)]}' { "log": [ { "commit": "e60b5f79bd7529e76b13cf1e85823abbd0e33634", "tree": "67d54525fe5b0618e64749a86a8438cc1ea31d8a", "parents": [ "6089a91fc02e0a4f8962f0df1be236c44248d7ea", "8f5b27347e88b171c755562f0090ce40e514fc00" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Feb 23 11:13:50 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Feb 23 11:13:50 2019 -0800" }, "message": "Merge tag \u0027powerpc-5.0-6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux\n\nPull powerpc fix from Michael Ellerman:\n \"One fix for an oops when using SRIOV, introduced by the recent changes\n to support compound IOMMU groups.\n\n Thanks to Alexey Kardashevskiy\"\n\n* tag \u0027powerpc-5.0-6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:\n powerpc/powernv/sriov: Register IOMMU groups for VFs\n" }, { "commit": "6089a91fc02e0a4f8962f0df1be236c44248d7ea", "tree": "d08367d429256eb026679e6c5ca762fbd2589d14", "parents": [ "cb268d806972c76c34e5d74343fb6064cd722c7c", "4a067cf823d9d8e50d41cfb618011c0d4a969c72" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Feb 23 09:48:01 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Feb 23 09:48:01 2019 -0800" }, "message": "Merge tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi\n\nPull SCSI fixes from James Bottomley:\n \"Four small fixes: three in drivers and one in the core.\n\n The core fix is also minor in scope since the bug it fixes is only\n known to affect systems using SCSI reservations. Of the driver bugs,\n the libsas one is the most major because it can lead to multiple disks\n on the same expander not being exposed\"\n\n* tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:\n scsi: core: reset host byte in DID_NEXUS_FAILURE case\n scsi: libsas: Fix rphy phy_identifier for PHYs with end devices attached\n scsi: sd_zbc: Fix sd_zbc_report_zones() buffer allocation\n scsi: libiscsi: Fix race between iscsi_xmit_task and iscsi_complete_task\n" }, { "commit": "cb268d806972c76c34e5d74343fb6064cd722c7c", "tree": "b51d3f5c0431da9b15c65736fe67f9d27e7aca93", "parents": [ "ef4edb3ed830cbbb443de9906b8cf16dc0653a74", "ede0fa98a900e657d1fcd80b50920efc896c1a4c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Feb 22 17:48:50 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Feb 22 17:48:50 2019 -0800" }, "message": "Merge branch \u0027fixes-v5.0-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security\n\nPull keys fixes from James Morris:\n \"Two fixes from Eric Biggers\"\n\n* \u0027fixes-v5.0-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security:\n KEYS: always initialize keyring_index_key::desc_len\n KEYS: user: Align the payload buffer\n" }, { "commit": "ef4edb3ed830cbbb443de9906b8cf16dc0653a74", "tree": "a74890b5438197a0bba517c418bcaedc6c75e2fe", "parents": [ "9053d2db8b04a468ce1ab92693b940b046ea392c", "5b317cbf2bcb85a1e96ce87717cb991ecab1dd4d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Feb 22 17:46:30 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Feb 22 17:46:30 2019 -0800" }, "message": "Merge tag \u0027pm-5.0\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull power management fixes from Rafael Wysocki:\n \"These fix a regression in the PM-runtime framework introduced by the\n recent switch-over of it to using hrtimers and a use-after-free\n introduced by one of the recent changes in the scmi-cpufreq driver.\n\n Specifics:\n\n - Use hrtimer_try_to_cancel() instead of hrtimer_cancel() in the\n PM-runtime framework to avoid a possible timer-related deadlock\n introduced recently (Vincent Guittot).\n\n - Reorder the scmi-cpufreq driver code to avoid accessing memory that\n has just been freed (Yangtao Li)\"\n\n* tag \u0027pm-5.0\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n PM-runtime: Fix deadlock when canceling hrtimer\n cpufreq: scmi: Fix use-after-free in scmi_cpufreq_exit()\n" }, { "commit": "9053d2db8b04a468ce1ab92693b940b046ea392c", "tree": "b3fdfc78cfe3e7e4c32a65dfa4b971adb53e03f9", "parents": [ "2cc63b39003913fdf564cde5c646ac8f174e3ac7", "2f8b1ce19ebdaffa0f3f11d178b387b60e29c0fc" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Feb 22 16:48:37 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Feb 22 16:48:37 2019 -0800" }, "message": "Merge tag \u0027armsoc-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc\n\nPull ARM SoC fixes from Arnd Bergmann:\n \"Only a handful of device tree fixes, all simple enough:\n\n NVIDIA Tegra:\n - Fix a regression for booting on chromebooks\n\n TI OMAP:\n - Two fixes PHY mode on am335x reference boards\n\n Marvell mvebu:\n - A regression fix for Armada XP NAND flash controllers\n - An incorrect reset signal on the clearfog board\"\n\n* tag \u0027armsoc-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc:\n ARM: tegra: Restore DT ABI on Tegra124 Chromebooks\n ARM: dts: am335x-evm: Fix PHY mode for ethernet\n ARM: dts: am335x-evmsk: Fix PHY mode for ethernet\n arm64: dts: clearfog-gt-8k: fix SGMII PHY reset signal\n ARM: dts: armada-xp: fix Armada XP boards NAND description\n" }, { "commit": "2cc63b39003913fdf564cde5c646ac8f174e3ac7", "tree": "13ce5f5d7e409c095987c9ccb56473b679dd8697", "parents": [ "8456e98e18f35f4d4376e8ff3110a3342f81ce9b", "7b2e932f633bcb7b190fc7031ce6dac75f8c3472" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Feb 22 16:31:26 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Feb 22 16:31:26 2019 -0800" }, "message": "Merge tag \u0027arc-5.0-final\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vgupta/arc\n\nPull ARC fixes from Vineet Gupta:\n \"Fixes for ARC for 5.0, bunch of those are stable fodder anyways so\n sooner the better.\n\n - Fix memcpy to prevent prefetchw beyond end of buffer [Eugeniy]\n\n - Enable unaligned access early to prevent exceptions given newer gcc\n code gen [Eugeniy]\n\n - Tighten up uboot arg checking to prevent false negatives and also\n allow both jtag and bootloading to coexist w/o config option as\n needed by kernelCi folks [Eugeniy]\n\n - Set slab alignment to 8 for ARC to avoid the atomic64_t unalign\n [Alexey]\n\n - Disable regfile auto save on interrupts on HSDK platform due to a\n silicon issue [Vineet]\n\n - Avoid HS38x boot printing crash by not reading HS48x only reg\n [Vineet]\"\n\n* tag \u0027arc-5.0-final\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vgupta/arc:\n ARCv2: don\u0027t assume core 0x54 has dual issue\n ARC: define ARCH_SLAB_MINALIGN \u003d 8\n ARC: enable uboot support unconditionally\n ARC: U-boot: check arguments paranoidly\n ARCv2: support manual regfile save on interrupts\n ARC: uacces: remove lp_start, lp_end from clobber list\n ARC: fix actionpoints configuration detection\n ARCv2: lib: memcpy: fix doing prefetchw outside of buffer\n ARCv2: Enable unaligned access in early ASM code\n" }, { "commit": "8456e98e18f35f4d4376e8ff3110a3342f81ce9b", "tree": "b8772abf9ae7eb5d09f302abcdd9f946ba8487e5", "parents": [ "77dc1181d896c5c3f8e131e341993aef41e16505", "71d73a0b43c2b101a960c624290c8a053d174cac" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Feb 22 16:12:01 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Feb 22 16:12:01 2019 -0800" }, "message": "Merge branch \u0027parisc-5.0-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux\n\nPull parisc fixes from Helge Deller:\n \"Fix ptrace syscall number modification which has been broken since\n kernel v4.5 and provide alternative email addresses for the remaining\n users of the retired parisc-linux.org email domain\"\n\n* \u0027parisc-5.0-1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux:\n CREDITS/MAINTAINERS: Retire parisc-linux.org email domain\n parisc: Fix ptrace syscall number modification\n" }, { "commit": "77dc1181d896c5c3f8e131e341993aef41e16505", "tree": "37b69006f5a2fcbc04a3bb1148a082f948836d51", "parents": [ "6ee2846cb4e7c6e8acdcb265299ad1c6de42b437", "207a369e3c085799e7836221f64e7a7329985fb6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Feb 22 16:09:55 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Feb 22 16:09:55 2019 -0800" }, "message": "Merge tag \u0027kbuild-fixes-v5.0-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild\n\nPull more Kbuild fixes from Masahiro Yamada:\n\n - fix scripts/kallsyms.c to correctly check too long symbol names\n\n - fix sh build error for the combination of CONFIG_OF_EARLY_FLATTREE\u003dy\n and CONFIG_USE_BUILTIN_DTB\u003dn\n\n* tag \u0027kbuild-fixes-v5.0-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild:\n sh: fix build error for invisible CONFIG_BUILTIN_DTB_SOURCE\n kallsyms: Handle too long symbols in kallsyms.c\n" }, { "commit": "6ee2846cb4e7c6e8acdcb265299ad1c6de42b437", "tree": "2dbeffd231782f58c186b1cdeee738143e204cfa", "parents": [ "168bd29830e8ebbffcd70d2af50249dca088e1a8", "019276ed65f364de27b929da4e083bb86ce7d1ef" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Feb 22 10:35:06 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Feb 22 10:35:06 2019 -0800" }, "message": "Merge tag \u0027drm-fixes-2019-02-22\u0027 of git://anongit.freedesktop.org/drm/drm\n\nPull drm fixes from Dave Airlie:\n \"This contains a single i915 tiled display fix, and a set of\n amdgpu/radeon fixes.\n\n i915:\n\n - tiled display fix\n\n amdgpu/radeon:\n\n - runtime PM fix\n\n - bulk moves disable (fix is too large for 5.0)\n\n - a set of display fixes that are all cc\u0027ed stable so we didn\u0027t want\n to leave them until -next\"\n\n* tag \u0027drm-fixes-2019-02-22\u0027 of git://anongit.freedesktop.org/drm/drm:\n drm/amdgpu: disable bulk moves for now\n drm/amd/display: set clocks to 0 on suspend on dce80\n drm/amd/display: fix optimize_bandwidth func pointer for dce80\n drm/amd/display: Fix negative cursor pos programming\n drm/i915/fbdev: Actually configure untiled displays\n drm/amd/display: Raise dispclk value for dce11\n drm/amd/display: Fix MST reboot/poweroff sequence\n drm/amdgpu: Update sdma golden setting for vega20\n drm/amdgpu: Set DPM_FLAG_NEVER_SKIP when enabling PM-runtime\n gpu: drm: radeon: Set DPM_FLAG_NEVER_SKIP when enabling PM-runtime\n" }, { "commit": "168bd29830e8ebbffcd70d2af50249dca088e1a8", "tree": "9630030974a99bf50f3e4598605988b321c1c005", "parents": [ "a3504f7a38233030def726fcfe692e786ab162df", "f09ef134a7ca3f0d2ce485a757f5b79809ebb803" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Feb 22 10:32:26 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Feb 22 10:32:26 2019 -0800" }, "message": "Merge tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma\n\nPull rdma fixes from Jason Gunthorpe:\n \"Small set of three regression fixing patches, things are looking\n pretty good here.\n\n - Fix cxgb4 to work again with non-4k page sizes\n\n - NULL pointer oops in SRP during sg_reset\"\n\n* tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma:\n iw_cxgb4: cq/qp mask depends on bar2 pages in a host page\n cxgb4: Export sge_host_page_size to ulds\n RDMA/srp: Rework SCSI device reset handling\n" }, { "commit": "ede0fa98a900e657d1fcd80b50920efc896c1a4c", "tree": "6bb852b833c21e0e57fb4de6c67d0755fde4d53d", "parents": [ "cc1780fc42c76c705dd07ea123f1143dc5057630" ], "author": { "name": "Eric Biggers", "email": "ebiggers@google.com", "time": "Fri Feb 22 15:36:18 2019 +0000" }, "committer": { "name": "James Morris", "email": "james.morris@microsoft.com", "time": "Fri Feb 22 10:11:34 2019 -0800" }, "message": "KEYS: always initialize keyring_index_key::desc_len\n\nsyzbot hit the \u0027BUG_ON(index_key-\u003edesc_len \u003d\u003d 0);\u0027 in __key_link_begin()\ncalled from construct_alloc_key() during sys_request_key(), because the\nlength of the key description was never calculated.\n\nThe problem is that we rely on -\u003edesc_len being initialized by\nsearch_process_keyrings(), specifically by search_nested_keyrings().\nBut, if the process isn\u0027t subscribed to any keyrings that never happens.\n\nFix it by always initializing keyring_index_key::desc_len as soon as the\ndescription is set, like we already do in some places.\n\nThe following program reproduces the BUG_ON() when it\u0027s run as root and\nno session keyring has been installed. If it doesn\u0027t work, try removing\npam_keyinit.so from /etc/pam.d/login and rebooting.\n\n #include \u003cstdlib.h\u003e\n #include \u003cunistd.h\u003e\n #include \u003ckeyutils.h\u003e\n\n int main(void)\n {\n int id \u003d add_key(\"keyring\", \"syz\", NULL, 0, KEY_SPEC_USER_KEYRING);\n\n keyctl_setperm(id, KEY_OTH_WRITE);\n setreuid(5000, 5000);\n request_key(\"user\", \"desc\", \"\", id);\n }\n\nReported-by: syzbot+ec24e95ea483de0a24da@syzkaller.appspotmail.com\nFixes: b2a4df200d57 (\"KEYS: Expand the capacity of a keyring\")\nSigned-off-by: Eric Biggers \u003cebiggers@google.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: James Morris \u003cjames.morris@microsoft.com\u003e\n" }, { "commit": "cc1780fc42c76c705dd07ea123f1143dc5057630", "tree": "ff2e1456a944817b402de9f9c10faa78f1313bfc", "parents": [ "8a61716ff2ab23eddd1f7a05a075a374e4d0c3d4" ], "author": { "name": "Eric Biggers", "email": "ebiggers@google.com", "time": "Wed Feb 20 13:32:11 2019 +0000" }, "committer": { "name": "James Morris", "email": "james.morris@microsoft.com", "time": "Fri Feb 22 10:11:19 2019 -0800" }, "message": "KEYS: user: Align the payload buffer\n\nAlign the payload of \"user\" and \"logon\" keys so that users of the\nkeyrings service can access it as a struct that requires more than\n2-byte alignment. fscrypt currently does this which results in the read\nof fscrypt_key::size being misaligned as it needs 4-byte alignment.\n\nAlign to __alignof__(u64) rather than __alignof__(long) since in the\nfuture it\u0027s conceivable that people would use structs beginning with\nu64, which on some platforms would require more than \u0027long\u0027 alignment.\n\nReported-by: Aaro Koskinen \u003caaro.koskinen@iki.fi\u003e\nFixes: 2aa349f6e37c (\"[PATCH] Keys: Export user-defined keyring operations\")\nFixes: 88bd6ccdcdd6 (\"ext4 crypto: add encryption key management facilities\")\nCc: stable@vger.kernel.org\nSigned-off-by: Eric Biggers \u003cebiggers@google.com\u003e\nTested-by: Aaro Koskinen \u003caaro.koskinen@iki.fi\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nSigned-off-by: James Morris \u003cjames.morris@microsoft.com\u003e\n" }, { "commit": "a3504f7a38233030def726fcfe692e786ab162df", "tree": "2c09cb60a5b3cf11a27eb1440f03e24fae07f88f", "parents": [ "8a61716ff2ab23eddd1f7a05a075a374e4d0c3d4", "65a91e2e597dea62a798a8b771edc44859037e7f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Feb 22 09:20:49 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Feb 22 09:20:49 2019 -0800" }, "message": "Merge tag \u0027clk-fixes-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux\n\nPull clk fixes from Stephen Boyd:\n \"A few more fixes for clk drivers causing regressions this release.\n\n Two Allwinner index fixes for A31 and V3 and two Microchip AT91 fixes\n for an incorrect clk parent linkage and a miscalculated number of\n clks\"\n\n* tag \u0027clk-fixes-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux:\n clk: at91: fix masterck name\n clk: at91: fix at91sam9x5 peripheral clock number\n clk: sunxi: A31: Fix wrong AHB gate number\n clk: sunxi-ng: v3s: Fix TCON reset de-assert bit\n" }, { "commit": "2f8b1ce19ebdaffa0f3f11d178b387b60e29c0fc", "tree": "71de2885138f958f6537634446a3b98f462fa7d1", "parents": [ "3858bfca2b7811d97121910a87dc42f33498f2fe", "bdd22a41d55bb0068c8685e28839ed9492e96aba" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Fri Feb 22 14:57:27 2019 +0100" }, "committer": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Fri Feb 22 14:58:41 2019 +0100" }, "message": "Merge tag \u0027mvebu-fixes-5.0-2\u0027 of git://git.infradead.org/linux-mvebu into arm/fixes\n\nmvebu fixes for 5.0 (part 2)\n\nFix PHY reset signal on clearfog gt 8K (Armada 8040 based)\nFix NAND description on Armada XP boards which was broken since a few\nrelease\n\n* tag \u0027mvebu-fixes-5.0-2\u0027 of git://git.infradead.org/linux-mvebu:\n arm64: dts: clearfog-gt-8k: fix SGMII PHY reset signal\n ARM: dts: armada-xp: fix Armada XP boards NAND description\n\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\n" }, { "commit": "3858bfca2b7811d97121910a87dc42f33498f2fe", "tree": "036d2e7680ea3a72d636d84207886b38f0c3cc86", "parents": [ "94d9b9337d09bdd27735005b3251d97ab29f7273", "0661465ec86e8ae28f09a04e51425c486d64dfb1" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Fri Feb 22 14:53:48 2019 +0100" }, "committer": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Fri Feb 22 14:54:02 2019 +0100" }, "message": "Merge tag \u0027omap-for-v5.0/fixes-rc7-signed\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap into arm/fixes\n\nTwo am335x ethernet phy mode fixes for v5.0-rc cycle\n\nRecent changes with commit cd28d1d6e52e: (\"net: phy: at803x: Disable phy\ndelay for RGMII mode\") broke Ethernet on am335x-evmsk, and turns out some\ndevice driver fixes are needed.