- Kernel - mailweb.openeuler.org

[PATCH OLK-6.6 0/8] xsched: XCU Partition
by Zicheng Qu 19 Nov '25

19 Nov '25

Alekseev Dmitry (2): xsched: Add XCU control group implementation and its backend in xsched CFS xsched: Add support for CFS quota for cgroups Konstantin Meskhidze (6): xsched: Add base vstream support xcu: Add base NPU driver support xsched: Introduce vstream management xsched: Add basic scheduler core support xsched: Add xsched RT class xsched: Add xsched CFS class arch/arm/tools/syscall.tbl | 2 +- arch/arm64/configs/openeuler_defconfig | 2 + arch/powerpc/kernel/syscalls/syscall.tbl | 2 +- arch/x86/configs/openeuler_defconfig | 2 + arch/x86/entry/syscalls/syscall_32.tbl | 2 +- arch/x86/entry/syscalls/syscall_64.tbl | 2 +- drivers/Makefile | 1 + drivers/xcu/Makefile | 2 + drivers/xcu/xcu_group.c | 380 +++++++++ include/linux/cgroup_subsys.h | 4 + include/linux/syscalls.h | 2 + include/linux/vstream.h | 91 ++ include/linux/xcu_group.h | 96 +++ include/linux/xsched.h | 514 ++++++++++++ include/uapi/asm-generic/unistd.h | 5 +- include/uapi/linux/xcu_vstream.h | 77 ++ init/Kconfig | 1 + kernel/Makefile | 1 + kernel/cgroup/cgroup.c | 2 +- kernel/xsched/Kconfig | 85 ++ kernel/xsched/Makefile | 9 + kernel/xsched/cfs.c | 237 ++++++ kernel/xsched/cfs_quota.c | 98 +++ kernel/xsched/cgroup.c | 775 ++++++++++++++++++ kernel/xsched/core.c | 526 ++++++++++++ kernel/xsched/rt.c | 281 +++++++ kernel/xsched/vstream.c | 674 +++++++++++++++ .../arch/powerpc/entry/syscalls/syscall.tbl | 2 +- .../arch/x86/entry/syscalls/syscall_64.tbl | 2 +- 29 files changed, 3868 insertions(+), 9 deletions(-) create mode 100644 drivers/xcu/Makefile create mode 100644 drivers/xcu/xcu_group.c create mode 100644 include/linux/vstream.h create mode 100644 include/linux/xcu_group.h create mode 100644 include/linux/xsched.h create mode 100644 include/uapi/linux/xcu_vstream.h create mode 100644 kernel/xsched/Kconfig create mode 100644 kernel/xsched/Makefile create mode 100644 kernel/xsched/cfs.c create mode 100644 kernel/xsched/cfs_quota.c create mode 100644 kernel/xsched/cgroup.c create mode 100644 kernel/xsched/core.c create mode 100644 kernel/xsched/rt.c create mode 100644 kernel/xsched/vstream.c -- 2.34.1

2 9

[PATCH OLK-6.6] blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
by Zheng Qixing 19 Nov '25

19 Nov '25

From: Li Nan <linan122(a)huawei.com> mainline inclusion from mainline-v6.18-rc1 commit 4c7ef92f6d4d08a27d676e4c348f4e2922cab3ed category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6B4D CVE: CVE-2025-40125 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ------------------ In __blk_mq_update_nr_hw_queues() the return value of blk_mq_sysfs_register_hctxs() is not checked. If sysfs creation for hctx fails, later changing the number of hw_queues or removing disk will trigger the following warning: kernfs: can not remove 'nr_tags', no directory WARNING: CPU: 2 PID: 637 at fs/kernfs/dir.c:1707 kernfs_remove_by_name_ns+0x13f/0x160 Call Trace: remove_files.isra.1+0x38/0xb0 sysfs_remove_group+0x4d/0x100 sysfs_remove_groups+0x31/0x60 __kobject_del+0x23/0xf0 kobject_del+0x17/0x40 blk_mq_unregister_hctx+0x5d/0x80 blk_mq_sysfs_unregister_hctxs+0x94/0xd0 blk_mq_update_nr_hw_queues+0x124/0x760 nullb_update_nr_hw_queues+0x71/0xf0 [null_blk] nullb_device_submit_queues_store+0x92/0x120 [null_blk] kobjct_del() was called unconditionally even if sysfs creation failed. Fix it by checkig the kobject creation statusbefore deleting it. Fixes: 477e19dedc9d ("blk-mq: adjust debugfs and sysfs register when updating nr_hw_queues") Signed-off-by: Li Nan <linan122(a)huawei.com> Reviewed-by: Yu Kuai <yukuai3(a)huawei.com> Link: https://lore.kernel.org/r/20250826084854.1030545-1-linan666@huaweicloud.com Signed-off-by: Jens Axboe <axboe(a)kernel.dk> Signed-off-by: Zheng Qixing <zhengqixing(a)huawei.com> --- block/blk-mq-sysfs.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/block/blk-mq-sysfs.c b/block/blk-mq-sysfs.c index 156e9bb07abf..2fb234ab467b 100644 --- a/block/blk-mq-sysfs.c +++ b/block/blk-mq-sysfs.c @@ -150,9 +150,11 @@ static void blk_mq_unregister_hctx(struct blk_mq_hw_ctx *hctx) return; hctx_for_each_ctx(hctx, ctx, i) - kobject_del(&ctx->kobj); + if (ctx->kobj.state_in_sysfs) + kobject_del(&ctx->kobj); - kobject_del(&hctx->kobj); + if (hctx->kobj.state_in_sysfs) + kobject_del(&hctx->kobj); } static int blk_mq_register_hctx(struct blk_mq_hw_ctx *hctx) -- 2.39.2

2 1

[PATCH openEuler-1.0-LTS] scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
by Zheng Qixing 19 Nov '25

19 Nov '25

From: Tomas Henzl <thenzl(a)redhat.com> stable inclusion from stable-v4.19.276 commit a156a262c543fa5ff30bcb2fc6ad1a95cb4ab57a category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID43SW CVE: CVE-2023-7324 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… ------------------ commit db95d4df71cb55506425b6e4a5f8d68e3a765b63 upstream. Sanitize possible addl_desc_ptr out-of-bounds accesses in ses_enclosure_data_process(). Link: https://lore.kernel.org/r/20230202162451.15346-3-thenzl@redhat.com Cc: stable(a)vger.kernel.org Signed-off-by: Tomas Henzl <thenzl(a)redhat.com> Signed-off-by: Martin K. Petersen <martin.petersen(a)oracle.com> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Conflicts: drivers/scsi/ses.c [Context conflicts.] Signed-off-by: Zheng Qixing <zhengqixing(a)huawei.com> --- drivers/scsi/ses.c | 35 ++++++++++++++++++++++++++--------- 1 file changed, 26 insertions(+), 9 deletions(-) diff --git a/drivers/scsi/ses.c b/drivers/scsi/ses.c index 6ef1e12a2fce..b42c0bb8caa9 100644 --- a/drivers/scsi/ses.c +++ b/drivers/scsi/ses.c @@ -435,8 +435,8 @@ int ses_match_host(struct enclosure_device *edev, void *data) } #endif /* 0 */ -static void ses_process_descriptor(struct enclosure_component *ecomp, - unsigned char *desc) +static int ses_process_descriptor(struct enclosure_component *ecomp, + unsigned char *desc, int max_desc_len) { int eip = desc[0] & 0x10; int invalid = desc[0] & 0x80; @@ -447,22 +447,32 @@ static void ses_process_descriptor(struct enclosure_component *ecomp, unsigned char *d; if (invalid) - return; + return 0; switch (proto) { case SCSI_PROTOCOL_FCP: if (eip) { + if (max_desc_len <= 7) + return 1; d = desc + 4; slot = d[3]; } break; case SCSI_PROTOCOL_SAS: + if (eip) { + if (max_desc_len <= 27) + return 1; d = desc + 4; slot = d[3]; d = desc + 8; - } else + } else { + if (max_desc_len <= 23) + return 1; d = desc + 4; + } + + /* only take the phy0 addr */ addr = (u64)d[12] << 56 | (u64)d[13] << 48 | @@ -479,6 +489,8 @@ static void ses_process_descriptor(struct enclosure_component *ecomp, } ecomp->slot = slot; scomp->addr = addr; + + return 0; } struct efd { @@ -548,7 +560,7 @@ static void ses_enclosure_data_process(struct enclosure_device *edev, /* skip past overall descriptor */ desc_ptr += len + 4; } - if (ses_dev->page10) + if (ses_dev->page10 && ses_dev->page10_len > 9) addl_desc_ptr = ses_dev->page10 + 8; type_ptr = ses_dev->page1_types; components = 0; @@ -556,6 +568,7 @@ static void ses_enclosure_data_process(struct enclosure_device *edev, for (j = 0; j < type_ptr[1]; j++) { char *name = NULL; struct enclosure_component *ecomp; + int max_desc_len; if (desc_ptr) { if (desc_ptr + 3 >= buf + page7_len) { @@ -588,10 +601,14 @@ static void ses_enclosure_data_process(struct enclosure_device *edev, ecomp = ERR_PTR(-EINVAL); if (!IS_ERR(ecomp)) { - if (addl_desc_ptr) - ses_process_descriptor( - ecomp, - addl_desc_ptr); + if (addl_desc_ptr) { + max_desc_len = ses_dev->page10_len - + (addl_desc_ptr - ses_dev->page10); + if (ses_process_descriptor(ecomp, + addl_desc_ptr, + max_desc_len)) + addl_desc_ptr = NULL; + } if (create) enclosure_component_register( ecomp); -- 2.39.2

2 1

[PATCH OLK-6.6 0/8] xsched: XCU Partition
by Zicheng Qu 19 Nov '25

19 Nov '25

Alekseev Dmitry (2): xsched: Add XCU control group implementation and its backend in xsched CFS xsched: Add support for CFS quota for cgroups Konstantin Meskhidze (6): xsched: Add base vstream support xcu: Add base NPU driver support xsched: Introduce vstream management xsched: Add basic scheduler core support xsched: Add xsched RT class xsched: Add xsched CFS class arch/arm/tools/syscall.tbl | 2 +- arch/arm64/configs/openeuler_defconfig | 1 + arch/powerpc/kernel/syscalls/syscall.tbl | 2 +- arch/x86/configs/openeuler_defconfig | 1 + arch/x86/entry/syscalls/syscall_32.tbl | 2 +- arch/x86/entry/syscalls/syscall_64.tbl | 2 +- drivers/Makefile | 1 + drivers/xcu/Makefile | 2 + drivers/xcu/xcu_group.c | 380 +++++++++ include/linux/cgroup_subsys.h | 4 + include/linux/syscalls.h | 2 + include/linux/vstream.h | 91 ++ include/linux/xcu_group.h | 96 +++ include/linux/xsched.h | 514 ++++++++++++ include/uapi/asm-generic/unistd.h | 5 +- include/uapi/linux/xcu_vstream.h | 77 ++ init/Kconfig | 1 + kernel/Makefile | 1 + kernel/cgroup/cgroup.c | 2 +- kernel/xsched/Kconfig | 85 ++ kernel/xsched/Makefile | 9 + kernel/xsched/cfs.c | 237 ++++++ kernel/xsched/cfs_quota.c | 98 +++ kernel/xsched/cgroup.c | 775 ++++++++++++++++++ kernel/xsched/core.c | 526 ++++++++++++ kernel/xsched/rt.c | 281 +++++++ kernel/xsched/vstream.c | 674 +++++++++++++++ .../arch/powerpc/entry/syscalls/syscall.tbl | 2 +- .../arch/x86/entry/syscalls/syscall_64.tbl | 2 +- 29 files changed, 3866 insertions(+), 9 deletions(-) create mode 100644 drivers/xcu/Makefile create mode 100644 drivers/xcu/xcu_group.c create mode 100644 include/linux/vstream.h create mode 100644 include/linux/xcu_group.h create mode 100644 include/linux/xsched.h create mode 100644 include/uapi/linux/xcu_vstream.h create mode 100644 kernel/xsched/Kconfig create mode 100644 kernel/xsched/Makefile create mode 100644 kernel/xsched/cfs.c create mode 100644 kernel/xsched/cfs_quota.c create mode 100644 kernel/xsched/cgroup.c create mode 100644 kernel/xsched/core.c create mode 100644 kernel/xsched/rt.c create mode 100644 kernel/xsched/vstream.c -- 2.34.1

2 9

[PATCH OLK-6.6] blk-ioinf: fix default weight being reset to 0 for non-root cgroups
by Baokun Li 19 Nov '25

19 Nov '25

hulk inclusion category: feature bugzilla: https://gitee.com/openeuler/kernel/issues/ID0C1D -------------------------------- The legacy blkio cgroup treats both `/sys/fs/cgroup/blkio` (the true root) and `/sys/fs/cgroup/blkio/1` (often the first user-created cgroup) as root when initializing the per-device (pd) structure. Consequently, if a default weight is set for the non-root cgroup (`/sys/fs/cgroup/blkio/1`), it is incorrectly overwritten and reset to 0 inside `ioinf_pd_init()`. This patch resolves the issue by increasing the priority of the `IOINFG_WEIGHT_UNINIT` check, ensuring that an explicitly set default weight is honored and is not reset when the `pd` is initialized. Fixes: a63e78514d11 ("blk-ioinf: introduce inflight-based IO QoS controller") Signed-off-by: Baokun Li <libaokun1(a)huawei.com> --- block/blk-ioinf.c | 16 +++++++--------- 1 file changed, 7 insertions(+), 9 deletions(-) diff --git a/block/blk-ioinf.c b/block/blk-ioinf.c index 7432d88bf1f0..623c2715802b 100644 --- a/block/blk-ioinf.c +++ b/block/blk-ioinf.c @@ -1289,18 +1289,16 @@ static void ioinf_pd_init(struct blkg_policy_data *pd) struct blkcg_gq *parent = blkg->parent; infg->inf = q_to_inf(blkg->q); - if (!parent || parent->blkcg->css.cgroup->level == 0) { - infcg->dfl_user_weight = 0; - return; - } - - infg->user_weight = blkg_to_infg(parent)->user_weight; + if (parent) + infg->user_weight = blkg_to_infg(parent)->user_weight; /* Inherit the parent cgroup's dfl_user_weight if it was not set. */ if (infcg->dfl_user_weight == IOINFG_WEIGHT_UNINIT) { - struct ioinf_cgrp *parent_cgrp = blkcg_to_infcg(parent->blkcg); - - infcg->dfl_user_weight = parent_cgrp->dfl_user_weight; + if (!parent || parent->blkcg->css.cgroup->level == 0) + infcg->dfl_user_weight = 0; + else + infcg->dfl_user_weight = + blkcg_to_infcg(parent->blkcg)->dfl_user_weight; } infg->dfl_user_weight = infcg->dfl_user_weight; -- 2.46.1

2 1

[PATCH OLK-6.6] arm64/mpam: Add build dependencies for CONFIG_RESCTRL_IOMMU
by Zeng Heng 19 Nov '25

19 Nov '25

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IC03L1 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/morse/linux.git/commit/?h=m… -------------------------------- On the ARM64 architecture, the CONFIG_RESCTRL_IOMMU actually depends on the CONFIG_ARM_SMMU_V3, which allows to bind SMMU iommu_groups with resctrl groups. Therefore, add this build dependency in Kconfig. Additionally, to avoid compilation errors due to re-definitions in the include/linux/resctrl.h header file when the CONFIG_RESCTRL_IOMMU is disabled, add the build switch for resctrl_arch_*_iommu_closid_rmid(). Fixes: 7e3f95a1a861 ("fs/resctrl: Add support for assigning iommu_groups to resctrl groups") Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/platform/mpam/Kconfig | 2 +- drivers/platform/mpam/mpam_resctrl.c | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/drivers/platform/mpam/Kconfig b/drivers/platform/mpam/Kconfig index a6e937b8f91d..96dd7c091a9f 100644 --- a/drivers/platform/mpam/Kconfig +++ b/drivers/platform/mpam/Kconfig @@ -6,4 +6,4 @@ config ARM_CPU_RESCTRL depends on ARM64 && ARCH_HAS_CPU_RESCTRL depends on MISC_FILESYSTEMS select RESCTRL_RMID_DEPENDS_ON_CLOSID - select RESCTRL_IOMMU + select RESCTRL_IOMMU if ARM_SMMU_V3 diff --git a/drivers/platform/mpam/mpam_resctrl.c b/drivers/platform/mpam/mpam_resctrl.c index 2d3a1827a48c..7c386ce7b80f 100644 --- a/drivers/platform/mpam/mpam_resctrl.c +++ b/drivers/platform/mpam/mpam_resctrl.c @@ -260,6 +260,7 @@ bool resctrl_arch_match_rmid(struct task_struct *tsk, u32 closid, u32 rmid) return (tsk_closid == closid) && (tsk_rmid == rmid); } +#ifdef CONFIG_RESCTRL_IOMMU int resctrl_arch_set_iommu_closid_rmid(struct iommu_group *group, u32 closid, u32 rmid) { @@ -302,6 +303,7 @@ bool resctrl_arch_match_iommu_closid_rmid(struct iommu_group *group, return (partid == closid) && (rmid == pmg); } +#endif struct rdt_resource *resctrl_arch_get_resource(enum resctrl_res_level l) { -- 2.25.1

2 1

openEuler Kernel SIG双周例会
by openEuler conference 19 Nov '25

19 Nov '25

您好！ Kernel 邀请您参加 2025-11-21 14:00 召开的WeLink会议(自动录制) 会议主题：openEuler Kernel SIG双周例会会议内容： 1. 进展update 2. 议题征集中（新增议题可回复本邮件申请，或填报至会议纪要看板）会议链接：https://meeting.huaweicloud.com:36443/#/j/987186410 会议纪要：https://etherpad.openeuler.org/p/Kernel-meetings 更多资讯尽在：https://www.openeuler.org/zh/ Hello! Kernel invites you to attend the WeLink conference(auto recording) will be held at 2025-11-21 14:00, The subject of the conference is openEuler Kernel SIG双周例会 Summary: 1. 进展update 2. 议题征集中（新增议题可回复本邮件申请，或填报至会议纪要看板） You can join the meeting at https://meeting.huaweicloud.com:36443/#/j/987186410 Add topics at https://etherpad.openeuler.org/p/Kernel-meetings More information: https://www.openeuler.org/en/

1 0

[PATCH OLK-6.6 0/8] xsched: XCU Partition
by Zicheng Qu 19 Nov '25

19 Nov '25

Alekseev Dmitry (2): xsched: Add XCU control group implementation and its backend in xsched CFS xsched: Add support for CFS quota for cgroups Konstantin Meskhidze (6): xsched: Add base vstream support xcu: Add base NPU driver support xsched: Introduce vstream management xsched: Add basic scheduler core support xsched: Add xsched RT class xsched: Add xsched CFS class arch/arm64/configs/openeuler_defconfig | 1 + arch/x86/configs/openeuler_defconfig | 1 + arch/x86/entry/syscalls/syscall_64.tbl | 2 +- drivers/Makefile | 1 + drivers/xcu/Makefile | 2 + drivers/xcu/xcu_group.c | 380 +++++++++ include/linux/cgroup_subsys.h | 4 + include/linux/syscalls.h | 2 + include/linux/vstream.h | 91 ++ include/linux/xcu_group.h | 96 +++ include/linux/xsched.h | 514 ++++++++++++ include/uapi/asm-generic/unistd.h | 5 +- include/uapi/linux/xcu_vstream.h | 77 ++ init/Kconfig | 1 + kernel/Makefile | 1 + kernel/cgroup/cgroup.c | 2 +- kernel/xsched/Kconfig | 85 ++ kernel/xsched/Makefile | 9 + kernel/xsched/cfs.c | 237 ++++++ kernel/xsched/cfs_quota.c | 98 +++ kernel/xsched/cgroup.c | 775 ++++++++++++++++++ kernel/xsched/core.c | 526 ++++++++++++ kernel/xsched/rt.c | 281 +++++++ kernel/xsched/vstream.c | 674 +++++++++++++++ .../arch/x86/entry/syscalls/syscall_64.tbl | 2 +- 25 files changed, 3862 insertions(+), 5 deletions(-) create mode 100644 drivers/xcu/Makefile create mode 100644 drivers/xcu/xcu_group.c create mode 100644 include/linux/vstream.h create mode 100644 include/linux/xcu_group.h create mode 100644 include/linux/xsched.h create mode 100644 include/uapi/linux/xcu_vstream.h create mode 100644 kernel/xsched/Kconfig create mode 100644 kernel/xsched/Makefile create mode 100644 kernel/xsched/cfs.c create mode 100644 kernel/xsched/cfs_quota.c create mode 100644 kernel/xsched/cgroup.c create mode 100644 kernel/xsched/core.c create mode 100644 kernel/xsched/rt.c create mode 100644 kernel/xsched/vstream.c -- 2.34.1

