)]}'
{
  "log": [
    {
      "commit": "5dcb70a7e56e2c00e1c8ca593c61e378cef22f51",
      "tree": "bb694985140e0e8bc5bbbd82dcdff47c25eb540a",
      "parents": [
        "5745eda031829fa3917adccb4d4be537de8c056f"
      ],
      "author": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 21:18:24 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 21:18:24 2018 +0100"
      },
      "message": "CIP: Bump version suffix to -cip28 after Renesas patches\n\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "5745eda031829fa3917adccb4d4be537de8c056f",
      "tree": "c651e830c2717a36e3d1f9c4ac868f087781ed85",
      "parents": [
        "f430525031432193b600965d0405f766c73523e5"
      ],
      "author": {
        "name": "Biju Das",
        "email": "biju.das@bp.renesas.com",
        "time": "Fri Aug 10 10:53:02 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 21:13:11 2018 +0100"
      },
      "message": "ARM: dts: iwg22d-sodimm: Sound DMA support via DVC on DTS\n\nDMA transfer uses DVC\n\n     DMA               DMApp\n[MEM] -\u003e [SRC] -\u003e [DVC] -\u003e [SSIU] -\u003e [SSI]\n\n     DMA               DMApp\n[MEM] \u003c- [DVC] \u003c- [SRC] \u003c- [SSIU] \u003c- [SSI]\n\nSigned-off-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nReviewed-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nSigned-off-by: Simon Horman \u003chorms+renesas@verge.net.au\u003e\n(cherry picked from commit 6f41d5e0872e4b55a5352ff79ab2452bff306753)\nSigned-off-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "f430525031432193b600965d0405f766c73523e5",
      "tree": "6ee007df4348d720ed298eb2832c57ef37d4dab3",
      "parents": [
        "e7b41ab8b71f46d1bf2646e730844ab63c2aadb5"
      ],
      "author": {
        "name": "Biju Das",
        "email": "biju.das@bp.renesas.com",
        "time": "Fri Aug 10 10:53:01 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 21:13:11 2018 +0100"
      },
      "message": "ARM: dts: iwg22d-sodimm: Sound DMA support via SRC on DTS\n\nDMA transfer to/from SRC\n\n     DMA      DMApp\n[MEM] -\u003e [SRC] -\u003e [SSIU] -\u003e [SSI]\n\n     DMA      DMApp\n[MEM] \u003c- [SRC] \u003c- [SSIU] \u003c- [SSI]\n\nCurrent sound driver is supporting SSI/SRC random connection.\nSo, this patch is trying\nSSI3 -\u003e SRC3\nSSI4 \u003c- SRC4\n\nSigned-off-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nReviewed-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nSigned-off-by: Simon Horman \u003chorms+renesas@verge.net.au\u003e\n(cherry picked from commit 5ce5faa6fcf8b643ab91f48b972fd850f33d8f57)\nSigned-off-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "e7b41ab8b71f46d1bf2646e730844ab63c2aadb5",
      "tree": "52870eaad06115846c33c93db623f8dd0f6bc315",
      "parents": [
        "3f2f87db81f7dabb8067f487ed711ff5fb9614a4"
      ],
      "author": {
        "name": "Biju Das",
        "email": "biju.das@bp.renesas.com",
        "time": "Fri Aug 10 10:53:00 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 21:13:10 2018 +0100"
      },
      "message": "ARM: dts: iwg22d-sodimm: Sound DMA support via BUSIF on DTS\n\nDMA transfer to/from SSIU\n\n     DMA\n[MEM] -\u003e [SSIU] -\u003e [SSI]\n\n     DMA\n[MEM] \u003c- [SSIU] \u003c- [SSI]\n\nSigned-off-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nReviewed-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nSigned-off-by: Simon Horman \u003chorms+renesas@verge.net.au\u003e\n(cherry picked from commit 996d68a1f4fd6f95ab340d84871cbdcb34bc74f4)\nSigned-off-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "3f2f87db81f7dabb8067f487ed711ff5fb9614a4",
      "tree": "2b844e46ecf8d5b452f97839cc44b764b13088f1",
      "parents": [
        "fd96dc9dc04a45b5574aa86fc00e132bb5f79e61"
      ],
      "author": {
        "name": "Biju Das",
        "email": "biju.das@bp.renesas.com",
        "time": "Fri Aug 10 10:52:59 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 21:13:10 2018 +0100"
      },
      "message": "ARM: dts: iwg22d-sodimm: Sound DMA support on DTS\n\nDMA transfer to/from SSI\n\n     DMA\n[MEM] -\u003e [SSI]\n\n     DMA\n[MEM] \u003c- [SSI]\n\nSigned-off-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nReviewed-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nSigned-off-by: Simon Horman \u003chorms+renesas@verge.net.au\u003e\n(cherry picked from commit b3f36c455ccce0acd33b6d055dead4396a1b1b43)\nSigned-off-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "fd96dc9dc04a45b5574aa86fc00e132bb5f79e61",
      "tree": "e6f83ede6609b1f08912dc6a0544d7e3e9ac7fec",
      "parents": [
        "f5a2384a275d3a41c11b00d99f1b2e90ab76be06"
      ],
      "author": {
        "name": "Biju Das",
        "email": "biju.das@bp.renesas.com",
        "time": "Fri Aug 10 10:52:58 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 21:13:10 2018 +0100"
      },
      "message": "ARM: dts: iwg22d-sodimm: Sound PIO support\n\nEnable sound PIO support on carrier board.\n\nSigned-off-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nReviewed-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nSigned-off-by: Simon Horman \u003chorms+renesas@verge.net.au\u003e\n(cherry picked from commit 3838ef590119420031ad2a51ea19a9be2ea9acef)\nSigned-off-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "f5a2384a275d3a41c11b00d99f1b2e90ab76be06",
      "tree": "68f5f63bcbd7f11f7acba6c91f1a7b08e6b1d193",
      "parents": [
        "a8bbfaa4c0c00ac2557b53b350f8abe772b659b5"
      ],
      "author": {
        "name": "Biju Das",
        "email": "biju.das@bp.renesas.com",
        "time": "Fri Aug 10 10:52:57 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 21:13:10 2018 +0100"
      },
      "message": "ARM: dts: iwg22d-sodimm: Enable SGTL5000 audio codec\n\nThis patch enables SGTL5000 audio codec on the carrier board.\n\nSigned-off-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nReviewed-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Geert Uytterhoeven \u003cgeert+renesas@glider.be\u003e\nSigned-off-by: Simon Horman \u003chorms+renesas@verge.net.au\u003e\n(cherry picked from commit 55e37da0309a2237cc8f14a43ba04b2fd2083c1c)\nSigned-off-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "a8bbfaa4c0c00ac2557b53b350f8abe772b659b5",
      "tree": "dcc5566839b2517b87d441cb47b5bb40030881d5",
      "parents": [
        "b35db483469e6b1630f4928ccdca62ae7a369318"
      ],
      "author": {
        "name": "Biju Das",
        "email": "biju.das@bp.renesas.com",
        "time": "Fri Aug 10 10:52:56 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 21:13:10 2018 +0100"
      },
      "message": "ARM: dts: r8a7745: Add sound support\n\nDefine the generic r8a7745(RZ/G1E) part of the sound device node.\n\nThis patch is based on the r8a7794 sound work by Sergei Shtylyov.\n\nSigned-off-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nReviewed-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Geert Uytterhoeven \u003cgeert+renesas@glider.be\u003e\nSigned-off-by: Simon Horman \u003chorms+renesas@verge.net.au\u003e\n(cherry picked from commit 17d2e479d09e597c9915f0ab853edfa8f5010476)\n(modified clocks and power-domains properties. Removed resets and\nreset-names properties. Also changed rcar_sound,module children names\n(e.g. from ssi-0 to ssi@0) to make them similar to other R-Car Gen2\ndevices in 4.4)\nSigned-off-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "b35db483469e6b1630f4928ccdca62ae7a369318",
      "tree": "46e196f0d207f371c823ecae1e29bd64bd33bed8",
      "parents": [
        "0734263bf083cef68eed978e7ae894c10c676c0a"
      ],
      "author": {
        "name": "Biju Das",
        "email": "biju.das@bp.renesas.com",
        "time": "Fri Aug 10 10:52:55 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 21:13:10 2018 +0100"
      },
      "message": "ARM: dts: r8a7745: Add audio DMAC support\n\nInstantiate the audio DMA controller on the r8a7745 device tree.\n\nSigned-off-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nReviewed-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Geert Uytterhoeven \u003cgeert+renesas@glider.be\u003e\nSigned-off-by: Simon Horman \u003chorms+renesas@verge.net.au\u003e\n(cherry picked from commit a14a05c2f32143431615116f94cf455727cce235)\n(modified clocks and power-domains properties. removed resets property)\nSigned-off-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "0734263bf083cef68eed978e7ae894c10c676c0a",
      "tree": "5266979476067b2fa47019aae3ebfa85de5e2a8b",
      "parents": [
        "485339ca55717d6766c590a9f3f3102db12f2d05"
      ],
      "author": {
        "name": "Biju Das",
        "email": "biju.das@bp.renesas.com",
        "time": "Fri Aug 10 10:52:54 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 21:13:10 2018 +0100"
      },
      "message": "ARM: dts: r8a7745: Add audio clocks\n\nDescribe the external audio clocks required by the sound driver.\nBoards that provide audio clocks need to override the clock frequencies.\n\nSigned-off-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nReviewed-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Geert Uytterhoeven \u003cgeert+renesas@glider.be\u003e\nSigned-off-by: Simon Horman \u003chorms+renesas@verge.net.au\u003e\n(cherry picked from commit 44da63157d86b5ca5c4dec2b160bdeb71c6bd48e)\nSigned-off-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "485339ca55717d6766c590a9f3f3102db12f2d05",
      "tree": "49054defd89abe3e52da1136ccd3be7bacca19df",
      "parents": [
        "c963a27ed6bcfadef893a9ca01094a538be65ce0"
      ],
      "author": {
        "name": "Kuninori Morimoto",
        "email": "kuninori.morimoto.gx@renesas.com",
        "time": "Fri Aug 10 10:52:53 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 21:13:09 2018 +0100"
      },
      "message": "dmaengine: rcar-dmac: use TCRB instead of TCR for residue\n\nSYS/RT/Audio DMAC includes independent data buffers for reading\nand writing. Therefore, the read transfer counter and write transfer\ncounter have different values.\nTCR indicates read counter, and TCRB indicates write counter.\nThe relationship is like below.\n\n\t        TCR       TCRB\n\t[SOURCE] -\u003e [DMAC] -\u003e [SINK]\n\nIn the MEM_TO_DEV direction, what really matters is how much data has\nbeen written to the device. If the DMA is interrupted between read and\nwrite, then, the data doesn\u0027t end up in the destination, so shouldn\u0027t\nbe counted. TCRB is thus the register we should use in this cases.\n\nIn the DEV_TO_MEM direction, the situation is more complex. Both the\nread and write side are important. What matters from a data consumer\npoint of view is how much data has been written to memory.\nOn the other hand, if the transfer is interrupted between read and\nwrite, we\u0027ll end up losing data. It can also be important to report.\n\nIn the MEM_TO_MEM direction, what matters is of course how much data\nhas been written to memory from data consumer point of view.\nHere, because read and write have independent data buffers, it will\ntake a while for TCR and TCRB to become equal. Thus we should check\nTCRB in this case, too.\n\nThus, all cases we should check TCRB instead of TCR.\n\nWithout this patch, Sound Capture has noise after PulseAudio support\n(\u003d 07b7acb51d2 (\"ASoC: rsnd: update pointer more accurate\")), because\nthe recorder will use wrong residue counter which indicates transferred\nfrom sound device, but in reality the data was not yet put to memory\nand recorder will record it.\n\nHowever, because DMAC is buffering data until it can be transferable\nsize, TCRB might not be updated.\nFor example, if consumer doesn\u0027t know how much data can be received,\nit requests enough size to DMAC. But in reality, it might receive very\nfew data. In such case, DMAC just buffered it until transferable size,\nand no TCRB updated.\n\nIn such case, this buffered data will be transferred if CHCR::DE bit was\ncleared, and this is happen if rcar_dmac_chan_halt(). In other word, it\nhappen when consumer called dmaengine_terminate_all().\n\nBecause of this behavior, it need to flush buffered data when it returns\n\"residue\" (\u003d dmaengine_tx_status()).\nOtherwise, consumer might calculate wrong things if it called\ndmaengine_tx_status() and dmaengine_terminate_all() consecutively.\n\nSigned-off-by: Kuninori Morimoto \u003ckuninori.morimoto.gx@renesas.com\u003e\nTested-by: Hiroyuki Yokoyama \u003chiroyuki.yokoyama.vx@renesas.com\u003e\nTested-by: Ryo Kodama \u003cryo.kodama.vz@renesas.com\u003e\nTested-by: Geert Uytterhoeven \u003cgeert+renesas@glider.be\u003e\nSigned-off-by: Vinod Koul \u003cvinod.koul@intel.com\u003e\n(cherry picked from commit 73a47bd0da668c99f04e9076f2b02101a5b2749b)\nSigned-off-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "c963a27ed6bcfadef893a9ca01094a538be65ce0",
      "tree": "4e3f781ca2def0db867818de85a56ffb09f67d55",
      "parents": [
        "ec234aafd9580b9803c14e95b406a95ca164874e"
      ],
      "author": {
        "name": "Kuninori Morimoto",
        "email": "kuninori.morimoto.gx@renesas.com",
        "time": "Fri Aug 10 10:52:52 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 21:13:09 2018 +0100"
      },
      "message": "dmaengine: rcar-dmac: ensure CHCR DE bit is actually 0 after clearing\n\nDMAC reads data from source device, and buffered it until transferable\nsize for sink device. Because of this behavior, DMAC is including\nbuffered data .\n\nNow, CHCR DE bit is controlling DMA transfer enable/disable.\n\nIf DE bit was cleared during data transferring, or during buffering,\nit will flush buffered data if source device was peripheral device\n(The buffered data will be removed if source device was memory).\nBecause of this behavior, driver should ensure that DE bit is actually\n0 after clearing.\n\nThis patch adds new rcar_dmac_chcr_de_barrier() and call it after CHCR\nregister access.\n\nSigned-off-by: Kuninori Morimoto \u003ckuninori.morimoto.gx@renesas.com\u003e\nTested-by: Hiroyuki Yokoyama \u003chiroyuki.yokoyama.vx@renesas.com\u003e\nTested-by: Ryo Kodama \u003cryo.kodama.vz@renesas.com\u003e\nTested-by: Geert Uytterhoeven \u003cgeert+renesas@glider.be\u003e\nSigned-off-by: Vinod Koul \u003cvinod.koul@intel.com\u003e\n(cherry picked from commit a8d46a7f5d17ca9cbe9e9c7d1d23dc6ea437e141)\nSigned-off-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "ec234aafd9580b9803c14e95b406a95ca164874e",
      "tree": "5252b8a12361bab63ed738307927696f5bb379ad",
      "parents": [
        "7bf4f23a95eb194aecd1e6d3ed18cb163b877afc"
      ],
      "author": {
        "name": "Laurent Pinchart",
        "email": "laurent.pinchart+renesas@ideasonboard.com",
        "time": "Fri Aug 10 10:52:51 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 21:13:09 2018 +0100"
      },
      "message": "dmaengine: rcar-dmac: Fix residue reporting for pending descriptors\n\nCookies corresponding to pending transfers have a residue value equal to\nthe full size of the corresponding descriptor. The driver miscomputes\nthat and uses the size of the active descriptor instead. Fix it.\n\nReported-by: Geert Uytterhoeven \u003cgeert@linux-m68k.org\u003e\nSigned-off-by: Laurent Pinchart \u003claurent.pinchart+renesas@ideasonboard.com\u003e\n[geert: Also check desc.active list]\nSigned-off-by: Geert Uytterhoeven \u003cgeert+renesas@glider.be\u003e\nSigned-off-by: Niklas Söderlund \u003cniklas.soderlund+renesas@ragnatech.se\u003e\nSigned-off-by: Vinod Koul \u003cvinod.koul@intel.com\u003e\n(cherry picked from commit 55bd582b4d8c2266bc43cbae2ddfce31b489618f)\nSigned-off-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "7bf4f23a95eb194aecd1e6d3ed18cb163b877afc",
      "tree": "407f51db46535a423643621ea163dc15df21d952",
      "parents": [
        "367b5bf277f64cd719c0432800517f190b11ef8b"
      ],
      "author": {
        "name": "Muhammad Hamza Farooq",
        "email": "mfarooq@visteon.com",
        "time": "Fri Aug 10 10:52:50 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 21:13:09 2018 +0100"
      },
      "message": "dmaengine: rcar-dmac: Fixed active descriptor initializing\n\nRunning descriptor pointer is set to NULL upon freeing resources. Other-\nwise, rcar_dmac_issue_pending might not start new transfers\n\nSigned-off-by: Muhammad Hamza Farooq \u003cmfarooq@visteon.com\u003e\nSigned-off-by: Geert Uytterhoeven \u003cgeert+renesas@glider.be\u003e\nSigned-off-by: Niklas Söderlund \u003cniklas.soderlund+renesas@ragnatech.se\u003e\nAcked-by: Laurent Pinchart \u003claurent.pinchart@ideasonboard.com\u003e\nSigned-off-by: Vinod Koul \u003cvinod.koul@intel.com\u003e\n(cherry picked from commit 48c73659abae103a2f8531f825ce7a3f8dedbb39)\nSigned-off-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "367b5bf277f64cd719c0432800517f190b11ef8b",