\n\nEven without the driver fixes, am335x needs to run in rgmii-id mode instead\nrgmii-txid mode. Things have been working based on luck as the broken driver\nhas been configuring rgmii-id mode. Let\u0027s fix that as that way things work\nas they\u0027re supposed to work from hardware wiring point of view.\n\n* tag \u0027omap-for-v5.0/fixes-rc7-signed\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap:\n ARM: dts: am335x-evm: Fix PHY mode for ethernet\n ARM: dts: am335x-evmsk: Fix PHY mode for ethernet\n\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\n" }, { "commit": "5b317cbf2bcb85a1e96ce87717cb991ecab1dd4d", "tree": "2b1d7f270ec7374618e0903d73c795d7d7d0f7e6", "parents": [ "74fb44863084275b952f21ec6a024af0e2e75cb8", "8cbd468bdeb5ed3acac2d7a9f7494d5b77e46297" ], "author": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Fri Feb 22 10:17:11 2019 +0100" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Fri Feb 22 10:17:11 2019 +0100" }, "message": "Merge branch \u0027pm-cpufreq-fixes\u0027\n\n* pm-cpufreq-fixes:\n cpufreq: scmi: Fix use-after-free in scmi_cpufreq_exit()\n" }, { "commit": "019276ed65f364de27b929da4e083bb86ce7d1ef", "tree": "3b72638f8f9f14d319618127ba55604b721b411a", "parents": [ "9c526fed6a57561fc63abaf9497512ba4bf4e49e", "a213c2c7e235cfc0e0a161a558f7fdf2fb3a624a" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Thu Feb 21 12:52:38 2019 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Feb 22 09:35:25 2019 +1000" }, "message": "Merge branch \u0027drm-fixes-5.0\u0027 of git://people.freedesktop.org/~agd5f/linux into drm-fixes\n\nA bit bigger than normal for this week due to fixes for some long\nstanding display issues that are bound for stable. These changes would\nbe going to stable anyway, so I figured it was better via 5.0 than 5.1.\n- Several display fixes\n- Fix PX systems due to core changes in runtime pm\n- Disable bulk moves. They are fixed in 5.1, but fix is too invasive for 5.0\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nFrom: Alex Deucher \u003calexdeucher@gmail.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20190220225715.3240-1-alexander.deucher@amd.com\n" }, { "commit": "7b2e932f633bcb7b190fc7031ce6dac75f8c3472", "tree": "4102321338daed2d80932fe7951bba20b78858b7", "parents": [ "b6835ea77729e7faf4656ca637ba53f42b8ee3fd" ], "author": { "name": "Vineet Gupta", "email": "vgupta@synopsys.com", "time": "Thu Feb 21 13:44:49 2019 -0800" }, "committer": { "name": "Vineet Gupta", "email": "vgupta@synopsys.com", "time": "Thu Feb 21 14:53:36 2019 -0800" }, "message": "ARCv2: don\u0027t assume core 0x54 has dual issue\n\nThe first release of core4 (0x54) was dual issue only (HS4x).\nNewer releases allow hardware to be configured as single issue (HS3x)\nor dual issue.\n\nPrevent accessing a HS4x only aux register in HS3x, which otherwise\nleads to illegal instruction exceptions\n\nSigned-off-by: Vineet Gupta \u003cvgupta@synopsys.com\u003e\n" }, { "commit": "71d73a0b43c2b101a960c624290c8a053d174cac", "tree": "08772bb50f7b4d63ae9473978f56ab5ea3667334", "parents": [ "b7dc5a071ddf69c0350396b203cba32fe5bab510" ], "author": { "name": "Helge Deller", "email": "deller@gmx.de", "time": "Thu Feb 21 20:16:10 2019 +0100" }, "committer": { "name": "Helge Deller", "email": "deller@gmx.de", "time": "Thu Feb 21 20:16:10 2019 +0100" }, "message": "CREDITS/MAINTAINERS: Retire parisc-linux.org email domain\n\nRetire the parisc-linux.org email domain and provide alternative email\naddresses for the remaining users, as agreed upon with them.\n\nSigned-off-by: Helge Deller \u003cdeller@gmx.de\u003e\n" }, { "commit": "b7dc5a071ddf69c0350396b203cba32fe5bab510", "tree": "bd5b70d0de029450d878f044c5df9b2921f3ea08", "parents": [ "f6163d67cc31b8f2a946c4df82be3c6dd918412d" ], "author": { "name": "Dmitry V. Levin", "email": "ldv@altlinux.org", "time": "Sat Feb 16 16:10:39 2019 +0300" }, "committer": { "name": "Helge Deller", "email": "deller@gmx.de", "time": "Thu Feb 21 20:10:46 2019 +0100" }, "message": "parisc: Fix ptrace syscall number modification\n\nCommit 910cd32e552e (\"parisc: Fix and enable seccomp filter support\")\nintroduced a regression in ptrace-based syscall tampering: when tracer\nchanges syscall number to -1, the kernel fails to initialize %r28 with\n-ENOSYS and subsequently fails to return the error code of the failed\nsyscall to userspace.\n\nThis erroneous behaviour could be observed with a simple strace syscall\nfault injection command which is expected to print something like this:\n\n$ strace -a0 -ewrite -einject\u003dwrite:error\u003denospc echo hello\nwrite(1, \"hello\\n\", 6) \u003d -1 ENOSPC (No space left on device) (INJECTED)\nwrite(2, \"echo: \", 6) \u003d -1 ENOSPC (No space left on device) (INJECTED)\nwrite(2, \"write error\", 11) \u003d -1 ENOSPC (No space left on device) (INJECTED)\nwrite(2, \"\\n\", 1) \u003d -1 ENOSPC (No space left on device) (INJECTED)\n+++ exited with 1 +++\n\nAfter commit 910cd32e552ea09caa89cdbe328e468979b030dd it loops printing\nsomething like this instead:\n\nwrite(1, \"hello\\n\", 6../strace: Failed to tamper with process 12345: unexpectedly got no error (return value 0, error 0)\n) \u003d 0 (INJECTED)\n\nThis bug was found by strace test suite.\n\nFixes: 910cd32e552e (\"parisc: Fix and enable seccomp filter support\")\nCc: stable@vger.kernel.org # v4.5+\nSigned-off-by: Dmitry V. Levin \u003cldv@altlinux.org\u003e\nTested-by: Helge Deller \u003cdeller@gmx.de\u003e\nSigned-off-by: Helge Deller \u003cdeller@gmx.de\u003e\n" }, { "commit": "b6835ea77729e7faf4656ca637ba53f42b8ee3fd", "tree": "d5dbbf52a9912e3ae48c1b541907464ed47030c0", "parents": [ "493a2f812446e92bcb1e69a77381b4d39808d730" ], "author": { "name": "Alexey Brodkin", "email": "abrodkin@synopsys.com", "time": "Fri Feb 08 13:55:19 2019 +0300" }, "committer": { "name": "Vineet Gupta", "email": "vgupta@synopsys.com", "time": "Thu Feb 21 11:03:20 2019 -0800" }, "message": "ARC: define ARCH_SLAB_MINALIGN \u003d 8\n\nThe default value of ARCH_SLAB_MINALIGN in \"include/linux/slab.h\" is\n\"__alignof__(unsigned long long)\" which for ARC unexpectedly turns out\nto be 4. This is not a compiler bug, but as defined by ARC ABI [1]\n\nThus slab allocator would allocate a struct which is 32-bit aligned,\nwhich is generally OK even if struct has long long members.\nThere was however potetial problem when it had any atomic64_t which\nuse LLOCKD/SCONDD instructions which are required by ISA to take\n64-bit addresses. This is the problem we ran into\n\n[ 4.015732] EXT4-fs (mmcblk0p2): re-mounted. Opts: (null)\n[ 4.167881] Misaligned Access\n[ 4.172356] Path: /bin/busybox.nosuid\n[ 4.176004] CPU: 2 PID: 171 Comm: rm Not tainted 4.19.14-yocto-standard #1\n[ 4.182851]\n[ 4.182851] [ECR ]: 0x000d0000 \u003d\u003e Check Programmer\u0027s Manual\n[ 4.190061] [EFA ]: 0xbeaec3fc\n[ 4.190061] [BLINK ]: ext4_delete_entry+0x210/0x234\n[ 4.190061] [ERET ]: ext4_delete_entry+0x13e/0x234\n[ 4.202985] [STAT32]: 0x80080002 : IE K\n[ 4.207236] BTA: 0x9009329c SP: 0xbe5b1ec4 FP: 0x00000000\n[ 4.212790] LPS: 0x9074b118 LPE: 0x9074b120 LPC: 0x00000000\n[ 4.218348] r00: 0x00000040 r01: 0x00000021 r02: 0x00000001\n...\n...\n[ 4.270510] Stack Trace:\n[ 4.274510] ext4_delete_entry+0x13e/0x234\n[ 4.278695] ext4_rmdir+0xe0/0x238\n[ 4.282187] vfs_rmdir+0x50/0xf0\n[ 4.285492] do_rmdir+0x9e/0x154\n[ 4.288802] EV_Trap+0x110/0x114\n\nThe fix is to make sure slab allocations are 64-bit aligned.\n\nDo note that atomic64_t is __attribute__((aligned(8)) which means gcc\ndoes generate 64-bit aligned references, relative to beginning of\ncontainer struct. However the issue is if the container itself is not\n64-bit aligned, atomic64_t ends up unaligned which is what this patch\nensures.\n\n[1] https://github.com/foss-for-synopsys-dwc-arc-processors/toolchain/wiki/files/ARCv2_ABI.pdf\n\nSigned-off-by: Alexey Brodkin \u003cabrodkin@synopsys.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e # 4.8+\nSigned-off-by: Vineet Gupta \u003cvgupta@synopsys.com\u003e\n[vgupta: reworked changelog, added dependency on LL64+LLSC]\n" }, { "commit": "493a2f812446e92bcb1e69a77381b4d39808d730", "tree": "81f0dcae81ba1431f584ded2934e88703efb01cb", "parents": [ "a66f2e57bd566240d8b3884eedf503928fbbe557" ], "author": { "name": "Eugeniy Paltsev", "email": "Eugeniy.Paltsev@synopsys.com", "time": "Thu Feb 14 18:07:45 2019 +0300" }, "committer": { "name": "Vineet Gupta", "email": "vgupta@synopsys.com", "time": "Thu Feb 21 11:03:19 2019 -0800" }, "message": "ARC: enable uboot support unconditionally\n\nAfter reworking U-boot args handling code and adding paranoid\narguments check we can eliminate CONFIG_ARC_UBOOT_SUPPORT and\nenable uboot support unconditionally.\n\nFor JTAG case we can assume that core registers will come up\nreset value of 0 or in worst case we rely on user passing\n\u0027-on\u003dclear_regs\u0027 to Metaware debugger.\n\nCc: stable@vger.kernel.org\nTested-by: Corentin LABBE \u003cclabbe@baylibre.com\u003e\nSigned-off-by: Eugeniy Paltsev \u003cEugeniy.Paltsev@synopsys.com\u003e\nSigned-off-by: Vineet Gupta \u003cvgupta@synopsys.com\u003e\n" }, { "commit": "a66f2e57bd566240d8b3884eedf503928fbbe557", "tree": "22baea1fbe72569f51bfb9df7cf4f2e96dece0bb", "parents": [ "e494239a007e601448110ac304fe055951f9de3b" ], "author": { "name": "Eugeniy Paltsev", "email": "Eugeniy.Paltsev@synopsys.com", "time": "Thu Feb 14 18:07:44 2019 +0300" }, "committer": { "name": "Vineet Gupta", "email": "vgupta@synopsys.com", "time": "Thu Feb 21 11:03:18 2019 -0800" }, "message": "ARC: U-boot: check arguments paranoidly\n\nHandle U-boot arguments paranoidly:\n * don\u0027t allow to pass unknown tag.\n * try to use external device tree blob only if corresponding tag\n (TAG_DTB) is set.\n * don\u0027t check uboot_tag if kernel build with no ARC_UBOOT_SUPPORT.\n\nNOTE:\nIf U-boot args are invalid we skip them and try to use embedded device\ntree blob. We can\u0027t panic on invalid U-boot args as we really pass\ninvalid args due to bug in U-boot code.\nThis happens if we don\u0027t provide external DTB to U-boot and\ndon\u0027t set \u0027bootargs\u0027 U-boot environment variable (which is default\ncase at least for HSDK board) In that case we will pass\n{r0 \u003d 1 (bootargs in r2); r1 \u003d 0; r2 \u003d 0;} to linux which is invalid.\n\nWhile I\u0027m at it refactor U-boot arguments handling code.\n\nCc: stable@vger.kernel.org\nTested-by: Corentin LABBE \u003cclabbe@baylibre.com\u003e\nSigned-off-by: Eugeniy Paltsev \u003cEugeniy.Paltsev@synopsys.com\u003e\nSigned-off-by: Vineet Gupta \u003cvgupta@synopsys.com\u003e\n" }, { "commit": "e494239a007e601448110ac304fe055951f9de3b", "tree": "2814f3f12bddf8a5cda6c50ff5523a5066a03cb9", "parents": [ "d5e3c55e01d8b1774b37b4647c30fb22f1d39077" ], "author": { "name": "Vineet Gupta", "email": "vgupta@synopsys.com", "time": "Wed Jun 06 10:20:37 2018 -0700" }, "committer": { "name": "Vineet Gupta", "email": "vgupta@synopsys.com", "time": "Thu Feb 21 11:03:18 2019 -0800" }, "message": "ARCv2: support manual regfile save on interrupts\n\nThere\u0027s a hardware bug which affects the HSDK platform, triggered by\nmicro-ops for auto-saving regfile on taken interrupt. The workaround is\nto inhibit autosave.\n\nSigned-off-by: Vineet Gupta \u003cvgupta@synopsys.com\u003e\n" }, { "commit": "d5e3c55e01d8b1774b37b4647c30fb22f1d39077", "tree": "84d772ebad7ee7e04b1f8c918ab90a9afd91cd8c", "parents": [ "cdf92962adb0cb23efc3c8bcf6465d16ab7c3a81" ], "author": { "name": "Vineet Gupta", "email": "vgupta@synopsys.com", "time": "Tue Feb 05 10:07:07 2019 -0800" }, "committer": { "name": "Vineet Gupta", "email": "vgupta@synopsys.com", "time": "Thu Feb 21 11:03:17 2019 -0800" }, "message": "ARC: uacces: remove lp_start, lp_end from clobber list\n\nNewer ARC gcc handles lp_start, lp_end in a different way and doesn\u0027t\nlike them in the clobber list.\n\nSigned-off-by: Vineet Gupta \u003cvgupta@synopsys.com\u003e\n" }, { "commit": "cdf92962adb0cb23efc3c8bcf6465d16ab7c3a81", "tree": "fcf75ab1804962f697c0e2b26126d2a4c3c34800", "parents": [ "f8a15f97664178f27dfbf86a38f780a532cb6df0" ], "author": { "name": "Eugeniy Paltsev", "email": "Eugeniy.Paltsev@synopsys.com", "time": "Mon Feb 04 21:41:51 2019 +0300" }, "committer": { "name": "Vineet Gupta", "email": "vgupta@synopsys.com", "time": "Thu Feb 21 11:03:16 2019 -0800" }, "message": "ARC: fix actionpoints configuration detection\n\nFix reversed logic while actionpoints configuration (full/min)\ndetection.\n\nFixies: 7dd380c338f1e (\"ARC: boot log: print Action point details\")\nSigned-off-by: Eugeniy Paltsev \u003cEugeniy.Paltsev@synopsys.com\u003e\nSigned-off-by: Vineet Gupta \u003cvgupta@synopsys.com\u003e\n" }, { "commit": "f8a15f97664178f27dfbf86a38f780a532cb6df0", "tree": "50efe7e5154fbbbc77f8c46b2a53c6773e2b6493", "parents": [ "252f6e8eae909bc075a1b1e3b9efb095ae4c0b56" ], "author": { "name": "Eugeniy Paltsev", "email": "eugeniy.paltsev@synopsys.com", "time": "Wed Jan 30 19:32:40 2019 +0300" }, "committer": { "name": "Vineet Gupta", "email": "vgupta@synopsys.com", "time": "Thu Feb 21 11:03:16 2019 -0800" }, "message": "ARCv2: lib: memcpy: fix doing prefetchw outside of buffer\n\nARCv2 optimized memcpy uses PREFETCHW instruction for prefetching the\nnext cache line but doesn\u0027t ensure that the line is not past the end of\nthe buffer. PRETECHW changes the line ownership and marks it dirty,\nwhich can cause data corruption if this area is used for DMA IO.\n\nFix the issue by avoiding the PREFETCHW. This leads to performance\ndegradation but it is OK as we\u0027ll introduce new memcpy implementation\noptimized for unaligned memory access using.\n\nWe also cut off all PREFETCH instructions at they are quite useless\nhere:\n * we call PREFETCH right before LOAD instruction call.\n * we copy 16 or 32 bytes of data (depending on CONFIG_ARC_HAS_LL64)\n in a main logical loop. so we call PREFETCH 4 times (or 2 times)\n for each L1 cache line (in case of 64B L1 cache Line which is\n default case). Obviously this is not optimal.\n\nSigned-off-by: Eugeniy Paltsev \u003cEugeniy.Paltsev@synopsys.com\u003e\nSigned-off-by: Vineet Gupta \u003cvgupta@synopsys.com\u003e\n" }, { "commit": "252f6e8eae909bc075a1b1e3b9efb095ae4c0b56", "tree": "71cd3352389d5a4fe7b95832f6911a8e7450fc46", "parents": [ "f17b5f06cb92ef2250513a1e154c47b78df07d40" ], "author": { "name": "Eugeniy Paltsev", "email": "Eugeniy.Paltsev@synopsys.com", "time": "Wed Jan 16 14:29:50 2019 +0300" }, "committer": { "name": "Vineet Gupta", "email": "vgupta@synopsys.com", "time": "Thu Feb 21 11:03:15 2019 -0800" }, "message": "ARCv2: Enable unaligned access in early ASM code\n\nIt is currently done in arc_init_IRQ() which might be too late\nconsidering gcc 7.3.1 onwards (GNU 2018.03) generates unaligned\nmemory accesses by default\n\nCc: stable@vger.kernel.org #4.4+\nSigned-off-by: Eugeniy Paltsev \u003cEugeniy.Paltsev@synopsys.com\u003e\nSigned-off-by: Vineet Gupta \u003cvgupta@synopsys.com\u003e\n[vgupta: rewrote changelog]\n" }, { "commit": "8a61716ff2ab23eddd1f7a05a075a374e4d0c3d4", "tree": "f9534a62abcc72668a934948206bc1446afc44a8", "parents": [ "d6622d913a637bce224f74425a9dfe734f946358", "04242ff3ac0abbaa4362f97781dac268e6c3541a" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:43:37 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:43:37 2019 -0800" }, "message": "Merge tag \u0027ceph-for-5.0-rc8\u0027 of git://github.com/ceph/ceph-client\n\nPull ceph fixes from Ilya Dryomov:\n \"Two bug fixes for old issues, both marked for stable\"\n\n* tag \u0027ceph-for-5.0-rc8\u0027 of git://github.com/ceph/ceph-client:\n ceph: avoid repeatedly adding inode to mdsc-\u003esnap_flush_list\n libceph: handle an empty authorize reply\n" }, { "commit": "d6622d913a637bce224f74425a9dfe734f946358", "tree": "b51df27050950634362c11b446a987986bc61892", "parents": [ "7c90325390c9220afdee54e13424d2fb709f120a", "74698f6971f25d045301139413578865fc2bd8f9" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:11:36 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:11:36 2019 -0800" }, "message": "Merge tag \u0027arm64-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux\n\nPull late arm64 fixes from Will Deacon:\n \"Three small arm64 fixes for 5.0.