2 9

[PATCH OLK-6.6 0/8] xsched: XCU Partition
by Zicheng Qu 19 Nov '25

19 Nov '25

Alekseev Dmitry (2): xsched: Add XCU control group implementation and its backend in xsched CFS xsched: Add support for CFS quota for cgroups Konstantin Meskhidze (6): xsched: Add base vstream support xcu: Add base NPU driver support xsched: Introduce vstream management xsched: Add basic scheduler core support xsched: Add xsched RT class xsched: Add xsched CFS class arch/arm64/configs/openeuler_defconfig | 1 + arch/x86/configs/openeuler_defconfig | 1 + arch/x86/entry/syscalls/syscall_64.tbl | 2 +- drivers/Makefile | 1 + drivers/xcu/Makefile | 2 + drivers/xcu/xcu_group.c | 380 ++++++++++++ include/linux/cgroup_subsys.h | 4 + include/linux/syscalls.h | 2 + include/linux/vstream.h | 91 +++ include/linux/xcu_group.h | 96 +++ include/linux/xsched.h | 514 ++++++++++++++++ include/uapi/asm-generic/unistd.h | 5 +- include/uapi/linux/xcu_vstream.h | 77 +++ init/Kconfig | 1 + kernel/Makefile | 1 + kernel/cgroup/cgroup.c | 2 +- kernel/xsched/Kconfig | 85 +++ kernel/xsched/Makefile | 9 + kernel/xsched/cfs.c | 237 ++++++++ kernel/xsched/cfs_quota.c | 98 ++++ kernel/xsched/cgroup.c | 775 +++++++++++++++++++++++++ kernel/xsched/core.c | 526 +++++++++++++++++ kernel/xsched/rt.c | 281 +++++++++ kernel/xsched/vstream.c | 674 +++++++++++++++++++++ 24 files changed, 3861 insertions(+), 4 deletions(-) create mode 100644 drivers/xcu/Makefile create mode 100644 drivers/xcu/xcu_group.c create mode 100644 include/linux/vstream.h create mode 100644 include/linux/xcu_group.h create mode 100644 include/linux/xsched.h create mode 100644 include/uapi/linux/xcu_vstream.h create mode 100644 kernel/xsched/Kconfig create mode 100644 kernel/xsched/Makefile create mode 100644 kernel/xsched/cfs.c create mode 100644 kernel/xsched/cfs_quota.c create mode 100644 kernel/xsched/cgroup.c create mode 100644 kernel/xsched/core.c create mode 100644 kernel/xsched/rt.c create mode 100644 kernel/xsched/vstream.c -- 2.34.1

2 9

[openeuler:OLK-6.6 3269/3269] drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:450:39: error: dereferencing pointer to incomplete type 'struct ieee_pfc'
by kernel test robot 19 Nov '25

19 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: b4a3c05741e1650e8bb8399196fb5d7a318a4698 commit: 2048b5b7f264f56a4d9e73079e790e13c8596aaf [3269/3269] net: wangxun: txgbe: add support for wangxun 10G/25G/40G config: arm64-randconfig-002-20251119 (https://download.01.org/0day-ci/archive/20251119/202511190613.H4utOQmR-lkp@…) compiler: aarch64-linux-gcc (GCC) 8.5.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251119/202511190613.H4utOQmR-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511190613.H4utOQmR-lkp@intel.com/ All error/warnings (new ones prefixed by >>): In file included from drivers/net/ethernet/wangxun/txgbe/txgbe_xsk.h:7, from drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:28: drivers/net/ethernet/wangxun/txgbe/txgbe.h: In function 'txgbe_misc_isb': drivers/net/ethernet/wangxun/txgbe/txgbe.h:987:6: warning: variable 'cur_diff' set but not used [-Wunused-but-set-variable] u32 cur_diff = 0; ^~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: In function 'txgbe_update_xoff_received': >> drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:450:39: error: dereferencing pointer to incomplete type 'struct ieee_pfc' pfc_en |= !!(adapter->txgbe_ieee_pfc->pfc_en); ^~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: In function 'txgbe_tx_timeout': drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:582:7: warning: variable 'real_tx_hang' set but not used [-Wunused-but-set-variable] bool real_tx_hang = false; ^~~~~~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: In function 'txgbe_do_lan_reset': drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:2618:21: warning: variable 'tx_ring' set but not used [-Wunused-but-set-variable] struct txgbe_ring *tx_ring; ^~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: At top level: drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4515:5: warning: no previous prototype for 'txgbe_dcb_hw_ets' [-Wmissing-prototypes] s32 txgbe_dcb_hw_ets(struct txgbe_hw *hw, struct ieee_ets *ets, int max_frame) ^~~~~~~~~~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: In function 'txgbe_dcb_hw_ets': drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4517:15: error: 'IEEE_8021QAZ_MAX_TCS' undeclared (first use in this function) __u16 refill[IEEE_8021QAZ_MAX_TCS], max[IEEE_8021QAZ_MAX_TCS]; ^~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4517:15: note: each undeclared identifier is reported only once for each function it appears in >> drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4526:14: error: dereferencing pointer to incomplete type 'struct ieee_ets' switch (ets->tc_tsa[i]) { ^~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4527:8: error: 'IEEE_8021QAZ_TSA_STRICT' undeclared (first use in this function) case IEEE_8021QAZ_TSA_STRICT: ^~~~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4530:8: error: 'IEEE_8021QAZ_TSA_ETS' undeclared (first use in this function) case IEEE_8021QAZ_TSA_ETS: ^~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4522:7: warning: unused variable 'bwg_id' [-Wunused-variable] __u8 bwg_id[IEEE_8021QAZ_MAX_TCS] = {0, 1, 2, 3, 4, 5, 6, 7}; ^~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4518:7: warning: unused variable 'prio_type' [-Wunused-variable] __u8 prio_type[IEEE_8021QAZ_MAX_TCS]; ^~~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4517:38: warning: unused variable 'max' [-Wunused-variable] __u16 refill[IEEE_8021QAZ_MAX_TCS], max[IEEE_8021QAZ_MAX_TCS]; ^~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4517:8: warning: unused variable 'refill' [-Wunused-variable] __u16 refill[IEEE_8021QAZ_MAX_TCS], max[IEEE_8021QAZ_MAX_TCS]; ^~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: In function 'txgbe_configure_dcb': drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4591:26: error: 'DCB_CAP_DCBX_VER_IEEE' undeclared (first use in this function) if (adapter->dcbx_cap & DCB_CAP_DCBX_VER_IEEE) { ^~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: At top level: drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:6915:6: warning: no previous prototype for 'txgbe_irq_rearm_queues' [-Wmissing-prototypes] void txgbe_irq_rearm_queues(struct txgbe_adapter *adapter, ^~~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: In function 'txgbe_update_default_up': drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7090:9: error: variable 'app' has initializer but incomplete type struct dcb_app app = { ^~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7091:11: error: 'struct dcb_app' has no member named 'selector' .selector = DCB_APP_IDTYPE_ETHTYPE, ^~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7091:22: error: 'DCB_APP_IDTYPE_ETHTYPE' undeclared (first use in this function); did you mean 'ENCAP_TYPE_ETHER'? .selector = DCB_APP_IDTYPE_ETHTYPE, ^~~~~~~~~~~~~~~~~~~~~~ ENCAP_TYPE_ETHER drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7091:22: warning: excess elements in struct initializer drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7091:22: note: (near initialization for 'app') drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7092:11: error: 'struct dcb_app' has no member named 'protocol' .protocol = 0, ^~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7092:22: warning: excess elements in struct initializer .protocol = 0, ^ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7092:22: note: (near initialization for 'app') drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7090:17: error: storage size of 'app' isn't known struct dcb_app app = { ^~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7094:7: error: implicit declaration of function 'dcb_getapp'; did you mean 'wb_get'? [-Werror=implicit-function-declaration] up = dcb_getapp(netdev, &app); ^~~~~~~~~~ wb_get drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7090:17: warning: unused variable 'app' [-Wunused-variable] struct dcb_app app = { ^~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: In function 'txgbe_set_prio_tc_map': drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:9722:27: error: 'DCB_CAP_DCBX_VER_CEE' undeclared (first use in this function) if (adapter->dcbx_cap & DCB_CAP_DCBX_VER_CEE) ^~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: At top level: >> drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:10239:22: error: 'txgbe_fcoe_get_wwn' undeclared here (not in a function); did you mean 'txgbe_fcoe_enable'? .ndo_fcoe_get_wwn = txgbe_fcoe_get_wwn, ^~~~~~~~~~~~~~~~~~ txgbe_fcoe_enable drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: In function 'txgbe_remove': >> drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:10826:2: error: implicit declaration of function 'txgbe_fcoe_ddp_disable'; did you mean 'txgbe_fcoe_disable'? [-Werror=implicit-function-declaration] txgbe_fcoe_ddp_disable(adapter); ^~~~~~~~~~~~~~~~~~~~~~ txgbe_fcoe_disable drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: In function 'txgbe_dcb_hw_ets': drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4546:1: warning: control reaches end of non-void function [-Wreturn-type] } ^ cc1: some warnings being treated as errors -- In file included from drivers/net/ethernet/wangxun/txgbe/txgbe_fcoe.c:4: drivers/net/ethernet/wangxun/txgbe/txgbe.h: In function 'txgbe_misc_isb': drivers/net/ethernet/wangxun/txgbe/txgbe.h:987:6: warning: variable 'cur_diff' set but not used [-Wunused-but-set-variable] u32 cur_diff = 0; ^~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_fcoe.c: At top level: >> drivers/net/ethernet/wangxun/txgbe/txgbe_fcoe.c:748:5: warning: no previous prototype for 'txgbe_fcoe_ddp_enable' [-Wmissing-prototypes] int txgbe_fcoe_ddp_enable(struct txgbe_adapter *adapter) ^~~~~~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/wangxun/txgbe/txgbe_fcoe.c:767:6: warning: no previous prototype for 'txgbe_fcoe_ddp_disable' [-Wmissing-prototypes] void txgbe_fcoe_ddp_disable(struct txgbe_adapter *adapter) ^~~~~~~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/wangxun/txgbe/txgbe_fcoe.c:899:5: warning: no previous prototype for 'txgbe_fcoe_get_wwn' [-Wmissing-prototypes] int txgbe_fcoe_get_wwn(struct net_device *netdev, u64 *wwn, int type) ^~~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/wangxun/txgbe/txgbe_fcoe.c:936:4: warning: no previous prototype for 'txgbe_fcoe_get_tc' [-Wmissing-prototypes] u8 txgbe_fcoe_get_tc(struct txgbe_adapter *adapter) ^~~~~~~~~~~~~~~~~ -- In file included from drivers/net/ethernet/wangxun/txgbe/txgbe_lib.c:4: drivers/net/ethernet/wangxun/txgbe/txgbe.h: In function 'txgbe_misc_isb': drivers/net/ethernet/wangxun/txgbe/txgbe.h:987:6: warning: variable 'cur_diff' set but not used [-Wunused-but-set-variable] u32 cur_diff = 0; ^~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_lib.c: In function 'txgbe_cache_ring_dcb_vmdq': >> drivers/net/ethernet/wangxun/txgbe/txgbe_lib.c:63:16: error: implicit declaration of function 'txgbe_fcoe_get_tc'; did you mean 'txgbe_fcoe_enable'? [-Werror=implicit-function-declaration] u8 fcoe_tc = txgbe_fcoe_get_tc(adapter); ^~~~~~~~~~~~~~~~~ txgbe_fcoe_enable cc1: some warnings being treated as errors vim +450 drivers/net/ethernet/wangxun/txgbe/txgbe_main.c 439 440 static void txgbe_update_xoff_received(struct txgbe_adapter *adapter) 441 { 442 struct txgbe_hw *hw = &adapter->hw; 443 struct txgbe_hw_stats *hwstats = &adapter->stats; 444 u32 xoff[8] = {0}; 445 int tc; 446 int i; 447 bool pfc_en = adapter->dcb_cfg.pfc_mode_enable; 448 449 if (adapter->txgbe_ieee_pfc) > 450 pfc_en |= !!(adapter->txgbe_ieee_pfc->pfc_en); 451 452 if (!(adapter->flags & TXGBE_FLAG_DCB_ENABLED) || !pfc_en) { 453 txgbe_update_xoff_rx_lfc(adapter); 454 return; 455 } 456 457 /* update stats for each tc, only valid with PFC enabled */ 458 for (i = 0; i < MAX_TX_PACKET_BUFFERS; i++) { 459 u32 pxoffrxc; 460 461 wr32m(hw, TXGBE_MMC_CONTROL, TXGBE_MMC_CONTROL_UP, i << 16); 462 pxoffrxc = rd32(hw, TXGBE_MAC_PXOFFRXC); 463 hwstats->pxoffrxc[i] += pxoffrxc; 464 /* Get the TC for given UP */ 465 tc = netdev_get_prio_tc_map(adapter->netdev, i); 466 xoff[tc] += pxoffrxc; 467 } 468 469 /* disarm tx queues that have received xoff frames */ 470 for (i = 0; i < adapter->num_tx_queues; i++) { 471 struct txgbe_ring *tx_ring = adapter->tx_ring[i]; 472 473 tc = tx_ring->dcb_tc; 474 if (tc <= 7 && xoff[tc]) 475 clear_bit(__TXGBE_HANG_CHECK_ARMED, &tx_ring->state); 476 } 477 for (i = 0; i < adapter->num_xdp_queues; i++) { 478 struct txgbe_ring *xdp_ring = adapter->xdp_ring[i]; 479 480 tc = xdp_ring->dcb_tc; 481 if (tc <= 7 && xoff[tc]) 482 clear_bit(__TXGBE_HANG_CHECK_ARMED, &xdp_ring->state); 483 } 484 } 485 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3214/3214] mm/memory.c:2802:5: sparse: sparse: symbol '__remap_pfn_range' was not declared. Should it be static?
by kernel test robot 19 Nov '25

19 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: b4a3c05741e1650e8bb8399196fb5d7a318a4698 commit: 923e224a12462d640fa37f3069c6bfafd378ac3b [3214/3214] mm: introduce remap_pfn_range_try_pmd() for PMD-level hugepage mapping config: x86_64-randconfig-r111-20251118 (https://download.01.org/0day-ci/archive/20251119/202511190025.obom3fen-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251119/202511190025.obom3fen-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511190025.obom3fen-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) >> mm/memory.c:2802:5: sparse: sparse: symbol '__remap_pfn_range' was not declared. Should it be static? mm/memory.c:301:9: sparse: sparse: incompatible types in conditional expression (different base types): mm/memory.c:301:9: sparse: void mm/memory.c:301:9: sparse: int vim +/__remap_pfn_range +2802 mm/memory.c 2789 2790 /** 2791 * remap_pfn_range - remap kernel memory to userspace 2792 * @vma: user vma to map to 2793 * @addr: target page aligned user address to start at 2794 * @pfn: page frame number of kernel physical memory address 2795 * @size: size of mapping area 2796 * @prot: page protection flags for this mapping 2797 * 2798 * Note: this is only safe if the mm semaphore is held when called. 2799 * 2800 * Return: %0 on success, negative error code otherwise. 2801 */ > 2802 int __remap_pfn_range(struct vm_area_struct *vma, unsigned long addr, 2803 unsigned long pfn, unsigned long size, pgprot_t prot, 2804 unsigned int page_shift) 2805 { 2806 int err; 2807 2808 err = track_pfn_remap(vma, &prot, pfn, addr, PAGE_ALIGN(size)); 2809 if (err) 2810 return -EINVAL; 2811 2812 err = __remap_pfn_range_notrack(vma, addr, pfn, size, prot, page_shift); 2813 if (err) 2814 untrack_pfn(vma, pfn, PAGE_ALIGN(size), true); 2815 return err; 2816 } 2817 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3214/3214] block/blk-ioinf.c:530:41: error: array type has incomplete element type 'struct blk_mq_debugfs_attr'
by kernel test robot 18 Nov '25

18 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: b4a3c05741e1650e8bb8399196fb5d7a318a4698 commit: 4192ef0b07762c6dabf617654df442fecffe8510 [3214/3214] blk-ioinf: add rqos/inflight/stat debufs interface config: x86_64-randconfig-r111-20251118 (https://download.01.org/0day-ci/archive/20251118/202511182212.yHIyxmau-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251118/202511182212.yHIyxmau-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511182212.yHIyxmau-lkp@intel.com/ All error/warnings (new ones prefixed by >>): block/blk-ioinf.c:248:6: warning: no previous prototype for 'ioinf_done' [-Wmissing-prototypes] 248 | void ioinf_done(struct ioinf *inf, struct ioinf_rq_wait *rqw) | ^~~~~~~~~~ >> block/blk-ioinf.c:530:41: error: array type has incomplete element type 'struct blk_mq_debugfs_attr' 530 | static const struct blk_mq_debugfs_attr ioinf_debugfs_attrs[] = { | ^~~~~~~~~~~~~~~~~~~ block/blk-ioinf.c:547:5: warning: no previous prototype for 'ioinf_calc_budget' [-Wmissing-prototypes] 547 | u32 ioinf_calc_budget(struct ioinf_rq_wait *rqw) | ^~~~~~~~~~~~~~~~~ >> block/blk-ioinf.c:530:41: warning: 'ioinf_debugfs_attrs' defined but not used [-Wunused-variable] 530 | static const struct blk_mq_debugfs_attr ioinf_debugfs_attrs[] = { | ^~~~~~~~~~~~~~~~~~~ Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for PGP_PRELOAD Depends on [n]: CRYPTO [=y] && ASYMMETRIC_KEY_TYPE [=n] Selected by [y]: - PGP_PRELOAD_PUBLIC_KEYS [=y] && CRYPTO [=y] vim +530 block/blk-ioinf.c 529 > 530 static const struct blk_mq_debugfs_attr ioinf_debugfs_attrs[] = { 531 {"stat", 0400, ioinf_stat_show}, 532 {}, 533 }; 534 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH] arm64/mpam: Add build dependencies for CONFIG_RESCTRL_IOMMU
by Zeng Heng 18 Nov '25

18 Nov '25

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IC03L1 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/morse/linux.git/commit/?h=m… -------------------------------- On the ARM64 architecture, the CONFIG_RESCTRL_IOMMU actually depends on the CONFIG_ARM_SMMU_V3, which allows to bind SMMU iommu_groups with resctrl groups. Therefore, add this build dependency in Kconfig. Additionally, to avoid compilation errors due to re-definitions in the include/linux/resctrl.h header file when the CONFIG_RESCTRL_IOMMU is disabled, add the build switch for resctrl_arch_*_iommu_closid_rmid(). Fixes: 7e3f95a1a861 ("fs/resctrl: Add support for assigning iommu_groups to resctrl groups") Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/platform/mpam/Kconfig | 2 +- drivers/platform/mpam/mpam_resctrl.c | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/drivers/platform/mpam/Kconfig b/drivers/platform/mpam/Kconfig index a6e937b8f91d..96dd7c091a9f 100644 --- a/drivers/platform/mpam/Kconfig +++ b/drivers/platform/mpam/Kconfig @@ -6,4 +6,4 @@ config ARM_CPU_RESCTRL depends on ARM64 && ARCH_HAS_CPU_RESCTRL depends on MISC_FILESYSTEMS select RESCTRL_RMID_DEPENDS_ON_CLOSID - select RESCTRL_IOMMU + select RESCTRL_IOMMU if ARM_SMMU_V3 diff --git a/drivers/platform/mpam/mpam_resctrl.c b/drivers/platform/mpam/mpam_resctrl.c index 2d3a1827a48c..7c386ce7b80f 100644 --- a/drivers/platform/mpam/mpam_resctrl.c +++ b/drivers/platform/mpam/mpam_resctrl.c @@ -260,6 +260,7 @@ bool resctrl_arch_match_rmid(struct task_struct *tsk, u32 closid, u32 rmid) return (tsk_closid == closid) && (tsk_rmid == rmid); } +#ifdef CONFIG_RESCTRL_IOMMU int resctrl_arch_set_iommu_closid_rmid(struct iommu_group *group, u32 closid, u32 rmid) { @@ -302,6 +303,7 @@ bool resctrl_arch_match_iommu_closid_rmid(struct iommu_group *group, return (partid == closid) && (rmid == pmg); } +#endif struct rdt_resource *resctrl_arch_get_resource(enum resctrl_res_level l) { -- 2.25.1

1 0

[openeuler:OLK-6.6 3214/3214] block/blk-ioinf.c:233:6: warning: no previous prototype for 'ioinf_done'
by kernel test robot 18 Nov '25

18 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 09c1ca7bc68f566c176a3647d87ed91e455d90f3 commit: a63e78514d119d4ee6525e1cc3a0aca4a2b29cbd [3214/3214] blk-ioinf: introduce inflight-based IO QoS controller config: x86_64-randconfig-r111-20251118 (https://download.01.org/0day-ci/archive/20251118/202511182153.2rP8BCJI-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251118/202511182153.2rP8BCJI-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511182153.2rP8BCJI-lkp@intel.com/ All warnings (new ones prefixed by >>): >> block/blk-ioinf.c:233:6: warning: no previous prototype for 'ioinf_done' [-Wmissing-prototypes] 233 | void ioinf_done(struct ioinf *inf, struct ioinf_rq_wait *rqw) | ^~~~~~~~~~ >> block/blk-ioinf.c:461:5: warning: no previous prototype for 'ioinf_calc_budget' [-Wmissing-prototypes] 461 | u32 ioinf_calc_budget(struct ioinf_rq_wait *rqw) | ^~~~~~~~~~~~~~~~~ Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for PGP_PRELOAD Depends on [n]: CRYPTO [=y] && ASYMMETRIC_KEY_TYPE [=n] Selected by [y]: - PGP_PRELOAD_PUBLIC_KEYS [=y] && CRYPTO [=y] vim +/ioinf_done +233 block/blk-ioinf.c 232 > 233 void ioinf_done(struct ioinf *inf, struct ioinf_rq_wait *rqw) 234 { 235 int inflight; 236 237 if (!inf->params.enabled) 238 return; 239 240 inflight = atomic_dec_return(&rqw->inflight); 241 if (inflight >= (int)rqw->hinflight) 242 return; 243 244 if (!READ_ONCE(inf->waking) && atomic_read(&rqw->sleepers)) { 245 WRITE_ONCE(inf->waking, true); 246 hrtimer_start(&inf->wakeup_timer, 0, HRTIMER_MODE_REL); 247 } 248 } 249 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3214/3214] net/ipv4/tcp_input.c:7198:25: error: 'struct tcp_options_received' has no member named 'ums_ok'; did you mean 'smc_ok'?
by kernel test robot 18 Nov '25