      "tree": "c0c36a19ae9d6698df219ce37fe7a50cc4d050eb",
      "parents": [
        "aeb308571793441f877006cab3e796266d50bf86"
      ],
      "author": {
        "name": "Niklas Söderlund",
        "email": "niklas.soderlund+renesas@ragnatech.se",
        "time": "Fri Aug 10 10:52:49 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 21:13:09 2018 +0100"
      },
      "message": "dmaengine: rcar-dmac: warn if transfer cannot start as TE \u003d 1\n\nThe documentation states one should make sure both DE and TE are cleared\nbefore starting a transaction. This patch extends the current warning to\nlook at both DE and TE.\n\nBased on previous work from Muhammad Hamza Farooq.\n\nSuggested-by: Muhammad Hamza Farooq \u003cmfarooq@visteon.com\u003e\nSigned-off-by: Niklas Söderlund \u003cniklas.soderlund+renesas@ragnatech.se\u003e\nAcked-by: Laurent Pinchart \u003claurent.pinchart@ideasonboard.com\u003e\nSigned-off-by: Vinod Koul \u003cvinod.koul@intel.com\u003e\n(cherry picked from commit 0f78e3b58f5f99c991613db4477f893b53da5520)\nSigned-off-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "aeb308571793441f877006cab3e796266d50bf86",
      "tree": "918085cd7de1d14783e41686ea650441725188e6",
      "parents": [
        "05736b5b1e0d1d8a1d96e5435e9f849f24cb80b6"
      ],
      "author": {
        "name": "Muhammad Hamza Farooq",
        "email": "mfarooq@visteon.com",
        "time": "Fri Aug 10 10:52:48 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 21:13:09 2018 +0100"
      },
      "message": "dmaengine: rcar-dmac: use result of updated get_residue in tx_status\n\nThe hardware might have complete the transfer but the interrupt handler\nmight not have had a chance to run. If rcar_dmac_chan_get_residue()\nwhich reads HW registers finds that there is no residue return\nDMA_COMPLETE.\n\nSigned-off-by: Muhammad Hamza Farooq \u003cmfarooq@visteon.com\u003e\nSigned-off-by: Geert Uytterhoeven \u003cgeert+renesas@glider.be\u003e\n[Niklas: add explanation in commit message]\nSigned-off-by: Niklas Söderlund \u003cniklas.soderlund+renesas@ragnatech.se\u003e\nAcked-by: Laurent Pinchart \u003claurent.pinchart@ideasonboard.com\u003e\nSigned-off-by: Vinod Koul \u003cvinod.koul@intel.com\u003e\n\n(cherry picked from commit 3544d2878817bd139dda238cdd86a15e1c03d037)\nSigned-off-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "05736b5b1e0d1d8a1d96e5435e9f849f24cb80b6",
      "tree": "c167da0eedf236e69eff6dc05c2a27981799567c",
      "parents": [
        "e6d6f4aadca3077bfa033d12a4bf105d9c3673c7"
      ],
      "author": {
        "name": "Kuninori Morimoto",
        "email": "kuninori.morimoto.gx@renesas.com",
        "time": "Fri Aug 10 10:52:47 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 21:13:08 2018 +0100"
      },
      "message": "dmaengine: rcar-dmac: use list_add() on rcar_dmac_desc_put()\n\nFor each descriptor, in addition to the memory used by the descriptors\nstructure itself, the driver allocates a list of chunks as well as a\nbuffer for hardware descriptors. Descriptors themselves are preallocated,\nand allocation of the chunks and buffer is performed the first time the\ndescriptor is used. The memory isn\u0027t freed when the transfer is completed,\nas the chunks and buffer will be needed again when the descriptor is\nreused internally, so the driver keeps the memory around.\n\nIf only a few descriptors are used concurrently, the current\nlist_add_tail() implementation will result in all preallocated descriptors\nbeing used before going back to the first one, and will thus allocate\nchunks and a buffer for all preallocated descriptors. Using list_add()\nwill put the complete descriptor at the head of the list of available\ndescriptors, so the next transfer will be more likely to reuse a\ndescriptor that already has associated memory instead of one that has\nnever been used before.\n\nSigned-off-by: Kuninori Morimoto \u003ckuninori.morimoto.gx@renesas.com\u003e\nSigned-off-by: Vinod Koul \u003cvinod.koul@intel.com\u003e\n(cherry picked from commit 3565fe53334cd3f0d59ff5db0872de9370775a19)\nSigned-off-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "e6d6f4aadca3077bfa033d12a4bf105d9c3673c7",
      "tree": "236ce74c92af022460be6022656b65f7349b2392",
      "parents": [
        "966601eb47bbab82cd5fd6c6f6d926c3cac1ab4b"
      ],
      "author": {
        "name": "Kuninori Morimoto",
        "email": "kuninori.morimoto.gx@renesas.com",
        "time": "Fri Aug 10 10:52:46 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 21:13:08 2018 +0100"
      },
      "message": "dmaengine: rcar-dmac: clear pertinence number of channels\n\nDMACHCLR clears each channels, but its channel number is based on\nits SoC or IP. Current driver is using fixed 0x7fff (\u003d for 15ch),\nit is not good match for Gen3 or Gen2 Audio DMAC. This patch fixes it\n\nSigned-off-by: Kuninori Morimoto \u003ckuninori.morimoto.gx@renesas.com\u003e\nAcked-by: Geert Uytterhoeven \u003cgeert+renesas@glider.be\u003e\nAcked-by: Laurent Pinchart \u003claurent.pinchart@ideasonboard.com\u003e\nSigned-off-by: Vinod Koul \u003cvinod.koul@intel.com\u003e\n(cherry picked from commit 20c169aceb459575681c4f4578d0e312bd1436c1)\nSigned-off-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "966601eb47bbab82cd5fd6c6f6d926c3cac1ab4b",
      "tree": "38eeb82d02b5efb905548c6543cd281046a20ecd",
      "parents": [
        "19fe6caae1c7bcf125d8b775ca4cfe656806a23a"
      ],
      "author": {
        "name": "Sergei Shtylyov",
        "email": "sergei.shtylyov@cogentembedded.com",
        "time": "Fri Aug 10 10:52:45 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 21:13:08 2018 +0100"
      },
      "message": "rcar: src: skip disabled-SRC nodes\n\nThe current device tree representation of the R-Car Sample Rate Converters\n(SRC) assumes that they are numbered consecutively, starting from 0. Alas,\nthis  is not  the case with the R8A7794 SoC where SRC0 isn\u0027t present.  In\norder to keep the existing  device trees working, I\u0027m suggesting to use a\ndisabled node for SRC0.  Teach the SRC probe  to just skip disabled nodes.\n\nSigned-off-by: Sergei Shtylyov \u003csergei.shtylyov@cogentembedded.com\u003e\nAcked-by: Kuninori Morimoto \u003ckuninori.morimoto.gx@renesas.com\u003e\nSigned-off-by: Mark Brown \u003cbroonie@kernel.org\u003e\n(cherry picked from commit de1965159a34951a86267d13db4f2a67234139d3)\nSigned-off-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "19fe6caae1c7bcf125d8b775ca4cfe656806a23a",
      "tree": "b8d5402a348a09d0f7ed75cc6d69e9b6aa2e65b7",
      "parents": [
        "b0786914501e7ada39731c4f698afc58ff287686"
      ],
      "author": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 20:58:17 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 20:58:17 2018 +0100"
      },
      "message": "CIP: Bump version suffix to -cip27 after merge from stable\n\n...plus some related bug fixes.\n\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "b0786914501e7ada39731c4f698afc58ff287686",
      "tree": "7f4ef369d5e09916de31aea9e66309c86cfb5cf6",
      "parents": [
        "98b5ccfcee60feb85f007c21619dd4fa1e235eef"
      ],
      "author": {
        "name": "Jiri Slaby",
        "email": "jslaby@suse.cz",
        "time": "Fri Sep 07 11:13:07 2018 +0200"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 20:19:25 2018 +0100"
      },
      "message": "x86/mm/pat: Fix L1TF stable backport for CPA, 2nd call\n\nMostly recycling the commit log from adaba23ccd7d which fixed\npopulate_pmd, but did not fix populate_pud. The same problem exists\nthere.\n\nStable trees reverted the following patch:\n  Revert \"x86/mm/pat: Ensure cpa-\u003epfn only contains page frame numbers\"\n\n    This reverts commit 87e2bd898d3a79a8c609f183180adac47879a2a4 which is\n    commit edc3b9129cecd0f0857112136f5b8b1bc1d45918 upstream.\n\nbut the L1TF patch 02ff2769edbc backported here\n\n  x86/mm/pat: Make set_memory_np() L1TF safe\n\n    commit 958f79b9ee55dfaf00c8106ed1c22a2919e0028b upstream\n\n    set_memory_np() is used to mark kernel mappings not present, but it has\n    it\u0027s own open coded mechanism which does not have the L1TF protection of\n    inverting the address bits.\n\nassumed that cpa-\u003epfn contains a PFN. With the above patch reverted\nit does not, which causes the PUD to be set to an incorrect address\nshifted by 12 bits, which can cause various failures.\n\nConvert the address to a PFN before passing it to pud_pfn().\n\nThis is a 4.4 stable only patch to fix the L1TF patches backport there.\n\nCc: stable@vger.kernel.org # 4.4-only\nCc: Andi Kleen \u003cak@linux.intel.com\u003e\nSigned-off-by: Jiri Slaby \u003cjslaby@suse.cz\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "98b5ccfcee60feb85f007c21619dd4fa1e235eef",
      "tree": "8669d639543139b6ccae9ba116e6420662b12d8b",
      "parents": [
        "24fc584092a9ad8dab8a8a83d919aed8f1f29517"
      ],
      "author": {
        "name": "Govindarajulu Varadarajan",
        "email": "gvaradar@cisco.com",
        "time": "Mon Jul 30 09:56:54 2018 -0700"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 20:19:23 2018 +0100"
      },
      "message": "enic: do not call enic_change_mtu in enic_probe\n\ncommit cb5c6568867325f9905e80c96531d963bec8e5ea upstream.\n\nIn commit ab123fe071c9 (\"enic: handle mtu change for vf properly\")\nASSERT_RTNL() is added to _enic_change_mtu() to prevent it from being\ncalled without rtnl held. enic_probe() calls enic_change_mtu()\nwithout rtnl held. At this point netdev is not registered yet.\nRemove call to enic_change_mtu and assign the mtu to netdev-\u003emtu.\n\nFixes: ab123fe071c9 (\"enic: handle mtu change for vf properly\")\nSigned-off-by: Govindarajulu Varadarajan \u003cgvaradar@cisco.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n[bwh: Backported to 4.4: adjust context]\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "24fc584092a9ad8dab8a8a83d919aed8f1f29517",
      "tree": "fc7fe6c48a84e069ce9e804583cbc9290b7fc657",
      "parents": [
        "066c9b0b93e2586f8bc30ea6005e475eede1c4be"
      ],
      "author": {
        "name": "Alexey Kodanev",
        "email": "alexey.kodanev@oracle.com",
        "time": "Thu Aug 23 19:49:54 2018 +0300"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 20:19:21 2018 +0100"
      },
      "message": "vti6: remove !skb-\u003eignore_df check from vti6_xmit()\n\ncommit 9f2895461439fda2801a7906fb4c5fb3dbb37a0a upstream.\n\nBefore the commit d6990976af7c (\"vti6: fix PMTU caching and reporting\non xmit\") \u0027!skb-\u003eignore_df\u0027 check was always true because the function\nskb_scrub_packet() was called before it, resetting ignore_df to zero.\n\nIn the commit, skb_scrub_packet() was moved below, and now this check\ncan be false for the packet, e.g. when sending it in the two fragments,\nthis prevents successful PMTU updates in such case. The next attempts\nto send the packet lead to the same tx error. Moreover, vti6 initial\nMTU value relies on PMTU adjustments.\n\nThis issue can be reproduced with the following LTP test script:\n    udp_ipsec_vti.sh -6 -p ah -m tunnel -s 2000\n\nFixes: ccd740cbc6e0 (\"vti6: Add pmtu handling to vti6_xmit.\")\nSigned-off-by: Alexey Kodanev \u003calexey.kodanev@oracle.com\u003e\nAcked-by: Steffen Klassert \u003csteffen.klassert@secunet.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n[bwh: Backported to 4.4: adjust context]\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "066c9b0b93e2586f8bc30ea6005e475eede1c4be",
      "tree": "862897985177fa028bcf2b010d5f5fd87001e0c2",
      "parents": [
        "78ddb154ba4fd08dbf1ceeb94ffd00634171c9f1"
      ],
      "author": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 20:04:24 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 20:19:17 2018 +0100"
      },
      "message": "Revert \"Smack: Mark inode instant in smack_task_to_inode\"\n\nThis reverts commit 091cb7dec89b1bbd4989a30f5ae9ab93248d2a93, which was\ncommit 7b4e88434c4e7982fb053c49657e1c8bbb8692d9 upstream.  The issue\nit is supposed to address was only introduced in Linux 4.18.\n\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "78ddb154ba4fd08dbf1ceeb94ffd00634171c9f1",
      "tree": "177009cb5cd72706ee971bb5d2f74960ad8d801f",
      "parents": [
        "fa5e476d30baf4a232c657799d98c295187fbbc1"
      ],
      "author": {
        "name": "Michal Hocko",
        "email": "mhocko@suse.cz",
        "time": "Wed Jun 27 17:46:50 2018 +0200"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 20:19:11 2018 +0100"
      },
      "message": "x86/speculation/l1tf: Fix up pte-\u003epfn conversion for PAE\n\ncommit e14d7dfb41f5807a0c1c26a13f2b8ef16af24935 upstream.\n\nJan has noticed that pte_pfn and co. resp. pfn_pte are incorrect for\nCONFIG_PAE because phys_addr_t is wider than unsigned long and so the\npte_val reps. shift left would get truncated. Fix this up by using proper\ntypes.\n\n[Just one chunk, again, needed here.  Thanks to Ben and Guenter for\nfinding and fixing this. - gregkh]\n\nFixes: 6b28baca9b1f (\"x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation\")\nReported-by: Jan Beulich \u003cJBeulich@suse.com\u003e\nSigned-off-by: Michal Hocko \u003cmhocko@suse.com\u003e\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nAcked-by: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: Guenter Roeck \u003clinux@roeck-us.net\u003e\nCc: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "fa5e476d30baf4a232c657799d98c295187fbbc1",
      "tree": "d823f35c7e89f9c4b9e70f4a5a8106daeff2c32c",
      "parents": [
        "655878b8f90f671b5531bf6e0005b40c9b705869"
      ],
      "author": {
        "name": "Dave Airlie",
        "email": "airlied@redhat.com",
        "time": "Mon Oct 24 15:37:48 2016 +1000"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 20:19:03 2018 +0100"
      },
      "message": "drm/drivers: add support for using the arch wc mapping API.\n\ncommit 7cf321d118a825c1541b43ca45294126fd474efa upstream.\n\nThis fixes a regression in all these drivers since the cache\nmode tracking was fixed for mixed mappings. It uses the new\narch API to add the VRAM range to the PAT mapping tracking\ntables.\n\nFixes: 87744ab3832 (mm: fix cache mode tracking in vm_insert_mixed())\nReviewed-by: Christian König \u003cchristian.koenig@amd.com\u003e.\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nCc: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "655878b8f90f671b5531bf6e0005b40c9b705869",
      "tree": "3ae8af09bc8a14686b6c2c090f44b7e06211f41e",
      "parents": [
        "d003d9bdb7cd1df74e9617af14e6f9d0ef8b25bd"
      ],
      "author": {
        "name": "Dave Airlie",
        "email": "airlied@redhat.com",
        "time": "Mon Oct 24 15:27:59 2016 +1000"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 20:18:54 2018 +0100"
      },
      "message": "x86/io: add interface to reserve io memtype for a resource range. (v1.1)\n\ncommit 8ef4227615e158faa4ee85a1d6466782f7e22f2f upstream.\n\nA recent change to the mm code in:\n87744ab3832b mm: fix cache mode tracking in vm_insert_mixed()\n\nstarted enforcing checking the memory type against the registered list for\namixed pfn insertion mappings. It happens that the drm drivers for a number\nof gpus relied on this being broken. Currently the driver only inserted\nVRAM mappings into the tracking table when they came from the kernel,\nand userspace mappings never landed in the table. This led to a regression\nwhere all the mapping end up as UC instead of WC now.\n\nI\u0027ve considered a number of solutions but since this needs to be fixed\nin fixes and not next, and some of the solutions were going to introduce\noverhead that hadn\u0027t been there before I didn\u0027t consider them viable at\nthis stage. These mainly concerned hooking into the TTM io reserve APIs,\nbut these API have a bunch of fast paths I didn\u0027t want to unwind to add\nthis to.\n\nThe solution I\u0027ve decided on is to add a new API like the arch_phys_wc\nAPIs (these would have worked but wc_del didn\u0027t take a range), and\nuse them from the drivers to add a WC compatible mapping to the table\nfor all VRAM on those GPUs. This means we can then create userspace\nmapping that won\u0027t get degraded to UC.\n\nv1.1: use CONFIG_X86_PAT + add some comments in io.h\n\nCc: Toshi Kani \u003ctoshi.kani@hp.com\u003e\nCc: Borislav Petkov \u003cbp@alien8.de\u003e\nCc: H. Peter Anvin \u003chpa@zytor.com\u003e\nCc: Andy Lutomirski \u003cluto@kernel.org\u003e\nCc: Denys Vlasenko \u003cdvlasenk@redhat.com\u003e\nCc: Brian Gerst \u003cbrgerst@gmail.com\u003e\nCc: x86@kernel.org\nCc: mcgrof@suse.com\nCc: Dan Williams \u003cdan.j.williams@intel.com\u003e\nAcked-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nReviewed-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nCc: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "d003d9bdb7cd1df74e9617af14e6f9d0ef8b25bd",
