Skip to content

Update kernel config #25

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
matrix-wsk merged 4 commits into from
Sep 19, 2023
Merged

Update kernel config #25

matrix-wsk merged 4 commits into from
Sep 19, 2023

Conversation

@matrix-wsk
Copy link
Contributor

@matrix-wsk matrix-wsk commented Sep 19, 2023

No description provided.

matrix-wsk and others added 4 commits September 14, 2023 13:56
@matrix-wsk
build:kernel 6.5.3
18b2b7d 
Update to for obs kernel build 6.5.3.

Signed-off-by: helugang <helugang@uniontech.com>
@matrix-wsk
Merge branch 'deepin-community:kernel-mainline' into rolling-stable
5f8bb55
@matrix-wsk
Merge branch 'deepin-community:kernel-mainline' into rolling-stable
ed59b29
@matrix-wsk
Update kernel config
4a647e7 
Signed-off-by: helugang <helugang@uniontech.com>
@deepin-ci-robot
Copy link

deepin-ci-robot commented Sep 19, 2023

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please ask for approval from matrix-wsk. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@matrix-wsk matrix-wsk merged commit e60177e into deepin-community:kernel-mainline Sep 19, 2023
matrix-wsk pushed a commit that referenced this pull request Sep 25, 2023
@biger410 @gregkh
scsi: megaraid_sas: Fix deadlock on firmware crashdump
de5a256 
commit 0b0747d upstream.

The following processes run into a deadlock. CPU 41 was waiting for CPU 29
to handle a CSD request while holding spinlock "crashdump_lock", but CPU 29
was hung by that spinlock with IRQs disabled.

  PID: 17360    TASK: ffff95c1090c5c40  CPU: 41  COMMAND: "mrdiagd"
  !# 0 [ffffb80edbf37b58] __read_once_size at ffffffff9b871a40 include/linux/compiler.h:185:0
  !# 1 [ffffb80edbf37b58] atomic_read at ffffffff9b871a40 arch/x86/include/asm/atomic.h:27:0
  !# 2 [ffffb80edbf37b58] dump_stack at ffffffff9b871a40 lib/dump_stack.c:54:0
   # 3 [ffffb80edbf37b78] csd_lock_wait_toolong at ffffffff9b131ad5 kernel/smp.c:364:0
   # 4 [ffffb80edbf37b78] __csd_lock_wait at ffffffff9b131ad5 kernel/smp.c:384:0
   # 5 [ffffb80edbf37bf8] csd_lock_wait at ffffffff9b13267a kernel/smp.c:394:0
   # 6 [ffffb80edbf37bf8] smp_call_function_many at ffffffff9b13267a kernel/smp.c:843:0
   # 7 [ffffb80edbf37c50] smp_call_function at ffffffff9b13279d kernel/smp.c:867:0
   # 8 [ffffb80edbf37c50] on_each_cpu at ffffffff9b13279d kernel/smp.c:976:0
   # 9 [ffffb80edbf37c78] flush_tlb_kernel_range at ffffffff9b085c4b arch/x86/mm/tlb.c:742:0
   #10 [ffffb80edbf37cb8] __purge_vmap_area_lazy at ffffffff9b23a1e0 mm/vmalloc.c:701:0
   #11 [ffffb80edbf37ce0] try_purge_vmap_area_lazy at ffffffff9b23a2cc mm/vmalloc.c:722:0
   #12 [ffffb80edbf37ce0] free_vmap_area_noflush at ffffffff9b23a2cc mm/vmalloc.c:754:0
   #13 [ffffb80edbf37cf8] free_unmap_vmap_area at ffffffff9b23bb3b mm/vmalloc.c:764:0
   #14 [ffffb80edbf37cf8] remove_vm_area at ffffffff9b23bb3b mm/vmalloc.c:1509:0
   #15 [ffffb80edbf37d18] __vunmap at ffffffff9b23bb8a mm/vmalloc.c:1537:0
   #16 [ffffb80edbf37d40] vfree at ffffffff9b23bc85 mm/vmalloc.c:1612:0
   #17 [ffffb80edbf37d58] megasas_free_host_crash_buffer [megaraid_sas] at ffffffffc020b7f2 drivers/scsi/megaraid/megaraid_sas_fusion.c:3932:0
   #18 [ffffb80edbf37d80] fw_crash_state_store [megaraid_sas] at ffffffffc01f804d drivers/scsi/megaraid/megaraid_sas_base.c:3291:0
   #19 [ffffb80edbf37dc0] dev_attr_store at ffffffff9b56dd7b drivers/base/core.c:758:0
   #20 [ffffb80edbf37dd0] sysfs_kf_write at ffffffff9b326acf fs/sysfs/file.c:144:0
   #21 [ffffb80edbf37de0] kernfs_fop_write at ffffffff9b325fd4 fs/kernfs/file.c:316:0
   #22 [ffffb80edbf37e20] __vfs_write at ffffffff9b29418a fs/read_write.c:480:0
   #23 [ffffb80edbf37ea8] vfs_write at ffffffff9b294462 fs/read_write.c:544:0
   #24 [ffffb80edbf37ee8] SYSC_write at ffffffff9b2946ec fs/read_write.c:590:0
   #25 [ffffb80edbf37ee8] SyS_write at ffffffff9b2946ec fs/read_write.c:582:0
   #26 [ffffb80edbf37f30] do_syscall_64 at ffffffff9b003ca9 arch/x86/entry/common.c:298:0
   #27 [ffffb80edbf37f58] entry_SYSCALL_64 at ffffffff9ba001b1 arch/x86/entry/entry_64.S:238:0

  PID: 17355    TASK: ffff95c1090c3d80  CPU: 29  COMMAND: "mrdiagd"
  !# 0 [ffffb80f2d3c7d30] __read_once_size at ffffffff9b0f2ab0 include/linux/compiler.h:185:0
  !# 1 [ffffb80f2d3c7d30] native_queued_spin_lock_slowpath at ffffffff9b0f2ab0 kernel/locking/qspinlock.c:368:0
   # 2 [ffffb80f2d3c7d58] pv_queued_spin_lock_slowpath at ffffffff9b0f244b arch/x86/include/asm/paravirt.h:674:0
   # 3 [ffffb80f2d3c7d58] queued_spin_lock_slowpath at ffffffff9b0f244b arch/x86/include/asm/qspinlock.h:53:0
   # 4 [ffffb80f2d3c7d68] queued_spin_lock at ffffffff9b8961a6 include/asm-generic/qspinlock.h:90:0
   # 5 [ffffb80f2d3c7d68] do_raw_spin_lock_flags at ffffffff9b8961a6 include/linux/spinlock.h:173:0
   # 6 [ffffb80f2d3c7d68] __raw_spin_lock_irqsave at ffffffff9b8961a6 include/linux/spinlock_api_smp.h:122:0
   # 7 [ffffb80f2d3c7d68] _raw_spin_lock_irqsave at ffffffff9b8961a6 kernel/locking/spinlock.c:160:0
   # 8 [ffffb80f2d3c7d88] fw_crash_buffer_store [megaraid_sas] at ffffffffc01f8129 drivers/scsi/megaraid/megaraid_sas_base.c:3205:0
   # 9 [ffffb80f2d3c7dc0] dev_attr_store at ffffffff9b56dd7b drivers/base/core.c:758:0
   #10 [ffffb80f2d3c7dd0] sysfs_kf_write at ffffffff9b326acf fs/sysfs/file.c:144:0
   #11 [ffffb80f2d3c7de0] kernfs_fop_write at ffffffff9b325fd4 fs/kernfs/file.c:316:0
   #12 [ffffb80f2d3c7e20] __vfs_write at ffffffff9b29418a fs/read_write.c:480:0
   #13 [ffffb80f2d3c7ea8] vfs_write at ffffffff9b294462 fs/read_write.c:544:0
   #14 [ffffb80f2d3c7ee8] SYSC_write at ffffffff9b2946ec fs/read_write.c:590:0
   #15 [ffffb80f2d3c7ee8] SyS_write at ffffffff9b2946ec fs/read_write.c:582:0
   #16 [ffffb80f2d3c7f30] do_syscall_64 at ffffffff9b003ca9 arch/x86/entry/common.c:298:0
   #17 [ffffb80f2d3c7f58] entry_SYSCALL_64 at ffffffff9ba001b1 arch/x86/entry/entry_64.S:238:0

The lock is used to synchronize different sysfs operations, it doesn't
protect any resource that will be touched by an interrupt. Consequently
it's not required to disable IRQs. Replace the spinlock with a mutex to fix
the deadlock.

Signed-off-by: Junxiao Bi <junxiao.bi@oracle.com>
Link: https://lore.kernel.org/r/20230828221018.19471-1-junxiao.bi@oracle.com
Reviewed-by: Mike Christie <michael.christie@oracle.com>
Cc: stable@vger.kernel.org
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Avenger-285714 pushed a commit that referenced this pull request May 20, 2024
ipv4: Fix uninit-value access in __ip_make_skb()
e12bc60 
[ Upstream commit fc1092f ]

KMSAN reported uninit-value access in __ip_make_skb() [1].  __ip_make_skb()
tests HDRINCL to know if the skb has icmphdr. However, HDRINCL can cause a
race condition. If calling setsockopt(2) with IP_HDRINCL changes HDRINCL
while __ip_make_skb() is running, the function will access icmphdr in the
skb even if it is not included. This causes the issue reported by KMSAN.

Check FLOWI_FLAG_KNOWN_NH on fl4->flowi4_flags instead of testing HDRINCL
on the socket.

Also, fl4->fl4_icmp_type and fl4->fl4_icmp_code are not initialized. These
are union in struct flowi4 and are implicitly initialized by
flowi4_init_output(), but we should not rely on specific union layout.

Initialize these explicitly in raw_sendmsg().

[1]
BUG: KMSAN: uninit-value in __ip_make_skb+0x2b74/0x2d20 net/ipv4/ip_output.c:1481
 __ip_make_skb+0x2b74/0x2d20 net/ipv4/ip_output.c:1481
 ip_finish_skb include/net/ip.h:243 [inline]
 ip_push_pending_frames+0x4c/0x5c0 net/ipv4/ip_output.c:1508
 raw_sendmsg+0x2381/0x2690 net/ipv4/raw.c:654
 inet_sendmsg+0x27b/0x2a0 net/ipv4/af_inet.c:851
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg+0x274/0x3c0 net/socket.c:745
 __sys_sendto+0x62c/0x7b0 net/socket.c:2191
 __do_sys_sendto net/socket.c:2203 [inline]
 __se_sys_sendto net/socket.c:2199 [inline]
 __x64_sys_sendto+0x130/0x200 net/socket.c:2199
 do_syscall_64+0xd8/0x1f0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x6d/0x75

Uninit was created at:
 slab_post_alloc_hook mm/slub.c:3804 [inline]
 slab_alloc_node mm/slub.c:3845 [inline]
 kmem_cache_alloc_node+0x5f6/0xc50 mm/slub.c:3888
 kmalloc_reserve+0x13c/0x4a0 net/core/skbuff.c:577
 __alloc_skb+0x35a/0x7c0 net/core/skbuff.c:668
 alloc_skb include/linux/skbuff.h:1318 [inline]
 __ip_append_data+0x49ab/0x68c0 net/ipv4/ip_output.c:1128
 ip_append_data+0x1e7/0x260 net/ipv4/ip_output.c:1365
 raw_sendmsg+0x22b1/0x2690 net/ipv4/raw.c:648
 inet_sendmsg+0x27b/0x2a0 net/ipv4/af_inet.c:851
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg+0x274/0x3c0 net/socket.c:745
 __sys_sendto+0x62c/0x7b0 net/socket.c:2191
 __do_sys_sendto net/socket.c:2203 [inline]
 __se_sys_sendto net/socket.c:2199 [inline]
 __x64_sys_sendto+0x130/0x200 net/socket.c:2199
 do_syscall_64+0xd8/0x1f0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x6d/0x75

CPU: 1 PID: 15709 Comm: syz-executor.7 Not tainted 6.8.0-11567-gb3603fcb79b1 #25
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-1.fc39 04/01/2014

Fixes: 99e5aca ("ipv4: Fix potential uninit variable access bug in __ip_make_skb()")
Reported-by: syzkaller <syzkaller@googlegroups.com>
Signed-off-by: Shigeru Yoshida <syoshida@redhat.com>
Link: https://lore.kernel.org/r/20240430123945.2057348-1-syoshida@redhat.com
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
opsiff pushed a commit that referenced this pull request May 21, 2024
@opsiff
ipv4: Fix uninit-value access in __ip_make_skb()
69d12f5 
[ Upstream commit fc1092f ]

KMSAN reported uninit-value access in __ip_make_skb() [1].  __ip_make_skb()
tests HDRINCL to know if the skb has icmphdr. However, HDRINCL can cause a
race condition. If calling setsockopt(2) with IP_HDRINCL changes HDRINCL
while __ip_make_skb() is running, the function will access icmphdr in the
skb even if it is not included. This causes the issue reported by KMSAN.

Check FLOWI_FLAG_KNOWN_NH on fl4->flowi4_flags instead of testing HDRINCL
on the socket.

Also, fl4->fl4_icmp_type and fl4->fl4_icmp_code are not initialized. These
are union in struct flowi4 and are implicitly initialized by
flowi4_init_output(), but we should not rely on specific union layout.

Initialize these explicitly in raw_sendmsg().

