/head.S | 9 +++++---- 3 files changed, 10 insertions(+), 7 deletions(-) diff --git a/arch/arm64/include/asm/assembler.h b/arch/arm64/include/asm/assembler.h index 5e6bacda05d8..63db8e5ec9f8 100644 --- a/arch/arm64/include/asm/assembler.h +++ b/arch/arm64/include/asm/assembler.h @@ -466,9 +466,10 @@ USER(\label, ic ivau, \tmp2) // invalidate I line PoU */ .macro reset_pmuserenr_el0, tmpreg mrs \tmpreg, id_aa64dfr0_el1 - sbfx \tmpreg, \tmpreg, #ID_AA64DFR0_PMUVER_SHIFT, #4 - cmp \tmpreg, #1 // Skip if no PMU present - b.lt 9000f + ubfx \tmpreg, \tmpreg, #ID_AA64DFR0_PMUVER_SHIFT, #4 + cmp \tmpreg, #ID_AA64DFR0_PMUVER_NI + ccmp \tmpreg, #ID_AA64DFR0_PMUVER_IMP_DEF, #4, ne + b.eq 9000f msr pmuserenr_el0, xzr // Disable PMU access from EL0 9000: .endm diff --git a/arch/arm64/include/asm/sysreg.h b/arch/arm64/include/asm/sysreg.h index 8bcc9ac9963e..9705f7abd428 100644 --- a/arch/arm64/include/asm/sysreg.h +++ b/arch/arm64/include/asm/sysreg.h @@ -1488,6 +1488,7 @@ #define ID_AA64DFR0_EL1_BRBE_NI 0x0 #define ID_AA64DFR0_EL1_BRBE_IMP 0x1 #define ID_AA64DFR0_EL1_BRBE_BRBE_V1P1 0x2 +#define ID_AA64DFR0_PMUVER_NI 0x0 #define ID_AA64DFR0_PMUVER_8_0 0x1 #define ID_AA64DFR0_PMUVER_8_1 0x4 #define ID_AA64DFR0_PMUVER_8_4 0x5 diff --git a/arch/arm64/kernel/head.S b/arch/arm64/kernel/head.S index 91890de6cefa..b44213388bab 100644 --- a/arch/arm64/kernel/head.S +++ b/arch/arm64/kernel/head.S @@ -623,13 +623,14 @@ set_hcr: /* EL2 debug */ mrs x1, id_aa64dfr0_el1 - sbfx x0, x1, #ID_AA64DFR0_PMUVER_SHIFT, #4 - cmp x0, #1 - b.lt 4f // Skip if no PMU present + ubfx x0, x1, #ID_AA64DFR0_PMUVER_SHIFT, #4 + cmp x0, #ID_AA64DFR0_PMUVER_NI + ccmp x0, #ID_AA64DFR0_PMUVER_IMP_DEF, #4, ne + b.eq 4f // Skip if no PMU present mrs x0, pmcr_el0 // Disable debug access traps ubfx x0, x0, #11, #5 // to EL2 and allow access to 4: - csel x3, xzr, x0, lt // all PMU counters from EL1 + csel x3, xzr, x0, eq // all PMU counters from EL1 /* Statistical profiling */ ubfx x0, x1, #ID_AA64DFR0_PMSVER_SHIFT, #4 -- 2.33.0

2 1

[PATCH openEuler-1.0-LTS] x86, relocs: Ignore relocations in .notes section
by liwei 04 Jul '24

04 Jul '24

From: Kees Cook <keescook(a)chromium.org> stable inclusion from stable-v4.19.311 commit 13edb509abc91c72152a11baaf0e7c060a312e03 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9FNFG CVE: CVE-2024-26816 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit aaa8736370db1a78f0e8434344a484f9fd20be3b ] When building with CONFIG_XEN_PV=y, .text symbols are emitted into the .notes section so that Xen can find the "startup_xen" entry point. This information is used prior to booting the kernel, so relocations are not useful. In fact, performing relocations against the .notes section means that the KASLR base is exposed since /sys/kernel/notes is world-readable. To avoid leaking the KASLR base without breaking unprivileged tools that are expecting to read /sys/kernel/notes, skip performing relocations in the .notes section. The values readable in .notes are then identical to those found in System.map. Reported-by: Guixiong Wei <guixiongwei(a)gmail.com> Closes: https://lore.kernel.org/all/20240218073501.54555-1-guixiongwei@gmail.com/ Fixes: 5ead97c84fa7 ("xen: Core Xen implementation") Fixes: da1a679cde9b ("Add /sys/kernel/notes") Reviewed-by: Juergen Gross <jgross(a)suse.com> Signed-off-by: Kees Cook <keescook(a)chromium.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: liwei <liwei728(a)huawei.com> --- arch/x86/tools/relocs.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/arch/x86/tools/relocs.c b/arch/x86/tools/relocs.c index 3a6c8ebc8032..4fe8eab9152f 100644 --- a/arch/x86/tools/relocs.c +++ b/arch/x86/tools/relocs.c @@ -579,6 +579,14 @@ static void print_absolute_relocs(void) if (!(sec_applies->shdr.sh_flags & SHF_ALLOC)) { continue; } + /* + * Do not perform relocations in .notes section; any + * values there are meant for pre-boot consumption (e.g. + * startup_xen). + */ + if (sec_applies->shdr.sh_type == SHT_NOTE) { + continue; + } sh_symtab = sec_symtab->symtab; sym_strtab = sec_symtab->link->strtab; for (j = 0; j < sec->shdr.sh_size/sizeof(Elf_Rel); j++) { -- 2.25.1

2 1

[PATCH OLK-6.6] cxl/pci: Skip to handle RAS errors if CXL.mem device is detached
by Wei Li 04 Jul '24

