- Kernel - mailweb.openeuler.org

[openeuler:OLK-6.6 2455/2455] drivers/net/ethernet/huawei/hinic3/hinic3_ethtool.c:823:5: warning: no previous prototype for 'hinic3_set_rxq_recovery_flag'
by kernel test robot 04 Jul '25

04 Jul '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 9b85bcf0e6357841885264f42859bec05c9073f4 commit: dcb286ce50a35a77e51b61db72c7cc001647b598 [2455/2455] net/hinic3: add huawei/hinic3 driver config: x86_64-buildonly-randconfig-006-20250704 (https://download.01.org/0day-ci/archive/20250704/202507040311.LBh4TqFz-lkp@…) compiler: gcc-12 (Debian 12.2.0-14+deb12u1) 12.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250704/202507040311.LBh4TqFz-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202507040311.LBh4TqFz-lkp@intel.com/ All error/warnings (new ones prefixed by >>): >> drivers/net/ethernet/huawei/hinic3/hinic3_ethtool.c:823:5: warning: no previous prototype for 'hinic3_set_rxq_recovery_flag' [-Wmissing-prototypes] 823 | int hinic3_set_rxq_recovery_flag(struct net_device *netdev, u32 priv_flags) | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- >> drivers/net/ethernet/huawei/hinic3/hw/hinic3_lld.c:64:55: error: positional initialization of field in 'struct' declared with 'designated_init' attribute [-Werror=designated-init] 64 | struct hinic3_uld_info g_uld_info[SERVICE_T_MAX] = { {0} }; | ^ drivers/net/ethernet/huawei/hinic3/hw/hinic3_lld.c:64:55: note: (near initialization for 'g_uld_info[0]') >> drivers/net/ethernet/huawei/hinic3/hw/hinic3_lld.c:64:55: error: invalid initializer drivers/net/ethernet/huawei/hinic3/hw/hinic3_lld.c:64:55: note: (near initialization for 'g_uld_info[0].<anonymous>') drivers/net/ethernet/huawei/hinic3/hw/hinic3_lld.c:69:6: warning: no previous prototype for 'hinic3_uld_lock_init' [-Wmissing-prototypes] 69 | void hinic3_uld_lock_init(void) | ^~~~~~~~~~~~~~~~~~~~ cc1: some warnings being treated as errors vim +/hinic3_set_rxq_recovery_flag +823 drivers/net/ethernet/huawei/hinic3/hinic3_ethtool.c 822 > 823 int hinic3_set_rxq_recovery_flag(struct net_device *netdev, u32 priv_flags) 824 { 825 struct hinic3_nic_dev *nic_dev = netdev_priv(netdev); 826 827 if (priv_flags & HINIC3_PRIV_FLAGS_RXQ_RECOVERY) { 828 if (!HINIC3_SUPPORT_RXQ_RECOVERY(nic_dev->hwdev)) { 829 nicif_info(nic_dev, drv, netdev, "Unsupport open rxq recovery\n"); 830 return -EOPNOTSUPP; 831 } 832 833 if (test_and_set_bit(HINIC3_RXQ_RECOVERY, &nic_dev->flags)) 834 return 0; 835 queue_delayed_work(nic_dev->workq, &nic_dev->rxq_check_work, HZ); 836 nicif_info(nic_dev, drv, netdev, "open rxq recovery\n"); 837 } else { 838 if (!test_and_clear_bit(HINIC3_RXQ_RECOVERY, &nic_dev->flags)) 839 return 0; 840 cancel_delayed_work_sync(&nic_dev->rxq_check_work); 841 nicif_info(nic_dev, drv, netdev, "close rxq recovery\n"); 842 } 843 844 return 0; 845 } 846 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 2455/2455] include/trace/events/kmem.h:428:26: error: invalid use of undefined type 'struct mem_sampling_record'
by kernel test robot 04 Jul '25