      "tree": "b274e4c965adc98ce3590ac445b37ffb28aa1b8d",
      "parents": [
        "f12e8145877dbcd337160fd7edac8023e7bfc54f"
      ],
      "author": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Fri Sep 07 01:13:40 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 20:18:51 2018 +0100"
      },
      "message": "net: lan78xx: Fix misplaced tasklet_schedule() call\n\nCommit 136f55f66019 (\"net: lan78xx: fix rx handling before first\npacket is send\") was not correctly backported to 4.4.  The call to\ntasklet_schedule() belongs in lan78xx_link_reset().\n\nFixes: d1fc12d8475c (\"net: lan78xx: fix rx handling before first packet is send\")\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "f12e8145877dbcd337160fd7edac8023e7bfc54f",
      "tree": "bcfb88f7918edc8c22b6a0904c85fcfbb398bf8f",
      "parents": [
        "55d4d1675ed63e7f3f6f0c013202b428e32bb558"
      ],
      "author": {
        "name": "Wei Yongjun",
        "email": "weiyongjun1@huawei.com",
        "time": "Thu Jan 18 14:05:05 2018 +0000"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 20:18:46 2018 +0100"
      },
      "message": "mtd: ubi: wl: Fix error return code in ubi_wl_init()\n\ncommit 7233982ade15eeac05c6f351e8d347406e6bcd2f upstream.\n\nFix to return error code -ENOMEM from the kmem_cache_alloc() error\nhandling case instead of 0, as done elsewhere in this function.\n\nFixes: f78e5623f45b (\"ubi: fastmap: Erase outdated anchor PEBs during\nattach\")\nSigned-off-by: Wei Yongjun \u003cweiyongjun1@huawei.com\u003e\nReviewed-by: Boris Brezillon \u003cboris.brezillon@free-electrons.com\u003e\nSigned-off-by: Richard Weinberger \u003crichard@nod.at\u003e\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "55d4d1675ed63e7f3f6f0c013202b428e32bb558",
      "tree": "0a666f05b393adf885ed457221589245d95cacde",
      "parents": [
        "85144ca52aa57768e914bf5ba33c1fa8fa797c40",
        "4d9339a1f0e6e288903d34020f2378d250ea3cac"
      ],
      "author": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 19:27:13 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 19:27:13 2018 +0100"
      },
      "message": "Merge tag \u0027v4.4.154\u0027 into HEAD\n\nThis is the 4.4.154 stable release\n\nResolved conflict in Makefile to preserve the export of CFLAGS_UBSAN.\n\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "85144ca52aa57768e914bf5ba33c1fa8fa797c40",
      "tree": "44288197d1c7fbe7c4d50e254dfc1017cf6069f7",
      "parents": [
        "0051fdb2b850c5f4baaa0260b07e30cb45349c14"
      ],
      "author": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 19:24:54 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 19:24:54 2018 +0100"
      },
      "message": "CIP: Bump version suffix to -cip26 after Renesas patches\n\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "0051fdb2b850c5f4baaa0260b07e30cb45349c14",
      "tree": "e5d6e4c3ecaece23cf57fecb659011b9cfbaa482",
      "parents": [
        "34dfd46f3b84c6cf272cf222e7cb5b6f22ab03bc"
      ],
      "author": {
        "name": "Fabrizio Castro",
        "email": "fabrizio.castro@bp.renesas.com",
        "time": "Fri Aug 10 10:52:44 2018 +0100"
      },
      "committer": {
        "name": "Ben Hutchings",
        "email": "ben.hutchings@codethink.co.uk",
        "time": "Wed Sep 12 18:49:41 2018 +0100"
      },
      "message": "ASoC: rsnd: Refactor rsnd_src_probe() to allow backporting a fix\n\nThis is a subset of the changes in commit adf6a6815952 \"ASoC: rsnd:\nremove platform boot support from src.c\" upstream.\n\nr8a7745 doesn\u0027t have clock \"src.0\" leaving a gap in the clock names.\nThe fix for this was made upstream with commit de1965159a34 (\"rcar: src:\nskip disabled-SRC nodes\"). This patch prepares the context for the fix,\nhowever since it is applied to quite a different version of the file\nit has been reworked to support the replacing of for_each_rsnd_src\nwith for_each_child_of_node loop.\n\nSigned-off-by: Fabrizio Castro \u003cfabrizio.castro@bp.renesas.com\u003e\nReviewed-by: Biju Das \u003cbiju.das@bp.renesas.com\u003e\n[bwh: Replace the upstream commit message with an explanation of what\n this subset of the changes does, mostly written by Fabrizio.]\nSigned-off-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\n"
    },
    {
      "commit": "4d9339a1f0e6e288903d34020f2378d250ea3cac",
      "tree": "8a21327129a7b95f74d2066d69223aab2457be52",
      "parents": [
        "eb08a285899df82056f712421988c6ccd0b58ba6"
      ],
      "author": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:41 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:41 2018 +0200"
      },
      "message": "Linux 4.4.154\n"
    },
    {
      "commit": "eb08a285899df82056f712421988c6ccd0b58ba6",
      "tree": "300591467345986c84c77247a803929db2d03967",
      "parents": [
        "aba1ba97e64f2e6971df812fc45985222356cdd5"
      ],
      "author": {
        "name": "Scott Bauer",
        "email": "scott.bauer@intel.com",
        "time": "Thu Apr 26 11:51:08 2018 -0600"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:41 2018 +0200"
      },
      "message": "cdrom: Fix info leak/OOB read in cdrom_ioctl_drive_status\n\ncommit 8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4 upstream.\n\nLike d88b6d04: \"cdrom: information leak in cdrom_ioctl_media_changed()\"\n\nThere is another cast from unsigned long to int which causes\na bounds check to fail with specially crafted input. The value is\nthen used as an index in the slot array in cdrom_slot_status().\n\nSigned-off-by: Scott Bauer \u003cscott.bauer@intel.com\u003e\nSigned-off-by: Scott Bauer \u003csbauer@plzdonthack.me\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "aba1ba97e64f2e6971df812fc45985222356cdd5",
      "tree": "01836d727d58318f9bf9d78e6c5ea6547710f298",
      "parents": [
        "a49097fb388388cc4b2bf8d3f42693eb594b2484"
      ],
      "author": {
        "name": "Mike Christie",
        "email": "mchristi@redhat.com",
        "time": "Thu Jul 26 12:13:49 2018 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:40 2018 +0200"
      },
      "message": "iscsi target: fix session creation failure handling\n\ncommit 26abc916a898d34c5ad159315a2f683def3c5555 upstream.\n\nThe problem is that iscsi_login_zero_tsih_s1 sets conn-\u003esess early in\niscsi_login_set_conn_values. If the function fails later like when we\nalloc the idr it does kfree(sess) and leaves the conn-\u003esess pointer set.\niscsi_login_zero_tsih_s1 then returns -Exyz and we then call\niscsi_target_login_sess_out and access the freed memory.\n\nThis patch has iscsi_login_zero_tsih_s1 either completely setup the\nsession or completely tear it down, so later in\niscsi_target_login_sess_out we can just check for it being set to the\nconnection.\n\nCc: stable@vger.kernel.org\nFixes: 0957627a9960 (\"iscsi-target: Fix sess allocation leak in...\")\nSigned-off-by: Mike Christie \u003cmchristi@redhat.com\u003e\nAcked-by: Martin K. Petersen \u003cmartin.petersen@oracle.com\u003e\nSigned-off-by: Matthew Wilcox \u003cwilly@infradead.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "a49097fb388388cc4b2bf8d3f42693eb594b2484",
      "tree": "099eec42794ea5ba2c0864fa66e6cc863deb57ea",
      "parents": [
        "461a6385e58e8247e6ba2005aa5d1b8d980ee4a2"
      ],
      "author": {
        "name": "Bart Van Assche",
        "email": "bart.vanassche@wdc.com",
        "time": "Thu Aug 02 10:51:41 2018 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:40 2018 +0200"
      },
      "message": "scsi: core: Avoid that SCSI device removal through sysfs triggers a deadlock\n\ncommit 0ee223b2e1f67cb2de9c0e3247c510d846e74d63 upstream.\n\nA long time ago the unfortunate decision was taken to add a self-deletion\nattribute to the sysfs SCSI device directory. That decision was unfortunate\nbecause self-deletion is really tricky. We can\u0027t drop that attribute\nbecause widely used user space software depends on it, namely the\nrescan-scsi-bus.sh script. Hence this patch that avoids that writing into\nthat attribute triggers a deadlock. See also commit 7973cbd9fbd9 (\"[PATCH]\nadd sysfs attributes to scan and delete scsi_devices\").\n\nThis patch avoids that self-removal triggers the following deadlock:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nWARNING: possible circular locking dependency detected\n4.18.0-rc2-dbg+ #5 Not tainted\n------------------------------------------------------\nmodprobe/6539 is trying to acquire lock:\n000000008323c4cd (kn-\u003ecount#202){++++}, at: kernfs_remove_by_name_ns+0x45/0x90\n\nbut task is already holding lock:\n00000000a6ec2c69 (\u0026shost-\u003escan_mutex){+.+.}, at: scsi_remove_host+0x21/0x150 [scsi_mod]\n\nwhich lock already depends on the new lock.\n\nthe existing dependency chain (in reverse order) is:\n\n-\u003e #1 (\u0026shost-\u003escan_mutex){+.+.}:\n       __mutex_lock+0xfe/0xc70\n       mutex_lock_nested+0x1b/0x20\n       scsi_remove_device+0x26/0x40 [scsi_mod]\n       sdev_store_delete+0x27/0x30 [scsi_mod]\n       dev_attr_store+0x3e/0x50\n       sysfs_kf_write+0x87/0xa0\n       kernfs_fop_write+0x190/0x230\n       __vfs_write+0xd2/0x3b0\n       vfs_write+0x101/0x270\n       ksys_write+0xab/0x120\n       __x64_sys_write+0x43/0x50\n       do_syscall_64+0x77/0x230\n       entry_SYSCALL_64_after_hwframe+0x49/0xbe\n\n-\u003e #0 (kn-\u003ecount#202){++++}:\n       lock_acquire+0xd2/0x260\n       __kernfs_remove+0x424/0x4a0\n       kernfs_remove_by_name_ns+0x45/0x90\n       remove_files.isra.1+0x3a/0x90\n       sysfs_remove_group+0x5c/0xc0\n       sysfs_remove_groups+0x39/0x60\n       device_remove_attrs+0x82/0xb0\n       device_del+0x251/0x580\n       __scsi_remove_device+0x19f/0x1d0 [scsi_mod]\n       scsi_forget_host+0x37/0xb0 [scsi_mod]\n       scsi_remove_host+0x9b/0x150 [scsi_mod]\n       sdebug_driver_remove+0x4b/0x150 [scsi_debug]\n       device_release_driver_internal+0x241/0x360\n       device_release_driver+0x12/0x20\n       bus_remove_device+0x1bc/0x290\n       device_del+0x259/0x580\n       device_unregister+0x1a/0x70\n       sdebug_remove_adapter+0x8b/0xf0 [scsi_debug]\n       scsi_debug_exit+0x76/0xe8 [scsi_debug]\n       __x64_sys_delete_module+0x1c1/0x280\n       do_syscall_64+0x77/0x230\n       entry_SYSCALL_64_after_hwframe+0x49/0xbe\n\nother info that might help us debug this:\n\n Possible unsafe locking scenario:\n\n       CPU0                    CPU1\n       ----                    ----\n  lock(\u0026shost-\u003escan_mutex);\n                               lock(kn-\u003ecount#202);\n                               lock(\u0026shost-\u003escan_mutex);\n  lock(kn-\u003ecount#202);\n\n *** DEADLOCK ***\n\n2 locks held by modprobe/6539:\n #0: 00000000efaf9298 (\u0026dev-\u003emutex){....}, at: device_release_driver_internal+0x68/0x360\n #1: 00000000a6ec2c69 (\u0026shost-\u003escan_mutex){+.+.}, at: scsi_remove_host+0x21/0x150 [scsi_mod]\n\nstack backtrace:\nCPU: 10 PID: 6539 Comm: modprobe Not tainted 4.18.0-rc2-dbg+ #5\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.0.0-prebuilt.qemu-project.org 04/01/2014\nCall Trace:\n dump_stack+0xa4/0xf5\n print_circular_bug.isra.34+0x213/0x221\n __lock_acquire+0x1a7e/0x1b50\n lock_acquire+0xd2/0x260\n __kernfs_remove+0x424/0x4a0\n kernfs_remove_by_name_ns+0x45/0x90\n remove_files.isra.1+0x3a/0x90\n sysfs_remove_group+0x5c/0xc0\n sysfs_remove_groups+0x39/0x60\n device_remove_attrs+0x82/0xb0\n device_del+0x251/0x580\n __scsi_remove_device+0x19f/0x1d0 [scsi_mod]\n scsi_forget_host+0x37/0xb0 [scsi_mod]\n scsi_remove_host+0x9b/0x150 [scsi_mod]\n sdebug_driver_remove+0x4b/0x150 [scsi_debug]\n device_release_driver_internal+0x241/0x360\n device_release_driver+0x12/0x20\n bus_remove_device+0x1bc/0x290\n device_del+0x259/0x580\n device_unregister+0x1a/0x70\n sdebug_remove_adapter+0x8b/0xf0 [scsi_debug]\n scsi_debug_exit+0x76/0xe8 [scsi_debug]\n __x64_sys_delete_module+0x1c1/0x280\n do_syscall_64+0x77/0x230\n entry_SYSCALL_64_after_hwframe+0x49/0xbe\n\nSee also https://www.mail-archive.com/linux-scsi@vger.kernel.org/msg54525.html.\n\nFixes: ac0ece9174ac (\"scsi: use device_remove_file_self() instead of device_schedule_callback()\")\nSigned-off-by: Bart Van Assche \u003cbart.vanassche@wdc.com\u003e\nCc: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nAcked-by: Tejun Heo \u003ctj@kernel.org\u003e\nCc: Johannes Thumshirn \u003cjthumshirn@suse.de\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\nSigned-off-by: Martin K. Petersen \u003cmartin.petersen@oracle.com\u003e\n\n"
    },
    {
      "commit": "461a6385e58e8247e6ba2005aa5d1b8d980ee4a2",
      "tree": "96e535058883dba2d400ddd86f7541480aea504f",
      "parents": [
        "bb190acea829443e0be1cd6dc87837df03b39083"
      ],
      "author": {
        "name": "Bart Van Assche",
        "email": "bart.vanassche@wdc.com",
        "time": "Thu Aug 02 10:51:40 2018 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:40 2018 +0200"
      },
      "message": "scsi: sysfs: Introduce sysfs_{un,}break_active_protection()\n\ncommit 2afc9166f79b8f6da5f347f48515215ceee4ae37 upstream.\n\nIntroduce these two functions and export them such that the next patch\ncan add calls to these functions from the SCSI core.\n\nSigned-off-by: Bart Van Assche \u003cbart.vanassche@wdc.com\u003e\nAcked-by: Tejun Heo \u003ctj@kernel.org\u003e\nAcked-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Martin K. Petersen \u003cmartin.petersen@oracle.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "bb190acea829443e0be1cd6dc87837df03b39083",
      "tree": "3ad7c5d15fecec6627e10b7ac7d619d4e221613c",
      "parents": [
        "79ffdc486e1eb4316d34394dbc611e693a35401a"
      ],
      "author": {
        "name": "Paul Burton",
        "email": "paul.burton@mips.com",
        "time": "Tue Aug 21 12:12:59 2018 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:40 2018 +0200"
      },
      "message": "MIPS: lib: Provide MIPS64r6 __multi3() for GCC \u003c 7\n\ncommit 690d9163bf4b8563a2682e619f938e6a0443947f upstream.\n\nSome versions of GCC suboptimally generate calls to the __multi3()\nintrinsic for MIPS64r6 builds, resulting in link failures due to the\nmissing function:\n\n    LD      vmlinux.o\n    MODPOST vmlinux.o\n  kernel/bpf/verifier.o: In function `kmalloc_array\u0027:\n  include/linux/slab.h:631: undefined reference to `__multi3\u0027\n  fs/select.o: In function `kmalloc_array\u0027:\n  include/linux/slab.h:631: undefined reference to `__multi3\u0027\n  ...\n\nWe already have a workaround for this in which we provide the\ninstrinsic, but we do so selectively for GCC 7 only. Unfortunately the\nissue occurs with older GCC versions too - it has been observed with\nboth GCC 5.4.0 \u0026 GCC 6.4.0.\n\nMIPSr6 support was introduced in GCC 5, so all major GCC versions prior\nto GCC 8 are affected and we extend our workaround accordingly to all\nMIPS64r6 builds using GCC versions older than GCC 8.\n\nSigned-off-by: Paul Burton \u003cpaul.burton@mips.com\u003e\nReported-by: Vladimir Kondratiev \u003cvladimir.kondratiev@intel.com\u003e\nFixes: ebabcf17bcd7 (\"MIPS: Implement __multi3 for GCC7 MIPS64r6 builds\")\nPatchwork: https://patchwork.linux-mips.org/patch/20297/\nCc: James Hogan \u003cjhogan@kernel.org\u003e\nCc: Ralf Baechle \u003cralf@linux-mips.org\u003e\nCc: linux-mips@linux-mips.org\nCc: stable@vger.kernel.org # 4.15+\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "79ffdc486e1eb4316d34394dbc611e693a35401a",
      "tree": "220441e9215cd3cca15a39f35adbf2cf0eb7828e",
      "parents": [
        "3051451d49dbe177b85f1f1b8fd57ecd7dc87f21"
      ],
      "author": {
        "name": "Maciej W. Rozycki",
        "email": "macro@mips.com",
        "time": "Tue May 15 23:33:26 2018 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:40 2018 +0200"
      },
      "message": "MIPS: Correct the 64-bit DSP accumulator register size\n\ncommit f5958b4cf4fc38ed4583ab83fb7c4cd1ab05f47b upstream.\n\nUse the `unsigned long\u0027 rather than `__u32\u0027 type for DSP accumulator\nregisters, like with the regular MIPS multiply/divide accumulator and\ngeneral-purpose registers, as all are 64-bit in 64-bit implementations\nand using a 32-bit data type leads to contents truncation on context\nsaving.\n\nUpdate `arch_ptrace\u0027 and `compat_arch_ptrace\u0027 accordingly, removing\ncasts that are similarly not used with multiply/divide accumulator or\ngeneral-purpose register accesses.\n\nSigned-off-by: Maciej W. Rozycki \u003cmacro@mips.com\u003e\nSigned-off-by: Paul Burton \u003cpaul.burton@mips.com\u003e\nFixes: e50c0a8fa60d (\"Support the MIPS32 / MIPS64 DSP ASE.\")\nPatchwork: https://patchwork.linux-mips.org/patch/19329/\nCc: Alexander Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: James Hogan \u003cjhogan@kernel.org\u003e\nCc: Ralf Baechle \u003cralf@linux-mips.org\u003e\nCc: linux-fsdevel@vger.kernel.org\nCc: linux-mips@linux-mips.org\nCc: linux-kernel@vger.kernel.org\nCc: stable@vger.kernel.org # 2.6.15+\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "3051451d49dbe177b85f1f1b8fd57ecd7dc87f21",