04 Jul '24

From: Li Ming <ming4.li(a)intel.com> mainline inclusion from mainline-v6.8-rc6 commit eef5c7b28dbecd6b141987a96db6c54e49828102 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9E2M3 CVE: CVE-2024-26762 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?i… -------------------------------- The PCI AER model is an awkward fit for CXL error handling. While the expectation is that a PCI device can escalate to link reset to recover from an AER event, the same reset on CXL amounts to a surprise memory hotplug of massive amounts of memory. At present, the CXL error handler attempts some optimistic error handling to unbind the device from the cxl_mem driver after reaping some RAS register values. This results in a "hopeful" attempt to unplug the memory, but there is no guarantee that will succeed. A subsequent AER notification after the memdev unbind event can no longer assume the registers are mapped. Check for memdev bind before reaping status register values to avoid crashes of the form: BUG: unable to handle page fault for address: ffa00000195e9100 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page [...] RIP: 0010:__cxl_handle_ras+0x30/0x110 [cxl_core] [...] Call Trace: <TASK> ? __die+0x24/0x70 ? page_fault_oops+0x82/0x160 ? kernelmode_fixup_or_oops+0x84/0x110 ? exc_page_fault+0x113/0x170 ? asm_exc_page_fault+0x26/0x30 ? __pfx_dpc_reset_link+0x10/0x10 ? __cxl_handle_ras+0x30/0x110 [cxl_core] ? find_cxl_port+0x59/0x80 [cxl_core] cxl_handle_rp_ras+0xbc/0xd0 [cxl_core] cxl_error_detected+0x6c/0xf0 [cxl_core] report_error_detected+0xc7/0x1c0 pci_walk_bus+0x73/0x90 pcie_do_recovery+0x23f/0x330 Longer term, the unbind and PCI_ERS_RESULT_DISCONNECT behavior might need to be replaced with a new PCI_ERS_RESULT_PANIC. Fixes: 6ac07883dbb5 ("cxl/pci: Add RCH downstream port error logging") Cc: stable(a)vger.kernel.org Suggested-by: Dan Williams <dan.j.williams(a)intel.com> Signed-off-by: Li Ming <ming4.li(a)intel.com> Link: https://lore.kernel.org/r/20240129131856.2458980-1-ming4.li@intel.com Signed-off-by: Dan Williams <dan.j.williams(a)intel.com> Signed-off-by: Wei Li <liwei391(a)huawei.com> --- drivers/cxl/core/pci.c | 43 ++++++++++++++++++++++++++++++------------ 1 file changed, 31 insertions(+), 12 deletions(-) diff --git a/drivers/cxl/core/pci.c b/drivers/cxl/core/pci.c index 011197fa61036..e78c8e6a5c9a7 100644 --- a/drivers/cxl/core/pci.c +++ b/drivers/cxl/core/pci.c @@ -904,11 +904,21 @@ static void cxl_handle_rdport_errors(struct cxl_dev_state *cxlds) { } void cxl_cor_error_detected(struct pci_dev *pdev) { struct cxl_dev_state *cxlds = pci_get_drvdata(pdev); + struct device *dev = &cxlds->cxlmd->dev; + + scoped_guard(device, dev) { + if (!dev->driver) { + dev_warn(&pdev->dev, + "%s: memdev disabled, abort error handling\n", + dev_name(dev)); + return; + } - if (cxlds->rcd) - cxl_handle_rdport_errors(cxlds); + if (cxlds->rcd) + cxl_handle_rdport_errors(cxlds); - cxl_handle_endpoint_cor_ras(cxlds); + cxl_handle_endpoint_cor_ras(cxlds); + } } EXPORT_SYMBOL_NS_GPL(cxl_cor_error_detected, CXL); @@ -920,16 +930,25 @@ pci_ers_result_t cxl_error_detected(struct pci_dev *pdev, struct device *dev = &cxlmd->dev; bool ue; - if (cxlds->rcd) - cxl_handle_rdport_errors(cxlds); + scoped_guard(device, dev) { + if (!dev->driver) { + dev_warn(&pdev->dev, + "%s: memdev disabled, abort error handling\n", + dev_name(dev)); + return PCI_ERS_RESULT_DISCONNECT; + } + + if (cxlds->rcd) + cxl_handle_rdport_errors(cxlds); + /* + * A frozen channel indicates an impending reset which is fatal to + * CXL.mem operation, and will likely crash the system. On the off + * chance the situation is recoverable dump the status of the RAS + * capability registers and bounce the active state of the memdev. + */ + ue = cxl_handle_endpoint_ras(cxlds); + } - /* - * A frozen channel indicates an impending reset which is fatal to - * CXL.mem operation, and will likely crash the system. On the off - * chance the situation is recoverable dump the status of the RAS - * capability registers and bounce the active state of the memdev. - */ - ue = cxl_handle_endpoint_ras(cxlds); switch (state) { case pci_channel_io_normal: -- 2.25.1

2 1

[PATCH openEuler-22.03-LTS-SP1 0/2] CVE-2024-39469
by Yu Liao 04 Jul '24

04 Jul '24

CVE-2024-39469 Matthew Wilcox (Oracle) (1): nilfs2: return the mapped address from nilfs_get_page() Ryusuke Konishi (1): nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors fs/nilfs2/dir.c | 59 +++++++++++++++++++++++-------------------------- 1 file changed, 28 insertions(+), 31 deletions(-) -- 2.33.0

2 3

[PATCH v2 OLK-6.6] Revert "ACPI: processor: Add support for processors described as container packages"
by liwei 04 Jul '24

04 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAAJ94 ---------------------------- 'processor_container_handler' identifies ACPI0010 does not match the Processor information reported by DSDT. This reverts commit 2f257a8ec840ccc5fcefab424f468552da7b15ff. Fixes: 2f257a8ec840 ("ACPI: processor: Add support for processors described as container packages") Signed-off-by: liwei <liwei728(a)huawei.com> --- drivers/acpi/acpi_processor.c | 22 ---------------------- 1 file changed, 22 deletions(-) diff --git a/drivers/acpi/acpi_processor.c b/drivers/acpi/acpi_processor.c index 0ff69af46a50..d46e1fe25d58 100644 --- a/drivers/acpi/acpi_processor.c +++ b/drivers/acpi/acpi_processor.c @@ -698,31 +698,9 @@ static struct acpi_scan_handler processor_handler = { }, }; -static acpi_status acpi_processor_container_walk(acpi_handle handle, - u32 lvl, - void *context, - void **rv) -{ - struct acpi_device *adev; - acpi_status status; - - adev = acpi_get_acpi_dev(handle); - if (!adev) - return AE_ERROR; - - status = acpi_processor_add(adev, &processor_device_ids[0]); - acpi_put_acpi_dev(adev); - - return status; -} - static int acpi_processor_container_attach(struct acpi_device *dev, const struct acpi_device_id *id) { - acpi_walk_namespace(ACPI_TYPE_PROCESSOR, dev->handle, - ACPI_UINT32_MAX, acpi_processor_container_walk, - NULL, NULL, NULL); - return 1; } -- 2.25.1

2 1

[PATCH OLK-5.10 0/2] CVE-2024-39469
by Yu Liao 04 Jul '24

04 Jul '24

CVE-2024-39469 Matthew Wilcox (Oracle) (1): nilfs2: return the mapped address from nilfs_get_page() Ryusuke Konishi (1): nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors fs/nilfs2/dir.c | 59 +++++++++++++++++++++++-------------------------- 1 file changed, 28 insertions(+), 31 deletions(-) -- 2.33.0

2 3

[PATCH openEuler-1.0-LTS 0/2] Fix CVE-2024-36949
by Zheng Zucheng 04 Jul '24

04 Jul '24

Mukul Joshi (1): drm/amdkfd: Rework kfd_locked handling Zhigang Luo (1): amd/amdkfd: sync all devices to wait all processes being evicted drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 3 --- drivers/gpu/drm/amd/amdkfd/kfd_device.c | 27 +++++++++++++++--------- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 1 + drivers/gpu/drm/amd/amdkfd/kfd_process.c | 8 ++++++- 4 files changed, 25 insertions(+), 14 deletions(-) -- 2.34.1

2 3

[PATCH openEuler-1.0-LTS V1] USB: core: Fix hang in usb_kill_urb by adding memory barriers
by Cheng Yu 04 Jul '24