\n\n They fix a build breakage with clang introduced in 4.20, an oversight\n in our sigframe restoration relating to the SSBS bit and a boot fix\n for systems with newer revisions of our interrupt controller.\n\n Summary:\n\n - Fix handling of PSTATE.SSBS bit in sigreturn()\n\n - Fix version checking of the GIC during early boot\n\n - Fix clang builds failing due to use of NEON in the crypto code\"\n\n* tag \u0027arm64-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:\n arm64: Relax GIC version check during early boot\n arm64/neon: Disable -Wincompatible-pointer-types when building with Clang\n arm64: fix SSBS sanitization\n" }, { "commit": "7c90325390c9220afdee54e13424d2fb709f120a", "tree": "fda7156eab793ae68ab20cd299446b33f0de74c1", "parents": [ "f6163d67cc31b8f2a946c4df82be3c6dd918412d", "891cb2a72d821f930a39d5900cb7a3aa752c1d5b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:05:04 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:05:04 2019 -0800" }, "message": "Merge branch \u0027akpm\u0027 (patches from Andrew)\n\nMerge misc fixes from Andrew Morton:\n \"23 fixes\"\n\n* emailed patches from Andrew Morton \u003cakpm@linux-foundation.org\u003e: (23 commits)\n mm, memory_hotplug: fix off-by-one in is_pageblock_removable\n mm: don\u0027t let userspace spam allocations warnings\n slub: fix a crash with SLUB_DEBUG + KASAN_SW_TAGS\n kasan, slab: remove redundant kasan_slab_alloc hooks\n kasan, slab: make freelist stored without tags\n kasan, slab: fix conflicts with CONFIG_HARDENED_USERCOPY\n kasan: prevent tracing of tags.c\n kasan: fix random seed generation for tag-based mode\n tmpfs: fix link accounting when a tmpfile is linked in\n psi: avoid divide-by-zero crash inside virtual machines\n mm: handle lru_add_drain_all for UP properly\n mm, page_alloc: fix a division by zero error when boosting watermarks v2\n mm/debug.c: fix __dump_page() for poisoned pages\n proc, oom: do not report alien mms when setting oom_score_adj\n slub: fix SLAB_CONSISTENCY_CHECKS + KASAN_SW_TAGS\n kasan, slub: fix more conflicts with CONFIG_SLAB_FREELIST_HARDENED\n kasan, slub: fix conflicts with CONFIG_SLAB_FREELIST_HARDENED\n kasan, slub: move kasan_poison_slab hook before page_address\n kmemleak: account for tagged pointers when calculating pointer range\n kasan, kmemleak: pass tagged pointers to kmemleak\n ...\n" }, { "commit": "891cb2a72d821f930a39d5900cb7a3aa752c1d5b", "tree": "b2dd52b6875ed0848ac510643257ae68d6331d8c", "parents": [ "6c8fcc096be9d02f478c508052a41a4430506ab3" ], "author": { "name": "Michal Hocko", "email": "mhocko@suse.com", "time": "Wed Feb 20 22:20:46 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:01:01 2019 -0800" }, "message": "mm, memory_hotplug: fix off-by-one in is_pageblock_removable\n\nRong Chen has reported the following boot crash:\n\n PGD 0 P4D 0\n Oops: 0000 [#1] PREEMPT SMP PTI\n CPU: 1 PID: 239 Comm: udevd Not tainted 5.0.0-rc4-00149-gefad4e4 #1\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014\n RIP: 0010:page_mapping+0x12/0x80\n Code: 5d c3 48 89 df e8 0e ad 02 00 85 c0 75 da 89 e8 5b 5d c3 0f 1f 44 00 00 53 48 89 fb 48 8b 43 08 48 8d 50 ff a8 01 48 0f 45 da \u003c48\u003e 8b 53 08 48 8d 42 ff 83 e2 01 48 0f 44 c3 48 83 38 ff 74 2f 48\n RSP: 0018:ffff88801fa87cd8 EFLAGS: 00010202\n RAX: ffffffffffffffff RBX: fffffffffffffffe RCX: 000000000000000a\n RDX: fffffffffffffffe RSI: ffffffff820b9a20 RDI: ffff88801e5c0000\n RBP: 6db6db6db6db6db7 R08: ffff88801e8bb000 R09: 0000000001b64d13\n R10: ffff88801fa87cf8 R11: 0000000000000001 R12: ffff88801e640000\n R13: ffffffff820b9a20 R14: ffff88801f145258 R15: 0000000000000001\n FS: 00007fb2079817c0(0000) GS:ffff88801dd00000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000000000000006 CR3: 000000001fa82000 CR4: 00000000000006a0\n Call Trace:\n __dump_page+0x14/0x2c0\n is_mem_section_removable+0x24c/0x2c0\n removable_show+0x87/0xa0\n dev_attr_show+0x25/0x60\n sysfs_kf_seq_show+0xba/0x110\n seq_read+0x196/0x3f0\n __vfs_read+0x34/0x180\n vfs_read+0xa0/0x150\n ksys_read+0x44/0xb0\n do_syscall_64+0x5e/0x4a0\n entry_SYSCALL_64_after_hwframe+0x49/0xbe\n\nand bisected it down to commit efad4e475c31 (\"mm, memory_hotplug:\nis_mem_section_removable do not pass the end of a zone\").\n\nThe reason for the crash is that the mapping is garbage for poisoned\n(uninitialized) page. This shouldn\u0027t happen as all pages in the zone\u0027s\nboundary should be initialized.\n\nLater debugging revealed that the actual problem is an off-by-one when\nevaluating the end_page. \u0027start_pfn + nr_pages\u0027 resp \u0027zone_end_pfn\u0027\nrefers to a pfn after the range and as such it might belong to a\ndifferen memory section.\n\nThis along with CONFIG_SPARSEMEM then makes the loop condition\ncompletely bogus because a pointer arithmetic doesn\u0027t work for pages\nfrom two different sections in that memory model.\n\nFix the issue by reworking is_pageblock_removable to be pfn based and\nonly use struct page where necessary. This makes the code slightly\neasier to follow and we will remove the problematic pointer arithmetic\ncompletely.\n\nLink: http://lkml.kernel.org/r/20190218181544.14616-1-mhocko@kernel.org\nFixes: efad4e475c31 (\"mm, memory_hotplug: is_mem_section_removable do not pass the end of a zone\")\nSigned-off-by: Michal Hocko \u003cmhocko@suse.com\u003e\nReported-by: \u003crong.a.chen@intel.com\u003e\nTested-by: \u003crong.a.chen@intel.com\u003e\nAcked-by: Mike Rapoport \u003crppt@linux.ibm.com\u003e\nReviewed-by: Oscar Salvador \u003cosalvador@suse.de\u003e\nCc: Matthew Wilcox \u003cwilly@infradead.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "6c8fcc096be9d02f478c508052a41a4430506ab3", "tree": "5de75352c94c318dc80a70a6598e09a986f9f962", "parents": [ "6373dca16c911b2828ef8d836d7f6f1800e1bbbc" ], "author": { "name": "Daniel Vetter", "email": "daniel.vetter@ffwll.ch", "time": "Wed Feb 20 22:20:42 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:01:01 2019 -0800" }, "message": "mm: don\u0027t let userspace spam allocations warnings\n\nmemdump_user usually gets fed unchecked userspace input. Blasting a\nfull backtrace into dmesg every time is a bit excessive - I\u0027m not sure\non the kernel rule in general, but at least in drm we\u0027re trying not to\nlet unpriviledge userspace spam the logs freely. Definitely not entire\nwarning backtraces.\n\nIt also means more filtering for our CI, because our testsuite exercises\nthese corner cases and so hits these a lot.\n\nLink: http://lkml.kernel.org/r/20190220204058.11676-1-daniel.vetter@ffwll.ch\nSigned-off-by: Daniel Vetter \u003cdaniel.vetter@intel.com\u003e\nReviewed-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nAcked-by: Michal Hocko \u003cmhocko@suse.com\u003e\nReviewed-by: Kees Cook \u003ckeescook@chromium.org\u003e\nCc: Mike Rapoport \u003crppt@linux.vnet.ibm.com\u003e\nCc: Roman Gushchin \u003cguro@fb.com\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: Jan Stancek \u003cjstancek@redhat.com\u003e\nCc: Andrey Ryabinin \u003caryabinin@virtuozzo.com\u003e\nCc: \"Michael S. Tsirkin\" \u003cmst@redhat.com\u003e\nCc: Huang Ying \u003cying.huang@intel.com\u003e\nCc: Bartosz Golaszewski \u003cbrgl@bgdev.pl\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "6373dca16c911b2828ef8d836d7f6f1800e1bbbc", "tree": "b5c45cf2d495801acea95b30920d422cbcc420b2", "parents": [ "557ea25383a231fe3ffc72881ada35c24b960dbc" ], "author": { "name": "Qian Cai", "email": "cai@lca.pw", "time": "Wed Feb 20 22:20:37 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:01:00 2019 -0800" }, "message": "slub: fix a crash with SLUB_DEBUG + KASAN_SW_TAGS\n\nIn process_slab(), \"p \u003d get_freepointer()\" could return a tagged\npointer, but \"addr \u003d page_address()\" always return a native pointer. As\nthe result, slab_index() is messed up here,\n\n return (p - addr) / s-\u003esize;\n\nAll other callers of slab_index() have the same situation where \"addr\"\nis from page_address(), so just need to untag \"p\".\n\n # cat /sys/kernel/slab/hugetlbfs_inode_cache/alloc_calls\n\n Unable to handle kernel paging request at virtual address 2bff808aa4856d48\n Mem abort info:\n ESR \u003d 0x96000007\n Exception class \u003d DABT (current EL), IL \u003d 32 bits\n SET \u003d 0, FnV \u003d 0\n EA \u003d 0, S1PTW \u003d 0\n Data abort info:\n ISV \u003d 0, ISS \u003d 0x00000007\n CM \u003d 0, WnR \u003d 0\n swapper pgtable: 64k pages, 48-bit VAs, pgdp \u003d 0000000002498338\n [2bff808aa4856d48] pgd\u003d00000097fcfd0003, pud\u003d00000097fcfd0003, pmd\u003d00000097fca30003, pte\u003d00e8008b24850712\n Internal error: Oops: 96000007 [#1] SMP\n CPU: 3 PID: 79210 Comm: read_all Tainted: G L 5.0.0-rc7+ #84\n Hardware name: HPE Apollo 70 /C01_APACHE_MB , BIOS L50_5.13_1.0.6 07/10/2018\n pstate: 00400089 (nzcv daIf +PAN -UAO)\n pc : get_map+0x78/0xec\n lr : get_map+0xa0/0xec\n sp : aeff808989e3f8e0\n x29: aeff808989e3f940 x28: ffff800826200000\n x27: ffff100012d47000 x26: 9700000000002500\n x25: 0000000000000001 x24: 52ff8008200131f8\n x23: 52ff8008200130a0 x22: 52ff800820013098\n x21: ffff800826200000 x20: ffff100013172ba0\n x19: 2bff808a8971bc00 x18: ffff1000148f5538\n x17: 000000000000001b x16: 00000000000000ff\n x15: ffff1000148f5000 x14: 00000000000000d2\n x13: 0000000000000001 x12: 0000000000000000\n x11: 0000000020000002 x10: 2bff808aa4856d48\n x9 : 0000020000000000 x8 : 68ff80082620ebb0\n x7 : 0000000000000000 x6 : ffff1000105da1dc\n x5 : 0000000000000000 x4 : 0000000000000000\n x3 : 0000000000000010 x2 : 2bff808a8971bc00\n x1 : ffff7fe002098800 x0 : ffff80082620ceb0\n Process read_all (pid: 79210, stack limit \u003d 0x00000000f65b9361)\n Call trace:\n get_map+0x78/0xec\n process_slab+0x7c/0x47c\n list_locations+0xb0/0x3c8\n alloc_calls_show+0x34/0x40\n slab_attr_show+0x34/0x48\n sysfs_kf_seq_show+0x2e4/0x570\n kernfs_seq_show+0x12c/0x1a0\n seq_read+0x48c/0xf84\n kernfs_fop_read+0xd4/0x448\n __vfs_read+0x94/0x5d4\n vfs_read+0xcc/0x194\n ksys_read+0x6c/0xe8\n __arm64_sys_read+0x68/0xb0\n el0_svc_handler+0x230/0x3bc\n el0_svc+0x8/0xc\n Code: d3467d2a 9ac92329 8b0a0e6a f9800151 (c85f7d4b)\n ---[ end trace a383a9a44ff13176 ]---\n Kernel panic - not syncing: Fatal exception\n SMP: stopping secondary CPUs\n SMP: failed to stop secondary CPUs 1-7,32,40,127\n Kernel Offset: disabled\n CPU features: 0x002,20000c18\n Memory Limit: none\n ---[ end Kernel panic - not syncing: Fatal exception ]---\n\nLink: http://lkml.kernel.org/r/20190220020251.82039-1-cai@lca.pw\nSigned-off-by: Qian Cai \u003ccai@lca.pw\u003e\nReviewed-by: Andrey Konovalov \u003candreyknvl@google.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "557ea25383a231fe3ffc72881ada35c24b960dbc", "tree": "510f434a242d1732c618e0c1018a4c97f7b321f3", "parents": [ "51dedad06b5f6c3eea7ec1069631b1ef7796912a" ], "author": { "name": "Andrey Konovalov", "email": "andreyknvl@google.com", "time": "Wed Feb 20 22:20:33 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:01:00 2019 -0800" }, "message": "kasan, slab: remove redundant kasan_slab_alloc hooks\n\nkasan_slab_alloc() calls in kmem_cache_alloc() and kmem_cache_alloc_node()\nare redundant as they are already called via slab_alloc/slab_alloc_node()-\u003e\nslab_post_alloc_hook()-\u003ekasan_slab_alloc(). Remove them.\n\nLink: http://lkml.kernel.org/r/4ca1655cdcfc4379c49c50f7bf80f81c4ad01485.1550602886.git.andreyknvl@google.com\nSigned-off-by: Andrey Konovalov \u003candreyknvl@google.com\u003e\nTested-by: Qian Cai \u003ccai@lca.pw\u003e\nCc: Alexander Potapenko \u003cglider@google.com\u003e\nCc: Andrey Ryabinin \u003caryabinin@virtuozzo.com\u003e\nCc: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nCc: Dmitry Vyukov \u003cdvyukov@google.com\u003e\nCc: Evgeniy Stepanov \u003ceugenis@google.com\u003e\nCc: Kostya Serebryany \u003ckcc@google.com\u003e\nCc: Vincenzo Frascino \u003cvincenzo.frascino@arm.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "51dedad06b5f6c3eea7ec1069631b1ef7796912a", "tree": "f98818f9d27bb7bcc606d6a610291d12fdeda720", "parents": [ "219667c23c68eb3dbc0d5662b9246f28477fe529" ], "author": { "name": "Andrey Konovalov", "email": "andreyknvl@google.com", "time": "Wed Feb 20 22:20:28 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:01:00 2019 -0800" }, "message": "kasan, slab: make freelist stored without tags\n\nSimilarly to \"kasan, slub: move kasan_poison_slab hook before\npage_address\", move kasan_poison_slab() before alloc_slabmgmt(), which\ncalls page_address(), to make page_address() return value to be\nnon-tagged. This, combined with calling kasan_reset_tag() for off-slab\nslab management object, leads to freelist being stored non-tagged.\n\nLink: http://lkml.kernel.org/r/dfb53b44a4d00de3879a05a9f04c1f55e584f7a1.1550602886.git.andreyknvl@google.com\nSigned-off-by: Andrey Konovalov \u003candreyknvl@google.com\u003e\nTested-by: Qian Cai \u003ccai@lca.pw\u003e\nCc: Alexander Potapenko \u003cglider@google.com\u003e\nCc: Andrey Ryabinin \u003caryabinin@virtuozzo.com\u003e\nCc: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nCc: Dmitry Vyukov \u003cdvyukov@google.com\u003e\nCc: Evgeniy Stepanov \u003ceugenis@google.com\u003e\nCc: Kostya Serebryany \u003ckcc@google.com\u003e\nCc: Vincenzo Frascino \u003cvincenzo.frascino@arm.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "219667c23c68eb3dbc0d5662b9246f28477fe529", "tree": "39638812a6fd9da34c00cc7465c81035ec09af31", "parents": [ "dc15a8a2543cb9ebe67998eefe2880ce1a20d42e" ], "author": { "name": "Andrey Konovalov", "email": "andreyknvl@google.com", "time": "Wed Feb 20 22:20:25 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:01:00 2019 -0800" }, "message": "kasan, slab: fix conflicts with CONFIG_HARDENED_USERCOPY\n\nSimilarly to commit 96fedce27e13 (\"kasan: make tag based mode work with\nCONFIG_HARDENED_USERCOPY\"), we need to reset pointer tags in\n__check_heap_object() in mm/slab.c before doing any pointer math.\n\nLink: http://lkml.kernel.org/r/9a5c0f958db10e69df5ff9f2b997866b56b7effc.1550602886.git.andreyknvl@google.com\nSigned-off-by: Andrey Konovalov \u003candreyknvl@google.com\u003e\nTested-by: Qian Cai \u003ccai@lca.pw\u003e\nCc: Alexander Potapenko \u003cglider@google.com\u003e\nCc: Andrey Ryabinin \u003caryabinin@virtuozzo.com\u003e\nCc: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nCc: Dmitry Vyukov \u003cdvyukov@google.com\u003e\nCc: Evgeniy Stepanov \u003ceugenis@google.com\u003e\nCc: Kostya Serebryany \u003ckcc@google.com\u003e\nCc: Vincenzo Frascino \u003cvincenzo.frascino@arm.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "dc15a8a2543cb9ebe67998eefe2880ce1a20d42e", "tree": "aa5d23c8621fc5971a14a6c038ae70b16455277d", "parents": [ "3f41b609382388f95c0a05b69b8db0d706adafb4" ], "author": { "name": "Andrey Konovalov", "email": "andreyknvl@google.com", "time": "Wed Feb 20 22:20:20 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:01:00 2019 -0800" }, "message": "kasan: prevent tracing of tags.c\n\nSimilarly to commit 0d0c8de8788b (\"kasan: mark file common so ftrace\ndoesn\u0027t trace it\") add the -pg flag to mm/kasan/tags.c to prevent\nconflicts with tracing.\n\nLink: http://lkml.kernel.org/r/9c4c3ce5ccfb894c7fe66d91de7c1da2787b4da4.1550602886.git.andreyknvl@google.com\nSigned-off-by: Andrey Konovalov \u003candreyknvl@google.com\u003e\nReported-by: Qian Cai \u003ccai@lca.pw\u003e\nTested-by: Qian Cai \u003ccai@lca.pw\u003e\nCc: Andrey Ryabinin \u003caryabinin@virtuozzo.com\u003e\nCc: Alexander Potapenko \u003cglider@google.com\u003e\nCc: Dmitry Vyukov \u003cdvyukov@google.com\u003e\nCc: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nCc: Vincenzo Frascino \u003cvincenzo.frascino@arm.com\u003e\nCc: Kostya Serebryany \u003ckcc@google.com\u003e\nCc: Evgeniy Stepanov \u003ceugenis@google.