      "tree": "314bd4c0131fe1502c18f0905e448e2d69d30643",
      "parents": [
        "5169397d50ed4ca70d273022cc7d8d8f7f68966e"
      ],
      "author": {
        "name": "Masami Hiramatsu",
        "email": "mhiramat@kernel.org",
        "time": "Sat Apr 28 21:35:01 2018 +0900"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:40 2018 +0200"
      },
      "message": "kprobes: Make list and blacklist root user read only\n\ncommit f2a3ab36077222437b4826fc76111caa14562b7c upstream.\n\nSince the blacklist and list files on debugfs indicates\na sensitive address information to reader, it should be\nrestricted to the root user.\n\nSuggested-by: Thomas Richter \u003ctmricht@linux.ibm.com\u003e\nSuggested-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nSigned-off-by: Masami Hiramatsu \u003cmhiramat@kernel.org\u003e\nCc: Ananth N Mavinakayanahalli \u003cananth@in.ibm.com\u003e\nCc: Anil S Keshavamurthy \u003canil.s.keshavamurthy@intel.com\u003e\nCc: Arnd Bergmann \u003carnd@arndb.de\u003e\nCc: David Howells \u003cdhowells@redhat.com\u003e\nCc: David S . Miller \u003cdavem@davemloft.net\u003e\nCc: Heiko Carstens \u003cheiko.carstens@de.ibm.com\u003e\nCc: Jon Medhurst \u003ctixy@linaro.org\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Tobin C . Harding \u003cme@tobin.cc\u003e\nCc: Will Deacon \u003cwill.deacon@arm.com\u003e\nCc: acme@kernel.org\nCc: akpm@linux-foundation.org\nCc: brueckner@linux.vnet.ibm.com\nCc: linux-arch@vger.kernel.org\nCc: rostedt@goodmis.org\nCc: schwidefsky@de.ibm.com\nCc: stable@vger.kernel.org\nLink: https://lkml.kernel.org/lkml/152491890171.9916.5183693615601334087.stgit@devbox\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "5169397d50ed4ca70d273022cc7d8d8f7f68966e",
      "tree": "3933e23b078c45514f7d18741885a1665b32e3d2",
      "parents": [
        "b629d4650a19d883a594a023603894ba9870ab91"
      ],
      "author": {
        "name": "Sebastian Ott",
        "email": "sebott@linux.ibm.com",
        "time": "Mon Aug 13 11:26:46 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:40 2018 +0200"
      },
      "message": "s390/pci: fix out of bounds access during irq setup\n\ncommit 866f3576a72b2233a76dffb80290f8086dc49e17 upstream.\n\nDuring interrupt setup we allocate interrupt vectors, walk the list of msi\ndescriptors, and fill in the message data. Requesting more interrupts than\nsupported on s390 can lead to an out of bounds access.\n\nWhen we restrict the number of interrupts we should also stop walking the\nmsi list after all supported interrupts are handled.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Sebastian Ott \u003csebott@linux.ibm.com\u003e\nSigned-off-by: Heiko Carstens \u003cheiko.carstens@de.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "b629d4650a19d883a594a023603894ba9870ab91",
      "tree": "5658f0873c91baa92a70ec6c672052effca1ba94",
      "parents": [
        "2502064731b133b87540758678b4485c0dbdc925"
      ],
      "author": {
        "name": "Julian Wiedmann",
        "email": "jwi@linux.ibm.com",
        "time": "Wed May 16 09:37:25 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:40 2018 +0200"
      },
      "message": "s390/qdio: reset old sbal_state flags\n\ncommit 64e03ff72623b8c2ea89ca3cb660094e019ed4ae upstream.\n\nWhen allocating a new AOB fails, handle_outbound() is still capable of\ntransmitting the selected buffer (just without async completion).\n\nBut if a previous transfer on this queue slot used async completion, its\nsbal_state flags field is still set to QDIO_OUTBUF_STATE_FLAG_PENDING.\nSo when the upper layer driver sees this stale flag, it expects an async\ncompletion that never happens.\n\nFix this by unconditionally clearing the flags field.\n\nFixes: 104ea556ee7f (\"qdio: support asynchronous delivery of storage blocks\")\nCc: \u003cstable@vger.kernel.org\u003e #v3.2+\nSigned-off-by: Julian Wiedmann \u003cjwi@linux.ibm.com\u003e\nSigned-off-by: Martin Schwidefsky \u003cschwidefsky@de.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "2502064731b133b87540758678b4485c0dbdc925",
      "tree": "0a21be7d4334c42cbbed2803087094c84e2af136",
      "parents": [
        "2edb10cbf21fca9b220a2bdf0b87b7bbeaf1e1e9"
      ],
      "author": {
        "name": "Martin Schwidefsky",
        "email": "schwidefsky@de.ibm.com",
        "time": "Mon Aug 06 14:26:39 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:40 2018 +0200"
      },
      "message": "s390: fix br_r1_trampoline for machines without exrl\n\ncommit 26f843848bae973817b3587780ce6b7b0200d3e4 upstream.\n\nFor machines without the exrl instruction the BFP jit generates\ncode that uses an \"br %r1\" instruction located in the lowcore page.\nUnfortunately there is a cut \u0026 paste error that puts an additional\n\"larl %r1,.+14\" instruction in the code that clobbers the branch\ntarget address in %r1. Remove the larl instruction.\n\nCc: \u003cstable@vger.kernel.org\u003e # v4.17+\nFixes: de5cb6eb51 (\"s390: use expoline thunks in the BPF JIT\")\nSigned-off-by: Martin Schwidefsky \u003cschwidefsky@de.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "2edb10cbf21fca9b220a2bdf0b87b7bbeaf1e1e9",
      "tree": "cabb785dc2255744a1509f4de790bddb1cdc3e0b",
      "parents": [
        "ed9c4055689cab0908fed0214dc0844babb83a6f"
      ],
      "author": {
        "name": "Andi Kleen",
        "email": "ak@linux.intel.com",
        "time": "Fri Aug 24 10:03:51 2018 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:40 2018 +0200"
      },
      "message": "x86/spectre: Add missing family 6 check to microcode check\n\ncommit 1ab534e85c93945f7862378d8c8adcf408205b19 upstream.\n\nThe check for Spectre microcodes does not check for family 6, only the\nmodel numbers.\n\nAdd a family 6 check to avoid ambiguity with other families.\n\nFixes: a5b296636453 (\"x86/cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes\")\nSigned-off-by: Andi Kleen \u003cak@linux.intel.com\u003e\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: x86@kernel.org\nCc: linux-kernel@vger.kernel.org\nCc: stable@vger.kernel.org\nLink: https://lkml.kernel.org/r/20180824170351.34874-2-andi@firstfloor.org\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "ed9c4055689cab0908fed0214dc0844babb83a6f",
      "tree": "e340625f9a3b29dcb2ede8c0aba726188e448888",
      "parents": [
        "738cfe4d2de29c5f1da59a057153bf016db89243"
      ],
      "author": {
        "name": "Nick Desaulniers",
        "email": "ndesaulniers@google.com",
        "time": "Mon Aug 27 14:40:09 2018 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:40 2018 +0200"
      },
      "message": "x86/irqflags: Mark native_restore_fl extern inline\n\ncommit 1f59a4581b5ecfe9b4f049a7a2cf904d8352842d upstream.\n\nThis should have been marked extern inline in order to pick up the out\nof line definition in arch/x86/kernel/irqflags.S.\n\nFixes: 208cbb325589 (\"x86/irqflags: Provide a declaration for native_save_fl\")\nReported-by: Ben Hutchings \u003cben.hutchings@codethink.co.uk\u003e\nSigned-off-by: Nick Desaulniers \u003cndesaulniers@google.com\u003e\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nReviewed-by: Juergen Gross \u003cjgross@suse.com\u003e\nCc: \"H. Peter Anvin\" \u003chpa@zytor.com\u003e\nCc: Boris Ostrovsky \u003cboris.ostrovsky@oracle.com\u003e\nCc: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nCc: stable@vger.kernel.org\nLink: https://lkml.kernel.org/r/20180827214011.55428-1-ndesaulniers@google.com\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "738cfe4d2de29c5f1da59a057153bf016db89243",
      "tree": "450e12dc3ca4929fb68ca2c9d319615b01ff99ad",
      "parents": [
        "3e053c356194988b1e190c5db71f3fc97bb24e9f"
      ],
      "author": {
        "name": "Dan Carpenter",
        "email": "dan.carpenter@oracle.com",
        "time": "Fri Jul 13 17:55:15 2018 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:39 2018 +0200"
      },
      "message": "pinctrl: freescale: off by one in imx1_pinconf_group_dbg_show()\n\ncommit 19da44cd33a3a6ff7c97fff0189999ff15b241e4 upstream.\n\nThe info-\u003egroups[] array is allocated in imx1_pinctrl_parse_dt().  It\nhas info-\u003engroups elements.  Thus the \u003e here should be \u003e\u003d to prevent\nreading one element beyond the end of the array.\n\nCc: stable@vger.kernel.org\nFixes: 30612cd90005 (\"pinctrl: imx1 core driver\")\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nReviewed-by: Uwe Kleine-König \u003cu.kleine-könig@pengutronix.de\u003e\nAcked-by: Dong Aisheng \u003cAisheng.dong@nxp.com\u003e\nSigned-off-by: Linus Walleij \u003clinus.walleij@linaro.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "3e053c356194988b1e190c5db71f3fc97bb24e9f",
      "tree": "901df9a60994bfd46f8c6e23ec473bb66bd94fe0",
      "parents": [
        "b81b8594d6a2ed81025df895139bae5bd7231295"
      ],
      "author": {
        "name": "Gustavo A. R. Silva",
        "email": "gustavo@embeddedor.com",
        "time": "Thu Jul 26 15:49:10 2018 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:39 2018 +0200"
      },
      "message": "ASoC: sirf: Fix potential NULL pointer dereference\n\ncommit ae1c696a480c67c45fb23b35162183f72c6be0e1 upstream.\n\nThere is a potential execution path in which function\nplatform_get_resource() returns NULL. If this happens,\nwe will end up having a NULL pointer dereference.\n\nFix this by replacing devm_ioremap with devm_ioremap_resource,\nwhich has the NULL check and the memory region request.\n\nThis code was detected with the help of Coccinelle.\n\nCc: stable@vger.kernel.org\nFixes: 2bd8d1d5cf89 (\"ASoC: sirf: Add audio usp interface driver\")\nSigned-off-by: Gustavo A. R. Silva \u003cgustavo@embeddedor.com\u003e\nSigned-off-by: Mark Brown \u003cbroonie@kernel.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "b81b8594d6a2ed81025df895139bae5bd7231295",
      "tree": "c325deaf39690b76199b5da6c1875c93b09712f5",
      "parents": [
        "7030b7046e187ce85e59cc61e10d6c18ecce7104"
      ],
      "author": {
        "name": "Jerome Brunet",
        "email": "jbrunet@baylibre.com",
        "time": "Wed Jun 27 17:36:38 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:39 2018 +0200"
      },
      "message": "ASoC: dpcm: don\u0027t merge format from invalid codec dai\n\ncommit 4febced15ac8ddb9cf3e603edb111842e4863d9a upstream.\n\nWhen merging codec formats, dpcm_runtime_base_format() should skip\nthe codecs which are not supporting the current stream direction.\n\nAt the moment, if a BE link has more than one codec, and only one\nof these codecs has no capture DAI, it becomes impossible to start\na capture stream because the merged format would be 0.\n\nSkipping invalid codec DAI solves the problem.\n\nFixes: b073ed4e2126 (\"ASoC: soc-pcm: DPCM cares BE format\")\nSigned-off-by: Jerome Brunet \u003cjbrunet@baylibre.com\u003e\nSigned-off-by: Mark Brown \u003cbroonie@kernel.org\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7030b7046e187ce85e59cc61e10d6c18ecce7104",
      "tree": "14ffb7c6baa3573265ef06d7d2b38239f3578be9",
      "parents": [
        "377d23bc9d8467cebe2b34902d9726c2683bb355"
      ],
      "author": {
        "name": "Mikulas Patocka",
        "email": "mpatocka@redhat.com",
        "time": "Sun Jun 03 16:40:57 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:39 2018 +0200"
      },
      "message": "udl-kms: fix crash due to uninitialized memory\n\ncommit 09a00abe3a9941c2715ca83eb88172cd2f54d8fd upstream.\n\nWe must use kzalloc when allocating the fb_deferred_io structure.\nOtherwise, the field first_io is undefined and it causes a crash.\n\nSigned-off-by: Mikulas Patocka \u003cmpatocka@redhat.com\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "377d23bc9d8467cebe2b34902d9726c2683bb355",
      "tree": "7d95f94a66704c44404023e41820d3aa0188431f",
      "parents": [
        "f56d71483ea87fb6a4cdfb642585d66b90cc8742"
      ],
      "author": {
        "name": "Mikulas Patocka",
        "email": "mpatocka@redhat.com",
        "time": "Sun Jun 03 16:40:56 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:39 2018 +0200"
      },
      "message": "udl-kms: handle allocation failure\n\ncommit 542bb9788a1f485eb1a2229178f665d8ea166156 upstream.\n\nAllocations larger than PAGE_ALLOC_COSTLY_ORDER are unreliable and they\nmay fail anytime. This patch fixes the udl kms driver so that when a large\nalloactions fails, it tries to do multiple smaller allocations.\n\nSigned-off-by: Mikulas Patocka \u003cmpatocka@redhat.com\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "f56d71483ea87fb6a4cdfb642585d66b90cc8742",
      "tree": "3db0ffe7fd1d01fde2638b06f778d98d7319579e",
      "parents": [
        "84c7c9010234715c9cb9470b09f41ed12b0d2163"
      ],
      "author": {
        "name": "Mikulas Patocka",
        "email": "mpatocka@redhat.com",
        "time": "Sun Jun 03 16:40:55 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:39 2018 +0200"
      },
      "message": "udl-kms: change down_interruptible to down\n\ncommit 8456b99c16d193c4c3b7df305cf431e027f0189c upstream.\n\nIf we leave urbs around, it causes not only leak, but also memory\ncorruption. This patch fixes the function udl_free_urb_list, so that it\nalways waits for all urbs that are in progress.\n\nSigned-off-by: Mikulas Patocka \u003cmpatocka@redhat.com\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "84c7c9010234715c9cb9470b09f41ed12b0d2163",
      "tree": "c486b2ed255bb8d8be6828b93d8cc6c2e539fa79",
      "parents": [
        "c93ce9b00b9aa4bae06b758223ff62ca799522c6"
      ],
      "author": {
        "name": "Kirill Tkhai",
        "email": "ktkhai@virtuozzo.com",
        "time": "Thu Jul 19 15:49:39 2018 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:39 2018 +0200"
      },
      "message": "fuse: Add missed unlock_page() to fuse_readpages_fill()\n\ncommit 109728ccc5933151c68d1106e4065478a487a323 upstream.\n\nThe above error path returns with page unlocked, so this place seems also\nto behave the same.\n\nFixes: f8dbdf81821b (\"fuse: rework fuse_readpages()\")\nSigned-off-by: Kirill Tkhai \u003cktkhai@virtuozzo.com\u003e\nSigned-off-by: Miklos Szeredi \u003cmszeredi@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "c93ce9b00b9aa4bae06b758223ff62ca799522c6",
      "tree": "cfd7bbe84bf541f24509f060aaa43d545be44ceb",
      "parents": [
        "4d6ef17a060cb227007a7dec6aa886abc4c01297"
      ],
      "author": {
        "name": "Miklos Szeredi",
        "email": "mszeredi@redhat.com",
        "time": "Thu Jul 26 16:13:11 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:39 2018 +0200"
      },
      "message": "fuse: Fix oops at process_init_reply()\n\ncommit e8f3bd773d22f488724dffb886a1618da85c2966 upstream.\n\nsyzbot is hitting NULL pointer dereference at process_init_reply().\nThis is because deactivate_locked_super() is called before response for\ninitial request is processed.\n\nFix this by aborting and waiting for all requests (including FUSE_INIT)\nbefore resetting fc-\u003esb.\n\nOriginal patch by Tetsuo Handa \u003cpenguin-kernel@I-love.SKAURA.ne.jp\u003e.\n\nReported-by: syzbot \u003csyzbot+b62f08f4d5857755e3bc@syzkaller.appspotmail.com\u003e\nFixes: e27c9d3877a0 (\"fuse: fuse: add time_gran to INIT_OUT\")\nCc: \u003cstable@vger.kernel.org\u003e # v3.19\nSigned-off-by: Miklos Szeredi \u003cmszeredi@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "4d6ef17a060cb227007a7dec6aa886abc4c01297",
      "tree": "c0fdfa75bc0dc4d8d9d4c2d5841a64f73953745e",
      "parents": [
        "4ded21c9ea1cf8687e33ebe0577f6b4353f5d8c6"
      ],
      "author": {
        "name": "Miklos Szeredi",
        "email": "mszeredi@redhat.com",
        "time": "Thu Jul 26 16:13:11 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:39 2018 +0200"
      },
      "message": "fuse: umount should wait for all requests\n\ncommit b8f95e5d13f5f0191dcb4b9113113d241636e7cb upstream.\n\nfuse_abort_conn() does not guarantee that all async requests have actually\nfinished aborting (i.e. their -\u003eend() function is called).  This could\nactually result in still used inodes after umount.\n\nAdd a helper to wait until all requests are fully done.  This is done by\nlooking at the \"num_waiting\" counter.  When this counter drops to zero, we\ncan be sure that no more requests are outstanding.\n\nFixes: 0d8e84b0432b (\"fuse: simplify request abort\")\nCc: \u003cstable@vger.kernel.org\u003e # v4.2\nSigned-off-by: Miklos Szeredi \u003cmszeredi@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "4ded21c9ea1cf8687e33ebe0577f6b4353f5d8c6",
