)]}' { "log": [ { "commit": "0ecfebd2b52404ae0c54a878c872bb93363ada36", "tree": "7092f485bee0135d50f30bdcd022e8c5c6def273", "parents": [ "46713c3d2f8da5e3d8ddd2249bcb1d9974fb5d28" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 07 15:41:56 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jul 07 15:41:56 2019 -0700" }, "message": "Linux 5.2\n" }, { "commit": "46713c3d2f8da5e3d8ddd2249bcb1d9974fb5d28", "tree": "85bf3562082388968bb831dcf9ea2d004fef1147", "parents": [ "bcc0e65f47def010d8d1c4cf09bdc698fe061b77", "7e41c3c9b6ceb2da52ba9d2b328d1851f269a48e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jul 06 11:48:39 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jul 06 11:48:39 2019 -0700" }, "message": "Merge tag \u0027for-linus-20190706\u0027 of git://git.kernel.dk/linux-block\n\nPull block fix from Jens Axboe:\n \"Just a single fix for a patch from Greg KH, which reportedly break\n block debugfs locations for certain setups. Trivial enough that I\n think we should include it now, rather than wait and release 5.2 with\n it, since it\u0027s a regression in this series\"\n\n* tag \u0027for-linus-20190706\u0027 of git://git.kernel.dk/linux-block:\n blk-mq: fix up placement of debugfs directory of queue files\n" }, { "commit": "bcc0e65f47def010d8d1c4cf09bdc698fe061b77", "tree": "8ef8ed24e4b3fd4deb5ad66ded77264626ac3850", "parents": [ "2692982b0800c6f6446e9edd4743239666e69f2e", "f2ff671f894151a611eae246a1f25b61d6c0354b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jul 06 10:32:12 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jul 06 10:32:12 2019 -0700" }, "message": "Merge tag \u0027mips_fixes_5.2_2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mips/linux\n\nPull MIPS fixes from Paul Burton:\n \"A few more MIPS fixes:\n\n - Fix a silly typo in virt_addr_valid which led to completely bogus\n behavior (that happened to stop tripping up hardened usercopy\n despite being broken).\n\n - Fix UART parity setup on AR933x systems.\n\n - A build fix for non-Linux build machines.\n\n - Have the \u0027all\u0027 make target build DTBs, primarily to fit in with the\n behavior of scripts/package/builddeb.\n\n - Handle an execution hazard in TLB exceptions that use KScratch\n registers, which could inadvertently clobber the $1 register on\n some generally higher-end out-of-order CPUs.\n\n - A MAINTAINERS update to fix the path to the NAND driver for Ingenic\n systems\"\n\n* tag \u0027mips_fixes_5.2_2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mips/linux:\n MAINTAINERS: Correct path to moved files\n MIPS: Add missing EHB in mtc0 -\u003e mfc0 sequence.\n MIPS: have \"plain\" make calls build dtbs for selected platforms\n MIPS: fix build on non-linux hosts\n MIPS: ath79: fix ar933x uart parity mode\n MIPS: Fix bounds check virt_addr_valid\n" }, { "commit": "2692982b0800c6f6446e9edd4743239666e69f2e", "tree": "28b683f9276f13c2612068f812dd9027a96f6ae8", "parents": [ "4f8b49092c37cf0c87c43bb2698d43c71cf0e4e5", "f6034225442c4a87906d36e975fd9e99a8f95487" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jul 06 10:06:37 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jul 06 10:06:37 2019 -0700" }, "message": "Merge tag \u0027dmaengine-fix-5.2\u0027 of git://git.infradead.org/users/vkoul/slave-dma\n\nPull dmaengine fixes from Vinod Koul:\n\n - bam_dma fix for completed descriptor count\n\n - fix for imx-sdma remove BD_INTR for channel0 and use-after-free on\n probe error path\n\n - endian bug fix in jz4780 IRQ handler\n\n* tag \u0027dmaengine-fix-5.2\u0027 of git://git.infradead.org/users/vkoul/slave-dma:\n dmaengine: qcom: bam_dma: Fix completed descriptors count\n dmaengine: imx-sdma: remove BD_INTR for channel0\n dmaengine: imx-sdma: fix use-after-free on probe error path\n dmaengine: jz4780: Fix an endian bug in IRQ handler\n" }, { "commit": "4f8b49092c37cf0c87c43bb2698d43c71cf0e4e5", "tree": "b165dffcdb9cbe09a418d1af50d94d72dfa228c3", "parents": [ "ceacbc0e145e3b27d8b12eecb881f9d87702765a", "5dd6c49339126c2c8df2179041373222362d6e49" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jul 06 09:56:20 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jul 06 09:56:20 2019 -0700" }, "message": "Merge tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi\n\nPull SCSI fixes from James Bottomley:\n \"Two iscsi fixes.\n\n One for an oops in the client which can be triggered by the server\n authentication protocol and the other in the target code which causes\n data corruption\"\n\n* tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:\n scsi: iscsi: set auth_protocol back to NULL if CHAP_A value is not supported\n scsi: target/iblock: Fix overrun in WRITE SAME emulation\n" }, { "commit": "ceacbc0e145e3b27d8b12eecb881f9d87702765a", "tree": "4012d1c9a737e7737f50340cd91e7e1e87d77e0a", "parents": [ "69bf4b6b54fb7f52b7ea9ce28d4a360cd5ec956d", "75f2d86b20bf6aec0392d6dd2ae3ffff26d2ae0e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jul 06 09:53:08 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jul 06 09:53:08 2019 -0700" }, "message": "Merge branch \u0027fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs\n\nPull vfs fixlet from Al Viro:\n \"Fix bogus default y in Kconfig (VALIDATE_FS_PARSER)\n\n That thing should not be turned on by default, especially since it\u0027s\n not quiet in case it finds no problems. Geert has sent the obvious fix\n quite a few times, but it fell through the cracks\"\n\n* \u0027fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs:\n fs: VALIDATE_FS_PARSER