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "3f41b609382388f95c0a05b69b8db0d706adafb4", "tree": "cf5fed9746400cbda15f47acd7acceab80aa1fd5", "parents": [ "1062af920c07f5b54cf5060fde3339da6df0cf6b" ], "author": { "name": "Andrey Konovalov", "email": "andreyknvl@google.com", "time": "Wed Feb 20 22:20:15 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:01:00 2019 -0800" }, "message": "kasan: fix random seed generation for tag-based mode\n\nThere are two issues with assigning random percpu seeds right now:\n\n1. We use for_each_possible_cpu() to iterate over cpus, but cpumask is\n not set up yet at the moment of kasan_init(), and thus we only set\n the seed for cpu #0.\n\n2. A call to get_random_u32() always returns the same number and produces\n a message in dmesg, since the random subsystem is not yet initialized.\n\nFix 1 by calling kasan_init_tags() after cpumask is set up.\n\nFix 2 by using get_cycles() instead of get_random_u32(). This gives us\nlower quality random numbers, but it\u0027s good enough, as KASAN is meant to\nbe used as a debugging tool and not a mitigation.\n\nLink: http://lkml.kernel.org/r/1f815cc914b61f3516ed4cc9bfd9eeca9bd5d9de.1550677973.git.andreyknvl@google.com\nSigned-off-by: Andrey Konovalov \u003candreyknvl@google.com\u003e\nCc: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nCc: Will Deacon \u003cwill.deacon@arm.com\u003e\nCc: Andrey Ryabinin \u003caryabinin@virtuozzo.com\u003e\nCc: Alexander Potapenko \u003cglider@google.com\u003e\nCc: Dmitry Vyukov \u003cdvyukov@google.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "1062af920c07f5b54cf5060fde3339da6df0cf6b", "tree": "42c3494136a9d8338ddfdbeef4db7a726d757b0d", "parents": [ "4e37504d1c49eec6434d0cc97278d2b51c9e8763" ], "author": { "name": "Darrick J. Wong", "email": "darrick.wong@oracle.com", "time": "Thu Feb 21 08:48:09 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:01:00 2019 -0800" }, "message": "tmpfs: fix link accounting when a tmpfile is linked in\n\ntmpfs has a peculiarity of accounting hard links as if they were\nseparate inodes: so that when the number of inodes is limited, as it is\nby default, a user cannot soak up an unlimited amount of unreclaimable\ndcache memory just by repeatedly linking a file.\n\nBut when v3.11 added O_TMPFILE, and the ability to use linkat() on the\nfd, we missed accommodating this new case in tmpfs: \"df -i\" shows that\nan extra \"inode\" remains accounted after the file is unlinked and the fd\nclosed and the actual inode evicted. If a user repeatedly links\ntmpfiles into a tmpfs, the limit will be hit (ENOSPC) even after they\nare deleted.\n\nJust skip the extra reservation from shmem_link() in this case: there\u0027s\na sense in which this first link of a tmpfile is then cheaper than a\nhard link of another file, but the accounting works out, and there\u0027s\nstill good limiting, so no need to do anything more complicated.\n\nLink: http://lkml.kernel.org/r/alpine.LSU.2.11.1902182134370.7035@eggly.anvils\nFixes: f4e0c30c191 (\"allow the temp files created by open() to be linked to\")\nSigned-off-by: Darrick J. Wong \u003cdarrick.wong@oracle.com\u003e\nSigned-off-by: Hugh Dickins \u003chughd@google.com\u003e\nReported-by: Matej Kupljen \u003cmatej.kupljen@gmail.com\u003e\nAcked-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "4e37504d1c49eec6434d0cc97278d2b51c9e8763", "tree": "73c0d708f385df3d24497b843b5697573443e9dd", "parents": [ "6ea183d60c469560e7b08a83c9804299e84ec9eb" ], "author": { "name": "Johannes Weiner", "email": "hannes@cmpxchg.org", "time": "Wed Feb 20 22:19:59 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:01:00 2019 -0800" }, "message": "psi: avoid divide-by-zero crash inside virtual machines\n\nWe\u0027ve been seeing hard-to-trigger psi crashes when running inside VM\ninstances:\n\n divide error: 0000 [#1] SMP PTI\n Modules linked in: [...]\n CPU: 0 PID: 212 Comm: kworker/0:2 Not tainted 4.16.18-119_fbk9_3817_gfe944c98d695 #119\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 0.0.0 02/06/2015\n Workqueue: events psi_clock\n RIP: 0010:psi_update_stats+0x270/0x490\n RSP: 0018:ffffc90001117e10 EFLAGS: 00010246\n RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8800a35a13f8\n RDX: 0000000000000000 RSI: ffff8800a35a1340 RDI: 0000000000000000\n RBP: 0000000000000658 R08: ffff8800a35a1470 R09: 0000000000000000\n R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000\n R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000f8502\n FS: 0000000000000000(0000) GS:ffff88023fc00000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00007fbe370fa000 CR3: 00000000b1e3a000 CR4: 00000000000006f0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n psi_clock+0x12/0x50\n process_one_work+0x1e0/0x390\n worker_thread+0x2b/0x3c0\n ? rescuer_thread+0x330/0x330\n kthread+0x113/0x130\n ? kthread_create_worker_on_cpu+0x40/0x40\n ? SyS_exit_group+0x10/0x10\n ret_from_fork+0x35/0x40\n Code: 48 0f 47 c7 48 01 c2 45 85 e4 48 89 16 0f 85 e6 00 00 00 4c 8b 49 10 4c 8b 51 08 49 69 d9 f2 07 00 00 48 6b c0 64 4c 8b 29 31 d2 \u003c48\u003e f7 f7 49 69 d5 8d 06 00 00 48 89 c5 4c 69 f0 00 98 0b 00 48\n\nThe Code-line points to `period` being 0 inside update_stats(), and we\ndivide by that when calculating that period\u0027s pressure percentage.\n\nThe elapsed period should never be 0. The reason this can happen is due\nto an off-by-one in the idle time / missing period calculation combined\nwith a coarse sched_clock() in the virtual machine.\n\nThe target time for aggregation is advanced into the future on a fixed\ngrid to prevent clock drift. So when an aggregation runs after some idle\nperiod, we can not just set it to \"now + psi_period\", but have to\ncalculate the downtime and advance the target time relative to itself.\n\nHowever, if the aggregator was disabled exactly one psi_period (ns), we\ndrop one idle period in the calculation due to a \u003e when we should do \u003e\u003d.\nIn that case, next_update will be advanced from \u0027now - psi_period\u0027 to\n\u0027now\u0027 when it should be moved to \u0027now + psi_period\u0027. The run finishes\nwith last_update \u003d\u003d next_update \u003d\u003d sched_clock().\n\nWith hardware clocks, this exact nanosecond match isn\u0027t likely in the\nfirst place; but if it does happen, the clock will still have moved on and\nthe period non-zero by the time the worker runs. A pointlessly short\nperiod, but besides the extra work, no harm no foul. However, a slow\nsched_clock() like we have on VMs might not have advanced either by the\ntime the worker runs again. And when we calculate the elapsed period, the\nresult, our pressure divisor, will be 0. Ouch.\n\nFix this by correctly handling the situation when the elapsed time between\naggregation runs is precisely two periods, and advance the expiration\ntimestamp correctly to period into the future.\n\nLink: http://lkml.kernel.org/r/20190214193157.15788-1-hannes@cmpxchg.org\nSigned-off-by: Johannes Weiner \u003channes@cmpxchg.org\u003e\nReported-by: Łukasz Siudut \u003clsiudut@fb.com\nReviewed-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "6ea183d60c469560e7b08a83c9804299e84ec9eb", "tree": "df0df79b3330c9b0e556e075ec5b1a250e9b5fab", "parents": [ "94b3334cbebea34d56a7e6321c6fe9d89b309a49" ], "author": { "name": "Michal Hocko", "email": "mhocko@suse.com", "time": "Wed Feb 20 22:19:54 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:01:00 2019 -0800" }, "message": "mm: handle lru_add_drain_all for UP properly\n\nSince for_each_cpu(cpu, mask) added by commit 2d3854a37e8b767a\n(\"cpumask: introduce new API, without changing anything\") did not\nevaluate the mask argument if NR_CPUS \u003d\u003d 1 due to CONFIG_SMP\u003dn,\nlru_add_drain_all() is hitting WARN_ON() at __flush_work() added by\ncommit 4d43d395fed12463 (\"workqueue: Try to catch flush_work() without\nINIT_WORK().\") by unconditionally calling flush_work() [1].\n\nWorkaround this issue by using CONFIG_SMP\u003dn specific lru_add_drain_all\nimplementation. There is no real need to defer the implementation to\nthe workqueue as the draining is going to happen on the local cpu. So\nalias lru_add_drain_all to lru_add_drain which does all the necessary\nwork.\n\n[akpm@linux-foundation.org: fix various build warnings]\n[1] https://lkml.kernel.org/r/18a30387-6aa5-6123-e67c-57579ecc3f38@roeck-us.net\nLink: http://lkml.kernel.org/r/20190213124334.GH4525@dhcp22.suse.cz\nSigned-off-by: Michal Hocko \u003cmhocko@suse.com\u003e\nReported-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nDebugged-by: Tetsuo Handa \u003cpenguin-kernel@I-love.SAKURA.ne.jp\u003e\nCc: Tejun Heo \u003ctj@kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "94b3334cbebea34d56a7e6321c6fe9d89b309a49", "tree": "594051108f28d96925d28f169933ade8b23cad9d", "parents": [ "311ade0eab192f0abee2f70bce761bf0d66990c4" ], "author": { "name": "Mel Gorman", "email": "mgorman@techsingularity.net", "time": "Wed Feb 20 22:19:49 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:01:00 2019 -0800" }, "message": "mm, page_alloc: fix a division by zero error when boosting watermarks v2\n\nYury Norov reported that an arm64 KVM instance could not boot since\nafter v5.0-rc1 and could addressed by reverting the patches\n\n 1c30844d2dfe272d58c (\"mm: reclaim small amounts of memory when an external\n 73444bc4d8f92e46a20 (\"mm, page_alloc: do not wake kswapd with zone lock held\")\n\nThe problem is that a division by zero error is possible if boosting\noccurs very early in boot if the system has very little memory. This\npatch avoids the division by zero error.\n\nLink: http://lkml.kernel.org/r/20190213143012.GT9565@techsingularity.net\nFixes: 1c30844d2dfe (\"mm: reclaim small amounts of memory when an external fragmentation event occurs\")\nSigned-off-by: Mel Gorman \u003cmgorman@techsingularity.net\u003e\nReported-by: Yury Norov \u003cyury.norov@gmail.com\u003e\nTested-by: Yury Norov \u003cyury.norov@gmail.com\u003e\nTested-by: Will Deacon \u003cwill.deacon@arm.com\u003e\nAcked-by: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: Andrea Arcangeli \u003caarcange@redhat.com\u003e\nCc: David Rientjes \u003crientjes@google.com\u003e\nCc: Michal Hocko \u003cmhocko@kernel.org\u003e\nCc: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "311ade0eab192f0abee2f70bce761bf0d66990c4", "tree": "1e54fca1750f504ebe6c7a4a1b149f9910b15bd8", "parents": [ "b2b469939e93458753cfbf8282ad52636495965e" ], "author": { "name": "Robin Murphy", "email": "robin.murphy@arm.com", "time": "Wed Feb 20 22:19:45 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:01:00 2019 -0800" }, "message": "mm/debug.c: fix __dump_page() for poisoned pages\n\nEvaluating page_mapping() on a poisoned page ends up dereferencing junk\nand making PF_POISONED_CHECK() considerably crashier than intended:\n\n Unable to handle kernel NULL pointer dereference at virtual address 0000000000000006\n Mem abort info:\n ESR \u003d 0x96000005\n Exception class \u003d DABT (current EL), IL \u003d 32 bits\n SET \u003d 0, FnV \u003d 0\n EA \u003d 0, S1PTW \u003d 0\n Data abort info:\n ISV \u003d 0, ISS \u003d 0x00000005\n CM \u003d 0, WnR \u003d 0\n user pgtable: 4k pages, 39-bit VAs, pgdp \u003d 00000000c2f6ac38\n [0000000000000006] pgd\u003d0000000000000000, pud\u003d0000000000000000\n Internal error: Oops: 96000005 [#1] PREEMPT SMP\n Modules linked in:\n CPU: 2 PID: 491 Comm: bash Not tainted 5.0.0-rc1+ #1\n Hardware name: ARM LTD ARM Juno Development Platform/ARM Juno Development Platform, BIOS EDK II Dec 17 2018\n pstate: 00000005 (nzcv daif -PAN -UAO)\n pc : page_mapping+0x18/0x118\n lr : __dump_page+0x1c/0x398\n Process bash (pid: 491, stack limit \u003d 0x000000004ebd4ecd)\n Call trace:\n page_mapping+0x18/0x118\n __dump_page+0x1c/0x398\n dump_page+0xc/0x18\n remove_store+0xbc/0x120\n dev_attr_store+0x18/0x28\n sysfs_kf_write+0x40/0x50\n kernfs_fop_write+0x130/0x1d8\n __vfs_write+0x30/0x180\n vfs_write+0xb4/0x1a0\n ksys_write+0x60/0xd0\n __arm64_sys_write+0x18/0x20\n el0_svc_common+0x94/0xf8\n el0_svc_handler+0x68/0x70\n el0_svc+0x8/0xc\n Code: f9400401 d1000422 f240003f 9a801040 (f9400402)\n ---[ end trace cdb5eb5bf435cecb ]---\n\nFix that by not inspecting the mapping until we\u0027ve determined that it\u0027s\nlikely to be valid. Now the above condition still ends up stopping the\nkernel, but in the correct manner:\n\n page:ffffffbf20000000 is uninitialized and poisoned\n raw: ffffffffffffffff ffffffffffffffff ffffffffffffffff ffffffffffffffff\n raw: ffffffffffffffff ffffffffffffffff ffffffffffffffff ffffffffffffffff\n page dumped because: VM_BUG_ON_PAGE(PagePoisoned(p))\n ------------[ cut here ]------------\n kernel BUG at ./include/linux/mm.h:1006!\n Internal error: Oops - BUG: 0 [#1] PREEMPT SMP\n Modules linked in:\n CPU: 1 PID: 483 Comm: bash Not tainted 5.0.0-rc1+ #3\n Hardware name: ARM LTD ARM Juno Development Platform/ARM Juno Development Platform, BIOS EDK II Dec 17 2018\n pstate: 40000005 (nZcv daif -PAN -UAO)\n pc : remove_store+0xbc/0x120\n lr : remove_store+0xbc/0x120\n ...\n\nLink: http://lkml.kernel.org/r/03b53ee9d7e76cda4b9b5e1e31eea080db033396.1550071778.git.robin.murphy@arm.com\nFixes: 1c6fb1d89e73 (\"mm: print more information about mapping in __dump_page\")\nSigned-off-by: Robin Murphy \u003crobin.murphy@arm.com\u003e\nAcked-by: Michal Hocko \u003cmhocko@suse.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "b2b469939e93458753cfbf8282ad52636495965e", "tree": "53153c00b229a585ca22844ab2bc68e67bbba968", "parents": [ "338cfaad4993d3bc35a740e28981747770a65f90" ], "author": { "name": "Michal Hocko", "email": "mhocko@suse.com", "time": "Wed Feb 20 22:19:42 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:01:00 2019 -0800" }, "message": "proc, oom: do not report alien mms when setting oom_score_adj\n\nTetsuo has reported that creating a thousands of processes sharing MM\nwithout SIGHAND (aka alien threads) and setting\n/proc/\u003cpid\u003e/oom_score_adj will swamp the kernel log and takes ages [1]\nto finish. This is especially worrisome that all that printing is done\nunder RCU lock and this can potentially trigger RCU stall or softlockup\ndetector.\n\nThe primary reason for the printk was to catch potential users who might\ndepend on the behavior prior to 44a70adec910 (\"mm, oom_adj: make sure\nprocesses sharing mm have same view of oom_score_adj\") but after more\nthan 2 years without a single report I guess it is safe to simply remove\nthe printk altogether.\n\nThe next step should be moving oom_score_adj over to the mm struct and\nremove all the tasks crawling as suggested by [2]\n\n[1] http://lkml.kernel.org/r/97fce864-6f75-bca5-14bc-12c9f890e740@i-love.sakura.ne.jp\n[2] http://lkml.kernel.org/r/20190117155159.GA4087@dhcp22.suse.cz\n\nLink: http://lkml.kernel.org/r/20190212102129.26288-1-mhocko@kernel.org\nSigned-off-by: Michal Hocko \u003cmhocko@suse.com\u003e\nReported-by: Tetsuo Handa \u003cpenguin-kernel@i-love.sakura.ne.jp\u003e\nAcked-by: Johannes Weiner \u003channes@cmpxchg.org\u003e\nCc: David Rientjes \u003crientjes@google.com\u003e\nCc: Yong-Taek Lee \u003cytk.lee@samsung.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "338cfaad4993d3bc35a740e28981747770a65f90", "tree": "7a52d761001bbde80317a59c6e9b6d93a9869e9a", "parents": [ "d36a63a943e37081e92e4abdf4a207fd2e83a006" ], "author": { "name": "Qian Cai", "email": "cai@lca.pw", "time": "Wed Feb 20 22:19:36 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:01:00 2019 -0800" }, "message": "slub: fix SLAB_CONSISTENCY_CHECKS + KASAN_SW_TAGS\n\nEnabling SLUB_DEBUG\u0027s SLAB_CONSISTENCY_CHECKS with KASAN_SW_TAGS\ntriggers endless false positives during boot below due to\ncheck_valid_pointer() checks tagged pointers which have no addresses\nthat is valid within slab pages:\n\n BUG radix_tree_node (Tainted: G B ): Freelist Pointer check fails\n -----------------------------------------------------------------------------\n\n INFO: Slab objects\u003d69 used\u003d69 fp\u003d0x (null) flags\u003d0x7ffffffc000200\n INFO: Object @offset\u003d15060037153926966016 fp\u003d0x\n\n Redzone: bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb bb ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 18 6b 06 00 08 80 ff d0 .........k......