04 Jul '24

From: Alan Stern <stern(a)rowland.harvard.edu> stable inclusion from stable-v5.10.96 commit e3b131e30e612ff0e32de6c1cb4f69f89db29193 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA72HV CVE: CVE-2022-48760 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 26fbe9772b8c459687930511444ce443011f86bf upstream. The syzbot fuzzer has identified a bug in which processes hang waiting for usb_kill_urb() to return. It turns out the issue is not unlinking the URB; that works just fine. Rather, the problem arises when the wakeup notification that the URB has completed is not received. The reason is memory-access ordering on SMP systems. In outline form, usb_kill_urb() and __usb_hcd_giveback_urb() operating concurrently on different CPUs perform the following actions: CPU 0 CPU 1 ---------------------------- --------------------------------- usb_kill_urb(): __usb_hcd_giveback_urb(): ... ... atomic_inc(&urb->reject); atomic_dec(&urb->use_count); ... ... wait_event(usb_kill_urb_queue, atomic_read(&urb->use_count) == 0); if (atomic_read(&urb->reject)) wake_up(&usb_kill_urb_queue); Confining your attention to urb->reject and urb->use_count, you can see that the overall pattern of accesses on CPU 0 is: write urb->reject, then read urb->use_count; whereas the overall pattern of accesses on CPU 1 is: write urb->use_count, then read urb->reject. This pattern is referred to in memory-model circles as SB (for "Store Buffering"), and it is well known that without suitable enforcement of the desired order of accesses -- in the form of memory barriers -- it is entirely possible for one or both CPUs to execute their reads ahead of their writes. The end result will be that sometimes CPU 0 sees the old un-decremented value of urb->use_count while CPU 1 sees the old un-incremented value of urb->reject. Consequently CPU 0 ends up on the wait queue and never gets woken up, leading to the observed hang in usb_kill_urb(). The same pattern of accesses occurs in usb_poison_urb() and the failure pathway of usb_hcd_submit_urb(). The problem is fixed by adding suitable memory barriers. To provide proper memory-access ordering in the SB pattern, a full barrier is required on both CPUs. The atomic_inc() and atomic_dec() accesses themselves don't provide any memory ordering, but since they are present, we can use the optimized smp_mb__after_atomic() memory barrier in the various routines to obtain the desired effect. This patch adds the necessary memory barriers. CC: <stable(a)vger.kernel.org> Reported-and-tested-by: syzbot+76629376e06e2c2ad626(a)syzkaller.appspotmail.com Signed-off-by: Alan Stern <stern(a)rowland.harvard.edu> Link: https://lore.kernel.org/r/Ye8K0QYee0Q0Nna2@rowland.harvard.edu Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Cheng Yu <serein.chengyu(a)huawei.com> --- drivers/usb/core/hcd.c | 14 ++++++++++++++ drivers/usb/core/urb.c | 12 ++++++++++++ 2 files changed, 26 insertions(+) diff --git a/drivers/usb/core/hcd.c b/drivers/usb/core/hcd.c index 62e6c526e6ed..acff95a9f239 100644 --- a/drivers/usb/core/hcd.c +++ b/drivers/usb/core/hcd.c @@ -1663,6 +1663,13 @@ int usb_hcd_submit_urb (struct urb *urb, gfp_t mem_flags) urb->hcpriv = NULL; INIT_LIST_HEAD(&urb->urb_list); atomic_dec(&urb->use_count); + /* + * Order the write of urb->use_count above before the read + * of urb->reject below. Pairs with the memory barriers in + * usb_kill_urb() and usb_poison_urb(). + */ + smp_mb__after_atomic(); + atomic_dec(&urb->dev->urbnum); if (atomic_read(&urb->reject)) wake_up(&usb_kill_urb_queue); @@ -1772,6 +1779,13 @@ static void __usb_hcd_giveback_urb(struct urb *urb) usb_anchor_resume_wakeups(anchor); atomic_dec(&urb->use_count); + /* + * Order the write of urb->use_count above before the read + * of urb->reject below. Pairs with the memory barriers in + * usb_kill_urb() and usb_poison_urb(). + */ + smp_mb__after_atomic(); + if (unlikely(atomic_read(&urb->reject))) wake_up(&usb_kill_urb_queue); usb_put_urb(urb); diff --git a/drivers/usb/core/urb.c b/drivers/usb/core/urb.c index 5e844097a9e3..abf4681159df 100644 --- a/drivers/usb/core/urb.c +++ b/drivers/usb/core/urb.c @@ -692,6 +692,12 @@ void usb_kill_urb(struct urb *urb) if (!(urb && urb->dev && urb->ep)) return; atomic_inc(&urb->reject); + /* + * Order the write of urb->reject above before the read + * of urb->use_count below. Pairs with the barriers in + * __usb_hcd_giveback_urb() and usb_hcd_submit_urb(). + */ + smp_mb__after_atomic(); usb_hcd_unlink_urb(urb, -ENOENT); wait_event(usb_kill_urb_queue, atomic_read(&urb->use_count) == 0); @@ -733,6 +739,12 @@ void usb_poison_urb(struct urb *urb) if (!urb) return; atomic_inc(&urb->reject); + /* + * Order the write of urb->reject above before the read + * of urb->use_count below. Pairs with the barriers in + * __usb_hcd_giveback_urb() and usb_hcd_submit_urb(). + */ + smp_mb__after_atomic(); if (!urb->dev || !urb->ep) return; -- 2.25.1

2 1

[openeuler:openEuler-1.0-LTS 23159/23203] include/asm-generic/atomic-instrumented.h:33:9: warning: 'wait_req' may be used uninitialized
by kernel test robot 04 Jul '24

04 Jul '24

tree: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS head: 3747e12f550e11fcfb6878af5c6e88f3e4af0d1f commit: 6741506ca02825b90e77088e8fce01c3d02edfdd [23159/23203] nilfs2: fix unexpected freezing of nilfs_segctor_sync() config: x86_64-buildonly-randconfig-005-20240704 (https://download.01.org/0day-ci/archive/20240704/202407041352.YmlrzTKf-lkp@…) compiler: gcc-12 (Ubuntu 12.3.0-9ubuntu2) 12.3.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20240704/202407041352.YmlrzTKf-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202407041352.YmlrzTKf-lkp@intel.com/ Note: it may well be a FALSE warning. FWIW you are at least aware of it now. http://gcc.gnu.org/wiki/Better_Uninitialized_Warnings All warnings (new ones prefixed by >>): In file included from arch/x86/include/asm/atomic.h:265, from arch/x86/include/asm/msr.h:67, from arch/x86/include/asm/processor.h:21, from arch/x86/include/asm/cpufeature.h:5, from arch/x86/include/asm/thread_info.h:53, from include/linux/thread_bits.h:22, from include/linux/thread_info.h:14, from arch/x86/include/asm/preempt.h:7, from include/linux/preempt.h:81, from include/linux/spinlock.h:51, from include/linux/mmzone.h:9, from include/linux/gfp.h:6, from include/linux/mm.h:11, from include/linux/pagemap.h:8, from fs/nilfs2/segment.c:11: In function 'atomic_set', inlined from 'nilfs_segctor_sync' at fs/nilfs2/segment.c:2175:2: >> include/asm-generic/atomic-instrumented.h:33:9: warning: 'wait_req' may be used uninitialized [-Wmaybe-uninitialized] 33 | kasan_check_write(v, sizeof(*v)); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ In file included from include/linux/compiler.h:265, from include/asm-generic/bug.h:5, from arch/x86/include/asm/bug.h:83, from include/linux/bug.h:5, from include/linux/mmdebug.h:5, from include/linux/mm.h:10: include/linux/kasan-checks.h: In function 'nilfs_segctor_sync': include/linux/kasan-checks.h:7:6: note: by argument 1 of type 'const volatile void *' to 'kasan_check_write' declared here 7 | void kasan_check_write(const volatile void *p, unsigned int size); | ^~~~~~~~~~~~~~~~~ fs/nilfs2/segment.c:2170:43: note: 'wait_req' declared here 2170 | struct nilfs_segctor_wait_request wait_req; | ^~~~~~~~ vim +/wait_req +33 include/asm-generic/atomic-instrumented.h b06ed71a624ba0 Dmitry Vyukov 2018-01-29 30 b06ed71a624ba0 Dmitry Vyukov 2018-01-29 31 static __always_inline void atomic_set(atomic_t *v, int i) b06ed71a624ba0 Dmitry Vyukov 2018-01-29 32 { a35353bb9eb199 Dmitry Vyukov 2018-01-29 @33 kasan_check_write(v, sizeof(*v)); b06ed71a624ba0 Dmitry Vyukov 2018-01-29 34 arch_atomic_set(v, i); b06ed71a624ba0 Dmitry Vyukov 2018-01-29 35 } b06ed71a624ba0 Dmitry Vyukov 2018-01-29 36 :::::: The code at line 33 was first introduced by commit :::::: a35353bb9eb1990a44a0d7585f99e9589bcdb682 locking/atomic, asm-generic: Add KASAN instrumentation to atomic operations :::::: TO: Dmitry Vyukov <dvyukov(a)google.com> :::::: CC: Ingo Molnar <mingo(a)kernel.org> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6] Revert "ACPI: processor: Add support for processors described as container packages"
by liwei 04 Jul '24

04 Jul '24

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IAAJ94 ---------------------------- 'processor_container_handler' identifies ACPI0010 does not match the Processor information reported by DSDT. This reverts commit 2f257a8ec840ccc5fcefab424f468552da7b15ff. Signed-off-by: liwei <liwei728(a)huawei.com> --- drivers/acpi/acpi_processor.c | 22 ---------------------- 1 file changed, 22 deletions(-) diff --git a/drivers/acpi/acpi_processor.c b/drivers/acpi/acpi_processor.c index 0ff69af46a50..d46e1fe25d58 100644 --- a/drivers/acpi/acpi_processor.c +++ b/drivers/acpi/acpi_processor.c @@ -698,31 +698,9 @@ static struct acpi_scan_handler processor_handler = { }, }; -static acpi_status acpi_processor_container_walk(acpi_handle handle, - u32 lvl, - void *context, - void **rv) -{ - struct acpi_device *adev; - acpi_status status; - - adev = acpi_get_acpi_dev(handle); - if (!adev) - return AE_ERROR; - - status = acpi_processor_add(adev, &processor_device_ids[0]); - acpi_put_acpi_dev(adev); - - return status; -} - static int acpi_processor_container_attach(struct acpi_device *dev, const struct acpi_device_id *id) { - acpi_walk_namespace(ACPI_TYPE_PROCESSOR, dev->handle, - ACPI_UINT32_MAX, acpi_processor_container_walk, - NULL, NULL, NULL); - return 1; } -- 2.25.1