18 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 72220f090cf216491c25f4fe87c974ea97eb4e19 commit: 62eb2012d814e530839ba9ccf4146712701f486a [3214/3214] net: Add a new protocol family AF_UB config: x86_64-randconfig-r111-20251118 (https://download.01.org/0day-ci/archive/20251118/202511181912.iiOiNVW1-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251118/202511181912.iiOiNVW1-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511181912.iiOiNVW1-lkp@intel.com/ All errors (new ones prefixed by >>): net/ipv4/tcp_input.c: In function 'tcp_conn_request': >> net/ipv4/tcp_input.c:7198:25: error: 'struct tcp_options_received' has no member named 'ums_ok'; did you mean 'smc_ok'? 7198 | tmp_opt.ums_ok = 0; | ^~~~~~ | smc_ok Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for PGP_PRELOAD Depends on [n]: CRYPTO [=y] && ASYMMETRIC_KEY_TYPE [=n] Selected by [y]: - PGP_PRELOAD_PUBLIC_KEYS [=y] && CRYPTO [=y] vim +7198 net/ipv4/tcp_input.c 7184 7185 tcp_clear_options(&tmp_opt); 7186 tmp_opt.mss_clamp = af_ops->mss_clamp; 7187 tmp_opt.user_mss = tp->rx_opt.user_mss; 7188 tcp_parse_options(sock_net(sk), skb, &tmp_opt, 0, 7189 want_cookie ? NULL : &foc); 7190 7191 if (want_cookie && !tmp_opt.saw_tstamp) 7192 tcp_clear_options(&tmp_opt); 7193 7194 if (IS_ENABLED(CONFIG_SMC) && want_cookie) 7195 tmp_opt.smc_ok = 0; 7196 7197 if (IS_ENABLED(CONFIG_UB_UMS) && want_cookie) > 7198 tmp_opt.ums_ok = 0; -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6] EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
by Luo Gengkun 18 Nov '25

18 Nov '25

From: Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> stable inclusion from stable-v6.6.112 commit 8100b6c0f9089d5b156642b81270ce27fff17490 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6B9J CVE: CVE-2025-40157 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… ---------------------------------------------------------------------- [ Upstream commit 2e6fe1bbefd9c059c3787d1c620fe67343a94dff ] When loading the i10nm_edac driver on some Intel Granite Rapids servers, a call trace may appear as follows: UBSAN: shift-out-of-bounds in drivers/edac/skx_common.c:453:16 shift exponent -66 is negative ... __ubsan_handle_shift_out_of_bounds+0x1e3/0x390 skx_get_dimm_info.cold+0x47/0xd40 [skx_edac_common] i10nm_get_dimm_config+0x23e/0x390 [i10nm_edac] skx_register_mci+0x159/0x220 [skx_edac_common] i10nm_init+0xcb0/0x1ff0 [i10nm_edac] ... This occurs because some BIOS may disable a memory controller if there aren't any memory DIMMs populated on this memory controller. The DIMMMTR register of this disabled memory controller contains the invalid value ~0, resulting in the call trace above. Fix this call trace by skipping DIMM enumeration on a disabled memory controller. Fixes: ba987eaaabf9 ("EDAC/i10nm: Add Intel Granite Rapids server support") Reported-by: Jose Jesus Ambriz Meza <jose.jesus.ambriz.meza(a)intel.com> Reported-by: Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> Closes: https://lore.kernel.org/all/20250730063155.2612379-1-acelan.kao@canonical.c… Signed-off-by: Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> Signed-off-by: Tony Luck <tony.luck(a)intel.com> Tested-by: Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> Link: https://lore.kernel.org/r/20250806065707.3533345-1-qiuxu.zhuo@intel.com Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Luo Gengkun <luogengkun2(a)huawei.com> --- drivers/edac/i10nm_base.c | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/drivers/edac/i10nm_base.c b/drivers/edac/i10nm_base.c index 1f06183d1399..80527845dc5f 100644 --- a/drivers/edac/i10nm_base.c +++ b/drivers/edac/i10nm_base.c @@ -1056,6 +1056,15 @@ static bool i10nm_check_ecc(struct skx_imc *imc, int chan) return !!GET_BITFIELD(mcmtr, 2, 2); } +static bool i10nm_channel_disabled(struct skx_imc *imc, int chan) +{ + u32 mcmtr = I10NM_GET_MCMTR(imc, chan); + + edac_dbg(1, "mc%d ch%d mcmtr reg %x\n", imc->mc, chan, mcmtr); + + return (mcmtr == ~0 || GET_BITFIELD(mcmtr, 18, 18)); +} + static int i10nm_get_dimm_config(struct mem_ctl_info *mci, struct res_config *cfg) { @@ -1069,6 +1078,11 @@ static int i10nm_get_dimm_config(struct mem_ctl_info *mci, if (!imc->mbase) continue; + if (i10nm_channel_disabled(imc, i)) { + edac_dbg(1, "mc%d ch%d is disabled.\n", imc->mc, i); + continue; + } + ndimms = 0; if (res_cfg->type != GNR) -- 2.34.1

2 1

[PATCH OLK-5.10] EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
by Luo Gengkun 18 Nov '25

18 Nov '25

From: Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> mainline inclusion from mainline-v6.18-rc1 commit 2e6fe1bbefd9c059c3787d1c620fe67343a94dff category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6B9J CVE: CVE-2025-40157 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… ---------------------------------------------------------------------- When loading the i10nm_edac driver on some Intel Granite Rapids servers, a call trace may appear as follows: UBSAN: shift-out-of-bounds in drivers/edac/skx_common.c:453:16 shift exponent -66 is negative ... __ubsan_handle_shift_out_of_bounds+0x1e3/0x390 skx_get_dimm_info.cold+0x47/0xd40 [skx_edac_common] i10nm_get_dimm_config+0x23e/0x390 [i10nm_edac] skx_register_mci+0x159/0x220 [skx_edac_common] i10nm_init+0xcb0/0x1ff0 [i10nm_edac] ... This occurs because some BIOS may disable a memory controller if there aren't any memory DIMMs populated on this memory controller. The DIMMMTR register of this disabled memory controller contains the invalid value ~0, resulting in the call trace above. Fix this call trace by skipping DIMM enumeration on a disabled memory controller. Fixes: ba987eaaabf9 ("EDAC/i10nm: Add Intel Granite Rapids server support") Reported-by: Jose Jesus Ambriz Meza <jose.jesus.ambriz.meza(a)intel.com> Reported-by: Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> Closes: https://lore.kernel.org/all/20250730063155.2612379-1-acelan.kao@canonical.c… Signed-off-by: Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> Signed-off-by: Tony Luck <tony.luck(a)intel.com> Tested-by: Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> Link: https://lore.kernel.org/r/20250806065707.3533345-1-qiuxu.zhuo@intel.com Signed-off-by: Luo Gengkun <luogengkun2(a)huawei.com> --- drivers/edac/i10nm_base.c | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/drivers/edac/i10nm_base.c b/drivers/edac/i10nm_base.c index 75262ee01167..a7a30a7ab038 100644 --- a/drivers/edac/i10nm_base.c +++ b/drivers/edac/i10nm_base.c @@ -1062,6 +1062,15 @@ static bool i10nm_check_ecc(struct skx_imc *imc, int chan) return !!GET_BITFIELD(mcmtr, 2, 2); } +static bool i10nm_channel_disabled(struct skx_imc *imc, int chan) +{ + u32 mcmtr = I10NM_GET_MCMTR(imc, chan); + + edac_dbg(1, "mc%d ch%d mcmtr reg %x\n", imc->mc, chan, mcmtr); + + return (mcmtr == ~0 || GET_BITFIELD(mcmtr, 18, 18)); +} + static int i10nm_get_dimm_config(struct mem_ctl_info *mci, struct res_config *cfg) { @@ -1075,6 +1084,11 @@ static int i10nm_get_dimm_config(struct mem_ctl_info *mci, if (!imc->mbase) continue; + if (i10nm_channel_disabled(imc, i)) { + edac_dbg(1, "mc%d ch%d is disabled.\n", imc->mc, i); + continue; + } + ndimms = 0; if (res_cfg->type != GNR) -- 2.34.1

2 1

[PATCH OLK-6.6] arm64/mpam: Add build dependencies for CONFIG_RESCTRL_IOMMU
by Zeng Heng 18 Nov '25

18 Nov '25

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/ID65P3 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/morse/linux.git/commit/?h=m… -------------------------------- On the ARM64 architecture, the CONFIG_RESCTRL_IOMMU actually depends on the CONFIG_ARM_SMMU_V3, which allows to bind SMMU iommu_groups with resctrl groups. Therefore, add this build dependency in Kconfig. Additionally, to avoid compilation errors due to re-definitions in the include/linux/resctrl.h header file when the CONFIG_RESCTRL_IOMMU is disabled, add the build switch for resctrl_arch_*_iommu_closid_rmid(). Fixes: 7e3f95a1a861 ("fs/resctrl: Add support for assigning iommu_groups to resctrl groups") Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/platform/mpam/Kconfig | 2 +- drivers/platform/mpam/mpam_resctrl.c | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/drivers/platform/mpam/Kconfig b/drivers/platform/mpam/Kconfig index a6e937b8f91d..96dd7c091a9f 100644 --- a/drivers/platform/mpam/Kconfig +++ b/drivers/platform/mpam/Kconfig @@ -6,4 +6,4 @@ config ARM_CPU_RESCTRL depends on ARM64 && ARCH_HAS_CPU_RESCTRL depends on MISC_FILESYSTEMS select RESCTRL_RMID_DEPENDS_ON_CLOSID - select RESCTRL_IOMMU + select RESCTRL_IOMMU if ARM_SMMU_V3 diff --git a/drivers/platform/mpam/mpam_resctrl.c b/drivers/platform/mpam/mpam_resctrl.c index 2d3a1827a48c..7c386ce7b80f 100644 --- a/drivers/platform/mpam/mpam_resctrl.c +++ b/drivers/platform/mpam/mpam_resctrl.c @@ -260,6 +260,7 @@ bool resctrl_arch_match_rmid(struct task_struct *tsk, u32 closid, u32 rmid) return (tsk_closid == closid) && (tsk_rmid == rmid); } +#ifdef CONFIG_RESCTRL_IOMMU int resctrl_arch_set_iommu_closid_rmid(struct iommu_group *group, u32 closid, u32 rmid) { @@ -302,6 +303,7 @@ bool resctrl_arch_match_iommu_closid_rmid(struct iommu_group *group, return (partid == closid) && (rmid == pmg); } +#endif struct rdt_resource *resctrl_arch_get_resource(enum resctrl_res_level l) { -- 2.25.1

2 1

[PATCH OLK-6.6 v6 00/48] fuse:io_uring: support fuse over io_uring
by Long Li 18 Nov '25

18 Nov '25

v1 -> v2: Fix some build error for io_uring patchs. v2 -> v3: Modify kabi fixed patchs format v3 -> v4: Enable CONFIG_FUSE_IO_URING v4 -> v5: Fix patch commit message format v5 -> v6: Fix separate bg req in fuse iouring Bernd Schubert (19): fuse: rename to fuse_dev_end_requests and make non-static fuse: Move fuse_get_dev to header file fuse: Move request bits fuse: Add fuse-io-uring design documentation fuse: make args->in_args[0] to be always the header fuse: {io-uring} Handle SQEs - register commands fuse: Make fuse_copy non static fuse: Add fuse-io-uring handling into fuse_copy fuse: {io-uring} Make hash-list req unique finding functions non-static fuse: Add io-uring sqe commit and fetch support fuse: {io-uring} Handle teardown of ring entries fuse: {io-uring} Make fuse_dev_queue_{interrupt,forget} non-static fuse: Allow to queue fg requests through io-uring fuse: Allow to queue bg requests through io-uring fuse: {io-uring} Prevent mount point hang on fuse-server termination fuse: block request allocation until io-uring init is complete fuse: enable fuse-over-io-uring fuse: prevent disabling io-uring on active connections fuse: {io-uring} Fix a possible req cancellation race Jens Axboe (1): io_uring: remove dead struct io_submit_state member Joanne Koong (2): fuse: fix uring race condition for null dereference of fc fuse: remove unneeded atomic set in uring creation Long Li (5): io_uring: fix kabi broken in struct io_tw_state io_uring: fix kabi broken in struct io_ring_ctx io_uring: fix kabi broken in struct io_submit_state io_uring: fix kabi broken for header file changed openeuler_defconfig: enable CONFIG_FUSE_IO_URING by default Luis Henriques (2): fuse: fix possible deadlock if rings are never initialized fuse: removed unused function fuse_uring_create() from header Ming Lei (3): io_uring: retain top 8bits of uring_cmd flags for kernel internal use io_uring: cancelable uring_cmd io_uring: kill dead code in io_req_complete_post Pavel Begunkov (16): io_uring: split out cmd api into a separate header io_uring/cmd: inline io_uring_cmd_do_in_task_lazy io_uring/cmd: expose iowq to cmds io_uring/cmd: give inline space in request to cmds io_uring/cmd: move io_uring_try_cancel_uring_cmd() io_uring/cmd: kill one issue_flags to tw conversion io_uring/cmd: fix tw <-> issue_flags conversion io_uring/cmd: document some uring_cmd related helpers io_uring: force tw ctx locking io_uring: remove struct io_tw_state::locked io_uring: refactor io_fill_cqe_req_aux io_uring: get rid of intermediate aux cqe caches io_uring: remove current check from complete_post io_uring: refactor io_req_complete_post() io_uring: clean up io_lockdep_assert_cq_locked io_uring/cmd: let cmds to know about dying task Documentation/filesystems/fuse-io-uring.rst | 99 ++ Documentation/filesystems/index.rst | 1 + MAINTAINERS | 1 + arch/arm64/configs/openeuler_defconfig | 1 + arch/x86/configs/openeuler_defconfig | 1 + drivers/block/ublk_drv.c | 2 +- drivers/nvme/host/ioctl.c | 2 +- fs/fuse/Kconfig | 12 + fs/fuse/Makefile | 1 + fs/fuse/dax.c | 11 +- fs/fuse/dev.c | 165 ++- fs/fuse/dev_uring.c | 1326 +++++++++++++++++++ fs/fuse/dev_uring_i.h | 205 +++ fs/fuse/dir.c | 32 +- fs/fuse/fuse_dev_i.h | 69 + fs/fuse/fuse_i.h | 35 +- fs/fuse/inode.c | 14 +- fs/fuse/xattr.c | 7 +- include/linux/io_uring.h | 73 +- include/linux/io_uring/cmd.h | 140 ++ include/linux/io_uring_types.h | 7 +- include/uapi/linux/fuse.h | 77 +- include/uapi/linux/io_uring.h | 5 +- io_uring/io_uring.c | 212 +-- io_uring/io_uring.h | 34 +- io_uring/net.c | 6 +- io_uring/poll.c | 3 +- io_uring/refs.h | 7 + io_uring/rw.c | 8 +- io_uring/timeout.c | 8 +- io_uring/uring_cmd.c | 114 +- io_uring/uring_cmd.h | 3 + security/selinux/hooks.c | 2 +- security/smack/smack_lsm.c | 2 +- 34 files changed, 2308 insertions(+), 377 deletions(-) create mode 100644 Documentation/filesystems/fuse-io-uring.rst create mode 100644 fs/fuse/dev_uring.c create mode 100644 fs/fuse/dev_uring_i.h create mode 100644 fs/fuse/fuse_dev_i.h create mode 100644 include/linux/io_uring/cmd.h -- 2.39.2

2 49

[PATCH OLK-6.6] cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
by Xinyu Zheng 18 Nov '25

18 Nov '25

From: "Rafael J. Wysocki" <rafael.j.wysocki(a)intel.com> stable inclusion from stable-v6.6.113 commit 69a18ff6c60e8e113420f15355fad862cb45d38e category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6BVZ CVE: CVE-2025-40194 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 69e5d50fcf4093fb3f9f41c4f931f12c2ca8c467 upstream. The cpufreq_cpu_put() call in update_qos_request() takes place too early because the latter subsequently calls freq_qos_update_request() that indirectly accesses the policy object in question through the QoS request object passed to it. Fortunately, update_qos_request() is called under intel_pstate_driver_lock, so this issue does not matter for changing the intel_pstate operation mode, but it theoretically can cause a crash to occur on CPU device hot removal (which currently can only happen in virt, but it is formally supported nevertheless). Address this issue by modifying update_qos_request() to drop the reference to the policy later. Fixes: da5c504c7aae ("cpufreq: intel_pstate: Implement QoS supported freq constraints") Cc: 5.4+ <stable(a)vger.kernel.org> # 5.4+ Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> Reviewed-by: Zihuan Zhang <zhangzihuan(a)kylinos.cn> Link: https://patch.msgid.link/2255671.irdbgypaU6@rafael.j.wysocki Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Xinyu Zheng <zhengxinyu6(a)huawei.com> --- drivers/cpufreq/intel_pstate.c | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/drivers/cpufreq/intel_pstate.c b/drivers/cpufreq/intel_pstate.c index 51e7d2ea8294..0908e3ed17b3 100644 --- a/drivers/cpufreq/intel_pstate.c +++ b/drivers/cpufreq/intel_pstate.c @@ -1354,10 +1354,10 @@ static void update_qos_request(enum freq_qos_req_type type) continue; req = policy->driver_data; - cpufreq_cpu_put(policy); - - if (!req) + if (!req) { + cpufreq_cpu_put(policy); continue; + } if (hwp_active) intel_pstate_get_hwp_cap(cpu); @@ -1373,6 +1373,8 @@ static void update_qos_request(enum freq_qos_req_type type) if (freq_qos_update_request(req, freq) < 0) pr_warn("Failed to update freq constraint: CPU%d\n", i); + + cpufreq_cpu_put(policy); } } -- 2.34.1

2 1

[openeuler:OLK-6.6 3214/3214] mm/gmem_phys.c:245:19: sparse: sparse: symbol 'gm_evict_page_locked' was not declared. Should it be static?
by kernel test robot 18 Nov '25