should default to n\n" }, { "commit": "7e41c3c9b6ceb2da52ba9d2b328d1851f269a48e", "tree": "1d72ad4ad3a48ea2d054b222f02d02e57bf0f1b9", "parents": [ "e6feaf215f07dd98d03ee783c9dd4c7f7e55b74d" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Sat Jul 06 17:50:32 2019 +0200" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Sat Jul 06 10:07:38 2019 -0600" }, "message": "blk-mq: fix up placement of debugfs directory of queue files\n\nWhen the blk-mq debugfs file creation logic was \"cleaned up\" it was\ncleaned up too much, causing the queue file to not be created in the\ncorrect location. Turns out the check for the directory being present\nis needed as if that has not happened yet, the files should not be\ncreated, and the function will be called later on in the initialization\ncode so that the files can be created in the correct location.\n\nFixes: 6cfc0081b046 (\"blk-mq: no need to check return value of debugfs_create functions\")\nReported-by: Stephen Rothwell \u003csfr@canb.auug.org.au\u003e\nCc: linux-block@vger.kernel.org\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "69bf4b6b54fb7f52b7ea9ce28d4a360cd5ec956d", "tree": "bb302929eff7522a2fd69dd54240088e6e135e82", "parents": [ "9fdb86c8cf9ae201d97334ecc2d1918800cac424" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 19:55:18 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 19:55:18 2019 -0700" }, "message": "Revert \"mm: page cache: store only head pages in i_pages\"\n\nThis reverts commit 5fd4ca2d84b249f0858ce28cf637cf25b61a398f.\n\nMikhail Gavrilov reports that it causes the VM_BUG_ON_PAGE() in\n__delete_from_swap_cache() to trigger:\n\n page:ffffd6d34dff0000 refcount:1 mapcount:1 mapping:ffff97812323a689 index:0xfecec363\n anon\n flags: 0x17fffe00080034(uptodate|lru|active|swapbacked)\n raw: 0017fffe00080034 ffffd6d34c67c508 ffffd6d3504b8d48 ffff97812323a689\n raw: 00000000fecec363 0000000000000000 0000000100000000 ffff978433ace000\n page dumped because: VM_BUG_ON_PAGE(entry !\u003d page)\n page-\u003emem_cgroup:ffff978433ace000\n ------------[ cut here ]------------\n kernel BUG at mm/swap_state.c:170!\n invalid opcode: 0000 [#1] SMP NOPTI\n CPU: 1 PID: 221 Comm: kswapd0 Not tainted 5.2.0-0.rc2.git0.1.fc31.x86_64 #1\n Hardware name: System manufacturer System Product Name/ROG STRIX X470-I GAMING, BIOS 2202 04/11/2019\n RIP: 0010:__delete_from_swap_cache+0x20d/0x240\n Code: 30 65 48 33 04 25 28 00 00 00 75 4a 48 83 c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f c3 48 c7 c6 2f dc 0f 8a 48 89 c7 e8 93 1b fd ff \u003c0f\u003e 0b 48 c7 c6 a8 74 0f 8a e8 85 1b fd ff 0f 0b 48 c7 c6 a8 7d 0f\n RSP: 0018:ffffa982036e7980 EFLAGS: 00010046\n RAX: 0000000000000021 RBX: 0000000000000040 RCX: 0000000000000006\n RDX: 0000000000000000 RSI: 0000000000000086 RDI: ffff97843d657900\n RBP: 0000000000000001 R08: ffffa982036e7835 R09: 0000000000000535\n R10: ffff97845e21a46c R11: ffffa982036e7835 R12: ffff978426387120\n R13: 0000000000000000 R14: ffffd6d34dff0040 R15: ffffd6d34dff0000\n FS: 0000000000000000(0000) GS:ffff97843d640000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00002cba88ef5000 CR3: 000000078a97c000 CR4: 00000000003406e0\n Call Trace:\n delete_from_swap_cache+0x46/0xa0\n try_to_free_swap+0xbc/0x110\n swap_writepage+0x13/0x70\n pageout.isra.0+0x13c/0x350\n shrink_page_list+0xc14/0xdf0\n shrink_inactive_list+0x1e5/0x3c0\n shrink_node_memcg+0x202/0x760\n shrink_node+0xe0/0x470\n balance_pgdat+0x2d1/0x510\n kswapd+0x220/0x420\n kthread+0xfb/0x130\n ret_from_fork+0x22/0x40\n\nand it\u0027s not immediately obvious why it happens. It\u0027s too late in the\nrc cycle to do anything but revert for now.\n\nLink: https://lore.kernel.org/lkml/CABXGCsN9mYmBD-4GaaeW_NrDu+FDXLzr_6x+XNxfmFV6QkYCDg@mail.gmail.com/\nReported-and-bisected-by: Mikhail Gavrilov \u003cmikhail.v.gavrilov@gmail.com\u003e\nSuggested-by: Jan Kara \u003cjack@suse.cz\u003e\nCc: Michal Hocko \u003cmhocko@kernel.org\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: Matthew Wilcox \u003cwilly@infradead.org\u003e\nCc: Kirill Shutemov \u003ckirill@shutemov.name\u003e\nCc: William Kucharski \u003cwilliam.kucharski@oracle.com\u003e\nCc: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "9fdb86c8cf9ae201d97334ecc2d1918800cac424", "tree": "0121811d504f2772717baad77f8b5ddc01a37f10", "parents": [ "0e63665a1bfd606f538da90473648ca5b827d60f", "e644fa18e2ffc8895ca30dade503ae10128573a6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 19:13:24 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 19:13:24 2019 -0700" }, "message": "Merge tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/virt/kvm/kvm\n\nPull kvm fixes from Paolo Bonzini:\n \"x86 bugfix patches and one compilation fix for ARM\"\n\n* tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/virt/kvm/kvm:\n KVM: arm64/sve: Fix vq_present() macro to yield a bool\n KVM: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC\n KVM: nVMX: Change KVM_STATE_NESTED_EVMCS to signal vmcs12 is copied from eVMCS\n KVM: nVMX: Allow restore nested-state to enable eVMCS when vCPU in SMM\n KVM: x86: degrade WARN to pr_warn_ratelimited\n" }, { "commit": "0e63665a1bfd606f538da90473648ca5b827d60f", "tree": "b7a764d703427d4f787d5799aa76177393ad962d", "parents": [ "881ed91f7db58fcbe8fdca056907991c3c9d8f2d", "c7a87ceb17aee9222c069a97aee4647260c7b3a6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 19:07:57 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 19:07:57 2019 -0700" }, "message": "Merge tag \u0027mtd/fixes-for-5.2-final\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mtd/linux\n\nPull mtf fixes from Miquel Raynal:\n\n - Fix the memory organization structure of a Macronix SPI-NAND chip.