[1]
BUG: KMSAN: uninit-value in __ip_make_skb+0x2b74/0x2d20 net/ipv4/ip_output.c:1481
 __ip_make_skb+0x2b74/0x2d20 net/ipv4/ip_output.c:1481
 ip_finish_skb include/net/ip.h:243 [inline]
 ip_push_pending_frames+0x4c/0x5c0 net/ipv4/ip_output.c:1508
 raw_sendmsg+0x2381/0x2690 net/ipv4/raw.c:654
 inet_sendmsg+0x27b/0x2a0 net/ipv4/af_inet.c:851
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg+0x274/0x3c0 net/socket.c:745
 __sys_sendto+0x62c/0x7b0 net/socket.c:2191
 __do_sys_sendto net/socket.c:2203 [inline]
 __se_sys_sendto net/socket.c:2199 [inline]
 __x64_sys_sendto+0x130/0x200 net/socket.c:2199
 do_syscall_64+0xd8/0x1f0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x6d/0x75

Uninit was created at:
 slab_post_alloc_hook mm/slub.c:3804 [inline]
 slab_alloc_node mm/slub.c:3845 [inline]
 kmem_cache_alloc_node+0x5f6/0xc50 mm/slub.c:3888
 kmalloc_reserve+0x13c/0x4a0 net/core/skbuff.c:577
 __alloc_skb+0x35a/0x7c0 net/core/skbuff.c:668
 alloc_skb include/linux/skbuff.h:1318 [inline]
 __ip_append_data+0x49ab/0x68c0 net/ipv4/ip_output.c:1128
 ip_append_data+0x1e7/0x260 net/ipv4/ip_output.c:1365
 raw_sendmsg+0x22b1/0x2690 net/ipv4/raw.c:648
 inet_sendmsg+0x27b/0x2a0 net/ipv4/af_inet.c:851
 sock_sendmsg_nosec net/socket.c:730 [inline]
 __sock_sendmsg+0x274/0x3c0 net/socket.c:745
 __sys_sendto+0x62c/0x7b0 net/socket.c:2191
 __do_sys_sendto net/socket.c:2203 [inline]
 __se_sys_sendto net/socket.c:2199 [inline]
 __x64_sys_sendto+0x130/0x200 net/socket.c:2199
 do_syscall_64+0xd8/0x1f0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x6d/0x75

CPU: 1 PID: 15709 Comm: syz-executor.7 Not tainted 6.8.0-11567-gb3603fcb79b1 #25
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-1.fc39 04/01/2014

Fixes: 99e5aca ("ipv4: Fix potential uninit variable access bug in __ip_make_skb()")
Reported-by: syzkaller <syzkaller@googlegroups.com>
Signed-off-by: Shigeru Yoshida <syoshida@redhat.com>
Link: https://lore.kernel.org/r/20240430123945.2057348-1-syoshida@redhat.com
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
opsiff pushed a commit that referenced this pull request Oct 11, 2024
@LiBaokun96 @opsiff
cachefiles: fix dentry leak in cachefiles_open_file()
d8d462a 
commit da6ef2d upstream.

A dentry leak may be caused when a lookup cookie and a cull are concurrent:

            P1             |             P2
-----------------------------------------------------------
cachefiles_lookup_cookie
  cachefiles_look_up_object
    lookup_one_positive_unlocked
     // get dentry
                            cachefiles_cull
                              inode->i_flags |= S_KERNEL_FILE;
    cachefiles_open_file
      cachefiles_mark_inode_in_use
        __cachefiles_mark_inode_in_use
          can_use = false
          if (!(inode->i_flags & S_KERNEL_FILE))
            can_use = true
	  return false
        return false
        // Returns an error but doesn't put dentry

After that the following WARNING will be triggered when the backend folder
is umounted:

==================================================================
BUG: Dentry 000000008ad87947{i=7a,n=Dx_1_1.img}  still in use (1) [unmount of ext4 sda]
WARNING: CPU: 4 PID: 359261 at fs/dcache.c:1767 umount_check+0x5d/0x70
CPU: 4 PID: 359261 Comm: umount Not tainted 6.6.0-dirty #25
RIP: 0010:umount_check+0x5d/0x70
Call Trace:
 <TASK>
 d_walk+0xda/0x2b0
 do_one_tree+0x20/0x40
 shrink_dcache_for_umount+0x2c/0x90
 generic_shutdown_super+0x20/0x160
 kill_block_super+0x1a/0x40
 ext4_kill_sb+0x22/0x40
 deactivate_locked_super+0x35/0x80
 cleanup_mnt+0x104/0x160
==================================================================

Whether cachefiles_open_file() returns true or false, the reference count
obtained by lookup_positive_unlocked() in cachefiles_look_up_object()
should be released.

Therefore release that reference count in cachefiles_look_up_object() to
fix the above issue and simplify the code.

Fixes: 1f08c92 ("cachefiles: Implement backing file wrangling")
Cc: stable@kernel.org
Signed-off-by: Baokun Li <libaokun1@huawei.com>
Link: https://lore.kernel.org/r/20240829083409.3788142-1-libaokun@huaweicloud.com
Acked-by: David Howells <dhowells@redhat.com>
Signed-off-by: Christian Brauner <brauner@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
opsiff pushed a commit that referenced this pull request Dec 15, 2024
@opsiff
HID: wacom: fix when get product name maybe null pointer
4823aa5 
commit 5954821 upstream.

Due to incorrect dev->product reporting by certain devices, null
pointer dereferences occur when dev->product is empty, leading to
potential system crashes.

This issue was found on EXCELSIOR DL37-D05 device with
Loongson-LS3A6000-7A2000-DL37 motherboard.

Kernel logs:
[   56.470885] usb 4-3: new full-speed USB device number 4 using ohci-pci
[   56.671638] usb 4-3: string descriptor 0 read error: -22
[   56.671644] usb 4-3: New USB device found, idVendor=056a, idProduct=0374, bcdDevice= 1.07
[   56.671647] usb 4-3: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.678839] hid-generic 0003:056A:0374.0004: hiddev0,hidraw3: USB HID v1.10 Device [HID 056a:0374] on usb-0000:00:05.0-3/input0
[   56.697719] CPU 2 Unable to handle kernel paging request at virtual address 0000000000000000, era == 90000000066e35c8, ra == ffff800004f98a80
[   56.697732] Oops[#1]:
[   56.697734] CPU: 2 PID: 2742 Comm: (udev-worker) Tainted: G           OE      6.6.0-loong64-desktop #25.00.2000.015
[   56.697737] Hardware name: Inspur CE520L2/C09901N000000000, BIOS 2.09.00 10/11/2024
[   56.697739] pc 90000000066e35c8 ra ffff800004f98a80 tp 9000000125478000 sp 900000012547b8a0
[   56.697741] a0 0000000000000000 a1 ffff800004818b28 a2 0000000000000000 a3 0000000000000000
[   56.697743] a4 900000012547b8f0 a5 0000000000000000 a6 0000000000000000 a7 0000000000000000
[   56.697745] t0 ffff800004818b2d t1 0000000000000000 t2 0000000000000003 t3 0000000000000005
[   56.697747] t4 0000000000000000 t5 0000000000000000 t6 0000000000000000 t7 0000000000000000
[   56.697748] t8 0000000000000000 u0 0000000000000000 s9 0000000000000000 s0 900000011aa48028
[   56.697750] s1 0000000000000000 s2 0000000000000000 s3 ffff800004818e80 s4 ffff800004810000
[   56.697751] s5 90000001000b98d0 s6 ffff800004811f88 s7 ffff800005470440 s8 0000000000000000
[   56.697753]    ra: ffff800004f98a80 wacom_update_name+0xe0/0x300 [wacom]
[   56.697802]   ERA: 90000000066e35c8 strstr+0x28/0x120
[   56.697806]  CRMD: 000000b0 (PLV0 -IE -DA +PG DACF=CC DACM=CC -WE)
[   56.697816]  PRMD: 0000000c (PPLV0 +PIE +PWE)
[   56.697821]  EUEN: 00000000 (-FPE -SXE -ASXE -BTE)
[   56.697827]  ECFG: 00071c1d (LIE=0,2-4,10-12 VS=7)
[   56.697831] ESTAT: 00010000 [PIL] (IS= ECode=1 EsubCode=0)
[   56.697835]  BADV: 0000000000000000
[   56.697836]  PRID: 0014d000 (Loongson-64bit, Loongson-3A6000)
[   56.697838] Modules linked in: wacom(+) bnep bluetooth rfkill qrtr nls_iso8859_1 nls_cp437 snd_hda_codec_conexant snd_hda_codec_generic ledtrig_audio snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg snd_hda_codec snd_hda_core snd_hwdep snd_pcm snd_timer snd soundcore input_leds mousedev led_class joydev deepin_netmonitor(OE) fuse nfnetlink dmi_sysfs ip_tables x_tables overlay amdgpu amdxcp drm_exec gpu_sched drm_buddy radeon drm_suballoc_helper i2c_algo_bit drm_ttm_helper r8169 ttm drm_display_helper spi_loongson_pci xhci_pci cec xhci_pci_renesas spi_loongson_core hid_generic realtek gpio_loongson_64bit
[   56.697887] Process (udev-worker) (pid: 2742, threadinfo=00000000aee0d8b4, task=00000000a9eff1f3)
[   56.697890] Stack : 0000000000000000 ffff800004817e00 0000000000000000 0000251c00000000
[   56.697896]         0000000000000000 00000011fffffffd 0000000000000000 0000000000000000
[   56.697901]         0000000000000000 1b67a968695184b9 0000000000000000 90000001000b98d0
[   56.697906]         90000001000bb8d0 900000011aa48028 0000000000000000 ffff800004f9d74c
[   56.697911]         90000001000ba000 ffff800004f9ce58 0000000000000000 ffff800005470440
[   56.697916]         ffff800004811f88 90000001000b98d0 9000000100da2aa8 90000001000bb8d0
[   56.697921]         0000000000000000 90000001000ba000 900000011aa48028 ffff800004f9d74c
[   56.697926]         ffff8000054704e8 90000001000bb8b8 90000001000ba000 0000000000000000
[   56.697931]         90000001000bb8d0 9000000006307564 9000000005e666e0 90000001752359b8
[   56.697936]         9000000008cbe400 900000000804d000 9000000005e666e0 0000000000000000
[   56.697941]         ...
[   56.697944] Call Trace:
[   56.697945] [<90000000066e35c8>] strstr+0x28/0x120
[   56.697950] [<ffff800004f98a80>] wacom_update_name+0xe0/0x300 [wacom]
[   56.698000] [<ffff800004f9ce58>] wacom_parse_and_register+0x338/0x900 [wacom]
[   56.698050] [<ffff800004f9d74c>] wacom_probe+0x32c/0x420 [wacom]
[   56.698099] [<9000000006307564>] hid_device_probe+0x144/0x260
[   56.698103] [<9000000005e65d68>] really_probe+0x208/0x540
[   56.698109] [<9000000005e661dc>] __driver_probe_device+0x13c/0x1e0
[   56.698112] [<9000000005e66620>] driver_probe_device+0x40/0x100
[   56.698116] [<9000000005e6680c>] __device_attach_driver+0x12c/0x180
[   56.698119] [<9000000005e62bc8>] bus_for_each_drv+0x88/0x160
[   56.698123] [<9000000005e66468>] __device_attach+0x108/0x260
[   56.698126] [<9000000005e63918>] device_reprobe+0x78/0x100
[   56.698129] [<9000000005e62a68>] bus_for_each_dev+0x88/0x160
[   56.698132] [<9000000006304e54>] __hid_bus_driver_added+0x34/0x80
[   56.698134] [<9000000005e62bc8>] bus_for_each_drv+0x88/0x160
[   56.698137] [<9000000006304df0>] __hid_register_driver+0x70/0xa0
[   56.698142] [<9000000004e10fe4>] do_one_initcall+0x104/0x320
[   56.698146] [<9000000004f38150>] do_init_module+0x90/0x2c0
[   56.698151] [<9000000004f3a3d8>] init_module_from_file+0xb8/0x120
[   56.698155] [<9000000004f3a590>] idempotent_init_module+0x150/0x3a0
[   56.698159] [<9000000004f3a890>] sys_finit_module+0xb0/0x140
[   56.698163] [<900000000671e4e8>] do_syscall+0x88/0xc0
[   56.698166] [<9000000004e12404>] handle_syscall+0xc4/0x160
[   56.698171] Code: 0011958f  00150224  5800cd85 <2a00022c> 00150004  4000c180  0015022c  03400000  03400000
[   56.698192] ---[ end trace 0000000000000000 ]---

Fixes: 09dc28a ("HID: wacom: Improve generic name generation")
Reported-by: Zhenxing Chen <chenzhenxing@uniontech.com>
Co-developed-by: Xu Rao <raoxu@uniontech.com>
Signed-off-by: Xu Rao <raoxu@uniontech.com>
Signed-off-by: WangYuli <wangyuli@uniontech.com>
Link: https://patch.msgid.link/B31757FE8E1544CF+20241125052616.18261-1-wangyuli@uniontech.com
Cc: stable@vger.kernel.org
Signed-off-by: Benjamin Tissoires <bentiss@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
opsiff pushed a commit to opsiff/UOS-kernel that referenced this pull request Jul 2, 2025
@tamird @opsiff
ACPICA: Apply pack(1) to union aml_resource
6d25b6a 
[ Upstream commit eedf3e3 ]

ACPICA commit 1c28da2242783579d59767617121035dafba18c3

This was originally done in NetBSD:
NetBSD/src@b69d1ac
and is the correct alternative to the smattering of `memcpy`s I
previously contributed to this repository.