\n Object : 18 6b 06 00 08 80 ff d0 00 00 00 00 00 00 00 00 .k..............\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Object : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n Redzone: bb bb bb bb bb bb bb bb ........\n Padding: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZZZZZ\n CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.0.0-rc5+ #18\n Call trace:\n dump_backtrace+0x0/0x450\n show_stack+0x20/0x2c\n __dump_stack+0x20/0x28\n dump_stack+0xa0/0xfc\n print_trailer+0x1bc/0x1d0\n object_err+0x40/0x50\n alloc_debug_processing+0xf0/0x19c\n ___slab_alloc+0x554/0x704\n kmem_cache_alloc+0x2f8/0x440\n radix_tree_node_alloc+0x90/0x2fc\n idr_get_free+0x1e8/0x6d0\n idr_alloc_u32+0x11c/0x2a4\n idr_alloc+0x74/0xe0\n worker_pool_assign_id+0x5c/0xbc\n workqueue_init_early+0x49c/0xd50\n start_kernel+0x52c/0xac4\n FIX radix_tree_node: Marking all objects used\n\nLink: http://lkml.kernel.org/r/20190209044128.3290-1-cai@lca.pw\nSigned-off-by: Qian Cai \u003ccai@lca.pw\u003e\nReviewed-by: Andrey Konovalov \u003candreyknvl@google.com\u003e\nCc: Christoph Lameter \u003ccl@linux.com\u003e\nCc: Pekka Enberg \u003cpenberg@kernel.org\u003e\nCc: David Rientjes \u003crientjes@google.com\u003e\nCc: Joonsoo Kim \u003ciamjoonsoo.kim@lge.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "d36a63a943e37081e92e4abdf4a207fd2e83a006", "tree": "148469fb82f7151fc255e9b449e0ef4629b574ca", "parents": [ "18e506610238eda2b0c5a19a123d3d6ec0ab2de6" ], "author": { "name": "Andrey Konovalov", "email": "andreyknvl@google.com", "time": "Wed Feb 20 22:19:32 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:01:00 2019 -0800" }, "message": "kasan, slub: fix more conflicts with CONFIG_SLAB_FREELIST_HARDENED\n\nWhen CONFIG_KASAN_SW_TAGS is enabled, ptr_addr might be tagged. Normally,\nthis doesn\u0027t cause any issues, as both set_freepointer() and\nget_freepointer() are called with a pointer with the same tag. However,\nthere are some issues with CONFIG_SLUB_DEBUG code. For example, when\n__free_slub() iterates over objects in a cache, it passes untagged\npointers to check_object(). check_object() in turns calls\nget_freepointer() with an untagged pointer, which causes the freepointer\nto be restored incorrectly.\n\nAdd kasan_reset_tag to freelist_ptr(). Also add a detailed comment.\n\nLink: http://lkml.kernel.org/r/bf858f26ef32eb7bd24c665755b3aee4bc58d0e4.1550103861.git.andreyknvl@google.com\nSigned-off-by: Andrey Konovalov \u003candreyknvl@google.com\u003e\nReported-by: Qian Cai \u003ccai@lca.pw\u003e\nTested-by: Qian Cai \u003ccai@lca.pw\u003e\nCc: Andrey Ryabinin \u003caryabinin@virtuozzo.com\u003e\nCc: Alexander Potapenko \u003cglider@google.com\u003e\nCc: Dmitry Vyukov \u003cdvyukov@google.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "18e506610238eda2b0c5a19a123d3d6ec0ab2de6", "tree": "5bf9bf113ab2878a17ac1135e271fd5c58a1ce21", "parents": [ "a71012242837fe5e67d8c999cfc357174ed5dba0" ], "author": { "name": "Andrey Konovalov", "email": "andreyknvl@google.com", "time": "Wed Feb 20 22:19:28 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:01:00 2019 -0800" }, "message": "kasan, slub: fix conflicts with CONFIG_SLAB_FREELIST_HARDENED\n\nCONFIG_SLAB_FREELIST_HARDENED hashes freelist pointer with the address of\nthe object where the pointer gets stored. With tag based KASAN we don\u0027t\naccount for that when building freelist, as we call set_freepointer() with\nthe first argument untagged. This patch changes the code to properly\npropagate tags throughout the loop.\n\nLink: http://lkml.kernel.org/r/3df171559c52201376f246bf7ce3184fe21c1dc7.1549921721.git.andreyknvl@google.com\nSigned-off-by: Andrey Konovalov \u003candreyknvl@google.com\u003e\nReported-by: Qian Cai \u003ccai@lca.pw\u003e\nCc: Andrey Ryabinin \u003caryabinin@virtuozzo.com\u003e\nCc: Alexander Potapenko \u003cglider@google.com\u003e\nCc: Dmitry Vyukov \u003cdvyukov@google.com\u003e\nCc: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nCc: Christoph Lameter \u003ccl@linux.com\u003e\nCc: Pekka Enberg \u003cpenberg@kernel.org\u003e\nCc: David Rientjes \u003crientjes@google.com\u003e\nCc: Joonsoo Kim \u003ciamjoonsoo.kim@lge.com\u003e\nCc: Vincenzo Frascino \u003cvincenzo.frascino@arm.com\u003e\nCc: Kostya Serebryany \u003ckcc@google.com\u003e\nCc: Evgeniy Stepanov \u003ceugenis@google.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "a71012242837fe5e67d8c999cfc357174ed5dba0", "tree": "13a84959210f19de62a80b6154f42e66d7c91ffd", "parents": [ "a2f775751d964e638818487544fa8320180d106e" ], "author": { "name": "Andrey Konovalov", "email": "andreyknvl@google.com", "time": "Wed Feb 20 22:19:23 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:01:00 2019 -0800" }, "message": "kasan, slub: move kasan_poison_slab hook before page_address\n\nWith tag based KASAN page_address() looks at the page flags to see whether\nthe resulting pointer needs to have a tag set. Since we don\u0027t want to set\na tag when page_address() is called on SLAB pages, we call\npage_kasan_tag_reset() in kasan_poison_slab(). However in allocate_slab()\npage_address() is called before kasan_poison_slab(). Fix it by changing\nthe order.\n\n[andreyknvl@google.com: fix compilation error when CONFIG_SLUB_DEBUG\u003dn]\n Link: http://lkml.kernel.org/r/ac27cc0bbaeb414ed77bcd6671a877cf3546d56e.1550066133.git.andreyknvl@google.com\nLink: http://lkml.kernel.org/r/cd895d627465a3f1c712647072d17f10883be2a1.1549921721.git.andreyknvl@google.com\nSigned-off-by: Andrey Konovalov \u003candreyknvl@google.com\u003e\nCc: Alexander Potapenko \u003cglider@google.com\u003e\nCc: Andrey Ryabinin \u003caryabinin@virtuozzo.com\u003e\nCc: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nCc: Christoph Lameter \u003ccl@linux.com\u003e\nCc: David Rientjes \u003crientjes@google.com\u003e\nCc: Dmitry Vyukov \u003cdvyukov@google.com\u003e\nCc: Evgeniy Stepanov \u003ceugenis@google.com\u003e\nCc: Joonsoo Kim \u003ciamjoonsoo.kim@lge.com\u003e\nCc: Kostya Serebryany \u003ckcc@google.com\u003e\nCc: Pekka Enberg \u003cpenberg@kernel.org\u003e\nCc: Qian Cai \u003ccai@lca.pw\u003e\nCc: Vincenzo Frascino \u003cvincenzo.frascino@arm.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "a2f775751d964e638818487544fa8320180d106e", "tree": "8f57aa384bdf7f56a130c853ccb257b048269205", "parents": [ "53128245b43daad600d9fe72940206570e064112" ], "author": { "name": "Andrey Konovalov", "email": "andreyknvl@google.com", "time": "Wed Feb 20 22:19:16 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:01:00 2019 -0800" }, "message": "kmemleak: account for tagged pointers when calculating pointer range\n\nkmemleak keeps two global variables, min_addr and max_addr, which store\nthe range of valid (encountered by kmemleak) pointer values, which it\nlater uses to speed up pointer lookup when scanning blocks.\n\nWith tagged pointers this range will get bigger than it needs to be. This\npatch makes kmemleak untag pointers before saving them to min_addr and\nmax_addr and when performing a lookup.\n\nLink: http://lkml.kernel.org/r/16e887d442986ab87fe87a755815ad92fa431a5f.1550066133.git.andreyknvl@google.com\nSigned-off-by: Andrey Konovalov \u003candreyknvl@google.com\u003e\nTested-by: Qian Cai \u003ccai@lca.pw\u003e\nAcked-by: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nCc: Alexander Potapenko \u003cglider@google.com\u003e\nCc: Andrey Ryabinin \u003caryabinin@virtuozzo.com\u003e\nCc: Christoph Lameter \u003ccl@linux.com\u003e\nCc: David Rientjes \u003crientjes@google.com\u003e\nCc: Dmitry Vyukov \u003cdvyukov@google.com\u003e\nCc: Evgeniy Stepanov \u003ceugenis@google.com\u003e\nCc: Joonsoo Kim \u003ciamjoonsoo.kim@lge.com\u003e\nCc: Kostya Serebryany \u003ckcc@google.com\u003e\nCc: Pekka Enberg \u003cpenberg@kernel.org\u003e\nCc: Vincenzo Frascino \u003cvincenzo.frascino@arm.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "53128245b43daad600d9fe72940206570e064112", "tree": "c0ee4f35b4eb301ccd076c7ea0259fd81da08afe", "parents": [ "e1db95befb3e9e3476629afec6e0f5d0707b9825" ], "author": { "name": "Andrey Konovalov", "email": "andreyknvl@google.com", "time": "Wed Feb 20 22:19:11 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:01:00 2019 -0800" }, "message": "kasan, kmemleak: pass tagged pointers to kmemleak\n\nRight now we call kmemleak hooks before assigning tags to pointers in\nKASAN hooks. As a result, when an objects gets allocated, kmemleak sees a\ndifferently tagged pointer, compared to the one it sees when the object\ngets freed. Fix it by calling KASAN hooks before kmemleak\u0027s ones.\n\nLink: http://lkml.kernel.org/r/cd825aa4897b0fc37d3316838993881daccbe9f5.1549921721.git.andreyknvl@google.com\nSigned-off-by: Andrey Konovalov \u003candreyknvl@google.com\u003e\nReported-by: Qian Cai \u003ccai@lca.pw\u003e\nCc: Alexander Potapenko \u003cglider@google.com\u003e\nCc: Andrey Ryabinin \u003caryabinin@virtuozzo.com\u003e\nCc: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nCc: Christoph Lameter \u003ccl@linux.com\u003e\nCc: David Rientjes \u003crientjes@google.com\u003e\nCc: Dmitry Vyukov \u003cdvyukov@google.com\u003e\nCc: Evgeniy Stepanov \u003ceugenis@google.com\u003e\nCc: Joonsoo Kim \u003ciamjoonsoo.kim@lge.com\u003e\nCc: Kostya Serebryany \u003ckcc@google.com\u003e\nCc: Pekka Enberg \u003cpenberg@kernel.org\u003e\nCc: Vincenzo Frascino \u003cvincenzo.frascino@arm.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "e1db95befb3e9e3476629afec6e0f5d0707b9825", "tree": "58475361bb36b550daf852b6121d663e1343069d", "parents": [ "050c17f239fd53adb55aa768d4f41bc76c0fe045" ], "author": { "name": "Andrey Konovalov", "email": "andreyknvl@google.com", "time": "Wed Feb 20 22:19:01 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:01:00 2019 -0800" }, "message": "kasan: fix assigning tags twice\n\nWhen an object is kmalloc()\u0027ed, two hooks are called: kasan_slab_alloc()\nand kasan_kmalloc(). Right now we assign a tag twice, once in each of the\nhooks. Fix it by assigning a tag only in the former hook.\n\nLink: http://lkml.kernel.org/r/ce8c6431da735aa7ec051fd6497153df690eb021.1549921721.git.andreyknvl@google.com\nSigned-off-by: Andrey Konovalov \u003candreyknvl@google.com\u003e\nCc: Alexander Potapenko \u003cglider@google.com\u003e\nCc: Andrey Ryabinin \u003caryabinin@virtuozzo.com\u003e\nCc: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nCc: Christoph Lameter \u003ccl@linux.com\u003e\nCc: David Rientjes \u003crientjes@google.com\u003e\nCc: Dmitry Vyukov \u003cdvyukov@google.com\u003e\nCc: Evgeniy Stepanov \u003ceugenis@google.com\u003e\nCc: Joonsoo Kim \u003ciamjoonsoo.kim@lge.com\u003e\nCc: Kostya Serebryany \u003ckcc@google.com\u003e\nCc: Pekka Enberg \u003cpenberg@kernel.org\u003e\nCc: Qian Cai \u003ccai@lca.pw\u003e\nCc: Vincenzo Frascino \u003cvincenzo.frascino@arm.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "050c17f239fd53adb55aa768d4f41bc76c0fe045", "tree": "d8bb241be4466e703a405211344fca328d6ae2db", "parents": [ "a841c673f1352f607fd3ba85de6c9c49ff2c1e12" ], "author": { "name": "Ralph Campbell", "email": "rcampbell@nvidia.com", "time": "Wed Feb 20 22:18:58 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:00:59 2019 -0800" }, "message": "numa: change get_mempolicy() to use nr_node_ids instead of MAX_NUMNODES\n\nThe system call, get_mempolicy() [1], passes an unsigned long *nodemask\npointer and an unsigned long maxnode argument which specifies the length\nof the user\u0027s nodemask array in bits (which is rounded up). The manual\npage says that if the maxnode value is too small, get_mempolicy will\nreturn EINVAL but there is no system call to return this minimum value.\nTo determine this value, some programs search /proc/\u003cpid\u003e/status for a\nline starting with \"Mems_allowed:\" and use the number of digits in the\nmask to determine the minimum value. A recent change to the way this line\nis formatted [2] causes these programs to compute a value less than\nMAX_NUMNODES so get_mempolicy() returns EINVAL.\n\nChange get_mempolicy(), the older compat version of get_mempolicy(), and\nthe copy_nodes_to_user() function to use nr_node_ids instead of\nMAX_NUMNODES, thus preserving the defacto method of computing the minimum\nsize for the nodemask array and the maxnode argument.\n\n[1] http://man7.org/linux/man-pages/man2/get_mempolicy.2.html\n[2] https://lore.kernel.org/lkml/1545405631-6808-1-git-send-email-longman@redhat.com\n\nLink: http://lkml.kernel.org/r/20190211180245.22295-1-rcampbell@nvidia.com\nFixes: 4fb8e5b89bcbbbb (\"include/linux/nodemask.h: use nr_node_ids (not MAX_NUMNODES) in __nodemask_pr_numnodes()\")\nSigned-off-by: Ralph Campbell \u003crcampbell@nvidia.com\u003e\nSuggested-by: Alexander Duyck \u003calexander.duyck@gmail.com\u003e\nCc: Waiman Long \u003clongman@redhat.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "a841c673f1352f607fd3ba85de6c9c49ff2c1e12", "tree": "7300b486aa3d69149295813755b396399e69a80a", "parents": [ "2137397c92aec3713fa10be3c9b830f9a1674e60" ], "author": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Wed Feb 20 22:18:52 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 21 09:00:59 2019 -0800" }, "message": "revert \"initramfs: cleanup incomplete rootfs\"\n\nRevert ff1522bb7d9845 (\"initramfs: cleanup incomplete rootfs\").\n\nAndy reports\n\n: This breaks my setup where I have U-boot provided more size of initramfs\n: than needed. This allows a bit of flexibility to increase or decrease\n: initramfs compressed image without taking care of bootloader. The proper\n: solution is to do this if we sure that we didn\u0027t get enough memory,\n: otherwise I can\u0027t consider the error fatal to clean up rootfs.\n\nFixes: ff1522bb7d9845 (\"initramfs: cleanup incomplete rootfs\")\nReported-by: Andy Shevchenko \u003candy.shevchenko@gmail.com\u003e\nTested-by: Andy Shevchenko \u003candy.shevchenko@gmail.com\u003e\nCc: David Engraf \u003cdavid.engraf@sysgo.com\u003e\nCc: Dominik Brodowski \u003clinux@dominikbrodowski.net\u003e\nCc: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nCc: Philippe Ombredanne \u003cpombredanne@nexb.com\u003e\nCc: Arnd Bergmann \u003carnd@arndb.de\u003e\nCc: Luc Van Oostenryck \u003cluc.vanoostenryck@gmail.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "74fb44863084275b952f21ec6a024af0e2e75cb8", "tree": "6d5f00f222dba81808cdde588f2660ab8163810a", "parents": [ "a3b22b9f11d9fbc48b0291ea92259a5a810e9438" ], "author": { "name": "Vincent Guittot", "email": "vincent.guittot@linaro.org", "time": "Thu Feb 21 08:59:02 2019 +0100" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Thu Feb 21 10:29:00 2019 +0100" }, "message": "PM-runtime: Fix deadlock when canceling hrtimer\n\nWhen rpm_resume() desactivates the autosuspend timer, it should only\ntry to cancel hrtimer but not wait for the handler to finish, because\nboth rpm_resume() and pm_suspend_timer_fn() take the power.lock.\n\nA deadlock is possible as follows:\n\nCPU0 CPU1\nrpm_resume()\n spin_lock_irqsave\n pm_suspend_timer_fn()\n spin_lock_irqsave\n pm_runtime_deactivate_timer()\n hrtimer_cancel()\n\nIt is sufficient to call hrtimer_try_to_cancel() from\npm_runtime_deactivate_timer(), because dev-\u003epower.timer_expires\nreset to 0 by it, so use that function instead of hrtimer_cancel().