2 1

[PATCH openEuler-1.0-LTS] scsi: qedf: Ensure the copied buf is NUL terminated
by Zheng Zucheng 04 Jul '24

04 Jul '24

From: Bui Quang Minh <minhquangbui99(a)gmail.com> mainline inclusion from mainline-v6.10-rc1 commit d0184a375ee797eb657d74861ba0935b6e405c62 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SHD CVE: CVE-2024-38559 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Currently, we allocate a count-sized kernel buffer and copy count from userspace to that buffer. Later, we use kstrtouint on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using kstrtouint. Fix this issue by using memdup_user_nul instead of memdup_user. Fixes: 61d8658b4a43 ("scsi: qedf: Add QLogic FastLinQ offload FCoE driver framework.") Signed-off-by: Bui Quang Minh <minhquangbui99(a)gmail.com> Link: https://lore.kernel.org/r/20240424-fix-oob-read-v2-4-f1f1b53a10f4@gmail.com Signed-off-by: Martin K. Petersen <martin.petersen(a)oracle.com> Signed-off-by: Zheng Zucheng <zhengzucheng(a)huawei.com> --- drivers/scsi/qedf/qedf_debugfs.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/scsi/qedf/qedf_debugfs.c b/drivers/scsi/qedf/qedf_debugfs.c index c29c162a494f..e7a609b5791d 100644 --- a/drivers/scsi/qedf/qedf_debugfs.c +++ b/drivers/scsi/qedf/qedf_debugfs.c @@ -181,7 +181,7 @@ qedf_dbg_debug_cmd_write(struct file *filp, const char __user *buffer, if (!count || *ppos) return 0; - kern_buf = memdup_user(buffer, count); + kern_buf = memdup_user_nul(buffer, count); if (IS_ERR(kern_buf)) return PTR_ERR(kern_buf); -- 2.34.1

2 1

[PATCH openEuler-22.03-LTS-SP1] dma-mapping: benchmark: handle NUMA_NO_NODE correctly
by Liu Shixin 04 Jul '24

04 Jul '24

From: Fedor Pchelkin <pchelkin(a)ispras.ru> mainline inclusion from mainline-v6.10-rc2 commit e64746e74f717961250a155e14c156616fcd981f category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA7DCL CVE: CVE-2024-39277 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- cpumask_of_node() can be called for NUMA_NO_NODE inside do_map_benchmark() resulting in the following sanitizer report: UBSAN: array-index-out-of-bounds in ./arch/x86/include/asm/topology.h:72:28 index -1 is out of range for type 'cpumask [64][1]' CPU: 1 PID: 990 Comm: dma_map_benchma Not tainted 6.9.0-rc6 #29 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) Call Trace: <TASK> dump_stack_lvl (lib/dump_stack.c:117) ubsan_epilogue (lib/ubsan.c:232) __ubsan_handle_out_of_bounds (lib/ubsan.c:429) cpumask_of_node (arch/x86/include/asm/topology.h:72) [inline] do_map_benchmark (kernel/dma/map_benchmark.c:104) map_benchmark_ioctl (kernel/dma/map_benchmark.c:246) full_proxy_unlocked_ioctl (fs/debugfs/file.c:333) __x64_sys_ioctl (fs/ioctl.c:890) do_syscall_64 (arch/x86/entry/common.c:83) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) Use cpumask_of_node() in place when binding a kernel thread to a cpuset of a particular node. Note that the provided node id is checked inside map_benchmark_ioctl(). It's just a NUMA_NO_NODE case which is not handled properly later. Found by Linux Verification Center (linuxtesting.org) Fixes: 65789daa8087 ("dma-mapping: add benchmark support for streaming DMA APIs") Signed-off-by: Fedor Pchelkin <pchelkin(a)ispras.ru> Acked-by: Barry Song <baohua(a)kernel.org> Signed-off-by: Christoph Hellwig <hch(a)lst.de> Signed-off-by: Liu Shixin <liushixin2(a)huawei.com> --- kernel/dma/map_benchmark.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/kernel/dma/map_benchmark.c b/kernel/dma/map_benchmark.c index e0e64f8b0739..c2d225e1cd47 100644 --- a/kernel/dma/map_benchmark.c +++ b/kernel/dma/map_benchmark.c @@ -121,7 +121,6 @@ static int do_map_benchmark(struct map_benchmark_data *map) struct task_struct **tsk; int threads = map->bparam.threads; int node = map->bparam.node; - const cpumask_t *cpu_mask = cpumask_of_node(node); u64 loops; int ret = 0; int i; @@ -142,7 +141,7 @@ static int do_map_benchmark(struct map_benchmark_data *map) } if (node != NUMA_NO_NODE) - kthread_bind_mask(tsk[i], cpu_mask); + kthread_bind_mask(tsk[i], cpumask_of_node(node)); } /* clear the old value in the previous benchmark */ -- 2.25.1

2 1

[PATCH openEuler-22.03-LTS-SP1] media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
by Liu Shixin 04 Jul '24

04 Jul '24

From: Zhipeng Lu <alexious(a)zju.edu.cn> stable inclusion from stable-v5.10.219 commit 4b68b861b514a5c09220d622ac3784c0ebac6c80 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SGC CVE: CVE-2024-38547 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 3b621e9e9e148c0928ab109ac3d4b81487469acb ] The allocation failure of mycs->yuv_scaler_binary in load_video_binaries() is followed with a dereference of mycs->yuv_scaler_binary after the following call chain: sh_css_pipe_load_binaries() |-> load_video_binaries(mycs->yuv_scaler_binary == NULL) | |-> sh_css_pipe_unload_binaries() |-> unload_video_binaries() In unload_video_binaries(), it calls to ia_css_binary_unload with argument &pipe->pipe_settings.video.yuv_scaler_binary[i], which refers to the same memory slot as mycs->yuv_scaler_binary. Thus, a null-pointer dereference is triggered. Link: https://lore.kernel.org/r/20240118151303.3828292-1-alexious@zju.edu.cn Fixes: a49d25364dfb ("staging/atomisp: Add support for the Intel IPU v2") Signed-off-by: Zhipeng Lu <alexious(a)zju.edu.cn> Reviewed-by: Andy Shevchenko <andy.shevchenko(a)gmail.com> Signed-off-by: Hans de Goede <hdegoede(a)redhat.com> Signed-off-by: Mauro Carvalho Chehab <mchehab(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Liu Shixin <liushixin2(a)huawei.com> --- drivers/staging/media/atomisp/pci/sh_css.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/staging/media/atomisp/pci/sh_css.c b/drivers/staging/media/atomisp/pci/sh_css.c index 54a18921fbd1..cb0354520360 100644 --- a/drivers/staging/media/atomisp/pci/sh_css.c +++ b/drivers/staging/media/atomisp/pci/sh_css.c @@ -5477,6 +5477,7 @@ static int load_video_binaries(struct ia_css_pipe *pipe) mycs->yuv_scaler_binary = kzalloc(cas_scaler_descr.num_stage * sizeof(struct ia_css_binary), GFP_KERNEL); if (!mycs->yuv_scaler_binary) { + mycs->num_yuv_scaler = 0; err = -ENOMEM; return err; } -- 2.25.1

2 1

[PATCH openEuler-22.03-LTS-SP1 0/1] CVE-2024-38621
by Liao Chen 04 Jul '24

04 Jul '24

media: stk1160: fix bounds checking in stk1160_copy_video() Dan Carpenter (1): media: stk1160: fix bounds checking in stk1160_copy_video() drivers/media/usb/stk1160/stk1160-video.c | 20 +++++++++++++++----- 1 file changed, 15 insertions(+), 5 deletions(-) -- 2.34.1