04 Jul '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 9b85bcf0e6357841885264f42859bec05c9073f4 commit: 5c9754d56876f60e199456beda45715da2d1a20b [2455/2455] mm/mem_sampling: Add eBPF interface for memory access tracing config: arm64-randconfig-004-20250704 (https://download.01.org/0day-ci/archive/20250704/202507040329.C58KAKhY-lkp@…) compiler: aarch64-linux-gcc (GCC) 10.5.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250704/202507040329.C58KAKhY-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202507040329.C58KAKhY-lkp@intel.com/ All errors (new ones prefixed by >>): | ^~~~~~~~~~~~~~~~~ include/linux/tracepoint.h:253:2: note: in expansion of macro 'DECLARE_STATIC_CALL' 253 | DECLARE_STATIC_CALL(tp_func_##name, __traceiter_##name); \ | ^~~~~~~~~~~~~~~~~~~ include/linux/tracepoint.h:432:2: note: in expansion of macro '__DECLARE_TRACE' 432 | __DECLARE_TRACE(name, PARAMS(proto), PARAMS(args), \ | ^~~~~~~~~~~~~~~ include/linux/tracepoint.h:566:2: note: in expansion of macro 'DECLARE_TRACE' 566 | DECLARE_TRACE(name, PARAMS(proto), PARAMS(args)) | ^~~~~~~~~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ In file included from include/trace/define_trace.h:102, from include/trace/events/kmem.h:441, from mm/slab_common.c:35: include/trace/events/kmem.h:417:18: warning: 'struct mem_sampling_record' declared inside parameter list will not be visible outside of this definition or declaration 417 | TP_PROTO(struct mem_sampling_record *record), | ^~~~~~~~~~~~~~~~~~~ include/trace/trace_events.h:261:58: note: in definition of macro 'DECLARE_EVENT_CLASS' 261 | struct trace_event_data_offsets_##call *__data_offsets, proto) \ | ^~~~~ include/trace/trace_events.h:41:9: note: in expansion of macro 'PARAMS' 41 | PARAMS(proto), \ | ^~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ include/trace/events/kmem.h:417:2: note: in expansion of macro 'TP_PROTO' 417 | TP_PROTO(struct mem_sampling_record *record), | ^~~~~~~~ In file included from include/trace/define_trace.h:102, from include/trace/events/kmem.h:441, from mm/slab_common.c:35: include/trace/events/kmem.h:417:18: warning: 'struct mem_sampling_record' declared inside parameter list will not be visible outside of this definition or declaration 417 | TP_PROTO(struct mem_sampling_record *record), | ^~~~~~~~~~~~~~~~~~~ include/trace/trace_events.h:399:47: note: in definition of macro '__DECLARE_EVENT_CLASS' 399 | do_trace_event_raw_event_##call(void *__data, proto) \ | ^~~~~ include/trace/trace_events.h:427:29: note: in expansion of macro 'PARAMS' 427 | __DECLARE_EVENT_CLASS(call, PARAMS(proto), PARAMS(args), PARAMS(tstruct), \ | ^~~~~~ include/trace/trace_events.h:40:2: note: in expansion of macro 'DECLARE_EVENT_CLASS' 40 | DECLARE_EVENT_CLASS(name, \ | ^~~~~~~~~~~~~~~~~~~ include/trace/trace_events.h:41:9: note: in expansion of macro 'PARAMS' 41 | PARAMS(proto), \ | ^~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ include/trace/events/kmem.h:417:2: note: in expansion of macro 'TP_PROTO' 417 | TP_PROTO(struct mem_sampling_record *record), | ^~~~~~~~ include/trace/events/kmem.h: In function 'do_trace_event_raw_event_mm_spe_record': include/trace/events/kmem.h:419:10: error: passing argument 2 of 'trace_event_get_offsets_mm_spe_record' from incompatible pointer type [-Werror=incompatible-pointer-types] 419 | TP_ARGS(record), | ^~~~~~ | | | struct mem_sampling_record * include/trace/trace_events.h:410:64: note: in definition of macro '__DECLARE_EVENT_CLASS' 410 | __data_size = trace_event_get_offsets_##call(&__data_offsets, args); \ | ^~~~ include/trace/trace_events.h:427:44: note: in expansion of macro 'PARAMS' 427 | __DECLARE_EVENT_CLASS(call, PARAMS(proto), PARAMS(args), PARAMS(tstruct), \ | ^~~~~~ include/trace/trace_events.h:40:2: note: in expansion of macro 'DECLARE_EVENT_CLASS' 40 | DECLARE_EVENT_CLASS(name, \ | ^~~~~~~~~~~~~~~~~~~ include/trace/trace_events.h:42:9: note: in expansion of macro 'PARAMS' 42 | PARAMS(args), \ | ^~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ include/trace/events/kmem.h:419:2: note: in expansion of macro 'TP_ARGS' 419 | TP_ARGS(record), | ^~~~~~~ In file included from include/trace/define_trace.h:102, from include/trace/events/kmem.h:441, from mm/slab_common.c:35: include/trace/events/kmem.h:417:39: note: expected 'struct mem_sampling_record *' but argument is of type 'struct mem_sampling_record *' 417 | TP_PROTO(struct mem_sampling_record *record), | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~ include/trace/trace_events.h:261:58: note: in definition of macro 'DECLARE_EVENT_CLASS' 261 | struct trace_event_data_offsets_##call *__data_offsets, proto) \ | ^~~~~ include/trace/trace_events.h:41:9: note: in expansion of macro 'PARAMS' 41 | PARAMS(proto), \ | ^~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ include/trace/events/kmem.h:417:2: note: in expansion of macro 'TP_PROTO' 417 | TP_PROTO(struct mem_sampling_record *record), | ^~~~~~~~ In file included from include/trace/define_trace.h:102, from include/trace/events/kmem.h:441, from mm/slab_common.c:35: >> include/trace/events/kmem.h:428:26: error: invalid use of undefined type 'struct mem_sampling_record' 428 | __entry->vaddr = record->virt_addr; | ^~ include/trace/trace_events.h:420:4: note: in definition of macro '__DECLARE_EVENT_CLASS' 420 | { assign; } \ | ^~~~~~ include/trace/trace_events.h:428:9: note: in expansion of macro 'PARAMS' 428 | PARAMS(assign), PARAMS(print)) \ | ^~~~~~ include/trace/trace_events.h:40:2: note: in expansion of macro 'DECLARE_EVENT_CLASS' 40 | DECLARE_EVENT_CLASS(name, \ | ^~~~~~~~~~~~~~~~~~~ include/trace/trace_events.h:44:9: note: in expansion of macro 'PARAMS' 44 | PARAMS(assign), \ | ^~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ include/trace/events/kmem.h:427:2: note: in expansion of macro 'TP_fast_assign' 427 | TP_fast_assign( | ^~~~~~~~~~~~~~ include/trace/events/kmem.h:429:26: error: invalid use of undefined type 'struct mem_sampling_record' 429 | __entry->paddr = record->phys_addr; | ^~ include/trace/trace_events.h:420:4: note: in definition of macro '__DECLARE_EVENT_CLASS' 420 | { assign; } \ | ^~~~~~ include/trace/trace_events.h:428:9: note: in expansion of macro 