This also sidesteps the newly strict checks added in UBSAN:
llvm/llvm-project@7926744

Before this change we see the following UBSAN stack trace in Fuchsia:

  #0    0x000021afcfdeca5e in acpi_rs_get_address_common(struct acpi_resource*, union aml_resource*) ../../third_party/acpica/source/components/resources/rsaddr.c:329 <platform-bus-x86.so>+0x6aca5e
  #1.2  0x000021982bc4af3c in ubsan_get_stack_trace() compiler-rt/lib/ubsan/ubsan_diag.cpp:41 <libclang_rt.asan.so>+0x41f3c
  #1.1  0x000021982bc4af3c in maybe_print_stack_trace() compiler-rt/lib/ubsan/ubsan_diag.cpp:51 <libclang_rt.asan.so>+0x41f3c
  #1    0x000021982bc4af3c in ~scoped_report() compiler-rt/lib/ubsan/ubsan_diag.cpp:395 <libclang_rt.asan.so>+0x41f3c
  #2    0x000021982bc4bb6f in handletype_mismatch_impl() compiler-rt/lib/ubsan/ubsan_handlers.cpp:137 <libclang_rt.asan.so>+0x42b6f
  #3    0x000021982bc4b723 in __ubsan_handle_type_mismatch_v1 compiler-rt/lib/ubsan/ubsan_handlers.cpp:142 <libclang_rt.asan.so>+0x42723
  #4    0x000021afcfdeca5e in acpi_rs_get_address_common(struct acpi_resource*, union aml_resource*) ../../third_party/acpica/source/components/resources/rsaddr.c:329 <platform-bus-x86.so>+0x6aca5e
  deepin-community#5    0x000021afcfdf2089 in acpi_rs_convert_aml_to_resource(struct acpi_resource*, union aml_resource*, struct acpi_rsconvert_info*) ../../third_party/acpica/source/components/resources/rsmisc.c:355 <platform-bus-x86.so>+0x6b2089
  deepin-community#6    0x000021afcfded169 in acpi_rs_convert_aml_to_resources(u8*, u32, u32, u8, void**) ../../third_party/acpica/source/components/resources/rslist.c:137 <platform-bus-x86.so>+0x6ad169
  deepin-community#7    0x000021afcfe2d24a in acpi_ut_walk_aml_resources(struct acpi_walk_state*, u8*, acpi_size, acpi_walk_aml_callback, void**) ../../third_party/acpica/source/components/utilities/utresrc.c:237 <platform-bus-x86.so>+0x6ed24a
  deepin-community#8    0x000021afcfde66b7 in acpi_rs_create_resource_list(union acpi_operand_object*, struct acpi_buffer*) ../../third_party/acpica/source/components/resources/rscreate.c:199 <platform-bus-x86.so>+0x6a66b7
  deepin-community#9    0x000021afcfdf6979 in acpi_rs_get_method_data(acpi_handle, const char*, struct acpi_buffer*) ../../third_party/acpica/source/components/resources/rsutils.c:770 <platform-bus-x86.so>+0x6b6979
  deepin-community#10   0x000021afcfdf708f in acpi_walk_resources(acpi_handle, char*, acpi_walk_resource_callback, void*) ../../third_party/acpica/source/components/resources/rsxface.c:731 <platform-bus-x86.so>+0x6b708f
  deepin-community#11   0x000021afcfa95dcf in acpi::acpi_impl::walk_resources(acpi::acpi_impl*, acpi_handle, const char*, acpi::Acpi::resources_callable) ../../src/devices/board/lib/acpi/acpi-impl.cc:41 <platform-bus-x86.so>+0x355dcf
  deepin-community#12   0x000021afcfaa8278 in acpi::device_builder::gather_resources(acpi::device_builder*, acpi::Acpi*, fidl::any_arena&, acpi::Manager*, acpi::device_builder::gather_resources_callback) ../../src/devices/board/lib/acpi/device-builder.cc:84 <platform-bus-x86.so>+0x368278
  deepin-community#13   0x000021afcfbddb87 in acpi::Manager::configure_discovered_devices(acpi::Manager*) ../../src/devices/board/lib/acpi/manager.cc:75 <platform-bus-x86.so>+0x49db87
  deepin-community#14   0x000021afcf99091d in publish_acpi_devices(acpi::Manager*, zx_device_t*, zx_device_t*) ../../src/devices/board/drivers/x86/acpi-nswalk.cc:95 <platform-bus-x86.so>+0x25091d
  deepin-community#15   0x000021afcf9c1d4e in x86::X86::do_init(x86::X86*) ../../src/devices/board/drivers/x86/x86.cc:60 <platform-bus-x86.so>+0x281d4e
  deepin-community#16   0x000021afcf9e33ad in λ(x86::X86::ddk_init::(anon class)*) ../../src/devices/board/drivers/x86/x86.cc:77 <platform-bus-x86.so>+0x2a33ad
  deepin-community#17   0x000021afcf9e313e in fit::internal::target<(lambda at../../src/devices/board/drivers/x86/x86.cc:76:19), false, false, std::__2::allocator<std::byte>, void>::invoke(void*) ../../sdk/lib/fit/include/lib/fit/internal/function.h:183 <platform-bus-x86.so>+0x2a313e
  deepin-community#18   0x000021afcfbab4c7 in fit::internal::function_base<16UL, false, void(), std::__2::allocator<std::byte>>::invoke(const fit::internal::function_base<16UL, false, void (), std::__2::allocator<std::byte> >*) ../../sdk/lib/fit/include/lib/fit/internal/function.h:522 <platform-bus-x86.so>+0x46b4c7
  deepin-community#19   0x000021afcfbab342 in fit::function_impl<16UL, false, void(), std::__2::allocator<std::byte>>::operator()(const fit::function_impl<16UL, false, void (), std::__2::allocator<std::byte> >*) ../../sdk/lib/fit/include/lib/fit/function.h:315 <platform-bus-x86.so>+0x46b342
  deepin-community#20   0x000021afcfcd98c3 in async::internal::retained_task::Handler(async_dispatcher_t*, async_task_t*, zx_status_t) ../../sdk/lib/async/task.cc:24 <platform-bus-x86.so>+0x5998c3
  deepin-community#21   0x00002290f9924616 in λ(const driver_runtime::Dispatcher::post_task::(anon class)*, std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request> >, zx_status_t) ../../src/devices/bin/driver_runtime/dispatcher.cc:789 <libdriver_runtime.so>+0x10a616
  deepin-community#22   0x00002290f9924323 in fit::internal::target<(lambda at../../src/devices/bin/driver_runtime/dispatcher.cc:788:7), true, false, std::__2::allocator<std::byte>, void, std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request>>, int>::invoke(void*, std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request> >, int) ../../sdk/lib/fit/include/lib/fit/internal/function.h:128 <libdriver_runtime.so>+0x10a323
  deepin-community#23   0x00002290f9904b76 in fit::internal::function_base<24UL, true, void(std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request>>, int), std::__2::allocator<std::byte>>::invoke(const fit::internal::function_base<24UL, true, void (std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request> >, int), std::__2::allocator<std::byte> >*, std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request> >, int) ../../sdk/lib/fit/include/lib/fit/internal/function.h:522 <libdriver_runtime.so>+0xeab76
  deepin-community#24   0x00002290f9904831 in fit::callback_impl<24UL, true, void(std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request>>, int), std::__2::allocator<std::byte>>::operator()(fit::callback_impl<24UL, true, void (std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request> >, int), std::__2::allocator<std::byte> >*, std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request> >, int) ../../sdk/lib/fit/include/lib/fit/function.h:471 <libdriver_runtime.so>+0xea831
  deepin-community#25   0x00002290f98d5adc in driver_runtime::callback_request::Call(driver_runtime::callback_request*, std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request> >, zx_status_t) ../../src/devices/bin/driver_runtime/callback_request.h:74 <libdriver_runtime.so>+0xbbadc
  deepin-community#26   0x00002290f98e1e58 in driver_runtime::Dispatcher::dispatch_callback(driver_runtime::Dispatcher*, std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request> >) ../../src/devices/bin/driver_runtime/dispatcher.cc:1248 <libdriver_runtime.so>+0xc7e58
  deepin-community#27   0x00002290f98e4159 in driver_runtime::Dispatcher::dispatch_callbacks(driver_runtime::Dispatcher*, std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter> >, fbl::ref_ptr<driver_runtime::Dispatcher>) ../../src/devices/bin/driver_runtime/dispatcher.cc:1308 <libdriver_runtime.so>+0xca159
  deepin-community#28   0x00002290f9918414 in λ(const driver_runtime::Dispatcher::create_with_adder::(anon class)*, std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter> >, fbl::ref_ptr<driver_runtime::Dispatcher>) ../../src/devices/bin/driver_runtime/dispatcher.cc:353 <libdriver_runtime.so>+0xfe414
  deepin-community#29   0x00002290f991812d in fit::internal::target<(lambda at../../src/devices/bin/driver_runtime/dispatcher.cc:351:7), true, false, std::__2::allocator<std::byte>, void, std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter>>, fbl::ref_ptr<driver_runtime::Dispatcher>>::invoke(void*, std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter> >, fbl::ref_ptr<driver_runtime::Dispatcher>) ../../sdk/lib/fit/include/lib/fit/internal/function.h:128 <libdriver_runtime.so>+0xfe12d
  deepin-community#30   0x00002290f9906fc7 in fit::internal::function_base<8UL, true, void(std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter>>, fbl::ref_ptr<driver_runtime::Dispatcher>), std::__2::allocator<std::byte>>::invoke(const fit::internal::function_base<8UL, true, void (std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter> >, fbl::ref_ptr<driver_runtime::Dispatcher>), std::__2::allocator<std::byte> >*, std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter> >, fbl::ref_ptr<driver_runtime::Dispatcher>) ../../sdk/lib/fit/include/lib/fit/internal/function.h:522 <libdriver_runtime.so>+0xecfc7
  deepin-community#31   0x00002290f9906c66 in fit::function_impl<8UL, true, void(std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter>>, fbl::ref_ptr<driver_runtime::Dispatcher>), std::__2::allocator<std::byte>>::operator()(const fit::function_impl<8UL, true, void (std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter> >, fbl::ref_ptr<driver_runtime::Dispatcher>), std::__2::allocator<std::byte> >*, std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter> >, fbl::ref_ptr<driver_runtime::Dispatcher>) ../../sdk/lib/fit/include/lib/fit/function.h:315 <libdriver_runtime.so>+0xecc66
  deepin-community#32   0x00002290f98e73d9 in driver_runtime::Dispatcher::event_waiter::invoke_callback(driver_runtime::Dispatcher::event_waiter*, std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter> >, fbl::ref_ptr<driver_runtime::Dispatcher>) ../../src/devices/bin/driver_runtime/dispatcher.h:543 <libdriver_runtime.so>+0xcd3d9
  deepin-community#33   0x00002290f98e700d in driver_runtime::Dispatcher::event_waiter::handle_event(std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter> >, async_dispatcher_t*, async::wait_base*, zx_status_t, zx_packet_signal_t const*) ../../src/devices/bin/driver_runtime/dispatcher.cc:1442 <libdriver_runtime.so>+0xcd00d
  deepin-community#34   0x00002290f9918983 in async_loop_owned_event_handler<driver_runtime::Dispatcher::event_waiter>::handle_event(async_loop_owned_event_handler<driver_runtime::Dispatcher::event_waiter>*, async_dispatcher_t*, async::wait_base*, zx_status_t, zx_packet_signal_t const*) ../../src/devices/bin/driver_runtime/async_loop_owned_event_handler.h:59 <libdriver_runtime.so>+0xfe983
  deepin-community#35   0x00002290f9918b9e in async::wait_method<async_loop_owned_event_handler<driver_runtime::Dispatcher::event_waiter>, &async_loop_owned_event_handler<driver_runtime::Dispatcher::event_waiter>::handle_event>::call_handler(async_dispatcher_t*, async_wait_t*, zx_status_t, zx_packet_signal_t const*) ../../sdk/lib/async/include/lib/async/cpp/wait.h:201 <libdriver_runtime.so>+0xfeb9e
  deepin-community#36   0x00002290f99bf509 in async_loop_dispatch_wait(async_loop_t*, async_wait_t*, zx_status_t, zx_packet_signal_t const*) ../../sdk/lib/async-loop/loop.c:394 <libdriver_runtime.so>+0x1a5509
  deepin-community#37   0x00002290f99b9958 in async_loop_run_once(async_loop_t*, zx_time_t) ../../sdk/lib/async-loop/loop.c:343 <libdriver_runtime.so>+0x19f958
  deepin-community#38   0x00002290f99b9247 in async_loop_run(async_loop_t*, zx_time_t, _Bool) ../../sdk/lib/async-loop/loop.c:301 <libdriver_runtime.so>+0x19f247
  deepin-community#39   0x00002290f99ba962 in async_loop_run_thread(void*) ../../sdk/lib/async-loop/loop.c:860 <libdriver_runtime.so>+0x1a0962
  deepin-community#40   0x000041afd176ef30 in start_c11(void*) ../../zircon/third_party/ulib/musl/pthread/pthread_create.c:63 <libc.so>+0x84f30
  deepin-community#41   0x000041afd18a448d in thread_trampoline(uintptr_t, uintptr_t) ../../zircon/system/ulib/runtime/thread.cc:100 <libc.so>+0x1ba48d

Link: acpica/acpica@1c28da22
Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
Link: https://patch.msgid.link/4664267.LvFx2qVVIh@rjwysocki.net
Signed-off-by: Tamir Duberstein <tamird@gmail.com>
[ rjw: Pick up the tag from Tamir ]
Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
(cherry picked from commit 7efa7856f460a5e8c63cb891212c6d5f4eafbc46)
opsiff pushed a commit to opsiff/UOS-kernel that referenced this pull request Jul 2, 2025
@tamird @opsiff
ACPICA: Apply pack(1) to union aml_resource
41dc990 
[ Upstream commit eedf3e3 ]

ACPICA commit 1c28da2242783579d59767617121035dafba18c3

This was originally done in NetBSD:
NetBSD/src@b69d1ac
and is the correct alternative to the smattering of `memcpy`s I
previously contributed to this repository.