\n\n - Fix a build dependency wrongly described.\n\n - Fix the sunxi NAND driver for A23/A33 SoCs by (a) reverting the\n faulty commit introducing broken DMA support and (b) applying another\n commit bringing working DMA support.\n\n* tag \u0027mtd/fixes-for-5.2-final\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mtd/linux:\n mtd: rawnand: sunxi: Add A23/A33 DMA support with extra MBUS configuration\n Revert \"mtd: rawnand: sunxi: Add A23/A33 DMA support\"\n mtd: rawnand: ingenic: Fix ingenic_ecc dependency\n mtd: spinand: Fix max_bad_eraseblocks_per_lun info in memorg\n" }, { "commit": "881ed91f7db58fcbe8fdca056907991c3c9d8f2d", "tree": "0de7541140c2a43d31ad934c130f825314f4087f", "parents": [ "a8f46b5afe1c0a83c3013a339e6aeccc2f37342d", "f3a3ea28edd9a17588fede4ff53bc02d986cf4d1" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 19:04:57 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 19:04:57 2019 -0700" }, "message": "Merge branch \u0027i2c/for-current\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux\n\nPull i2c fixlet from Wolfram Sang:\n \"I2C has a MAINTAINERS update which will be benfitial for developers,\n so let\u0027s add it right away\"\n\n* \u0027i2c/for-current\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux:\n i2c: tegra: Add Dmitry as a reviewer\n" }, { "commit": "a8f46b5afe1c0a83c3013a339e6aeccc2f37342d", "tree": "83400e22faa4d383e7e0b385940790f796f0793e", "parents": [ "3f9c4dc63309286a6513a86aac35ffc445cb9d1a", "3b2d4dcf71c4a91b420f835e52ddea8192300a3b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 19:00:37 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 19:00:37 2019 -0700" }, "message": "Merge tag \u0027nfsd-5.2-2\u0027 of git://linux-nfs.org/~bfields/linux\n\nPull nfsd fixes from Bruce Fields:\n \"Two more quick bugfixes for nfsd: fixing a regression causing mount\n failures on high-memory machines and fixing the DRC over RDMA\"\n\n* tag \u0027nfsd-5.2-2\u0027 of git://linux-nfs.org/~bfields/linux:\n nfsd: Fix overflow causing non-working mounts on 1 TB machines\n svcrdma: Ignore source port when computing DRC hash\n" }, { "commit": "c7a87ceb17aee9222c069a97aee4647260c7b3a6", "tree": "df674985e61420d2e06abebd37588377d83f4964", "parents": [ "4f032640bf5751ce792b69d2abdf18e0f379b3ce" ], "author": { "name": "Miquel Raynal", "email": "miquel.raynal@bootlin.com", "time": "Mon Apr 08 09:41:46 2019 +0200" }, "committer": { "name": "Miquel Raynal", "email": "miquel.raynal@bootlin.com", "time": "Fri Jul 05 22:30:58 2019 +0200" }, "message": "mtd: rawnand: sunxi: Add A23/A33 DMA support with extra MBUS configuration\n\nAllwinner NAND controllers can make use of DMA to enhance the I/O\nthroughput thanks to ECC pipelining. DMA handling with A23/A33 NAND IP\nis a bit different than with the older SoCs, hence the introduction of\na new compatible to handle:\n* the differences between register offsets,\n* the burst length change from 4 to minimum 8,\n* manage SRAM accesses through MBUS with extra configuration.\n\nFixes: c49836f05aa1 (\"mtd: rawnand: sunxi: Add A23/A33 DMA support\")\nSigned-off-by: Miquel Raynal \u003cmiquel.raynal@bootlin.com\u003e\n" }, { "commit": "4f032640bf5751ce792b69d2abdf18e0f379b3ce", "tree": "7513ead1eda437b845decf04e2a68e46981f4c06", "parents": [ "c403ec33b613a15d9fd8dde37f246b79cd56b5df" ], "author": { "name": "Miquel Raynal", "email": "miquel.raynal@bootlin.com", "time": "Fri Jul 05 11:25:29 2019 +0200" }, "committer": { "name": "Miquel Raynal", "email": "miquel.raynal@bootlin.com", "time": "Fri Jul 05 22:30:58 2019 +0200" }, "message": "Revert \"mtd: rawnand: sunxi: Add A23/A33 DMA support\"\n\nThis reverts commit c49836f05aa15282f7280e06ede3f6f8a6324833.\n\nThe commit is wrong and its approach actually does not work. Let\u0027s\nrevert it in order to add the feature with a clean patch.\n\nFixes: c49836f05aa1 (\"mtd: rawnand: sunxi: Add A23/A33 DMA support\")\nSigned-off-by: Miquel Raynal \u003cmiquel.raynal@bootlin.com\u003e\n" }, { "commit": "f3a3ea28edd9a17588fede4ff53bc02d986cf4d1", "tree": "379a65e45773ba35840ed3e4d5aa66c3399cef52", "parents": [ "6fbc7275c7a9ba97877050335f290341a1fd8dbf" ], "author": { "name": "Dmitry Osipenko", "email": "digetx@gmail.com", "time": "Sun Jun 23 20:46:55 2019 +0300" }, "committer": { "name": "Wolfram Sang", "email": "wsa@the-dreams.de", "time": "Fri Jul 05 20:46:56 2019 +0200" }, "message": "i2c: tegra: Add Dmitry as a reviewer\n\nI\u0027m contributing to Tegra\u0027s upstream development in general and happened\nto review the Tegra\u0027s I2C patches for awhile because I\u0027m actively using\nupstream kernel on all of my Tegra-powered devices and initially some of\nthe submitted patches were getting my attention since they were causing\nproblems. Recently Wolfram Sang asked whether I\u0027m interested in becoming\na reviewer for the driver and I don\u0027t mind at all.\n\nSigned-off-by: Dmitry Osipenko \u003cdigetx@gmail.com\u003e\n[wsa: ack was expressed by Thierry Reding in a mail thread]\nSigned-off-by: Wolfram Sang \u003cwsa@the-dreams.de\u003e\n" }, { "commit": "75f2d86b20bf6aec0392d6dd2ae3ffff26d2ae0e", "tree": "f5d74fbe75722443ca1aee816aa319985d8ea7f7", "parents": [ "570d7a98e7d6d5d8706d94ffd2d40adeaa318332" ], "author": { "name": "Geert Uytterhoeven", "email": "geert@linux-m68k.org", "time": "Mon Apr 01 13:53:57 2019 +0200" }, "committer": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Fri Jul 05 11:22:11 2019 -0400" }, "message": "fs: VALIDATE_FS_PARSER should default to n\n\nCONFIG_VALIDATE_FS_PARSER is a debugging tool to check that the parser\ntables are vaguely sane. It was set to default to \u0027Y\u0027 for the moment to\ncatch errors in upcoming fs conversion development.