2 2

[PATCH openEuler-1.0-LTS] net/9p: fix uninit-value in p9_client_rpc()
by Yang Yingliang 04 Jul '24

04 Jul '24

From: Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> mainline inclusion from mainline-v6.10-rc2 commit 25460d6f39024cc3b8241b14c7ccf0d6f11a736a category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA8AEF CVE: CVE-2024-39301 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… --------------------------- Syzbot with the help of KMSAN reported the following error: BUG: KMSAN: uninit-value in trace_9p_client_res include/trace/events/9p.h:146 [inline] BUG: KMSAN: uninit-value in p9_client_rpc+0x1314/0x1340 net/9p/client.c:754 trace_9p_client_res include/trace/events/9p.h:146 [inline] p9_client_rpc+0x1314/0x1340 net/9p/client.c:754 p9_client_create+0x1551/0x1ff0 net/9p/client.c:1031 v9fs_session_init+0x1b9/0x28e0 fs/9p/v9fs.c:410 v9fs_mount+0xe2/0x12b0 fs/9p/vfs_super.c:122 legacy_get_tree+0x114/0x290 fs/fs_context.c:662 vfs_get_tree+0xa7/0x570 fs/super.c:1797 do_new_mount+0x71f/0x15e0 fs/namespace.c:3352 path_mount+0x742/0x1f20 fs/namespace.c:3679 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount+0x725/0x810 fs/namespace.c:3875 __x64_sys_mount+0xe4/0x150 fs/namespace.c:3875 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Uninit was created at: __alloc_pages+0x9d6/0xe70 mm/page_alloc.c:4598 __alloc_pages_node include/linux/gfp.h:238 [inline] alloc_pages_node include/linux/gfp.h:261 [inline] alloc_slab_page mm/slub.c:2175 [inline] allocate_slab mm/slub.c:2338 [inline] new_slab+0x2de/0x1400 mm/slub.c:2391 ___slab_alloc+0x1184/0x33d0 mm/slub.c:3525 __slab_alloc mm/slub.c:3610 [inline] __slab_alloc_node mm/slub.c:3663 [inline] slab_alloc_node mm/slub.c:3835 [inline] kmem_cache_alloc+0x6d3/0xbe0 mm/slub.c:3852 p9_tag_alloc net/9p/client.c:278 [inline] p9_client_prepare_req+0x20a/0x1770 net/9p/client.c:641 p9_client_rpc+0x27e/0x1340 net/9p/client.c:688 p9_client_create+0x1551/0x1ff0 net/9p/client.c:1031 v9fs_session_init+0x1b9/0x28e0 fs/9p/v9fs.c:410 v9fs_mount+0xe2/0x12b0 fs/9p/vfs_super.c:122 legacy_get_tree+0x114/0x290 fs/fs_context.c:662 vfs_get_tree+0xa7/0x570 fs/super.c:1797 do_new_mount+0x71f/0x15e0 fs/namespace.c:3352 path_mount+0x742/0x1f20 fs/namespace.c:3679 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount+0x725/0x810 fs/namespace.c:3875 __x64_sys_mount+0xe4/0x150 fs/namespace.c:3875 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 If p9_check_errors() fails early in p9_client_rpc(), req->rc.tag will not be properly initialized. However, trace_9p_client_res() ends up trying to print it out anyway before p9_client_rpc() finishes. Fix this issue by assigning default values to p9_fcall fields such as 'tag' and (just in case KMSAN unearths something new) 'id' during the tag allocation stage. Reported-and-tested-by: syzbot+ff14db38f56329ef68df(a)syzkaller.appspotmail.com Fixes: 348b59012e5c ("net/9p: Convert net/9p protocol dumps to tracepoints") Signed-off-by: Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> Reviewed-by: Christian Schoenebeck <linux_oss(a)crudebyte.com> Cc: stable(a)vger.kernel.org Message-ID: <20240408141039.30428-1-n.zhandarovich(a)fintech.ru> Signed-off-by: Dominique Martinet <asmadeus(a)codewreck.org> Signed-off-by: Yang Yingliang <yangyingliang(a)huawei.com> --- net/9p/client.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/net/9p/client.c b/net/9p/client.c index d62f83f93d7b..557b7798d642 100644 --- a/net/9p/client.c +++ b/net/9p/client.c @@ -250,6 +250,8 @@ static int p9_fcall_init(struct p9_client *c, struct p9_fcall *fc, if (!fc->sdata) return -ENOMEM; fc->capacity = alloc_msize; + fc->id = 0; + fc->tag = P9_NOTAG; return 0; } -- 2.25.1

2 1

[PATCH OLK-6.6] net/9p: fix uninit-value in p9_client_rpc()
by Yang Yingliang 04 Jul '24

04 Jul '24

From: Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> mainline inclusion from mainline-v6.10-rc2 commit 25460d6f39024cc3b8241b14c7ccf0d6f11a736a category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA8AEF CVE: CVE-2024-39301 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… --------------------------- Syzbot with the help of KMSAN reported the following error: BUG: KMSAN: uninit-value in trace_9p_client_res include/trace/events/9p.h:146 [inline] BUG: KMSAN: uninit-value in p9_client_rpc+0x1314/0x1340 net/9p/client.c:754 trace_9p_client_res include/trace/events/9p.h:146 [inline] p9_client_rpc+0x1314/0x1340 net/9p/client.c:754 p9_client_create+0x1551/0x1ff0 net/9p/client.c:1031 v9fs_session_init+0x1b9/0x28e0 fs/9p/v9fs.c:410 v9fs_mount+0xe2/0x12b0 fs/9p/vfs_super.c:122 legacy_get_tree+0x114/0x290 fs/fs_context.c:662 vfs_get_tree+0xa7/0x570 fs/super.c:1797 do_new_mount+0x71f/0x15e0 fs/namespace.c:3352 path_mount+0x742/0x1f20 fs/namespace.c:3679 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount+0x725/0x810 fs/namespace.c:3875 __x64_sys_mount+0xe4/0x150 fs/namespace.c:3875 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Uninit was created at: __alloc_pages+0x9d6/0xe70 mm/page_alloc.c:4598 __alloc_pages_node include/linux/gfp.h:238 [inline] alloc_pages_node include/linux/gfp.h:261 [inline] alloc_slab_page mm/slub.c:2175 [inline] allocate_slab mm/slub.c:2338 [inline] new_slab+0x2de/0x1400 mm/slub.c:2391 ___slab_alloc+0x1184/0x33d0 mm/slub.c:3525 __slab_alloc mm/slub.c:3610 [inline] __slab_alloc_node mm/slub.c:3663 [inline] slab_alloc_node mm/slub.c:3835 [inline] kmem_cache_alloc+0x6d3/0xbe0 mm/slub.c:3852 p9_tag_alloc net/9p/client.c:278 [inline] p9_client_prepare_req+0x20a/0x1770 net/9p/client.c:641 p9_client_rpc+0x27e/0x1340 net/9p/client.c:688 p9_client_create+0x1551/0x1ff0 net/9p/client.c:1031 v9fs_session_init+0x1b9/0x28e0 fs/9p/v9fs.c:410 v9fs_mount+0xe2/0x12b0 fs/9p/vfs_super.c:122 legacy_get_tree+0x114/0x290 fs/fs_context.c:662 vfs_get_tree+0xa7/0x570 fs/super.c:1797 do_new_mount+0x71f/0x15e0 fs/namespace.c:3352 path_mount+0x742/0x1f20 fs/namespace.c:3679 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount+0x725/0x810 fs/namespace.c:3875 __x64_sys_mount+0xe4/0x150 fs/namespace.c:3875 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 If p9_check_errors() fails early in p9_client_rpc(), req->rc.tag will not be properly initialized. However, trace_9p_client_res() ends up trying to print it out anyway before p9_client_rpc() finishes. Fix this issue by assigning default values to p9_fcall fields such as 'tag' and (just in case KMSAN unearths something new) 'id' during the tag allocation stage. Reported-and-tested-by: syzbot+ff14db38f56329ef68df(a)syzkaller.appspotmail.com Fixes: 348b59012e5c ("net/9p: Convert net/9p protocol dumps to tracepoints") Signed-off-by: Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> Reviewed-by: Christian Schoenebeck <linux_oss(a)crudebyte.com> Cc: stable(a)vger.kernel.org Message-ID: <20240408141039.30428-1-n.zhandarovich(a)fintech.ru> Signed-off-by: Dominique Martinet <asmadeus(a)codewreck.org> Signed-off-by: Yang Yingliang <yangyingliang(a)huawei.com> --- net/9p/client.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/net/9p/client.c b/net/9p/client.c index f7e90b4769bb..b05f73c291b4 100644 --- a/net/9p/client.c +++ b/net/9p/client.c @@ -235,6 +235,8 @@ static int p9_fcall_init(struct p9_client *c, struct p9_fcall *fc, if (!fc->sdata) return -ENOMEM; fc->capacity = alloc_msize; + fc->id = 0; + fc->tag = P9_NOTAG; return 0; } -- 2.25.1