'PARAMS' 428 | PARAMS(assign), PARAMS(print)) \ | ^~~~~~ include/trace/trace_events.h:40:2: note: in expansion of macro 'DECLARE_EVENT_CLASS' 40 | DECLARE_EVENT_CLASS(name, \ | ^~~~~~~~~~~~~~~~~~~ include/trace/trace_events.h:44:9: note: in expansion of macro 'PARAMS' 44 | PARAMS(assign), \ | ^~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ include/trace/events/kmem.h:427:2: note: in expansion of macro 'TP_fast_assign' 427 | TP_fast_assign( | ^~~~~~~~~~~~~~ include/trace/events/kmem.h:430:24: error: invalid use of undefined type 'struct mem_sampling_record' 430 | __entry->pid = record->context_id; | ^~ include/trace/trace_events.h:420:4: note: in definition of macro '__DECLARE_EVENT_CLASS' 420 | { assign; } \ | ^~~~~~ include/trace/trace_events.h:428:9: note: in expansion of macro 'PARAMS' 428 | PARAMS(assign), PARAMS(print)) \ | ^~~~~~ include/trace/trace_events.h:40:2: note: in expansion of macro 'DECLARE_EVENT_CLASS' 40 | DECLARE_EVENT_CLASS(name, \ | ^~~~~~~~~~~~~~~~~~~ include/trace/trace_events.h:44:9: note: in expansion of macro 'PARAMS' 44 | PARAMS(assign), \ | ^~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ include/trace/events/kmem.h:427:2: note: in expansion of macro 'TP_fast_assign' 427 | TP_fast_assign( | ^~~~~~~~~~~~~~ include/trace/events/kmem.h: At top level: include/trace/events/kmem.h:417:18: warning: 'struct mem_sampling_record' declared inside parameter list will not be visible outside of this definition or declaration 417 | TP_PROTO(struct mem_sampling_record *record), | ^~~~~~~~~~~~~~~~~~~ include/trace/trace_events.h:430:44: note: in definition of macro 'DECLARE_EVENT_CLASS' 430 | trace_event_raw_event_##call(void *__data, proto) \ | ^~~~~ include/trace/trace_events.h:41:9: note: in expansion of macro 'PARAMS' 41 | PARAMS(proto), \ | ^~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ include/trace/events/kmem.h:417:2: note: in expansion of macro 'TP_PROTO' 417 | TP_PROTO(struct mem_sampling_record *record), | ^~~~~~~~ include/trace/events/kmem.h: In function 'trace_event_raw_event_mm_spe_record': include/trace/events/kmem.h:419:10: error: passing argument 2 of 'do_trace_event_raw_event_mm_spe_record' from incompatible pointer type [-Werror=incompatible-pointer-types] 419 | TP_ARGS(record), | ^~~~~~ | | | struct mem_sampling_record * include/trace/trace_events.h:432:42: note: in definition of macro 'DECLARE_EVENT_CLASS' 432 | do_trace_event_raw_event_##call(__data, args); \ | ^~~~ include/trace/trace_events.h:42:9: note: in expansion of macro 'PARAMS' 42 | PARAMS(args), \ | ^~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ include/trace/events/kmem.h:419:2: note: in expansion of macro 'TP_ARGS' 419 | TP_ARGS(record), | ^~~~~~~ include/trace/events/kmem.h:417:39: note: expected 'struct mem_sampling_record *' but argument is of type 'struct mem_sampling_record *' 417 | TP_PROTO(struct mem_sampling_record *record), | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~ include/trace/trace_events.h:399:47: note: in definition of macro '__DECLARE_EVENT_CLASS' -- | ^~~~~ include/trace/trace_events.h:468:25: note: in expansion of macro 'PARAMS' 468 | _TRACE_PERF_PROTO(call, PARAMS(proto)); \ | ^~~~~~ include/trace/trace_events.h:40:2: note: in expansion of macro 'DECLARE_EVENT_CLASS' 40 | DECLARE_EVENT_CLASS(name, \ | ^~~~~~~~~~~~~~~~~~~ include/trace/trace_events.h:41:9: note: in expansion of macro 'PARAMS' 41 | PARAMS(proto), \ | ^~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ include/trace/events/kmem.h:417:2: note: in expansion of macro 'TP_PROTO' 417 | TP_PROTO(struct mem_sampling_record *record), | ^~~~~~~~ In file included from include/trace/define_trace.h:103, from include/trace/events/kmem.h:441, from mm/slab_common.c:35: include/trace/events/kmem.h:417:18: warning: 'struct mem_sampling_record' declared inside parameter list will not be visible outside of this definition or declaration 417 | TP_PROTO(struct mem_sampling_record *record), | ^~~~~~~~~~~~~~~~~~~ include/trace/perf.h:18:33: note: in definition of macro 'DECLARE_EVENT_CLASS' 18 | perf_trace_##call(void *__data, proto) \ | ^~~~~ include/trace/trace_events.h:41:9: note: in expansion of macro 'PARAMS' 41 | PARAMS(proto), \ | ^~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ include/trace/events/kmem.h:417:2: note: in expansion of macro 'TP_PROTO' 417 | TP_PROTO(struct mem_sampling_record *record), | ^~~~~~~~ include/trace/perf.h:18:1: error: conflicting types for 'perf_trace_mm_spe_record' 18 | perf_trace_##call(void *__data, proto) \ | ^~~~~~~~~~~ include/trace/trace_events.h:40:2: note: in expansion of macro 'DECLARE_EVENT_CLASS' 40 | DECLARE_EVENT_CLASS(name, \ | ^~~~~~~~~~~~~~~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ In file included from include/trace/define_trace.h:102, from include/trace/events/kmem.h:441, from mm/slab_common.c:35: include/trace/trace_events.h:383:2: note: previous declaration of 'perf_trace_mm_spe_record' was here 383 | perf_trace_##call(void *__data, proto); | ^~~~~~~~~~~ include/trace/trace_events.h:468:1: note: in expansion of macro '_TRACE_PERF_PROTO' 468 | _TRACE_PERF_PROTO(call, PARAMS(proto)); \ | ^~~~~~~~~~~~~~~~~ include/trace/trace_events.h:40:2: note: in expansion of macro 'DECLARE_EVENT_CLASS' 40 | DECLARE_EVENT_CLASS(name, \ | ^~~~~~~~~~~~~~~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ In file included from include/trace/define_trace.h:103, from include/trace/events/kmem.h:441, from mm/slab_common.c:35: include/trace/events/kmem.h: In function 'perf_trace_mm_spe_record': include/trace/events/kmem.h:419:10: error: passing argument 2 of 'trace_event_get_offsets_mm_spe_record' from incompatible pointer type [-Werror=incompatible-pointer-types] 419 | TP_ARGS(record), | ^~~~~~ | | | struct mem_sampling_record * include/trace/perf.h:31:64: note: in definition of macro 'DECLARE_EVENT_CLASS' 31 | __data_size = trace_event_get_offsets_##call(&__data_offsets, args); \ | ^~~~ include/trace/trace_events.h:42:9: note: in expansion of macro 'PARAMS' 42 | PARAMS(args), \ | ^~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ include/trace/events/kmem.h:419:2: note: in expansion of macro 'TP_ARGS' 419 | TP_ARGS(record), | ^~~~~~~ In file included from include/trace/define_trace.h:102, from include/trace/events/kmem.h:441, from mm/slab_common.c:35: include/trace/events/kmem.h:417:39: note: expected 'struct mem_sampling_record *' but argument is of type 'struct mem_sampling_record *' 417 | TP_PROTO(struct mem_sampling_record *record), | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~ include/trace/trace_events.h:261:58: note: in definition of macro 'DECLARE_EVENT_CLASS' 261 | struct trace_event_data_offsets_##call *__data_offsets, proto) \ | ^~~~~ include/trace/trace_events.h:41:9: note: in expansion of macro 'PARAMS' 41 | PARAMS(proto), \ | ^~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ include/trace/events/kmem.h:417:2: note: in expansion of macro 'TP_PROTO' 417 | TP_PROTO(struct mem_sampling_record *record), | ^~~~~~~~ In file included from include/trace/define_trace.h:103, from include/trace/events/kmem.h:441, from mm/slab_common.c:35: >> include/trace/events/kmem.h:428:26: error: invalid use of undefined type 'struct mem_sampling_record' 428 | __entry->vaddr = record->virt_addr; | ^~ include/trace/perf.h:51:4: note: in definition of macro 'DECLARE_EVENT_CLASS' 51 | { assign; } \ | ^~~~~~ include/trace/trace_events.h:44:9: note: in expansion of macro 'PARAMS' 44 | PARAMS(assign), \ | ^~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ include/trace/events/kmem.h:427:2: note: in expansion of macro 'TP_fast_assign' 427 | TP_fast_assign( | ^~~~~~~~~~~~~~ include/trace/events/kmem.h:429:26: error: invalid use of undefined type 'struct mem_sampling_record' 429 | __entry->paddr = record->phys_addr; | ^~ include/trace/perf.h:51:4: note: in definition of macro 'DECLARE_EVENT_CLASS' 51 | { assign; } \ | ^~~~~~ include/trace/trace_events.h:44:9: note: in expansion of macro 'PARAMS' 44 | PARAMS(assign), \ | ^~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ include/trace/events/kmem.h:427:2: note: in expansion of macro 'TP_fast_assign' 427 | TP_fast_assign( | ^~~~~~~~~~~~~~ include/trace/events/kmem.h:430:24: error: invalid use of undefined type 'struct mem_sampling_record' 430 | __entry->pid = record->context_id; | ^~ include/trace/perf.h:51:4: note: in definition of macro 'DECLARE_EVENT_CLASS' 51 | { assign; } \ | ^~~~~~ include/trace/trace_events.h:44:9: note: in expansion of macro 'PARAMS' 44 | PARAMS(assign), \ | ^~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ include/trace/events/kmem.h:427:2: note: in expansion of macro 'TP_fast_assign' 427 | TP_fast_assign( | ^~~~~~~~~~~~~~ include/trace/events/kmem.h: In function 'perf_test_probe_mm_spe_record': include/trace/perf.h:67:35: error: passing argument 1 of 'check_trace_callback_type_mm_spe_record' from incompatible pointer type [-Werror=incompatible-pointer-types] 67 | check_trace_callback_type_##call(perf_trace_##template); \ | ^~~~~~~~~~~ | | | void (*)(void *, struct mem_sampling_record *) include/trace/trace_events.h:46:2: note: in expansion of macro 'DEFINE_EVENT' 46 | DEFINE_EVENT(name, name, PARAMS(proto), PARAMS(args)); | ^~~~~~~~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ In file included from include/trace/events/kmem.h:9, from mm/slab_common.c:35: include/linux/tracepoint.h:287:42: note: expected 'void (*)(void *, struct mem_sampling_record *)' but argument is of type 'void (*)(void *, struct mem_sampling_record *)' 287 | check_trace_callback_type_##name(void (*cb)(data_proto)) \ | ~~~~~~~^~~~~~~~~~~~~~~ include/linux/tracepoint.h:432:2: note: in expansion of macro '__DECLARE_TRACE' 432 | __DECLARE_TRACE(name, PARAMS(proto), PARAMS(args), \ | ^~~~~~~~~~~~~~~ include/linux/tracepoint.h:566:2: note: in expansion of macro 'DECLARE_TRACE' 566 | DECLARE_TRACE(name, PARAMS(proto), PARAMS(args)) | ^~~~~~~~~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ In file included from include/trace/define_trace.h:102, from include/trace/events/kmem.h:441, from mm/slab_common.c:35: mm/slab_common.c: At top level: include/trace/trace_events.h:383:2: warning: 'perf_trace_mm_spe_record' used but never defined 383 | perf_trace_##call(void *__data, proto); | ^~~~~~~~~~~ include/trace/trace_events.h:468:1: note: in expansion of macro '_TRACE_PERF_PROTO' 468 | _TRACE_PERF_PROTO(call, PARAMS(proto)); \ | ^~~~~~~~~~~~~~~~~ include/trace/trace_events.h:40:2: note: in expansion of macro 'DECLARE_EVENT_CLASS' 40 | DECLARE_EVENT_CLASS(name, \ | ^~~~~~~~~~~~~~~~~~~ include/trace/events/kmem.h:416:1: note: in expansion of macro 'TRACE_EVENT' 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~ cc1: some warnings being treated as errors Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for RESCTRL_FS Depends on [n]: MISC_FILESYSTEMS [=n] && ARCH_HAS_CPU_RESCTRL [=y] Selected by [y]: - ARM64_MPAM [=y] vim +428 include/trace/events/kmem.h 388 389 TP_PROTO(struct mm_struct *mm, 390 int member), 391 392 TP_ARGS(mm, member), 393 394 TP_STRUCT__entry( 395 __field(unsigned int, mm_id) 396 __field(unsigned int, curr) 397 __field(int, member) 398 __field(long, size) 399 ), 400 401 TP_fast_assign( 402 __entry->mm_id = mm_ptr_to_hash(mm); 403 __entry->curr = !!(current->mm == mm); 404 __entry->member = member; 405 __entry->size = (mm_counter_sum_positive(mm, member) 406 << PAGE_SHIFT); 407 ), 408 409 TP_printk("mm_id=%u curr=%d type=%s size=%ldB", 410 __entry->mm_id, 411 __entry->curr, 412 __print_symbolic(__entry->member, TRACE_MM_PAGES), 413 __entry->size) 414 ); 415 #ifdef CONFIG_ARM_SPE_MEM_SAMPLING 416 TRACE_EVENT(mm_spe_record, 417 TP_PROTO(struct mem_sampling_record *record), 418 419 TP_ARGS(record), 420 421 TP_STRUCT__entry( 422 __field(u64, vaddr) 423 __field(u64, paddr) 424 __field(int, pid) 425 ), 426 427 TP_fast_assign( > 428 __entry->vaddr = record->virt_addr; 429 __entry->paddr = record->phys_addr; 430 __entry->pid = record->context_id; 431 432 ), 433 434 TP_printk("vaddr=%llu paddr=%llu pid=%d", 435 __entry->vaddr, __entry->paddr, __entry->pid) 436 ); 437 #endif /* CONFIG_ARM_SPE_MEM_SAMPLING */ 438 #endif /* _TRACE_KMEM_H */ 439 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:openEuler-1.0-LTS 1605/1605] kernel/trace/trace_output.o: warning: objtool: missing symbol for section .init.text
by kernel test robot 03 Jul '25

