- Kernel - mailweb.openeuler.org

[PATCH OLK-6.6 00/15] fuse: Backport Anolis Features and Performance patches
by Wang Zhaolong 22 May '25

22 May '25

Hou Tao (1): fuse: set FR_PENDING atomically in fuse_resend() Jiachen Zhang (1): fuse: remove an unnecessary if statement Jingbo Xu (3): fuse: add support for explicit export disabling anolis: fuse: separate bg_queue for write and other requests anolis: fuse: introduce write alignment Joanne Koong (2): fuse: check aborted connection before adding requests to pending list for resending fuse: enable dynamic configuration of fuse max pages limit (FUSE_MAX_MAX_PAGES) Josef Bacik (1): fuse: use fuse_range_is_writeback() instead of iterating pages Kemeng Shi (1): fuse: remove unneeded lock which protecting update of congestion_threshold Miklos Szeredi (2): fuse: cleanup request queuing towards virtiofs fuse: clear FR_PENDING if abort is detected when sending request Richard Fung (1): fuse: Add initial support for fs-verity Zhao Chen (2): fuse: Introduce a new notification type for resend pending requests fuse: Use the high bit of request ID for indicating resend requests yangyun (1): fuse: add fast path for fuse_range_is_writeback Documentation/admin-guide/sysctl/fs.rst | 10 + fs/fuse/Makefile | 1 + fs/fuse/control.c | 6 +- fs/fuse/dev.c | 291 +++++++++++++++++------- fs/fuse/file.c | 26 ++- fs/fuse/fuse_i.h | 58 +++-- fs/fuse/inode.c | 39 +++- fs/fuse/ioctl.c | 62 +++++ fs/fuse/sysctl.c | 40 ++++ fs/fuse/virtio_fs.c | 41 ++-- include/uapi/linux/fuse.h | 22 ++ 11 files changed, 451 insertions(+), 145 deletions(-) create mode 100644 fs/fuse/sysctl.c -- 2.34.3

2 16

[PATCH openEuler-1.0-LTS V1] HID: hyperv: fix possible memory leak in mousevsc_probe()
by Cheng Yu 22 May '25

22 May '25

From: Yang Yingliang <yangyingliang(a)huawei.com> stable inclusion from stable-v4.19.267 commit a6d2fb1874c52ace1f5cf1966ee558829c5c19b6 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IC5BRS CVE: CVE-2022-49874 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit b5bcb94b0954a026bbd671741fdb00e7141f9c91 ] If hid_add_device() returns error, it should call hid_destroy_device() to free hid_dev which is allocated in hid_allocate_device(). Fixes: 74c4fb058083 ("HID: hv_mouse: Properly add the hid device") Signed-off-by: Yang Yingliang <yangyingliang(a)huawei.com> Reviewed-by: Wei Liu <wei.liu(a)kernel.org> Signed-off-by: Jiri Kosina <jkosina(a)suse.cz> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Cheng Yu <serein.chengyu(a)huawei.com> --- drivers/hid/hid-hyperv.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/hid/hid-hyperv.c b/drivers/hid/hid-hyperv.c index 4d1496f60071..8f2bf70218bf 100644 --- a/drivers/hid/hid-hyperv.c +++ b/drivers/hid/hid-hyperv.c @@ -500,7 +500,7 @@ static int mousevsc_probe(struct hv_device *device, ret = hid_add_device(hid_dev); if (ret) - goto probe_err1; + goto probe_err2; ret = hid_parse(hid_dev); -- 2.25.1

2 1

[PATCH OLK-6.6 V1] gpio: rcar: Use raw_spinlock to protect register access
by Cheng Yu 22 May '25