      "tree": "4a713969dc6668a8362007891111439276c0b6b8",
      "parents": [
        "d14dbb5c6c4c068a2117fdd3ae73ade8d490f483"
      ],
      "author": {
        "name": "Miklos Szeredi",
        "email": "mszeredi@redhat.com",
        "time": "Thu Jul 26 16:13:11 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:39 2018 +0200"
      },
      "message": "fuse: fix unlocked access to processing queue\n\ncommit 45ff350bbd9d0f0977ff270a0d427c71520c0c37 upstream.\n\nfuse_dev_release() assumes that it\u0027s the only one referencing the\nfpq-\u003eprocessing list, but that\u0027s not true, since fuse_abort_conn() can be\ndoing the same without any serialization between the two.\n\nFixes: c3696046beb3 (\"fuse: separate pqueue for clones\")\nCc: \u003cstable@vger.kernel.org\u003e # v4.2\nSigned-off-by: Miklos Szeredi \u003cmszeredi@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "d14dbb5c6c4c068a2117fdd3ae73ade8d490f483",
      "tree": "a07437aecbdef4e4143aab218dd6a998e94f4fb3",
      "parents": [
        "a8eaf0fc14c07029a74c7cf97e60fb07d3628226"
      ],
      "author": {
        "name": "Miklos Szeredi",
        "email": "mszeredi@redhat.com",
        "time": "Thu Jul 26 16:13:11 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:39 2018 +0200"
      },
      "message": "fuse: fix double request_end()\n\ncommit 87114373ea507895a62afb10d2910bd9adac35a8 upstream.\n\nRefcounting of request is broken when fuse_abort_conn() is called and\nrequest is on the fpq-\u003eio list:\n\n - ref is taken too late\n - then it is not dropped\n\nFixes: 0d8e84b0432b (\"fuse: simplify request abort\")\nCc: \u003cstable@vger.kernel.org\u003e # v4.2\nSigned-off-by: Miklos Szeredi \u003cmszeredi@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "a8eaf0fc14c07029a74c7cf97e60fb07d3628226",
      "tree": "b79e933103b2c4ea7c3c389b1b94ba4d8726496d",
      "parents": [
        "dde9849882e1f53b8d96284b4736f95a49ea3eff"
      ],
      "author": {
        "name": "Andrey Ryabinin",
        "email": "aryabinin@virtuozzo.com",
        "time": "Tue Jul 17 19:00:33 2018 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:38 2018 +0200"
      },
      "message": "fuse: Don\u0027t access pipe-\u003ebuffers without pipe_lock()\n\ncommit a2477b0e67c52f4364a47c3ad70902bc2a61bd4c upstream.\n\nfuse_dev_splice_write() reads pipe-\u003ebuffers to determine the size of\n\u0027bufs\u0027 array before taking the pipe_lock(). This is not safe as\nanother thread might change the \u0027pipe-\u003ebuffers\u0027 between the allocation\nand taking the pipe_lock(). So we end up with too small \u0027bufs\u0027 array.\n\nMove the bufs allocations inside pipe_lock()/pipe_unlock() to fix this.\n\nFixes: dd3bb14f44a6 (\"fuse: support splice() writing to fuse device\")\nSigned-off-by: Andrey Ryabinin \u003caryabinin@virtuozzo.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e # v2.6.35\nSigned-off-by: Miklos Szeredi \u003cmszeredi@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "dde9849882e1f53b8d96284b4736f95a49ea3eff",
      "tree": "4d5f701bfc3be400d6be084253e3814b2c79878d",
      "parents": [
        "72f6531162bd2f1b57e8114c8358fca507090f41"
      ],
      "author": {
        "name": "Rian Hunter",
        "email": "rian@alum.mit.edu",
        "time": "Sun Aug 19 16:08:53 2018 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:38 2018 +0200"
      },
      "message": "x86/process: Re-export start_thread()\n\ncommit dc76803e57cc86589c4efcb5362918f9b0c0436f upstream.\n\nThe consolidation of the start_thread() functions removed the export\nunintentionally. This breaks binfmt handlers built as a module.\n\nAdd it back.\n\nFixes: e634d8fc792c (\"x86-64: merge the standard and compat start_thread() functions\")\nSigned-off-by: Rian Hunter \u003crian@alum.mit.edu\u003e\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: \"H. Peter Anvin\" \u003chpa@zytor.com\u003e\nCc: Andy Lutomirski \u003cluto@kernel.org\u003e\nCc: Borislav Petkov \u003cbpetkov@suse.de\u003e\nCc: Vitaly Kuznetsov \u003cvkuznets@redhat.com\u003e\nCc: Joerg Roedel \u003cjroedel@suse.de\u003e\nCc: Dmitry Safonov \u003cdima@arista.com\u003e\nCc: Josh Poimboeuf \u003cjpoimboe@redhat.com\u003e\nCc: stable@vger.kernel.org\nLink: https://lkml.kernel.org/r/20180819230854.7275-1-rian@alum.mit.edu\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "72f6531162bd2f1b57e8114c8358fca507090f41",
      "tree": "a01adcad9d1db596c2dcf5bd94050c1744e1b900",
      "parents": [
        "7b69cd6fa088e473869512672969e6c490cac1b6"
      ],
      "author": {
        "name": "Vlastimil Babka",
        "email": "vbabka@suse.cz",
        "time": "Thu Aug 23 16:21:29 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:38 2018 +0200"
      },
      "message": "x86/speculation/l1tf: Suggest what to do on systems with too much RAM\n\ncommit 6a012288d6906fee1dbc244050ade1dafe4a9c8d upstream.\n\nTwo users have reported [1] that they have an \"extremely unlikely\" system\nwith more than MAX_PA/2 memory and L1TF mitigation is not effective.\n\nMake the warning more helpful by suggesting the proper mem\u003dX kernel boot\nparameter to make it effective and a link to the L1TF document to help\ndecide if the mitigation is worth the unusable RAM.\n\n[1] https://bugzilla.suse.com/show_bug.cgi?id\u003d1105536\n\nSuggested-by: Michal Hocko \u003cmhocko@suse.com\u003e\nSigned-off-by: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nAcked-by: Michal Hocko \u003cmhocko@suse.com\u003e\nCc: \"H . Peter Anvin\" \u003chpa@zytor.com\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Andi Kleen \u003cak@linux.intel.com\u003e\nCc: Dave Hansen \u003cdave.hansen@intel.com\u003e\nCc: stable@vger.kernel.org\nLink: https://lkml.kernel.org/r/966571f0-9d7f-43dc-92c6-a10eec7a1254@suse.cz\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7b69cd6fa088e473869512672969e6c490cac1b6",
      "tree": "2244805ad7ed356820ed874399e1a2ef19245fa3",
      "parents": [
        "6a56bd7f2ea31d4c86849b8f67d4e2dc1cb5b788"
      ],
      "author": {
        "name": "Vlastimil Babka",
        "email": "vbabka@suse.cz",
        "time": "Thu Aug 23 15:44:18 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:38 2018 +0200"
      },
      "message": "x86/speculation/l1tf: Fix off-by-one error when warning that system has too much RAM\n\ncommit b0a182f875689647b014bc01d36b340217792852 upstream.\n\nTwo users have reported [1] that they have an \"extremely unlikely\" system\nwith more than MAX_PA/2 memory and L1TF mitigation is not effective. In\nfact it\u0027s a CPU with 36bits phys limit (64GB) and 32GB memory, but due to\nholes in the e820 map, the main region is almost 500MB over the 32GB limit:\n\n[    0.000000] BIOS-e820: [mem 0x0000000100000000-0x000000081effffff] usable\n\nSuggestions to use \u0027mem\u003d32G\u0027 to enable the L1TF mitigation while losing the\n500MB revealed, that there\u0027s an off-by-one error in the check in\nl1tf_select_mitigation().\n\nl1tf_pfn_limit() returns the last usable pfn (inclusive) and the range\ncheck in the mitigation path does not take this into account.\n\nInstead of amending the range check, make l1tf_pfn_limit() return the first\nPFN which is over the limit which is less error prone. Adjust the other\nusers accordingly.\n\n[1] https://bugzilla.suse.com/show_bug.cgi?id\u003d1105536\n\nFixes: 17dbca119312 (\"x86/speculation/l1tf: Add sysfs reporting for l1tf\")\nReported-by: George Anchev \u003cstudio@anchev.net\u003e\nReported-by: Christopher Snowhill \u003ckode54@gmail.com\u003e\nSigned-off-by: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: \"H . Peter Anvin\" \u003chpa@zytor.com\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Andi Kleen \u003cak@linux.intel.com\u003e\nCc: Dave Hansen \u003cdave.hansen@intel.com\u003e\nCc: Michal Hocko \u003cmhocko@kernel.org\u003e\nCc: stable@vger.kernel.org\nLink: https://lkml.kernel.org/r/20180823134418.17008-1-vbabka@suse.cz\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "6a56bd7f2ea31d4c86849b8f67d4e2dc1cb5b788",
      "tree": "a4a5d74b8192ac4eff8fce77e3a79de597f19ede",
      "parents": [
        "d839710da969f2f686802bcbbfb8164261b85833"
      ],
      "author": {
        "name": "Vlastimil Babka",
        "email": "vbabka@suse.cz",
        "time": "Mon Aug 20 11:58:35 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:38 2018 +0200"
      },
      "message": "x86/speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit\n\ncommit 9df9516940a61d29aedf4d91b483ca6597e7d480 upstream.\n\nOn 32bit PAE kernels on 64bit hardware with enough physical bits,\nl1tf_pfn_limit() will overflow unsigned long. This in turn affects\nmax_swapfile_size() and can lead to swapon returning -EINVAL. This has been\nobserved in a 32bit guest with 42 bits physical address size, where\nmax_swapfile_size() overflows exactly to 1 \u003c\u003c 32, thus zero, and produces\nthe following warning to dmesg:\n\n[    6.396845] Truncating oversized swap area, only using 0k out of 2047996k\n\nFix this by using unsigned long long instead.\n\nFixes: 17dbca119312 (\"x86/speculation/l1tf: Add sysfs reporting for l1tf\")\nFixes: 377eeaa8e11f (\"x86/speculation/l1tf: Limit swap file size to MAX_PA/2\")\nReported-by: Dominique Leuenberger \u003cdimstar@suse.de\u003e\nReported-by: Adrian Schroeter \u003cadrian@suse.de\u003e\nSigned-off-by: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nAcked-by: Andi Kleen \u003cak@linux.intel.com\u003e\nAcked-by: Michal Hocko \u003cmhocko@suse.com\u003e\nCc: \"H . Peter Anvin\" \u003chpa@zytor.com\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Dave Hansen \u003cdave.hansen@intel.com\u003e\nCc: Michal Hocko \u003cmhocko@kernel.org\u003e\nCc: stable@vger.kernel.org\nLink: https://lkml.kernel.org/r/20180820095835.5298-1-vbabka@suse.cz\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "d839710da969f2f686802bcbbfb8164261b85833",
      "tree": "3718f747b2864bb6dc1c1d0961f25d82ae79064e",
      "parents": [
        "24fa4a211e2655ba71f0da7e351475bb8f752e93"
      ],
      "author": {
        "name": "Punit Agrawal",
        "email": "punit.agrawal@arm.com",
        "time": "Mon Aug 13 11:43:50 2018 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:38 2018 +0200"
      },
      "message": "KVM: arm/arm64: Skip updating PMD entry if no change\n\ncommit 86658b819cd0a9aa584cd84453ed268a6f013770 upstream.\n\nContention on updating a PMD entry by a large number of vcpus can lead\nto duplicate work when handling stage 2 page faults. As the page table\nupdate follows the break-before-make requirement of the architecture,\nit can lead to repeated refaults due to clearing the entry and\nflushing the tlbs.\n\nThis problem is more likely when -\n\n* there are large number of vcpus\n* the mapping is large block mapping\n\nsuch as when using PMD hugepages (512MB) with 64k pages.\n\nFix this by skipping the page table update if there is no change in\nthe entry being updated.\n\nCc: stable@vger.kernel.org\nFixes: ad361f093c1e (\"KVM: ARM: Support hugetlbfs backed huge pages\")\nReviewed-by: Suzuki Poulose \u003csuzuki.poulose@arm.com\u003e\nAcked-by: Christoffer Dall \u003cchristoffer.dall@arm.com\u003e\nSigned-off-by: Punit Agrawal \u003cpunit.agrawal@arm.com\u003e\nSigned-off-by: Marc Zyngier \u003cmarc.zyngier@arm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n\n"
    },
    {
      "commit": "24fa4a211e2655ba71f0da7e351475bb8f752e93",
      "tree": "6d1bfc0c52b369253ba32b7774c698d6341b43a0",
      "parents": [
        "355cccb6593f87329940d411894bd9de30286b97"
      ],
      "author": {
        "name": "Punit Agrawal",
        "email": "punit.agrawal@arm.com",
        "time": "Mon Aug 13 11:43:51 2018 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:38 2018 +0200"
      },
      "message": "KVM: arm/arm64: Skip updating PTE entry if no change\n\ncommit 976d34e2dab10ece5ea8fe7090b7692913f89084 upstream.\n\nWhen there is contention on faulting in a particular page table entry\nat stage 2, the break-before-make requirement of the architecture can\nlead to additional refaulting due to TLB invalidation.\n\nAvoid this by skipping a page table update if the new value of the PTE\nmatches the previous value.\n\nCc: stable@vger.kernel.org\nFixes: d5d8184d35c9 (\"KVM: ARM: Memory virtualization setup\")\nReviewed-by: Suzuki Poulose \u003csuzuki.poulose@arm.com\u003e\nAcked-by: Christoffer Dall \u003cchristoffer.dall@arm.com\u003e\nSigned-off-by: Punit Agrawal \u003cpunit.agrawal@arm.com\u003e\nSigned-off-by: Marc Zyngier \u003cmarc.zyngier@arm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "355cccb6593f87329940d411894bd9de30286b97",
      "tree": "8d96ea09e247b1f56e673106618f9d06f435e345",
      "parents": [
        "d684b70576fe7afdfb5d943f30aaaeac1f84a5a2"
      ],
      "author": {
        "name": "Greg Hackmann",
        "email": "ghackmann@android.com",
        "time": "Wed Aug 15 12:51:21 2018 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:38 2018 +0200"
      },
      "message": "arm64: mm: check for upper PAGE_SHIFT bits in pfn_valid()\n\ncommit 5ad356eabc47d26a92140a0c4b20eba471c10de3 upstream.\n\nARM64\u0027s pfn_valid() shifts away the upper PAGE_SHIFT bits of the input\nbefore seeing if the PFN is valid.  This leads to false positives when\nsome of the upper bits are set, but the lower bits match a valid PFN.\n\nFor example, the following userspace code looks up a bogus entry in\n/proc/kpageflags:\n\n    int pagemap \u003d open(\"/proc/self/pagemap\", O_RDONLY);\n    int pageflags \u003d open(\"/proc/kpageflags\", O_RDONLY);\n    uint64_t pfn, val;\n\n    lseek64(pagemap, [...], SEEK_SET);\n    read(pagemap, \u0026pfn, sizeof(pfn));\n    if (pfn \u0026 (1UL \u003c\u003c 63)) {        /* valid PFN */\n        pfn \u0026\u003d ((1UL \u003c\u003c 55) - 1);   /* clear flag bits */\n        pfn |\u003d (1UL \u003c\u003c 55);\n        lseek64(pageflags, pfn * sizeof(uint64_t), SEEK_SET);\n        read(pageflags, \u0026val, sizeof(val));\n    }\n\nOn ARM64 this causes the userspace process to crash with SIGSEGV rather\nthan reading (1 \u003c\u003c KPF_NOPAGE).  kpageflags_read() treats the offset as\nvalid, and stable_page_flags() will try to access an address between the\nuser and kernel address ranges.\n\nFixes: c1cc1552616d (\"arm64: MMU initialisation\")\nCc: stable@vger.kernel.org\nSigned-off-by: Greg Hackmann \u003cghackmann@google.com\u003e\nSigned-off-by: Will Deacon \u003cwill.deacon@arm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "d684b70576fe7afdfb5d943f30aaaeac1f84a5a2",
      "tree": "29e25a53c436cda70608c26fcad2d02302c0b144",
      "parents": [
        "bca4f76edcc74a0290fd007bf937217a8c43ee00"
      ],
      "author": {
        "name": "Eric Sandeen",
        "email": "sandeen@redhat.com",
        "time": "Sun Jul 29 17:13:42 2018 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:38 2018 +0200"
      },
      "message": "ext4: reset error code in ext4_find_entry in fallback\n\ncommit f39b3f45dbcb0343822cce31ea7636ad66e60bc2 upstream.\n\nWhen ext4_find_entry() falls back to \"searching the old fashioned\nway\" due to a corrupt dx dir, it needs to reset the error code\nto NULL so that the nonstandard ERR_BAD_DX_DIR code isn\u0027t returned\nto userspace.\n\nhttps://bugzilla.kernel.org/show_bug.cgi?id\u003d199947\n\nReported-by: Anatoly Trosinenko \u003canatoly.trosinenko@yandex.com\u003e\nReviewed-by: Andreas Dilger \u003cadilger@dilger.ca\u003e\nSigned-off-by: Eric Sandeen \u003csandeen@redhat.com\u003e\nSigned-off-by: Theodore Ts\u0027o \u003ctytso@mit.edu\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "bca4f76edcc74a0290fd007bf937217a8c43ee00",
      "tree": "2c054bd1d039ad875aea855388e056a318212c87",
      "parents": [
        "ac92782e4ef6fc9f4694bdc9e1b5d5bfb72027ff"
      ],
      "author": {
        "name": "Arnd Bergmann",
        "email": "arnd@arndb.de",
        "time": "Sun Jul 29 15:48:00 2018 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:38 2018 +0200"
      },
      "message": "ext4: sysfs: print ext4_super_block fields as little-endian\n\ncommit a4d2aadca184ece182418950d45ba4ffc7b652d2 upstream.\n\nWhile working on extended rand for last_error/first_error timestamps,\nI noticed that the endianess is wrong; we access the little-endian\nfields in struct ext4_super_block as native-endian when we print them.\n\nThis adds a special case in ext4_attr_show() and ext4_attr_store()\nto byteswap the superblock fields if needed.\n\nIn older kernels, this code was part of super.c, it got moved to\nsysfs.c in linux-4.4.\n\nCc: stable@vger.kernel.org\nFixes: 52c198c6820f (\"ext4: add sysfs entry showing whether the fs contains errors\")\nReviewed-by: Andreas Dilger \u003cadilger@dilger.ca\u003e\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\nSigned-off-by: Theodore Ts\u0027o \u003ctytso@mit.edu\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "ac92782e4ef6fc9f4694bdc9e1b5d5bfb72027ff",