03 Jul '25

Hi Steven, First bad commit (maybe != root cause): tree: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS head: 5536700e483b14a193ce40d6be90b95fb2d7532e commit: 31bf327231bb582ec7dca0490cc90c364b36e095 [1605/1605] tracing: Make sure trace_printk() can output as soon as it can be used config: x86_64-buildonly-randconfig-2004-20250501 (https://download.01.org/0day-ci/archive/20250703/202507031719.pl3k7B4C-lkp@…) compiler: clang version 20.1.2 (https://github.com/llvm/llvm-project 58df0ef89dd64126512e4ee27b4ac3fd8ddf6247) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250703/202507031719.pl3k7B4C-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202507031719.pl3k7B4C-lkp@intel.com/ All warnings (new ones prefixed by >>): >> kernel/trace/trace_output.o: warning: objtool: missing symbol for section .init.text -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:openEuler-1.0-LTS 1605/1605] mm/vmacache.o: warning: objtool: missing symbol for section .text
by kernel test robot 03 Jul '25

03 Jul '25

Hi David, First bad commit (maybe != root cause): tree: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS head: 5536700e483b14a193ce40d6be90b95fb2d7532e commit: ddbf369c0a33924f76d092985bd20d9310f43d7f [1605/1605] mm, vmacache: hash addresses based on pmd config: x86_64-buildonly-randconfig-2001-20250501 (https://download.01.org/0day-ci/archive/20250703/202507031600.pMMU65PM-lkp@…) compiler: clang version 20.1.2 (https://github.com/llvm/llvm-project 58df0ef89dd64126512e4ee27b4ac3fd8ddf6247) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250703/202507031600.pMMU65PM-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202507031600.pMMU65PM-lkp@intel.com/ All warnings (new ones prefixed by >>): >> mm/vmacache.o: warning: objtool: missing symbol for section .text -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:openEuler-1.0-LTS 1605/1605] lib/prime_numbers.c:8:9: warning: 'bitmap_size' macro redefined
by kernel test robot 03 Jul '25

03 Jul '25

tree: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS head: 26d81348fb134a6bffb49fd1b55d8842cbf6424d commit: 9e8111c56a2515c7634662d19c29fde636758a02 [1605/1605] bitmap: introduce generic optimized bitmap_size() config: x86_64-buildonly-randconfig-2004-20250501 (https://download.01.org/0day-ci/archive/20250703/202507031536.p8mTTL5J-lkp@…) compiler: clang version 20.1.2 (https://github.com/llvm/llvm-project 58df0ef89dd64126512e4ee27b4ac3fd8ddf6247) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250703/202507031536.p8mTTL5J-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202507031536.p8mTTL5J-lkp@intel.com/ All warnings (new ones prefixed by >>): >> lib/prime_numbers.c:8:9: warning: 'bitmap_size' macro redefined [-Wmacro-redefined] 8 | #define bitmap_size(nbits) (BITS_TO_LONGS(nbits) * sizeof(unsigned long)) | ^ include/linux/bitmap.h:215:9: note: previous definition is here 215 | #define bitmap_size(nbits) (ALIGN(nbits, BITS_PER_LONG) / BITS_PER_BYTE) | ^ 1 warning generated. vim +/bitmap_size +8 lib/prime_numbers.c cf4a7207b1cb4a Chris Wilson 2016-12-22 7 cf4a7207b1cb4a Chris Wilson 2016-12-22 @8 #define bitmap_size(nbits) (BITS_TO_LONGS(nbits) * sizeof(unsigned long)) cf4a7207b1cb4a Chris Wilson 2016-12-22 9 :::::: The code at line 8 was first introduced by commit :::::: cf4a7207b1cb4a3c3fe3aa11a83c9d673722a7f5 lib: Add a simple prime number generator :::::: TO: Chris Wilson <chris(a)chris-wilson.co.uk> :::::: CC: Daniel Vetter <daniel.vetter(a)ffwll.ch> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6 01/15] cpu/SMT: Provide a default topology_is_primary_thread()
by Qi Xi 03 Jul '25