This also sidesteps the newly strict checks added in UBSAN:
llvm/llvm-project@7926744

Before this change we see the following UBSAN stack trace in Fuchsia:

  #0    0x000021afcfdeca5e in acpi_rs_get_address_common(struct acpi_resource*, union aml_resource*) ../../third_party/acpica/source/components/resources/rsaddr.c:329 <platform-bus-x86.so>+0x6aca5e
  #1.2  0x000021982bc4af3c in ubsan_get_stack_trace() compiler-rt/lib/ubsan/ubsan_diag.cpp:41 <libclang_rt.asan.so>+0x41f3c
  #1.1  0x000021982bc4af3c in maybe_print_stack_trace() compiler-rt/lib/ubsan/ubsan_diag.cpp:51 <libclang_rt.asan.so>+0x41f3c
  #1    0x000021982bc4af3c in ~scoped_report() compiler-rt/lib/ubsan/ubsan_diag.cpp:395 <libclang_rt.asan.so>+0x41f3c
  #2    0x000021982bc4bb6f in handletype_mismatch_impl() compiler-rt/lib/ubsan/ubsan_handlers.cpp:137 <libclang_rt.asan.so>+0x42b6f
  #3    0x000021982bc4b723 in __ubsan_handle_type_mismatch_v1 compiler-rt/lib/ubsan/ubsan_handlers.cpp:142 <libclang_rt.asan.so>+0x42723
  #4    0x000021afcfdeca5e in acpi_rs_get_address_common(struct acpi_resource*, union aml_resource*) ../../third_party/acpica/source/components/resources/rsaddr.c:329 <platform-bus-x86.so>+0x6aca5e
  deepin-community#5    0x000021afcfdf2089 in acpi_rs_convert_aml_to_resource(struct acpi_resource*, union aml_resource*, struct acpi_rsconvert_info*) ../../third_party/acpica/source/components/resources/rsmisc.c:355 <platform-bus-x86.so>+0x6b2089
  deepin-community#6    0x000021afcfded169 in acpi_rs_convert_aml_to_resources(u8*, u32, u32, u8, void**) ../../third_party/acpica/source/components/resources/rslist.c:137 <platform-bus-x86.so>+0x6ad169
  deepin-community#7    0x000021afcfe2d24a in acpi_ut_walk_aml_resources(struct acpi_walk_state*, u8*, acpi_size, acpi_walk_aml_callback, void**) ../../third_party/acpica/source/components/utilities/utresrc.c:237 <platform-bus-x86.so>+0x6ed24a
  deepin-community#8    0x000021afcfde66b7 in acpi_rs_create_resource_list(union acpi_operand_object*, struct acpi_buffer*) ../../third_party/acpica/source/components/resources/rscreate.c:199 <platform-bus-x86.so>+0x6a66b7
  deepin-community#9    0x000021afcfdf6979 in acpi_rs_get_method_data(acpi_handle, const char*, struct acpi_buffer*) ../../third_party/acpica/source/components/resources/rsutils.c:770 <platform-bus-x86.so>+0x6b6979
  deepin-community#10   0x000021afcfdf708f in acpi_walk_resources(acpi_handle, char*, acpi_walk_resource_callback, void*) ../../third_party/acpica/source/components/resources/rsxface.c:731 <platform-bus-x86.so>+0x6b708f
  deepin-community#11   0x000021afcfa95dcf in acpi::acpi_impl::walk_resources(acpi::acpi_impl*, acpi_handle, const char*, acpi::Acpi::resources_callable) ../../src/devices/board/lib/acpi/acpi-impl.cc:41 <platform-bus-x86.so>+0x355dcf
  deepin-community#12   0x000021afcfaa8278 in acpi::device_builder::gather_resources(acpi::device_builder*, acpi::Acpi*, fidl::any_arena&, acpi::Manager*, acpi::device_builder::gather_resources_callback) ../../src/devices/board/lib/acpi/device-builder.cc:84 <platform-bus-x86.so>+0x368278
  deepin-community#13   0x000021afcfbddb87 in acpi::Manager::configure_discovered_devices(acpi::Manager*) ../../src/devices/board/lib/acpi/manager.cc:75 <platform-bus-x86.so>+0x49db87
  deepin-community#14   0x000021afcf99091d in publish_acpi_devices(acpi::Manager*, zx_device_t*, zx_device_t*) ../../src/devices/board/drivers/x86/acpi-nswalk.cc:95 <platform-bus-x86.so>+0x25091d
  deepin-community#15   0x000021afcf9c1d4e in x86::X86::do_init(x86::X86*) ../../src/devices/board/drivers/x86/x86.cc:60 <platform-bus-x86.so>+0x281d4e
  deepin-community#16   0x000021afcf9e33ad in λ(x86::X86::ddk_init::(anon class)*) ../../src/devices/board/drivers/x86/x86.cc:77 <platform-bus-x86.so>+0x2a33ad
  deepin-community#17   0x000021afcf9e313e in fit::internal::target<(lambda at../../src/devices/board/drivers/x86/x86.cc:76:19), false, false, std::__2::allocator<std::byte>, void>::invoke(void*) ../../sdk/lib/fit/include/lib/fit/internal/function.h:183 <platform-bus-x86.so>+0x2a313e
  deepin-community#18   0x000021afcfbab4c7 in fit::internal::function_base<16UL, false, void(), std::__2::allocator<std::byte>>::invoke(const fit::internal::function_base<16UL, false, void (), std::__2::allocator<std::byte> >*) ../../sdk/lib/fit/include/lib/fit/internal/function.h:522 <platform-bus-x86.so>+0x46b4c7
  deepin-community#19   0x000021afcfbab342 in fit::function_impl<16UL, false, void(), std::__2::allocator<std::byte>>::operator()(const fit::function_impl<16UL, false, void (), std::__2::allocator<std::byte> >*) ../../sdk/lib/fit/include/lib/fit/function.h:315 <platform-bus-x86.so>+0x46b342
  deepin-community#20   0x000021afcfcd98c3 in async::internal::retained_task::Handler(async_dispatcher_t*, async_task_t*, zx_status_t) ../../sdk/lib/async/task.cc:24 <platform-bus-x86.so>+0x5998c3
  deepin-community#21   0x00002290f9924616 in λ(const driver_runtime::Dispatcher::post_task::(anon class)*, std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request> >, zx_status_t) ../../src/devices/bin/driver_runtime/dispatcher.cc:789 <libdriver_runtime.so>+0x10a616
  deepin-community#22   0x00002290f9924323 in fit::internal::target<(lambda at../../src/devices/bin/driver_runtime/dispatcher.cc:788:7), true, false, std::__2::allocator<std::byte>, void, std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request>>, int>::invoke(void*, std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request> >, int) ../../sdk/lib/fit/include/lib/fit/internal/function.h:128 <libdriver_runtime.so>+0x10a323
  deepin-community#23   0x00002290f9904b76 in fit::internal::function_base<24UL, true, void(std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request>>, int), std::__2::allocator<std::byte>>::invoke(const fit::internal::function_base<24UL, true, void (std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request> >, int), std::__2::allocator<std::byte> >*, std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request> >, int) ../../sdk/lib/fit/include/lib/fit/internal/function.h:522 <libdriver_runtime.so>+0xeab76
  deepin-community#24   0x00002290f9904831 in fit::callback_impl<24UL, true, void(std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request>>, int), std::__2::allocator<std::byte>>::operator()(fit::callback_impl<24UL, true, void (std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request> >, int), std::__2::allocator<std::byte> >*, std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request> >, int) ../../sdk/lib/fit/include/lib/fit/function.h:471 <libdriver_runtime.so>+0xea831
  deepin-community#25   0x00002290f98d5adc in driver_runtime::callback_request::Call(driver_runtime::callback_request*, std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request> >, zx_status_t) ../../src/devices/bin/driver_runtime/callback_request.h:74 <libdriver_runtime.so>+0xbbadc
  deepin-community#26   0x00002290f98e1e58 in driver_runtime::Dispatcher::dispatch_callback(driver_runtime::Dispatcher*, std::__2::unique_ptr<driver_runtime::callback_request, std::__2::default_delete<driver_runtime::callback_request> >) ../../src/devices/bin/driver_runtime/dispatcher.cc:1248 <libdriver_runtime.so>+0xc7e58
  deepin-community#27   0x00002290f98e4159 in driver_runtime::Dispatcher::dispatch_callbacks(driver_runtime::Dispatcher*, std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter> >, fbl::ref_ptr<driver_runtime::Dispatcher>) ../../src/devices/bin/driver_runtime/dispatcher.cc:1308 <libdriver_runtime.so>+0xca159
  deepin-community#28   0x00002290f9918414 in λ(const driver_runtime::Dispatcher::create_with_adder::(anon class)*, std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter> >, fbl::ref_ptr<driver_runtime::Dispatcher>) ../../src/devices/bin/driver_runtime/dispatcher.cc:353 <libdriver_runtime.so>+0xfe414
  deepin-community#29   0x00002290f991812d in fit::internal::target<(lambda at../../src/devices/bin/driver_runtime/dispatcher.cc:351:7), true, false, std::__2::allocator<std::byte>, void, std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter>>, fbl::ref_ptr<driver_runtime::Dispatcher>>::invoke(void*, std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter> >, fbl::ref_ptr<driver_runtime::Dispatcher>) ../../sdk/lib/fit/include/lib/fit/internal/function.h:128 <libdriver_runtime.so>+0xfe12d
  deepin-community#30   0x00002290f9906fc7 in fit::internal::function_base<8UL, true, void(std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter>>, fbl::ref_ptr<driver_runtime::Dispatcher>), std::__2::allocator<std::byte>>::invoke(const fit::internal::function_base<8UL, true, void (std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter> >, fbl::ref_ptr<driver_runtime::Dispatcher>), std::__2::allocator<std::byte> >*, std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter> >, fbl::ref_ptr<driver_runtime::Dispatcher>) ../../sdk/lib/fit/include/lib/fit/internal/function.h:522 <libdriver_runtime.so>+0xecfc7
  deepin-community#31   0x00002290f9906c66 in fit::function_impl<8UL, true, void(std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter>>, fbl::ref_ptr<driver_runtime::Dispatcher>), std::__2::allocator<std::byte>>::operator()(const fit::function_impl<8UL, true, void (std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter> >, fbl::ref_ptr<driver_runtime::Dispatcher>), std::__2::allocator<std::byte> >*, std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter> >, fbl::ref_ptr<driver_runtime::Dispatcher>) ../../sdk/lib/fit/include/lib/fit/function.h:315 <libdriver_runtime.so>+0xecc66
  deepin-community#32   0x00002290f98e73d9 in driver_runtime::Dispatcher::event_waiter::invoke_callback(driver_runtime::Dispatcher::event_waiter*, std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter> >, fbl::ref_ptr<driver_runtime::Dispatcher>) ../../src/devices/bin/driver_runtime/dispatcher.h:543 <libdriver_runtime.so>+0xcd3d9
  deepin-community#33   0x00002290f98e700d in driver_runtime::Dispatcher::event_waiter::handle_event(std::__2::unique_ptr<driver_runtime::Dispatcher::event_waiter, std::__2::default_delete<driver_runtime::Dispatcher::event_waiter> >, async_dispatcher_t*, async::wait_base*, zx_status_t, zx_packet_signal_t const*) ../../src/devices/bin/driver_runtime/dispatcher.cc:1442 <libdriver_runtime.so>+0xcd00d
  deepin-community#34   0x00002290f9918983 in async_loop_owned_event_handler<driver_runtime::Dispatcher::event_waiter>::handle_event(async_loop_owned_event_handler<driver_runtime::Dispatcher::event_waiter>*, async_dispatcher_t*, async::wait_base*, zx_status_t, zx_packet_signal_t const*) ../../src/devices/bin/driver_runtime/async_loop_owned_event_handler.h:59 <libdriver_runtime.so>+0xfe983
  deepin-community#35   0x00002290f9918b9e in async::wait_method<async_loop_owned_event_handler<driver_runtime::Dispatcher::event_waiter>, &async_loop_owned_event_handler<driver_runtime::Dispatcher::event_waiter>::handle_event>::call_handler(async_dispatcher_t*, async_wait_t*, zx_status_t, zx_packet_signal_t const*) ../../sdk/lib/async/include/lib/async/cpp/wait.h:201 <libdriver_runtime.so>+0xfeb9e
  deepin-community#36   0x00002290f99bf509 in async_loop_dispatch_wait(async_loop_t*, async_wait_t*, zx_status_t, zx_packet_signal_t const*) ../../sdk/lib/async-loop/loop.c:394 <libdriver_runtime.so>+0x1a5509
  deepin-community#37   0x00002290f99b9958 in async_loop_run_once(async_loop_t*, zx_time_t) ../../sdk/lib/async-loop/loop.c:343 <libdriver_runtime.so>+0x19f958
  deepin-community#38   0x00002290f99b9247 in async_loop_run(async_loop_t*, zx_time_t, _Bool) ../../sdk/lib/async-loop/loop.c:301 <libdriver_runtime.so>+0x19f247
  deepin-community#39   0x00002290f99ba962 in async_loop_run_thread(void*) ../../sdk/lib/async-loop/loop.c:860 <libdriver_runtime.so>+0x1a0962
  deepin-community#40   0x000041afd176ef30 in start_c11(void*) ../../zircon/third_party/ulib/musl/pthread/pthread_create.c:63 <libc.so>+0x84f30
  deepin-community#41   0x000041afd18a448d in thread_trampoline(uintptr_t, uintptr_t) ../../zircon/system/ulib/runtime/thread.cc:100 <libc.so>+0x1ba48d

Link: acpica/acpica@1c28da22
Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
Link: https://patch.msgid.link/4664267.LvFx2qVVIh@rjwysocki.net
Signed-off-by: Tamir Duberstein <tamird@gmail.com>
[ rjw: Pick up the tag from Tamir ]
Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
(cherry picked from commit 7efa7856f460a5e8c63cb891212c6d5f4eafbc46)
opsiff pushed a commit to opsiff/UOS-kernel that referenced this pull request Jul 11, 2025
@khfeng @gregkh
ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS
303d0f7 
commit 1e41e69 upstream.