      "tree": "e539f3163298c0cd6c0a83d939068387327afce2",
      "parents": [
        "f4d76c934b4dcb6f068d2c850c35ebac5faff021"
      ],
      "author": {
        "name": "Theodore Ts\u0027o",
        "email": "tytso@mit.edu",
        "time": "Wed Aug 01 12:36:52 2018 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:37 2018 +0200"
      },
      "message": "ext4: check for NUL characters in extended attribute\u0027s name\n\ncommit 7d95178c77014dbd8dce36ee40bbbc5e6c121ff5 upstream.\n\nExtended attribute names are defined to be NUL-terminated, so the name\nmust not contain a NUL character.  This is important because there are\nplaces when remove extended attribute, the code uses strlen to\ndetermine the length of the entry.  That should probably be fixed at\nsome point, but code is currently really messy, so the simplest fix\nfor now is to simply validate that the extended attributes are sane.\n\nhttps://bugzilla.kernel.org/show_bug.cgi?id\u003d200401\n\nReported-by: Wen Xu \u003cwen.xu@gatech.edu\u003e\nSigned-off-by: Theodore Ts\u0027o \u003ctytso@mit.edu\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "f4d76c934b4dcb6f068d2c850c35ebac5faff021",
      "tree": "5ee26656745c0f8de2388c0a83796b1686b8de36",
      "parents": [
        "685d7af55fcc6595aedce7bc91b1f5f25ff88301"
      ],
      "author": {
        "name": "Claudio Imbrenda",
        "email": "imbrenda@linux.vnet.ibm.com",
        "time": "Mon Jul 16 10:38:57 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:37 2018 +0200"
      },
      "message": "s390/kvm: fix deadlock when killed by oom\n\ncommit 306d6c49ac9ded11114cb53b0925da52f2c2ada1 upstream.\n\nWhen the oom killer kills a userspace process in the page fault handler\nwhile in guest context, the fault handler fails to release the mm_sem\nif the FAULT_FLAG_RETRY_NOWAIT option is set. This leads to a deadlock\nwhen tearing down the mm when the process terminates. This bug can only\nhappen when pfault is enabled, so only KVM clients are affected.\n\nThe problem arises in the rare cases in which handle_mm_fault does not\nrelease the mm_sem. This patch fixes the issue by manually releasing\nthe mm_sem when needed.\n\nFixes: 24eb3a824c4f3 (\"KVM: s390: Add FAULT_FLAG_RETRY_NOWAIT for guest fault\")\nCc: \u003cstable@vger.kernel.org\u003e # 3.15+\nSigned-off-by: Claudio Imbrenda \u003cimbrenda@linux.vnet.ibm.com\u003e\nSigned-off-by: Martin Schwidefsky \u003cschwidefsky@de.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "685d7af55fcc6595aedce7bc91b1f5f25ff88301",
      "tree": "7f6bd609f2ffb6d47b091d800db44f45e0b92d30",
      "parents": [
        "951461680e88afb347cfb1e53255cd1b50187e2e"
      ],
      "author": {
        "name": "Josef Bacik",
        "email": "josef@toxicpanda.com",
        "time": "Thu Jul 19 10:49:51 2018 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:37 2018 +0200"
      },
      "message": "btrfs: don\u0027t leak ret from do_chunk_alloc\n\ncommit 4559b0a71749c442d34f7cfb9e72c9e58db83948 upstream.\n\nIf we\u0027re trying to make a data reservation and we have to allocate a\ndata chunk we could leak ret \u003d\u003d 1, as do_chunk_alloc() will return 1 if\nit allocated a chunk.  Since the end of the function is the success path\njust return 0.\n\nCC: stable@vger.kernel.org # 4.4+\nSigned-off-by: Josef Bacik \u003cjosef@toxicpanda.com\u003e\nReviewed-by: Nikolay Borisov \u003cnborisov@suse.com\u003e\nSigned-off-by: David Sterba \u003cdsterba@suse.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "951461680e88afb347cfb1e53255cd1b50187e2e",
      "tree": "4b7492a5cd150eb5c22bf73f2495ab80847b23b6",
      "parents": [
        "ff3bb182bc12ee1f852fd7f80dd8d9ce040f2462"
      ],
      "author": {
        "name": "Steve French",
        "email": "stfrench@microsoft.com",
        "time": "Fri Jul 27 22:01:49 2018 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:37 2018 +0200"
      },
      "message": "smb3: don\u0027t request leases in symlink creation and query\n\ncommit 22783155f4bf956c346a81624ec9258930a6fe06 upstream.\n\nFixes problem pointed out by Pavel in discussions about commit\n729c0c9dd55204f0c9a823ac8a7bfa83d36c7e78\n\nSigned-off-by: Pavel Shilovsky \u003cpshilov@microsoft.com\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\nReviewed-by: Ronnie Sahlberg \u003clsahlber@redhat.com\u003e\nCC: Stable \u003cstable@vger.kernel.org\u003e # 3.18.x+\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "ff3bb182bc12ee1f852fd7f80dd8d9ce040f2462",
      "tree": "655a9d14414b1331589f2cb842b217fedc956091",
      "parents": [
        "0e28220672bd699b04cb2ac0c1a39f4307ee3402"
      ],
      "author": {
        "name": "Steve French",
        "email": "stfrench@microsoft.com",
        "time": "Thu Aug 02 20:28:18 2018 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:37 2018 +0200"
      },
      "message": "smb3: Do not send SMB3 SET_INFO if nothing changed\n\ncommit fd09b7d3b352105f08b8e02f7afecf7e816380ef upstream.\n\nAn earlier commit had a typo which prevented the\noptimization from working:\n\ncommit 18dd8e1a65dd (\"Do not send SMB3 SET_INFO request if nothing is changing\")\n\nThank you to Metze for noticing this.  Also clear a\nreserved field in the FILE_BASIC_INFO struct we send\nthat should be zero (all the other fields in that\nstruct were set or cleared explicitly already in\ncifs_set_file_info).\n\nReviewed-by: Pavel Shilovsky \u003cpshilov@microsoft.com\u003e\nCC: Stable \u003cstable@vger.kernel.org\u003e # 4.9.x+\nReported-by: Stefan Metzmacher \u003cmetze@samba.org\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "0e28220672bd699b04cb2ac0c1a39f4307ee3402",
      "tree": "de643c454f12a69016e7de26eb6c09f471be88e3",
      "parents": [
        "58d141a9ad8668b267362b1d17296c9cfa053a01"
      ],
      "author": {
        "name": "Nicholas Mc Guire",
        "email": "hofrat@osadl.org",
        "time": "Thu Aug 23 12:24:02 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:37 2018 +0200"
      },
      "message": "cifs: check kmalloc before use\n\ncommit 126c97f4d0d1b5b956e8b0740c81a2b2a2ae548c upstream.\n\nThe kmalloc was not being checked - if it fails issue a warning\nand return -ENOMEM to the caller.\n\nSigned-off-by: Nicholas Mc Guire \u003chofrat@osadl.org\u003e\nFixes: b8da344b74c8 (\"cifs: dynamic allocation of ntlmssp blob\")\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\nReviewed-by: Pavel Shilovsky \u003cpshilov@microsoft.com\u003e\ncc: Stable \u003cstable@vger.kernel.org\u003e`\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "58d141a9ad8668b267362b1d17296c9cfa053a01",
      "tree": "7d8b3cd04e052a39117a8cd52cd7da0012c30e84",
      "parents": [
        "fbee7b5b8c28ed02b6d6603eef27730c148a4481"
      ],
      "author": {
        "name": "Steve French",
        "email": "stfrench@microsoft.com",
        "time": "Thu Jun 28 18:46:40 2018 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:37 2018 +0200"
      },
      "message": "cifs: add missing debug entries for kconfig options\n\ncommit 950132afd59385caf6e2b84e5235d069fa10681d upstream.\n\n/proc/fs/cifs/DebugData displays the features (Kconfig options)\nused to build cifs.ko but it was missing some, and needed comma\nseparator.  These can be useful in debugging certain problems\nso we know which optional features were enabled in the user\u0027s build.\nAlso clarify them, by making them more closely match the\ncorresponding CONFIG_CIFS_* parm.\n\nOld format:\nFeatures: dfs fscache posix spnego xattr acl\n\nNew format:\nFeatures: DFS,FSCACHE,SMB_DIRECT,STATS,DEBUG2,ALLOW_INSECURE_LEGACY,CIFS_POSIX,UPCALL(SPNEGO),XATTR,ACL\n\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\nReviewed-by: Ronnie Sahlberg \u003clsahlber@redhat.com\u003e\nReviewed-by: Pavel Shilovsky \u003cpshilov@microsoft.com\u003e\nReviewed-by: Paulo Alcantara \u003cpalcantara@suse.de\u003e\nCC: Stable \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "fbee7b5b8c28ed02b6d6603eef27730c148a4481",
      "tree": "527a216048894e251365af98e4f82dc295ebc41a",
      "parents": [
        "8bbbd3a9a0f8ea4b22150639a05d03000b72fe12"
      ],
      "author": {
        "name": "jie@chenjie6@huwei.com",
        "email": "jie@chenjie6@huwei.com",
        "time": "Fri Aug 10 17:23:06 2018 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:36 2018 +0200"
      },
      "message": "mm/memory.c: check return value of ioremap_prot\n\n[ Upstream commit 24eee1e4c47977bdfb71d6f15f6011e7b6188d04 ]\n\nioremap_prot() can return NULL which could lead to an oops.\n\nLink: http://lkml.kernel.org/r/1533195441-58594-1-git-send-email-chenjie6@huawei.com\nSigned-off-by: chen jie \u003cchenjie6@huawei.com\u003e\nReviewed-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nCc: Li Zefan \u003clizefan@huawei.com\u003e\nCc: chenjie \u003cchenjie6@huawei.com\u003e\nCc: Yang Shi \u003cshy828301@gmail.com\u003e\nCc: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "8bbbd3a9a0f8ea4b22150639a05d03000b72fe12",
      "tree": "3db3f9c8cc076a4bf8234b9ec1d17c04d43181f9",
      "parents": [
        "621b2dd52dd92b77f61e3a15b634902ffbe54e1b"
      ],
      "author": {
        "name": "Jim Gill",
        "email": "jgill@vmware.com",
        "time": "Thu Aug 02 14:13:30 2018 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:36 2018 +0200"
      },
      "message": "scsi: vmw_pvscsi: Return DID_RESET for status SAM_STAT_COMMAND_TERMINATED\n\n[ Upstream commit e95153b64d03c2b6e8d62e51bdcc33fcad6e0856 ]\n\nCommands that are reset are returned with status\nSAM_STAT_COMMAND_TERMINATED. PVSCSI currently returns DID_OK |\nSAM_STAT_COMMAND_TERMINATED which fails the command. Instead, set hostbyte\nto DID_RESET to allow upper layers to retry.\n\nTested by copying a large file between two pvscsi disks on same adapter\nwhile performing a bus reset at 1-second intervals. Before fix, commands\nsometimes fail with DID_OK. After fix, commands observed to fail with\nDID_RESET.\n\nSigned-off-by: Jim Gill \u003cjgill@vmware.com\u003e\nSigned-off-by: Martin K. Petersen \u003cmartin.petersen@oracle.com\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "621b2dd52dd92b77f61e3a15b634902ffbe54e1b",
      "tree": "aeae9583e1d2c857d92d942200da59481d25bbe5",
      "parents": [
        "3837d650c8ca8e5974760859834c4160be671556"
      ],
      "author": {
        "name": "Johannes Thumshirn",
        "email": "jthumshirn@suse.de",
        "time": "Tue Jul 31 15:46:02 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:36 2018 +0200"
      },
      "message": "scsi: fcoe: drop frames in ELS LOGO error path\n\n[ Upstream commit 63d0e3dffda311e77b9a8c500d59084e960a824a ]\n\nDrop the frames in the ELS LOGO error path instead of just returning an\nerror.\n\nThis fixes the following kmemleak report:\nunreferenced object 0xffff880064cb1000 (size 424):\n  comm \"kworker/0:2\", pid 24, jiffies 4294904293 (age 68.504s)\n  hex dump (first 32 bytes):\n    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n  backtrace:\n    [\u003c(____ptrval____)\u003e] _fc_frame_alloc+0x2c/0x180 [libfc]\n    [\u003c(____ptrval____)\u003e] fc_lport_enter_logo+0x106/0x360 [libfc]\n    [\u003c(____ptrval____)\u003e] fc_fabric_logoff+0x8c/0xc0 [libfc]\n    [\u003c(____ptrval____)\u003e] fcoe_if_destroy+0x79/0x3b0 [fcoe]\n    [\u003c(____ptrval____)\u003e] fcoe_destroy_work+0xd2/0x170 [fcoe]\n    [\u003c(____ptrval____)\u003e] process_one_work+0x7ff/0x1420\n    [\u003c(____ptrval____)\u003e] worker_thread+0x87/0xef0\n    [\u003c(____ptrval____)\u003e] kthread+0x2db/0x390\n    [\u003c(____ptrval____)\u003e] ret_from_fork+0x35/0x40\n    [\u003c(____ptrval____)\u003e] 0xffffffffffffffff\n\nwhich can be triggered by issuing\necho eth0 \u003e /sys/bus/fcoe/ctlr_destroy\n\nSigned-off-by: Johannes Thumshirn \u003cjthumshirn@suse.de\u003e\nReviewed-by: Hannes Reinecke \u003chare@suse.com\u003e\nSigned-off-by: Martin K. Petersen \u003cmartin.petersen@oracle.com\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "3837d650c8ca8e5974760859834c4160be671556",
      "tree": "bda82bb15b38c828aaf22fbfe5ad74d4a51d802b",
      "parents": [
        "21d36c9737183a995faca026f887b0a8dcd04a44"
      ],
      "author": {
        "name": "Colin Ian King",
        "email": "colin.king@canonical.com",
        "time": "Wed Aug 01 18:22:41 2018 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:36 2018 +0200"
      },
      "message": "drivers: net: lmc: fix case value for target abort error\n\n[ Upstream commit afb41bb039656f0cecb54eeb8b2e2088201295f5 ]\n\nCurrent value for a target abort error is 0x010, however, this value\nshould in fact be 0x002.  As it stands, the range of error is 0..7 so\nit is currently never being detected.  This bug has been in the driver\nsince the early 2.6.12 days (or before).\n\nDetected by CoverityScan, CID#744290 (\"Logically dead code\")\n\nSigned-off-by: Colin Ian King \u003ccolin.king@canonical.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "21d36c9737183a995faca026f887b0a8dcd04a44",
      "tree": "cce2be215e39b059809f9e8f6a66ea0d8e92d5a8",
      "parents": [
        "ef33fed0535aad84dffdfb978ae732ec4469c485"
      ],
      "author": {
        "name": "Randy Dunlap",
        "email": "rdunlap@infradead.org",
        "time": "Thu Jul 26 20:16:35 2018 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:36 2018 +0200"
      },
      "message": "arc: fix type warnings in arc/mm/cache.c\n\n[ Upstream commit ec837d620c750c0d4996a907c8c4f7febe1bbeee ]\n\nFix type warnings in arch/arc/mm/cache.c.\n\n../arch/arc/mm/cache.c: In function \u0027flush_anon_page\u0027:\n../arch/arc/mm/cache.c:1062:55: warning: passing argument 2 of \u0027__flush_dcache_page\u0027 makes integer from pointer without a cast [-Wint-conversion]\n  __flush_dcache_page((phys_addr_t)page_address(page), page_address(page));\n                                                       ^~~~~~~~~~~~~~~~~~\n../arch/arc/mm/cache.c:1013:59: note: expected \u0027long unsigned int\u0027 but argument is of type \u0027void *\u0027\n void __flush_dcache_page(phys_addr_t paddr, unsigned long vaddr)\n                                             ~~~~~~~~~~~~~~^~~~~\n\nSigned-off-by: Randy Dunlap \u003crdunlap@infradead.org\u003e\nCc: Vineet Gupta \u003cvgupta@synopsys.com\u003e\nCc: linux-snps-arc@lists.infradead.org\nCc: Elad Kanfi \u003celadkan@mellanox.com\u003e\nCc: Leon Romanovsky \u003cleonro@mellanox.com\u003e\nCc: Ofer Levi \u003coferle@mellanox.com\u003e\nSigned-off-by: Vineet Gupta \u003cvgupta@synopsys.com\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "ef33fed0535aad84dffdfb978ae732ec4469c485",
      "tree": "8ffc06d250f81059c456e7e18e73e69b55c5c87d",
      "parents": [
        "cae83b4d45d522f3b2cb2c091ff46fdb79bd68bd"
      ],
      "author": {
        "name": "Randy Dunlap",
        "email": "rdunlap@infradead.org",
        "time": "Thu Jul 26 20:16:35 2018 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:36 2018 +0200"
      },
      "message": "arc: fix build errors in arc/include/asm/delay.h\n\n[ Upstream commit 2423665ec53f2a29191b35382075e9834288a975 ]\n\nFix build errors in arch/arc/\u0027s delay.h:\n- add \"extern unsigned long loops_per_jiffy;\"\n- add \u003casm-generic/types.h\u003e for \"u64\"\n\nIn file included from ../drivers/infiniband/hw/cxgb3/cxio_hal.c:32:\n../arch/arc/include/asm/delay.h: In function \u0027__udelay\u0027:\n../arch/arc/include/asm/delay.h:61:12: error: \u0027u64\u0027 undeclared (first use in this function)\n  loops \u003d ((u64) usecs * 4295 * HZ * loops_per_jiffy) \u003e\u003e 32;\n            ^~~\n\nIn file included from ../drivers/infiniband/hw/cxgb3/cxio_hal.c:32:\n../arch/arc/include/asm/delay.h: In function \u0027__udelay\u0027:\n../arch/arc/include/asm/delay.h:63:37: error: \u0027loops_per_jiffy\u0027 undeclared (first use in this function)\n  loops \u003d ((u64) usecs * 4295 * HZ * loops_per_jiffy) \u003e\u003e 32;\n                                     ^~~~~~~~~~~~~~~\n\nSigned-off-by: Randy Dunlap \u003crdunlap@infradead.org\u003e\nCc: Vineet Gupta \u003cvgupta@synopsys.com\u003e\nCc: linux-snps-arc@lists.infradead.org\nCc: Elad Kanfi \u003celadkan@mellanox.com\u003e\nCc: Leon Romanovsky \u003cleonro@mellanox.com\u003e\nCc: Ofer Levi \u003coferle@mellanox.com\u003e\nSigned-off-by: Vineet Gupta \u003cvgupta@synopsys.com\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "cae83b4d45d522f3b2cb2c091ff46fdb79bd68bd",