03 Jul '25

From: Yicong Yang <yangyicong(a)hisilicon.com> driver inclusion category: feature bugzilla: https://gitee.com/openeuler/kernel/issues/IBZQQR ---------------------------------------------------------------------- Currently if architectures want to support HOTPLUG_SMT they need to provide a topology_is_primary_thread() telling the framework which thread in the SMT cannot offline. However arm64 doesn't have a restriction on which thread in the SMT cannot offline, a simplest choice is that just make 1st thread as the "primary" thread. So just make this as the default implementation in the framework and let architectures like x86 that have special primary thread to override this function (which they've already done). There's no need to provide a stub function if !CONFIG_SMP or !CONFIG_HOTPLUG_SMT. In such case the testing CPU is already the 1st CPU in the SMT so it's always the primary thread. Reviewed-by: Jonathan Cameron <Jonathan.Cameron(a)huawei.com> Reviewed-by: Pierre Gondois <pierre.gondois(a)arm.com> Reviewed-by: Dietmar Eggemann <dietmar.eggemann(a)arm.com> Reviewed-by: Yicong Yang <yangyicong(a)hisilicon.com> Signed-off-by: Yicong Yang <yangyicong(a)hisilicon.com> Signed-off-by: Hongye Lin <linhongye(a)h-partners.com> Signed-off-by: Qi Xi <xiqi2(a)huawei.com> --- arch/x86/include/asm/topology.h | 1 - arch/x86/kernel/smpboot.c | 1 + include/linux/topology.h | 24 ++++++++++++++++++++++++ 3 files changed, 25 insertions(+), 1 deletion(-) diff --git a/arch/x86/include/asm/topology.h b/arch/x86/include/asm/topology.h index 5b4f87329031..8bf8d5546e97 100644 --- a/arch/x86/include/asm/topology.h +++ b/arch/x86/include/asm/topology.h @@ -152,7 +152,6 @@ static inline int topology_phys_to_logical_die(unsigned int die, unsigned int cpu) { return 0; } static inline int topology_max_die_per_package(void) { return 1; } static inline int topology_max_smt_threads(void) { return 1; } -static inline bool topology_is_primary_thread(unsigned int cpu) { return true; } static inline bool topology_smt_supported(void) { return false; } #endif diff --git a/arch/x86/kernel/smpboot.c b/arch/x86/kernel/smpboot.c index 5726a3c9623e..2c897ad8b014 100644 --- a/arch/x86/kernel/smpboot.c +++ b/arch/x86/kernel/smpboot.c @@ -284,6 +284,7 @@ bool topology_is_primary_thread(unsigned int cpu) { return apic_id_is_primary_thread(per_cpu(x86_cpu_to_apicid, cpu)); } +#define topology_is_primary_thread topology_is_primary_thread /** * topology_smt_supported - Check whether SMT is supported by the CPUs diff --git a/include/linux/topology.h b/include/linux/topology.h index 80d27d717631..3aa7a3ef6771 100644 --- a/include/linux/topology.h +++ b/include/linux/topology.h @@ -212,6 +212,30 @@ static inline const struct cpumask *cpu_smt_mask(int cpu) } #endif +#ifndef topology_is_primary_thread + +#define topology_is_primary_thread topology_is_primary_thread + +static inline bool topology_is_primary_thread(unsigned int cpu) +{ + /* + * When disabling SMT the primary thread of the SMT will remain + * enabled/active. Architectures do have a special primary thread + * (e.g. x86) needs to override this function. Otherwise can make + * the first thread in the SMT as the primary thread. + * + * The sibling cpumask of an offline CPU contains always the CPU + * itself for architectures using the implementation of + * CONFIG_GENERIC_ARCH_TOPOLOGY for building their topology. + * Other architectures not using CONFIG_GENERIC_ARCH_TOPOLOGY for + * building their topology have to check whether to use this default + * implementation or to override it. + */ + return cpu == cpumask_first(topology_sibling_cpumask(cpu)); +} + +#endif + static inline const struct cpumask *cpu_cpu_mask(int cpu) { return cpumask_of_node(cpu_to_node(cpu)); -- 2.33.0

2 15

[PATCH OLK-6.6] virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
by Zheng Qixing 03 Jul '25

03 Jul '25

From: Zhongqiu Han <quic_zhonhan(a)quicinc.com> stable inclusion from stable-v6.6.93 commit b49b5132e4c7307599492aee1cdc6d89f7f2a7da category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ICGAHF CVE: CVE-2025-38048 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 2e2f925fe737576df2373931c95e1a2b66efdfef ] syzbot reports a data-race when accessing the event_triggered, here is the simplified stack when the issue occurred: ================================================================== BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_enable_cb_delayed write to 0xffff8881025bc452 of 1 bytes by task 3288 on cpu 0: virtqueue_enable_cb_delayed+0x42/0x3c0 drivers/virtio/virtio_ring.c:2653 start_xmit+0x230/0x1310 drivers/net/virtio_net.c:3264 __netdev_start_xmit include/linux/netdevice.h:5151 [inline] netdev_start_xmit include/linux/netdevice.h:5160 [inline] xmit_one net/core/dev.c:3800 [inline] read to 0xffff8881025bc452 of 1 bytes by interrupt on cpu 1: virtqueue_disable_cb_split drivers/virtio/virtio_ring.c:880 [inline] virtqueue_disable_cb+0x92/0x180 drivers/virtio/virtio_ring.c:2566 skb_xmit_done+0x5f/0x140 drivers/net/virtio_net.c:777 vring_interrupt+0x161/0x190 drivers/virtio/virtio_ring.c:2715 __handle_irq_event_percpu+0x95/0x490 kernel/irq/handle.c:158 handle_irq_event_percpu kernel/irq/handle.c:193 [inline] value changed: 0x01 -> 0x00 ================================================================== When the data race occurs, the function virtqueue_enable_cb_delayed() sets event_triggered to false, and virtqueue_disable_cb_split/packed() reads it as false due to the race condition. Since event_triggered is an unreliable hint used for optimization, this should only cause the driver temporarily suggest that the device not send an interrupt notification when the event index is used. Fix this KCSAN reported data-race issue by explicitly tagging the access as data_racy. Reported-by: syzbot+efe683d57990864b8c8e(a)syzkaller.appspotmail.com Closes: https://lore.kernel.org/all/67c7761a.050a0220.15b4b9.0018.GAE@google.com/ Signed-off-by: Zhongqiu Han <quic_zhonhan(a)quicinc.com> Message-Id: <20250312130412.3516307-1-quic_zhonhan(a)quicinc.com> Signed-off-by: Michael S. Tsirkin <mst(a)redhat.com> Acked-by: Jason Wang <jasowang(a)redhat.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zheng Qixing <zhengqixing(a)huawei.com> --- drivers/virtio/virtio_ring.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/virtio/virtio_ring.c b/drivers/virtio/virtio_ring.c index 2b702392d20b..6a3f335e5fcd 100644 --- a/drivers/virtio/virtio_ring.c +++ b/drivers/virtio/virtio_ring.c @@ -2533,7 +2533,7 @@ bool virtqueue_enable_cb_delayed(struct virtqueue *_vq) struct vring_virtqueue *vq = to_vvq(_vq); if (vq->event_triggered) - vq->event_triggered = false; + data_race(vq->event_triggered = false); return vq->packed_ring ? virtqueue_enable_cb_delayed_packed(_vq) : virtqueue_enable_cb_delayed_split(_vq); -- 2.39.2

2 1

[PATCH OLK-6.6] dm: fix unconditional IO throttle caused by REQ_PREFLUSH
by Zheng Qixing 03 Jul '25