22 May '25

From: Niklas Söderlund <niklas.soderlund+renesas(a)ragnatech.se> stable inclusion from stable-v6.6.83 commit c10365031f16514a29c812cd909085a6e4ea4b61 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IBY446 CVE: CVE-2025-21912 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit f02c41f87cfe61440c18bf77d1ef0a884b9ee2b5 upstream. Use raw_spinlock in order to fix spurious messages about invalid context when spinlock debugging is enabled. The lock is only used to serialize register access. [ 4.239592] ============================= [ 4.239595] [ BUG: Invalid wait context ] [ 4.239599] 6.13.0-rc7-arm64-renesas-05496-gd088502a519f #35 Not tainted [ 4.239603] ----------------------------- [ 4.239606] kworker/u8:5/76 is trying to lock: [ 4.239609] ffff0000091898a0 (&p->lock){....}-{3:3}, at: gpio_rcar_config_interrupt_input_mode+0x34/0x164 [ 4.239641] other info that might help us debug this: [ 4.239643] context-{5:5} [ 4.239646] 5 locks held by kworker/u8:5/76: [ 4.239651] #0: ffff0000080fb148 ((wq_completion)async){+.+.}-{0:0}, at: process_one_work+0x190/0x62c [ 4.250180] OF: /soc/sound@ec500000/ports/port@0/endpoint: Read of boolean property 'frame-master' with a value. [ 4.254094] #1: ffff80008299bd80 ((work_completion)(&entry->work)){+.+.}-{0:0}, at: process_one_work+0x1b8/0x62c [ 4.254109] #2: ffff00000920c8f8 [ 4.258345] OF: /soc/sound@ec500000/ports/port@1/endpoint: Read of boolean property 'bitclock-master' with a value. [ 4.264803] (&dev->mutex){....}-{4:4}, at: __device_attach_async_helper+0x3c/0xdc [ 4.264820] #3: ffff00000a50ca40 (request_class#2){+.+.}-{4:4}, at: __setup_irq+0xa0/0x690 [ 4.264840] #4: [ 4.268872] OF: /soc/sound@ec500000/ports/port@1/endpoint: Read of boolean property 'frame-master' with a value. [ 4.273275] ffff00000a50c8c8 (lock_class){....}-{2:2}, at: __setup_irq+0xc4/0x690 [ 4.296130] renesas_sdhi_internal_dmac ee100000.mmc: mmc1 base at 0x00000000ee100000, max clock rate 200 MHz [ 4.304082] stack backtrace: [ 4.304086] CPU: 1 UID: 0 PID: 76 Comm: kworker/u8:5 Not tainted 6.13.0-rc7-arm64-renesas-05496-gd088502a519f #35 [ 4.304092] Hardware name: Renesas Salvator-X 2nd version board based on r8a77965 (DT) [ 4.304097] Workqueue: async async_run_entry_fn [ 4.304106] Call trace: [ 4.304110] show_stack+0x14/0x20 (C) [ 4.304122] dump_stack_lvl+0x6c/0x90 [ 4.304131] dump_stack+0x14/0x1c [ 4.304138] __lock_acquire+0xdfc/0x1584 [ 4.426274] lock_acquire+0x1c4/0x33c [ 4.429942] _raw_spin_lock_irqsave+0x5c/0x80 [ 4.434307] gpio_rcar_config_interrupt_input_mode+0x34/0x164 [ 4.440061] gpio_rcar_irq_set_type+0xd4/0xd8 [ 4.444422] __irq_set_trigger+0x5c/0x178 [ 4.448435] __setup_irq+0x2e4/0x690 [ 4.452012] request_threaded_irq+0xc4/0x190 [ 4.456285] devm_request_threaded_irq+0x7c/0xf4 [ 4.459398] ata1: link resume succeeded after 1 retries [ 4.460902] mmc_gpiod_request_cd_irq+0x68/0xe0 [ 4.470660] mmc_start_host+0x50/0xac [ 4.474327] mmc_add_host+0x80/0xe4 [ 4.477817] tmio_mmc_host_probe+0x2b0/0x440 [ 4.482094] renesas_sdhi_probe+0x488/0x6f4 [ 4.486281] renesas_sdhi_internal_dmac_probe+0x60/0x78 [ 4.491509] platform_probe+0x64/0xd8 [ 4.495178] really_probe+0xb8/0x2a8 [ 4.498756] __driver_probe_device+0x74/0x118 [ 4.503116] driver_probe_device+0x3c/0x154 [ 4.507303] __device_attach_driver+0xd4/0x160 [ 4.511750] bus_for_each_drv+0x84/0xe0 [ 4.515588] __device_attach_async_helper+0xb0/0xdc [ 4.520470] async_run_entry_fn+0x30/0xd8 [ 4.524481] process_one_work+0x210/0x62c [ 4.528494] worker_thread+0x1ac/0x340 [ 4.532245] kthread+0x10c/0x110 [ 4.535476] ret_from_fork+0x10/0x20 Signed-off-by: Niklas Söderlund <niklas.soderlund+renesas(a)ragnatech.se> Reviewed-by: Geert Uytterhoeven <geert+renesas(a)glider.be> Tested-by: Geert Uytterhoeven <geert+renesas(a)glider.be> Cc: stable(a)vger.kernel.org Link: https://lore.kernel.org/r/20250121135833.3769310-1-niklas.soderlund+renesas… Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Cheng Yu <serein.chengyu(a)huawei.com> --- drivers/gpio/gpio-rcar.c | 24 ++++++++++++------------ 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/drivers/gpio/gpio-rcar.c b/drivers/gpio/gpio-rcar.c index 86e69cde04da..170798025d6e 100644 --- a/drivers/gpio/gpio-rcar.c +++ b/drivers/gpio/gpio-rcar.c @@ -40,7 +40,7 @@ struct gpio_rcar_info { struct gpio_rcar_priv { void __iomem *base; - spinlock_t lock; + raw_spinlock_t lock; struct device *dev; struct gpio_chip gpio_chip; unsigned int irq_parent; @@ -123,7 +123,7 @@ static void gpio_rcar_config_interrupt_input_mode(struct gpio_rcar_priv *p, * "Setting Level-Sensitive Interrupt Input Mode" */ - spin_lock_irqsave(&p->lock, flags); + raw_spin_lock_irqsave(&p->lock, flags); /* Configure positive or negative logic in POSNEG */ gpio_rcar_modify_bit(p, POSNEG, hwirq, !active_high_rising_edge); @@ -142,7 +142,7 @@ static void gpio_rcar_config_interrupt_input_mode(struct gpio_rcar_priv *p, if (!level_trigger) gpio_rcar_write(p, INTCLR, BIT(hwirq)); - spin_unlock_irqrestore(&p->lock, flags); + raw_spin_unlock_irqrestore(&p->lock, flags); } static int gpio_rcar_irq_set_type(struct irq_data *d, unsigned int type) @@ -246,7 +246,7 @@ static void gpio_rcar_config_general_input_output_mode(struct gpio_chip *chip, * "Setting General Input Mode" */ - spin_lock_irqsave(&p->lock, flags); + raw_spin_lock_irqsave(&p->lock, flags); /* Configure positive logic in POSNEG */ gpio_rcar_modify_bit(p, POSNEG, gpio, false); @@ -261,7 +261,7 @@ static void gpio_rcar_config_general_input_output_mode(struct gpio_chip *chip, if (p->info.has_outdtsel && output) gpio_rcar_modify_bit(p, OUTDTSEL, gpio, false); - spin_unlock_irqrestore(&p->lock, flags); + raw_spin_unlock_irqrestore(&p->lock, flags); } static int gpio_rcar_request(struct gpio_chip *chip, unsigned offset) @@ -347,7 +347,7 @@ static int gpio_rcar_get_multiple(struct gpio_chip *chip, unsigned long *mask, return 0; } - spin_lock_irqsave(&p->lock, flags); + raw_spin_lock_irqsave(&p->lock, flags); outputs = gpio_rcar_read(p, INOUTSEL); m = outputs & bankmask; if (m) @@ -356,7 +356,7 @@ static int gpio_rcar_get_multiple(struct gpio_chip *chip, unsigned long *mask, m = ~outputs & bankmask; if (m) val |= gpio_rcar_read(p, INDT) & m; - spin_unlock_irqrestore(&p->lock, flags); + raw_spin_unlock_irqrestore(&p->lock, flags); bits[0] = val; return 0; @@ -367,9 +367,9 @@ static void gpio_rcar_set(struct gpio_chip *chip, unsigned offset, int value) struct gpio_rcar_priv *p = gpiochip_get_data(chip); unsigned long flags; - spin_lock_irqsave(&p->lock, flags); + raw_spin_lock_irqsave(&p->lock, flags); gpio_rcar_modify_bit(p, OUTDT, offset, value); - spin_unlock_irqrestore(&p->lock, flags); + raw_spin_unlock_irqrestore(&p->lock, flags); } static void gpio_rcar_set_multiple(struct gpio_chip *chip, unsigned long *mask, @@ -386,12 +386,12 @@ static void gpio_rcar_set_multiple(struct gpio_chip *chip, unsigned long *mask, if (!bankmask) return; - spin_lock_irqsave(&p->lock, flags); + raw_spin_lock_irqsave(&p->lock, flags); val = gpio_rcar_read(p, OUTDT); val &= ~bankmask; val |= (bankmask & bits[0]); gpio_rcar_write(p, OUTDT, val); - spin_unlock_irqrestore(&p->lock, flags); + raw_spin_unlock_irqrestore(&p->lock, flags); } static int gpio_rcar_direction_output(struct gpio_chip *chip, unsigned offset, @@ -505,7 +505,7 @@ static int gpio_rcar_probe(struct platform_device *pdev) return -ENOMEM; p->dev = dev; - spin_lock_init(&p->lock); + raw_spin_lock_init(&p->lock); /* Get device configuration from DT node */ ret = gpio_rcar_parse_dt(p, &npins); -- 2.25.1

2 1

[PATCH OLK-6.6 V1] drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create()
by Cheng Yu 22 May '25

22 May '25

From: Xu Wang <vulab(a)iscas.ac.cn> stable inclusion from stable-v6.6.88 commit f8693e1bae9c08233a2f535c3f412e157df32b33 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IC7932 CVE: CVE-2025-37852 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 1435e895d4fc967d64e9f5bf81e992ac32f5ac76 ] Add error handling to propagate amdgpu_cgs_create_device() failures to the caller. When amdgpu_cgs_create_device() fails, release hwmgr and return -ENOMEM to prevent null pointer dereference. [v1]->[v2]: Change error code from -EINVAL to -ENOMEM. Free hwmgr. Signed-off-by: Wentao Liang <vulab(a)iscas.ac.cn> Signed-off-by: Alex Deucher <alexander.deucher(a)amd.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Cheng Yu <serein.chengyu(a)huawei.com> --- drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c b/drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c index 86f95a291d65..bef6578ac4bf 100644 --- a/drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c +++ b/drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c @@ -51,6 +51,11 @@ static int amd_powerplay_create(struct amdgpu_device *adev) hwmgr->adev = adev; hwmgr->not_vf = !amdgpu_sriov_vf(adev); hwmgr->device = amdgpu_cgs_create_device(adev); + if (!hwmgr->device) { + kfree(hwmgr); + return -ENOMEM; + } + mutex_init(&hwmgr->msg_lock); hwmgr->chip_family = adev->family; hwmgr->chip_id = adev->asic_type; -- 2.25.1