18 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: c1201208f61f497ac8e2b9826e822e261af1d334 commit: 8f4f66a9d851f366942e8ee319292e41ad2baa95 [3214/3214] gmem: support swapping heterogeneous memory config: x86_64-randconfig-r111-20251118 (https://download.01.org/0day-ci/archive/20251118/202511181354.QrCo9qqP-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251118/202511181354.QrCo9qqP-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511181354.QrCo9qqP-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) mm/gmem_phys.c:21:1: sparse: sparse: symbol 'hnode_lock' was not declared. Should it be static? >> mm/gmem_phys.c:245:19: sparse: sparse: symbol 'gm_evict_page_locked' was not declared. Should it be static? >> mm/gmem_phys.c:345:19: sparse: sparse: symbol 'gm_evict_page' was not declared. Should it be static? vim +/gm_evict_page_locked +245 mm/gmem_phys.c 244 > 245 enum gm_evict_ret gm_evict_page_locked(struct gm_page *gm_page) 246 { 247 struct gm_dev *gm_dev; 248 struct gm_mapping *gm_mapping; 249 struct vm_area_struct *vma; 250 struct mm_struct *mm; 251 struct page *page; 252 struct device *dma_dev; 253 unsigned long va; 254 struct folio *folio = NULL; 255 struct gm_fault_t gmf = { 256 .size = HPAGE_SIZE, 257 .copy = true 258 }; 259 enum gm_evict_ret ret = GM_EVICT_SUCCESS; 260 enum gm_ret gm_ret; 261 262 gm_dev = get_gm_dev(gm_page->hnid); 263 if (!gm_dev) 264 return GM_EVICT_DEVERR; 265 266 spin_lock(&gm_page->rmap_lock); 267 if (!gm_page->mm) { 268 /* Evicting gm_page conflicts with unmap.*/ 269 ret = GM_EVICT_UNMAP; 270 goto rmap_unlock; 271 } 272 273 mm = gm_page->mm; 274 va = gm_page->va; 275 vma = find_vma(mm, va); 276 if (!vma || !vma->vm_obj) { 277 gmem_err("%s: cannot find vma or vma->vm_obj is null for va %lx", __func__, va); 278 ret = GM_EVICT_UNMAP; 279 goto rmap_unlock; 280 } 281 282 gm_mapping = vm_object_lookup(vma->vm_obj, va); 283 if (!gm_mapping) { 284 gmem_err("%s: no gm_mapping for va %lx", __func__, va); 285 ret = GM_EVICT_UNMAP; 286 goto rmap_unlock; 287 } 288 289 spin_unlock(&gm_page->rmap_lock); 290 291 mutex_lock(&gm_mapping->lock); 292 if (!gm_mapping_device(gm_mapping)) { 293 /* Evicting gm_page conflicts with unmap.*/ 294 ret = GM_EVICT_UNMAP; 295 goto gm_mapping_unlock; 296 } 297 298 if (gm_mapping->gm_page != gm_page) { 299 /* gm_mapping maps to another gm_page. */ 300 ret = GM_EVICT_UNMAP; 301 goto gm_mapping_unlock; 302 } 303 304 folio = vma_alloc_folio(GFP_TRANSHUGE, HPAGE_PMD_ORDER, vma, va, true); 305 if (!folio) { 306 gmem_err("%s: allocate host page failed.", __func__); 307 ret = GM_EVICT_FALLBACK; 308 goto gm_mapping_unlock; 309 } 310 page = &folio->page; 311 312 gmf.mm = mm; 313 gmf.va = va; 314 gmf.dev = gm_dev; 315 gmf.pfn = gm_page->dev_pfn; 316 dma_dev = gm_dev->dma_dev; 317 gmf.dma_addr = dma_map_page(dma_dev, page, 0, HPAGE_SIZE, DMA_BIDIRECTIONAL); 318 if (dma_mapping_error(dma_dev, gmf.dma_addr)) { 319 gmem_err("%s: dma map failed.", __func__); 320 ret = GM_EVICT_FALLBACK; 321 goto gm_mapping_unlock; 322 } 323 324 gm_ret = gm_dev->mmu->peer_unmap(&gmf); 325 if (gm_ret != GM_RET_SUCCESS) { 326 gmem_err("%s: peer_unmap failed.", __func__); 327 ret = GM_EVICT_DEVERR; 328 goto dma_unmap; 329 } 330 331 gm_mapping_flags_set(gm_mapping, GM_MAPPING_CPU); 332 gm_page_remove_rmap(gm_page); 333 gm_mapping->page = page; 334 put_gm_page(gm_page); 335 dma_unmap: 336 dma_unmap_page(dma_dev, gmf.dma_addr, HPAGE_SIZE, DMA_BIDIRECTIONAL); 337 gm_mapping_unlock: 338 mutex_unlock(&gm_mapping->lock); 339 return ret; 340 rmap_unlock: 341 spin_unlock(&gm_page->rmap_lock); 342 return ret; 343 } 344 > 345 enum gm_evict_ret gm_evict_page(struct gm_page *gm_page) 346 { 347 struct mm_struct *mm = gm_page->mm; 348 enum gm_evict_ret ret; 349 350 mmap_read_lock(mm); 351 ret = gm_evict_page_locked(gm_page); 352 mmap_read_unlock(mm); 353 return ret; 354 } 355 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3214/3214] drivers/base/arch_numa.c:194:12: sparse: sparse: symbol 'node_reclaim_distance_setup' was not declared. Should it be static?
by kernel test robot 18 Nov '25

18 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 4bd802eb810aced0425a9fbdedbf306c0c1e0fda commit: 5e5d40e65cb55e4699c9879674a004f246606a8d [3214/3214] arch_numa: Make node reclaim distance adjustment always available config: arm64-randconfig-r121-20251118 (https://download.01.org/0day-ci/archive/20251118/202511181224.q1NCFdeb-lkp@…) compiler: clang version 22.0.0git (https://github.com/llvm/llvm-project 0bba1e76581bad04e7d7f09f5115ae5e2989e0d9) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251118/202511181224.q1NCFdeb-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511181224.q1NCFdeb-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) >> drivers/base/arch_numa.c:194:12: sparse: sparse: symbol 'node_reclaim_distance_setup' was not declared. Should it be static? vim +/node_reclaim_distance_setup +194 drivers/base/arch_numa.c 192 193 #define DISTANCE_MAX (1 << DISTANCE_BITS) > 194 int __init node_reclaim_distance_setup(char *str) 195 { 196 int val; 197 198 if (kstrtoint(str, 0, &val)) 199 return -EINVAL; 200 201 if (val < LOCAL_DISTANCE || val >= DISTANCE_MAX) 202 return -EINVAL; 203 204 if (val != RECLAIM_DISTANCE) { 205 node_reclaim_distance = val; 206 pr_info("Force set node_reclaim_distance to %d\n", val); 207 } 208 209 return 0; 210 } 211 early_param("node_reclaim_distance", node_reclaim_distance_setup); 212 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3214/3214] mm/gmem_phys.c:18:1: sparse: sparse: symbol 'hnode_lock' was not declared. Should it be static?
by kernel test robot 18 Nov '25

18 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 4bd802eb810aced0425a9fbdedbf306c0c1e0fda commit: ef19106bc1b493f2eb9d312de86f3cc0896b218a [3214/3214] gmem: introduce hnode for free peer-shared free page management config: x86_64-randconfig-r111-20251118 (https://download.01.org/0day-ci/archive/20251118/202511181114.4QpjxRoN-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251118/202511181114.4QpjxRoN-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511181114.4QpjxRoN-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) >> mm/gmem_phys.c:18:1: sparse: sparse: symbol 'hnode_lock' was not declared. Should it be static? vim +/hnode_lock +18 mm/gmem_phys.c 16 17 > 18 DEFINE_SPINLOCK(hnode_lock); 19 static nodemask_t hnode_map; 20 struct hnode *hnodes[MAX_NUMNODES]; 21 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3214/3214] drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:779:20: error: incomplete definition of type 'struct acpi_device'
by kernel test robot 18 Nov '25

18 Nov '25

Hi LeoLiu-oc, First bad commit (maybe != root cause): tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 17cadcdf512f891675c3c9df62bcf05511293ae9 commit: 5d01c9ec4f3b95b0629a38d936f69bc05e494cc9 [3214/3214] pinctrl: Zhaoxin: Add KH-50000 support config: x86_64-buildonly-randconfig-004-20251118 (https://download.01.org/0day-ci/archive/20251118/202511180448.bJpcAwU9-lkp@…) compiler: clang version 20.1.8 (https://github.com/llvm/llvm-project 87f0227cb60147a26a1eeb4fb06e3b505e9c7261) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251118/202511180448.bJpcAwU9-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511180448.bJpcAwU9-lkp@intel.com/ All errors (new ones prefixed by >>): drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:123:6: warning: variable 'value_back' set but not used [-Wunused-but-set-variable] 123 | u16 value_back = 0; | ^ drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:249:6: warning: variable 'pin' set but not used [-Wunused-but-set-variable] 249 | int pin; | ^ drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:270:6: warning: variable 'pin' set but not used [-Wunused-but-set-variable] 270 | int pin; | ^ drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:330:6: warning: variable 'base_offset' set but not used [-Wunused-but-set-variable] 330 | int base_offset = 0; | ^ drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:363:6: warning: variable 'base_offset' set but not used [-Wunused-but-set-variable] 363 | int base_offset = 0; | ^ drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:487:6: warning: variable 'test_mask' set but not used [-Wunused-but-set-variable] 487 | u16 test_mask; | ^ >> drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:779:20: error: incomplete definition of type 'struct acpi_device' 779 | if (!strcmp(adev->pnp.unique_id, table[i]->uid)) { | ~~~~^ include/linux/compiler.h:55:47: note: expanded from macro 'if' 55 | #define if(cond, ...) if ( __trace_if_var( !!(cond , ## __VA_ARGS__) ) ) | ^~~~ include/linux/compiler.h:57:52: note: expanded from macro '__trace_if_var' 57 | #define __trace_if_var(cond) (__builtin_constant_p(cond) ? (cond) : __trace_if_value(cond)) | ^~~~ include/linux/acpi.h:798:8: note: forward declaration of 'struct acpi_device' 798 | struct acpi_device; | ^ >> drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:779:20: error: incomplete definition of type 'struct acpi_device' 779 | if (!strcmp(adev->pnp.unique_id, table[i]->uid)) { | ~~~~^ include/linux/compiler.h:55:47: note: expanded from macro 'if' 55 | #define if(cond, ...) if ( __trace_if_var( !!(cond , ## __VA_ARGS__) ) ) | ^~~~ include/linux/compiler.h:57:61: note: expanded from macro '__trace_if_var' 57 | #define __trace_if_var(cond) (__builtin_constant_p(cond) ? (cond) : __trace_if_value(cond)) | ^~~~ include/linux/acpi.h:798:8: note: forward declaration of 'struct acpi_device' 798 | struct acpi_device; | ^ >> drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:779:20: error: incomplete definition of type 'struct acpi_device' 779 | if (!strcmp(adev->pnp.unique_id, table[i]->uid)) { | ~~~~^ include/linux/compiler.h:55:47: note: expanded from macro 'if' 55 | #define if(cond, ...) if ( __trace_if_var( !!(cond , ## __VA_ARGS__) ) ) | ^~~~ include/linux/compiler.h:57:86: note: expanded from macro '__trace_if_var' 57 | #define __trace_if_var(cond) (__builtin_constant_p(cond) ? (cond) : __trace_if_value(cond)) | ^~~~ include/linux/compiler.h:68:3: note: expanded from macro '__trace_if_value' 68 | (cond) ? \ | ^~~~ include/linux/acpi.h:798:8: note: forward declaration of 'struct acpi_device' 798 | struct acpi_device; | ^ 6 warnings and 3 errors generated. vim +779 drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c 996e18349e58a3 leoliu-oc 2024-02-04 765 996e18349e58a3 leoliu-oc 2024-02-04 766 const struct zhaoxin_pinctrl_soc_data *zhaoxin_pinctrl_get_soc_data(struct platform_device *pdev) 996e18349e58a3 leoliu-oc 2024-02-04 767 { 996e18349e58a3 leoliu-oc 2024-02-04 768 const struct zhaoxin_pinctrl_soc_data *data = NULL; 996e18349e58a3 leoliu-oc 2024-02-04 769 const struct zhaoxin_pinctrl_soc_data **table; 996e18349e58a3 leoliu-oc 2024-02-04 770 struct acpi_device *adev; 996e18349e58a3 leoliu-oc 2024-02-04 771 unsigned int i; 996e18349e58a3 leoliu-oc 2024-02-04 772 996e18349e58a3 leoliu-oc 2024-02-04 773 adev = ACPI_COMPANION(&pdev->dev); 996e18349e58a3 leoliu-oc 2024-02-04 774 if (adev) { 996e18349e58a3 leoliu-oc 2024-02-04 775 const void *match = device_get_match_data(&pdev->dev); 996e18349e58a3 leoliu-oc 2024-02-04 776 996e18349e58a3 leoliu-oc 2024-02-04 777 table = (const struct zhaoxin_pinctrl_soc_data **)match; 996e18349e58a3 leoliu-oc 2024-02-04 778 for (i = 0; table[i]; i++) { 996e18349e58a3 leoliu-oc 2024-02-04 @779 if (!strcmp(adev->pnp.unique_id, table[i]->uid)) { 996e18349e58a3 leoliu-oc 2024-02-04 780 data = table[i]; 996e18349e58a3 leoliu-oc 2024-02-04 781 break; 996e18349e58a3 leoliu-oc 2024-02-04 782 } 996e18349e58a3 leoliu-oc 2024-02-04 783 } 996e18349e58a3 leoliu-oc 2024-02-04 784 } else { 996e18349e58a3 leoliu-oc 2024-02-04 785 const struct platform_device_id *id; 996e18349e58a3 leoliu-oc 2024-02-04 786 996e18349e58a3 leoliu-oc 2024-02-04 787 id = platform_get_device_id(pdev); 996e18349e58a3 leoliu-oc 2024-02-04 788 if (!id) 996e18349e58a3 leoliu-oc 2024-02-04 789 return ERR_PTR(-ENODEV); 996e18349e58a3 leoliu-oc 2024-02-04 790 996e18349e58a3 leoliu-oc 2024-02-04 791 table = (const struct zhaoxin_pinctrl_soc_data **)id->driver_data; 996e18349e58a3 leoliu-oc 2024-02-04 792 data = table[pdev->id]; 996e18349e58a3 leoliu-oc 2024-02-04 793 } 996e18349e58a3 leoliu-oc 2024-02-04 794 996e18349e58a3 leoliu-oc 2024-02-04 795 return data ?: ERR_PTR(-ENODATA); 996e18349e58a3 leoliu-oc 2024-02-04 796 } 996e18349e58a3 leoliu-oc 2024-02-04 797 EXPORT_SYMBOL_GPL(zhaoxin_pinctrl_get_soc_data); 996e18349e58a3 leoliu-oc 2024-02-04 798 :::::: The code at line 779 was first introduced by commit :::::: 996e18349e58a3ace519f9c0f32f4e62fc46ec2c Add support Zhaoxin GPIO pinctrl :::::: TO: leoliu-oc <leoliu-oc(a)zhaoxin.com> :::::: CC: leoliu-oc <leoliu-oc(a)zhaoxin.com> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3214/3214] drivers/crypto/ccp/hygon/ccp-mdev.c:895:17: error: no member named 'numa_node' in 'struct device'
by kernel test robot 18 Nov '25

18 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 17cadcdf512f891675c3c9df62bcf05511293ae9 commit: 592817a30ddc0ef43c7f5b5fe906ae37cf3bea3b [3214/3214] crypto: ccp: add ccp-mdev functionality to the ccp module. config: x86_64-buildonly-randconfig-005-20251118 (https://download.01.org/0day-ci/archive/20251118/202511180451.SpjYxpJv-lkp@…) compiler: clang version 20.1.8 (https://github.com/llvm/llvm-project 87f0227cb60147a26a1eeb4fb06e3b505e9c7261) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251118/202511180451.SpjYxpJv-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511180451.SpjYxpJv-lkp@intel.com/ All errors (new ones prefixed by >>): >> drivers/crypto/ccp/hygon/ccp-mdev.c:895:17: error: no member named 'numa_node' in 'struct device' 895 | if (pdev->dev.numa_node >= 0) | ~~~~~~~~~ ^ drivers/crypto/ccp/hygon/ccp-mdev.c:896:31: error: no member named 'numa_node' in 'struct device' 896 | addr.numa_node = pdev->dev.numa_node; | ~~~~~~~~~ ^ drivers/crypto/ccp/hygon/ccp-mdev.c:1144:15: warning: no previous prototype for function 'ccp_pin_memory' [-Wmissing-prototypes] 1144 | struct page **ccp_pin_memory(struct ccp_private *private, unsigned long uaddr, | ^ drivers/crypto/ccp/hygon/ccp-mdev.c:1144:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 1144 | struct page **ccp_pin_memory(struct ccp_private *private, unsigned long uaddr, | ^ | static drivers/crypto/ccp/hygon/ccp-mdev.c:1542:54: error: no member named 'numa_node' in 'struct device' 1542 | numa_node = ccp_mdev_data.iommu[page_idx].pdev->dev.numa_node; | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ^ 1 warning and 3 errors generated. vim +895 drivers/crypto/ccp/hygon/ccp-mdev.c 720 721 static long ccp_ioctl(struct file *file, unsigned int cmd, unsigned long arg) 722 { 723 struct mdev_state *mdev_state = file->private_data; 724 unsigned long minsz; 725 int ret = 0; 726 727 switch (cmd) { 728 case VFIO_DEVICE_GET_INFO: 729 { 730 struct vfio_device_info info; 731 732 minsz = offsetofend(struct vfio_device_info, num_irqs); 733 734 if (copy_from_user(&info, (void __user *)arg, minsz)) 735 return -EFAULT; 736 737 if (info.argsz < minsz) 738 return -EINVAL; 739 740 ret = ccp_get_device_info(mdev_state, &info); 741 if (ret) 742 return ret; 743 744 memcpy(&mdev_state->dev_info, &info, sizeof(info)); 745 746 if (copy_to_user((void __user *)arg, &info, minsz)) 747 return -EFAULT; 748 749 return 0; 750 } 751 case VFIO_DEVICE_GET_REGION_INFO: 752 { 753 struct vfio_region_info info; 754 u16 cap_type_id = 0; 755 void *cap_type = NULL; 756 757 minsz = offsetofend(struct vfio_region_info, offset); 758 759 if (copy_from_user(&info, (void __user *)arg, minsz)) 760 return -EFAULT; 761 762 if (info.argsz < minsz) 763 return -EINVAL; 764 765 ret = ccp_get_region_info(mdev_state, &info, &cap_type_id, 766 &cap_type); 767 if (ret) 768 return ret; 769 770 if (copy_to_user((void __user *)arg, &info, minsz)) 771 return -EFAULT; 772 773 return 0; 774 } 775 case VFIO_DEVICE_GET_IRQ_INFO: 776 { 777 struct vfio_irq_info info; 778 779 minsz = offsetofend(struct vfio_irq_info, count); 780 781 if (copy_from_user(&info, (void __user *)arg, minsz)) 782 return -EFAULT; 783 784 if ((info.argsz < minsz) || 785 (info.index >= mdev_state->dev_info.num_irqs)) 786 return -EINVAL; 787 788 ret = ccp_get_irq_info(mdev_state, &info); 789 if (ret) 790 return ret; 791 792 if (copy_to_user((void __user *)arg, &info, minsz)) 793 return -EFAULT; 794 795 return 0; 796 } 797 case VFIO_DEVICE_SET_IRQS: 798 { 799 struct vfio_irq_set hdr; 800 u8 *data = NULL; 801 size_t data_size = 0; 802 803 minsz = offsetofend(struct vfio_irq_set, count); 804 805 if (copy_from_user(&hdr, (void __user *)arg, minsz)) 806 return -EFAULT; 807 808 ret = ccp_set_irqs_validate_and_prepare(&hdr, mdev_state->dev_info.num_irqs, 809 mdev_state->dev_info.num_irqs, &data_size); 810 if (ret) 811 return ret; 812 813 if (data_size) { 814 data = memdup_user((void __user *)(arg + minsz), data_size); 815 if (IS_ERR(data)) 816 return PTR_ERR(data); 817 } 818 819 mutex_lock(&mdev_state->ops_lock); 820 ret = ccp_set_irq_efds(mdev_state, &hdr, data); 821 mutex_unlock(&mdev_state->ops_lock); 822 kfree(data); 823 824 return ret; 825 } 826 case VFIO_DEVICE_CCP_SET_MODE: 827 { 828 struct hygon_ccp_dev_wrapper *ccp_wrapper = mdev_state->iommu->wrapper; 829 unsigned long flags; 830 831 if (!write_trylock_irqsave(&ccp_wrapper->q_lock, flags)) 832 return -EAGAIN; 833 834 if (ccp_wrapper->used_mode == arg) { 835 write_unlock_irqrestore(&ccp_wrapper->q_lock, flags); 836 return 0; 837 } 838 839 switch (arg) { 840 case _KERNEL_SPACE_USED: 841 ccp_wrapper->used_mode = _KERNEL_SPACE_USED; 842 ccp_dev_iommu_detach_device(ccp_wrapper->pdev); 843 ccp_dev_queue_switch(ccp_wrapper->cdev); 844 ccp_add_device(ccp_wrapper->cdev); 845 break; 846 case _USER_SPACE_USED: 847 if (ccp_wrapper->del_flag == 0) { 848 ccp_del_device(ccp_wrapper->cdev); 849 ccp_wrapper->del_flag = 1; 850 } 851 if (ccp_dev_kernel_mode_used_state(ccp_wrapper->cdev)) { 852 ret = -EAGAIN; 853 break; 854 } 855 if (ccp_dev_iommu_attach_device(ccp_wrapper->pdev)) { 856 ccp_add_device(ccp_wrapper->cdev); 857 ccp_wrapper->del_flag = 0; 858 ret = -EINVAL; 859 } else { 860 ccp_wrapper->used_mode = _USER_SPACE_USED; 861 ccp_ectx_list_init(ccp_wrapper); 862 ccp_dev_usermode_userid_clear(mdev_state->iommu->id); 863 } 864 break; 865 default: 866 pr_err("arg = %lu, invalid.\n", arg); 867 ret = -EINVAL; 868 break; 869 } 870 871 write_unlock_irqrestore(&ccp_wrapper->q_lock, flags); 872 return ret; 873 } 874 case VFIO_DEVICE_CCP_GET_MODE: 875 { 876 struct hygon_ccp_dev_wrapper *ccp_wrapper = mdev_state->iommu->wrapper; 877 878 if (put_user(ccp_wrapper->used_mode, (int __user *)arg)) 879 return -EFAULT; 880 881 return 0; 882 } 883 case VFIO_DEVICE_GET_PCI_ADDR: 884 { 885 struct pci_dev *pdev = mdev_state->iommu->pdev; 886 struct mccp_pci_addr addr; 887 888 if (copy_from_user(&addr, (void __user *)arg, sizeof(addr))) 889 return -EFAULT; 890 891 addr.domain = pci_domain_nr(pdev->bus); 892 addr.bus = pdev->bus->number; 893 addr.devid = PCI_SLOT(pdev->devfn); 894 addr.function = PCI_FUNC(pdev->devfn); > 895 if (pdev->dev.numa_node >= 0) 896 addr.numa_node = pdev->dev.numa_node; 897 else 898 addr.numa_node = 0; 899 900 if (copy_to_user((void __user *)arg, &addr, sizeof(addr))) 901 return -EFAULT; 902 903 return 0; 904 } 905 case VFIO_DEVICE_GET_PCI_ID: 906 { 907 struct pci_dev *pdev = mdev_state->iommu->pdev; 908 struct mccp_pci_id pid; 909 910 if (copy_from_user(&pid, (void __user *)arg, sizeof(pid))) 911 return -EFAULT; 912 913 pid.class = pdev->class; 914 pid.vendor = pdev->vendor; 915 pid.device = pdev->device; 916 pid.subsystem_vendor = pdev->subsystem_vendor; 917 pid.subsystem_device = pdev->subsystem_device; 918 919 if (copy_to_user((void __user *)arg, &pid, sizeof(pid))) 920 return -EFAULT; 921 922 return 0; 923 } 924 case VFIO_DEVICE_RESET: 925 return ccp_reset(mdev_state); 926 } 927 return -ENOTTY; 928 } 929 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6 v11 00/10] Add xcall 2.0 support
by Jinjie Ruan 17 Nov '25