\n\nFixes: 8234f6734c5d (\"PM-runtime: Switch autosuspend over to using hrtimers\")\nReported-by: Sunzhaosheng Sun(Zhaosheng) \u003csunzhaosheng@hisilicon.com\u003e\nSigned-off-by: Vincent Guittot \u003cvincent.guittot@linaro.org\u003e\n[ rjw: Changelog ]\nSigned-off-by: Rafael J. Wysocki \u003crafael.j.wysocki@intel.com\u003e\n" }, { "commit": "9c526fed6a57561fc63abaf9497512ba4bf4e49e", "tree": "a40bdc8d62dd1fbe261fb0123b51ca9833ea48cf", "parents": [ "a3b22b9f11d9fbc48b0291ea92259a5a810e9438", "d179b88deb3bf6fed4991a31fd6f0f2cad21fab5" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Thu Feb 21 12:21:43 2019 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Thu Feb 21 12:21:44 2019 +1000" }, "message": "Merge tag \u0027drm-intel-fixes-2019-02-20\u0027 of git://anongit.freedesktop.org/drm/drm-intel into drm-fixes\n\ndrm/i915 fbdev takeover fix for v5.0\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nFrom: Jani Nikula \u003cjani.nikula@intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/87k1hutrmc.fsf@intel.com\n" }, { "commit": "f6163d67cc31b8f2a946c4df82be3c6dd918412d", "tree": "4367432aa4367617f9010a5e1b6114a65719bf92", "parents": [ "2137397c92aec3713fa10be3c9b830f9a1674e60", "0358affb5cd8bbd685a6ab163a36dd28a818da73" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Feb 20 14:14:31 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Feb 20 14:14:31 2019 -0800" }, "message": "Merge tag \u0027docs-5.0-fix\u0027 of git://git.lwn.net/linux\n\nPull documentation fix from Jonathan Corbet:\n \"A single patch from Arnd bringing some top-level docs into the 5.0\n era\"\n\n* tag \u0027docs-5.0-fix\u0027 of git://git.lwn.net/linux:\n Documentation: change linux-4.x references to 5.x\n" }, { "commit": "a213c2c7e235cfc0e0a161a558f7fdf2fb3a624a", "tree": "095f52c7eb5380944ad6e7a8be8d1586ce45df34", "parents": [ "4ece61a22be5ab5d49cc5fc20a19a0afa24a019d" ], "author": { "name": "Christian König", "email": "ckoenig.leichtzumerken@gmail.com", "time": "Wed Feb 20 15:16:06 2019 +0100" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Wed Feb 20 17:13:27 2019 -0500" }, "message": "drm/amdgpu: disable bulk moves for now\n\nThe changes to fix those are two invasive for backporting.\n\nJust disable the feature in 4.20 and 5.0.\n\nAcked-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Christian König \u003cchristian.koenig@amd.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e [4.20+]\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n" }, { "commit": "4ece61a22be5ab5d49cc5fc20a19a0afa24a019d", "tree": "c07600e2291a470fd8b664bd402c37bc3388071e", "parents": [ "9f7ddbea2bb826a2147309f735726a8b09950944" ], "author": { "name": "Bhawanpreet Lakha", "email": "Bhawanpreet.Lakha@amd.com", "time": "Tue Feb 05 14:03:52 2019 -0500" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Wed Feb 20 16:58:06 2019 -0500" }, "message": "drm/amd/display: set clocks to 0 on suspend on dce80\n\n[Why]\nWhen a dce80 asic was suspended, the clocks were not set to 0.\nUpon resume, the new clock was compared to the existing clock,\nthey were found to be the same, and so the clock was not set.\nThis resulted in a blackscreen.\n\n[How]\nIn atomic commit, check to see if there are any active pipes.\nIf no, set clocks to 0\n\nSigned-off-by: Bhawanpreet Lakha \u003cBhawanpreet.Lakha@amd.com\u003e\nReviewed-by: Nicholas Kazlauskas \u003cNicholas.Kazlauskas@amd.com\u003e\nAcked-by: Leo Li \u003csunpeng.li@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nCc: stable@vger.kernel.org\n" }, { "commit": "9f7ddbea2bb826a2147309f735726a8b09950944", "tree": "a830e3ab92c456d10f0a87dfbe93cf4a1ad8eaae", "parents": [ "0921c41e19028314830b33daa681e46b46477c5e" ], "author": { "name": "Bhawanpreet Lakha", "email": "Bhawanpreet.Lakha@amd.com", "time": "Tue Feb 05 13:55:20 2019 -0500" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Wed Feb 20 16:57:47 2019 -0500" }, "message": "drm/amd/display: fix optimize_bandwidth func pointer for dce80\n\n[Why]\noptimize_bandwidth was using dce100_prepare_bandwidth this is incorrect\n\n[How]\nchange it to dce100_optimize_bandwidth\n\nSigned-off-by: Bhawanpreet Lakha \u003cBhawanpreet.Lakha@amd.com\u003e\nReviewed-by: Charlene Liu \u003cCharlene.Liu@amd.com\u003e\nAcked-by: Leo Li \u003csunpeng.li@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nCc: stable@vger.kernel.org\n" }, { "commit": "0921c41e19028314830b33daa681e46b46477c5e", "tree": "54c0e1b8d624fd20e53a866dc6e85a62a9c618e8", "parents": [ "8852ae9a82498207c15262b6294d14aea1796966" ], "author": { "name": "Nicholas Kazlauskas", "email": "nicholas.kazlauskas@amd.com", "time": "Fri Feb 01 09:36:59 2019 -0500" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Wed Feb 20 16:56:28 2019 -0500" }, "message": "drm/amd/display: Fix negative cursor pos programming\n\n[Why]\nIf the cursor pos passed from DM is less than the plane_state-\u003edst_rect\ntop left corner then the unsigned cursor pos wraps around to a large\npositive number since cursor pos is a u32.\n\nThere was an attempt to guard against this in hubp1_cursor_set_position\nby checking the src_x_offset and src_y_offset and offseting the\ncursor hotspot within hubp1_cursor_set_position.\n\nHowever, the cursor position itself is still being programmed\nincorrectly as a large value.\n\nThis manifests itself visually as the cursor disappearing or containing\nstrange artifacts near the middle of the screen on raven.\n\n[How]\nDon\u0027t subtract the destination rect top left corner from the pos but\nadd it to the hotspot instead. This happens before the pos gets\npassed into hubp1_cursor_set_position.\n\nThis achieves the same result but avoids the subtraction wrap around.\nWith this fix the original cursor programming logic can be used again.\n\nSigned-off-by: Nicholas Kazlauskas \u003cnicholas.kazlauskas@amd.com\u003e\nReviewed-by: Charlene Liu \u003cCharlene.Liu@amd.com\u003e\nAcked-by: Leo Li \u003csunpeng.li@amd.com\u003e\nAcked-by: Murton Liu \u003cMurton.Liu@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n" }, { "commit": "65a91e2e597dea62a798a8b771edc44859037e7f", "tree": "5998b5445ea0b6e77c15f330c7816a1c6393b7e8", "parents": [ "1b328a2e095a009518ebac05e937cc0fc242fede" ], "author": { "name": "Alexandre Belloni", "email": "alexandre.belloni@bootlin.com", "time": "Fri Feb 08 15:40:59 2019 +0100" }, "committer": { "name": "Stephen Boyd", "email": "sboyd@kernel.org", "time": "Wed Feb 20 11:40:21 2019 -0800" }, "message": "clk: at91: fix masterck name\n\nThe master clock is actually named masterck earlier in the driver. Having\n\"mck\" in the parent list means that it can never be selected.\n\nFixes: 1eabdc2f9dd8 (\"clk: at91: add at91sam9x5 PMCs driver\")\nFixes: a2038077de9a (\"clk: at91: add sama5d2 PMC driver\")\nFixes: 084b696bb509 (\"clk: at91: add sama5d4 pmc driver\")\nSigned-off-by: Alexandre Belloni \u003calexandre.belloni@bootlin.com\u003e\nAcked-by: Nicolas Ferre \u003cnicolas.ferre@microchip.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e # v4.20+\nSigned-off-by: Stephen Boyd \u003csboyd@kernel.org\u003e\n" }, { "commit": "1b328a2e095a009518ebac05e937cc0fc242fede", "tree": "2cc85a0f9758fa9e181a871f4d818189ee8ff223", "parents": [ "05c3ae7aa13084d31b5109e7e8d7c74e305b325f" ], "author": { "name": "Alexandre Belloni", "email": "alexandre.belloni@bootlin.com", "time": "Tue Feb 19 17:51:14 2019 +0100" }, "committer": { "name": "Stephen Boyd", "email": "sboyd@kernel.org", "time": "Wed Feb 20 11:34:24 2019 -0800" }, "message": "clk: at91: fix at91sam9x5 peripheral clock number\n\nnck() looks at the last id in an array and unfortunately,\nat91sam9x35_periphck has a sentinel, hence the id is 0 and the calculated\nnumber of peripheral clocks is 1 instead of a maximum of 31.\n\nFixes: 1eabdc2f9dd8 (\"clk: at91: add at91sam9x5 PMCs driver\")\nSigned-off-by: Alexandre Belloni \u003calexandre.belloni@bootlin.com\u003e\nAcked-by: Nicolas Ferre \u003cnicolas.ferre@microchip.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e # v4.20+\nSigned-off-by: Stephen Boyd \u003csboyd@kernel.org\u003e\n" }, { "commit": "2137397c92aec3713fa10be3c9b830f9a1674e60", "tree": "8c5aabd5bd9051ac815fb27b9b243242339f0d95", "parents": [ "fb83f15ef9dd984834bc60b380efbeffdf1ecc04", "268836649c07e0d38866006b5e94294b5bbc9806" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Feb 20 09:42:52 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Feb 20 09:42:52 2019 -0800" }, "message": "Merge tag \u0027sound-5.0\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound\n\nPull sound fixes from Takashi Iwai:\n \"Here are a few last-minute fixes for 5.0.\n\n The most significant one is the OF-node refcount fix for ASoC\n simple-card, which could be triggered on many boards. Another fix for\n ASoC core is for the error handling in topology, while others are\n device-specific fixes for Samsung and HD-audio\"\n\n* tag \u0027sound-5.0\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound:\n ASoC: simple-card: fixup refcount_t underflow\n ASoC: topology: free created components in tplg load error\n ALSA: hda/realtek: Disable PC beep in passthrough on alc285\n ALSA: hda/realtek - Headset microphone and internal speaker support for System76 oryp5\n ASoC: samsung: i2s: Fix prescaler setting for the secondary DAI\n" }, { "commit": "fb83f15ef9dd984834bc60b380efbeffdf1ecc04", "tree": "f6698748077547a91e992de091587d7581fb54a0", "parents": [ "c828c2651b9a8184e1414fa0611d18b84d3847dd", "c17abcfa93bf0be5e48bb011607d237ac2bfc839" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Feb 20 09:39:53 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Feb 20 09:39:53 2019 -0800" }, "message": "Merge tag \u0027pinctrl-v5.0-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl\n\nPull pin control fixes from Linus Walleij:\n \"Some final pin control fixes (I hope) to round off the v5.0 pin\n control development cycle.\n\n Only driver fixes, one for stable:\n\n - Meson8B fixup for the sdc pins\n\n - Fix SDC tile position for Qualcomm QCS404\"\n\n* tag \u0027pinctrl-v5.0-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl:\n pinctrl: meson: meson8b: fix the sdxc_a data 1..3 pins\n pinctrl: qcom: qcs404: Correct SDC tile\n" }, { "commit": "c828c2651b9a8184e1414fa0611d18b84d3847dd", "tree": "3dc8072d7e10cd49d004e7bc99fc3369cecd995e", "parents": [ "7d9d592caf8cc5d91f7923c5e717b69d0b1e246f", "af14b2c98adb85e9517390bb88309338b9075350" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Feb 20 09:36:33 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Feb 20 09:36:33 2019 -0800" }, "message": "Merge tag \u0027gpio-v5.0-4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio\n\nPull GPIO fixes from Linus Walleij:\n \"Two GPIO fixes for the v5.0 series:\n\n - Per-instance irqchip on the MT7621\n\n - Avoid direction setting using pin control on MMP2\"\n\n* tag \u0027gpio-v5.0-4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio:\n gpio: pxa: avoid attempting to set pin direction via pinctrl on MMP2\n gpio: MT7621: use a per instance irq_chip structure\n" }, { "commit": "7d9d592caf8cc5d91f7923c5e717b69d0b1e246f", "tree": "2281d0a895cfde38a82dc23902f34368a4a46100", "parents": [ "1f5a018c5b15c2e3e519ae8ca9bfb03a00384448", "3e35730dd7540bad2d4e002703996391d9be49a0" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Feb 20 09:16:11 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Feb 20 09:16:11 2019 -0800" }, "message": "Merge tag \u0027mtd/fixes-for-5.0-rc8\u0027 of git://git.infradead.org/linux-mtd\n\nPull MTD fixes from Boris Brezillon:\n\n - Don\u0027t add a digit to MTD-backed nvmem device names\n\n - Make sure powernv flash names are unique\n\n* tag \u0027mtd/fixes-for-5.0-rc8\u0027 of git://git.infradead.org/linux-mtd:\n mtd: powernv_flash: Fix device registration error\n mtd: Use mtd-\u003ename when registering nvmem device\n" }, { "commit": "1f5a018c5b15c2e3e519ae8ca9bfb03a00384448", "tree": "c6b61a0ed94f7e2c32450c6ac802d9b2a3446bcc", "parents": [ "40e196a906d969fd10d885c692d2674b3d657006", "7c1857bdbdf1e4c541e45eab477ee23ed4333ea4" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Feb 20 09:09:33 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Feb 20 09:09:33 2019 -0800" }, "message": "Merge branch \u0027fixes-v5.1-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security\n\nPull keys fixes from James Morris:\n\n - Handle quotas better, allowing full quota to be reached.\n\n - Fix the creation of shortcuts in the assoc_array internal\n representation when the index key needs to be an exact multiple of\n the machine word size.\n\n - Fix a dependency loop between the request_key contruction record and\n the request_key authentication key. The construction record isn\u0027t\n really necessary and can be dispensed with.\n\n - Set the timestamp on a new key rather than leaving it as 0. This\n would ordinarily be fine - provided the system clock is never set to\n a time before 1970\n\n* \u0027fixes-v5.1-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security:\n keys: Timestamp new keys\n keys: Fix dependency loop between construction record and auth key\n assoc_array: Fix shortcut creation\n KEYS: allow reaching the keys quotas exactly\n" }, { "commit": "94d9b9337d09bdd27735005b3251d97ab29f7273", "tree": "eee60eb6a5fa40453063f481f07eb9186bed6c53", "parents": [ "a3b22b9f11d9fbc48b0291ea92259a5a810e9438" ], "author": { "name": "Thierry Reding", "email": "treding@nvidia.com", "time": "Mon Feb 11 12:09:19 2019 +0100" }, "committer": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Wed Feb 20 16:08:49 2019 +0100" }, "message": "ARM: tegra: Restore DT ABI on Tegra124 Chromebooks\n\nCommit 482997699ef0 (\"ARM: tegra: Fix unit_address_vs_reg DTC warnings\nfor /memory\") inadventently broke device tree ABI by adding a unit-\naddress to the \"/memory\" node because the device tree compiler flagged\nthe missing unit-address as a warning.\n\nTegra124 Chromebooks (a.k.a. Nyan) use a bootloader that relies on the\nfull name of the memory node in device tree being exactly \"/memory\". It\ncan be argued whether this was a good decision or not, and some other\nbootloaders (such as U-Boot) do accept a unit-address in the name of the\nnode, but the device tree is an ABI and we can\u0027t break existing setups\njust because the device tree compiler considers it bad practice to omit\nthe unit-address nowadays.\n\nThis partially reverts the offending commit and restores device tree ABI\ncompatibility.\n\nFixes: 482997699ef0 (\"ARM: tegra: Fix unit_address_vs_reg DTC warnings for /memory\")\nReported-by: Tristan Bastian \u003ctristan-c.bastian@gmx.de\u003e\nSigned-off-by: Thierry Reding \u003ctreding@nvidia.com\u003e\nTested-by: Tristan Bastian \u003ctristan-c.bastian@gmx.de\u003e\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\n" }, { "commit": "74698f6971f25d045301139413578865fc2bd8f9", "tree": "c7746935f5718abdf8ff17f15647e0d8207d3107", "parents": [ "0738c8b5915c7eaf1e6007b441008e8f3b460443" ], "author": { "name": "Vladimir Murzin", "email": "vladimir.murzin@arm.com", "time": "Wed Feb 20 11:43:05 2019 +0000" }, "committer": { "name": "Will Deacon", "email": "will.deacon@arm.com", "time": "Wed Feb 20 14:05:37 2019 +0000" }, "message": "arm64: Relax GIC version check during early boot\n\nUpdates to the GIC architecture allow ID_AA64PFR0_EL1.GIC to have\nvalues other than 0 or 1. At the moment, Linux is quite strict in the\nway it handles this field at early boot stage (cpufeature is fine) and\nwill refuse to use the system register CPU interface if it doesn\u0027t\nfind the value 1.\n\nFixes: 021f653791ad17e03f98aaa7fb933816ae16f161 (\"irqchip: gic-v3: Initial support for GICv3\")\nReported-by: Chase Conklin \u003cChase.Conklin@arm.com\u003e\nReviewed-by: Marc Zyngier \u003cmarc.zyngier@arm.com\u003e\nSigned-off-by: Vladimir Murzin \u003cvladimir.murzin@arm.com\u003e\nSigned-off-by: Will Deacon \u003cwill.deacon@arm.com\u003e\n" }, { "commit": "d179b88deb3bf6fed4991a31fd6f0f2cad21fab5", "tree": "a40bdc8d62dd1fbe261fb0123b51ca9833ea48cf", "parents": [ "a3b22b9f11d9fbc48b0291ea92259a5a810e9438" ], "author": { "name": "Chris Wilson", "email": "chris@chris-wilson.co.uk", "time": "Fri Feb 15 12:30:19 2019 +0000" }, "committer": { "name": "Jani Nikula", "email": "jani.nikula@intel.com", "time": "Wed Feb 20 16:02:55 2019 +0200" }, "message": "drm/i915/fbdev: Actually configure untiled displays\n\nIf we skipped all the connectors that were not part of a tile, we would\nleave conn_seq\u003d0 and conn_configured\u003d0, convincing ourselves that we\nhad stagnated in our configuration attempts. Avoid this situation by\nstarting conn_seq\u003dALL_CONNECTORS, and repeating until we find no more\nconnectors to configure.