2 1

[PATCH OLK-5.10] net/9p: fix uninit-value in p9_client_rpc()
by Yang Yingliang 04 Jul '24

04 Jul '24

From: Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> mainline inclusion from mainline-v6.10-rc2 commit 25460d6f39024cc3b8241b14c7ccf0d6f11a736a category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA8AEF CVE: CVE-2024-39301 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… --------------------------- Syzbot with the help of KMSAN reported the following error: BUG: KMSAN: uninit-value in trace_9p_client_res include/trace/events/9p.h:146 [inline] BUG: KMSAN: uninit-value in p9_client_rpc+0x1314/0x1340 net/9p/client.c:754 trace_9p_client_res include/trace/events/9p.h:146 [inline] p9_client_rpc+0x1314/0x1340 net/9p/client.c:754 p9_client_create+0x1551/0x1ff0 net/9p/client.c:1031 v9fs_session_init+0x1b9/0x28e0 fs/9p/v9fs.c:410 v9fs_mount+0xe2/0x12b0 fs/9p/vfs_super.c:122 legacy_get_tree+0x114/0x290 fs/fs_context.c:662 vfs_get_tree+0xa7/0x570 fs/super.c:1797 do_new_mount+0x71f/0x15e0 fs/namespace.c:3352 path_mount+0x742/0x1f20 fs/namespace.c:3679 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount+0x725/0x810 fs/namespace.c:3875 __x64_sys_mount+0xe4/0x150 fs/namespace.c:3875 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Uninit was created at: __alloc_pages+0x9d6/0xe70 mm/page_alloc.c:4598 __alloc_pages_node include/linux/gfp.h:238 [inline] alloc_pages_node include/linux/gfp.h:261 [inline] alloc_slab_page mm/slub.c:2175 [inline] allocate_slab mm/slub.c:2338 [inline] new_slab+0x2de/0x1400 mm/slub.c:2391 ___slab_alloc+0x1184/0x33d0 mm/slub.c:3525 __slab_alloc mm/slub.c:3610 [inline] __slab_alloc_node mm/slub.c:3663 [inline] slab_alloc_node mm/slub.c:3835 [inline] kmem_cache_alloc+0x6d3/0xbe0 mm/slub.c:3852 p9_tag_alloc net/9p/client.c:278 [inline] p9_client_prepare_req+0x20a/0x1770 net/9p/client.c:641 p9_client_rpc+0x27e/0x1340 net/9p/client.c:688 p9_client_create+0x1551/0x1ff0 net/9p/client.c:1031 v9fs_session_init+0x1b9/0x28e0 fs/9p/v9fs.c:410 v9fs_mount+0xe2/0x12b0 fs/9p/vfs_super.c:122 legacy_get_tree+0x114/0x290 fs/fs_context.c:662 vfs_get_tree+0xa7/0x570 fs/super.c:1797 do_new_mount+0x71f/0x15e0 fs/namespace.c:3352 path_mount+0x742/0x1f20 fs/namespace.c:3679 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount+0x725/0x810 fs/namespace.c:3875 __x64_sys_mount+0xe4/0x150 fs/namespace.c:3875 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 If p9_check_errors() fails early in p9_client_rpc(), req->rc.tag will not be properly initialized. However, trace_9p_client_res() ends up trying to print it out anyway before p9_client_rpc() finishes. Fix this issue by assigning default values to p9_fcall fields such as 'tag' and (just in case KMSAN unearths something new) 'id' during the tag allocation stage. Reported-and-tested-by: syzbot+ff14db38f56329ef68df(a)syzkaller.appspotmail.com Fixes: 348b59012e5c ("net/9p: Convert net/9p protocol dumps to tracepoints") Signed-off-by: Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> Reviewed-by: Christian Schoenebeck <linux_oss(a)crudebyte.com> Cc: stable(a)vger.kernel.org Message-ID: <20240408141039.30428-1-n.zhandarovich(a)fintech.ru> Signed-off-by: Dominique Martinet <asmadeus(a)codewreck.org> Signed-off-by: Yang Yingliang <yangyingliang(a)huawei.com> --- net/9p/client.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/net/9p/client.c b/net/9p/client.c index cd85a4b6448b..0fa324e8b245 100644 --- a/net/9p/client.c +++ b/net/9p/client.c @@ -235,6 +235,8 @@ static int p9_fcall_init(struct p9_client *c, struct p9_fcall *fc, if (!fc->sdata) return -ENOMEM; fc->capacity = alloc_msize; + fc->id = 0; + fc->tag = P9_NOTAG; return 0; } -- 2.25.1

2 1

[PATCH openEuler-22.03-LTS-SP1] net/9p: fix uninit-value in p9_client_rpc()
by Yang Yingliang 04 Jul '24

04 Jul '24

From: Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> mainline inclusion from mainline-v6.10-rc2 commit 25460d6f39024cc3b8241b14c7ccf0d6f11a736a category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA8AEF CVE: CVE-2024-39301 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… --------------------------- Syzbot with the help of KMSAN reported the following error: BUG: KMSAN: uninit-value in trace_9p_client_res include/trace/events/9p.h:146 [inline] BUG: KMSAN: uninit-value in p9_client_rpc+0x1314/0x1340 net/9p/client.c:754 trace_9p_client_res include/trace/events/9p.h:146 [inline] p9_client_rpc+0x1314/0x1340 net/9p/client.c:754 p9_client_create+0x1551/0x1ff0 net/9p/client.c:1031 v9fs_session_init+0x1b9/0x28e0 fs/9p/v9fs.c:410 v9fs_mount+0xe2/0x12b0 fs/9p/vfs_super.c:122 legacy_get_tree+0x114/0x290 fs/fs_context.c:662 vfs_get_tree+0xa7/0x570 fs/super.c:1797 do_new_mount+0x71f/0x15e0 fs/namespace.c:3352 path_mount+0x742/0x1f20 fs/namespace.c:3679 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount+0x725/0x810 fs/namespace.c:3875 __x64_sys_mount+0xe4/0x150 fs/namespace.c:3875 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Uninit was created at: __alloc_pages+0x9d6/0xe70 mm/page_alloc.c:4598 __alloc_pages_node include/linux/gfp.h:238 [inline] alloc_pages_node include/linux/gfp.h:261 [inline] alloc_slab_page mm/slub.c:2175 [inline] allocate_slab mm/slub.c:2338 [inline] new_slab+0x2de/0x1400 mm/slub.c:2391 ___slab_alloc+0x1184/0x33d0 mm/slub.c:3525 __slab_alloc mm/slub.c:3610 [inline] __slab_alloc_node mm/slub.c:3663 [inline] slab_alloc_node mm/slub.c:3835 [inline] kmem_cache_alloc+0x6d3/0xbe0 mm/slub.c:3852 p9_tag_alloc net/9p/client.c:278 [inline] p9_client_prepare_req+0x20a/0x1770 net/9p/client.c:641 p9_client_rpc+0x27e/0x1340 net/9p/client.c:688 p9_client_create+0x1551/0x1ff0 net/9p/client.c:1031 v9fs_session_init+0x1b9/0x28e0 fs/9p/v9fs.c:410 v9fs_mount+0xe2/0x12b0 fs/9p/vfs_super.c:122 legacy_get_tree+0x114/0x290 fs/fs_context.c:662 vfs_get_tree+0xa7/0x570 fs/super.c:1797 do_new_mount+0x71f/0x15e0 fs/namespace.c:3352 path_mount+0x742/0x1f20 fs/namespace.c:3679 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount+0x725/0x810 fs/namespace.c:3875 __x64_sys_mount+0xe4/0x150 fs/namespace.c:3875 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 If p9_check_errors() fails early in p9_client_rpc(), req->rc.tag will not be properly initialized. However, trace_9p_client_res() ends up trying to print it out anyway before p9_client_rpc() finishes. Fix this issue by assigning default values to p9_fcall fields such as 'tag' and (just in case KMSAN unearths something new) 'id' during the tag allocation stage. Reported-and-tested-by: syzbot+ff14db38f56329ef68df(a)syzkaller.appspotmail.com Fixes: 348b59012e5c ("net/9p: Convert net/9p protocol dumps to tracepoints") Signed-off-by: Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> Reviewed-by: Christian Schoenebeck <linux_oss(a)crudebyte.com> Cc: stable(a)vger.kernel.org Message-ID: <20240408141039.30428-1-n.zhandarovich(a)fintech.ru> Signed-off-by: Dominique Martinet <asmadeus(a)codewreck.org> Signed-off-by: Yang Yingliang <yangyingliang(a)huawei.com> --- net/9p/client.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/net/9p/client.c b/net/9p/client.c index cd85a4b6448b..0fa324e8b245 100644 --- a/net/9p/client.c +++ b/net/9p/client.c @@ -235,6 +235,8 @@ static int p9_fcall_init(struct p9_client *c, struct p9_fcall *fc, if (!fc->sdata) return -ENOMEM; fc->capacity = alloc_msize; + fc->id = 0; + fc->tag = P9_NOTAG; return 0; } -- 2.25.1