17 Nov '25

Add xcall 2.0 support, which is compatible with xcall1.0, and can be used to dynamic instruction replacement for hardware xcall. Changes in v11: - Fix a bug in prefetch ko. - Fix a warning when concurrent write xcall comm. Changes in v10: - Fix memory leak in parse_xcall_command(). - Fix memory leak in xcall_comm_open(). - Add comment for smp_store_release(&mm->xcall, area). - Add sys_call_data in xcall_area struct. - clear_xcall_area() in __mmdrop() instead of __mmput(). - Add prefetch ko with some cleanup. Chanegs in v9: - /proc/xcall/comm, 0644 -> 0640 - /proc/xcall/comm check proc_mkdir("xcall", NULL) return value, use it as the parent proc_dir_entry for "comm". - Consider next task is NULL for xcall_info_switch(). - Return -EINVAL for error path in parse_xcall_command(). - Use bitmap for check_xcall_prog(). - Fix global-out-of-bounds KASAN bug in xcall_prog_register(). Changes in v8: - Fix no reigister and unregister null-ptr-ref bug by find prog first. - Fix xcall_comm_write write empty null-ptr-ref bug in memdup_user_nul(). - Add empty owner, exceed 64 prog name and repeat syscall check in check_prog(). - Move INIT_LIST_HEAD(&prog->list) to xcall_prog_register() instead of kernel module. Changes in v7: - Fix alternative bug in sync ventry. - Add "xcall" limit for xcall2.0 and hardware xcall. Changes in v6: - Add "xcall=debug" debug mode to use the "fast syscall" for every system call. - Use alternative to reduce the baseline performance noise floor when not set "xcall" on the kernel cmdline - Move binary_path out from xcall struct, and add to xcall_comm struct. - Fix1. insert_xcall_locked() check both "name" and "binary" to avoid repeated attach same name of xcall. - Fix2. Check if it is an executable file for the binary path. - Fix3. Check if it is an absolute path for the binary path. - Fix4. Remove the extra free_xcall_comm(info) in default branch in proc_xcall_command(). - Fix5. Add zero syscall hijack check for xcall_prog_register(). - Use __arm64_sys_ni_syscall() instead of define inv_xcall(). - Replace the -ENOSYS return value with -EINVAL, to avoid the warning. Changes in v5: - Fix build problem. - el0t_64_sync_ventry jump to kernel_ventry to do VMAP_STACK. - Some cleanups. - Merge the three refactor patch. Changes in v4: - Reuse uprobe_write_opcode() instead of use __replace_page() and copy_to_page(). - Handle error for uprobe_write_opcode(). - Support xcall1.0 before 920G. - Change xcall1.0 bitmap to byte array to save check insns. - Use percpu variable to save check insns for xcall1.0. - A little cleanup. Changes in v3: - Add validity checks during xcall registration to prevent out-of-bounds access and null pointer dereferences. - Extract __replace_page() and copy_to_page() from uprobe, to avoid code duplication. - Replace with new compatible refactored code. - Remove unnecessary member, such as old_name. Jinjie Ruan (2): xcall2.0: Support xcall1.0 for hardware xcall openeuler_defconfig: Enable CONFIG_DYNAMIC_XCALL by default Liao Chang (6): xcall2.0: Add userspace proc interface xcall2.0: Add xcall module register interface xcall2.0: Add xcall_area xcall2.0: Hajack syscall with dynamic instruciton replace xcall: Rework the early exception vector of XCALL and SYNC xcall2.0: Add a basic testcase Xinyu Zheng (1): xcall2.0: Introduce xcall epollwait prefetch feature Yipeng Zou (1): xcall: Add debug mode to force fast syscall for all threads arch/arm64/Kconfig.turbo | 13 + arch/arm64/configs/openeuler_defconfig | 1 + arch/arm64/include/asm/exception.h | 4 +- arch/arm64/include/asm/mmu_context.h | 7 - arch/arm64/include/asm/xcall.h | 155 +++--- arch/arm64/kernel/cpufeature.c | 79 +-- arch/arm64/kernel/entry-common.c | 28 +- arch/arm64/kernel/entry.S | 86 +-- arch/arm64/kernel/probes/uprobes.c | 6 + arch/arm64/kernel/process.c | 5 + arch/arm64/kernel/syscall.c | 14 + arch/arm64/kernel/xcall/Makefile | 3 +- arch/arm64/kernel/xcall/core.c | 405 +++++++++++++++ arch/arm64/kernel/xcall/entry.S | 139 ++++- arch/arm64/kernel/xcall/proc.c | 238 +++++++++ arch/arm64/kernel/xcall/xcall.c | 68 +-- arch/arm64/kvm/sys_regs.c | 1 + drivers/staging/Kconfig | 2 + drivers/staging/Makefile | 1 + drivers/staging/xcall/Kconfig | 19 + drivers/staging/xcall/Makefile | 1 + drivers/staging/xcall/dynamic_xcall_test.c | 89 ++++ drivers/staging/xcall/prefetch.c | 577 +++++++++++++++++++++ fs/proc/proc_xcall.c | 144 ++--- include/linux/mm_types.h | 4 + include/linux/xcall.h | 51 ++ kernel/events/uprobes.c | 23 + kernel/fork.c | 3 + mm/mmap.c | 14 +- 29 files changed, 1806 insertions(+), 374 deletions(-) create mode 100644 arch/arm64/kernel/xcall/core.c create mode 100644 arch/arm64/kernel/xcall/proc.c create mode 100644 drivers/staging/xcall/Kconfig create mode 100644 drivers/staging/xcall/Makefile create mode 100644 drivers/staging/xcall/dynamic_xcall_test.c create mode 100644 drivers/staging/xcall/prefetch.c create mode 100644 include/linux/xcall.h -- 2.34.1

2 11

[PATCH OLK-6.6] accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
by Zhang Xiaoxu 17 Nov '25

17 Nov '25

From: Youssef Samir <quic_yabdulra(a)quicinc.com> stable inclusion from stable-v6.6.114 commit 48b1d42286bfef7628b1d6c8c28d4e456c90f725 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6BC8 CVE: CVE-2025-40172 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 11f08c30a3e4157305ba692f1d44cca5fc9a8fca ] Currently, if find_and_map_user_pages() takes a DMA xfer request from the user with a length field set to 0, or in a rare case, the host receives QAIC_TRANS_DMA_XFER_CONT from the device where resources->xferred_dma_size is equal to the requested transaction size, the function will return 0 before allocating an sgt or setting the fields of the dma_xfer struct. In that case, encode_addr_size_pairs() will try to access the sgt which will lead to a general protection fault. Return an EINVAL in case the user provides a zero-sized ALP, or the device requests continuation after all of the bytes have been transferred. Fixes: 96d3c1cadedb ("accel/qaic: Clean up integer overflow checking in map_user_pages()") Signed-off-by: Youssef Samir <quic_yabdulra(a)quicinc.com> Signed-off-by: Youssef Samir <youssef.abdulrahman(a)oss.qualcomm.com> Reviewed-by: Jeff Hugo <jeff.hugo(a)oss.qualcomm.com> Reviewed-by: Carl Vanderlip <carl.vanderlip(a)oss.qualcomm.com> Signed-off-by: Jeff Hugo <jeff.hugo(a)oss.qualcomm.com> Link: https://lore.kernel.org/r/20251007122320.339654-1-youssef.abdulrahman@oss.q… Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zhang Xiaoxu <zhangxiaoxu5(a)huawei.com> --- drivers/accel/qaic/qaic_control.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/accel/qaic/qaic_control.c b/drivers/accel/qaic/qaic_control.c index f3db3fa91dd5..08b78f567853 100644 --- a/drivers/accel/qaic/qaic_control.c +++ b/drivers/accel/qaic/qaic_control.c @@ -407,7 +407,7 @@ static int find_and_map_user_pages(struct qaic_device *qdev, return -EINVAL; remaining = in_trans->size - resources->xferred_dma_size; if (remaining == 0) - return 0; + return -EINVAL; if (check_add_overflow(xfer_start_addr, remaining, &end)) return -EINVAL; -- 2.34.1

2 1

[PATCH openEuler-1.0-LTS] scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
by Zhang Xiaoxu 17 Nov '25

17 Nov '25

From: Ranjan Kumar <ranjan.kumar(a)broadcom.com> stable inclusion from stable-v5.10.246 commit 4e1442bae50ed633c2fe8058f47cd79b4ad88b9b category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6BAH CVE: CVE-2025-40115 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 1703fe4f8ae50d1fb6449854e1fcaed1053e3a14 ] During mpt3sas_transport_port_remove(), messages were logged with dev_printk() against &mpt3sas_port->port->dev. At this point the SAS transport device may already be partially unregistered or freed, leading to a crash when accessing its struct device. Using ioc_info(), which logs via the PCI device (ioc->pdev->dev), guaranteed to remain valid until driver removal. [83428.295776] Oops: general protection fault, probably for non-canonical address 0x6f702f323a33312d: 0000 [#1] SMP NOPTI [83428.295785] CPU: 145 UID: 0 PID: 113296 Comm: rmmod Kdump: loaded Tainted: G OE 6.16.0-rc1+ #1 PREEMPT(voluntary) [83428.295792] Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE [83428.295795] Hardware name: Dell Inc. Precision 7875 Tower/, BIOS 89.1.67 02/23/2024 [83428.295799] RIP: 0010:__dev_printk+0x1f/0x70 [83428.295805] Code: 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 49 89 d1 48 85 f6 74 52 4c 8b 46 50 4d 85 c0 74 1f 48 8b 46 68 48 85 c0 74 22 <48> 8b 08 0f b6 7f 01 48 c7 c2 db e8 42 ad 83 ef 30 e9 7b f8 ff ff [83428.295813] RSP: 0018:ff85aeafc3137bb0 EFLAGS: 00010206 [83428.295817] RAX: 6f702f323a33312d RBX: ff4290ee81292860 RCX: 5000cca25103be32 [83428.295820] RDX: ff85aeafc3137bb8 RSI: ff4290eeb1966c00 RDI: ffffffffc1560845 [83428.295823] RBP: ff85aeafc3137c18 R08: 74726f702f303a33 R09: ff85aeafc3137bb8 [83428.295826] R10: ff85aeafc3137b18 R11: ff4290f5bd60fe68 R12: ff4290ee81290000 [83428.295830] R13: ff4290ee6e345de0 R14: ff4290ee81290000 R15: ff4290ee6e345e30 [83428.295833] FS: 00007fd9472a6740(0000) GS:ff4290f5ce96b000(0000) knlGS:0000000000000000 [83428.295837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [83428.295840] CR2: 00007f242b4db238 CR3: 00000002372b8006 CR4: 0000000000771ef0 [83428.295844] PKRU: 55555554 [83428.295846] Call Trace: [83428.295848] <TASK> [83428.295850] _dev_printk+0x5c/0x80 [83428.295857] ? srso_alias_return_thunk+0x5/0xfbef5 [83428.295863] mpt3sas_transport_port_remove+0x1c7/0x420 [mpt3sas] [83428.295882] _scsih_remove_device+0x21b/0x280 [mpt3sas] [83428.295894] ? _scsih_expander_node_remove+0x108/0x140 [mpt3sas] [83428.295906] ? srso_alias_return_thunk+0x5/0xfbef5 [83428.295910] mpt3sas_device_remove_by_sas_address.part.0+0x8f/0x110 [mpt3sas] [83428.295921] _scsih_expander_node_remove+0x129/0x140 [mpt3sas] [83428.295933] _scsih_expander_node_remove+0x6a/0x140 [mpt3sas] [83428.295944] scsih_remove+0x3f0/0x4a0 [mpt3sas] [83428.295957] pci_device_remove+0x3b/0xb0 [83428.295962] device_release_driver_internal+0x193/0x200 [83428.295968] driver_detach+0x44/0x90 [83428.295971] bus_remove_driver+0x69/0xf0 [83428.295975] pci_unregister_driver+0x2a/0xb0 [83428.295979] _mpt3sas_exit+0x1f/0x300 [mpt3sas] [83428.295991] __do_sys_delete_module.constprop.0+0x174/0x310 [83428.295997] ? srso_alias_return_thunk+0x5/0xfbef5 [83428.296000] ? __x64_sys_getdents64+0x9a/0x110 [83428.296005] ? srso_alias_return_thunk+0x5/0xfbef5 [83428.296009] ? syscall_trace_enter+0xf6/0x1b0 [83428.296014] do_syscall_64+0x7b/0x2c0 [83428.296019] ? srso_alias_return_thunk+0x5/0xfbef5 [83428.296023] entry_SYSCALL_64_after_hwframe+0x76/0x7e Fixes: f92363d12359 ("[SCSI] mpt3sas: add new driver supporting 12GB SAS") Signed-off-by: Ranjan Kumar <ranjan.kumar(a)broadcom.com> Signed-off-by: Martin K. Petersen <martin.petersen(a)oracle.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zhang Xiaoxu <zhangxiaoxu5(a)huawei.com> --- drivers/scsi/mpt3sas/mpt3sas_transport.c | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/drivers/scsi/mpt3sas/mpt3sas_transport.c b/drivers/scsi/mpt3sas/mpt3sas_transport.c index 20d36061c217..5927a9ae62f2 100644 --- a/drivers/scsi/mpt3sas/mpt3sas_transport.c +++ b/drivers/scsi/mpt3sas/mpt3sas_transport.c @@ -828,11 +828,9 @@ mpt3sas_transport_port_remove(struct MPT3SAS_ADAPTER *ioc, u64 sas_address, list_for_each_entry_safe(mpt3sas_phy, next_phy, &mpt3sas_port->phy_list, port_siblings) { if ((ioc->logging_level & MPT_DEBUG_TRANSPORT)) - dev_printk(KERN_INFO, &mpt3sas_port->port->dev, - "remove: sas_addr(0x%016llx), phy(%d)\n", - (unsigned long long) - mpt3sas_port->remote_identify.sas_address, - mpt3sas_phy->phy_id); + ioc_info(ioc, "remove: sas_addr(0x%016llx), phy(%d)\n", + (unsigned long long) mpt3sas_port->remote_identify.sas_address, + mpt3sas_phy->phy_id); mpt3sas_phy->phy_belongs_to_port = 0; if (!ioc->remove_host) sas_port_delete_phy(mpt3sas_port->port, -- 2.34.1

2 1

[PATCH OLK-6.6] sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
by Zhang Xiaoxu 17 Nov '25

17 Nov '25

From: Michael Karcher <kernel(a)mkarcher.dialup.fu-berlin.de> stable inclusion from stable-v6.6.112 commit 674ff598148a28bae0b5372339de56f2abf0b1d1 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6B4C CVE: CVE-2025-40126 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 4fba1713001195e59cfc001ff1f2837dab877efb ] The referenced commit introduced exception handlers on user-space memory references in copy_from_user and copy_to_user. These handlers return from the respective function and calculate the remaining bytes left to copy using the current register contents. This commit fixes a couple of bad calculations. This will fix the return value of copy_from_user and copy_to_user in the faulting case. The behaviour of memcpy stays unchanged. Fixes: cb736fdbb208 ("sparc64: Convert U1copy_{from,to}_user to accurate exception reporting.") Tested-by: John Paul Adrian Glaubitz <glaubitz(a)physik.fu-berlin.de> # on QEMU 10.0.3 Tested-by: René Rebe <rene(a)exactcode.com> # on Ultra 5 UltraSparc IIi Tested-by: Jonathan 'theJPster' Pallant <kernel(a)thejpster.org.uk> # on Sun Netra T1 Signed-off-by: Michael Karcher <kernel(a)mkarcher.dialup.fu-berlin.de> Reviewed-by: Andreas Larsson <andreas(a)gaisler.com> Link: https://lore.kernel.org/r/20250905-memcpy_series-v4-1-1ca72dda195b@mkarcher… Signed-off-by: Andreas Larsson <andreas(a)gaisler.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zhang Xiaoxu <zhangxiaoxu5(a)huawei.com> --- arch/sparc/lib/U1memcpy.S | 19 ++++++++++--------- 1 file changed, 10 insertions(+), 9 deletions(-) diff --git a/arch/sparc/lib/U1memcpy.S b/arch/sparc/lib/U1memcpy.S index 635398ec7540..154fbd35400c 100644 --- a/arch/sparc/lib/U1memcpy.S +++ b/arch/sparc/lib/U1memcpy.S @@ -164,17 +164,18 @@ ENTRY(U1_gs_40_fp) retl add %o0, %o2, %o0 ENDPROC(U1_gs_40_fp) -ENTRY(U1_g3_0_fp) - VISExitHalf - retl - add %g3, %o2, %o0 -ENDPROC(U1_g3_0_fp) ENTRY(U1_g3_8_fp) VISExitHalf add %g3, 8, %g3 retl add %g3, %o2, %o0 ENDPROC(U1_g3_8_fp) +ENTRY(U1_g3_16_fp) + VISExitHalf + add %g3, 16, %g3 + retl + add %g3, %o2, %o0 +ENDPROC(U1_g3_16_fp) ENTRY(U1_o2_0_fp) VISExitHalf retl @@ -547,18 +548,18 @@ FUNC_NAME: /* %o0=dst, %o1=src, %o2=len */ 62: FINISH_VISCHUNK(o0, f44, f46) 63: UNEVEN_VISCHUNK_LAST(o0, f46, f0) -93: EX_LD_FP(LOAD(ldd, %o1, %f2), U1_g3_0_fp) +93: EX_LD_FP(LOAD(ldd, %o1, %f2), U1_g3_8_fp) add %o1, 8, %o1 subcc %g3, 8, %g3 faligndata %f0, %f2, %f8 - EX_ST_FP(STORE(std, %f8, %o0), U1_g3_8_fp) + EX_ST_FP(STORE(std, %f8, %o0), U1_g3_16_fp) bl,pn %xcc, 95f add %o0, 8, %o0 - EX_LD_FP(LOAD(ldd, %o1, %f0), U1_g3_0_fp) + EX_LD_FP(LOAD(ldd, %o1, %f0), U1_g3_8_fp) add %o1, 8, %o1 subcc %g3, 8, %g3 faligndata %f2, %f0, %f8 - EX_ST_FP(STORE(std, %f8, %o0), U1_g3_8_fp) + EX_ST_FP(STORE(std, %f8, %o0), U1_g3_16_fp) bge,pt %xcc, 93b add %o0, 8, %o0 -- 2.34.1