      "tree": "1e7812b4d57228a161a20db78ba9b7fc0bba33d1",
      "parents": [
        "7d1a2eef5e468fdeca2c443445ff792c2e58bffa"
      ],
      "author": {
        "name": "Govindarajulu Varadarajan",
        "email": "gvaradar@cisco.com",
        "time": "Fri Jul 27 11:19:29 2018 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:36 2018 +0200"
      },
      "message": "enic: handle mtu change for vf properly\n\n[ Upstream commit ab123fe071c9aa9680ecd62eb080eb26cff4892c ]\n\nWhen driver gets notification for mtu change, driver does not handle it for\nall RQs. It handles only RQ[0].\n\nFix is to use enic_change_mtu() interface to change mtu for vf.\n\nSigned-off-by: Govindarajulu Varadarajan \u003cgvaradar@cisco.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "7d1a2eef5e468fdeca2c443445ff792c2e58bffa",
      "tree": "c7fff30e0dae4eff078bb07fc3b6c88b62e1c062",
      "parents": [
        "27629a00ad18a05669e19ec5f48b0c6d33dba61a"
      ],
      "author": {
        "name": "Rafał Miłecki",
        "email": "rafal@milecki.pl",
        "time": "Fri Jul 27 13:13:39 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:36 2018 +0200"
      },
      "message": "Revert \"MIPS: BCM47XX: Enable 74K Core ExternalSync for PCIe erratum\"\n\n[ Upstream commit d5ea019f8a381f88545bb26993b62ec24a2796b7 ]\n\nThis reverts commit 2a027b47dba6 (\"MIPS: BCM47XX: Enable 74K Core\nExternalSync for PCIe erratum\").\n\nEnabling ExternalSync caused a regression for BCM4718A1 (used e.g. in\nNetgear E3000 and ASUS RT-N16): it simply hangs during PCIe\ninitialization. It\u0027s likely that BCM4717A1 is also affected.\n\nI didn\u0027t notice that earlier as the only BCM47XX devices with PCIe I\nown are:\n1) BCM4706 with 2 x 14e4:4331\n2) BCM4706 with 14e4:4360 and 14e4:4331\nit appears that BCM4706 is unaffected.\n\nWhile BCM5300X-ES300-RDS.pdf seems to document that erratum and its\nworkarounds (according to quotes provided by Tokunori) it seems not even\nBroadcom follows them.\n\nAccording to the provided info Broadcom should define CONF7_ES in their\nSDK\u0027s mipsinc.h and implement workaround in the si_mips_init(). Checking\nboth didn\u0027t reveal such code. It *could* mean Broadcom also had some\nproblems with the given workaround.\n\nSigned-off-by: Rafał Miłecki \u003crafal@milecki.pl\u003e\nSigned-off-by: Paul Burton \u003cpaul.burton@mips.com\u003e\nReported-by: Michael Marley \u003cmichael@michaelmarley.com\u003e\nPatchwork: https://patchwork.linux-mips.org/patch/20032/\nURL: https://bugs.openwrt.org/index.php?do\u003ddetails\u0026task_id\u003d1688\nCc: Tokunori Ikegami \u003cikegami@allied-telesis.co.jp\u003e\nCc: Hauke Mehrtens \u003chauke@hauke-m.de\u003e\nCc: Chris Packham \u003cchris.packham@alliedtelesis.co.nz\u003e\nCc: James Hogan \u003cjhogan@kernel.org\u003e\nCc: Ralf Baechle \u003cralf@linux-mips.org\u003e\nCc: linux-mips@linux-mips.org\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "27629a00ad18a05669e19ec5f48b0c6d33dba61a",
      "tree": "fe8ee8ee3d2c71d6f4e30e1f5b54e02e04611d2f",
      "parents": [
        "0d35e0188a97a89cf92d16250e505d04707d56b3"
      ],
      "author": {
        "name": "Calvin Walton",
        "email": "calvin.walton@kepstin.ca",
        "time": "Fri Jul 27 07:50:53 2018 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:36 2018 +0200"
      },
      "message": "tools/power turbostat: Read extended processor family from CPUID\n\n[ Upstream commit 5aa3d1a20a233d4a5f1ec3d62da3f19d9afea682 ]\n\nThis fixes the reported family on modern AMD processors (e.g. Ryzen,\nwhich is family 0x17). Previously these processors all showed up as\nfamily 0xf.\n\nSee the document\nhttps://support.amd.com/TechDocs/56255_OSRR.pdf\nsection CPUID_Fn00000001_EAX for how to calculate the family\nfrom the BaseFamily and ExtFamily values.\n\nThis matches the code in arch/x86/lib/cpu.c\n\nSigned-off-by: Calvin Walton \u003ccalvin.walton@kepstin.ca\u003e\nSigned-off-by: Len Brown \u003clen.brown@intel.com\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "0d35e0188a97a89cf92d16250e505d04707d56b3",
      "tree": "f75c506ca3642285c066037d1bed341cf9071b70",
      "parents": [
        "b142f71f17dbd1c203d51b975b98945e7dc310fd"
      ],
      "author": {
        "name": "Li Wang",
        "email": "liwang@redhat.com",
        "time": "Thu Jul 26 16:37:42 2018 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:36 2018 +0200"
      },
      "message": "zswap: re-check zswap_is_full() after do zswap_shrink()\n\n[ Upstream commit 16e536ef47f567289a5699abee9ff7bb304bc12d ]\n\n/sys/../zswap/stored_pages keeps rising in a zswap test with\n\"zswap.max_pool_percent\u003d0\" parameter.  But it should not compress or\nstore pages any more since there is no space in the compressed pool.\n\nReproduce steps:\n  1. Boot kernel with \"zswap.enabled\u003d1\"\n  2. Set the max_pool_percent to 0\n      # echo 0 \u003e /sys/module/zswap/parameters/max_pool_percent\n  3. Do memory stress test to see if some pages have been compressed\n      # stress --vm 1 --vm-bytes $mem_available\"M\" --timeout 60s\n  4. Watching the \u0027stored_pages\u0027 number increasing or not\n\nThe root cause is:\n\n  When zswap_max_pool_percent is set to 0 via kernel parameter,\n  zswap_is_full() will always return true due to zswap_shrink().  But if\n  the shinking is able to reclain a page successfully the code then\n  proceeds to compressing/storing another page, so the value of\n  stored_pages will keep changing.\n\nTo solve the issue, this patch adds a zswap_is_full() check again after\n  zswap_shrink() to make sure it\u0027s now under the max_pool_percent, and to\n  not compress/store if we reached the limit.\n\nLink: http://lkml.kernel.org/r/20180530103936.17812-1-liwang@redhat.com\nSigned-off-by: Li Wang \u003cliwang@redhat.com\u003e\nAcked-by: Dan Streetman \u003cddstreet@ieee.org\u003e\nCc: Seth Jennings \u003csjenning@redhat.com\u003e\nCc: Huang Ying \u003chuang.ying.caritas@gmail.com\u003e\nCc: Yu Zhao \u003cyuzhao@google.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "b142f71f17dbd1c203d51b975b98945e7dc310fd",
      "tree": "018614fb870527c4fbb9b933dd538b681e20dede",
      "parents": [
        "9dbea3f6b80638031e4c65285f0b9a60504f1f43"
      ],
      "author": {
        "name": "Masami Hiramatsu",
        "email": "mhiramat@kernel.org",
        "time": "Sat Jul 14 01:28:44 2018 +0900"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:36 2018 +0200"
      },
      "message": "selftests/ftrace: Add snapshot and tracing_on test case\n\n[ Upstream commit 82f4f3e69c5c29bce940dd87a2c0f16c51d48d17 ]\n\nAdd a testcase for checking snapshot and tracing_on\nrelationship. This ensures that the snapshotting doesn\u0027t\naffect current tracing on/off settings.\n\nLink: http://lkml.kernel.org/r/153149932412.11274.15289227592627901488.stgit@devbox\n\nCc: Tom Zanussi \u003ctom.zanussi@linux.intel.com\u003e\nCc: Hiraku Toyooka \u003chiraku.toyooka@cybertrust.co.jp\u003e\nSigned-off-by: Masami Hiramatsu \u003cmhiramat@kernel.org\u003e\nCc: Ingo Molnar \u003cmingo@redhat.com\u003e\nCc: Shuah Khan \u003cshuah@kernel.org\u003e\nCc: linux-kselftest@vger.kernel.org\nSigned-off-by: Steven Rostedt (VMware) \u003crostedt@goodmis.org\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "9dbea3f6b80638031e4c65285f0b9a60504f1f43",
      "tree": "7389066fcce93830862f6f08c19def5c75e81cb0",
      "parents": [
        "06144b250b7a7981a7e60f5614e13777fea8dae7"
      ],
      "author": {
        "name": "Kiran Kumar Modukuri",
        "email": "kiran.modukuri@gmail.com",
        "time": "Thu Jun 21 13:25:53 2018 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:35 2018 +0200"
      },
      "message": "cachefiles: Wait rather than BUG\u0027ing on \"Unexpected object collision\"\n\n[ Upstream commit c2412ac45a8f8f1cd582723c1a139608694d410d ]\n\nIf we meet a conflicting object that is marked FSCACHE_OBJECT_IS_LIVE in\nthe active object tree, we have been emitting a BUG after logging\ninformation about it and the new object.\n\nInstead, we should wait for the CACHEFILES_OBJECT_ACTIVE flag to be cleared\non the old object (or return an error).  The ACTIVE flag should be cleared\nafter it has been removed from the active object tree.  A timeout of 60s is\nused in the wait, so we shouldn\u0027t be able to get stuck there.\n\nFixes: 9ae326a69004 (\"CacheFiles: A cache that backs onto a mounted filesystem\")\nSigned-off-by: Kiran Kumar Modukuri \u003ckiran.modukuri@gmail.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "06144b250b7a7981a7e60f5614e13777fea8dae7",
      "tree": "5bbbfa179de323211d01460aeb992920ecae993e",
      "parents": [
        "58b96dea990fa8d440e55e1ccb55ef568ac5cf52"
      ],
      "author": {
        "name": "Kiran Kumar Modukuri",
        "email": "kiran.modukuri@gmail.com",
        "time": "Tue Jul 18 16:25:49 2017 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:35 2018 +0200"
      },
      "message": "cachefiles: Fix refcounting bug in backing-file read monitoring\n\n[ Upstream commit 934140ab028713a61de8bca58c05332416d037d1 ]\n\ncachefiles_read_waiter() has the right to access a \u0027monitor\u0027 object by\nvirtue of being called under the waitqueue lock for one of the pages in its\npurview.  However, it has no ref on that monitor object or on the\nassociated operation.\n\nWhat it is allowed to do is to move the monitor object to the operation\u0027s\nto_do list, but once it drops the work_lock, it\u0027s actually no longer\npermitted to access that object.  However, it is trying to enqueue the\nretrieval operation for processing - but it can only do this via a pointer\nin the monitor object, something it shouldn\u0027t be doing.\n\nIf it doesn\u0027t enqueue the operation, the operation may not get processed.\nIf the order is flipped so that the enqueue is first, then it\u0027s possible\nfor the work processor to look at the to_do list before the monitor is\nenqueued upon it.\n\nFix this by getting a ref on the operation so that we can trust that it\nwill still be there once we\u0027ve added the monitor to the to_do list and\ndropped the work_lock.  The op can then be enqueued after the lock is\ndropped.\n\nThe bug can manifest in one of a couple of ways.  The first manifestation\nlooks like:\n\n FS-Cache:\n FS-Cache: Assertion failed\n FS-Cache: 6 \u003d\u003d 5 is false\n ------------[ cut here ]------------\n kernel BUG at fs/fscache/operation.c:494!\n RIP: 0010:fscache_put_operation+0x1e3/0x1f0\n ...\n fscache_op_work_func+0x26/0x50\n process_one_work+0x131/0x290\n worker_thread+0x45/0x360\n kthread+0xf8/0x130\n ? create_worker+0x190/0x190\n ? kthread_cancel_work_sync+0x10/0x10\n ret_from_fork+0x1f/0x30\n\nThis is due to the operation being in the DEAD state (6) rather than\nINITIALISED, COMPLETE or CANCELLED (5) because it\u0027s already passed through\nfscache_put_operation().\n\nThe bug can also manifest like the following:\n\n kernel BUG at fs/fscache/operation.c:69!\n ...\n    [exception RIP: fscache_enqueue_operation+246]\n ...\n #7 [ffff883fff083c10] fscache_enqueue_operation at ffffffffa0b793c6\n #8 [ffff883fff083c28] cachefiles_read_waiter at ffffffffa0b15a48\n #9 [ffff883fff083c48] __wake_up_common at ffffffff810af028\n\nI\u0027m not entirely certain as to which is line 69 in Lei\u0027s kernel, so I\u0027m not\nentirely clear which assertion failed.\n\nFixes: 9ae326a69004 (\"CacheFiles: A cache that backs onto a mounted filesystem\")\nReported-by: Lei Xue \u003ccarmark.dlut@gmail.com\u003e\nReported-by: Vegard Nossum \u003cvegard.nossum@gmail.com\u003e\nReported-by: Anthony DeRobertis \u003caderobertis@metrics.net\u003e\nReported-by: NeilBrown \u003cneilb@suse.com\u003e\nReported-by: Daniel Axtens \u003cdja@axtens.net\u003e\nReported-by: Kiran Kumar Modukuri \u003ckiran.modukuri@gmail.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nReviewed-by: Daniel Axtens \u003cdja@axtens.net\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "58b96dea990fa8d440e55e1ccb55ef568ac5cf52",
      "tree": "f7679a931be647466d478de4c50b8a0bb3c95f8b",
      "parents": [
        "7022f61c15dc06efe8d4af4711dac139f2eea121"
      ],
      "author": {
        "name": "Kiran Kumar Modukuri",
        "email": "kiran.modukuri@gmail.com",
        "time": "Wed Jul 25 14:31:20 2018 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:35 2018 +0200"
      },
      "message": "fscache: Allow cancelled operations to be enqueued\n\n[ Upstream commit d0eb06afe712b7b103b6361f40a9a0c638524669 ]\n\nAlter the state-check assertion in fscache_enqueue_operation() to allow\ncancelled operations to be given processing time so they can be cleaned up.\n\nAlso fix a debugging statement that was requiring such operations to have\nan object assigned.\n\nFixes: 9ae326a69004 (\"CacheFiles: A cache that backs onto a mounted filesystem\")\nReported-by: Kiran Kumar Modukuri \u003ckiran.modukuri@gmail.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "7022f61c15dc06efe8d4af4711dac139f2eea121",
      "tree": "8280884ea11820e6b91cdc9451a9effe30331567",
      "parents": [
        "21aee5fe5b4b399123d28628ca31c7823d532887"
      ],
      "author": {
        "name": "Shubhrajyoti Datta",
        "email": "shubhrajyoti.datta@xilinx.com",
        "time": "Tue Jul 24 10:09:53 2018 +0530"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:35 2018 +0200"
      },
      "message": "net: axienet: Fix double deregister of mdio\n\n[ Upstream commit 03bc7cab7d7218088412a75e141696a89059ab00 ]\n\nIf the registration fails then mdio_unregister is called.\nHowever at unbind the unregister ia attempted again resulting\nin the below crash\n\n[   73.544038] kernel BUG at drivers/net/phy/mdio_bus.c:415!\n[   73.549362] Internal error: Oops - BUG: 0 [#1] SMP\n[   73.554127] Modules linked in:\n[   73.557168] CPU: 0 PID: 2249 Comm: sh Not tainted 4.14.0 #183\n[   73.562895] Hardware name: xlnx,zynqmp (DT)\n[   73.567062] task: ffffffc879e41180 task.stack: ffffff800cbe0000\n[   73.572973] PC is at mdiobus_unregister+0x84/0x88\n[   73.577656] LR is at axienet_mdio_teardown+0x18/0x30\n[   73.582601] pc : [\u003cffffff80085fa4cc\u003e] lr : [\u003cffffff8008616858\u003e]\npstate: 20000145\n[   73.589981] sp : ffffff800cbe3c30\n[   73.593277] x29: ffffff800cbe3c30 x28: ffffffc879e41180\n[   73.598573] x27: ffffff8008a21000 x26: 0000000000000040\n[   73.603868] x25: 0000000000000124 x24: ffffffc879efe920\n[   73.609164] x23: 0000000000000060 x22: ffffffc879e02000\n[   73.614459] x21: ffffffc879e02800 x20: ffffffc87b0b8870\n[   73.619754] x19: ffffffc879e02800 x18: 000000000000025d\n[   73.625050] x17: 0000007f9a719ad0 x16: ffffff8008195bd8\n[   73.630345] x15: 0000007f9a6b3d00 x14: 0000000000000010\n[   73.635640] x13: 74656e7265687465 x12: 0000000000000030\n[   73.640935] x11: 0000000000000030 x10: 0101010101010101\n[   73.646231] x9 : 241f394f42533300 x8 : ffffffc8799f6e98\n[   73.651526] x7 : ffffffc8799f6f18 x6 : ffffffc87b0ba318\n[   73.656822] x5 : ffffffc87b0ba498 x4 : 0000000000000000\n[   73.662117] x3 : 0000000000000000 x2 : 0000000000000008\n[   73.667412] x1 : 0000000000000004 x0 : ffffffc8799f4000\n[   73.672708] Process sh (pid: 2249, stack limit \u003d 0xffffff800cbe0000)\n\nFix the same by making the bus NULL on unregister.\n\nSigned-off-by: Shubhrajyoti Datta \u003cshubhrajyoti.datta@xilinx.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "21aee5fe5b4b399123d28628ca31c7823d532887",
      "tree": "d8d70290b94fe1a36e7ed01b1fba979fa51566ef",
      "parents": [
        "b7e90154dc16d9538067fe7012a14447d341c43a"
      ],
      "author": {
        "name": "Sudarsana Reddy Kalluru",
        "email": "sudarsana.kalluru@cavium.com",
        "time": "Tue Jul 24 02:43:52 2018 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:35 2018 +0200"
      },
      "message": "bnx2x: Fix invalid memory access in rss hash config path.\n\n[ Upstream commit ae2dcb28c24794a87e424a726a1cf1a61980f52d ]\n\nRx hash/filter table configuration uses rss_conf_obj to configure filters\nin the hardware. This object is initialized only when the interface is\nbrought up.\nThis patch adds driver changes to configure rss params only when the device\nis in opened state. In port disabled case, the config will be cached in the\ndriver structure which will be applied in the successive load path.\n\nPlease consider applying it to \u0027net\u0027 branch.\n\nSigned-off-by: Sudarsana Reddy Kalluru \u003cSudarsana.Kalluru@cavium.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "b7e90154dc16d9538067fe7012a14447d341c43a",
      "tree": "647b99d1955656fc242b33f22b8d1482695d4e8e",
      "parents": [
        "ca08b42d1f69d4af1037dbb0091120cc583c6d29"
      ],