UBSAN complains about array-index-out-of-bounds:
[ 1.980703] kernel: UBSAN: array-index-out-of-bounds in /build/linux-9H675w/linux-5.15.0/drivers/ata/libahci.c:968:41
[ 1.980709] kernel: index 15 is out of range for type 'ahci_em_priv [8]'
[ 1.980713] kernel: CPU: 0 PID: 209 Comm: scsi_eh_8 Not tainted 5.15.0-25-generic deepin-community#25-Ubuntu
[ 1.980716] kernel: Hardware name: System manufacturer System Product Name/P5Q3, BIOS 1102 06/11/2010
[ 1.980718] kernel: Call Trace:
[ 1.980721] kernel: <TASK>
[ 1.980723] kernel: show_stack+0x52/0x58
[ 1.980729] kernel: dump_stack_lvl+0x4a/0x5f
[ 1.980734] kernel: dump_stack+0x10/0x12
[ 1.980736] kernel: ubsan_epilogue+0x9/0x45
[ 1.980739] kernel: __ubsan_handle_out_of_bounds.cold+0x44/0x49
[ 1.980742] kernel: ahci_qc_issue+0x166/0x170 [libahci]
[ 1.980748] kernel: ata_qc_issue+0x135/0x240
[ 1.980752] kernel: ata_exec_internal_sg+0x2c4/0x580
[ 1.980754] kernel: ? vprintk_default+0x1d/0x20
[ 1.980759] kernel: ata_exec_internal+0x67/0xa0
[ 1.980762] kernel: sata_pmp_read+0x8d/0xc0
[ 1.980765] kernel: sata_pmp_read_gscr+0x3c/0x90
[ 1.980768] kernel: sata_pmp_attach+0x8b/0x310
[ 1.980771] kernel: ata_eh_revalidate_and_attach+0x28c/0x4b0
[ 1.980775] kernel: ata_eh_recover+0x6b6/0xb30
[ 1.980778] kernel: ? ahci_do_hardreset+0x180/0x180 [libahci]
[ 1.980783] kernel: ? ahci_stop_engine+0xb0/0xb0 [libahci]
[ 1.980787] kernel: ? ahci_do_softreset+0x290/0x290 [libahci]
[ 1.980792] kernel: ? trace_event_raw_event_ata_eh_link_autopsy_qc+0xe0/0xe0
[ 1.980795] kernel: sata_pmp_eh_recover.isra.0+0x214/0x560
[ 1.980799] kernel: sata_pmp_error_handler+0x23/0x40
[ 1.980802] kernel: ahci_error_handler+0x43/0x80 [libahci]
[ 1.980806] kernel: ata_scsi_port_error_handler+0x2b1/0x600
[ 1.980810] kernel: ata_scsi_error+0x9c/0xd0
[ 1.980813] kernel: scsi_error_handler+0xa1/0x180
[ 1.980817] kernel: ? scsi_unjam_host+0x1c0/0x1c0
[ 1.980820] kernel: kthread+0x12a/0x150
[ 1.980823] kernel: ? set_kthread_struct+0x50/0x50
[ 1.980826] kernel: ret_from_fork+0x22/0x30
[ 1.980831] kernel: </TASK>

This happens because sata_pmp_init_links() initialize link->pmp up to
SATA_PMP_MAX_PORTS while em_priv is declared as 8 elements array.

I can't find the maximum Enclosure Management ports specified in AHCI
spec v1.3.1, but "12.2.1 LED message type" states that "Port Multiplier
Information" can utilize 4 bits, which implies it can support up to 16
ports. Hence, use SATA_PMP_MAX_PORTS as EM_MAX_SLOTS to resolve the
issue.

BugLink: https://bugs.launchpad.net/bugs/1970074
Cc: stable@vger.kernel.org
Signed-off-by: Kai-Heng Feng <kai.heng.feng@canonical.com>
Signed-off-by: Damien Le Moal <damien.lemoal@opensource.wdc.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
opsiff added a commit to opsiff/UOS-kernel that referenced this pull request Aug 7, 2025
@opsiff
HAOC: CREDP: fix kernel boot panic without CONFIG_CREDP
61e997f 
Log:
[09:22:50:784] [    4.205148] Kernel panic - not syncing: CRED: put_cred_rcu() sees (____ptrval____) with usage -5␍␊
[09:22:50:793] [    4.214015] CPU: 2 PID: 0 Comm: swapper/2 Not tainted 6.6.101-loong64-desktop-hwe deepin-community#25.01.00.31  ␍␊
[09:22:50:800] [    4.222879] Hardware name: Loongson Loongson-3A6000-HV-7A2000-1w-V0.1-EVB/Loongson-3A6000-HV-7A2000-1w-EVB-V1.21, BIOS Loongson-UDK2018-V4.0.05756-prestab␍␊
[09:22:50:820] [    4.236884] Stack : 90000000044c1c48 9000000002755220 900000000023ff8c 9000000100474000␍␊
[09:22:50:823] [    4.244977]         9000000100263c40 0000000000000000 9000000100263c48 9000000002755220␍␊
[09:22:50:831] [    4.253067]         9000000008a319e0 9000000008a319d8 9000000100263b90 0000000000000001␍␊
[09:22:50:839] [    4.261155]         0000000000000001 a8fd0f104f1068ea 0000000008f40000 9000000100595a80␍␊
[09:22:50:847] [    4.269244]         0000000000000001 fffffffffffffffe 9000000100cba6f0 ffffffffffffffff␍␊
[09:22:50:856] [    4.277332]         0000000000000002 0000000000000003 0000000008f40000 90000000031a1000␍␊
[09:22:50:863] [    4.285421]         90000000031a1000 9000000002755220 0000000000000000 0000000000000000␍␊
[09:22:50:873] [    4.293508]         9000000002717a58 0000000000000000 0000000000000001 900000000a82c0f8␍␊
[09:22:50:880] [    4.301595]         9000000003490b48 9000000002755220 900000000024448c 00007ffff21aa2b3␍␊
[09:22:50:889] [    4.309684]         00000000000002b0 000000000000000c 0000000000000000 0000000000071c1d␍␊
[09:22:50:897] [    4.317773]         ...␍␊
[09:22:50:906] [    4.320327] Call Trace:␍␊
[09:22:50:906] [    4.320329] [<900000000024448c>] show_stack+0x3c/0x150␍␊
[09:22:50:906] [    4.328115] [<900000000023ff88>] dump_stack_lvl+0x5c/0x88␍␊
[09:22:50:914] [    4.333607] [<9000000000220c8c>] panic+0x13c/0x358␍␊
[09:22:50:923] [    4.338489] [<900000000029ff3c>] put_cred_rcu+0x134/0x138␍␊
[09:22:50:923] [    4.343976] [<9000000000331ff8>] rcu_do_batch+0x190/0x600␍␊
[09:22:50:930] [    4.347152] ata3: SATA link down (SStatus 0 SControl 300)␍␊
[09:22:50:939] [    4.354941] [<9000000000337ae8>] rcu_core+0x178/0x3c0␍␊
[09:22:50:939] [    4.360077] [<9000000000271ecc>] handle_softirqs+0x12c/0x3b0␍␊
[09:22:50:946] [    4.365815] [<90000000002722c8>] __irq_exit_rcu+0x120/0x158␍␊
[09:22:50:955] [    4.371465] [<9000000001787494>] do_vint+0x7c/0xd0␍␊
[09:22:50:955] [    4.376338] [<90000000002420cc>] __arch_cpu_idle+0xc/0x10␍␊
[09:22:50:962] [    4.381814] [<9000000001789c38>] arch_cpu_idle+0x8/0x30␍␊
[09:22:50:969] [    4.387117] [<9000000001789de0>] default_idle_call+0x20/0x130␍␊
[09:22:50:979] [    4.392938] [<90000000002da2f4>] do_idle+0xb4/0x130␍␊
[09:22:50:979] [    4.397892] [<90000000002da5c0>] cpu_startup_entry+0x38/0x40␍␊
[09:22:50:988] [    4.403624] [<9000000000252970>] start_secondary+0xa8/0xb8␍␊
[09:22:50:988] [    4.409184] [<900000000178a15c>] smpboot_entry+0x64/0x6c␍␊
[09:22:50:995] [    4.414571] ␍␊
[09:22:50:995] [    4.416157] ------------[ cut here ]------------␍␊
[09:22:51:003] [    4.420850] WARNING: CPU: 2 PID: 0 at kernel/smp.c:786 smp_call_function_many_cond+0x670/0x6e8␍␊
[09:22:51:013] [    4.429526] Modules linked in:␍␊
[09:22:51:013] [    4.432666] CPU: 2 PID: 0 Comm: swapper/2 Not tainted 6.6.101-loong64-desktop-hwe deepin-community#25.01.00.31  ␍␊
[09:22:51:020] [    4.441511] Hardware name: Loongson Loongson-3A6000-HV-7A2000-1w-V0.1-EVB/Loongson-3A6000-HV-7A2000-1w-EVB-V1.21, BIOS Loongson-UDK2018-V4.0.05756-prestab␍␊
[09:22:51:033] [    4.455479] pc 9000000000373620 ra 90000000003736e0 tp 9000000100474000 sp 9000000100263ce0␍␊
[09:22:51:041] [    4.463892] a0 90000000033a49b0 a1 90000000002523d8 a2 0000000000000000 a3 0000000000000000␍␊
[09:22:51:051] [    4.472306] a4 0000000000000000 a5 90000001002639c0 a6 0000000000000001 a7 0000000000000001␍␊
[09:22:51:060] [    4.480719] t0 90000000033a49b0 t1 0000000000000100 t2 0000000000000001 t3 0000000000000103␍␊
[09:22:51:068] [    4.489132] t4 00000000000000ff t5 9000000100cba6e0 t6 ffffffffffffffff t7 0000000000000002␍␊
[09:22:51:077] [    4.497545] t8 0000000000000003 u0 9000000002755220 s9 90000000031a1000 s0 90000000044c17e8␍␊
[09:22:51:087] [    4.505958] s1 0000000000000000 s2 90000000002523d8 s3 90000000033a49b0 s4 9000000002717a58␍␊
[09:22:51:095] [    4.514372] s5 90000000033a5000 s6 0000000000000002 s7 0000000000000002 s8 0000000000000000␍␊
[09:22:51:104] [    4.522788]    ra: 90000000003736e0 smp_call_function+0x38/0x88␍␊
[09:22:51:112] [    4.528784]   ERA: 9000000000373620 smp_call_function_many_cond+0x670/0x6e8␍␊
[09:22:51:122] [    4.535818]  CRMD: 000000b0 (PLV0 -IE -DA +PG DACF=CC DACM=CC -WE)␍␊
[09:22:51:122] [    4.542078]  PRMD: 00000008 (PPLV0 -PIE +PWE)␍␊
[09:22:51:130] [    4.546520]  EUEN: 00000000 (-FPE -SXE -ASXE -BTE)␍␊
[09:22:51:130] [    4.551395]  ECFG: 00071c1d (LIE=0,2-4,10-12 VS=7)␍␊
[09:22:51:139] [    4.556269] ESTAT: 000c1800 [BRK] (IS=11-12 ECode=12 EsubCode=0)␍␊
[09:22:51:147] [    4.562355]  PRID: 0014d000 (Loongson-64bit, Loongson-3A6000-HV)␍␊
[09:22:51:147] [    4.568439] CPU: 2 PID: 0 Comm: swapper/2 Not tainted 6.6.101-loong64-desktop-hwe deepin-community#25.01.00.31  ␍␊
[09:22:51:156] [    4.577293] Hardware name: Loongson Loongson-3A6000-HV-7A2000-1w-V0.1-EVB/Loongson-3A6000-HV-7A2000-1w-EVB-V1.21, BIOS Loongson-UDK2018-V4.0.05756-prestab␍␊
[09:22:51:169] [    4.591283] Stack : 90000000044c1c48 9000000002755220 900000000023ff8c 9000000100474000␍␊
[09:22:51:184] [    4.599368]         9000000100263950 0000000000000000 9000000100263958 9000000002755220␍␊
[09:22:51:193] [    4.607453]         9000000008a319e0 9000000008a319d8 90000001002638a0 0000000000000001␍␊
[09:22:51:193] [    4.615538]         0000000000000001 a8fd0f104f1068ea 0000000008f40000 9000000100595a80␍␊
[09:22:51:210] [    4.623625]         0000000000000001 fffffffffffffffe 9000000100cba650 ffffffffffffffff␍␊
[09:22:51:210] [    4.631712]         0000000000000002 0000000000000003 0000000008f40000 90000000031a1000␍␊
[09:22:51:219] [    4.639801]         90000000031a1000 9000000002755220 0000000000000000 0000000000000009␍␊
[09:22:51:230] [    4.647889]         9000000000373620 0000000000000312 0000000000000002 0000000000000002␍␊
[09:22:51:239] [    4.651201] ata4: SATA link down (SStatus 0 SControl 300)␍␊
[09:22:51:239] [    4.661469]         0000000000000000 9000000002755220 900000000024448c 00007ffff21aa2b3␍␊
[09:22:51:256] [    4.669562]         00000000000002b0 0000000000000008 0000000000000000 0000000000071c1d␍␊
[09:22:51:256] [    4.677654]         ...␍␊
[09:22:51:263] [    4.680213] Call Trace:␍␊
[09:22:51:263] [    4.680214] [<900000000024448c>] show_stack+0x3c/0x150␍␊
[09:22:51:272] [    4.688001] [<900000000023ff88>] dump_stack_lvl+0x5c/0x88␍␊
[09:22:51:272] [    4.693492] [<9000000000268220>] __warn+0x88/0x188␍␊
[09:22:51:280] [    4.698376] [<9000000001752a3c>] report_bug+0x1d4/0x2e0␍␊
[09:22:51:289] [    4.703690] [<9000000001788220>] do_bp+0x1c8/0x408␍␊
[09:22:51:289] [    4.708570] ␍␊
[09:22:51:289] [    4.710159] ---[ end trace 0000000000000000 ]---␍␊
[09:22:51:296] [    4.714867] Rebooting in 30 seconds..␍␊