2 1

[PATCH openEuler-22.03-LTS-SP1] drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
by Tong Tiangen 04 Jul '24

04 Jul '24

From: Hao Chen <chenhao418(a)huawei.com> mainline inclusion from mainline-v6.9-rc1 commit 582c1aeee0a9e73010cf1c4cef338709860deeb0 category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/I9HCSA CVE: CVE-2024-38603 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/will/linux.git/commit/?h=fo… ------------------------------------------------------------------------ pci_alloc_irq_vectors() allocates an irq vector. When devm_add_action() fails, the irq vector is not freed, which leads to a memory leak. Replace the devm_add_action with devm_add_action_or_reset to ensure the irq vector can be destroyed when it fails. Fixes: 66637ab137b4 ("drivers/perf: hisi: add driver for HNS3 PMU") Signed-off-by: Hao Chen <chenhao418(a)huawei.com> Signed-off-by: Junhao He <hejunhao3(a)huawei.com> Reviewed-by: Jijie Shao <shaojijie(a)huawei.com> Acked-by: Jonathan Cameron <Jonathan.Cameron(a)huawei.com> Link: https://lore.kernel.org/r/20240425124627.13764-4-hejunhao3@huawei.com Signed-off-by: Will Deacon <will(a)kernel.org> Signed-off-by: Slim6882 <yangjunshuo(a)huawei.com> Signed-off-by: Tong Tiangen <tongtiangen(a)huawei.com> --- drivers/perf/hisilicon/hns3_pmu.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/perf/hisilicon/hns3_pmu.c b/drivers/perf/hisilicon/hns3_pmu.c index 08b2068b5278..40edc4cfcc34 100644 --- a/drivers/perf/hisilicon/hns3_pmu.c +++ b/drivers/perf/hisilicon/hns3_pmu.c @@ -1518,7 +1518,7 @@ static int hns3_pmu_irq_register(struct pci_dev *pdev, return ret; } - ret = devm_add_action(&pdev->dev, hns3_pmu_free_irq, pdev); + ret = devm_add_action_or_reset(&pdev->dev, hns3_pmu_free_irq, pdev); if (ret) { pci_err(pdev, "failed to add free irq action, ret = %d.\n", ret); return ret; -- 2.25.1

2 1

[PATCH OLK-6.6 0/2] CVE-2024-39469
by Yu Liao 04 Jul '24

04 Jul '24

CVE-2024-39469 Matthew Wilcox (Oracle) (1): [Backport] nilfs2: return the mapped address from nilfs_get_page() Ryusuke Konishi (1): [Backport] nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors fs/nilfs2/dir.c | 59 +++++++++++++++++++++++-------------------------- 1 file changed, 28 insertions(+), 31 deletions(-) -- 2.33.0

2 3

[PATCH OLK-5.10 v2 0/5] Backport bpf bugfixes
by Zheng Yejian 04 Jul '24

04 Jul '24

v1 -> v2: Update bugzilla link info in patch1 & patch2 Daniel Borkmann (1): bpf: Fix __reg_bound_offset 64->32 var_off subreg propagation Krister Johansen (1): bpf: ensure main program has an extable Kumar Kartikeya Dwivedi (1): bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID Stanislav Fomichev (1): bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen Wang Yufen (1): bpf: Fix memory leaks in __check_func_call kernel/bpf/cgroup.c | 15 +++++++++ kernel/bpf/verifier.c | 33 +++++++++++-------- .../testing/selftests/bpf/prog_tests/align.c | 4 +-- 3 files changed, 37 insertions(+), 15 deletions(-) -- 2.25.1

2 6

[PATCH OLK-6.6] efi: libstub: only free priv.runtime_map when allocated
by Tong Tiangen 04 Jul '24

04 Jul '24

From: Hagar Hemdan <hagarhem(a)amazon.com> stable inclusion from stable-v6.6.33 commit 9dce01f386c9ce6990c0a83fa14b1c95330b037e category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA7D2K CVE: CVE-2024-33619 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 4b2543f7e1e6b91cfc8dd1696e3cdf01c3ac8974 upstream. priv.runtime_map is only allocated when efi_novamap is not set. Otherwise, it is an uninitialized value. In the error path, it is freed unconditionally. Avoid passing an uninitialized value to free_pool. Free priv.runtime_map only when it was allocated. This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc. Fixes: f80d26043af9 ("efi: libstub: avoid efi_get_memory_map() for allocating the virt map") Cc: <stable(a)vger.kernel.org> Signed-off-by: Hagar Hemdan <hagarhem(a)amazon.com> Signed-off-by: Ard Biesheuvel <ardb(a)kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Tong Tiangen <tongtiangen(a)huawei.com> --- drivers/firmware/efi/libstub/fdt.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/firmware/efi/libstub/fdt.c b/drivers/firmware/efi/libstub/fdt.c index 70e9789ff9de..6a337f1f8787 100644 --- a/drivers/firmware/efi/libstub/fdt.c +++ b/drivers/firmware/efi/libstub/fdt.c @@ -335,8 +335,8 @@ efi_status_t allocate_new_fdt_and_exit_boot(void *handle, fail: efi_free(fdt_size, fdt_addr); - - efi_bs_call(free_pool, priv.runtime_map); + if (!efi_novamap) + efi_bs_call(free_pool, priv.runtime_map); return EFI_LOAD_ERROR; } -- 2.25.1

2 1

[PATCH openEuler-1.0-LTS] seg6: fix the iif in the IPv6 socket control block
by Dong Chenchen 04 Jul '24