      "author": {
        "name": "Guenter Roeck",
        "email": "linux@roeck-us.net",
        "time": "Mon Jul 23 14:39:33 2018 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:35 2018 +0200"
      },
      "message": "media: staging: omap4iss: Include asm/cacheflush.h after generic includes\n\n[ Upstream commit 0894da849f145af51bde88a6b84f95b9c9e0bc66 ]\n\nIncluding asm/cacheflush.h first results in the following build error\nwhen trying to build sparc32:allmodconfig, because \u0027struct page\u0027 has not\nbeen declared, and the function declaration ends up creating a separate\n(private) declaration of struct page (as a result of function arguments\nbeing in the scope of the function declaration and definition, not in\nglobal scope).\n\nThe C scoping rules do not just affect variable visibility, they also\naffect type declaration visibility.\n\nThe end result is that when the actual call site is seen in\n\u003clinux/highmem.h\u003e, the \u0027struct page\u0027 type in the caller is not the same\n\u0027struct page\u0027 that the function was declared with, resulting in:\n\n  In file included from arch/sparc/include/asm/page.h:10:0,\n                   ...\n                   from drivers/staging/media/omap4iss/iss_video.c:15:\n  include/linux/highmem.h: In function \u0027clear_user_highpage\u0027:\n  include/linux/highmem.h:137:31: error:\n\tpassing argument 1 of \u0027sparc_flush_page_to_ram\u0027 from incompatible\n\tpointer type\n\nInclude generic includes files first to fix the problem.\n\nFixes: fc96d58c10162 (\"[media] v4l: omap4iss: Add support for OMAP4 camera interface - Video devices\")\nSuggested-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nAcked-by: David S. Miller \u003cdavem@davemloft.net\u003e\nCc: Randy Dunlap \u003crdunlap@infradead.org\u003e\nSigned-off-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\n[ Added explanation of C scope rules - Linus ]\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "ca08b42d1f69d4af1037dbb0091120cc583c6d29",
      "tree": "11bde94477341962f8d3b41b5225a5e5a506ae66",
      "parents": [
        "ae34cbea8c5378ca3b2a423260f4bc80e04a49d7"
      ],
      "author": {
        "name": "Alexander Sverdlin",
        "email": "alexander.sverdlin@nokia.com",
        "time": "Fri Jul 13 17:20:17 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:35 2018 +0200"
      },
      "message": "i2c: davinci: Avoid zero value of CLKH\n\n[ Upstream commit cc8de9a68599b261244ea453b38678229f06ada7 ]\n\nIf CLKH is set to 0 I2C clock is not generated at all, so avoid this value\nand stretch the clock in this case.\n\nSigned-off-by: Alexander Sverdlin \u003calexander.sverdlin@nokia.com\u003e\nAcked-by: Sekhar Nori \u003cnsekhar@ti.com\u003e\nSigned-off-by: Wolfram Sang \u003cwsa@the-dreams.de\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "ae34cbea8c5378ca3b2a423260f4bc80e04a49d7",
      "tree": "5aed3735550996fe909fc88b1a6562f0ec1f6131",
      "parents": [
        "66673aace3d6fb5539c7e4c6c2bb589ffed51dab"
      ],
      "author": {
        "name": "Nicholas Mc Guire",
        "email": "hofrat@osadl.org",
        "time": "Mon Jul 09 21:16:40 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:35 2018 +0200"
      },
      "message": "can: mpc5xxx_can: check of_iomap return before use\n\n[ Upstream commit b5c1a23b17e563b656cc9bb76ce5323b997d90e8 ]\n\nof_iomap() can return NULL so that return needs to be checked and NULL\ntreated as failure. While at it also take care of the missing\nof_node_put() in the error path.\n\nSigned-off-by: Nicholas Mc Guire \u003chofrat@osadl.org\u003e\nFixes: commit afa17a500a36 (\"net/can: add driver for mscan family \u0026 mpc52xx_mscan\")\nSigned-off-by: Marc Kleine-Budde \u003cmkl@pengutronix.de\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "66673aace3d6fb5539c7e4c6c2bb589ffed51dab",
      "tree": "4e8e5241da0c67949a64509e563b8640f123ec09",
      "parents": [
        "405d3fdb6b8671d73377f619e1971ce4fece7a50"
      ],
      "author": {
        "name": "Randy Dunlap",
        "email": "rdunlap@infradead.org",
        "time": "Sat Jul 21 12:59:25 2018 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:35 2018 +0200"
      },
      "message": "net: prevent ISA drivers from building on PPC32\n\n[ Upstream commit c9ce1fa1c24b08e13c2a3b5b1f94a19c9eaa982c ]\n\nPrevent drivers from building on PPC32 if they use isa_bus_to_virt(),\nisa_virt_to_bus(), or isa_page_to_bus(), which are not available and\nthus cause build errors.\n\n../drivers/net/ethernet/3com/3c515.c: In function \u0027corkscrew_open\u0027:\n../drivers/net/ethernet/3com/3c515.c:824:9: error: implicit declaration of function \u0027isa_virt_to_bus\u0027; did you mean \u0027virt_to_bus\u0027? [-Werror\u003dimplicit-function-declaration]\n\n../drivers/net/ethernet/amd/lance.c: In function \u0027lance_rx\u0027:\n../drivers/net/ethernet/amd/lance.c:1203:23: error: implicit declaration of function \u0027isa_bus_to_virt\u0027; did you mean \u0027bus_to_virt\u0027? [-Werror\u003dimplicit-function-declaration]\n\n../drivers/net/ethernet/amd/ni65.c: In function \u0027ni65_init_lance\u0027:\n../drivers/net/ethernet/amd/ni65.c:585:20: error: implicit declaration of function \u0027isa_virt_to_bus\u0027; did you mean \u0027virt_to_bus\u0027? [-Werror\u003dimplicit-function-declaration]\n\n../drivers/net/ethernet/cirrus/cs89x0.c: In function \u0027net_open\u0027:\n../drivers/net/ethernet/cirrus/cs89x0.c:897:20: error: implicit declaration of function \u0027isa_virt_to_bus\u0027; did you mean \u0027virt_to_bus\u0027? [-Werror\u003dimplicit-function-declaration]\n\nSigned-off-by: Randy Dunlap \u003crdunlap@infradead.org\u003e\nSuggested-by: Michael Ellerman \u003cmpe@ellerman.id.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "405d3fdb6b8671d73377f619e1971ce4fece7a50",
      "tree": "8fa60ad736004e643993b68b9fd17d8fd73b1d7f",
      "parents": [
        "af130c7f1d432510034bdd10332188ec46dcc04c"
      ],
      "author": {
        "name": "Florian Westphal",
        "email": "fw@strlen.de",
        "time": "Fri Jul 20 19:30:57 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:35 2018 +0200"
      },
      "message": "atl1c: reserve min skb headroom\n\n[ Upstream commit 6e56830776828d8ca9897fc4429eeab47c3bb432 ]\n\nGot crash report with following backtrace:\nBUG: unable to handle kernel paging request at ffff8801869daffe\nRIP: 0010:[\u003cffffffff816429c4\u003e]  [\u003cffffffff816429c4\u003e] ip6_finish_output2+0x394/0x4c0\nRSP: 0018:ffff880186c83a98  EFLAGS: 00010283\nRAX: ffff8801869db00e ...\n  [\u003cffffffff81644cdc\u003e] ip6_finish_output+0x8c/0xf0\n  [\u003cffffffff81644d97\u003e] ip6_output+0x57/0x100\n  [\u003cffffffff81643dc9\u003e] ip6_forward+0x4b9/0x840\n  [\u003cffffffff81645566\u003e] ip6_rcv_finish+0x66/0xc0\n  [\u003cffffffff81645db9\u003e] ipv6_rcv+0x319/0x530\n  [\u003cffffffff815892ac\u003e] netif_receive_skb+0x1c/0x70\n  [\u003cffffffffc0060bec\u003e] atl1c_clean+0x1ec/0x310 [atl1c]\n  ...\n\nThe bad access is in neigh_hh_output(), at skb-\u003edata - 16 (HH_DATA_MOD).\natl1c driver provided skb with no headroom, so 14 bytes (ethernet\nheader) got pulled, but then 16 are copied.\n\nReserve NET_SKB_PAD bytes headroom, like netdev_alloc_skb().\n\nCompile tested only; I lack hardware.\n\nFixes: 7b7017642199 (\"atl1c: Fix misuse of netdev_alloc_skb in refilling rx ring\")\nSigned-off-by: Florian Westphal \u003cfw@strlen.de\u003e\nReviewed-by: Eric Dumazet \u003cedumazet@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "af130c7f1d432510034bdd10332188ec46dcc04c",
      "tree": "d9da94d2e6b0616549cd8cd440efd039455e193d",
      "parents": [
        "7193329df84d8d346585e22ea1b800b8fa177124"
      ],
      "author": {
        "name": "Sudarsana Reddy Kalluru",
        "email": "sudarsana.kalluru@cavium.com",
        "time": "Wed Jul 18 22:50:03 2018 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:35 2018 +0200"
      },
      "message": "qed: Fix possible race for the link state value.\n\n[ Upstream commit 58874c7b246109d8efb2b0099d1aa296d6bfc3fa ]\n\nThere\u0027s a possible race where driver can read link status in mid-transition\nand see that virtual-link is up yet speed is 0. Since in this\nmid-transition we\u0027re guaranteed to see a mailbox from MFW soon, we can\nafford to treat this as link down.\n\nFixes: cc875c2e (\"qed: Add link support\")\nSigned-off-by: Sudarsana Reddy Kalluru \u003cSudarsana.Kalluru@cavium.com\u003e\nSigned-off-by: Ariel Elior \u003cariel.elior@cavium.com\u003e\nSigned-off-by: Michal Kalderon \u003cMichal.Kalderon@cavium.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "7193329df84d8d346585e22ea1b800b8fa177124",
      "tree": "a462d7713fa8f68d20fd79a36263f62118a54ebc",
      "parents": [
        "1fa903cb3b09af0c32888fbf8dde4d3def60fb6f"
      ],
      "author": {
        "name": "YueHaibing",
        "email": "yuehaibing@huawei.com",
        "time": "Thu Jul 19 10:27:13 2018 +0800"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:34 2018 +0200"
      },
      "message": "net: caif: Add a missing rcu_read_unlock() in caif_flow_cb\n\n[ Upstream commit 64119e05f7b31e83e2555f6782e6cdc8f81c63f4 ]\n\nAdd a missing rcu_read_unlock in the error path\n\nFixes: c95567c80352 (\"caif: added check for potential null return\")\nSigned-off-by: YueHaibing \u003cyuehaibing@huawei.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "1fa903cb3b09af0c32888fbf8dde4d3def60fb6f",
      "tree": "b9b58f158515757aeae545b4476fa0b69c972b3d",
      "parents": [
        "801a35b0963c1d1af581486ac0461ad41cea6a6f"
      ],
      "author": {
        "name": "Len Brown",
        "email": "len.brown@intel.com",
        "time": "Fri Jul 20 14:47:03 2018 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:34 2018 +0200"
      },
      "message": "tools/power turbostat: fix -S on UP systems\n\n[ Upstream commit 9d83601a9cc1884d1b5706ee2acc661d558c6838 ]\n\nThe -S (system summary) option failed to print any data on a 1-processor system.\n\nReported-by: Artem Bityutskiy \u003cartem.bityutskiy@linux.intel.com\u003e\nSigned-off-by: Len Brown \u003clen.brown@intel.com\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "801a35b0963c1d1af581486ac0461ad41cea6a6f",
      "tree": "6aca9f75442bfa8e137847151910bfa7e468a3cd",
      "parents": [
        "7b85bc4bea0f1c922315aaf9451c544b69dc20f6"
      ],
      "author": {
        "name": "Eugeniu Rosca",
        "email": "roscaeugeniu@gmail.com",
        "time": "Mon Jul 02 23:46:47 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:34 2018 +0200"
      },
      "message": "usb: gadget: f_uac2: fix endianness of \u0027struct cntrl_*_lay3\u0027\n\n[ Upstream commit eec24f2a0d4dc3b1d95a3ccd2feb523ede3ba775 ]\n\nThe list [1] of commits doing endianness fixes in USB subsystem is long\ndue to below quote from USB spec Revision 2.0 from April 27, 2000:\n\n------------\n8.1 Byte/Bit Ordering\n\nMultiple byte fields in standard descriptors, requests, and responses\nare interpreted as and moved over the bus in little-endian order, i.e.\nLSB to MSB.\n------------\n\nThis commit belongs to the same family.\n\n[1] Example of endianness fixes in USB subsystem:\ncommit 14e1d56cbea6 (\"usb: gadget: f_uac2: endianness fixes.\")\ncommit 42370b821168 (\"usb: gadget: f_uac1: endianness fixes.\")\ncommit 63afd5cc7877 (\"USB: chaoskey: fix Alea quirk on big-endian hosts\")\ncommit 74098c4ac782 (\"usb: gadget: acm: fix endianness in notifications\")\ncommit cdd7928df0d2 (\"ACM gadget: fix endianness in notifications\")\ncommit 323ece54e076 (\"cdc-wdm: fix endianness bug in debug statements\")\ncommit e102609f1072 (\"usb: gadget: uvc: Fix endianness mismatches\")\n       list goes on\n\nFixes: 132fcb460839 (\"usb: gadget: Add Audio Class 2.0 Driver\")\nSigned-off-by: Eugeniu Rosca \u003cerosca@de.adit-jv.com\u003e\nReviewed-by: Ruslan Bilovol \u003cruslan.bilovol@gmail.com\u003e\nSigned-off-by: Felipe Balbi \u003cfelipe.balbi@linux.intel.com\u003e\n\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "7b85bc4bea0f1c922315aaf9451c544b69dc20f6",
      "tree": "b04eb9c1976310836dbf605c2b284820443bc929",
      "parents": [
        "5e02503f2a99621059daaf176e970b083648e0bb"
      ],
      "author": {
        "name": "Peter Senna Tschudin",
        "email": "peter.senna@gmail.com",
        "time": "Tue Jul 10 16:01:45 2018 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:34 2018 +0200"
      },
      "message": "tools: usb: ffs-test: Fix build on big endian systems\n\n[ Upstream commit a2b22dddc7bb6110ac3b5ed1a60aa9279836fadb ]\n\nThe tools/usb/ffs-test.c file defines cpu_to_le16/32 by using the C\nlibrary htole16/32 function calls. However, cpu_to_le16/32 are used when\ninitializing structures, i.e in a context where a function call is not\nallowed.\n\nIt works fine on little endian systems because htole16/32 are defined by\nthe C library as no-ops. But on big-endian systems, they are actually\ndoing something, which might involve calling a function, causing build\nfailures, such as:\n\n   ffs-test.c:48:25: error: initializer element is not constant\n    #define cpu_to_le32(x)  htole32(x)\n                            ^~~~~~~\n   ffs-test.c:128:12: note: in expansion of macro ‘cpu_to_le32’\n      .magic \u003d cpu_to_le32(FUNCTIONFS_DESCRIPTORS_MAGIC_V2),\n               ^~~~~~~~~~~\n\nTo solve this, we code cpu_to_le16/32 in a way that allows them to be\nused when initializing structures. This fix was imported from\nmeta-openembedded/android-tools/fix-big-endian-build.patch written by\nThomas Petazzoni \u003cthomas.petazzoni@free-electrons.com\u003e.\n\nCC: Thomas Petazzoni \u003cthomas.petazzoni@free-electrons.com\u003e\nSigned-off-by: Peter Senna Tschudin \u003cpeter.senna@gmail.com\u003e\nSigned-off-by: Felipe Balbi \u003cfelipe.balbi@linux.intel.com\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "5e02503f2a99621059daaf176e970b083648e0bb",
      "tree": "d9c190dd93166ba6ddc0336b2292e82ed56b6be6",
      "parents": [
        "68f4f658ef0a1d49b13de2ae991b13a93df675e6"
      ],
      "author": {
        "name": "Randy Dunlap",
        "email": "rdunlap@infradead.org",
        "time": "Sun Jul 15 10:37:37 2018 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Sep 05 09:18:34 2018 +0200"
      },
      "message": "usb/phy: fix PPC64 build errors in phy-fsl-usb.c\n\n[ Upstream commit a39ba90a1cc7010edb0a7132e1b67f3d80b994e9 ]\n\nFix build errors when built for PPC64:\nThese variables are only used on PPC32 so they don\u0027t need to be\ninitialized for PPC64.\n\n../drivers/usb/phy/phy-fsl-usb.c: In function \u0027usb_otg_start\u0027:\n../drivers/usb/phy/phy-fsl-usb.c:865:3: error: \u0027_fsl_readl\u0027 undeclared (first use in this function); did you mean \u0027fsl_readl\u0027?\n   _fsl_readl \u003d _fsl_readl_be;\n../drivers/usb/phy/phy-fsl-usb.c:865:16: error: \u0027_fsl_readl_be\u0027 undeclared (first use in this function); did you mean \u0027fsl_readl\u0027?\n   _fsl_readl \u003d _fsl_readl_be;\n../drivers/usb/phy/phy-fsl-usb.c:866:3: error: \u0027_fsl_writel\u0027 undeclared (first use in this function); did you mean \u0027fsl_writel\u0027?\n   _fsl_writel \u003d _fsl_writel_be;\n../drivers/usb/phy/phy-fsl-usb.c:866:17: error: \u0027_fsl_writel_be\u0027 undeclared (first use in this function); did you mean \u0027fsl_writel\u0027?\n   _fsl_writel \u003d _fsl_writel_be;\n../drivers/usb/phy/phy-fsl-usb.c:868:16: error: \u0027_fsl_readl_le\u0027 undeclared (first use in this function); did you mean \u0027fsl_readl\u0027?\n   _fsl_readl \u003d _fsl_readl_le;\n../drivers/usb/phy/phy-fsl-usb.c:869:17: error: \u0027_fsl_writel_le\u0027 undeclared (first use in this function); did you mean \u0027fsl_writel\u0027?\n   _fsl_writel \u003d _fsl_writel_le;\n\nand the sysfs \"show\" function return type should be ssize_t, not int:\n\n../drivers/usb/phy/phy-fsl-usb.c:1042:49: error: initialization of \u0027ssize_t (*)(struct device *, struct device_attribute *, char *)\u0027 {aka \u0027long int (*)(struct device *, struct device_attribute *, char *)\u0027} from incompatible pointer type \u0027int (*)(struct device *, struct device_attribute *, char *)\u0027 [-Werror\u003dincompatible-pointer-types]\n static DEVICE_ATTR(fsl_usb2_otg_state, S_IRUGO, show_fsl_usb2_otg_state, NULL);\n\nSigned-off-by: Randy Dunlap \u003crdunlap@infradead.org\u003e\nCc: Felipe Balbi \u003cbalbi@kernel.org\u003e\nCc: linux-usb@vger.kernel.org\nCc: Michael Ellerman \u003cmpe@ellerman.id.au\u003e\nCc: linuxppc-dev@lists.ozlabs.org\nSigned-off-by: Felipe Balbi \u003cfelipe.balbi@linux.intel.com\u003e\nSigned-off-by: Sasha Levin \u003calexander.levin@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    }
  ],
  "next": "68f4f658ef0a1d49b13de2ae991b13a93df675e6"
}