Fixes: a7369f4 ("HAOC: CREDP: protect commit_creds() from ROP attack.")
Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
@opsiff opsiff mentioned this pull request Aug 7, 2025
Merged
Avenger-285714 pushed a commit that referenced this pull request Aug 7, 2025
@opsiff
HAOC: CREDP: fix kernel boot panic without CONFIG_CREDP
45c9ef7 
Log:
[09:22:50:784] [    4.205148] Kernel panic - not syncing: CRED: put_cred_rcu() sees (____ptrval____) with usage -5␍␊
[09:22:50:793] [    4.214015] CPU: 2 PID: 0 Comm: swapper/2 Not tainted 6.6.101-loong64-desktop-hwe #25.01.00.31  ␍␊
[09:22:50:800] [    4.222879] Hardware name: Loongson Loongson-3A6000-HV-7A2000-1w-V0.1-EVB/Loongson-3A6000-HV-7A2000-1w-EVB-V1.21, BIOS Loongson-UDK2018-V4.0.05756-prestab␍␊
[09:22:50:820] [    4.236884] Stack : 90000000044c1c48 9000000002755220 900000000023ff8c 9000000100474000␍␊
[09:22:50:823] [    4.244977]         9000000100263c40 0000000000000000 9000000100263c48 9000000002755220␍␊
[09:22:50:831] [    4.253067]         9000000008a319e0 9000000008a319d8 9000000100263b90 0000000000000001␍␊
[09:22:50:839] [    4.261155]         0000000000000001 a8fd0f104f1068ea 0000000008f40000 9000000100595a80␍␊
[09:22:50:847] [    4.269244]         0000000000000001 fffffffffffffffe 9000000100cba6f0 ffffffffffffffff␍␊
[09:22:50:856] [    4.277332]         0000000000000002 0000000000000003 0000000008f40000 90000000031a1000␍␊
[09:22:50:863] [    4.285421]         90000000031a1000 9000000002755220 0000000000000000 0000000000000000␍␊
[09:22:50:873] [    4.293508]         9000000002717a58 0000000000000000 0000000000000001 900000000a82c0f8␍␊
[09:22:50:880] [    4.301595]         9000000003490b48 9000000002755220 900000000024448c 00007ffff21aa2b3␍␊
[09:22:50:889] [    4.309684]         00000000000002b0 000000000000000c 0000000000000000 0000000000071c1d␍␊
[09:22:50:897] [    4.317773]         ...␍␊
[09:22:50:906] [    4.320327] Call Trace:␍␊
[09:22:50:906] [    4.320329] [<900000000024448c>] show_stack+0x3c/0x150␍␊
[09:22:50:906] [    4.328115] [<900000000023ff88>] dump_stack_lvl+0x5c/0x88␍␊
[09:22:50:914] [    4.333607] [<9000000000220c8c>] panic+0x13c/0x358␍␊
[09:22:50:923] [    4.338489] [<900000000029ff3c>] put_cred_rcu+0x134/0x138␍␊
[09:22:50:923] [    4.343976] [<9000000000331ff8>] rcu_do_batch+0x190/0x600␍␊
[09:22:50:930] [    4.347152] ata3: SATA link down (SStatus 0 SControl 300)␍␊
[09:22:50:939] [    4.354941] [<9000000000337ae8>] rcu_core+0x178/0x3c0␍␊
[09:22:50:939] [    4.360077] [<9000000000271ecc>] handle_softirqs+0x12c/0x3b0␍␊
[09:22:50:946] [    4.365815] [<90000000002722c8>] __irq_exit_rcu+0x120/0x158␍␊
[09:22:50:955] [    4.371465] [<9000000001787494>] do_vint+0x7c/0xd0␍␊
[09:22:50:955] [    4.376338] [<90000000002420cc>] __arch_cpu_idle+0xc/0x10␍␊
[09:22:50:962] [    4.381814] [<9000000001789c38>] arch_cpu_idle+0x8/0x30␍␊
[09:22:50:969] [    4.387117] [<9000000001789de0>] default_idle_call+0x20/0x130␍␊
[09:22:50:979] [    4.392938] [<90000000002da2f4>] do_idle+0xb4/0x130␍␊
[09:22:50:979] [    4.397892] [<90000000002da5c0>] cpu_startup_entry+0x38/0x40␍␊
[09:22:50:988] [    4.403624] [<9000000000252970>] start_secondary+0xa8/0xb8␍␊
[09:22:50:988] [    4.409184] [<900000000178a15c>] smpboot_entry+0x64/0x6c␍␊
[09:22:50:995] [    4.414571] ␍␊
[09:22:50:995] [    4.416157] ------------[ cut here ]------------␍␊
[09:22:51:003] [    4.420850] WARNING: CPU: 2 PID: 0 at kernel/smp.c:786 smp_call_function_many_cond+0x670/0x6e8␍␊
[09:22:51:013] [    4.429526] Modules linked in:␍␊
[09:22:51:013] [    4.432666] CPU: 2 PID: 0 Comm: swapper/2 Not tainted 6.6.101-loong64-desktop-hwe #25.01.00.31  ␍␊
[09:22:51:020] [    4.441511] Hardware name: Loongson Loongson-3A6000-HV-7A2000-1w-V0.1-EVB/Loongson-3A6000-HV-7A2000-1w-EVB-V1.21, BIOS Loongson-UDK2018-V4.0.05756-prestab␍␊
[09:22:51:033] [    4.455479] pc 9000000000373620 ra 90000000003736e0 tp 9000000100474000 sp 9000000100263ce0␍␊
[09:22:51:041] [    4.463892] a0 90000000033a49b0 a1 90000000002523d8 a2 0000000000000000 a3 0000000000000000␍␊
[09:22:51:051] [    4.472306] a4 0000000000000000 a5 90000001002639c0 a6 0000000000000001 a7 0000000000000001␍␊
[09:22:51:060] [    4.480719] t0 90000000033a49b0 t1 0000000000000100 t2 0000000000000001 t3 0000000000000103␍␊
[09:22:51:068] [    4.489132] t4 00000000000000ff t5 9000000100cba6e0 t6 ffffffffffffffff t7 0000000000000002␍␊
[09:22:51:077] [    4.497545] t8 0000000000000003 u0 9000000002755220 s9 90000000031a1000 s0 90000000044c17e8␍␊
[09:22:51:087] [    4.505958] s1 0000000000000000 s2 90000000002523d8 s3 90000000033a49b0 s4 9000000002717a58␍␊
[09:22:51:095] [    4.514372] s5 90000000033a5000 s6 0000000000000002 s7 0000000000000002 s8 0000000000000000␍␊
[09:22:51:104] [    4.522788]    ra: 90000000003736e0 smp_call_function+0x38/0x88␍␊
[09:22:51:112] [    4.528784]   ERA: 9000000000373620 smp_call_function_many_cond+0x670/0x6e8␍␊
[09:22:51:122] [    4.535818]  CRMD: 000000b0 (PLV0 -IE -DA +PG DACF=CC DACM=CC -WE)␍␊
[09:22:51:122] [    4.542078]  PRMD: 00000008 (PPLV0 -PIE +PWE)␍␊
[09:22:51:130] [    4.546520]  EUEN: 00000000 (-FPE -SXE -ASXE -BTE)␍␊
[09:22:51:130] [    4.551395]  ECFG: 00071c1d (LIE=0,2-4,10-12 VS=7)␍␊
[09:22:51:139] [    4.556269] ESTAT: 000c1800 [BRK] (IS=11-12 ECode=12 EsubCode=0)␍␊
[09:22:51:147] [    4.562355]  PRID: 0014d000 (Loongson-64bit, Loongson-3A6000-HV)␍␊
[09:22:51:147] [    4.568439] CPU: 2 PID: 0 Comm: swapper/2 Not tainted 6.6.101-loong64-desktop-hwe #25.01.00.31  ␍␊
[09:22:51:156] [    4.577293] Hardware name: Loongson Loongson-3A6000-HV-7A2000-1w-V0.1-EVB/Loongson-3A6000-HV-7A2000-1w-EVB-V1.21, BIOS Loongson-UDK2018-V4.0.05756-prestab␍␊
[09:22:51:169] [    4.591283] Stack : 90000000044c1c48 9000000002755220 900000000023ff8c 9000000100474000␍␊
[09:22:51:184] [    4.599368]         9000000100263950 0000000000000000 9000000100263958 9000000002755220␍␊
[09:22:51:193] [    4.607453]         9000000008a319e0 9000000008a319d8 90000001002638a0 0000000000000001␍␊
[09:22:51:193] [    4.615538]         0000000000000001 a8fd0f104f1068ea 0000000008f40000 9000000100595a80␍␊
[09:22:51:210] [    4.623625]         0000000000000001 fffffffffffffffe 9000000100cba650 ffffffffffffffff␍␊
[09:22:51:210] [    4.631712]         0000000000000002 0000000000000003 0000000008f40000 90000000031a1000␍␊
[09:22:51:219] [    4.639801]         90000000031a1000 9000000002755220 0000000000000000 0000000000000009␍␊
[09:22:51:230] [    4.647889]         9000000000373620 0000000000000312 0000000000000002 0000000000000002␍␊
[09:22:51:239] [    4.651201] ata4: SATA link down (SStatus 0 SControl 300)␍␊
[09:22:51:239] [    4.661469]         0000000000000000 9000000002755220 900000000024448c 00007ffff21aa2b3␍␊
[09:22:51:256] [    4.669562]         00000000000002b0 0000000000000008 0000000000000000 0000000000071c1d␍␊
[09:22:51:256] [    4.677654]         ...␍␊
[09:22:51:263] [    4.680213] Call Trace:␍␊
[09:22:51:263] [    4.680214] [<900000000024448c>] show_stack+0x3c/0x150␍␊
[09:22:51:272] [    4.688001] [<900000000023ff88>] dump_stack_lvl+0x5c/0x88␍␊
[09:22:51:272] [    4.693492] [<9000000000268220>] __warn+0x88/0x188␍␊
[09:22:51:280] [    4.698376] [<9000000001752a3c>] report_bug+0x1d4/0x2e0␍␊
[09:22:51:289] [    4.703690] [<9000000001788220>] do_bp+0x1c8/0x408␍␊
[09:22:51:289] [    4.708570] ␍␊
[09:22:51:289] [    4.710159] ---[ end trace 0000000000000000 ]---␍␊
[09:22:51:296] [    4.714867] Rebooting in 30 seconds..␍␊