\n\nFixes: 754a76591b12 (\"drm/i915/fbdev: Stop repeating tile configuration on stagnation\")\nReported-by: Maarten Lankhorst \u003cmaarten.lankhorst@linux.intel.com\u003e\nSigned-off-by: Chris Wilson \u003cchris@chris-wilson.co.uk\u003e\nCc: Maarten Lankhorst \u003cmaarten.lankhorst@linux.intel.com\u003e\nReviewed-by: Maarten Lankhorst \u003cmaarten.lankhorst@linux.intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20190215123019.32283-1-chris@chris-wilson.co.uk\nCc: \u003cstable@vger.kernel.org\u003e # v3.19+\n(cherry picked from commit d9b308b1f8a1acc0c3279f443d4fe0f9f663252e)\nSigned-off-by: Jani Nikula \u003cjani.nikula@intel.com\u003e\n" }, { "commit": "40e196a906d969fd10d885c692d2674b3d657006", "tree": "1d21b3fdbf6b367d9ab7bee2ed74422ab6b59600", "parents": [ "b5372fe5dc84235dbe04998efdede3c4daa866a9", "1765f5dcd00963e33f1b8a4e0f34061fbc0e2f7f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Feb 19 16:13:19 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Feb 19 16:13:19 2019 -0800" }, "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net\n\nPull networking fixes from David Miller:\n\n 1) Fix suspend and resume in mt76x0u USB driver, from Stanislaw\n Gruszka.\n\n 2) Missing memory barriers in xsk, from Magnus Karlsson.\n\n 3) rhashtable fixes in mac80211 from Herbert Xu.\n\n 4) 32-bit MIPS eBPF JIT fixes from Paul Burton.\n\n 5) Fix for_each_netdev_feature() on big endian, from Hauke Mehrtens.\n\n 6) GSO validation fixes from Willem de Bruijn.\n\n 7) Endianness fix for dwmac4 timestamp handling, from Alexandre Torgue.\n\n 8) More strict checks in tcp_v4_err(), from Eric Dumazet.\n\n 9) af_alg_release should NULL out the sk after the sock_put(), from Mao\n Wenan.\n\n10) Missing unlock in mac80211 mesh error path, from Wei Yongjun.\n\n11) Missing device put in hns driver, from Salil Mehta.\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (44 commits)\n sky2: Increase D3 delay again\n vhost: correctly check the return value of translate_desc() in log_used()\n net: netcp: Fix ethss driver probe issue\n net: hns: Fixes the missing put_device in positive leg for roce reset\n net: stmmac: Fix a race in EEE enable callback\n qed: Fix iWARP syn packet mac address validation.\n qed: Fix iWARP buffer size provided for syn packet processing.\n r8152: Add support for MAC address pass through on RTL8153-BD\n mac80211: mesh: fix missing unlock on error in table_path_del()\n net/mlx4_en: fix spelling mistake: \"quiting\" -\u003e \"quitting\"\n net: crypto set sk to NULL when af_alg_release.\n net: Do not allocate page fragments that are not skb aligned\n mm: Use fixed constant in page_frag_alloc instead of size + 1\n tcp: tcp_v4_err() should be more careful\n tcp: clear icsk_backoff in tcp_write_queue_purge()\n net: mv643xx_eth: disable clk on error path in mv643xx_eth_shared_probe()\n qmi_wwan: apply SET_DTR quirk to Sierra WP7607\n net: stmmac: handle endianness in dwmac4_get_timestamp\n doc: Mention MSG_ZEROCOPY implementation for UDP\n mlxsw: __mlxsw_sp_port_headroom_set(): Fix a use of local variable\n ...\n" }, { "commit": "1765f5dcd00963e33f1b8a4e0f34061fbc0e2f7f", "tree": "e01cc8f57498ed03607c3ab9d32916cb0b95d685", "parents": [ "816db7663565cd23f74ed3d5c9240522e3fb0dda" ], "author": { "name": "Kai-Heng Feng", "email": "kai.heng.feng@canonical.com", "time": "Tue Feb 19 23:45:29 2019 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Feb 19 14:16:41 2019 -0800" }, "message": "sky2: Increase D3 delay again\n\nAnother platform requires even longer delay to make the device work\ncorrectly after S3.\n\nSo increase the delay to 300ms.\n\nBugLink: https://bugs.launchpad.net/bugs/1798921\n\nSigned-off-by: Kai-Heng Feng \u003ckai.heng.feng@canonical.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "816db7663565cd23f74ed3d5c9240522e3fb0dda", "tree": "c44fa4c748a27f6898a07c14a5e6afa936e7f223", "parents": [ "5cd856a5ef9aa189df757c322be34ad735a5b17f" ], "author": { "name": "Jason Wang", "email": "jasowang@redhat.com", "time": "Tue Feb 19 14:53:44 2019 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Feb 19 13:14:45 2019 -0800" }, "message": "vhost: correctly check the return value of translate_desc() in log_used()\n\nWhen fail, translate_desc() returns negative value, otherwise the\nnumber of iovs. So we should fail when the return value is negative\ninstead of a blindly check against zero.\n\nDetected by CoverityScan, CID# 1442593: Control flow issues (DEADCODE)\n\nFixes: cc5e71075947 (\"vhost: log dirty page correctly\")\nAcked-by: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nReported-by: Stephen Hemminger \u003cstephen@networkplumber.org\u003e\nSigned-off-by: Jason Wang \u003cjasowang@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8852ae9a82498207c15262b6294d14aea1796966", "tree": "70a2587cdbe86250b1f64a362a81b8c2df5fe757", "parents": [ "d2f0b53bda3193874f3905bc839888f895d1c0cf" ], "author": { "name": "Roman Li", "email": "Roman.Li@amd.com", "time": "Mon Jan 28 10:59:34 2019 -0500" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Feb 19 15:33:47 2019 -0500" }, "message": "drm/amd/display: Raise dispclk value for dce11\n\n[Why]\nThe visual corruption due to low display clock value.\nObserved on Carrizo 4K@60Hz.\n\n[How]\nThere was earlier patch for dce_update_clocks:\nAdding +15% workaround also to to dce11_update_clocks\n\nSigned-off-by: Roman Li \u003cRoman.Li@amd.com\u003e\nReviewed-by: Nicholas Kazlauskas \u003cNicholas.Kazlauskas@amd.com\u003e\nAcked-by: Leo Li \u003csunpeng.li@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n" }, { "commit": "d2f0b53bda3193874f3905bc839888f895d1c0cf", "tree": "e6877f9f75835e0acaf8f14304b9778b1000e0e9", "parents": [ "9db97d8aa8f8a518c421196a504dbfc942ef8d40" ], "author": { "name": "Leo (Hanghong) Ma", "email": "hanghong.ma@amd.com", "time": "Thu Jan 24 15:07:52 2019 -0500" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Feb 19 15:33:47 2019 -0500" }, "message": "drm/amd/display: Fix MST reboot/poweroff sequence\n\n[Why]\n\ndrm_dp_mst_topology_mgr_suspend() is added into the new reboot\nsequence, which disables the UP request at the beginning.\nTherefore sideband messages are blocked.\n\n[How]\n\nFinish MST sideband message transaction before UP request is\nsuppressed.\n\nSigned-off-by: Leo (Hanghong) Ma \u003changhong.ma@amd.com\u003e\nReviewed-by: Roman Li \u003cRoman.Li@amd.com\u003e\nAcked-by: Leo Li \u003csunpeng.li@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nCc: stable@vger.kernel.org\n" }, { "commit": "9db97d8aa8f8a518c421196a504dbfc942ef8d40", "tree": "5607853c6e2687aea11046f59d24e8c956258e41", "parents": [ "d33158530660bc89be3cc870a2152e4e9a76cac7" ], "author": { "name": "shaoyunl", "email": "shaoyun.liu@amd.com", "time": "Fri Feb 15 11:05:04 2019 -0500" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Feb 19 15:33:47 2019 -0500" }, "message": "drm/amdgpu: Update sdma golden setting for vega20\n\nAccording to hardware engineer, WRITE_BURST_LENGTH [9:8] in register\nSDMA0_CHICKEN_BITS need to change to 3 for better performance\n\nSigned-off-by: shaoyunl \u003cshaoyun.liu@amd.com\u003e\nAcked-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n" }, { "commit": "d33158530660bc89be3cc870a2152e4e9a76cac7", "tree": "41b5a18c290bd38d9b4926b117c5e1126482f7c1", "parents": [ "450d007d199e632a1a4c4b91302deacd7d56815f" ], "author": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Mon Feb 18 17:11:38 2019 -0500" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Feb 19 15:33:41 2019 -0500" }, "message": "drm/amdgpu: Set DPM_FLAG_NEVER_SKIP when enabling PM-runtime\n\nBased on a similar patch from Rafael for radeon.\n\nWhen using ATPX to control dGPU power, the state is not retained\nacross suspend and resume cycles by default. This can probably\nbe loosened for Hybrid Graphics (_PR3) laptops where I think the\nstate is properly retained.\n\nFixes: c62ec4610c40 (\"PM / core: Fix direct_complete handling for devices with no callbacks\")\nCc: Rafael J. Wysocki \u003crafael.j.wysocki@intel.com\u003e\nAcked-by: Rafael J. Wysocki \u003crafael.j.wysocki@intel.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nCc: stable@vger.kernel.org\n" }, { "commit": "450d007d199e632a1a4c4b91302deacd7d56815f", "tree": "fca2d17b40f4f03b4ddc80fca903aacca985c40b", "parents": [ "a3b22b9f11d9fbc48b0291ea92259a5a810e9438" ], "author": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Thu Feb 14 23:46:19 2019 +0100" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Feb 19 15:33:22 2019 -0500" }, "message": "gpu: drm: radeon: Set DPM_FLAG_NEVER_SKIP when enabling PM-runtime\n\nOn HP ProBook 4540s, if PM-runtime is enabled in the radeon driver\nand the direct-complete optimization is used for the radeon device\nduring system-wide suspend, the system doesn\u0027t resume.\n\nPreventing direct-complete from being used with the radeon device by\nsetting the DPM_FLAG_NEVER_SKIP driver flag for it makes the problem\ngo away, which indicates that direct-complete is not safe for the\nradeon driver in general and should not be used with it (at least\nfor now).\n\nThis fixes a regression introduced by commit c62ec4610c40\n(\"PM / core: Fix direct_complete handling for devices with no\ncallbacks\") which allowed direct-complete to be applied to\ndevices without PM callbacks (again) which in turn unlocked\ndirect-complete for radeon on HP ProBook 4540s.\n\nFixes: c62ec4610c40 (\"PM / core: Fix direct_complete handling for devices with no callbacks\")\nLink: https://bugzilla.kernel.org/show_bug.cgi?id\u003d201519\nReported-by: Ярослав Семченко \u003cukrkyi@gmail.com\u003e\nTested-by: Ярослав Семченко \u003cukrkyi@gmail.com\u003e\nSigned-off-by: Rafael J. Wysocki \u003crafael.j.wysocki@intel.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nCc: stable@vger.kernel.org\n" }, { "commit": "0661465ec86e8ae28f09a04e51425c486d64dfb1", "tree": "98eaaeacaa55d93f89da357f055f13c403e28e35", "parents": [ "50d6b3cf9403879911e06d69c7ef41e43f8f7b4b", "37685f6a63eeca2135d1f704e7638409a071b1f6" ], "author": { "name": "Tony Lindgren", "email": "tony@atomide.com", "time": "Tue Feb 19 08:47:17 2019 -0800" }, "committer": { "name": "Tony Lindgren", "email": "tony@atomide.com", "time": "Tue Feb 19 08:47:17 2019 -0800" }, "message": "Merge branch \u0027am335x-phy-fixes\u0027 into omap-for-v5.0/fixes-v2\n" }, { "commit": "37685f6a63eeca2135d1f704e7638409a071b1f6", "tree": "7434d556597f2f51fd446f19cf5fd1b1de88ced1", "parents": [ "759c962d3c9bb1a60e3b4b780daa66ee6d4be13a" ], "author": { "name": "Peter Ujfalusi", "email": "peter.ujfalusi@ti.com", "time": "Tue Feb 19 08:46:33 2019 -0800" }, "committer": { "name": "Tony Lindgren", "email": "tony@atomide.com", "time": "Tue Feb 19 08:46:33 2019 -0800" }, "message": "ARM: dts: am335x-evm: Fix PHY mode for ethernet\n\nThe PHY must add both tx and rx delay and not only on the tx clock.\nThe board uses AR8031_AL1A PHY where the rx delay is enabled by default,\nthe tx dealy is disabled.\n\nThe reason why rgmii-txid worked because the rx delay was not disabled by\nthe driver so essentially we ended up with rgmii-id PHY mode.\n\nSigned-off-by: Peter Ujfalusi \u003cpeter.ujfalusi@ti.com\u003e\nSigned-off-by: Tony Lindgren \u003ctony@atomide.com\u003e\n" }, { "commit": "759c962d3c9bb1a60e3b4b780daa66ee6d4be13a", "tree": "752d7e1f497ac77ee112ad5edf721fa61b1ebad6", "parents": [ "5b90df44fd9b415d8c5d11b92746212a63d3c47f" ], "author": { "name": "Peter Ujfalusi", "email": "peter.ujfalusi@ti.com", "time": "Tue Feb 19 08:46:32 2019 -0800" }, "committer": { "name": "Tony Lindgren", "email": "tony@atomide.com", "time": "Tue Feb 19 08:46:32 2019 -0800" }, "message": "ARM: dts: am335x-evmsk: Fix PHY mode for ethernet\n\nThe PHY must add both tx and rx delay and not only on the tx clock.\nThe board uses AR8031_AL1A PHY where the rx delay is enabled by default,\nthe tx dealy is disabled.\n\nThe reason why rgmii-txid worked because the rx delay was not disabled by\nthe driver so essentially we ended up with rgmii-id PHY mode.\n\nSigned-off-by: Peter Ujfalusi \u003cpeter.ujfalusi@ti.com\u003e\nSigned-off-by: Tony Lindgren \u003ctony@atomide.com\u003e\n" }, { "commit": "bdd22a41d55bb0068c8685e28839ed9492e96aba", "tree": "a00750f418de4d62d6732ab98ea5f7ee8e30f069", "parents": [ "6fc979179c98d2591784937d5618edc3e5cd31c1" ], "author": { "name": "Baruch Siach", "email": "baruch@tkos.co.il", "time": "Sun Feb 17 20:21:40 2019 +0200" }, "committer": { "name": "Gregory CLEMENT", "email": "gregory.clement@bootlin.com", "time": "Tue Feb 19 16:09:11 2019 +0100" }, "message": "arm64: dts: clearfog-gt-8k: fix SGMII PHY reset signal\n\nThe PHY reset signal goes to mpp43 on CP0.\n\nFixes: babc5544c293 (\"arm64: dts: clearfog-gt-8k: 1G eth PHY reset signal\")\nReported-by: Denis Odintsov \u003coversun@me.com\u003e\nSigned-off-by: Baruch Siach \u003cbaruch@tkos.co.il\u003e\nSigned-off-by: Gregory CLEMENT \u003cgregory.clement@bootlin.com\u003e\n" }, { "commit": "6fc979179c98d2591784937d5618edc3e5cd31c1", "tree": "1f94726439d0d3e2e248b3a31b216c258748d0ed", "parents": [ "b5f034845e70916fd33e172fad5ad530a29c10ab" ], "author": { "name": "Thomas Petazzoni", "email": "thomas.petazzoni@bootlin.com", "time": "Fri Feb 15 16:30:42 2019 +0100" }, "committer": { "name": "Gregory CLEMENT", "email": "gregory.clement@bootlin.com", "time": "Tue Feb 19 15:58:43 2019 +0100" }, "message": "ARM: dts: armada-xp: fix Armada XP boards NAND description\n\nCommit 3b79919946cd2cf4dac47842afc9a893acec4ed7 (\"ARM: dts:\narmada-370-xp: update NAND node with new bindings\") updated some\nMarvell Armada DT description to use the new NAND controller bindings,\nbut did it incorrectly for a number of boards: armada-xp-gp,\narmada-xp-db and armada-xp-lenovo-ix4-300d. Due to this, the NAND is\nno longer detected on those platforms.\n\nThis commit fixes that by properly using the new NAND DT binding. This\ncommit was runtime-tested on Armada XP GP, the two other platforms are\nonly compile-tested.\n\nFixes: 3b79919946cd2 (\"ARM: dts: armada-370-xp: update NAND node with new bindings\")\nCc: Miquel Raynal \u003cmiquel.raynal@bootlin.com\u003e\nSigned-off-by: Thomas Petazzoni \u003cthomas.petazzoni@bootlin.com\u003e\nSigned-off-by: Gregory CLEMENT \u003cgregory.clement@bootlin.com\u003e\n" }, { "commit": "268836649c07e0d38866006b5e94294b5bbc9806", "tree": "fd120e2175b89f0cae808c94990a87bde2811898", "parents": [ "c8c6ee611926685a7d753409e0a6e48b9e1b8748", "19dd0777773ab17b4d97f7105e836867c0cdecb4" ], "author": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Tue Feb 19 12:35:55 2019 +0100" }, "committer": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Tue Feb 19 12:35:55 2019 +0100" }, "message": "Merge tag \u0027asoc-fix-v5.0-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linus\n\nASoC: Fixes for v5.0\n\nA few small fixes, a driver fix for Samsung, a fix for refcounting of\nof_nodes in the simple-card driver that triggered on a lot of systems\nand a fix for topology error handling.\n" }, { "commit": "8cbd468bdeb5ed3acac2d7a9f7494d5b77e46297", "tree": "734ce65303257279ceb01c26399df6cd2b236e49", "parents": [ "a3b22b9f11d9fbc48b0291ea92259a5a810e9438" ], "author": { "name": "Yangtao Li", "email": "tiny.windzz@gmail.com", "time": "Sat Feb 16 11:31:48 2019 -0500" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Tue Feb 19 11:17:37 2019 +0100" }, "message": "cpufreq: scmi: Fix use-after-free in scmi_cpufreq_exit()\n\nThis issue was detected with the help of Coccinelle. So\nchange the order of function calls to fix it.\n\nFixes: 1690d8bb91e37 (cpufreq: scpi/scmi: Fix freeing of dynamic OPPs)\n\nSigned-off-by: Yangtao Li \u003ctiny.windzz@gmail.com\u003e\nAcked-by: Viresh Kumar \u003cviresh.kumar@linaro.org\u003e\nAcked-by: Sudeep Holla \u003csudeep.holla@arm.com\u003e\nCc: 4.20+ \u003cstable@vger.kernel.org\u003e # 4.20+\nSigned-off-by: Rafael J. Wysocki \u003crafael.j.wysocki@intel.com\u003e\n" }, { "commit": "5cd856a5ef9aa189df757c322be34ad735a5b17f", "tree": "89072d7d973784c8fb131aa72acb12e92bc3164c", "parents": [ "1f43f400a2cbb02f3d34de8fe30075c070254816", "c93a49b9769e435990c82297aa0baa31e1538790" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 18 17:56:30 2019 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 18 17:56:30 2019 -0800" }, "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf\n\nPablo Neira Ayuso says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nNetfilter/IPVS fixes for net\n\nThe following patchset contains Netfilter/IPVS fixes for net:\n\n1) Follow up patch to fix a compilation warning in a recent IPVS fix:\n 098e13f5b21d (\"ipvs: fix dependency on nf_defrag_ipv6\").