04 Jul '24

From: Andrea Mayer <andrea.mayer(a)uniroma2.it> stable inclusion from stable-v4.19.221 commit 6431e71093f3da586a00c6d931481ffb0dc2db0e category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9S252 CVE: CVE-2021-47515 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit ae68d93354e5bf5191ee673982251864ea24dd5c upstream. When an IPv4 packet is received, the ip_rcv_core(...) sets the receiving interface index into the IPv4 socket control block (v5.16-rc4, net/ipv4/ip_input.c line 510): IPCB(skb)->iif = skb->skb_iif; If that IPv4 packet is meant to be encapsulated in an outer IPv6+SRH header, the seg6_do_srh_encap(...) performs the required encapsulation. In this case, the seg6_do_srh_encap function clears the IPv6 socket control block (v5.16-rc4 net/ipv6/seg6_iptunnel.c line 163): memset(IP6CB(skb), 0, sizeof(*IP6CB(skb))); The memset(...) was introduced in commit ef489749aae5 ("ipv6: sr: clear IP6CB(skb) on SRH ip4ip6 encapsulation") a long time ago (2019-01-29). Since the IPv6 socket control block and the IPv4 socket control block share the same memory area (skb->cb), the receiving interface index info is lost (IP6CB(skb)->iif is set to zero). As a side effect, that condition triggers a NULL pointer dereference if commit 0857d6f8c759 ("ipv6: When forwarding count rx stats on the orig netdev") is applied. To fix that issue, we set the IP6CB(skb)->iif with the index of the receiving interface once again. Fixes: ef489749aae5 ("ipv6: sr: clear IP6CB(skb) on SRH ip4ip6 encapsulation") Signed-off-by: Andrea Mayer <andrea.mayer(a)uniroma2.it> Reviewed-by: David Ahern <dsahern(a)kernel.org> Link: https://lore.kernel.org/r/20211208195409.12169-1-andrea.mayer@uniroma2.it Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Dong Chenchen <dongchenchen2(a)huawei.com> --- net/ipv6/seg6_iptunnel.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/net/ipv6/seg6_iptunnel.c b/net/ipv6/seg6_iptunnel.c index ee5403cbe655..26882fd9323a 100644 --- a/net/ipv6/seg6_iptunnel.c +++ b/net/ipv6/seg6_iptunnel.c @@ -148,6 +148,14 @@ int seg6_do_srh_encap(struct sk_buff *skb, struct ipv6_sr_hdr *osrh, int proto) hdr->hop_limit = ip6_dst_hoplimit(skb_dst(skb)); memset(IP6CB(skb), 0, sizeof(*IP6CB(skb))); + + /* the control block has been erased, so we have to set the + * iif once again. + * We read the receiving interface index directly from the + * skb->skb_iif as it is done in the IPv4 receiving path (i.e.: + * ip_rcv_core(...)). + */ + IP6CB(skb)->iif = skb->skb_iif; } hdr->nexthdr = NEXTHDR_ROUTING; -- 2.25.1

2 1

[PATCH OLK-5.10 0/5] Backport bpf bugfixes
by Zheng Yejian 04 Jul '24

04 Jul '24

Daniel Borkmann (1): bpf: Fix __reg_bound_offset 64->32 var_off subreg propagation Krister Johansen (1): bpf: ensure main program has an extable Kumar Kartikeya Dwivedi (1): bpf: Clobber stack slot when writing over spilled PTR_TO_BTF_ID Stanislav Fomichev (1): bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen Wang Yufen (1): bpf: Fix memory leaks in __check_func_call kernel/bpf/cgroup.c | 15 +++++++++ kernel/bpf/verifier.c | 33 +++++++++++-------- .../testing/selftests/bpf/prog_tests/align.c | 4 +-- 3 files changed, 37 insertions(+), 15 deletions(-) -- 2.25.1

2 6

[openEuler-22.03-LTS-SP1 0/1] CVE-2024-38621
by Liao Chen 04 Jul '24

04 Jul '24

media: stk1160: fix bounds checking in stk1160_copy_video() Dan Carpenter (1): media: stk1160: fix bounds checking in stk1160_copy_video() drivers/media/usb/stk1160/stk1160-video.c | 20 +++++++++++++++----- 1 file changed, 15 insertions(+), 5 deletions(-) -- 2.34.1

1 1

[PATCH openEuler-1.0-LTS] net: amd-xgbe: Fix skb data length underflow
by Zheng Zucheng 04 Jul '24

04 Jul '24

From: Shyam Sundar S K <Shyam-sundar.S-k(a)amd.com> mainline inclusion from mainline-v5.17-rc3 commit 5aac9108a180fc06e28d4e7fb00247ce603b72ee category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA72MM CVE: CVE-2022-48743 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ---------------------------------- There will be BUG_ON() triggered in include/linux/skbuff.h leading to intermittent kernel panic, when the skb length underflow is detected. Fix this by dropping the packet if such length underflows are seen because of inconsistencies in the hardware descriptors. Fixes: 622c36f143fc ("amd-xgbe: Fix jumbo MTU processing on newer hardware") Suggested-by: Tom Lendacky <thomas.lendacky(a)amd.com> Signed-off-by: Shyam Sundar S K <Shyam-sundar.S-k(a)amd.com> Acked-by: Tom Lendacky <thomas.lendacky(a)amd.com> Link: https://lore.kernel.org/r/20220127092003.2812745-1-Shyam-sundar.S-k@amd.com Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Zheng Zucheng <zhengzucheng(a)huawei.com> --- drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/drivers/net/ethernet/amd/xgbe/xgbe-drv.c b/drivers/net/ethernet/amd/xgbe/xgbe-drv.c index d96a84a62d78..cdbabd77f2d4 100644 --- a/drivers/net/ethernet/amd/xgbe/xgbe-drv.c +++ b/drivers/net/ethernet/amd/xgbe/xgbe-drv.c @@ -2765,6 +2765,14 @@ static int xgbe_rx_poll(struct xgbe_channel *channel, int budget) buf2_len = xgbe_rx_buf2_len(rdata, packet, len); len += buf2_len; + if (buf2_len > rdata->rx.buf.dma_len) { + /* Hardware inconsistency within the descriptors + * that has resulted in a length underflow. + */ + error = 1; + goto skip_data; + } + if (!skb) { skb = xgbe_create_skb(pdata, napi, rdata, buf1_len); @@ -2794,8 +2802,10 @@ static int xgbe_rx_poll(struct xgbe_channel *channel, int budget) if (!last || context_next) goto read_again; - if (!skb) + if (!skb || error) { + dev_kfree_skb(skb); goto next_packet; + } /* Be sure we don't exceed the configured MTU */ max_len = netdev->mtu + ETH_HLEN; -- 2.34.1

2 1

[PATCH OLK-6.6] efi: libstub: only free priv.runtime_map when allocated
by Tong Tiangen 04 Jul '24

04 Jul '24

From: Hagar Hemdan <hagarhem(a)amazon.com> stable inclusion from stable-v6.6.33 commit 9dce01f386c9ce6990c0a83fa14b1c95330b037e category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IA74DQ Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 4b2543f7e1e6b91cfc8dd1696e3cdf01c3ac8974 upstream. priv.runtime_map is only allocated when efi_novamap is not set. Otherwise, it is an uninitialized value. In the error path, it is freed unconditionally. Avoid passing an uninitialized value to free_pool. Free priv.runtime_map only when it was allocated. This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc. Fixes: f80d26043af9 ("efi: libstub: avoid efi_get_memory_map() for allocating the virt map") Cc: <stable(a)vger.kernel.org> Signed-off-by: Hagar Hemdan <hagarhem(a)amazon.com> Signed-off-by: Ard Biesheuvel <ardb(a)kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Tong Tiangen <tongtiangen(a)huawei.com> --- drivers/firmware/efi/libstub/fdt.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/firmware/efi/libstub/fdt.c b/drivers/firmware/efi/libstub/fdt.c index 70e9789ff9de..6a337f1f8787 100644 --- a/drivers/firmware/efi/libstub/fdt.c +++ b/drivers/firmware/efi/libstub/fdt.c @@ -335,8 +335,8 @@ efi_status_t allocate_new_fdt_and_exit_boot(void *handle, fail: efi_free(fdt_size, fdt_addr); - - efi_bs_call(free_pool, priv.runtime_map); + if (!efi_novamap) + efi_bs_call(free_pool, priv.runtime_map); return EFI_LOAD_ERROR; } -- 2.25.1

2 1

[PATCH openEuler-1.0-LTS v2 0/2] net: Fix CVE-2022-48757
by Dong Chenchen 04 Jul '24

04 Jul '24

fix CVE-2022-48757. Congyu Liu (1): net: fix information leakage in /proc/net/ptype Dong Chenchen (1): net: fix kabi breakage in struct packet_type include/linux/netdevice.h | 4 ++++ net/core/net-procfs.c | 3 ++- net/packet/af_packet.c | 2 ++ 3 files changed, 8 insertions(+), 1 deletion(-) -- 2.25.1

2 3