2 1

[PATCH OLK-6.6 v11 00/10] Add xcall 2.0 support
by Jinjie Ruan 17 Nov '25

17 Nov '25

Add xcall 2.0 support, which is compatible with xcall1.0, and can be used to dynamic instruction replacement for hardware xcall. Changes in v11: - Fix a bug in prefetch ko. - Fix a warning when concurrent write xcall comm. Changes in v10: - Fix memory leak in parse_xcall_command(). - Fix memory leak in xcall_comm_open(). - Add comment for smp_store_release(&mm->xcall, area). - Add sys_call_data in xcall_area struct. - clear_xcall_area() in __mmdrop() instead of __mmput(). - Add prefetch ko with some cleanup. Chanegs in v9: - /proc/xcall/comm, 0644 -> 0640 - /proc/xcall/comm check proc_mkdir("xcall", NULL) return value, use it as the parent proc_dir_entry for "comm". - Consider next task is NULL for xcall_info_switch(). - Return -EINVAL for error path in parse_xcall_command(). - Use bitmap for check_xcall_prog(). - Fix global-out-of-bounds KASAN bug in xcall_prog_register(). Changes in v8: - Fix no reigister and unregister null-ptr-ref bug by find prog first. - Fix xcall_comm_write write empty null-ptr-ref bug in memdup_user_nul(). - Add empty owner, exceed 64 prog name and repeat syscall check in check_prog(). - Move INIT_LIST_HEAD(&prog->list) to xcall_prog_register() instead of kernel module. Changes in v7: - Fix alternative bug in sync ventry. - Add "xcall" limit for xcall2.0 and hardware xcall. Changes in v6: - Add "xcall=debug" debug mode to use the "fast syscall" for every system call. - Use alternative to reduce the baseline performance noise floor when not set "xcall" on the kernel cmdline - Move binary_path out from xcall struct, and add to xcall_comm struct. - Fix1. insert_xcall_locked() check both "name" and "binary" to avoid repeated attach same name of xcall. - Fix2. Check if it is an executable file for the binary path. - Fix3. Check if it is an absolute path for the binary path. - Fix4. Remove the extra free_xcall_comm(info) in default branch in proc_xcall_command(). - Fix5. Add zero syscall hijack check for xcall_prog_register(). - Use __arm64_sys_ni_syscall() instead of define inv_xcall(). - Replace the -ENOSYS return value with -EINVAL, to avoid the warning. Changes in v5: - Fix build problem. - el0t_64_sync_ventry jump to kernel_ventry to do VMAP_STACK. - Some cleanups. - Merge the three refactor patch. Changes in v4: - Reuse uprobe_write_opcode() instead of use __replace_page() and copy_to_page(). - Handle error for uprobe_write_opcode(). - Support xcall1.0 before 920G. - Change xcall1.0 bitmap to byte array to save check insns. - Use percpu variable to save check insns for xcall1.0. - A little cleanup. Changes in v3: - Add validity checks during xcall registration to prevent out-of-bounds access and null pointer dereferences. - Extract __replace_page() and copy_to_page() from uprobe, to avoid code duplication. - Replace with new compatible refactored code. - Remove unnecessary member, such as old_name. Jinjie Ruan (2): xcall2.0: Support xcall1.0 for hardware xcall openeuler_defconfig: Enable CONFIG_DYNAMIC_XCALL by default Liao Chang (6): xcall2.0: Add userspace proc interface xcall2.0: Add xcall module register interface xcall2.0: Add xcall_area xcall2.0: Hajack syscall with dynamic instruciton replace xcall: Rework the early exception vector of XCALL and SYNC xcall2.0: Add a basic testcase Xinyu Zheng (1): xcall2.0: Introduce xcall epollwait prefetch feature Yipeng Zou (1): xcall: Add debug mode to force fast syscall for all threads arch/arm64/Kconfig.turbo | 13 + arch/arm64/configs/openeuler_defconfig | 1 + arch/arm64/include/asm/exception.h | 4 +- arch/arm64/include/asm/mmu_context.h | 7 - arch/arm64/include/asm/xcall.h | 155 +++--- arch/arm64/kernel/cpufeature.c | 79 +-- arch/arm64/kernel/entry-common.c | 28 +- arch/arm64/kernel/entry.S | 86 +-- arch/arm64/kernel/probes/uprobes.c | 6 + arch/arm64/kernel/process.c | 5 + arch/arm64/kernel/syscall.c | 14 + arch/arm64/kernel/xcall/Makefile | 3 +- arch/arm64/kernel/xcall/core.c | 415 +++++++++++++++ arch/arm64/kernel/xcall/entry.S | 139 ++++- arch/arm64/kernel/xcall/proc.c | 238 +++++++++ arch/arm64/kernel/xcall/xcall.c | 68 +-- arch/arm64/kvm/sys_regs.c | 1 + drivers/staging/Kconfig | 2 + drivers/staging/Makefile | 1 + drivers/staging/xcall/Kconfig | 19 + drivers/staging/xcall/Makefile | 1 + drivers/staging/xcall/dynamic_xcall_test.c | 89 ++++ drivers/staging/xcall/prefetch.c | 577 +++++++++++++++++++++ fs/proc/proc_xcall.c | 144 ++--- include/linux/mm_types.h | 4 + include/linux/xcall.h | 51 ++ kernel/events/uprobes.c | 23 + kernel/fork.c | 3 + mm/mmap.c | 14 +- 29 files changed, 1816 insertions(+), 374 deletions(-) create mode 100644 arch/arm64/kernel/xcall/core.c create mode 100644 arch/arm64/kernel/xcall/proc.c create mode 100644 drivers/staging/xcall/Kconfig create mode 100644 drivers/staging/xcall/Makefile create mode 100644 drivers/staging/xcall/dynamic_xcall_test.c create mode 100644 drivers/staging/xcall/prefetch.c create mode 100644 include/linux/xcall.h -- 2.34.1

2 11

[PATCH OLK-6.6 0/2] memcg: enable asynchronous reclaim for cgroup-v2
by Chen Ridong 17 Nov '25

17 Nov '25

memcg: enable asynchronous reclaim for cgroup-v2 Chen Ridong (2): memcg: change CONFIG_MEMCG_V1_RECLAIM to CONFIG_MEMCG_QOS memcg: enable asynchronous reclaim for cgroup-v2 arch/arm64/configs/openeuler_defconfig | 2 +- arch/riscv/configs/openeuler_defconfig | 2 +- arch/x86/configs/openeuler_defconfig | 2 +- include/linux/memcontrol.h | 4 ++-- init/Kconfig | 10 +++++++-- mm/memcontrol.c | 30 ++++++++++++++++---------- 6 files changed, 32 insertions(+), 18 deletions(-) -- 2.34.1

2 3

[openeuler:OLK-6.6 3212/3212] drivers/pinctrl/zhaoxin/pinctrl-kx7000.c:307:23: warning: overlapping comparisons always evaluate to true
by kernel test robot 17 Nov '25

17 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 1814a55bda7a73d33ecfdcf11802a1bc667c2e3e commit: 5d01c9ec4f3b95b0629a38d936f69bc05e494cc9 [3212/3212] pinctrl: Zhaoxin: Add KH-50000 support config: x86_64-randconfig-r073-20251117 (https://download.01.org/0day-ci/archive/20251117/202511171908.GkIEY88E-lkp@…) compiler: clang version 20.1.8 (https://github.com/llvm/llvm-project 87f0227cb60147a26a1eeb4fb06e3b505e9c7261) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251117/202511171908.GkIEY88E-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511171908.GkIEY88E-lkp@intel.com/ All warnings (new ones prefixed by >>): >> drivers/pinctrl/zhaoxin/pinctrl-kx7000.c:307:23: warning: overlapping comparisons always evaluate to true [-Wtautological-overlap-compare] 307 | else if (pin >= 0x62 || pin <= 0x70) | ~~~~~~~~~~~~^~~~~~~~~~~~~~ drivers/pinctrl/zhaoxin/pinctrl-kx7000.c:305:23: warning: overlapping comparisons always evaluate to true [-Wtautological-overlap-compare] 305 | else if (pin >= 0x57 || pin <= 0x5F) | ~~~~~~~~~~~~^~~~~~~~~~~~~~ 2 warnings generated. Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for PTP_1588_CLOCK Depends on [n]: NET [=y] && POSIX_TIMERS [=n] Selected by [m]: - SXE [=m] && NETDEVICES [=y] && ETHERNET [=y] && NET_VENDOR_LINKDATA [=y] && (X86 [=y] || ARM64) && PCI [=y] - SXE_VF [=m] && NETDEVICES [=y] && ETHERNET [=y] && NET_VENDOR_LINKDATA [=y] && (X86 [=y] || ARM64) && PCI [=y] vim +307 drivers/pinctrl/zhaoxin/pinctrl-kx7000.c 288 289 static enum zx_gpio_type kx7000_gpio_type(struct zhaoxin_pinctrl *pctrl, unsigned int pin) 290 { 291 if (pin >= 0xE && pin <= 0x13) 292 return ZX_TYPE_PGPIO; 293 else if (pin >= 0x16 && pin <= 0x28) 294 return ZX_TYPE_PGPIO; 295 else if (pin >= 0x29 && pin <= 0x32) 296 return ZX_TYPE_GPIO; 297 else if (pin == 0x35 || pin == 0x3B) 298 return ZX_TYPE_PGPIO; 299 else if (pin >= 0x42 && pin <= 0x47) 300 return ZX_TYPE_PGPIO; 301 else if (pin == 0x4E || pin == 0x50) 302 return ZX_TYPE_PGPIO; 303 else if (pin == 0x52 || pin == 0x55) 304 return ZX_TYPE_PGPIO; 305 else if (pin >= 0x57 || pin <= 0x5F) 306 return ZX_TYPE_PGPIO; > 307 else if (pin >= 0x62 || pin <= 0x70) 308 return ZX_TYPE_PGPIO; 309 else 310 return ZX_TYPE_ERROR; 311 } 312 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6] media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()
by Zhang Kunbo 17 Nov '25

17 Nov '25

From: Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> stable inclusion from stable-v6.6.113 commit ed30811fbed40751deb952bde534aa2632dc0bf7 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6BWA CVE: CVE-2025-40207 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit f37df9a0eb5e43fcfe02cbaef076123dc0d79c7e upstream. v4l2_subdev_call_state_try() macro allocates a subdev state with __v4l2_subdev_state_alloc(), but does not check the returned value. If __v4l2_subdev_state_alloc fails, it returns an ERR_PTR, and that would cause v4l2_subdev_call_state_try() to crash. Add proper error handling to v4l2_subdev_call_state_try(). Signed-off-by: Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> Fixes: 982c0487185b ("media: subdev: Add v4l2_subdev_call_state_try() macro") Reported-by: Dan Carpenter <dan.carpenter(a)linaro.org> Closes: https://lore.kernel.org/all/aJTNtpDUbTz7eyJc%40stanley.mountain/ Cc: stable(a)vger.kernel.org Reviewed-by: Dan Carpenter <dan.carpenter(a)linaro.org> Signed-off-by: Sakari Ailus <sakari.ailus(a)linux.intel.com> Signed-off-by: Hans Verkuil <hverkuil+cisco(a)kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Zhang Kunbo <zhangkunbo(a)huawei.com> --- include/media/v4l2-subdev.h | 30 +++++++++++++++++------------- 1 file changed, 17 insertions(+), 13 deletions(-) diff --git a/include/media/v4l2-subdev.h b/include/media/v4l2-subdev.h index b4fcd0164048..c2c6dcced8bc 100644 --- a/include/media/v4l2-subdev.h +++ b/include/media/v4l2-subdev.h @@ -1879,19 +1879,23 @@ extern const struct v4l2_subdev_ops v4l2_subdev_call_wrappers; * * Note: only legacy non-MC drivers may need this macro. */ -#define v4l2_subdev_call_state_try(sd, o, f, args...) \ - ({ \ - int __result; \ - static struct lock_class_key __key; \ - const char *name = KBUILD_BASENAME \ - ":" __stringify(__LINE__) ":state->lock"; \ - struct v4l2_subdev_state *state = \ - __v4l2_subdev_state_alloc(sd, name, &__key); \ - v4l2_subdev_lock_state(state); \ - __result = v4l2_subdev_call(sd, o, f, state, ##args); \ - v4l2_subdev_unlock_state(state); \ - __v4l2_subdev_state_free(state); \ - __result; \ +#define v4l2_subdev_call_state_try(sd, o, f, args...) \ + ({ \ + int __result; \ + static struct lock_class_key __key; \ + const char *name = KBUILD_BASENAME \ + ":" __stringify(__LINE__) ":state->lock"; \ + struct v4l2_subdev_state *state = \ + __v4l2_subdev_state_alloc(sd, name, &__key); \ + if (IS_ERR(state)) { \ + __result = PTR_ERR(state); \ + } else { \ + v4l2_subdev_lock_state(state); \ + __result = v4l2_subdev_call(sd, o, f, state, ##args); \ + v4l2_subdev_unlock_state(state); \ + __v4l2_subdev_state_free(state); \ + } \ + __result; \ }) /** -- 2.34.1

2 1

[PATCH OLK-6.6 v10 00/10] Add xcall 2.0 support
by Jinjie Ruan 17 Nov '25

17 Nov '25

Add xcall 2.0 support, which is compatible with xcall1.0, and can be used to dynamic instruction replacement for hardware xcall. Changes in v10: - Fix memory leak in parse_xcall_command(). - Fix memory leak in xcall_comm_open(). - Add comment for smp_store_release(&mm->xcall, area). - Add sys_call_data in xcall_area struct. - clear_xcall_area() in __mmdrop() instead of __mmput(). - Add prefetch ko with some cleanup. Chanegs in v9: - /proc/xcall/comm, 0644 -> 0640 - /proc/xcall/comm check proc_mkdir("xcall", NULL) return value, use it as the parent proc_dir_entry for "comm". - Consider next task is NULL for xcall_info_switch(). - Return -EINVAL for error path in parse_xcall_command(). - Use bitmap for check_xcall_prog(). - Fix global-out-of-bounds KASAN bug in xcall_prog_register(). Changes in v8: - Fix no reigister and unregister null-ptr-ref bug by find prog first. - Fix xcall_comm_write write empty null-ptr-ref bug in memdup_user_nul(). - Add empty owner, exceed 64 prog name and repeat syscall check in check_prog(). - Move INIT_LIST_HEAD(&prog->list) to xcall_prog_register() instead of kernel module. Changes in v7: - Fix alternative bug in sync ventry. - Add "xcall" limit for xcall2.0 and hardware xcall. Changes in v6: - Add "xcall=debug" debug mode to use the "fast syscall" for every system call. - Use alternative to reduce the baseline performance noise floor when not set "xcall" on the kernel cmdline - Move binary_path out from xcall struct, and add to xcall_comm struct. - Fix1. insert_xcall_locked() check both "name" and "binary" to avoid repeated attach same name of xcall. - Fix2. Check if it is an executable file for the binary path. - Fix3. Check if it is an absolute path for the binary path. - Fix4. Remove the extra free_xcall_comm(info) in default branch in proc_xcall_command(). - Fix5. Add zero syscall hijack check for xcall_prog_register(). - Use __arm64_sys_ni_syscall() instead of define inv_xcall(). - Replace the -ENOSYS return value with -EINVAL, to avoid the warning. Changes in v5: - Fix build problem. - el0t_64_sync_ventry jump to kernel_ventry to do VMAP_STACK. - Some cleanups. - Merge the three refactor patch. Changes in v4: - Reuse uprobe_write_opcode() instead of use __replace_page() and copy_to_page(). - Handle error for uprobe_write_opcode(). - Support xcall1.0 before 920G. - Change xcall1.0 bitmap to byte array to save check insns. - Use percpu variable to save check insns for xcall1.0. - A little cleanup. Changes in v3: - Add validity checks during xcall registration to prevent out-of-bounds access and null pointer dereferences. - Extract __replace_page() and copy_to_page() from uprobe, to avoid code duplication. - Replace with new compatible refactored code. - Remove unnecessary member, such as old_name. Jinjie Ruan (2): xcall2.0: Support xcall1.0 for hardware xcall openeuler_defconfig: Enable CONFIG_DYNAMIC_XCALL by default Liao Chang (6): xcall2.0: Add userspace proc interface xcall2.0: Add xcall module register interface xcall2.0: Add xcall_area xcall2.0: Hajack syscall with dynamic instruciton replace xcall: Rework the early exception vector of XCALL and SYNC xcall2.0: Add a basic testcase Xinyu Zheng (1): xcall2.0: Introduce xcall epollwait prefetch feature Yipeng Zou (1): xcall: Add debug mode to force fast syscall for all threads arch/arm64/Kconfig.turbo | 13 + arch/arm64/configs/openeuler_defconfig | 1 + arch/arm64/include/asm/exception.h | 4 +- arch/arm64/include/asm/mmu_context.h | 7 - arch/arm64/include/asm/xcall.h | 155 +++--- arch/arm64/kernel/cpufeature.c | 79 +-- arch/arm64/kernel/entry-common.c | 28 +- arch/arm64/kernel/entry.S | 86 +--- arch/arm64/kernel/probes/uprobes.c | 6 + arch/arm64/kernel/process.c | 5 + arch/arm64/kernel/syscall.c | 14 + arch/arm64/kernel/xcall/Makefile | 3 +- arch/arm64/kernel/xcall/core.c | 410 +++++++++++++++ arch/arm64/kernel/xcall/entry.S | 139 ++++- arch/arm64/kernel/xcall/proc.c | 238 +++++++++ arch/arm64/kernel/xcall/xcall.c | 68 +-- arch/arm64/kvm/sys_regs.c | 1 + drivers/staging/Kconfig | 2 + drivers/staging/Makefile | 1 + drivers/staging/xcall/Kconfig | 19 + drivers/staging/xcall/Makefile | 1 + drivers/staging/xcall/dynamic_xcall_test.c | 89 ++++ drivers/staging/xcall/prefetch.c | 573 +++++++++++++++++++++ fs/proc/proc_xcall.c | 144 ++---- include/linux/mm_types.h | 4 + include/linux/xcall.h | 51 ++ kernel/events/uprobes.c | 23 + kernel/fork.c | 3 + mm/mmap.c | 14 +- 29 files changed, 1807 insertions(+), 374 deletions(-) create mode 100644 arch/arm64/kernel/xcall/core.c create mode 100644 arch/arm64/kernel/xcall/proc.c create mode 100644 drivers/staging/xcall/Kconfig create mode 100644 drivers/staging/xcall/Makefile create mode 100644 drivers/staging/xcall/dynamic_xcall_test.c create mode 100644 drivers/staging/xcall/prefetch.c create mode 100644 include/linux/xcall.h -- 2.34.1

2 11

[PATCH OLK-6.6 0/8] xsched: XCU Partition
by Zicheng Qu 17 Nov '25

17 Nov '25

Alekseev Dmitry (2): xsched: Add XCU control group implementation and its backend in xsched CFS xsched: Add support for CFS quota for cgroups Konstantin Meskhidze (6): xsched: Add base vstream support xcu: Add base NPU driver support xsched: Introduce vstream management xsched: Add basic scheduler core support xsched: Add xsched RT class xsched: Add xsched CFS class arch/arm/include/uapi/asm/unistd.h | 1 + arch/arm64/configs/openeuler_defconfig | 1 + arch/powerpc/include/uapi/asm/unistd.h | 1 + arch/x86/configs/openeuler_defconfig | 1 + arch/x86/entry/syscalls/syscall_64.tbl | 2 +- arch/x86/include/uapi/asm/unistd.h | 1 + drivers/Makefile | 1 + drivers/xcu/Makefile | 2 + drivers/xcu/xcu_group.c | 380 ++++++++++++ include/linux/cgroup_subsys.h | 4 + include/linux/syscalls.h | 2 + include/linux/vstream.h | 91 +++ include/linux/xcu_group.h | 96 +++ include/linux/xsched.h | 514 ++++++++++++++++ include/uapi/asm-generic/unistd.h | 6 +- include/uapi/linux/xcu_vstream.h | 77 +++ init/Kconfig | 1 + kernel/Makefile | 1 + kernel/cgroup/cgroup.c | 2 +- kernel/xsched/Kconfig | 85 +++ kernel/xsched/Makefile | 9 + kernel/xsched/cfs.c | 237 ++++++++ kernel/xsched/cfs_quota.c | 98 ++++ kernel/xsched/cgroup.c | 775 +++++++++++++++++++++++++ kernel/xsched/core.c | 526 +++++++++++++++++ kernel/xsched/rt.c | 281 +++++++++ kernel/xsched/vstream.c | 674 +++++++++++++++++++++ 27 files changed, 3865 insertions(+), 4 deletions(-) create mode 100644 drivers/xcu/Makefile create mode 100644 drivers/xcu/xcu_group.c create mode 100644 include/linux/vstream.h create mode 100644 include/linux/xcu_group.h create mode 100644 include/linux/xsched.h create mode 100644 include/uapi/linux/xcu_vstream.h create mode 100644 kernel/xsched/Kconfig create mode 100644 kernel/xsched/Makefile create mode 100644 kernel/xsched/cfs.c create mode 100644 kernel/xsched/cfs_quota.c create mode 100644 kernel/xsched/cgroup.c create mode 100644 kernel/xsched/core.c create mode 100644 kernel/xsched/rt.c create mode 100644 kernel/xsched/vstream.c -- 2.34.1

2 9

[PATCH OLK-6.6 v2 0/2] mm: Fix shmem build and numa fault counting errors
by Ze Zuo 17 Nov '25

17 Nov '25

1. Fix CONFIG_SWAP build errors introduced by ed205f43 ("mm: convert swap_cluster_readahead and swap_vma_readahead to return a folio") 2. Fix numa fault counting error introduced by 3bfa35c ("mm/numa: no task_numa_fault() call if PTE is changed") v1 -> v2: - add inline for swap_cluster_readahead. - fix some commit message for checkformat. Ze Zuo (2): mm: fix shmem build errors with CONFIG_SWAP disable mm: fix nr_pages counting for folio in task_numa_fault mm/memory.c | 4 ++-- mm/swap.h | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) -- 2.25.1

2 3

[PATCH OLK-6.6] uio_hv_generic: Let userspace take care of interrupt mask
by Xia Fukun 17 Nov '25