Fixes: a7369f4 ("HAOC: CREDP: protect commit_creds() from ROP attack.")
Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
yunjianshijie pushed a commit to yunjianshijie/kernel_deepin that referenced this pull request Aug 8, 2025
@opsiff
HAOC: CREDP: fix kernel boot panic without CONFIG_CREDP
4ec0fc9 
Log:
[09:22:50:784] [    4.205148] Kernel panic - not syncing: CRED: put_cred_rcu() sees (____ptrval____) with usage -5␍␊
[09:22:50:793] [    4.214015] CPU: 2 PID: 0 Comm: swapper/2 Not tainted 6.6.101-loong64-desktop-hwe deepin-community#25.01.00.31  ␍␊
[09:22:50:800] [    4.222879] Hardware name: Loongson Loongson-3A6000-HV-7A2000-1w-V0.1-EVB/Loongson-3A6000-HV-7A2000-1w-EVB-V1.21, BIOS Loongson-UDK2018-V4.0.05756-prestab␍␊
[09:22:50:820] [    4.236884] Stack : 90000000044c1c48 9000000002755220 900000000023ff8c 9000000100474000␍␊
[09:22:50:823] [    4.244977]         9000000100263c40 0000000000000000 9000000100263c48 9000000002755220␍␊
[09:22:50:831] [    4.253067]         9000000008a319e0 9000000008a319d8 9000000100263b90 0000000000000001␍␊
[09:22:50:839] [    4.261155]         0000000000000001 a8fd0f104f1068ea 0000000008f40000 9000000100595a80␍␊
[09:22:50:847] [    4.269244]         0000000000000001 fffffffffffffffe 9000000100cba6f0 ffffffffffffffff␍␊
[09:22:50:856] [    4.277332]         0000000000000002 0000000000000003 0000000008f40000 90000000031a1000␍␊
[09:22:50:863] [    4.285421]         90000000031a1000 9000000002755220 0000000000000000 0000000000000000␍␊
[09:22:50:873] [    4.293508]         9000000002717a58 0000000000000000 0000000000000001 900000000a82c0f8␍␊
[09:22:50:880] [    4.301595]         9000000003490b48 9000000002755220 900000000024448c 00007ffff21aa2b3␍␊
[09:22:50:889] [    4.309684]         00000000000002b0 000000000000000c 0000000000000000 0000000000071c1d␍␊
[09:22:50:897] [    4.317773]         ...␍␊
[09:22:50:906] [    4.320327] Call Trace:␍␊
[09:22:50:906] [    4.320329] [<900000000024448c>] show_stack+0x3c/0x150␍␊
[09:22:50:906] [    4.328115] [<900000000023ff88>] dump_stack_lvl+0x5c/0x88␍␊
[09:22:50:914] [    4.333607] [<9000000000220c8c>] panic+0x13c/0x358␍␊
[09:22:50:923] [    4.338489] [<900000000029ff3c>] put_cred_rcu+0x134/0x138␍␊
[09:22:50:923] [    4.343976] [<9000000000331ff8>] rcu_do_batch+0x190/0x600␍␊
[09:22:50:930] [    4.347152] ata3: SATA link down (SStatus 0 SControl 300)␍␊
[09:22:50:939] [    4.354941] [<9000000000337ae8>] rcu_core+0x178/0x3c0␍␊
[09:22:50:939] [    4.360077] [<9000000000271ecc>] handle_softirqs+0x12c/0x3b0␍␊
[09:22:50:946] [    4.365815] [<90000000002722c8>] __irq_exit_rcu+0x120/0x158␍␊
[09:22:50:955] [    4.371465] [<9000000001787494>] do_vint+0x7c/0xd0␍␊
[09:22:50:955] [    4.376338] [<90000000002420cc>] __arch_cpu_idle+0xc/0x10␍␊
[09:22:50:962] [    4.381814] [<9000000001789c38>] arch_cpu_idle+0x8/0x30␍␊
[09:22:50:969] [    4.387117] [<9000000001789de0>] default_idle_call+0x20/0x130␍␊
[09:22:50:979] [    4.392938] [<90000000002da2f4>] do_idle+0xb4/0x130␍␊
[09:22:50:979] [    4.397892] [<90000000002da5c0>] cpu_startup_entry+0x38/0x40␍␊
[09:22:50:988] [    4.403624] [<9000000000252970>] start_secondary+0xa8/0xb8␍␊
[09:22:50:988] [    4.409184] [<900000000178a15c>] smpboot_entry+0x64/0x6c␍␊
[09:22:50:995] [    4.414571] ␍␊
[09:22:50:995] [    4.416157] ------------[ cut here ]------------␍␊
[09:22:51:003] [    4.420850] WARNING: CPU: 2 PID: 0 at kernel/smp.c:786 smp_call_function_many_cond+0x670/0x6e8␍␊
[09:22:51:013] [    4.429526] Modules linked in:␍␊
[09:22:51:013] [    4.432666] CPU: 2 PID: 0 Comm: swapper/2 Not tainted 6.6.101-loong64-desktop-hwe deepin-community#25.01.00.31  ␍␊
[09:22:51:020] [    4.441511] Hardware name: Loongson Loongson-3A6000-HV-7A2000-1w-V0.1-EVB/Loongson-3A6000-HV-7A2000-1w-EVB-V1.21, BIOS Loongson-UDK2018-V4.0.05756-prestab␍␊
[09:22:51:033] [    4.455479] pc 9000000000373620 ra 90000000003736e0 tp 9000000100474000 sp 9000000100263ce0␍␊
[09:22:51:041] [    4.463892] a0 90000000033a49b0 a1 90000000002523d8 a2 0000000000000000 a3 0000000000000000␍␊
[09:22:51:051] [    4.472306] a4 0000000000000000 a5 90000001002639c0 a6 0000000000000001 a7 0000000000000001␍␊
[09:22:51:060] [    4.480719] t0 90000000033a49b0 t1 0000000000000100 t2 0000000000000001 t3 0000000000000103␍␊
[09:22:51:068] [    4.489132] t4 00000000000000ff t5 9000000100cba6e0 t6 ffffffffffffffff t7 0000000000000002␍␊
[09:22:51:077] [    4.497545] t8 0000000000000003 u0 9000000002755220 s9 90000000031a1000 s0 90000000044c17e8␍␊
[09:22:51:087] [    4.505958] s1 0000000000000000 s2 90000000002523d8 s3 90000000033a49b0 s4 9000000002717a58␍␊
[09:22:51:095] [    4.514372] s5 90000000033a5000 s6 0000000000000002 s7 0000000000000002 s8 0000000000000000␍␊
[09:22:51:104] [    4.522788]    ra: 90000000003736e0 smp_call_function+0x38/0x88␍␊
[09:22:51:112] [    4.528784]   ERA: 9000000000373620 smp_call_function_many_cond+0x670/0x6e8␍␊
[09:22:51:122] [    4.535818]  CRMD: 000000b0 (PLV0 -IE -DA +PG DACF=CC DACM=CC -WE)␍␊
[09:22:51:122] [    4.542078]  PRMD: 00000008 (PPLV0 -PIE +PWE)␍␊
[09:22:51:130] [    4.546520]  EUEN: 00000000 (-FPE -SXE -ASXE -BTE)␍␊
[09:22:51:130] [    4.551395]  ECFG: 00071c1d (LIE=0,2-4,10-12 VS=7)␍␊
[09:22:51:139] [    4.556269] ESTAT: 000c1800 [BRK] (IS=11-12 ECode=12 EsubCode=0)␍␊
[09:22:51:147] [    4.562355]  PRID: 0014d000 (Loongson-64bit, Loongson-3A6000-HV)␍␊
[09:22:51:147] [    4.568439] CPU: 2 PID: 0 Comm: swapper/2 Not tainted 6.6.101-loong64-desktop-hwe deepin-community#25.01.00.31  ␍␊
[09:22:51:156] [    4.577293] Hardware name: Loongson Loongson-3A6000-HV-7A2000-1w-V0.1-EVB/Loongson-3A6000-HV-7A2000-1w-EVB-V1.21, BIOS Loongson-UDK2018-V4.0.05756-prestab␍␊
[09:22:51:169] [    4.591283] Stack : 90000000044c1c48 9000000002755220 900000000023ff8c 9000000100474000␍␊
[09:22:51:184] [    4.599368]         9000000100263950 0000000000000000 9000000100263958 9000000002755220␍␊
[09:22:51:193] [    4.607453]         9000000008a319e0 9000000008a319d8 90000001002638a0 0000000000000001␍␊
[09:22:51:193] [    4.615538]         0000000000000001 a8fd0f104f1068ea 0000000008f40000 9000000100595a80␍␊
[09:22:51:210] [    4.623625]         0000000000000001 fffffffffffffffe 9000000100cba650 ffffffffffffffff␍␊
[09:22:51:210] [    4.631712]         0000000000000002 0000000000000003 0000000008f40000 90000000031a1000␍␊
[09:22:51:219] [    4.639801]         90000000031a1000 9000000002755220 0000000000000000 0000000000000009␍␊
[09:22:51:230] [    4.647889]         9000000000373620 0000000000000312 0000000000000002 0000000000000002␍␊
[09:22:51:239] [    4.651201] ata4: SATA link down (SStatus 0 SControl 300)␍␊
[09:22:51:239] [    4.661469]         0000000000000000 9000000002755220 900000000024448c 00007ffff21aa2b3␍␊
[09:22:51:256] [    4.669562]         00000000000002b0 0000000000000008 0000000000000000 0000000000071c1d␍␊
[09:22:51:256] [    4.677654]         ...␍␊
[09:22:51:263] [    4.680213] Call Trace:␍␊
[09:22:51:263] [    4.680214] [<900000000024448c>] show_stack+0x3c/0x150␍␊
[09:22:51:272] [    4.688001] [<900000000023ff88>] dump_stack_lvl+0x5c/0x88␍␊
[09:22:51:272] [    4.693492] [<9000000000268220>] __warn+0x88/0x188␍␊
[09:22:51:280] [    4.698376] [<9000000001752a3c>] report_bug+0x1d4/0x2e0␍␊
[09:22:51:289] [    4.703690] [<9000000001788220>] do_bp+0x1c8/0x408␍␊
[09:22:51:289] [    4.708570] ␍␊
[09:22:51:289] [    4.710159] ---[ end trace 0000000000000000 ]---␍␊
[09:22:51:296] [    4.714867] Rebooting in 30 seconds..␍␊

Fixes: a7369f4 ("HAOC: CREDP: protect commit_creds() from ROP attack.")
Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
Signed-off-by: yunjianshijie <dailingjia@uniontech.com>
yunjianshijie pushed a commit to yunjianshijie/kernel_deepin that referenced this pull request Aug 8, 2025
@opsiff
HAOC: CREDP: fix kernel boot panic without CONFIG_CREDP
a05c94b 
Log:
[09:22:50:784] [    4.205148] Kernel panic - not syncing: CRED: put_cred_rcu() sees (____ptrval____) with usage -5␍␊
[09:22:50:793] [    4.214015] CPU: 2 PID: 0 Comm: swapper/2 Not tainted 6.6.101-loong64-desktop-hwe deepin-community#25.01.00.31  ␍␊
[09:22:50:800] [    4.222879] Hardware name: Loongson Loongson-3A6000-HV-7A2000-1w-V0.1-EVB/Loongson-3A6000-HV-7A2000-1w-EVB-V1.21, BIOS Loongson-UDK2018-V4.0.05756-prestab␍␊
[09:22:50:820] [    4.236884] Stack : 90000000044c1c48 9000000002755220 900000000023ff8c 9000000100474000␍␊
[09:22:50:823] [    4.244977]         9000000100263c40 0000000000000000 9000000100263c48 9000000002755220␍␊
[09:22:50:831] [    4.253067]         9000000008a319e0 9000000008a319d8 9000000100263b90 0000000000000001␍␊
[09:22:50:839] [    4.261155]         0000000000000001 a8fd0f104f1068ea 0000000008f40000 9000000100595a80␍␊
[09:22:50:847] [    4.269244]         0000000000000001 fffffffffffffffe 9000000100cba6f0 ffffffffffffffff␍␊
[09:22:50:856] [    4.277332]         0000000000000002 0000000000000003 0000000008f40000 90000000031a1000␍␊
[09:22:50:863] [    4.285421]         90000000031a1000 9000000002755220 0000000000000000 0000000000000000␍␊
[09:22:50:873] [    4.293508]         9000000002717a58 0000000000000000 0000000000000001 900000000a82c0f8␍␊
[09:22:50:880] [    4.301595]         9000000003490b48 9000000002755220 900000000024448c 00007ffff21aa2b3␍␊
[09:22:50:889] [    4.309684]         00000000000002b0 000000000000000c 0000000000000000 0000000000071c1d␍␊
[09:22:50:897] [    4.317773]         ...␍␊
[09:22:50:906] [    4.320327] Call Trace:␍␊
[09:22:50:906] [    4.320329] [<900000000024448c>] show_stack+0x3c/0x150␍␊
[09:22:50:906] [    4.328115] [<900000000023ff88>] dump_stack_lvl+0x5c/0x88␍␊
[09:22:50:914] [    4.333607] [<9000000000220c8c>] panic+0x13c/0x358␍␊
[09:22:50:923] [    4.338489] [<900000000029ff3c>] put_cred_rcu+0x134/0x138␍␊
[09:22:50:923] [    4.343976] [<9000000000331ff8>] rcu_do_batch+0x190/0x600␍␊
[09:22:50:930] [    4.347152] ata3: SATA link down (SStatus 0 SControl 300)␍␊
[09:22:50:939] [    4.354941] [<9000000000337ae8>] rcu_core+0x178/0x3c0␍␊
[09:22:50:939] [    4.360077] [<9000000000271ecc>] handle_softirqs+0x12c/0x3b0␍␊
[09:22:50:946] [    4.365815] [<90000000002722c8>] __irq_exit_rcu+0x120/0x158␍␊
[09:22:50:955] [    4.371465] [<9000000001787494>] do_vint+0x7c/0xd0␍␊
[09:22:50:955] [    4.376338] [<90000000002420cc>] __arch_cpu_idle+0xc/0x10␍␊
[09:22:50:962] [    4.381814] [<9000000001789c38>] arch_cpu_idle+0x8/0x30␍␊
[09:22:50:969] [    4.387117] [<9000000001789de0>] default_idle_call+0x20/0x130␍␊
[09:22:50:979] [    4.392938] [<90000000002da2f4>] do_idle+0xb4/0x130␍␊
[09:22:50:979] [    4.397892] [<90000000002da5c0>] cpu_startup_entry+0x38/0x40␍␊
[09:22:50:988] [    4.403624] [<9000000000252970>] start_secondary+0xa8/0xb8␍␊
[09:22:50:988] [    4.409184] [<900000000178a15c>] smpboot_entry+0x64/0x6c␍␊
[09:22:50:995] [    4.414571] ␍␊
[09:22:50:995] [    4.416157] ------------[ cut here ]------------␍␊
[09:22:51:003] [    4.420850] WARNING: CPU: 2 PID: 0 at kernel/smp.c:786 smp_call_function_many_cond+0x670/0x6e8␍␊
[09:22:51:013] [    4.429526] Modules linked in:␍␊
[09:22:51:013] [    4.432666] CPU: 2 PID: 0 Comm: swapper/2 Not tainted 6.6.101-loong64-desktop-hwe deepin-community#25.01.00.31  ␍␊
[09:22:51:020] [    4.441511] Hardware name: Loongson Loongson-3A6000-HV-7A2000-1w-V0.1-EVB/Loongson-3A6000-HV-7A2000-1w-EVB-V1.21, BIOS Loongson-UDK2018-V4.0.05756-prestab␍␊
[09:22:51:033] [    4.455479] pc 9000000000373620 ra 90000000003736e0 tp 9000000100474000 sp 9000000100263ce0␍␊
[09:22:51:041] [    4.463892] a0 90000000033a49b0 a1 90000000002523d8 a2 0000000000000000 a3 0000000000000000␍␊
[09:22:51:051] [    4.472306] a4 0000000000000000 a5 90000001002639c0 a6 0000000000000001 a7 0000000000000001␍␊
[09:22:51:060] [    4.480719] t0 90000000033a49b0 t1 0000000000000100 t2 0000000000000001 t3 0000000000000103␍␊
[09:22:51:068] [    4.489132] t4 00000000000000ff t5 9000000100cba6e0 t6 ffffffffffffffff t7 0000000000000002␍␊
[09:22:51:077] [    4.497545] t8 0000000000000003 u0 9000000002755220 s9 90000000031a1000 s0 90000000044c17e8␍␊
[09:22:51:087] [    4.505958] s1 0000000000000000 s2 90000000002523d8 s3 90000000033a49b0 s4 9000000002717a58␍␊
[09:22:51:095] [    4.514372] s5 90000000033a5000 s6 0000000000000002 s7 0000000000000002 s8 0000000000000000␍␊
[09:22:51:104] [    4.522788]    ra: 90000000003736e0 smp_call_function+0x38/0x88␍␊
[09:22:51:112] [    4.528784]   ERA: 9000000000373620 smp_call_function_many_cond+0x670/0x6e8␍␊
[09:22:51:122] [    4.535818]  CRMD: 000000b0 (PLV0 -IE -DA +PG DACF=CC DACM=CC -WE)␍␊
[09:22:51:122] [    4.542078]  PRMD: 00000008 (PPLV0 -PIE +PWE)␍␊
[09:22:51:130] [    4.546520]  EUEN: 00000000 (-FPE -SXE -ASXE -BTE)␍␊
[09:22:51:130] [    4.551395]  ECFG: 00071c1d (LIE=0,2-4,10-12 VS=7)␍␊
[09:22:51:139] [    4.556269] ESTAT: 000c1800 [BRK] (IS=11-12 ECode=12 EsubCode=0)␍␊
[09:22:51:147] [    4.562355]  PRID: 0014d000 (Loongson-64bit, Loongson-3A6000-HV)␍␊
[09:22:51:147] [    4.568439] CPU: 2 PID: 0 Comm: swapper/2 Not tainted 6.6.101-loong64-desktop-hwe deepin-community#25.01.00.31  ␍␊
[09:22:51:156] [    4.577293] Hardware name: Loongson Loongson-3A6000-HV-7A2000-1w-V0.1-EVB/Loongson-3A6000-HV-7A2000-1w-EVB-V1.21, BIOS Loongson-UDK2018-V4.0.05756-prestab␍␊
[09:22:51:169] [    4.591283] Stack : 90000000044c1c48 9000000002755220 900000000023ff8c 9000000100474000␍␊
[09:22:51:184] [    4.599368]         9000000100263950 0000000000000000 9000000100263958 9000000002755220␍␊
[09:22:51:193] [    4.607453]         9000000008a319e0 9000000008a319d8 90000001002638a0 0000000000000001␍␊
[09:22:51:193] [    4.615538]         0000000000000001 a8fd0f104f1068ea 0000000008f40000 9000000100595a80␍␊
[09:22:51:210] [    4.623625]         0000000000000001 fffffffffffffffe 9000000100cba650 ffffffffffffffff␍␊
[09:22:51:210] [    4.631712]         0000000000000002 0000000000000003 0000000008f40000 90000000031a1000␍␊
[09:22:51:219] [    4.639801]         90000000031a1000 9000000002755220 0000000000000000 0000000000000009␍␊
[09:22:51:230] [    4.647889]         9000000000373620 0000000000000312 0000000000000002 0000000000000002␍␊
[09:22:51:239] [    4.651201] ata4: SATA link down (SStatus 0 SControl 300)␍␊
[09:22:51:239] [    4.661469]         0000000000000000 9000000002755220 900000000024448c 00007ffff21aa2b3␍␊
[09:22:51:256] [    4.669562]         00000000000002b0 0000000000000008 0000000000000000 0000000000071c1d␍␊
[09:22:51:256] [    4.677654]         ...␍␊
[09:22:51:263] [    4.680213] Call Trace:␍␊
[09:22:51:263] [    4.680214] [<900000000024448c>] show_stack+0x3c/0x150␍␊
[09:22:51:272] [    4.688001] [<900000000023ff88>] dump_stack_lvl+0x5c/0x88␍␊
[09:22:51:272] [    4.693492] [<9000000000268220>] __warn+0x88/0x188␍␊
[09:22:51:280] [    4.698376] [<9000000001752a3c>] report_bug+0x1d4/0x2e0␍␊
[09:22:51:289] [    4.703690] [<9000000001788220>] do_bp+0x1c8/0x408␍␊
[09:22:51:289] [    4.708570] ␍␊
[09:22:51:289] [    4.710159] ---[ end trace 0000000000000000 ]---␍␊
[09:22:51:296] [    4.714867] Rebooting in 30 seconds..␍␊