03 Jul '25

From: Jinliang Zheng <alexjlzheng(a)gmail.com> stable inclusion from stable-v6.6.93 commit 52aa28f7b1708d76e315d78b5ed397932a1a97c3 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ICGAEX CVE: CVE-2025-38063 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… ------------------ [ Upstream commit 88f7f56d16f568f19e1a695af34a7f4a6ce537a6 ] When a bio with REQ_PREFLUSH is submitted to dm, __send_empty_flush() generates a flush_bio with REQ_OP_WRITE | REQ_PREFLUSH | REQ_SYNC, which causes the flush_bio to be throttled by wbt_wait(). An example from v5.4, similar problem also exists in upstream: crash> bt 2091206 PID: 2091206 TASK: ffff2050df92a300 CPU: 109 COMMAND: "kworker/u260:0" #0 [ffff800084a2f7f0] __switch_to at ffff80004008aeb8 #1 [ffff800084a2f820] __schedule at ffff800040bfa0c4 #2 [ffff800084a2f880] schedule at ffff800040bfa4b4 #3 [ffff800084a2f8a0] io_schedule at ffff800040bfa9c4 #4 [ffff800084a2f8c0] rq_qos_wait at ffff8000405925bc #5 [ffff800084a2f940] wbt_wait at ffff8000405bb3a0 #6 [ffff800084a2f9a0] __rq_qos_throttle at ffff800040592254 #7 [ffff800084a2f9c0] blk_mq_make_request at ffff80004057cf38 #8 [ffff800084a2fa60] generic_make_request at ffff800040570138 #9 [ffff800084a2fae0] submit_bio at ffff8000405703b4 #10 [ffff800084a2fb50] xlog_write_iclog at ffff800001280834 [xfs] #11 [ffff800084a2fbb0] xlog_sync at ffff800001280c3c [xfs] #12 [ffff800084a2fbf0] xlog_state_release_iclog at ffff800001280df4 [xfs] #13 [ffff800084a2fc10] xlog_write at ffff80000128203c [xfs] #14 [ffff800084a2fcd0] xlog_cil_push at ffff8000012846dc [xfs] #15 [ffff800084a2fda0] xlog_cil_push_work at ffff800001284a2c [xfs] #16 [ffff800084a2fdb0] process_one_work at ffff800040111d08 #17 [ffff800084a2fe00] worker_thread at ffff8000401121cc #18 [ffff800084a2fe70] kthread at ffff800040118de4 After commit 2def2845cc33 ("xfs: don't allow log IO to be throttled"), the metadata submitted by xlog_write_iclog() should not be throttled. But due to the existence of the dm layer, throttling flush_bio indirectly causes the metadata bio to be throttled. Fix this by conditionally adding REQ_IDLE to flush_bio.bi_opf, which makes wbt_should_throttle() return false to avoid wbt_wait(). Signed-off-by: Jinliang Zheng <alexjlzheng(a)tencent.com> Reviewed-by: Tianxiang Peng <txpeng(a)tencent.com> Reviewed-by: Hao Peng <flyingpeng(a)tencent.com> Signed-off-by: Mikulas Patocka <mpatocka(a)redhat.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zheng Qixing <zhengqixing(a)huawei.com> --- drivers/md/dm.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/drivers/md/dm.c b/drivers/md/dm.c index bb455dc38fbe..ffa469ececb9 100644 --- a/drivers/md/dm.c +++ b/drivers/md/dm.c @@ -1538,14 +1538,18 @@ static void __send_empty_flush(struct clone_info *ci) { struct dm_table *t = ci->map; struct bio flush_bio; + blk_opf_t opf = REQ_OP_WRITE | REQ_PREFLUSH | REQ_SYNC; + + if ((ci->io->orig_bio->bi_opf & (REQ_IDLE | REQ_SYNC)) == + (REQ_IDLE | REQ_SYNC)) + opf |= REQ_IDLE; /* * Use an on-stack bio for this, it's safe since we don't * need to reference it after submit. It's just used as * the basis for the clone(s). */ - bio_init(&flush_bio, ci->io->md->disk->part0, NULL, 0, - REQ_OP_WRITE | REQ_PREFLUSH | REQ_SYNC); + bio_init(&flush_bio, ci->io->md->disk->part0, NULL, 0, opf); ci->bio = &flush_bio; ci->sector_count = 0; -- 2.39.2

2 1

[PATCH openEuler-1.0-LTS] md: call __md_stop_writes in md_stop
by Zheng Qixing 03 Jul '25

03 Jul '25

From: Guoqing Jiang <guoqing.jiang(a)linux.dev> stable inclusion from stable-v4.19.257 commit 690b5c90fd2d81fd1d2b6110fa36783232f6dce2 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ICG956 CVE: CVE-2022-49987 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… ------------------ commit 0dd84b319352bb8ba64752d4e45396d8b13e6018 upstream. From the link [1], we can see raid1d was running even after the path raid_dtr -> md_stop -> __md_stop. Let's stop write first in destructor to align with normal md-raid to fix the KASAN issue. [1]. https://lore.kernel.org/linux-raid/CAPhsuW5gc4AakdGNdF8ubpezAuDLFOYUO_sfMZc… Fixes: 48df498daf62 ("md: move bitmap_destroy to the beginning of __md_stop") Reported-by: Mikulas Patocka <mpatocka(a)redhat.com> Signed-off-by: Guoqing Jiang <guoqing.jiang(a)linux.dev> Signed-off-by: Song Liu <song(a)kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Zheng Qixing <zhengqixing(a)huawei.com> --- drivers/md/md.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/md/md.c b/drivers/md/md.c index b9748a0a0e30..73ac6e6fee35 100644 --- a/drivers/md/md.c +++ b/drivers/md/md.c @@ -6103,6 +6103,7 @@ void md_stop(struct mddev *mddev) /* stop the array and free an attached data structures. * This is called from dm-raid */ + __md_stop_writes(mddev); __md_stop(mddev); bioset_exit(&mddev->bio_set); bioset_exit(&mddev->sync_set); -- 2.39.2

2 1

[PATCH openEuler-1.0-LTS] md-raid10: fix KASAN warning
by Zheng Qixing 03 Jul '25