2 1

[PATCH OLK-6.6] arm64/mpam: Add MPAM manual
by Zeng Heng 22 May '25

22 May '25

hulk inclusion category: feature bugzilla: https://gitee.com/openeuler/kernel/issues/IC88OM -------------------------------- Add user manual for the MPAM features. Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- Documentation/arch/arm64/mpam.md | 587 +++++++++++++++++++++++++++++++ 1 file changed, 587 insertions(+) create mode 100644 Documentation/arch/arm64/mpam.md diff --git a/Documentation/arch/arm64/mpam.md b/Documentation/arch/arm64/mpam.md new file mode 100644 index 000000000000..f7f657f99f97 --- /dev/null +++ b/Documentation/arch/arm64/mpam.md @@ -0,0 +1,587 @@ +MPAM 用户手册 +========= + +# 1 MPAM 简介 + +MPAM（Memory system component Partioning and Monitoring）是Arm Architecture v8.4的拓展特性。用于解决服务器系统中，混合部署不同类型业务时，由于共享资源的竞争（L3/L2 Cache，MATA），而带来的关键应用性能下降或者系统整体性能下降问题。 + +MPAM的应用可针对不同业务，将同时作用于硬件访存路径上产生的竞争和冲突进行隔离控制，从而帮助提升服务器利用率，降低服务部署成本。 + +本手册只适用于OLK-6.6软件版本。 + +# 2 内核编译选项 + +配置 CONFIG_ARM64_MPAM=y 后，即使能MPAM完整功能。 + +# 3 内核启动参数 + +启动流程默认关闭MPAM，启动MPAM初始化需要**cmdline**添加**arm64.mpam**参数配置后重启机器。 + +# 3 接口总览 + +MPAM功能通过resctrl文件系统呈现，挂载点位于 */sys/fs/resctrl* 。系统启动后，需要手动挂载resctrl文件系统。 + +## 3.1 系统挂载参数 + +resctrl可以通过添加挂载参数支持多种挂载方式，具体指令如下： + +~~~ +# mount -t resctrl resctrl [-o cdp[,cdpl2][,debug][,l2]] /sys/fs/resctrl +~~~ + +挂载参数包括： + +* cdp: 针对L3缓存，根据访问指令和访问数据分别配置。 +* cdpl2: 针对L2缓存，根据访问指令和访问数据分别配置。 +* debug: 使能调试接口访问。 +* l2: 使能L2缓存配置和监控功能，默认关闭MPAM L2功能。 + +## 3.2 resctrl 系统目录介绍 + +### 3.2.1 Info 目录 + +Info 目录包含有关已启用资源的信息，每个资源都有其自己的子目录，子目录的名称反映了资源的名称。 + +每个子目录包含以下与分配相关的文件： + +缓存资源（L3/L2）子目录包含以下与分配相关的文件： + +**num_closids**: 适用于该资源的有效CLOSID（Class of Service ID）数量。内核会以所有已启用资源中最小的CLOSID数量作为限制。 + +**cbm_mask**: 适用于该资源的有效位掩码（bitmask）。 + +**min_cbm_bits**: 写入掩码时必须设置的连续位的最小数量。 + +**shareable_bits**: 与其他执行实体共享资源的位掩码。用户在设置独占缓存分区时可以使用此字段。 + +**bit_usage**: 标注了资源所有实例的使用情况的容量位掩码。说明如下： + + * *0*: 对应区域未使用。当系统的资源已被分配，且在“bit_usage”中发现“0”时，这表明资源被浪费了。 + + * *H*: 对应区域仅由硬件使用，但可供软件使用。如果资源的“shareable_bits”中有位被设置，但这些位并未全部出现在资源组的分配方案中，则“shareable_bits”中出现但未分配给资源组的位将被标记为“H”。 + + * *X*: 对应区域可供共享，并被硬件和软件使用。这些位同时出现在“shareable_bits”和资源组的分配中。 + + * *S*: 对应区域由软件使用，并可供共享。 + + * *E*: 对应区域被一个资源组独占使用，不允许共享。 + +**sparse_masks**: 指示是否支持CBM（Capacity Bit Mask）中的非连续1值。 + + * *0*: 仅支持CBM中的连续1值。 + + * *1*: 支持CBM中的非连续1值。 + +MB（Memory bandwidth，内存带宽）子目录包含以下与分配相关的文件： + +**min_bandwidth**: 用户可以请求的最小内存带宽百分比。 + +**bandwidth_gran**: 内存带宽百分比分配的粒度。分配的带宽百分比会四舍五入到硬件上可用的下一个控制步长。可用的带宽控制步长为： +~~~ +min_bandwidth + N * bandwidth_gran +~~~ + +**delay_linear**: 指示延迟刻度是线性还是非线性的。该字段仅用于信息参考。 + +如果支持监控功能，则会存在一个名为 L3_MON 和 MB_MON 的目录，其中包含以下文件： + +**num_rmids**: 可用的RMID（Resource Monitoring ID）数量。这是可以创建的“CTRL_MON”+“MON”组的最大数量。 + +**mon_features**: 如果为该资源启用了监控功能，则列出监控事件。例如： +~~~ +# grep . /sys/fs/resctrl/info/*_MON/mon_features +/sys/fs/resctrl/info/L3_MON/mon_features:llc_occupancy +/sys/fs/resctrl/info/MB_MON/mon_features:mbm_total_bytes +~~~ + +**max_threshold_occupancy**: 读/写文件，提供一个最大值（以字节为单位），低于此设定值下，之前使用过的LLC_occupancy计数器可以被考虑重新分配使用。 + +> 请注意，一旦释放了RMID（资源监控ID），它可能不会立即可用，因为RMID仍然与之前使用该RMID的缓存行相关联。因此，这些RMID会被放入一个“待定”列表中，并在缓存占用量降低后再次检查。如果系统中存在大量处于“待定”状态的RMID，但它们尚未准备好被使用，用户在执行mkdir操作时可能会看到-EBUSY错误。 + +> max_threshold_occupancy是一个用户可配置的值，用于确定在什么占用量下可以释放一个RMID。 + +最后，在 Info 目录的顶层有一个名为 **last_cmd_status** 的文件。每次通过文件系统发出“命令”（例如创建新目录或写入任何控制文件）时，该文件都会被重置。如果命令成功，文件内容将显示为“ok”。如果命令失败，它将提供比文件操作错误返回更详细的信息。例如： +~~~ +# echo "MB:1=110" > schemata +-bash: echo: write error: Invalid argument +# cat /sys/fs/resctrl/info/last_cmd_status +MB value 110 out of range [0,100] +~~~ + +### 3.2.2 资源分配和监控 + +资源组在resctrl文件系统中以目录的形式表示。默认组是根目录，刚挂载后，它拥有系统中的所有任务和CPU，并且可以充分利用所有资源。 + +在支持RDT（资源分配技术）控制功能的系统中，可以在根目录下创建额外的目录，这些目录指定了每种资源的不同数量（参见下面的“schemata”）。根目录和这些额外的顶级目录在下文中被称为“CTRL_MON”组。 + +在支持RDT监控的系统中，根目录和其他顶级目录中包含一个名为“mon_groups”的目录，在其中可以创建额外的目录来监控其父“CTRL_MON”组中任务的子集。这些在本文档的其余部分被称为“MON”组。 + +删除一个目录会将其所代表的组拥有的所有任务和CPU移动到其父目录。删除一个创建的“CTRL_MON”组将自动删除其下所有的“MON”组。 + +支持将“MON”组目录移动到一个新的父“CTRL_MON”组，以便在不影响其监控数据或分配的任务的情况下更改“MON”组的资源分配。此操作不适用于监控CPU的“MON”组。目前，除了简单地重命名“CTRL_MON”或“MON”组之外，不支持其他任何移动操作。 + +所有组包含以下文件： + +**tasks**: 读取此文件将显示属于该组的所有任务列表。将任务ID写入该文件会将任务添加到该组中。可以通过用逗号分隔任务ID来添加多个任务。任务将按顺序分配。在尝试分配任务时遇到的任何单个失败都会导致操作中止，而在失败之前已添加到组中的任务将保留在组中。失败信息将记录到/sys/fs/resctrl/info/last_cmd_status。 + +如果该组是一个“CTRL_MON”组，则任务将从之前拥有该任务的“CTRL_MON”组中移除，同时也会从任何拥有该任务的“MON”组中移除。如果该组是一个“MON”组，则任务必须已经属于该组的“CTRL_MON”父组。任务将从任何之前的“MON”组中移除。 + +**cpus**: 读取此文件将显示该组拥有的逻辑CPU的位掩码。将掩码写入该文件将向该组添加或移除CPU。与“tasks”文件类似，维护了一个层级结构，其中“MON”组只能包含其父“CTRL_MON”组拥有的CPU。 + +**cpus_list**: 与“cpus”类似，但使用CPU范围而不是位掩码。 + +当启用控制功能时，所有“CTRL_MON”组还将包含以下文件： + +**schemata**: 列出该组可用的所有资源。每种资源都有自己的行和格式——详细信息请参见下文。 + +**size**: 类似于“schemata”文件的显示，但显示的是每种资源分配的字节大小，而不是表示分配的位。 + +**mode**: 资源组的“mode”决定了其分配的共享方式。“shareable”资源组允许共享其分配，而“exclusive”资源组则不允许。 + +**ctrl_hw_id**: 仅在启用调试选项时可用。硬件用于控制组的标识符。在arm64架构上，即是 PARTID。 + +当启用监控功能时，所有“MON”组还将包含以下文件： + +**mon_data**: 包含一组按L3域和MB域事件组织的文件。例如，在具有两个L3域的系统中，将存在子目录“mon_L3_00”和“mon_L3_01”。 + +每个子目录中都有一个文件对应每个事件（例如“llc_occupancy”、“mbm_total_bytes”）。在“MON”组中，这些文件提供了组中所有任务的当前事件值。在“CTRL_MON”组中，这些文件提供了“CTRL_MON”组中所有任务以及所有“MON”组中任务的总和。有关使用方法的更多详细信息，请参见示例部分。 + +**mon_hw_id**: 仅在启用调试选项时可用。硬件用于监控组的标识符。 + +以下为resctrl文件系统目录树： + +~~~ +/sys/fs/resctrl(根分组) + ├── cpus # bitmask方式显示根分组关联的vcpu + ├── cpus_list # cpu list方式显示根分组关联的vcpu + ├── ctrl_hw_id # 硬件用于控制组的标识符 + ├── info # 用于显示属性信息及错误提示信息 + │ ├── L3 + │ │ ├── bit_usage # 标注了资源所有实例的使用情况的容量位掩码 + │ │ ├── cbm_mask # 系统所支持的最大cache way bitmask，一个bit代表一个cache way + │ │ ├── min_cbm_bits # 使用schemata所能配置的最小cache way bitmask + │ │ ├── num_closids # L3能够提供创建控制组的最大数量 + │ │ ├── shareable_bits # 当前所有cbm_mask全部shareable，支持后续扩展 + │ │ └── sparse_masks # 指示是否支持CBM（Capacity Bit Mask）中的非连续1值 + │ ├── L3_MON + │ │ ├── max_threshold_occupancy # 低于此设定值下，之前使用过的LLC_occupancy计数器可以被考虑重新分配使用 + │ │ ├── mon_features # 列出监控事件 + │ │ └── num_rmids # 可创建控制组和监控组的总数 + │ ├── last_cmd_status # 操作错误提示 + │ ├── MB + │ │ ├── bandwidth_gran # 带宽百分比配置粒度 + │ │ ├── delay_linear # 指示延迟刻度是线性还是非线性的 + │ │ ├── min_bandwidth # 最小带宽配置百分比 + │ │ └── num_closids # 同L3 num_closid + │ └── MB_MON + │ ├── mon_features # 同L3 mon_features + │ └── num_rmids # 同L3 num_rmids + ├── mode # 资源组的 mode 决定了其分配的共享方式 + ├── mon_data + │ ├── mon_L3_01 # 标号代表L3 cache id + │ │ └── llc_occupancy # 表示当前分组所关联的pid/vcpu在该区域上实际占用L3 Cache大小，下同 + │ ├── mon_L3_122 + │ │ └── llc_occupancy + │ ├── mon_MB_00 # 标号代表numa id + │ │ └── mbm_total_bytes # 表示当前分组所关联的pid/vcpu在该区域上内存带宽流量大小，下同 + │ └── mon_MB_01 + │ └── mbm_total_bytes + ├── mon_groups # 创建监控组目录 + ├── mon_hw_id # 硬件用于监控组的标识符 + ├── schemata # 资源使用配置接口 + ├── size # 显示的是每种资源分配的字节大小 + └── tasks # 显示与根组关联的pid +~~~ + +### 3.2.3 控制组配置接口 Schemata 文件 + +**schemata**文件中的每一行描述一种资源。每行以资源的名称开头，后面跟着该资源在系统中每个实例上要应用的具体值。 + +#### Cache IDs + +在当前一代的系统中，每个插槽（socket）有一个L3缓存，而L2缓存通常仅由一个核心上的超线程共享，但这并不是架构上的强制要求。我们可能会在一个插槽上有多个独立的L3缓存，或者多个核心共享一个L2缓存。因此，我们不使用“插槽”或“核心”来定义共享资源的逻辑CPU集合，而是使用“Cache ID”（缓存ID）。 + +在给定的缓存级别上，这将在整个系统中是一个唯一的数字（但不能保证是一个连续的序列，可能会有间隔）。要查找每个逻辑CPU的ID，请查看 /sys/devices/system/cpu/cpu*/cache/index*/id。 + +#### Cache Bit Masks（CBM，缓存位掩码） + +对于缓存资源，我们使用位掩码来描述可用于分配的缓存部分。掩码的最大值由每种CPU型号定义（并且可能因不同的缓存级别而异）。该值在resctrl文件系统的“info”目录中提供，位于info/{resource}/cbm_mask。 + +#### L3 缓存配置 + +当未启用CDP（代码/数据缓存划分）时，L3 schemata的格式为： + +~~~ +L3:<cache_id0>=<cbm>;<cache_id1>=<cbm>;... +~~~ + +当启用CDP时，L3控制被拆分为两个独立的资源，因此您可以分别为代码和数据指定独立的掩码，如下所示： + +~~~ +L3DATA:<cache_id0>=<cbm>;<cache_id1>=<cbm>;... +L3CODE:<cache_id0>=<cbm>;<cache_id1>=<cbm>;... +~~~ + +读取schemata文件将显示所有域上所有资源的状态。在写入时，您只需要指定您希望更改的值。 + +例如使用默认方式挂载，设置L3缓存位掩码只有4位： + +~~~ +# mount -t resctrl resctrl /sys/fs/resctrl/ +# cat /sys/fs/resctrl/schemata +L3:1=fffffff;122=fffffff + +# echo "L3:122=3c0;" > /sys/fs/resctrl/schemata +# cat /sys/fs/resctrl/schemata +L3:1=fffffff;122=00003c0 +~~~ + +使用开启CDP方式挂载，设置L3 data缓存位掩码只有4位： + +~~~ +# mount -t resctrl resctrl /sys/fs/resctrl/ -o cdp +# cat /sys/fs/resctrl/schemata +L3DATA:1=fffffff;122=fffffff +L3CODE:1=fffffff;122=fffffff + +# echo "L3DATA:122=3c0;" > schemata +# cat /sys/fs/resctrl/schemata +L3DATA:1=fffffff;122=00003c0 +L3CODE:1=fffffff;122=fffffff +~~~ + +#### L2 缓存配置 + +L2 缓存配置功能默认关闭，需要通过显式添加 l2 挂载参数，才会使能L2缓存配置功能。使能L2功能以后，系统关闭 cpuidle powerdown 功能和cpu下线功能。 + +L2 schemata的格式是： + +~~~ +L2:<cache_id0>=<cbm>;<cache_id1>=<cbm>;... +~~~ + +使用“cdpl2”挂载选项可以在L2上支持CDP： + +~~~ +L2DATA:<cache_id0>=<cbm>;<cache_id1>=<cbm>;... +L2CODE:<cache_id0>=<cbm>;<cache_id1>=<cbm>;... +~~~ + +L2 缓存配置示例，设置L2缓存位掩码只有4位： + +~~~ +# mount -t resctrl resctrl /sys/fs/resctrl/ -o l2 +# cat schemata +L2:4=000ff;8=000ff + +# echo "L2:4=f;" > schemata +# cat schemata +L2:4=0000f;8=000ff +~~~ + +使用“cdpl2”挂载选项： + +~~~ +# mount -t resctrl resctrl /sys/fs/resctrl/ -o l2cdp,l2 +# cat schemata +L2DATA:4=000ff;8=000ff +L2CODE:4=000ff;8=000ff + +# echo "L2DATA:4=f;" > schemata +# cat schemata +L2DATA:4=0000f;8=000ff # 控制组 L2 DATA 只能使用L2 cache4的4个cache way +L2CODE:4=000ff;8=000ff +~~~ + +#### MB 内存带宽分配 + +对于内存带宽资源，默认情况下，用户通过指定总内存带宽的百分比来控制该资源。 + +每种CPU型号的最小带宽百分比值是预定义的，可以通过info/MB/min_bandwidth查询。分配的带宽粒度也取决于CPU型号，可以在info/MB/bandwidth_gran中查询。可用的带宽控制步长为：min_bw + N * bw_gran。中间值会被四舍五入到硬件上可用的下一个控制步长。 + +MB schemata的格式是： + +~~~ +MB:<cache_id0>=bandwidth0;<cache_id1>=bandwidth1;... +~~~ + +MB 带宽配置示例： + +~~~ +# cat /sys/fs/resctrl/schemata +MB:0=0000100;1=0000100 + +# echo "MB:0=50" > /sys/fs/resctrl/schemata +# cat /sys/fs/resctrl/schemata +MB:0=0000050;1=0000100 # 降低控制组 MB 内存带宽使用上限为50% +~~~ + +### 3.2.4 资源分配规则 + +当一个任务正在运行时，以下规则定义了它可用的资源： +1. 如果任务属于一个非默认组，则使用该组的分配方案（schemata）。 +2. 否则，如果任务属于默认组，但运行在一个被分配给某个特定组的CPU上，则使用该CPU所属组的分配方案。 +3. 否则，使用默认组的分配方案。 + +### 3.2.5 监控组配置方法 + +读取控制组和监控组的监控数据，可通过 mon_data 目录接口读取监控数据： + +~~~ +# grep . mon_data/*/* +mon_data/mon_L3_01/llc_occupancy:73276416 +mon_data/mon_L3_122/llc_occupancy:11875328 +mon_data/mon_MB_00/mbm_total_bytes:32806 +mon_data/mon_MB_01/mbm_total_bytes:31700 +~~~ + +其中，mon_data读取监控数据文件分别： + * llc_occupancy 代表 L3缓存当前占用量，单位 Byte + * mbm_total_bytes 代表内存带宽瞬时流量，单位 MB/s + +支持在控制组下创建子监控组，监控父控制组监控对象的子集： + +~~~ +# cd /sys/fs/resctrl/p1 +# cd mon_groups/ && mkdir m1 # 监控组只能监控，m1分组资源配置跟随p1分组 +# echo '0-1' > cpus_list +# grep . mon_data/mon_*/* +mon_data/mon_L3_01/llc_occupancy:18432 +mon_data/mon_L3_122/llc_occupancy:1024 +mon_data/mon_MB_00/mbm_total_bytes:0 +mon_data/mon_MB_01/mbm_total_bytes:0 +~~~ + +控制组监控的是控制组本身及所有子监控组的监控值之和。 + +## 3.3 QoS 增强特性 + +### 3.3.1 PRI 优先级设置 + +对共享资源优先级进行配置，包括 L3PRI 和 MBPRI： + +~~~ +# cat schemata + MBPRI:0=0000007;1=0000007 + L3PRI:1=0000003;122=0000003 + +# echo "MBPRI:0=0000003" > schemata +# cat schemata + MBPRI:0=0000003;1=0000007 # 降低控制组 MB numa0的优先级 + L3PRI:1=0000003;122=0000003 + +# echo "MBPRI:0=0000003" > schemata + +~~~ + +优先级设置数字越大，即优先级越高，反之，数字越小，优先级越低。 + +> MBPRI 默认值为 3，L3PRI 默认值为 0 + +### 3.3.2 MIN 限低值设置 + +共享资源实际使用占比低于设置值，会自动提高对该资源使用优先级，包括 L3MIN 和 MBMIN： + +~~~ +# cat schemata + MBMIN:0=00100 + L3MIN:1=00100;5=00100 + +# echo "MBMIN:0=00050" > schemata +# cat schemata + MBMIN:0=00050 + L3MIN:1=00100;5=00100 + +# echo "L3MIN:1=00050" > schemata +# cat schemata + MBMIN:0=00050 + L3MIN:1=00050;5=00100 +~~~ + +L3MIN 和 MBMIN 接口接受的输入参数为百分比，即设置值与总资源（内存带宽/缓存占用量）的占比。 + +> MBMIN 和 L3MIN 默认值为 0 + +### 3.3.3 HDL 强制隔离设置 + +当MBHDL=1，限制MB共享资源使用量不能超出MB设置值，若MBHDL=0，则允许空闲情况下，MB共享资源使用量超过MB设置值： + +~~~ +# cat schemata + MBHDL:0=0000001;1=0000001 + +# echo "MBHDL:0=0000000" > schemata +# cat schemata + MBHDL:0=0000000;1=0000001 # 关闭MB在numa0上的强制限制功能 +~~~ + +> MBHDL 默认值为 1 + +### 3.3.4 MAX 资源上限设置 + +设置允许分配的缓存容量的最大百分比，包括 L3MAX 接口： + +~~~ +# cat schemata + L3MAX:1=00100;5=00100 + +# echo "L3MAX:1=00050" > schemata +# cat schemata + L3MAX:1=00050;5=00100 # 降低L3分配的缓存最大容量百分比 +~~~ + +> MB 和 L3MAX 默认值为 100 + +## 3.4 外设 IO 流量管控 + +### 3.4.1 控制组绑定外设 + +MPAM 提供通过绑定 iommu_group ID，对设备IO流量进行带宽限制和监控。 + +譬如，控制网卡设备 eno2 ，首先查找该设备 PCI_SLOT 信息： + +~~~ +# cat /sys/class/net/eno2/device/uevent | grep PCI_SLOT +PCI_SLOT_NAME=0000:35:00.1 +~~~ + +或者通过 ethtool 工具查看 bus-info 信息： + +~~~ +# ethtool -i eno2 | grep bus-info +bus-info: 0000:35:00.1 +~~~ + +按照设备总线信息，查找到该设备所属的 iommu_group ： + +~~~ +# find /sys/kernel/iommu_groups/ -name "0000:35:00.1" +/sys/kernel/iommu_groups/17/devices/0000:35:00.1 +~~~ + +或者通过 lspci 工具查看 iommu_group 信息： + +~~~ +# lspci -vvv -s 0000:35:00.1 | grep "IOMMU group" + IOMMU group: 17 +~~~ + +将查询到的group id 17，通过 tasks 接口绑定到指定的控制组下： + +~~~ +# cd /sys/fs/resctrl/p1/ +# echo "iommu_group:17" > tasks +# cat tasks +iommu_group:17 # 此时iommu_group 17 已被绑定到控制组p1 +~~~ + +### 3.4.2 查看外设带宽流量 + +控制组绑定外设所属的iommu组后，可以查看设备流量带宽： + +~~~ +# grep . mon_data/mon_MB_0*/* +mon_data/mon_MB_00/mbm_total_bytes:0 +mon_data/mon_MB_01/mbm_total_bytes:4230 +~~~ + +### 3.4.3 配置外设带宽流量 + +通过MB配置接口，可以实现限制设备的流量带宽： + +~~~ +# echo "MB:1=0000001" > schemata +# cat schemata + MB:0=0000100;1=0000000 + +# grep . mon_data/*/* +mon_data/mon_MB_00/mbm_total_bytes:0 +mon_data/mon_MB_01/mbm_total_bytes:1208 +~~~ + +# 4 控制组和监控组配置使用示例 + +/sys/fs/resctrl 默认为根分组，根分组可以创建若干个控制组，一个控制组既可以关联一组pid/tid，也可以关联一组cpu集合。 + +创建一个新的控制组，关联 pid/tid： + +~~~ +# cd /sys/fs/resctrl/ && mkdir p1 +# cd p1 && echo $$ > tasks # 关联当前shell进程pid到p1组 +# cat tasks # 可查看成功关联的pid +29190 +29607 +~~~ + +也可以选择关联 cpu： + +~~~ +# cd p1 && echo '0-1' > cpus_list +# cat cpus_list # 可查看关联的cpu +0-1 +~~~ + +查看可创建的控制组和监控组数量： + +~~~ +# cat info/L3/num_closids # 可在info对应的资源的目录下查看closid数量，即可以创建控制组的数量 +32 +# cat info/MB/num_closids +32 +# cat info/L3_MON/num_rmids # 可以创建控制组和监控组的总数量 +128 +# cat info/MB_MON/num_rmids +128 +~~~ + +通过配置控制组可达到隔离 L3 Cache/Memory Bandwidth 效果，通过读取对应分组mon_data接口可以获取该组资源占用情况，比如对一个控制组限制L3 Cache使用： + +~~~ +# cat info/L3/cbm_mask # 查看info目录下对应资源的属性 +fffffff +# cat info/L3/min_cbm_bits +1 + +# cd /sys/fs/resctrl/p1 +# cat schemata + MB:0=0000100;1=0000100 + L3:1=fffffff;122=fffffff + +# echo 'L3:0=1' > schemata # 配置1条cache way给p1分组 +# cat schemata + MB:0=0000100;1=0000100 # 若此时该组关联pid/cpu，那么该pid/cpu产生的访存请求只会分配到这条cache + L3:1=0000001;122=fffffff +~~~ + +对控制组限制MB使用： + +~~~ +# cat info/MB/min_bandwidth # 和配置L3类似，也可以查看MB的相关信息 +1 +# cat info/MB/bandwidth_gran +1 # 可知，配置带宽最小百分比是1%，颗粒度是1% +# cat schemata + MB:0=0000100;1=0000100 + L3:1=0000001;122=fffffff +# echo 'MB:0=1' > schemata +# cat schemata + MB:0=0000001;1=0000100 + L3:1=0000001;122=fffffff +~~~ + +支持在控制组下创建子监控组： + +~~~ +# cd /sys/fs/resctrl/p1 +# cd mon_groups/ && mkdir m1 # 监控组只能监控，m1分组资源配置跟随p1分组 +# ls m1/ +cpus cpus_list mon_data tasks +# echo '0-1' > cpus_list +# cat cpus_list +0-1 +# grep . mon_data/mon_*/* +mon_data/mon_L3_01/llc_occupancy:18432 +mon_data/mon_L3_122/llc_occupancy:1024 +mon_data/mon_MB_00/mbm_total_bytes:0 +mon_data/mon_MB_01/mbm_total_bytes:0 +~~~ -- 2.25.1