\n\nMake sure it is not enabled by default in the final release of v5.1.\n\nFixes: 31d921c7fb969172 (\"vfs: Add configuration parser helpers\")\nSigned-off-by: Geert Uytterhoeven \u003cgeert@linux-m68k.org\u003e\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n" }, { "commit": "e644fa18e2ffc8895ca30dade503ae10128573a6", "tree": "7e090af67f4e2b5e91305538daec75be26828cf9", "parents": [ "bb34e690e9340bc155ebed5a3d75fc63ff69e082" ], "author": { "name": "Zhang Lei", "email": "zhang.lei@jp.fujitsu.com", "time": "Wed Jul 03 18:42:50 2019 +0100" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Fri Jul 05 12:07:51 2019 +0200" }, "message": "KVM: arm64/sve: Fix vq_present() macro to yield a bool\n\nThe original implementation of vq_present() relied on aggressive\ninlining in order for the compiler to know that the code is\ncorrect, due to some const-casting issues. This was causing sparse\nand clang to complain, while GCC compiled cleanly.\n\nCommit 0c529ff789bc addressed this problem, but since vq_present()\nis no longer a function, there is now no implicit casting of the\nreturned value to the return type (bool).\n\nIn set_sve_vls(), this uncast bit value is compared against a bool,\nand so may spuriously compare as unequal when both are nonzero. As\na result, KVM may reject valid SVE vector length configurations as\ninvalid, and vice versa.\n\nFix it by forcing the returned value to a bool.\n\nSigned-off-by: Zhang Lei \u003czhang.lei@jp.fujitsu.com\u003e\nFixes: 0c529ff789bc (\"KVM: arm64: Implement vq_present() as a macro\")\nSigned-off-by: Dave Martin \u003cDave.Martin@arm.com\u003e [commit message rewrite]\nCc: Viresh Kumar \u003cviresh.kumar@linaro.org\u003e\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\n" }, { "commit": "f6034225442c4a87906d36e975fd9e99a8f95487", "tree": "10b9387054c280c946bbe8c504a6441e71e73b75", "parents": [ "3f93a4f297961c12bb17aa16cb3a4d1291823cae" ], "author": { "name": "Sricharan R", "email": "sricharan@codeaurora.org", "time": "Fri Jun 28 17:39:46 2019 +0530" }, "committer": { "name": "Vinod Koul", "email": "vkoul@kernel.org", "time": "Fri Jul 05 13:18:27 2019 +0530" }, "message": "dmaengine: qcom: bam_dma: Fix completed descriptors count\n\nOne space is left unused in circular FIFO to differentiate\n\u0027full\u0027 and \u0027empty\u0027 cases. So take that in to account while\ncounting for the descriptors completed.\n\nFixes the issue reported here,\n\thttps://lkml.org/lkml/2019/6/18/669\n\nCc: stable@vger.kernel.org\nReported-by: Srinivas Kandagatla \u003csrinivas.kandagatla@linaro.org\u003e\nSigned-off-by: Sricharan R \u003csricharan@codeaurora.org\u003e\nTested-by: Srinivas Kandagatla \u003csrinivas.kandagatla@linaro.org\u003e\nSigned-off-by: Vinod Koul \u003cvkoul@kernel.org\u003e\n" }, { "commit": "3f93a4f297961c12bb17aa16cb3a4d1291823cae", "tree": "ee2d983526825640a9fb6485a6116516b11f5e09", "parents": [ "2b8066c3deb9140fdf258417a51479b2aeaa7622" ], "author": { "name": "Robin Gong", "email": "yibin.gong@nxp.com", "time": "Fri Jun 21 16:23:06 2019 +0800" }, "committer": { "name": "Vinod Koul", "email": "vkoul@kernel.org", "time": "Fri Jul 05 13:15:37 2019 +0530" }, "message": "dmaengine: imx-sdma: remove BD_INTR for channel0\n\nIt is possible for an irq triggered by channel0 to be received later\nafter clks are disabled once firmware loaded during sdma probe. If\nthat happens then clearing them by writing to SDMA_H_INTR won\u0027t work\nand the kernel will hang processing infinite interrupts. Actually,\ndon\u0027t need interrupt triggered on channel0 since it\u0027s pollling\nSDMA_H_STATSTOP to know channel0 done rather than interrupt in\ncurrent code, just clear BD_INTR to disable channel0 interrupt to\navoid the above case.\nThis issue was brought by commit 1d069bfa3c78 (\"dmaengine: imx-sdma:\nack channel 0 IRQ in the interrupt handler\") which didn\u0027t take care\nthe above case.\n\nFixes: 1d069bfa3c78 (\"dmaengine: imx-sdma: ack channel 0 IRQ in the interrupt handler\")\nCc: stable@vger.kernel.org #5.0+\nSigned-off-by: Robin Gong \u003cyibin.gong@nxp.com\u003e\nReported-by: Sven Van Asbroeck \u003cthesven73@gmail.com\u003e\nTested-by: Sven Van Asbroeck \u003cthesven73@gmail.com\u003e\nReviewed-by: Michael Olbrich \u003cm.olbrich@pengutronix.de\u003e\nSigned-off-by: Vinod Koul \u003cvkoul@kernel.org\u003e\n" }, { "commit": "2b8066c3deb9140fdf258417a51479b2aeaa7622", "tree": "815c860736e7ddbec938d8370d7d6caab4a93635", "parents": [ "4c89cc73d1da42ae48b5c5dfbfd12304d0b86786" ], "author": { "name": "Sven Van Asbroeck", "email": "thesven73@gmail.com", "time": "Mon Jun 24 10:07:31 2019 -0400" }, "committer": { "name": "Vinod Koul", "email": "vkoul@kernel.org", "time": "Fri Jul 05 12:58:54 2019 +0530" }, "message": "dmaengine: imx-sdma: fix use-after-free on probe error path\n\nIf probe() fails anywhere beyond the point where\nsdma_get_firmware() is called, then a kernel oops may occur.\n\nProblematic sequence of events:\n1. probe() calls sdma_get_firmware(), which schedules the\n firmware callback to run when firmware becomes available,\n using the sdma instance structure as the context\n2. probe() encounters an error, which deallocates the\n sdma instance structure\n3. firmware becomes available, firmware callback is\n called with deallocated sdma instance structure\n4. use after free - kernel oops !