17 Nov '25

From: Naman Jain <namjain(a)linux.microsoft.com> stable inclusion from stable-v6.6.112 commit 2af39ab5e6dc46b835a52e80a22d0cad430985e3 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID3WG6 CVE: CVE-2025-40048 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit b15b7d2a1b09ef5428a8db260251897405a19496 upstream. Remove the logic to set interrupt mask by default in uio_hv_generic driver as the interrupt mask value is supposed to be controlled completely by the user space. If the mask bit gets changed by the driver, concurrently with user mode operating on the ring, the mask bit may be set when it is supposed to be clear, and the user-mode driver will miss an interrupt which will cause a hang. For eg- when the driver sets inbound ring buffer interrupt mask to 1, the host does not interrupt the guest on the UIO VMBus channel. However, setting the mask does not prevent the host from putting a message in the inbound ring buffer. So let’s assume that happens, the host puts a message into the ring buffer but does not interrupt. Subsequently, the user space code in the guest sets the inbound ring buffer interrupt mask to 0, saying “Hey, I’m ready for interrupts”. User space code then calls pread() to wait for an interrupt. Then one of two things happens: * The host never sends another message. So the pread() waits forever. * The host does send another message. But because there’s already a message in the ring buffer, it doesn’t generate an interrupt. This is the correct behavior, because the host should only send an interrupt when the inbound ring buffer transitions from empty to not-empty. Adding an additional message to a ring buffer that is not empty is not supposed to generate an interrupt on the guest. Since the guest is waiting in pread() and not removing messages from the ring buffer, the pread() waits forever. This could be easily reproduced in hv_fcopy_uio_daemon if we delay setting interrupt mask to 0. Similarly if hv_uio_channel_cb() sets the interrupt_mask to 1, there’s a race condition. Once user space empties the inbound ring buffer, but before user space sets interrupt_mask to 0, the host could put another message in the ring buffer but it wouldn’t interrupt. Then the next pread() would hang. Fix these by removing all instances where interrupt_mask is changed, while keeping the one in set_event() unchanged to enable userspace control the interrupt mask by writing 0/1 to /dev/uioX. Fixes: 95096f2fbd10 ("uio-hv-generic: new userspace i/o driver for VMBus") Suggested-by: John Starks <jostarks(a)microsoft.com> Signed-off-by: Naman Jain <namjain(a)linux.microsoft.com> Cc: stable(a)vger.kernel.org Reviewed-by: Michael Kelley <mhklinux(a)outlook.com> Reviewed-by: Long Li <longli(a)microsoft.com> Reviewed-by: Tianyu Lan <tiala(a)microsoft.com> Tested-by: Tianyu Lan <tiala(a)microsoft.com> Link: https://lore.kernel.org/r/20250828044200.492030-1-namjain@linux.microsoft.c… Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Xia Fukun <xiafukun(a)huawei.com> --- drivers/uio/uio_hv_generic.c | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/drivers/uio/uio_hv_generic.c b/drivers/uio/uio_hv_generic.c index a2c7abf8c289..7301da7244e8 100644 --- a/drivers/uio/uio_hv_generic.c +++ b/drivers/uio/uio_hv_generic.c @@ -96,7 +96,6 @@ static void hv_uio_channel_cb(void *context) struct hv_device *hv_dev = chan->device_obj; struct hv_uio_private_data *pdata = hv_get_drvdata(hv_dev); - chan->inbound.ring_buffer->interrupt_mask = 1; virt_mb(); uio_event_notify(&pdata->info); @@ -173,8 +172,6 @@ hv_uio_new_channel(struct vmbus_channel *new_sc) return; } - /* Disable interrupts on sub channel */ - new_sc->inbound.ring_buffer->interrupt_mask = 1; set_channel_read_mode(new_sc, HV_CALL_ISR); ret = sysfs_create_bin_file(&new_sc->kobj, &ring_buffer_bin_attr); @@ -218,9 +215,7 @@ hv_uio_open(struct uio_info *info, struct inode *inode) ret = vmbus_connect_ring(dev->channel, hv_uio_channel_cb, dev->channel); - if (ret == 0) - dev->channel->inbound.ring_buffer->interrupt_mask = 1; - else + if (ret) atomic_dec(&pdata->refcnt); return ret; -- 2.34.1

2 1

[PATCH OLK-5.10] usb: dwc3: gadget: check that event count does not exceed event buffer length
by Xia Fukun 17 Nov '25

17 Nov '25

From: Frode Isaksen <frode(a)meta.com> stable inclusion from stable-v5.10.237 commit b43225948b231b3f331194010f84512bee4d9f59 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IC6BOI CVE: CVE-2025-37810 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 63ccd26cd1f6600421795f6ca3e625076be06c9f upstream. The event count is read from register DWC3_GEVNTCOUNT. There is a check for the count being zero, but not for exceeding the event buffer length. Check that event count does not exceed event buffer length, avoiding an out-of-bounds access when memcpy'ing the event. Crash log: Unable to handle kernel paging request at virtual address ffffffc0129be000 pc : __memcpy+0x114/0x180 lr : dwc3_check_event_buf+0xec/0x348 x3 : 0000000000000030 x2 : 000000000000dfc4 x1 : ffffffc0129be000 x0 : ffffff87aad60080 Call trace: __memcpy+0x114/0x180 dwc3_interrupt+0x24/0x34 Signed-off-by: Frode Isaksen <frode(a)meta.com> Fixes: 72246da40f37 ("usb: Introduce DesignWare USB3 DRD Driver") Cc: stable <stable(a)kernel.org> Acked-by: Thinh Nguyen <Thinh.Nguyen(a)synopsys.com> Link: https://lore.kernel.org/r/20250403072907.448524-1-fisaksen@baylibre.com Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Xia Fukun <xiafukun(a)huawei.com> --- drivers/usb/dwc3/gadget.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/drivers/usb/dwc3/gadget.c b/drivers/usb/dwc3/gadget.c index 550eae39a63d..f29c6ecef044 100644 --- a/drivers/usb/dwc3/gadget.c +++ b/drivers/usb/dwc3/gadget.c @@ -3856,6 +3856,12 @@ static irqreturn_t dwc3_check_event_buf(struct dwc3_event_buffer *evt) if (!count) return IRQ_NONE; + if (count > evt->length) { + dev_err_ratelimited(dwc->dev, "invalid count(%u) > evt->length(%u)\n", + count, evt->length); + return IRQ_NONE; + } + evt->count = count; evt->flags |= DWC3_EVENT_PENDING; -- 2.34.1

2 1

[openeuler:OLK-6.6 3198/3198] mm/memory.c:2805: warning: Function parameter or member 'page_shift' not described in '__remap_pfn_range'
by kernel test robot 17 Nov '25

17 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: ebdf6593446d169605a079430b44abc212c60eb6 commit: 9058fc5efa4aa44340385ca69fb4ef016931af50 [3198/3198] !18961 mm: add huge pfnmap support for remap_pfn_range() config: x86_64-allnoconfig (https://download.01.org/0day-ci/archive/20251117/202511171556.lxjrabpR-lkp@…) compiler: clang version 20.1.8 (https://github.com/llvm/llvm-project 87f0227cb60147a26a1eeb4fb06e3b505e9c7261) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251117/202511171556.lxjrabpR-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511171556.lxjrabpR-lkp@intel.com/ All warnings (new ones prefixed by >>): >> mm/memory.c:2805: warning: Function parameter or member 'page_shift' not described in '__remap_pfn_range' >> mm/memory.c:2805: warning: expecting prototype for remap_pfn_range(). Prototype was for __remap_pfn_range() instead vim +2805 mm/memory.c 923e224a12462d Yin Tirui 2025-11-13 2789 74ffa5a3e68504 Christoph Hellwig 2021-04-29 2790 /** 74ffa5a3e68504 Christoph Hellwig 2021-04-29 2791 * remap_pfn_range - remap kernel memory to userspace 74ffa5a3e68504 Christoph Hellwig 2021-04-29 2792 * @vma: user vma to map to 74ffa5a3e68504 Christoph Hellwig 2021-04-29 2793 * @addr: target page aligned user address to start at 74ffa5a3e68504 Christoph Hellwig 2021-04-29 2794 * @pfn: page frame number of kernel physical memory address 74ffa5a3e68504 Christoph Hellwig 2021-04-29 2795 * @size: size of mapping area 74ffa5a3e68504 Christoph Hellwig 2021-04-29 2796 * @prot: page protection flags for this mapping 74ffa5a3e68504 Christoph Hellwig 2021-04-29 2797 * 74ffa5a3e68504 Christoph Hellwig 2021-04-29 2798 * Note: this is only safe if the mm semaphore is held when called. 74ffa5a3e68504 Christoph Hellwig 2021-04-29 2799 * 74ffa5a3e68504 Christoph Hellwig 2021-04-29 2800 * Return: %0 on success, negative error code otherwise. 74ffa5a3e68504 Christoph Hellwig 2021-04-29 2801 */ 923e224a12462d Yin Tirui 2025-11-13 2802 int __remap_pfn_range(struct vm_area_struct *vma, unsigned long addr, 923e224a12462d Yin Tirui 2025-11-13 2803 unsigned long pfn, unsigned long size, pgprot_t prot, 923e224a12462d Yin Tirui 2025-11-13 2804 unsigned int page_shift) 74ffa5a3e68504 Christoph Hellwig 2021-04-29 @2805 { 74ffa5a3e68504 Christoph Hellwig 2021-04-29 2806 int err; 74ffa5a3e68504 Christoph Hellwig 2021-04-29 2807 74ffa5a3e68504 Christoph Hellwig 2021-04-29 2808 err = track_pfn_remap(vma, &prot, pfn, addr, PAGE_ALIGN(size)); 2ab640379a0ab4 venkatesh.pallipadi(a)intel.com 2008-12-18 2809 if (err) 74ffa5a3e68504 Christoph Hellwig 2021-04-29 2810 return -EINVAL; 2ab640379a0ab4 venkatesh.pallipadi(a)intel.com 2008-12-18 2811 923e224a12462d Yin Tirui 2025-11-13 2812 err = __remap_pfn_range_notrack(vma, addr, pfn, size, prot, page_shift); 74ffa5a3e68504 Christoph Hellwig 2021-04-29 2813 if (err) 68f48381d7fdd1 Suren Baghdasaryan 2023-01-26 2814 untrack_pfn(vma, pfn, PAGE_ALIGN(size), true); ^1da177e4c3f41 Linus Torvalds 2005-04-16 2815 return err; ^1da177e4c3f41 Linus Torvalds 2005-04-16 2816 } 923e224a12462d Yin Tirui 2025-11-13 2817 :::::: The code at line 2805 was first introduced by commit :::::: 74ffa5a3e68504dd289135b1cf0422c19ffb3f2e mm: add remap_pfn_range_notrack :::::: TO: Christoph Hellwig <hch(a)lst.de> :::::: CC: Linus Torvalds <torvalds(a)linux-foundation.org> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6 0/8] xsched: XCU Partition
by Zicheng Qu 17 Nov '25

17 Nov '25

Alekseev Dmitry (2): xsched: Add XCU control group implementation and its backend in xsched CFS xsched: Add support for CFS quota for cgroups Konstantin Meskhidze (6): xsched: Add base vstream support xcu: Add base NPU driver support xsched: Introduce vstream management xsched: Add basic scheduler core support xsched: Add xsched RT class xsched: Add xsched CFS class arch/arm/include/uapi/asm/unistd.h | 1 + arch/arm64/configs/openeuler_defconfig | 1 + arch/powerpc/include/uapi/asm/unistd.h | 1 + arch/x86/configs/openeuler_defconfig | 1 + arch/x86/entry/syscalls/syscall_64.tbl | 2 +- arch/x86/include/uapi/asm/unistd.h | 1 + drivers/Makefile | 1 + drivers/xcu/Makefile | 2 + drivers/xcu/xcu_group.c | 380 ++++++++++++ include/linux/cgroup_subsys.h | 4 + include/linux/syscalls.h | 2 + include/linux/vstream.h | 91 +++ include/linux/xcu_group.h | 96 +++ include/linux/xsched.h | 514 ++++++++++++++++ include/uapi/asm-generic/unistd.h | 6 +- include/uapi/linux/xcu_vstream.h | 77 +++ init/Kconfig | 1 + kernel/Makefile | 1 + kernel/cgroup/cgroup.c | 2 +- kernel/xsched/Kconfig | 85 +++ kernel/xsched/Makefile | 7 + kernel/xsched/cfs.c | 237 ++++++++ kernel/xsched/cfs_quota.c | 98 ++++ kernel/xsched/cgroup.c | 775 +++++++++++++++++++++++++ kernel/xsched/core.c | 526 +++++++++++++++++ kernel/xsched/rt.c | 281 +++++++++ kernel/xsched/vstream.c | 674 +++++++++++++++++++++ 27 files changed, 3863 insertions(+), 4 deletions(-) create mode 100644 drivers/xcu/Makefile create mode 100644 drivers/xcu/xcu_group.c create mode 100644 include/linux/vstream.h create mode 100644 include/linux/xcu_group.h create mode 100644 include/linux/xsched.h create mode 100644 include/uapi/linux/xcu_vstream.h create mode 100644 kernel/xsched/Kconfig create mode 100644 kernel/xsched/Makefile create mode 100644 kernel/xsched/cfs.c create mode 100644 kernel/xsched/cfs_quota.c create mode 100644 kernel/xsched/cgroup.c create mode 100644 kernel/xsched/core.c create mode 100644 kernel/xsched/rt.c create mode 100644 kernel/xsched/vstream.c -- 2.34.1

2 9

[openeuler:OLK-6.6 3198/3198] mm/memory.c:2802:5: warning: no previous prototype for '__remap_pfn_range'
by kernel test robot 17 Nov '25

17 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: ebdf6593446d169605a079430b44abc212c60eb6 commit: 923e224a12462d640fa37f3069c6bfafd378ac3b [3198/3198] mm: introduce remap_pfn_range_try_pmd() for PMD-level hugepage mapping config: arm64-allnoconfig (https://download.01.org/0day-ci/archive/20251117/202511171413.zOn7Hte0-lkp@…) compiler: aarch64-linux-gcc (GCC) 15.1.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251117/202511171413.zOn7Hte0-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511171413.zOn7Hte0-lkp@intel.com/ All warnings (new ones prefixed by >>): In file included from mm/memory.c:68: include/linux/migrate.h:102:9: error: expected identifier or '(' before '{' token 102 | { return -EINVAL; } | ^ >> mm/memory.c:2802:5: warning: no previous prototype for '__remap_pfn_range' [-Wmissing-prototypes] 2802 | int __remap_pfn_range(struct vm_area_struct *vma, unsigned long addr, | ^~~~~~~~~~~~~~~~~ mm/memory.c: In function 'do_numa_page': mm/memory.c:5614:24: warning: variable 'nr_pages' set but not used [-Wunused-but-set-variable] 5614 | int flags = 0, nr_pages; | ^~~~~~~~ include/linux/migrate.h: At top level: include/linux/migrate.h:98:19: warning: 'isolate_and_migrate_folios' declared 'static' but never defined [-Wunused-function] 98 | static inline int isolate_and_migrate_folios(struct folio **folios, unsigned int nr_folios, | ^~~~~~~~~~~~~~~~~~~~~~~~~~ Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for ARCH_SUPPORTS_SCHED_SOFT_QUOTA Depends on [n]: CGROUPS [=n] Selected by [y]: - ARM64 [=y] WARNING: unmet direct dependencies detected for HALTPOLL_CPUIDLE Depends on [n]: CPU_IDLE [=n] && ARCH_CPUIDLE_HALTPOLL [=y] && ARCH_HAS_OPTIMIZED_POLL [=y] Selected by [y]: - ARM64 [=y] vim +/__remap_pfn_range +2802 mm/memory.c 2789 2790 /** 2791 * remap_pfn_range - remap kernel memory to userspace 2792 * @vma: user vma to map to 2793 * @addr: target page aligned user address to start at 2794 * @pfn: page frame number of kernel physical memory address 2795 * @size: size of mapping area 2796 * @prot: page protection flags for this mapping 2797 * 2798 * Note: this is only safe if the mm semaphore is held when called. 2799 * 2800 * Return: %0 on success, negative error code otherwise. 2801 */ > 2802 int __remap_pfn_range(struct vm_area_struct *vma, unsigned long addr, 2803 unsigned long pfn, unsigned long size, pgprot_t prot, 2804 unsigned int page_shift) 2805 { 2806 int err; 2807 2808 err = track_pfn_remap(vma, &prot, pfn, addr, PAGE_ALIGN(size)); 2809 if (err) 2810 return -EINVAL; 2811 2812 err = __remap_pfn_range_notrack(vma, addr, pfn, size, prot, page_shift); 2813 if (err) 2814 untrack_pfn(vma, pfn, PAGE_ALIGN(size), true); 2815 return err; 2816 } 2817 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3198/3198] mm/memory.c:2802:5: warning: no previous prototype for function '__remap_pfn_range'
by kernel test robot 17 Nov '25

17 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 9058fc5efa4aa44340385ca69fb4ef016931af50 commit: 923e224a12462d640fa37f3069c6bfafd378ac3b [3198/3198] mm: introduce remap_pfn_range_try_pmd() for PMD-level hugepage mapping config: x86_64-allnoconfig (https://download.01.org/0day-ci/archive/20251117/202511171230.PQsrWhhz-lkp@…) compiler: clang version 20.1.8 (https://github.com/llvm/llvm-project 87f0227cb60147a26a1eeb4fb06e3b505e9c7261) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251117/202511171230.PQsrWhhz-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511171230.PQsrWhhz-lkp@intel.com/ All warnings (new ones prefixed by >>): In file included from mm/memory.c:68: include/linux/migrate.h:102:2: error: expected identifier or '(' 102 | { return -EINVAL; } | ^ >> mm/memory.c:2802:5: warning: no previous prototype for function '__remap_pfn_range' [-Wmissing-prototypes] 2802 | int __remap_pfn_range(struct vm_area_struct *vma, unsigned long addr, | ^ mm/memory.c:2802:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 2802 | int __remap_pfn_range(struct vm_area_struct *vma, unsigned long addr, | ^ | static mm/memory.c:5614:17: warning: variable 'nr_pages' set but not used [-Wunused-but-set-variable] 5614 | int flags = 0, nr_pages; | ^ 2 warnings and 1 error generated. vim +/__remap_pfn_range +2802 mm/memory.c 2789 2790 /** 2791 * remap_pfn_range - remap kernel memory to userspace 2792 * @vma: user vma to map to 2793 * @addr: target page aligned user address to start at 2794 * @pfn: page frame number of kernel physical memory address 2795 * @size: size of mapping area 2796 * @prot: page protection flags for this mapping 2797 * 2798 * Note: this is only safe if the mm semaphore is held when called. 2799 * 2800 * Return: %0 on success, negative error code otherwise. 2801 */ > 2802 int __remap_pfn_range(struct vm_area_struct *vma, unsigned long addr, 2803 unsigned long pfn, unsigned long size, pgprot_t prot, 2804 unsigned int page_shift) 2805 { 2806 int err; 2807 2808 err = track_pfn_remap(vma, &prot, pfn, addr, PAGE_ALIGN(size)); 2809 if (err) 2810 return -EINVAL; 2811 2812 err = __remap_pfn_range_notrack(vma, addr, pfn, size, prot, page_shift); 2813 if (err) 2814 untrack_pfn(vma, pfn, PAGE_ALIGN(size), true); 2815 return err; 2816 } 2817 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6 v5 00/48] fuse:io_uring: support fuse over io_uring
by Long Li 17 Nov '25

17 Nov '25

v1 -> v2: Fix some build error for io_uring patchs. v2 -> v3: Modify kabi fixed patchs format v3 -> v4: Enable CONFIG_FUSE_IO_URING v4 -> v5: Fix patch commit message format Bernd Schubert (19): fuse: rename to fuse_dev_end_requests and make non-static fuse: Move fuse_get_dev to header file fuse: Move request bits fuse: Add fuse-io-uring design documentation fuse: make args->in_args[0] to be always the header fuse: {io-uring} Handle SQEs - register commands fuse: Make fuse_copy non static fuse: Add fuse-io-uring handling into fuse_copy fuse: {io-uring} Make hash-list req unique finding functions non-static fuse: Add io-uring sqe commit and fetch support fuse: {io-uring} Handle teardown of ring entries fuse: {io-uring} Make fuse_dev_queue_{interrupt,forget} non-static fuse: Allow to queue fg requests through io-uring fuse: Allow to queue bg requests through io-uring fuse: {io-uring} Prevent mount point hang on fuse-server termination fuse: block request allocation until io-uring init is complete fuse: enable fuse-over-io-uring fuse: prevent disabling io-uring on active connections fuse: {io-uring} Fix a possible req cancellation race Jens Axboe (1): io_uring: remove dead struct io_submit_state member Joanne Koong (2): fuse: fix uring race condition for null dereference of fc fuse: remove unneeded atomic set in uring creation Long Li (5): io_uring: fix kabi broken in struct io_tw_state io_uring: fix kabi broken in struct io_ring_ctx io_uring: fix kabi broken in struct io_submit_state io_uring: fix kabi broken for header file changed openeuler_defconfig: enable CONFIG_FUSE_IO_URING by default Luis Henriques (2): fuse: fix possible deadlock if rings are never initialized fuse: removed unused function fuse_uring_create() from header Ming Lei (3): io_uring: retain top 8bits of uring_cmd flags for kernel internal use io_uring: cancelable uring_cmd io_uring: kill dead code in io_req_complete_post Pavel Begunkov (16): io_uring: split out cmd api into a separate header io_uring/cmd: inline io_uring_cmd_do_in_task_lazy io_uring/cmd: expose iowq to cmds io_uring/cmd: give inline space in request to cmds io_uring/cmd: move io_uring_try_cancel_uring_cmd() io_uring/cmd: kill one issue_flags to tw conversion io_uring/cmd: fix tw <-> issue_flags conversion io_uring/cmd: document some uring_cmd related helpers io_uring: force tw ctx locking io_uring: remove struct io_tw_state::locked io_uring: refactor io_fill_cqe_req_aux io_uring: get rid of intermediate aux cqe caches io_uring: remove current check from complete_post io_uring: refactor io_req_complete_post() io_uring: clean up io_lockdep_assert_cq_locked io_uring/cmd: let cmds to know about dying task Documentation/filesystems/fuse-io-uring.rst | 99 ++ Documentation/filesystems/index.rst | 1 + MAINTAINERS | 1 + arch/arm64/configs/openeuler_defconfig | 1 + arch/x86/configs/openeuler_defconfig | 1 + drivers/block/ublk_drv.c | 2 +- drivers/nvme/host/ioctl.c | 2 +- fs/fuse/Kconfig | 12 + fs/fuse/Makefile | 1 + fs/fuse/dax.c | 11 +- fs/fuse/dev.c | 174 ++- fs/fuse/dev_uring.c | 1326 +++++++++++++++++++ fs/fuse/dev_uring_i.h | 205 +++ fs/fuse/dir.c | 32 +- fs/fuse/fuse_dev_i.h | 69 + fs/fuse/fuse_i.h | 35 +- fs/fuse/inode.c | 14 +- fs/fuse/xattr.c | 7 +- include/linux/io_uring.h | 73 +- include/linux/io_uring/cmd.h | 140 ++ include/linux/io_uring_types.h | 7 +- include/uapi/linux/fuse.h | 77 +- include/uapi/linux/io_uring.h | 5 +- io_uring/io_uring.c | 212 +-- io_uring/io_uring.h | 34 +- io_uring/net.c | 6 +- io_uring/poll.c | 3 +- io_uring/refs.h | 7 + io_uring/rw.c | 8 +- io_uring/timeout.c | 8 +- io_uring/uring_cmd.c | 114 +- io_uring/uring_cmd.h | 3 + security/selinux/hooks.c | 2 +- security/smack/smack_lsm.c | 2 +- 34 files changed, 2315 insertions(+), 379 deletions(-) create mode 100644 Documentation/filesystems/fuse-io-uring.rst create mode 100644 fs/fuse/dev_uring.c create mode 100644 fs/fuse/dev_uring_i.h create mode 100644 fs/fuse/fuse_dev_i.h create mode 100644 include/linux/io_uring/cmd.h -- 2.39.2