2 1

[PATCH OLK-6.6 0/5] arm64/mpam: Update QoS partition default value
by Zeng Heng 22 May '25

22 May '25

James Morse (1): x86/resctrl: Add max_bw to struct resctrl_membw Zeng Heng (4): fs/resctrl: Fix the crash caused by mounting resctrl but not support RDT arm64/mpam: Fix num_rmids information arm64/mpam: Set 1 as the minimum setting value for MBA arm64/mpam: Update QoS partition default value arch/x86/kernel/cpu/resctrl/core.c | 2 ++ drivers/platform/mpam/mpam_resctrl.c | 18 +++++++++++++----- fs/resctrl/ctrlmondata.c | 4 ++-- fs/resctrl/rdtgroup.c | 14 ++++++++++++-- include/linux/resctrl.h | 2 ++ 5 files changed, 31 insertions(+), 9 deletions(-) -- 2.25.1

2 6

[PATCH OLK-6.6 v7 00/67] Add FUSE Passthrough Support
by Yifan Qiao 22 May '25

22 May '25

Changes since v5 & v6: - Add CONFIG_FS_STACK=y for x86 and arm64. - Change commit message to meet the request of coding Changes since v4: - Since there is no kabi changes, do not use kabi reserve in fuse structs. - Add CONFIG_FUSE_PASSTHROUGH=y to openeuler_defconfig for arm64 and x86 in a seperate commit Changes since v3: - Fix potential deadlock of callers of direct_splice_actor Changes since v2: - Add CONFIG_FUSE_PASSTHROUGH=y to openeuler_defconfig for x86 Changes since v1: - Add CONFIG_FUSE_PASSTHROUGH=y to openeuler_defconfig for arm64 Amir Goldstein (60): fs: rename __mnt_{want,drop}_write*() helpers fs: export mnt_{get,put}_write_access() to modules fuse: factor out helper fuse_truncate_update_attr() fuse: allocate ff->release_args only if release is needed fuse: break up fuse_open_common() fuse: prepare for failing open response fuse: introduce inode io modes fuse: allow parallel dio writes with FUSE_DIRECT_IO_ALLOW_MMAP ovl: use simpler function to convert iocb to rw flags ovl: propagate IOCB_APPEND flag on writes to realfile ovl: punt write aio completion to workqueue ovl: protect copying of realinode attributes to ovl inode fs: get mnt_writers count for an open backing file's real path fs: create helper file_user_path() for user displayed mapped file path fs: store real path instead of fake path in backing file f_path ovl: add helper ovl_file_modified() ovl: split ovl_want_write() into two helpers ovl: reorder ovl_want_write() after ovl_inode_lock() ovl: do not open/llseek lower file with upper sb_writers held ovl: do not encode lower fh with upper sb_writers held ovl: add permission hooks outside of do_splice_direct() splice: remove permission hook from do_splice_direct() splice: move permission hook out of splice_direct_to_actor() splice: move permission hook out of splice_file_to_pipe() splice: remove permission hook from iter_file_splice_write() remap_range: move permission hooks out of do_clone_file_range() remap_range: move file_start_write() to after permission hook btrfs: move file_start_write() to after permission hook coda: change locking order in coda_file_write_iter() fs: move file_start_write() into vfs_iter_write() fs: move permission hook out of do_iter_write() fs: move permission hook out of do_iter_read() fs: move kiocb_start_write() into vfs_iocb_iter_write() fs: create __sb_write_started() helper fs: create file_write_started() helper fs: create {sb,file}_write_not_started() helpers fs: prepare for stackable filesystems backing file helpers fs: factor out backing_file_{read,write}_iter() helpers fs: factor out backing_file_splice_{read,write}() helpers fs: factor out backing_file_mmap() helper fuse: factor out helper for FUSE_DEV_IOC_CLONE fuse: introduce FUSE_PASSTHROUGH capability fuse: implement ioctls to manage backing files fuse: prepare for opening file in passthrough mode fuse: implement open in passthrough mode fuse: implement read/write passthrough fuse: implement splice read/write passthrough fuse: implement passthrough for mmap fuse: fix wrong ff->iomode state changes from parallel dio write fuse: fix parallel dio write on file open in passthrough mode fuse: verify zero padding in fuse_backing_map fuse: respect FOPEN_KEEP_CACHE on opendir ovl: fix dentry reference leak after changes to underlying layers ovl: relax WARN_ON in ovl_verify_area() remap_range: merge do_clone_file_range() into vfs_clone_file_range() fs: pass offset and result to backing_file end_write() callback fuse: update inode size after extending passthrough write fs: fork splice_file_range() from do_splice_direct() fs: move file_start_write() into direct_splice_actor() fs: use do_splice_direct() for nfsd/ksmbd server-side-copy Bernd Schubert (3): fuse: create helper function if DIO write needs exclusive lock fuse: add fuse_dio_lock/unlock helper functions fuse: disable the combination of passthrough and writeback cache Ed Tsai (1): backing-file: convert to using fops->splice_write Vegard Nossum (1): fs: fix __sb_write_started() kerneldoc formatting Yifan Qiao (1): fuse: config: enable FUSE_PASSTHROUGH and FS_STACK yangyun (1): fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set fs/fuse/fuse_i.h | 146 +++++++++- fs/internal.h | 21 +- fs/overlayfs/overlayfs.h | 38 ++- include/linux/backing-file.h | 42 +++ include/linux/fs.h | 91 +++++-- include/linux/fsnotify.h | 3 +- include/linux/mount.h | 4 +- include/linux/splice.h | 13 +- include/uapi/linux/fuse.h | 23 +- arch/arc/kernel/troubleshoot.c | 6 +- drivers/block/loop.c | 2 - drivers/target/target_core_file.c | 10 +- fs/backing-file.c | 339 +++++++++++++++++++++++ fs/btrfs/ioctl.c | 12 +- fs/cachefiles/io.c | 5 +- fs/ceph/file.c | 9 +- fs/coda/file.c | 2 - fs/file_table.c | 12 +- fs/fuse/dev.c | 98 +++++-- fs/fuse/dir.c | 49 +++- fs/fuse/file.c | 362 +++++++++++++++++-------- fs/fuse/inode.c | 37 +++ fs/fuse/iomode.c | 276 +++++++++++++++++++ fs/fuse/passthrough.c | 355 ++++++++++++++++++++++++ fs/inode.c | 8 +- fs/namespace.c | 36 +-- fs/nfsd/vfs.c | 7 +- fs/open.c | 70 ++--- fs/overlayfs/copy_up.c | 166 ++++++++---- fs/overlayfs/dir.c | 60 ++-- fs/overlayfs/export.c | 7 +- fs/overlayfs/file.c | 230 ++++------------ fs/overlayfs/inode.c | 57 ++-- fs/overlayfs/namei.c | 37 ++- fs/overlayfs/super.c | 47 ++-- fs/overlayfs/util.c | 75 ++++- fs/proc/base.c | 2 +- fs/proc/nommu.c | 2 +- fs/proc/task_mmu.c | 4 +- fs/proc/task_nommu.c | 2 +- fs/read_write.c | 199 ++++++++------ fs/remap_range.c | 44 ++- fs/splice.c | 168 ++++++++---- fs/super.c | 1 + kernel/acct.c | 4 +- kernel/trace/trace_output.c | 2 +- MAINTAINERS | 9 + arch/arm64/configs/openeuler_defconfig | 3 +- arch/x86/configs/openeuler_defconfig | 3 +- fs/Kconfig | 4 + fs/Makefile | 1 + fs/fuse/Kconfig | 11 + fs/fuse/Makefile | 2 + fs/overlayfs/Kconfig | 1 + 54 files changed, 2396 insertions(+), 821 deletions(-) create mode 100644 include/linux/backing-file.h create mode 100644 fs/backing-file.c create mode 100644 fs/fuse/iomode.c create mode 100644 fs/fuse/passthrough.c -- 2.39.2

2 68

[PATCH OLK-6.6] cachefiles: Parse the "secctx" immediately
by Zizhi Wo 22 May '25