\n\nSolution: only attempt to load firmware when we\u0027re certain\nthat probe() will succeed. This guarantees that the firmware\ncallback\u0027s context will remain valid.\n\nNote that the remove() path is unaffected by this issue: the\nfirmware loader will increment the driver module\u0027s use count,\nensuring that the module cannot be unloaded while the\nfirmware callback is pending or running.\n\nSigned-off-by: Sven Van Asbroeck \u003cTheSven73@gmail.com\u003e\nReviewed-by: Robin Gong \u003cyibin.gong@nxp.com\u003e\n[vkoul: fixed braces for if condition]\nSigned-off-by: Vinod Koul \u003cvkoul@kernel.org\u003e\n" }, { "commit": "4c89cc73d1da42ae48b5c5dfbfd12304d0b86786", "tree": "624c7e0af9e3bbd37d11f68c5d7fea7d4a6b946b", "parents": [ "d1fdb6d8f6a4109a4263176c84b899076a5f8008" ], "author": { "name": "Dan Carpenter", "email": "dan.carpenter@oracle.com", "time": "Mon Jun 24 16:49:40 2019 +0300" }, "committer": { "name": "Vinod Koul", "email": "vkoul@kernel.org", "time": "Fri Jul 05 12:45:56 2019 +0530" }, "message": "dmaengine: jz4780: Fix an endian bug in IRQ handler\n\nThe \"pending\" variable was a u32 but we cast it to an unsigned long\npointer when we do the for_each_set_bit() loop. The problem is that on\nbig endian 64bit systems that results in an out of bounds read.\n\nFixes: 4e4106f5e942 (\"dmaengine: jz4780: Fix transfers being ACKed too soon\")\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nSigned-off-by: Vinod Koul \u003cvkoul@kernel.org\u003e\n" }, { "commit": "3f9c4dc63309286a6513a86aac35ffc445cb9d1a", "tree": "ddb471b073644c612f559b8becf3f8b571e32a42", "parents": [ "ee39d46dcaf8f25894f13236d3d984d9a4d2fd3e", "a0b2cf792ac9db7bb73e599e516adfb9dca8e60b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 14:10:30 2019 +0900" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 14:10:30 2019 +0900" }, "message": "Merge tag \u0027drm-fixes-2019-07-05-1\u0027 of git://anongit.freedesktop.org/drm/drm\n\nPull drm fixes from Dave Airlie:\n \"I skipped last week because there wasn\u0027t much worth doing, this week\n got a few more fixes in.\n\n amdgpu:\n - default register value change\n - runpm regression fix\n - fan control fix\n\n i915:\n - fix Ironlake regression\n\n panfrost:\n - fix a double free\n\n virtio:\n - fix a locking bug\n\n imx:\n - crtc disable fixes\"\n\n* tag \u0027drm-fixes-2019-07-05-1\u0027 of git://anongit.freedesktop.org/drm/drm:\n drm/imx: only send event on crtc disable if kept disabled\n drm/imx: notify drm core before sending event during crtc disable\n drm/i915/ringbuffer: EMIT_INVALIDATE *before* switch context\n drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE\n drm/amdgpu: Don\u0027t skip display settings in hwmgr_resume()\n drm/amd/powerplay: use hardware fan control if no powerplay fan table\n drm/panfrost: Fix a double-free error\n drm/etnaviv: add missing failure path to destroy suballoc\n drm/virtio: move drm_connector_update_edid_property() call\n" }, { "commit": "a0b2cf792ac9db7bb73e599e516adfb9dca8e60b", "tree": "dcef458326e76c68bcf5e66853e478d173b01a3e", "parents": [ "b5252bdf099a465e6b707e7cf11b7ef0b1e4cf09", "5aeab2bfc9ffa72d3ca73416635cb3785dfc076f" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jul 05 12:54:48 2019 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Jul 05 14:51:03 2019 +1000" }, "message": "Merge tag \u0027imx-drm-fixes-2019-07-04\u0027 of git://git.pengutronix.de/git/pza/linux into drm-fixes\n\ndrm/imx: fix stale vblank timestamp after a modeset\n\nThis series fixes stale vblank timestamps in the first event sent after\na crtc was disabled. The core now is notified via drm_crtc_vblank_off\nbefore sending the last pending event in atomic_disable. If the crtc is\nreenabled right away during to a modeset, the event is not sent at all,\nas the next vblank will take care of it.\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Philipp Zabel \u003cp.zabel@pengutronix.de\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/1562237119.6641.16.camel@pengutronix.de\n" }, { "commit": "ee39d46dcaf8f25894f13236d3d984d9a4d2fd3e", "tree": "6119a1f94a6f5c0affc14103784f0d0933aa30d8", "parents": [ "a5fff14a0c7989fbc8316a43f52aed1804f02ddd", "21d4120ec6f5b5992b01b96ac484701163917b63" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 13:31:19 2019 +0900" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 13:31:19 2019 +0900" }, "message": "Merge branch \u0027linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6\n\nPull crypto fixes from Herbert Xu:\n \"This fixes two memory leaks and a list corruption bug\"\n\n* \u0027linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:\n crypto: user - prevent operating on larval algorithms\n crypto: cryptd - Fix skcipher instance memory leak\n lib/mpi: Fix karactx leak in mpi_powm\n" }, { "commit": "a5fff14a0c7989fbc8316a43f52aed1804f02ddd", "tree": "d8d4ef6c808868f7d42b6b44cc27b871a22d460a", "parents": [ "ecbe5086adc2876b22c898987d8a20f932de87a9", "8751853091998cd31e9e5f1e8206280155af8921" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 11:39:56 2019 +0900" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 11:39:56 2019 +0900" }, "message": "Merge branch \u0027akpm\u0027 (patches from Andrew)\n\nMerge more fixes from Andrew Morton:\n \"5 fixes\"\n\n* emailed patches from Andrew Morton \u003cakpm@linux-foundation.org\u003e:\n swap_readpage(): avoid blk_wake_io_task() if !synchronous\n devres: allow const resource arguments\n mm/vmscan.c: prevent useless kswapd loops\n fs/userfaultfd.c: disable irqs for fault_pending and event locks\n mm/page_alloc.c: fix regression with deferred struct page init\n" }, { "commit": "ecbe5086adc2876b22c898987d8a20f932de87a9", "tree": "e33fd7658b6cfe2adf2fb1cbb49b6ac4f8d0905a", "parents": [ "cde357c392e93aa7fcfc019403e0d1792081d634", "2659dc8d225c956b91d8a8e4ef05d91b2e985c02" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 11:35:45 2019 +0900" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 11:35:45 2019 +0900" }, "message": "Merge tag \u0027armsoc-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc\n\nPull ARM SoC fixes from Olof Johansson:\n \"Likely our final small batch of fixes for 5.2:\n\n - Some fixes for USB on davinci, regressions were due to the recent\n conversion of the OCHI driver to use GPIO regulators\n\n - A fixup of kconfig dependencies for a TI irq controller\n\n - A switch of armada-38x to avoid dropped characters on uart, caused\n by switch of base inherited platform description earlier this year\"\n\n* tag \u0027armsoc-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc:\n ARM: davinci: da830-evm: fix GPIO lookup for OHCI\n ARM: davinci: omapl138-hawk: add missing regulator constraints for OHCI\n ARM: davinci: da830-evm: add missing regulator constraints for OHCI\n soc: ti: fix irq-ti-sci link error\n ARM: dts: armada-xp-98dx3236: Switch to armada-38x-uart serial node\n" }, { "commit": "cde357c392e93aa7fcfc019403e0d1792081d634", "tree": "7d137cd4868622599fca7b4f80cb243432eef58d", "parents": [ "2cd7cdc7e420a343743db781484e801fd784a1f1", "1571c029a2ff289683ddb0a32253850363bcb8a7" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 11:32:11 2019 +0900" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 11:32:11 2019 +0900" }, "message": "Merge tag \u0027dax-fix-5.2-rc8\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm\n\nPull dax fix from Dan Williams:\n \"A single dax fix that has been soaking awaiting other fixes under\n discussion to join it. As it is getting late in the cycle lets proceed\n with this fix and save follow-on changes for post-v5.3-rc1.\n\n - Fix xarray entry association for mixed mappings\"\n\n* tag \u0027dax-fix-5.2-rc8\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm:\n dax: Fix xarray entry association for mixed mappings\n" }, { "commit": "2cd7cdc7e420a343743db781484e801fd784a1f1", "tree": "905bc14c6cd00ba92a56ee8ab5cb809451bb5d06", "parents": [ "c212ddaee2fd21e8d756dbc3c6119e3259b38fd0", "570d7a98e7d6d5d8706d94ffd2d40adeaa318332" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 11:21:36 2019 +0900" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 11:21:36 2019 +0900" }, "message": "Merge branch \u0027fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs\n\nPull do_move_mount() fix from Al Viro:\n \"Regression fix\"\n\n* \u0027fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs:\n vfs: move_mount: reject moving kernel internal mounts\n" }, { "commit": "8751853091998cd31e9e5f1e8206280155af8921", "tree": "91fac9f6aa58ad6ec64d28413fdf2b2322afe096", "parents": [ "eef778c99c0239ed0a0696ddf22ae3673f28a489" ], "author": { "name": "Oleg Nesterov", "email": "oleg@redhat.com", "time": "Thu Jul 04 15:14:49 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 11:12:07 2019 +0900" }, "message": "swap_readpage(): avoid blk_wake_io_task() if !synchronous\n\nswap_readpage() sets waiter \u003d bio-\u003ebi_private even if synchronous \u003d F,\nthis means that the caller can get the spurious wakeup after return.\n\nThis can be fatal if blk_wake_io_task() does\nset_current_state(TASK_RUNNING) after the caller does\nset_special_state(), in the worst case the kernel can crash in\ndo_task_dead().\n\nLink: http://lkml.kernel.org/r/20190704160301.GA5956@redhat.com\nFixes: 0619317ff8baa2d (\"block: add polled wakeup task helper\")\nSigned-off-by: Oleg Nesterov \u003coleg@redhat.com\u003e\nReported-by: Qian Cai \u003ccai@lca.pw\u003e\nAcked-by: Hugh Dickins \u003chughd@google.com\u003e\nReviewed-by: Jens Axboe \u003caxboe@kernel.dk\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "eef778c99c0239ed0a0696ddf22ae3673f28a489", "tree": "52dba9985f96ee4a16cae0a1cf206cab08b28e6f", "parents": [ "dffcac2cb88e4ec5906235d64a83d802580b119e" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Thu Jul 04 15:14:45 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 11:12:07 2019 +0900" }, "message": "devres: allow const resource arguments\n\ndevm_ioremap_resource() does not currently take \u0027const\u0027 arguments, which\nresults in a warning from the first driver trying to do it anyway:\n\n drivers/gpio/gpio-amd-fch.c: In function \u0027amd_fch_gpio_probe\u0027:\n drivers/gpio/gpio-amd-fch.c:171:49: error: passing argument 2 of \u0027devm_ioremap_resource\u0027 discards \u0027const\u0027 qualifier from pointer target type [-Werror\u003ddiscarded-qualifiers]\n priv-\u003ebase \u003d devm_ioremap_resource(\u0026pdev-\u003edev, \u0026amd_fch_gpio_iores);\n ^~~~~~~~~~~~~~~~~~~\n\nChange the prototype to allow it, as there is no real reason not to.