03 Jul '25

From: Mikulas Patocka <mpatocka(a)redhat.com> stable inclusion from stable-v4.19.256 commit 7a6ccc8fa192fd357c2d5d4c6ce67c834a179e23 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ICG9PP CVE: CVE-2022-50211 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… ------------------ commit d17f744e883b2f8d13cca252d71cfe8ace346f7d upstream. There's a KASAN warning in raid10_remove_disk when running the lvm test lvconvert-raid-reshape.sh. We fix this warning by verifying that the value "number" is valid. BUG: KASAN: slab-out-of-bounds in raid10_remove_disk+0x61/0x2a0 [raid10] Read of size 8 at addr ffff889108f3d300 by task mdX_raid10/124682 CPU: 3 PID: 124682 Comm: mdX_raid10 Not tainted 5.19.0-rc6 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-2 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x34/0x44 print_report.cold+0x45/0x57a ? __lock_text_start+0x18/0x18 ? raid10_remove_disk+0x61/0x2a0 [raid10] kasan_report+0xa8/0xe0 ? raid10_remove_disk+0x61/0x2a0 [raid10] raid10_remove_disk+0x61/0x2a0 [raid10] Buffer I/O error on dev dm-76, logical block 15344, async page read ? __mutex_unlock_slowpath.constprop.0+0x1e0/0x1e0 remove_and_add_spares+0x367/0x8a0 [md_mod] ? super_written+0x1c0/0x1c0 [md_mod] ? mutex_trylock+0xac/0x120 ? _raw_spin_lock+0x72/0xc0 ? _raw_spin_lock_bh+0xc0/0xc0 md_check_recovery+0x848/0x960 [md_mod] raid10d+0xcf/0x3360 [raid10] ? sched_clock_cpu+0x185/0x1a0 ? rb_erase+0x4d4/0x620 ? var_wake_function+0xe0/0xe0 ? psi_group_change+0x411/0x500 ? preempt_count_sub+0xf/0xc0 ? _raw_spin_lock_irqsave+0x78/0xc0 ? __lock_text_start+0x18/0x18 ? raid10_sync_request+0x36c0/0x36c0 [raid10] ? preempt_count_sub+0xf/0xc0 ? _raw_spin_unlock_irqrestore+0x19/0x40 ? del_timer_sync+0xa9/0x100 ? try_to_del_timer_sync+0xc0/0xc0 ? _raw_spin_lock_irqsave+0x78/0xc0 ? __lock_text_start+0x18/0x18 ? _raw_spin_unlock_irq+0x11/0x24 ? __list_del_entry_valid+0x68/0xa0 ? finish_wait+0xa3/0x100 md_thread+0x161/0x260 [md_mod] ? unregister_md_personality+0xa0/0xa0 [md_mod] ? _raw_spin_lock_irqsave+0x78/0xc0 ? prepare_to_wait_event+0x2c0/0x2c0 ? unregister_md_personality+0xa0/0xa0 [md_mod] kthread+0x148/0x180 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x1f/0x30 </TASK> Allocated by task 124495: kasan_save_stack+0x1e/0x40 __kasan_kmalloc+0x80/0xa0 setup_conf+0x140/0x5c0 [raid10] raid10_run+0x4cd/0x740 [raid10] md_run+0x6f9/0x1300 [md_mod] raid_ctr+0x2531/0x4ac0 [dm_raid] dm_table_add_target+0x2b0/0x620 [dm_mod] table_load+0x1c8/0x400 [dm_mod] ctl_ioctl+0x29e/0x560 [dm_mod] dm_compat_ctl_ioctl+0x7/0x20 [dm_mod] __do_compat_sys_ioctl+0xfa/0x160 do_syscall_64+0x90/0xc0 entry_SYSCALL_64_after_hwframe+0x46/0xb0 Last potentially related work creation: kasan_save_stack+0x1e/0x40 __kasan_record_aux_stack+0x9e/0xc0 kvfree_call_rcu+0x84/0x480 timerfd_release+0x82/0x140 L __fput+0xfa/0x400 task_work_run+0x80/0xc0 exit_to_user_mode_prepare+0x155/0x160 syscall_exit_to_user_mode+0x12/0x40 do_syscall_64+0x42/0xc0 entry_SYSCALL_64_after_hwframe+0x46/0xb0 Second to last potentially related work creation: kasan_save_stack+0x1e/0x40 __kasan_record_aux_stack+0x9e/0xc0 kvfree_call_rcu+0x84/0x480 timerfd_release+0x82/0x140 __fput+0xfa/0x400 task_work_run+0x80/0xc0 exit_to_user_mode_prepare+0x155/0x160 syscall_exit_to_user_mode+0x12/0x40 do_syscall_64+0x42/0xc0 entry_SYSCALL_64_after_hwframe+0x46/0xb0 The buggy address belongs to the object at ffff889108f3d200 which belongs to the cache kmalloc-256 of size 256 The buggy address is located 0 bytes to the right of 256-byte region [ffff889108f3d200, ffff889108f3d300) The buggy address belongs to the physical page: page:000000007ef2a34c refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1108f3c head:000000007ef2a34c order:2 compound_mapcount:0 compound_pincount:0 flags: 0x4000000000010200(slab|head|zone=2) raw: 4000000000010200 0000000000000000 dead000000000001 ffff889100042b40 raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff889108f3d200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ffff889108f3d280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >ffff889108f3d300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ^ ffff889108f3d380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffff889108f3d400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Signed-off-by: Mikulas Patocka <mpatocka(a)redhat.com> Cc: stable(a)vger.kernel.org Signed-off-by: Song Liu <song(a)kernel.org> Signed-off-by: Jens Axboe <axboe(a)kernel.dk> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Zheng Qixing <zhengqixing(a)huawei.com> --- drivers/md/raid10.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/drivers/md/raid10.c b/drivers/md/raid10.c index 07d58e88eb7b..6ac9ea253f51 100644 --- a/drivers/md/raid10.c +++ b/drivers/md/raid10.c @@ -1893,9 +1893,12 @@ static int raid10_remove_disk(struct mddev *mddev, struct md_rdev *rdev) int err = 0; int number = rdev->raid_disk; struct md_rdev **rdevp; - struct raid10_info *p = conf->mirrors + number; + struct raid10_info *p; print_conf(conf); + if (unlikely(number >= mddev->raid_disks)) + return 0; + p = conf->mirrors + number; if (rdev == p->rdev) rdevp = &p->rdev; else if (rdev == p->replacement) -- 2.39.2

2 1