2 49

[PATCH OLK-6.6 0/8] xsched: XCU Partition
by Zicheng Qu 17 Nov '25

17 Nov '25

Alekseev Dmitry (2): xsched: Add XCU control group implementation and its backend in xsched CFS xsched: Add support for CFS quota for cgroups Konstantin Meskhidze (6): xsched: Add base vstream support xcu: Add base NPU driver support xsched: Introduce vstream management xsched: Add basic scheduler core support xsched: Add xsched RT class xsched: Add xsched CFS class arch/arm/include/uapi/asm/unistd.h | 1 + arch/arm64/configs/openeuler_defconfig | 1 + arch/powerpc/include/uapi/asm/unistd.h | 1 + arch/x86/configs/openeuler_defconfig | 1 + arch/x86/entry/syscalls/syscall_64.tbl | 2 +- arch/x86/include/uapi/asm/unistd.h | 1 + drivers/Makefile | 1 + drivers/xcu/Makefile | 2 + drivers/xcu/xcu_group.c | 380 ++++++++++++ include/linux/cgroup_subsys.h | 4 + include/linux/syscalls.h | 2 + include/linux/vstream.h | 91 +++ include/linux/xcu_group.h | 96 +++ include/linux/xsched.h | 514 ++++++++++++++++ include/uapi/asm-generic/unistd.h | 6 +- include/uapi/linux/xcu_vstream.h | 77 +++ init/Kconfig | 1 + kernel/Makefile | 1 + kernel/cgroup/cgroup.c | 2 +- kernel/xsched/Kconfig | 85 +++ kernel/xsched/Makefile | 6 + kernel/xsched/cfs.c | 237 ++++++++ kernel/xsched/cfs_quota.c | 98 ++++ kernel/xsched/cgroup.c | 775 +++++++++++++++++++++++++ kernel/xsched/core.c | 526 +++++++++++++++++ kernel/xsched/rt.c | 281 +++++++++ kernel/xsched/vstream.c | 673 +++++++++++++++++++++ 27 files changed, 3861 insertions(+), 4 deletions(-) create mode 100644 drivers/xcu/Makefile create mode 100644 drivers/xcu/xcu_group.c create mode 100644 include/linux/vstream.h create mode 100644 include/linux/xcu_group.h create mode 100644 include/linux/xsched.h create mode 100644 include/uapi/linux/xcu_vstream.h create mode 100644 kernel/xsched/Kconfig create mode 100644 kernel/xsched/Makefile create mode 100644 kernel/xsched/cfs.c create mode 100644 kernel/xsched/cfs_quota.c create mode 100644 kernel/xsched/cgroup.c create mode 100644 kernel/xsched/core.c create mode 100644 kernel/xsched/rt.c create mode 100644 kernel/xsched/vstream.c -- 2.34.1

2 9

[PATCH OLK-6.6 v4 00/48] fuse:io_uring: support fuse over io_uring
by Long Li 17 Nov '25

17 Nov '25

v1 -> v2: Fix some build error for io_uring patchs. v2 -> v3: Modify kabi fixed patchs format v3 -> v4: Enable CONFIG_FUSE_IO_URING Bernd Schubert (19): fuse: rename to fuse_dev_end_requests and make non-static fuse: Move fuse_get_dev to header file fuse: Move request bits fuse: Add fuse-io-uring design documentation fuse: make args->in_args[0] to be always the header fuse: {io-uring} Handle SQEs - register commands fuse: Make fuse_copy non static fuse: Add fuse-io-uring handling into fuse_copy fuse: {io-uring} Make hash-list req unique finding functions non-static fuse: Add io-uring sqe commit and fetch support fuse: {io-uring} Handle teardown of ring entries fuse: {io-uring} Make fuse_dev_queue_{interrupt,forget} non-static fuse: Allow to queue fg requests through io-uring fuse: Allow to queue bg requests through io-uring fuse: {io-uring} Prevent mount point hang on fuse-server termination fuse: block request allocation until io-uring init is complete fuse: enable fuse-over-io-uring fuse: prevent disabling io-uring on active connections fuse: {io-uring} Fix a possible req cancellation race Jens Axboe (1): io_uring: remove dead struct io_submit_state member Joanne Koong (2): fuse: fix uring race condition for null dereference of fc fuse: remove unneeded atomic set in uring creation Long Li (5): io_uring: fix kabi broken in struct io_tw_state io_uring: fix kabi broken in struct io_ring_ctx io_uring: fix kabi broken in struct io_submit_state io_uring: fix kabi broken for header file changed openeuler_defconfig: enable CONFIG_FUSE_IO_URING by default Luis Henriques (2): fuse: fix possible deadlock if rings are never initialized fuse: removed unused function fuse_uring_create() from header Ming Lei (3): io_uring: retain top 8bits of uring_cmd flags for kernel internal use io_uring: cancelable uring_cmd io_uring: kill dead code in io_req_complete_post Pavel Begunkov (16): io_uring: split out cmd api into a separate header io_uring/cmd: inline io_uring_cmd_do_in_task_lazy io_uring/cmd: expose iowq to cmds io_uring/cmd: give inline space in request to cmds io_uring/cmd: move io_uring_try_cancel_uring_cmd() io_uring/cmd: kill one issue_flags to tw conversion io_uring/cmd: fix tw <-> issue_flags conversion io_uring/cmd: document some uring_cmd related helpers io_uring: force tw ctx locking io_uring: remove struct io_tw_state::locked io_uring: refactor io_fill_cqe_req_aux io_uring: get rid of intermediate aux cqe caches io_uring: remove current check from complete_post io_uring: refactor io_req_complete_post() io_uring: clean up io_lockdep_assert_cq_locked io_uring/cmd: let cmds to know about dying task Documentation/filesystems/fuse-io-uring.rst | 99 ++ Documentation/filesystems/index.rst | 1 + MAINTAINERS | 1 + arch/arm64/configs/openeuler_defconfig | 1 + arch/x86/configs/openeuler_defconfig | 1 + drivers/block/ublk_drv.c | 2 +- drivers/nvme/host/ioctl.c | 2 +- fs/fuse/Kconfig | 12 + fs/fuse/Makefile | 1 + fs/fuse/dax.c | 11 +- fs/fuse/dev.c | 174 ++- fs/fuse/dev_uring.c | 1326 +++++++++++++++++++ fs/fuse/dev_uring_i.h | 205 +++ fs/fuse/dir.c | 32 +- fs/fuse/fuse_dev_i.h | 69 + fs/fuse/fuse_i.h | 35 +- fs/fuse/inode.c | 14 +- fs/fuse/xattr.c | 7 +- include/linux/io_uring.h | 73 +- include/linux/io_uring/cmd.h | 140 ++ include/linux/io_uring_types.h | 7 +- include/uapi/linux/fuse.h | 77 +- include/uapi/linux/io_uring.h | 5 +- io_uring/io_uring.c | 212 +-- io_uring/io_uring.h | 34 +- io_uring/net.c | 6 +- io_uring/poll.c | 3 +- io_uring/refs.h | 7 + io_uring/rw.c | 8 +- io_uring/timeout.c | 8 +- io_uring/uring_cmd.c | 114 +- io_uring/uring_cmd.h | 3 + security/selinux/hooks.c | 2 +- security/smack/smack_lsm.c | 2 +- 34 files changed, 2315 insertions(+), 379 deletions(-) create mode 100644 Documentation/filesystems/fuse-io-uring.rst create mode 100644 fs/fuse/dev_uring.c create mode 100644 fs/fuse/dev_uring_i.h create mode 100644 fs/fuse/fuse_dev_i.h create mode 100644 include/linux/io_uring/cmd.h -- 2.39.2

2 49

[PATCH OLK-6.6 0/2] CVE-2025-40169
by Pu Lehui 17 Nov '25

17 Nov '25

Eduard Zingerman (1): selftests/bpf: Add tests for rejection of ALU ops with negative offsets Yazhou Tang (1): bpf: Reject negative offsets for ALU ops kernel/bpf/verifier.c | 4 +-- .../bpf/progs/verifier_value_illegal_alu.c | 29 +++++++++++++++++++ 2 files changed, 31 insertions(+), 2 deletions(-) -- 2.34.1

2 3

[PATCH OLK-6.6 0/8] xsched: XCU Partition
by Zicheng Qu 17 Nov '25

17 Nov '25

Alekseev Dmitry (2): xsched: Add XCU control group implementation and its backend in xsched CFS xsched: Add support for CFS quota for cgroups Konstantin Meskhidze (6): xsched: Add base vstream support xcu: Add base NPU driver support xsched: Introduce vstream management xsched: Add basic scheduler core support xsched: Add xsched RT class xsched: Add xsched CFS class arch/arm/include/uapi/asm/unistd.h | 1 + arch/arm64/configs/openeuler_defconfig | 1 + arch/powerpc/include/uapi/asm/unistd.h | 1 + arch/x86/configs/openeuler_defconfig | 1 + arch/x86/entry/syscalls/syscall_64.tbl | 2 +- arch/x86/include/uapi/asm/unistd.h | 1 + drivers/Makefile | 1 + drivers/xcu/Makefile | 2 + drivers/xcu/xcu_group.c | 380 ++++++++++++ include/linux/cgroup_subsys.h | 4 + include/linux/syscalls.h | 2 + include/linux/vstream.h | 91 +++ include/linux/xcu_group.h | 96 +++ include/linux/xsched.h | 514 ++++++++++++++++ include/uapi/asm-generic/unistd.h | 6 +- include/uapi/linux/xcu_vstream.h | 77 +++ init/Kconfig | 1 + kernel/Makefile | 1 + kernel/cgroup/cgroup.c | 2 +- kernel/xsched/Kconfig | 85 +++ kernel/xsched/Makefile | 6 + kernel/xsched/cfs.c | 237 ++++++++ kernel/xsched/cfs_quota.c | 98 ++++ kernel/xsched/cgroup.c | 775 +++++++++++++++++++++++++ kernel/xsched/core.c | 526 +++++++++++++++++ kernel/xsched/rt.c | 281 +++++++++ kernel/xsched/vstream.c | 666 +++++++++++++++++++++ 27 files changed, 3854 insertions(+), 4 deletions(-) create mode 100644 drivers/xcu/Makefile create mode 100644 drivers/xcu/xcu_group.c create mode 100644 include/linux/vstream.h create mode 100644 include/linux/xcu_group.h create mode 100644 include/linux/xsched.h create mode 100644 include/uapi/linux/xcu_vstream.h create mode 100644 kernel/xsched/Kconfig create mode 100644 kernel/xsched/Makefile create mode 100644 kernel/xsched/cfs.c create mode 100644 kernel/xsched/cfs_quota.c create mode 100644 kernel/xsched/cgroup.c create mode 100644 kernel/xsched/core.c create mode 100644 kernel/xsched/rt.c create mode 100644 kernel/xsched/vstream.c -- 2.34.1

2 9

[PATCH OLK-6.6 0/8] xsched: XCU Partition
by Zicheng Qu 17 Nov '25

17 Nov '25

Alekseev Dmitry (2): xsched: Add XCU control group implementation and its backend in xsched CFS xsched: Add support for CFS quota for cgroups Konstantin Meskhidze (6): xsched: Add base vstream support xcu: Add base NPU driver support xsched: Introduce vstream management xsched: Add basic scheduler core support xsched: Add xsched RT class xsched: Add xsched CFS class arch/arm/include/uapi/asm/unistd.h | 1 + arch/arm64/configs/openeuler_defconfig | 1 + arch/powerpc/include/uapi/asm/unistd.h | 1 + arch/x86/configs/openeuler_defconfig | 1 + arch/x86/entry/syscalls/syscall_64.tbl | 2 +- arch/x86/include/uapi/asm/unistd.h | 1 + drivers/Makefile | 1 + drivers/xcu/Makefile | 2 + drivers/xcu/xcu_group.c | 380 ++++++++++++ include/linux/cgroup_subsys.h | 4 + include/linux/syscalls.h | 2 + include/linux/vstream.h | 91 +++ include/linux/xcu_group.h | 96 +++ include/linux/xsched.h | 514 ++++++++++++++++ include/uapi/asm-generic/unistd.h | 6 +- include/uapi/linux/xcu_vstream.h | 77 +++ init/Kconfig | 1 + kernel/Makefile | 1 + kernel/cgroup/cgroup.c | 2 +- kernel/xsched/Kconfig | 85 +++ kernel/xsched/Makefile | 6 + kernel/xsched/cfs.c | 237 ++++++++ kernel/xsched/cfs_quota.c | 98 ++++ kernel/xsched/cgroup.c | 776 +++++++++++++++++++++++++ kernel/xsched/core.c | 526 +++++++++++++++++ kernel/xsched/rt.c | 281 +++++++++ kernel/xsched/vstream.c | 666 +++++++++++++++++++++ 27 files changed, 3855 insertions(+), 4 deletions(-) create mode 100644 drivers/xcu/Makefile create mode 100644 drivers/xcu/xcu_group.c create mode 100644 include/linux/vstream.h create mode 100644 include/linux/xcu_group.h create mode 100644 include/linux/xsched.h create mode 100644 include/uapi/linux/xcu_vstream.h create mode 100644 kernel/xsched/Kconfig create mode 100644 kernel/xsched/Makefile create mode 100644 kernel/xsched/cfs.c create mode 100644 kernel/xsched/cfs_quota.c create mode 100644 kernel/xsched/cgroup.c create mode 100644 kernel/xsched/core.c create mode 100644 kernel/xsched/rt.c create mode 100644 kernel/xsched/vstream.c -- 2.34.1

2 9

[PATCH OLK-6.6 v3 00/46] fuse:io_uring: support fuse over io_uring
by Long Li 17 Nov '25

17 Nov '25

v1 -> v2: Fix some build error for io_uring patchs. v2 -> v3: Modify kabi fixed patchs format Bernd Schubert (19): fuse: rename to fuse_dev_end_requests and make non-static fuse: Move fuse_get_dev to header file fuse: Move request bits fuse: Add fuse-io-uring design documentation fuse: make args->in_args[0] to be always the header fuse: {io-uring} Handle SQEs - register commands fuse: Make fuse_copy non static fuse: Add fuse-io-uring handling into fuse_copy fuse: {io-uring} Make hash-list req unique finding functions non-static fuse: Add io-uring sqe commit and fetch support fuse: {io-uring} Handle teardown of ring entries fuse: {io-uring} Make fuse_dev_queue_{interrupt,forget} non-static fuse: Allow to queue fg requests through io-uring fuse: Allow to queue bg requests through io-uring fuse: {io-uring} Prevent mount point hang on fuse-server termination fuse: block request allocation until io-uring init is complete fuse: enable fuse-over-io-uring fuse: prevent disabling io-uring on active connections fuse: {io-uring} Fix a possible req cancellation race Jens Axboe (1): io_uring: remove dead struct io_submit_state member Joanne Koong (2): fuse: fix uring race condition for null dereference of fc fuse: remove unneeded atomic set in uring creation Long Li (4): io_uring: fix kabi broken in struct io_tw_state io_uring: fix kabi broken in struct io_ring_ctx io_uring: fix kabi broken in struct io_submit_state io_uring: fix kabi broken for header file changed Luis Henriques (2): fuse: fix possible deadlock if rings are never initialized fuse: removed unused function fuse_uring_create() from header Ming Lei (2): io_uring: retain top 8bits of uring_cmd flags for kernel internal use io_uring: cancelable uring_cmd Pavel Begunkov (16): io_uring: split out cmd api into a separate header io_uring/cmd: inline io_uring_cmd_do_in_task_lazy io_uring/cmd: expose iowq to cmds io_uring/cmd: give inline space in request to cmds io_uring/cmd: move io_uring_try_cancel_uring_cmd() io_uring/cmd: kill one issue_flags to tw conversion io_uring/cmd: fix tw <-> issue_flags conversion io_uring/cmd: document some uring_cmd related helpers io_uring: force tw ctx locking io_uring: remove struct io_tw_state::locked io_uring: refactor io_fill_cqe_req_aux io_uring: get rid of intermediate aux cqe caches io_uring: remove current check from complete_post io_uring: refactor io_req_complete_post() io_uring: clean up io_lockdep_assert_cq_locked io_uring/cmd: let cmds to know about dying task Documentation/filesystems/fuse-io-uring.rst | 99 ++ Documentation/filesystems/index.rst | 1 + MAINTAINERS | 1 + drivers/block/ublk_drv.c | 2 +- drivers/nvme/host/ioctl.c | 2 +- fs/fuse/Kconfig | 12 + fs/fuse/Makefile | 1 + fs/fuse/dax.c | 11 +- fs/fuse/dev.c | 174 ++- fs/fuse/dev_uring.c | 1326 +++++++++++++++++++ fs/fuse/dev_uring_i.h | 205 +++ fs/fuse/dir.c | 32 +- fs/fuse/fuse_dev_i.h | 69 + fs/fuse/fuse_i.h | 35 +- fs/fuse/inode.c | 14 +- fs/fuse/xattr.c | 7 +- include/linux/io_uring.h | 73 +- include/linux/io_uring/cmd.h | 140 ++ include/linux/io_uring_types.h | 7 +- include/uapi/linux/fuse.h | 77 +- include/uapi/linux/io_uring.h | 5 +- io_uring/io_uring.c | 175 +-- io_uring/io_uring.h | 34 +- io_uring/net.c | 6 +- io_uring/poll.c | 3 +- io_uring/rw.c | 8 +- io_uring/timeout.c | 8 +- io_uring/uring_cmd.c | 114 +- io_uring/uring_cmd.h | 3 + security/selinux/hooks.c | 2 +- security/smack/smack_lsm.c | 2 +- 31 files changed, 2304 insertions(+), 344 deletions(-) create mode 100644 Documentation/filesystems/fuse-io-uring.rst create mode 100644 fs/fuse/dev_uring.c create mode 100644 fs/fuse/dev_uring_i.h create mode 100644 fs/fuse/fuse_dev_i.h create mode 100644 include/linux/io_uring/cmd.h -- 2.39.2

2 47

[PATCH OLK-6.6] blk-ioinf: fix division by zero caused by inflight overflow in ioinf_qos_write()
by Baokun Li 17 Nov '25

17 Nov '25

hulk inclusion category: feature bugzilla: https://gitee.com/openeuler/kernel/issues/ID0C1D -------------------------------- Within ioinf_qos_write(), the value provided from user space is stored as s64, whereas params.inflight is defined as u32. If user space supplies inflight=4294967296, the assignment causes params.inflight to overflow to 0, subsequently triggering a divide-by-zero error. To prevent this, inflight values exceeding UINT_MAX are disallowed. Fixes: a63e78514d11 ("blk-ioinf: introduce inflight-based IO QoS controller") Signed-off-by: Baokun Li <libaokun1(a)huawei.com> --- block/blk-ioinf.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/block/blk-ioinf.c b/block/blk-ioinf.c index 341be115f1d6..7432d88bf1f0 100644 --- a/block/blk-ioinf.c +++ b/block/blk-ioinf.c @@ -1144,7 +1144,7 @@ static ssize_t ioinf_qos_write(struct kernfs_open_file *of, char *input, params.enabled = !!v; continue; case INF_INFLIGHT: - if (match_u64(&args[0], &v) || v == 0) + if (match_u64(&args[0], &v) || v == 0 || v > UINT_MAX) goto einval; params.inflight = v; continue; -- 2.46.1

2 1