\n\nLink: http://lkml.kernel.org/r/20190628150049.1108048-1-arnd@arndb.de\nFixes: 9bb2e0452508 (\"gpio: amd: Make resource struct const\")\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\nAcked-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nReviewed-by: Enrico Weigelt \u003cinfo@metux.net\u003e\nReviewed-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nCc: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nCc: Linus Walleij \u003clinus.walleij@linaro.org\u003e\nCc: Arnd Bergmann \u003carnd@arndb.de\u003e\nCc: \"Rafael J. Wysocki\" \u003crafael.j.wysocki@intel.com\u003e\nCc: Ulf Hansson \u003culf.hansson@linaro.org\u003e\nCc: Andy Shevchenko \u003candy.shevchenko@gmail.com\u003e\nCc: Heikki Krogerus \u003cheikki.krogerus@linux.intel.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "dffcac2cb88e4ec5906235d64a83d802580b119e", "tree": "7d01bcf1accc132eb338f2a107d00ff74156c134", "parents": [ "cbcfa130a911c613a1d9d921af2eea171c414172" ], "author": { "name": "Shakeel Butt", "email": "shakeelb@google.com", "time": "Thu Jul 04 15:14:42 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 11:12:07 2019 +0900" }, "message": "mm/vmscan.c: prevent useless kswapd loops\n\nIn production we have noticed hard lockups on large machines running\nlarge jobs due to kswaps hoarding lru lock within isolate_lru_pages when\nsc-\u003ereclaim_idx is 0 which is a small zone. The lru was couple hundred\nGiBs and the condition (page_zonenum(page) \u003e sc-\u003ereclaim_idx) in\nisolate_lru_pages() was basically skipping GiBs of pages while holding\nthe LRU spinlock with interrupt disabled.\n\nOn further inspection, it seems like there are two issues:\n\n(1) If kswapd on the return from balance_pgdat() could not sleep (i.e.\n node is still unbalanced), the classzone_idx is unintentionally set\n to 0 and the whole reclaim cycle of kswapd will try to reclaim only\n the lowest and smallest zone while traversing the whole memory.\n\n(2) Fundamentally isolate_lru_pages() is really bad when the\n allocation has woken kswapd for a smaller zone on a very large machine\n running very large jobs. It can hoard the LRU spinlock while skipping\n over 100s of GiBs of pages.\n\nThis patch only fixes (1). (2) needs a more fundamental solution. To\nfix (1), in the kswapd context, if pgdat-\u003ekswapd_classzone_idx is\ninvalid use the classzone_idx of the previous kswapd loop otherwise use\nthe one the waker has requested.\n\nLink: http://lkml.kernel.org/r/20190701201847.251028-1-shakeelb@google.com\nFixes: e716f2eb24de (\"mm, vmscan: prevent kswapd sleeping prematurely due to mismatched classzone_idx\")\nSigned-off-by: Shakeel Butt \u003cshakeelb@google.com\u003e\nReviewed-by: Yang Shi \u003cyang.shi@linux.alibaba.com\u003e\nAcked-by: Mel Gorman \u003cmgorman@techsingularity.net\u003e\nCc: Johannes Weiner \u003channes@cmpxchg.org\u003e\nCc: Michal Hocko \u003cmhocko@suse.com\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: Hillf Danton \u003chdanton@sina.com\u003e\nCc: Roman Gushchin \u003cguro@fb.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "cbcfa130a911c613a1d9d921af2eea171c414172", "tree": "2521ce85f86e05b2a51ae13882f0504cd300bc27", "parents": [ "b9705d8778e7adc97de38f405f835a2426e14d84" ], "author": { "name": "Eric Biggers", "email": "ebiggers@google.com", "time": "Thu Jul 04 15:14:39 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 11:12:07 2019 +0900" }, "message": "fs/userfaultfd.c: disable irqs for fault_pending and event locks\n\nWhen IOCB_CMD_POLL is used on a userfaultfd, aio_poll() disables IRQs\nand takes kioctx::ctx_lock, then userfaultfd_ctx::fd_wqh.lock.\n\nThis may have to wait for userfaultfd_ctx::fd_wqh.lock to be released by\nuserfaultfd_ctx_read(), which in turn can be waiting for\nuserfaultfd_ctx::fault_pending_wqh.lock or\nuserfaultfd_ctx::event_wqh.lock.\n\nBut elsewhere the fault_pending_wqh and event_wqh locks are taken with\nIRQs enabled. Since the IRQ handler may take kioctx::ctx_lock, lockdep\nreports that a deadlock is possible.\n\nFix it by always disabling IRQs when taking the fault_pending_wqh and\nevent_wqh locks.\n\nCommit ae62c16e105a (\"userfaultfd: disable irqs when taking the\nwaitqueue lock\") didn\u0027t fix this because it only accounted for the\nfd_wqh lock, not the other locks nested inside it.\n\nLink: http://lkml.kernel.org/r/20190627075004.21259-1-ebiggers@kernel.org\nFixes: bfe4037e722e (\"aio: implement IOCB_CMD_POLL\")\nSigned-off-by: Eric Biggers \u003cebiggers@google.com\u003e\nReported-by: syzbot+fab6de82892b6b9c6191@syzkaller.appspotmail.com\nReported-by: syzbot+53c0b767f7ca0dc0c451@syzkaller.appspotmail.com\nReported-by: syzbot+a3accb352f9c22041cfa@syzkaller.appspotmail.com\nReviewed-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nCc: Christoph Hellwig \u003chch@lst.de\u003e\nCc: Andrea Arcangeli \u003caarcange@redhat.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\t[4.19+]\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "b9705d8778e7adc97de38f405f835a2426e14d84", "tree": "b9a6b567e2d55da836ed112f5a7c134f3833d3de", "parents": [ "c212ddaee2fd21e8d756dbc3c6119e3259b38fd0" ], "author": { "name": "Juergen Gross", "email": "jgross@suse.com", "time": "Thu Jul 04 15:14:36 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 11:12:07 2019 +0900" }, "message": "mm/page_alloc.c: fix regression with deferred struct page init\n\nCommit 0e56acae4b4d (\"mm: initialize MAX_ORDER_NR_PAGES at a time\ninstead of doing larger sections\") is causing a regression on some\nsystems when the kernel is booted as Xen dom0.\n\nThe system will just hang in early boot.