Fixes: a7369f4 ("HAOC: CREDP: protect commit_creds() from ROP attack.")
Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
Signed-off-by: yunjianshijie <dailingjia@uniontech.com>
opsiff added a commit that referenced this pull request Aug 8, 2025
@opsiff
HAOC: CREDP: fix kernel boot panic without CONFIG_CREDP
d9c6f33 
Log:
[09:22:50:784] [    4.205148] Kernel panic - not syncing: CRED: put_cred_rcu() sees (____ptrval____) with usage -5␍␊
[09:22:50:793] [    4.214015] CPU: 2 PID: 0 Comm: swapper/2 Not tainted 6.6.101-loong64-desktop-hwe #25.01.00.31  ␍␊
[09:22:50:800] [    4.222879] Hardware name: Loongson Loongson-3A6000-HV-7A2000-1w-V0.1-EVB/Loongson-3A6000-HV-7A2000-1w-EVB-V1.21, BIOS Loongson-UDK2018-V4.0.05756-prestab␍␊
[09:22:50:820] [    4.236884] Stack : 90000000044c1c48 9000000002755220 900000000023ff8c 9000000100474000␍␊
[09:22:50:823] [    4.244977]         9000000100263c40 0000000000000000 9000000100263c48 9000000002755220␍␊
[09:22:50:831] [    4.253067]         9000000008a319e0 9000000008a319d8 9000000100263b90 0000000000000001␍␊
[09:22:50:839] [    4.261155]         0000000000000001 a8fd0f104f1068ea 0000000008f40000 9000000100595a80␍␊
[09:22:50:847] [    4.269244]         0000000000000001 fffffffffffffffe 9000000100cba6f0 ffffffffffffffff␍␊
[09:22:50:856] [    4.277332]         0000000000000002 0000000000000003 0000000008f40000 90000000031a1000␍␊
[09:22:50:863] [    4.285421]         90000000031a1000 9000000002755220 0000000000000000 0000000000000000␍␊
[09:22:50:873] [    4.293508]         9000000002717a58 0000000000000000 0000000000000001 900000000a82c0f8␍␊
[09:22:50:880] [    4.301595]         9000000003490b48 9000000002755220 900000000024448c 00007ffff21aa2b3␍␊
[09:22:50:889] [    4.309684]         00000000000002b0 000000000000000c 0000000000000000 0000000000071c1d␍␊
[09:22:50:897] [    4.317773]         ...␍␊
[09:22:50:906] [    4.320327] Call Trace:␍␊
[09:22:50:906] [    4.320329] [<900000000024448c>] show_stack+0x3c/0x150␍␊
[09:22:50:906] [    4.328115] [<900000000023ff88>] dump_stack_lvl+0x5c/0x88␍␊
[09:22:50:914] [    4.333607] [<9000000000220c8c>] panic+0x13c/0x358␍␊
[09:22:50:923] [    4.338489] [<900000000029ff3c>] put_cred_rcu+0x134/0x138␍␊
[09:22:50:923] [    4.343976] [<9000000000331ff8>] rcu_do_batch+0x190/0x600␍␊
[09:22:50:930] [    4.347152] ata3: SATA link down (SStatus 0 SControl 300)␍␊
[09:22:50:939] [    4.354941] [<9000000000337ae8>] rcu_core+0x178/0x3c0␍␊
[09:22:50:939] [    4.360077] [<9000000000271ecc>] handle_softirqs+0x12c/0x3b0␍␊
[09:22:50:946] [    4.365815] [<90000000002722c8>] __irq_exit_rcu+0x120/0x158␍␊
[09:22:50:955] [    4.371465] [<9000000001787494>] do_vint+0x7c/0xd0␍␊
[09:22:50:955] [    4.376338] [<90000000002420cc>] __arch_cpu_idle+0xc/0x10␍␊
[09:22:50:962] [    4.381814] [<9000000001789c38>] arch_cpu_idle+0x8/0x30␍␊
[09:22:50:969] [    4.387117] [<9000000001789de0>] default_idle_call+0x20/0x130␍␊
[09:22:50:979] [    4.392938] [<90000000002da2f4>] do_idle+0xb4/0x130␍␊
[09:22:50:979] [    4.397892] [<90000000002da5c0>] cpu_startup_entry+0x38/0x40␍␊
[09:22:50:988] [    4.403624] [<9000000000252970>] start_secondary+0xa8/0xb8␍␊
[09:22:50:988] [    4.409184] [<900000000178a15c>] smpboot_entry+0x64/0x6c␍␊
[09:22:50:995] [    4.414571] ␍␊
[09:22:50:995] [    4.416157] ------------[ cut here ]------------␍␊
[09:22:51:003] [    4.420850] WARNING: CPU: 2 PID: 0 at kernel/smp.c:786 smp_call_function_many_cond+0x670/0x6e8␍␊
[09:22:51:013] [    4.429526] Modules linked in:␍␊
[09:22:51:013] [    4.432666] CPU: 2 PID: 0 Comm: swapper/2 Not tainted 6.6.101-loong64-desktop-hwe #25.01.00.31  ␍␊
[09:22:51:020] [    4.441511] Hardware name: Loongson Loongson-3A6000-HV-7A2000-1w-V0.1-EVB/Loongson-3A6000-HV-7A2000-1w-EVB-V1.21, BIOS Loongson-UDK2018-V4.0.05756-prestab␍␊
[09:22:51:033] [    4.455479] pc 9000000000373620 ra 90000000003736e0 tp 9000000100474000 sp 9000000100263ce0␍␊
[09:22:51:041] [    4.463892] a0 90000000033a49b0 a1 90000000002523d8 a2 0000000000000000 a3 0000000000000000␍␊
[09:22:51:051] [    4.472306] a4 0000000000000000 a5 90000001002639c0 a6 0000000000000001 a7 0000000000000001␍␊
[09:22:51:060] [    4.480719] t0 90000000033a49b0 t1 0000000000000100 t2 0000000000000001 t3 0000000000000103␍␊
[09:22:51:068] [    4.489132] t4 00000000000000ff t5 9000000100cba6e0 t6 ffffffffffffffff t7 0000000000000002␍␊
[09:22:51:077] [    4.497545] t8 0000000000000003 u0 9000000002755220 s9 90000000031a1000 s0 90000000044c17e8␍␊
[09:22:51:087] [    4.505958] s1 0000000000000000 s2 90000000002523d8 s3 90000000033a49b0 s4 9000000002717a58␍␊
[09:22:51:095] [    4.514372] s5 90000000033a5000 s6 0000000000000002 s7 0000000000000002 s8 0000000000000000␍␊
[09:22:51:104] [    4.522788]    ra: 90000000003736e0 smp_call_function+0x38/0x88␍␊
[09:22:51:112] [    4.528784]   ERA: 9000000000373620 smp_call_function_many_cond+0x670/0x6e8␍␊
[09:22:51:122] [    4.535818]  CRMD: 000000b0 (PLV0 -IE -DA +PG DACF=CC DACM=CC -WE)␍␊
[09:22:51:122] [    4.542078]  PRMD: 00000008 (PPLV0 -PIE +PWE)␍␊
[09:22:51:130] [    4.546520]  EUEN: 00000000 (-FPE -SXE -ASXE -BTE)␍␊
[09:22:51:130] [    4.551395]  ECFG: 00071c1d (LIE=0,2-4,10-12 VS=7)␍␊
[09:22:51:139] [    4.556269] ESTAT: 000c1800 [BRK] (IS=11-12 ECode=12 EsubCode=0)␍␊
[09:22:51:147] [    4.562355]  PRID: 0014d000 (Loongson-64bit, Loongson-3A6000-HV)␍␊
[09:22:51:147] [    4.568439] CPU: 2 PID: 0 Comm: swapper/2 Not tainted 6.6.101-loong64-desktop-hwe #25.01.00.31  ␍␊
[09:22:51:156] [    4.577293] Hardware name: Loongson Loongson-3A6000-HV-7A2000-1w-V0.1-EVB/Loongson-3A6000-HV-7A2000-1w-EVB-V1.21, BIOS Loongson-UDK2018-V4.0.05756-prestab␍␊
[09:22:51:169] [    4.591283] Stack : 90000000044c1c48 9000000002755220 900000000023ff8c 9000000100474000␍␊
[09:22:51:184] [    4.599368]         9000000100263950 0000000000000000 9000000100263958 9000000002755220␍␊
[09:22:51:193] [    4.607453]         9000000008a319e0 9000000008a319d8 90000001002638a0 0000000000000001␍␊
[09:22:51:193] [    4.615538]         0000000000000001 a8fd0f104f1068ea 0000000008f40000 9000000100595a80␍␊
[09:22:51:210] [    4.623625]         0000000000000001 fffffffffffffffe 9000000100cba650 ffffffffffffffff␍␊
[09:22:51:210] [    4.631712]         0000000000000002 0000000000000003 0000000008f40000 90000000031a1000␍␊
[09:22:51:219] [    4.639801]         90000000031a1000 9000000002755220 0000000000000000 0000000000000009␍␊
[09:22:51:230] [    4.647889]         9000000000373620 0000000000000312 0000000000000002 0000000000000002␍␊
[09:22:51:239] [    4.651201] ata4: SATA link down (SStatus 0 SControl 300)␍␊
[09:22:51:239] [    4.661469]         0000000000000000 9000000002755220 900000000024448c 00007ffff21aa2b3␍␊
[09:22:51:256] [    4.669562]         00000000000002b0 0000000000000008 0000000000000000 0000000000071c1d␍␊
[09:22:51:256] [    4.677654]         ...␍␊
[09:22:51:263] [    4.680213] Call Trace:␍␊
[09:22:51:263] [    4.680214] [<900000000024448c>] show_stack+0x3c/0x150␍␊
[09:22:51:272] [    4.688001] [<900000000023ff88>] dump_stack_lvl+0x5c/0x88␍␊
[09:22:51:272] [    4.693492] [<9000000000268220>] __warn+0x88/0x188␍␊
[09:22:51:280] [    4.698376] [<9000000001752a3c>] report_bug+0x1d4/0x2e0␍␊
[09:22:51:289] [    4.703690] [<9000000001788220>] do_bp+0x1c8/0x408␍␊
[09:22:51:289] [    4.708570] ␍␊
[09:22:51:289] [    4.710159] ---[ end trace 0000000000000000 ]---␍␊
[09:22:51:296] [    4.714867] Rebooting in 30 seconds..␍␊

Fixes: a7369f4 ("HAOC: CREDP: protect commit_creds() from ROP attack.")
Signed-off-by: Wentao Guan <guanwentao@uniontech.com>
Signed-off-by: yunjianshijie <dailingjia@uniontech.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@matrix-wsk @deepin-ci-robot