22 May '25

From: Max Kellermann <max.kellermann(a)ionos.com> stable inclusion from stable-v6.6.74 commit 933689000dff37b855a8d4ffc67d3c43ed8a17e4 category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IC9PNO Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit e5a8b6446c0d370716f193771ccacf3260a57534 ] Instead of storing an opaque string, call security_secctx_to_secid() right in the "secctx" command handler and store only the numeric "secid". This eliminates an unnecessary string allocation and allows the daemon to receive errors when writing the "secctx" command instead of postponing the error to the "bind" command handler. For example, if the kernel was built without `CONFIG_SECURITY`, "bind" will return `EOPNOTSUPP`, but the daemon doesn't know why. With this patch, the "secctx" will instead return `EOPNOTSUPP` which is the right context for this error. This patch adds a boolean flag `have_secid` because I'm not sure if we can safely assume that zero is the special secid value for "not set". This appears to be true for SELinux, Smack and AppArmor, but since this attribute is not documented, I'm unable to derive a stable guarantee for that. Signed-off-by: Max Kellermann <max.kellermann(a)ionos.com> Signed-off-by: David Howells <dhowells(a)redhat.com> Link: https://lore.kernel.org/r/20241209141554.638708-1-max.kellermann@ionos.com/ Link: https://lore.kernel.org/r/20241213135013.2964079-6-dhowells@redhat.com Signed-off-by: Christian Brauner <brauner(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Conflicts: fs/cachefiles/daemon.c [Different error codes do not affect the patch.] Signed-off-by: Zizhi Wo <wozizhi(a)huawei.com> --- fs/cachefiles/daemon.c | 14 +++++++------- fs/cachefiles/internal.h | 3 ++- fs/cachefiles/security.c | 6 +++--- 3 files changed, 12 insertions(+), 11 deletions(-) diff --git a/fs/cachefiles/daemon.c b/fs/cachefiles/daemon.c index 81d12106ce7a..32c14f0ce776 100644 --- a/fs/cachefiles/daemon.c +++ b/fs/cachefiles/daemon.c @@ -15,6 +15,7 @@ #include <linux/namei.h> #include <linux/poll.h> #include <linux/mount.h> +#include <linux/security.h> #include <linux/statfs.h> #include <linux/ctype.h> #include <linux/string.h> @@ -576,7 +577,7 @@ static int cachefiles_daemon_dir(struct cachefiles_cache *cache, char *args) */ static int cachefiles_daemon_secctx(struct cachefiles_cache *cache, char *args) { - char *secctx; + int err; _enter(",%s", args); @@ -585,16 +586,16 @@ static int cachefiles_daemon_secctx(struct cachefiles_cache *cache, char *args) return -EINVAL; } - if (cache->secctx) { + if (cache->have_secid) { pr_err("Second security context specified\n"); return -EEXIST; } - secctx = kstrdup(args, GFP_KERNEL); - if (!secctx) - return -ENOMEM; + err = security_secctx_to_secid(args, strlen(args), &cache->secid); + if (err) + return err; - cache->secctx = secctx; + cache->have_secid = true; return 0; } @@ -830,7 +831,6 @@ static void cachefiles_daemon_unbind(struct cachefiles_cache *cache) put_cred(cache->cache_cred); kfree(cache->rootdirname); - kfree(cache->secctx); kfree(cache->tag); _leave(""); diff --git a/fs/cachefiles/internal.h b/fs/cachefiles/internal.h index 7215e96fc2cf..5ca4ab010a0a 100644 --- a/fs/cachefiles/internal.h +++ b/fs/cachefiles/internal.h @@ -125,7 +125,6 @@ struct cachefiles_cache { #define CACHEFILES_STATE_CHANGED 3 /* T if state changed (poll trigger) */ #define CACHEFILES_ONDEMAND_MODE 4 /* T if in on-demand read mode */ char *rootdirname; /* name of cache root directory */ - char *secctx; /* LSM security context */ char *tag; /* cache binding tag */ refcount_t unbind_pincount;/* refcount to do daemon unbind */ struct xarray reqs; /* xarray of pending on-demand requests */ @@ -133,6 +132,8 @@ struct cachefiles_cache { struct xarray ondemand_ids; /* xarray for ondemand_id allocation */ u32 ondemand_id_next; u32 msg_id_next; + u32 secid; /* LSM security id */ + bool have_secid; /* whether "secid" was set */ }; static inline bool cachefiles_in_ondemand_mode(struct cachefiles_cache *cache) diff --git a/fs/cachefiles/security.c b/fs/cachefiles/security.c index fe777164f1d8..fc6611886b3b 100644 --- a/fs/cachefiles/security.c +++ b/fs/cachefiles/security.c @@ -18,7 +18,7 @@ int cachefiles_get_security_ID(struct cachefiles_cache *cache) struct cred *new; int ret; - _enter("{%s}", cache->secctx); + _enter("{%u}", cache->have_secid ? cache->secid : 0); new = prepare_kernel_cred(current); if (!new) { @@ -26,8 +26,8 @@ int cachefiles_get_security_ID(struct cachefiles_cache *cache) goto error; } - if (cache->secctx) { - ret = set_security_override_from_ctx(new, cache->secctx); + if (cache->have_secid) { + ret = set_security_override(new, cache->secid); if (ret < 0) { put_cred(new); pr_err("Security denies permission to nominate security context: error %d\n", -- 2.39.2

2 1

[PATCH OLK-6.6] PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
by Qi Xi 22 May '25

22 May '25

From: Ryo Takakura <ryotkkr98(a)gmail.com> mainline inclusion from mainline-v6.15-rc1 commit 18056a48669a040bef491e63b25896561ee14d90 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IC5BIT CVE: CVE-2025-23161 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- The access to the PCI config space via pci_ops::read and pci_ops::write is a low-level hardware access. The functions can be accessed with disabled interrupts even on PREEMPT_RT. The pci_lock is a raw_spinlock_t for this purpose. A spinlock_t becomes a sleeping lock on PREEMPT_RT, so it cannot be acquired with disabled interrupts. The vmd_dev::cfg_lock is accessed in the same context as the pci_lock. Make vmd_dev::cfg_lock a raw_spinlock_t type so it can be used with interrupts disabled. This was reported as: BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 Call Trace: rt_spin_lock+0x4e/0x130 vmd_pci_read+0x8d/0x100 [vmd] pci_user_read_config_byte+0x6f/0xe0 pci_read_config+0xfe/0x290 sysfs_kf_bin_read+0x68/0x90 Signed-off-by: Ryo Takakura <ryotkkr98(a)gmail.com> Tested-by: Luis Claudio R. Goncalves <lgoncalv(a)redhat.com> Acked-by: Luis Claudio R. Goncalves <lgoncalv(a)redhat.com> [bigeasy: reword commit message] Signed-off-by: Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> Tested-off-by: Luis Claudio R. Goncalves <lgoncalv(a)redhat.com> Link: https://lore.kernel.org/r/20250218080830.ufw3IgyX@linutronix.de [kwilczynski: commit log] Signed-off-by: Krzysztof Wilczyński <kwilczynski(a)kernel.org> [bhelgaas: add back report info from https://lore.kernel.org/lkml/20241218115951.83062-1-ryotkkr98@gmail.com/] Signed-off-by: Bjorn Helgaas <bhelgaas(a)google.com> Signed-off-by: Qi Xi <xiqi2(a)huawei.com> --- drivers/pci/controller/vmd.c | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/drivers/pci/controller/vmd.c b/drivers/pci/controller/vmd.c index 5ff2066aa516..dfa222e02c4d 100644 --- a/drivers/pci/controller/vmd.c +++ b/drivers/pci/controller/vmd.c @@ -125,7 +125,7 @@ struct vmd_irq_list { struct vmd_dev { struct pci_dev *dev; - spinlock_t cfg_lock; + raw_spinlock_t cfg_lock; void __iomem *cfgbar; int msix_count; @@ -402,7 +402,7 @@ static int vmd_pci_read(struct pci_bus *bus, unsigned int devfn, int reg, if (!addr) return -EFAULT; - spin_lock_irqsave(&vmd->cfg_lock, flags); + raw_spin_lock_irqsave(&vmd->cfg_lock, flags); switch (len) { case 1: *value = readb(addr); @@ -417,7 +417,7 @@ static int vmd_pci_read(struct pci_bus *bus, unsigned int devfn, int reg, ret = -EINVAL; break; } - spin_unlock_irqrestore(&vmd->cfg_lock, flags); + raw_spin_unlock_irqrestore(&vmd->cfg_lock, flags); return ret; } @@ -437,7 +437,7 @@ static int vmd_pci_write(struct pci_bus *bus, unsigned int devfn, int reg, if (!addr) return -EFAULT; - spin_lock_irqsave(&vmd->cfg_lock, flags); + raw_spin_lock_irqsave(&vmd->cfg_lock, flags); switch (len) { case 1: writeb(value, addr); @@ -455,7 +455,7 @@ static int vmd_pci_write(struct pci_bus *bus, unsigned int devfn, int reg, ret = -EINVAL; break; } - spin_unlock_irqrestore(&vmd->cfg_lock, flags); + raw_spin_unlock_irqrestore(&vmd->cfg_lock, flags); return ret; } @@ -1020,7 +1020,7 @@ static int vmd_probe(struct pci_dev *dev, const struct pci_device_id *id) if (features & VMD_FEAT_OFFSET_FIRST_VECTOR) vmd->first_vec = 1; - spin_lock_init(&vmd->cfg_lock); + raw_spin_lock_init(&vmd->cfg_lock); pci_set_drvdata(dev, vmd); err = vmd_enable_domain(vmd, features); if (err) -- 2.33.0

2 1

[PATCH OLK-6.6 0/1] CVE-2025-37970
by Hongbo Li 22 May '25

22 May '25

Fix CVE-2025-37970. Silvano Seva (1): iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c | 3 +++ 1 file changed, 3 insertions(+) -- 2.34.1

2 2