\n\n2) Bogus ENOENT error on flush after rule deletion in the same batch,\n reported by Phil Sutter.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1f43f400a2cbb02f3d34de8fe30075c070254816", "tree": "51242a6615795e24aeb821d59f19d3ce561fa15d", "parents": [ "4d96e13ee9cd1f7f801e8c7f4b12f09d1da4a5d8" ], "author": { "name": "Murali Karicheri", "email": "m-karicheri2@ti.com", "time": "Mon Feb 18 15:10:51 2019 -0500" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 18 17:49:24 2019 -0800" }, "message": "net: netcp: Fix ethss driver probe issue\n\nRecent commit below has introduced a bug in netcp driver that causes\nthe ethss driver probe failure and thus break the networking function\non K2 SoCs such as K2HK, K2L, K2E etc. This patch fixes the issue to\nrestore networking on the above SoCs.\n\nFixes: 21c328dcecfc (\"net: ethernet: Convert to using %pOFn instead of device_node.name\")\nSigned-off-by: Murali Karicheri \u003cm-karicheri2@ti.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "4d96e13ee9cd1f7f801e8c7f4b12f09d1da4a5d8", "tree": "1bf746b882ec2191b4b467ed953eb837fbd4da10", "parents": [ "92a8c299a75d1397551bc067f6a26211346abf15" ], "author": { "name": "Salil Mehta", "email": "salil.mehta@huawei.com", "time": "Mon Feb 18 17:40:32 2019 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 18 17:45:00 2019 -0800" }, "message": "net: hns: Fixes the missing put_device in positive leg for roce reset\n\nThis patch fixes the missing device reference release-after-use in\nthe positive leg of the roce reset API of the HNS DSAF.\n\nFixes: c969c6e7ab8c (\"net: hns: Fix object reference leaks in hns_dsaf_roce_reset()\")\nReported-by: John Garry \u003cjohn.garry@huawei.com\u003e\nSigned-off-by: Salil Mehta \u003csalil.mehta@huawei.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "92a8c299a75d1397551bc067f6a26211346abf15", "tree": "0e466bb1a17a5ac1aadf7b5cbac2fbee94b45765", "parents": [ "8a7493e58ad688eb23b81e45461c5d314f4402f1", "d04ca383860bef90a0dab4eb397907f7f05e839e" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 18 17:40:47 2019 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 18 17:40:47 2019 -0800" }, "message": "Merge tag \u0027wireless-drivers-for-davem-2019-02-18\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers\n\nKalle Valo says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nwireless-drivers fixes for 5.0\n\nHopefully the last set of fixes for 5.0, only fix this time.\n\nmt76\n\n* fix regression with resume on mt76x0u USB devices\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8a7493e58ad688eb23b81e45461c5d314f4402f1", "tree": "7bed5d973606e75cb3ba9e2bf3c1fe441de0cbe8", "parents": [ "694d79027ef496afe3d87ec1738f5c7fb54e04f5" ], "author": { "name": "Jose Abreu", "email": "jose.abreu@synopsys.com", "time": "Mon Feb 18 14:35:03 2019 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 18 17:39:11 2019 -0800" }, "message": "net: stmmac: Fix a race in EEE enable callback\n\nWe are saving the status of EEE even before we try to enable it. This\nleads to a race with XMIT function that tries to arm EEE timer before we\nset it up.\n\nFix this by only saving the EEE parameters after all operations are\nperformed with success.\n\nSigned-off-by: Jose Abreu \u003cjoabreu@synopsys.com\u003e\nFixes: d765955d2ae0 (\"stmmac: add the Energy Efficient Ethernet support\")\nCc: Joao Pinto \u003cjpinto@synopsys.com\u003e\nCc: David S. Miller \u003cdavem@davemloft.net\u003e\nCc: Giuseppe Cavallaro \u003cpeppe.cavallaro@st.com\u003e\nCc: Alexandre Torgue \u003calexandre.torgue@st.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "694d79027ef496afe3d87ec1738f5c7fb54e04f5", "tree": "b5182e46246b5a2652f8f5a9fdae48cd4dcb1911", "parents": [ "8e29d23e28ee7fb995a00c1ca7e1a4caf5070b12", "8be3dadf04050c2907760ec1955ca1c8fbc25585" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 18 16:51:54 2019 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 18 16:51:54 2019 -0800" }, "message": "Merge branch \u0027qed-iWARP\u0027\n\nMichal Kalderon says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nqed: iWARP - fix some syn related issues.\n\nThis series fixes two bugs related to iWARP syn processing flow.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8be3dadf04050c2907760ec1955ca1c8fbc25585", "tree": "b5182e46246b5a2652f8f5a9fdae48cd4dcb1911", "parents": [ "9addc92730df55e2c05e8d3f69267a89d65bcba8" ], "author": { "name": "Michal Kalderon", "email": "michal.kalderon@marvell.com", "time": "Mon Feb 18 15:24:03 2019 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 18 16:51:54 2019 -0800" }, "message": "qed: Fix iWARP syn packet mac address validation.\n\nThe ll2 forwards all syn packets to the driver without validating the mac\naddress. Add validation check in the driver\u0027s iWARP listener flow and drop\nthe packet if it isn\u0027t intended for the device.\n\nSigned-off-by: Ariel Elior \u003cariel.elior@marvell.com\u003e\nSigned-off-by: Michal Kalderon \u003cmichal.kalderon@marvell.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9addc92730df55e2c05e8d3f69267a89d65bcba8", "tree": "47fdcab4d3e15f57ba8f038f26b201e1b7b2d6ae", "parents": [ "8e29d23e28ee7fb995a00c1ca7e1a4caf5070b12" ], "author": { "name": "Michal Kalderon", "email": "michal.kalderon@marvell.com", "time": "Mon Feb 18 15:24:02 2019 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 18 16:51:54 2019 -0800" }, "message": "qed: Fix iWARP buffer size provided for syn packet processing.\n\nThe assumption that the maximum size of a syn packet is 128 bytes\nis wrong. Tunneling headers were not accounted for.\nAllocate buffers large enough for mtu.\n\nSigned-off-by: Ariel Elior \u003cariel.elior@marvell.com\u003e\nSigned-off-by: Michal Kalderon \u003cmichal.kalderon@marvell.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8f5b27347e88b171c755562f0090ce40e514fc00", "tree": "1c989d581531add727badc917fb5363fda471a49", "parents": [ "a58007621be33e9f7c7bed5d5ff8ecb914e1044a" ], "author": { "name": "Alexey Kardashevskiy", "email": "aik@ozlabs.ru", "time": "Mon Feb 18 16:58:01 2019 +1100" }, "committer": { "name": "Michael Ellerman", "email": "mpe@ellerman.id.au", "time": "Tue Feb 19 11:51:18 2019 +1100" }, "message": "powerpc/powernv/sriov: Register IOMMU groups for VFs\n\nThe compound IOMMU group rework moved iommu_register_group() together\nin pnv_pci_ioda_setup_iommu_api() (which is a part of\nppc_md.pcibios_fixup). As the result, pnv_ioda_setup_bus_iommu_group()\ndoes not create groups any more, it only adds devices to groups.\n\nThis works fine for boot time devices. However IOMMU groups for\nSRIOV\u0027s VFs were added by pnv_ioda_setup_bus_iommu_group() so this got\nbroken: pnv_tce_iommu_bus_notifier() expects a group to be registered\nfor VF and it is not.\n\nThis adds missing group registration and adds a NULL pointer check\ninto the bus notifier so we won\u0027t crash if there is no group, although\nit is not expected to happen now because of the change above.\n\nExample oops seen prior to this patch:\n\n $ echo 1 \u003e /sys/bus/pci/devices/0000\\:01\\:00.0/sriov_numvfs\n Unable to handle kernel paging request for data at address 0x00000030\n Faulting instruction address: 0xc0000000004a6018\n Oops: Kernel access of bad area, sig: 11 [#1]\n LE SMP NR_CPUS\u003d2048 NUMA PowerNV\n CPU: 46 PID: 7006 Comm: bash Not tainted 4.15-ish\n NIP: c0000000004a6018 LR: c0000000004a6014 CTR: 0000000000000000\n REGS: c000008fc876b400 TRAP: 0300 Not tainted (4.15-ish)\n MSR: 900000000280b033 \u003cSF,HV,VEC,VSX,EE,FP,ME,IR,DR,RI,LE\u003e\n CFAR: c000000000d0be20 DAR: 0000000000000030 DSISR: 40000000 SOFTE: 1\n ...\n NIP sysfs_do_create_link_sd.isra.0+0x68/0x150\n LR sysfs_do_create_link_sd.isra.0+0x64/0x150\n Call Trace:\n pci_dev_type+0x0/0x30 (unreliable)\n iommu_group_add_device+0x8c/0x600\n iommu_add_device+0xe8/0x180\n pnv_tce_iommu_bus_notifier+0xb0/0xf0\n notifier_call_chain+0x9c/0x110\n blocking_notifier_call_chain+0x64/0xa0\n device_add+0x524/0x7d0\n pci_device_add+0x248/0x450\n pci_iov_add_virtfn+0x294/0x3e0\n pci_enable_sriov+0x43c/0x580\n mlx5_core_sriov_configure+0x15c/0x2f0 [mlx5_core]\n sriov_numvfs_store+0x180/0x240\n dev_attr_store+0x3c/0x60\n sysfs_kf_write+0x64/0x90\n kernfs_fop_write+0x1ac/0x240\n __vfs_write+0x3c/0x70\n vfs_write+0xd8/0x220\n SyS_write+0x6c/0x110\n system_call+0x58/0x6c\n\nFixes: 0bd971676e68 (\"powerpc/powernv/npu: Add compound IOMMU groups\")\nSigned-off-by: Alexey Kardashevskiy \u003caik@ozlabs.ru\u003e\nReported-by: Santwana Samantray \u003csantwana.samantray@in.ibm.com\u003e\nSigned-off-by: Michael Ellerman \u003cmpe@ellerman.id.au\u003e\n" }, { "commit": "b5372fe5dc84235dbe04998efdede3c4daa866a9", "tree": "75ca80d49613a8daf9b2f59707fb051eb1e545f6", "parents": [ "301e361072e56a6d6afbf952ae5e746dc8bbb865" ], "author": { "name": "Kees Cook", "email": "keescook@chromium.org", "time": "Mon Feb 18 16:36:48 2019 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Feb 18 16:49:36 2019 -0800" }, "message": "exec: load_script: Do not exec truncated interpreter path\n\nCommit 8099b047ecc4 (\"exec: load_script: don\u0027t blindly truncate\nshebang string\") was trying to protect against a confused exec of a\ntruncated interpreter path. However, it was overeager and also refused\nto truncate arguments as well, which broke userspace, and it was\nreverted. This attempts the protection again, but allows arguments to\nremain truncated. In an effort to improve readability, helper functions\nand comments have been added.\n\nCo-developed-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Kees Cook \u003ckeescook@chromium.org\u003e\nCc: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nCc: Oleg Nesterov \u003coleg@redhat.com\u003e\nCc: Samuel Dionne-Riel \u003csamuel@dionne-riel.com\u003e\nCc: Richard Weinberger \u003crichard.weinberger@gmail.com\u003e\nCc: Graham Christensen \u003cgraham@grahamc.com\u003e\nCc: Michal Hocko \u003cmhocko@suse.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "8e29d23e28ee7fb995a00c1ca7e1a4caf5070b12", "tree": "bbd6f1371632cd55d993f07f9140a5c0b7aacaeb", "parents": [ "f2ffff085d287eec499f1fccd682796ad8010303" ], "author": { "name": "David Chen", "email": "david.chen7@dell.com", "time": "Sat Feb 16 17:16:42 2019 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 18 16:37:40 2019 -0800" }, "message": "r8152: Add support for MAC address pass through on RTL8153-BD\n\nRTL8153-BD is used in Dell DA300 type-C dongle.\nIt should be added to the whitelist of devices to activate MAC address\npass through.\n\nPer confirming with Realtek all devices containing RTL8153-BD should\nactivate MAC pass through and there won\u0027t use pass through bit on efuse\nlike in RTL8153-AD.\n\nSigned-off-by: David Chen \u003cdavid.chen7@dell.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f2ffff085d287eec499f1fccd682796ad8010303", "tree": "357c8e966af32e8034d912743d1ac4efbb7359fd", "parents": [ "21d2cb491b9e10bfdf10424673b43cd9eddc2da1" ], "author": { "name": "Wei Yongjun", "email": "weiyongjun1@huawei.com", "time": "Mon Feb 18 11:29:29 2019 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 18 16:29:54 2019 -0800" }, "message": "mac80211: mesh: fix missing unlock on error in table_path_del()\n\nspin_lock_bh() is used in table_path_del() but rcu_read_unlock()\nis used for unlocking. Fix it by using spin_unlock_bh() instead\nof rcu_read_unlock() in the error handling case.\n\nFixes: b4c3fbe63601 (\"mac80211: Use linked list instead of rhashtable walk for mesh tables\")\nAcked-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: Wei Yongjun \u003cweiyongjun1@huawei.com\u003e\nSigned-off-by: Johannes Berg \u003cjohannes.berg@intel.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "21d2cb491b9e10bfdf10424673b43cd9eddc2da1", "tree": "a19c6b3a015a0374409c31209d710024aad4ce39", "parents": [ "9060cb719e61b685ec0102574e10337fa5f445ea" ], "author": { "name": "Colin Ian King", "email": "colin.king@canonical.com", "time": "Sun Feb 17 23:03:31 2019 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 18 12:06:42 2019 -0800" }, "message": "net/mlx4_en: fix spelling mistake: \"quiting\" -\u003e \"quitting\"\n\nThere is a spelling mistake in a en_err error message. Fix it.\n\nSigned-off-by: Colin Ian King \u003ccolin.king@canonical.com\u003e\nReviewed-by: Tariq Toukan \u003ctariqt@mellanox.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9060cb719e61b685ec0102574e10337fa5f445ea", "tree": "f990565c095b5a85c66fea71fe1d00e71a21893f", "parents": [ "254a1a2b2c2eb4332e9f8d73f7cd35b97abc6493" ], "author": { "name": "Mao Wenan", "email": "maowenan@huawei.com", "time": "Mon Feb 18 10:44:44 2019 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Feb 18 12:01:24 2019 -0800" }, "message": "net: crypto set sk to NULL when af_alg_release.\n\nKASAN has found use-after-free in sockfs_setattr.\nThe existed commit 6d8c50dcb029 (\"socket: close race condition between sock_close()\nand sockfs_setattr()\") is to fix this simillar issue, but it seems to ignore\nthat crypto module forgets to set the sk to NULL after af_alg_release.\n\nKASAN report details as below:\nBUG: KASAN: use-after-free in sockfs_setattr+0x120/0x150\nWrite of size 4 at addr ffff88837b956128 by task syz-executor0/4186\n\nCPU: 2 PID: 4186 Comm: syz-executor0 Not tainted xxx + #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.10.2-1ubuntu1 04/01/2014\nCall Trace:\n dump_stack+0xca/0x13e\n print_address_description+0x79/0x330\n ? vprintk_func+0x5e/0xf0\n kasan_report+0x18a/0x2e0\n ? sockfs_setattr+0x120/0x150\n sockfs_setattr+0x120/0x150\n ? sock_register+0x2d0/0x2d0\n notify_change+0x90c/0xd40\n ? chown_common+0x2ef/0x510\n chown_common+0x2ef/0x510\n ? chmod_common+0x3b0/0x3b0\n ? __lock_is_held+0xbc/0x160\n ? __sb_start_write+0x13d/0x2b0\n ? __mnt_want_write+0x19a/0x250\n do_fchownat+0x15c/0x190\n ? __ia32_sys_chmod+0x80/0x80\n ? trace_hardirqs_on_thunk+0x1a/0x1c\n __x64_sys_fchownat+0xbf/0x160\n ? lockdep_hardirqs_on+0x39a/0x5e0\n do_syscall_64+0xc8/0x580\n entry_SYSCALL_64_after_hwframe+0x49/0xbe\nRIP: 0033:0x462589\nCode: f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 48 89 f8 48 89\nf7 48 89 d6 48 89\nca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3\n48 c7 c1 bc ff ff\nff f7 d8 64 89 01 48\nRSP: 002b:00007fb4b2c83c58 EFLAGS: 00000246 ORIG_RAX: 0000000000000104\nRAX: ffffffffffffffda RBX: 000000000072bfa0 RCX: 0000000000462589\nRDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000007\nRBP: 0000000000000005 R08: 0000000000001000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 00007fb4b2c846bc\nR13: 00000000004bc733 R14: 00000000006f5138 R15: 00000000ffffffff\n\nAllocated by task 4185:\n kasan_kmalloc+0xa0/0xd0\n __kmalloc+0x14a/0x350\n sk_prot_alloc+0xf6/0x290\n sk_alloc+0x3d/0xc00\n af_alg_accept+0x9e/0x670\n hash_accept+0x4a3/0x650\n __sys_accept4+0x306/0x5c0\n __x64_sys_accept4+0x98/0x100\n do_syscall_64+0xc8/0x580\n entry_SYSCALL_64_after_hwframe+0x49/0xbe\n\nFreed by task 4184:\n __kasan_slab_free+0x12e/0x180\n kfree+0xeb/0x2f0\n __sk_destruct+0x4e6/0x6a0\n sk_destruct+0x48/0x70\n __sk_free+0xa9/0x270\n sk_free+0x2a/0x30\n af_alg_release+0x5c/0x70\n __sock_release+0xd3/0x280\n sock_close+0x1a/0x20\n __fput+0x27f/0x7f0\n task_work_run+0x136/0x1b0\n exit_to_usermode_loop+0x1a7/0x1d0\n do_syscall_64+0x461/0x580\n entry_SYSCALL_64_after_hwframe+0x49/0xbe\n\nSyzkaller reproducer:\nr0 \u003d perf_event_open(\u0026(0x7f0000000000)\u003d{0x0, 0x70, 0x0, 0x0, 0x0, 0x0,\n0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0,\n0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0,\n0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0,\n0xffffffffffffffff, 0x0)\nr1 \u003d socket$alg(0x26, 0x5, 0x0)\ngetrusage(0x0, 0x0)\nbind(r1, \u0026(0x7f00000001c0)\u003d@alg\u003d{0x26, \u0027hash\\x00\u0027, 0x0, 0x0,\n\u0027sha256-ssse3\\x00\u0027}, 0x80)\nr2 \u003d accept(r1, 0x0, 0x0)\nr3 \u003d accept4$unix(r2, 0x0, 0x0, 0x0)\nr4 \u003d dup3(r3, r0, 0x0)\nfchownat(r4, \u0026(0x7f00000000c0)\u003d\u0027\\x00\u0027, 0x0, 0x0, 0x1000)\n\nFixes: 6d8c50dcb029 (\"socket: close race condition between sock_close() and sockfs_setattr()\")\nSigned-off-by: Mao Wenan \u003cmaowenan@huawei.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" } ], "next": "19dd0777773ab17b4d97f7105e836867c0cdecb4" }