\n\nReason is an endless loop in get_page_from_freelist() in case the first\nzone looked at has no free memory. deferred_grow_zone() is always\nreturning true due to the following code snipplet:\n\n /* If the zone is empty somebody else may have cleared out the zone */\n if (!deferred_init_mem_pfn_range_in_zone(\u0026i, zone, \u0026spfn, \u0026epfn,\n first_deferred_pfn)) {\n pgdat-\u003efirst_deferred_pfn \u003d ULONG_MAX;\n pgdat_resize_unlock(pgdat, \u0026flags);\n return true;\n }\n\nThis in turn results in the loop as get_page_from_freelist() is assuming\nforward progress can be made by doing some more struct page\ninitialization.\n\nLink: http://lkml.kernel.org/r/20190620160821.4210-1-jgross@suse.com\nFixes: 0e56acae4b4d (\"mm: initialize MAX_ORDER_NR_PAGES at a time instead of doing larger sections\")\nSigned-off-by: Juergen Gross \u003cjgross@suse.com\u003e\nSuggested-by: Alexander Duyck \u003calexander.h.duyck@linux.intel.com\u003e\nAcked-by: Alexander Duyck \u003calexander.h.duyck@linux.intel.com\u003e\nCc: Michal Hocko \u003cmhocko@suse.com\u003e\nCc: Pavel Tatashin \u003cpasha.tatashin@soleen.com\u003e\nCc: Mike Rapoport \u003crppt@linux.ibm.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "c212ddaee2fd21e8d756dbc3c6119e3259b38fd0", "tree": "470a59ca3da6b1e7aa288c166bfe5884e7142d83", "parents": [ "6994eefb0053799d2e07cd140df6c2ea106c41ee", "3450121997ce872eb7f1248417225827ea249710" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 02:03:50 2019 +0900" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 02:03:50 2019 +0900" }, "message": "Merge tag \u0027sound-5.2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound\n\nPull sound fixes from Takashi Iwai:\n \"Here are a collection of small fixes for:\n\n - A race with ASoC HD-audio registration\n\n - LINE6 usb-audio memory overwrite by malformed descriptor\n\n - FireWire MIDI handling\n\n - Missing cast for bit shifts in a few USB-audio quirks\n\n - The wrong function calls in minor OSS sequencer code paths\n\n - A couple of HD-audio quirks\"\n\n* tag \u0027sound-5.2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound:\n ALSA: line6: Fix write on zero-sized buffer\n ALSA: hda: Fix widget_mutex incomplete protection\n ALSA: firewire-lib/fireworks: fix miss detection of received MIDI messages\n ALSA: seq: fix incorrect order of dest_client/dest_ports arguments\n ALSA: hda/realtek - Change front mic location for Lenovo M710q\n ALSA: usb-audio: fix sign unintended sign extension on left shifts\n ALSA: hda/realtek: Add quirks for several Clevo notebook barebones\n" }, { "commit": "6994eefb0053799d2e07cd140df6c2ea106c41ee", "tree": "3fea23fa40e43cac59c916cf138c2e5415a2a7a0", "parents": [ "550d1f5bda33fa3b203d8cf8df1396825dbfd213" ], "author": { "name": "Jann Horn", "email": "jannh@google.com", "time": "Thu Jul 04 17:32:23 2019 +0200" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Jul 05 02:00:41 2019 +0900" }, "message": "ptrace: Fix -\u003eptracer_cred handling for PTRACE_TRACEME\n\nFix two issues:\n\nWhen called for PTRACE_TRACEME, ptrace_link() would obtain an RCU\nreference to the parent\u0027s objective credentials, then give that pointer\nto get_cred(). However, the object lifetime rules for things like\nstruct cred do not permit unconditionally turning an RCU reference into\na stable reference.\n\nPTRACE_TRACEME records the parent\u0027s credentials as if the parent was\nacting as the subject, but that\u0027s not the case. If a malicious\nunprivileged child uses PTRACE_TRACEME and the parent is privileged, and\nat a later point, the parent process becomes attacker-controlled\n(because it drops privileges and calls execve()), the attacker ends up\nwith control over two processes with a privileged ptrace relationship,\nwhich can be abused to ptrace a suid binary and obtain root privileges.\n\nFix both of these by always recording the credentials of the process\nthat is requesting the creation of the ptrace relationship:\ncurrent_cred() can\u0027t change under us, and current is the proper subject\nfor access control.\n\nThis change is theoretically userspace-visible, but I am not aware of\nany code that it will actually break.\n\nFixes: 64b875f7ac8a (\"ptrace: Capture the ptracer\u0027s creds not PT_PTRACE_CAP\")\nSigned-off-by: Jann Horn \u003cjannh@google.com\u003e\nAcked-by: Oleg Nesterov \u003coleg@redhat.com\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "5aeab2bfc9ffa72d3ca73416635cb3785dfc076f", "tree": "008df8595b96216ee33dd0d452a04ab6ef1273f0", "parents": [ "78c68e8f5cd24bd32ba4ca1cdfb0c30cf0642685" ], "author": { "name": "Robert Beckett", "email": "bob.beckett@collabora.com", "time": "Tue Jun 25 18:59:15 2019 +0100" }, "committer": { "name": "Philipp Zabel", "email": "p.zabel@pengutronix.de", "time": "Thu Jul 04 12:21:25 2019 +0200" }, "message": "drm/imx: only send event on crtc disable if kept disabled\n\nThe event will be sent as part of the vblank enable during the modeset\nif the crtc is not being kept disabled.\n\nFixes: 5f2f911578fb (\"drm/imx: atomic phase 3 step 1: Use atomic configuration\")\n\nSigned-off-by: Robert Beckett \u003cbob.beckett@collabora.com\u003e\nReviewed-by: Daniel Vetter \u003cdaniel.vetter@ffwll.ch\u003e\nSigned-off-by: Philipp Zabel \u003cp.zabel@pengutronix.de\u003e\n" }, { "commit": "78c68e8f5cd24bd32ba4ca1cdfb0c30cf0642685", "tree": "46a6459c329bd5cd87c28d7ce50d886b9db038a0", "parents": [ "4b972a01a7da614b4796475f933094751a295a2f" ], "author": { "name": "Robert Beckett", "email": "bob.beckett@collabora.com", "time": "Tue Jun 25 18:59:13 2019 +0100" }, "committer": { "name": "Philipp Zabel", "email": "p.zabel@pengutronix.de", "time": "Thu Jul 04 12:21:25 2019 +0200" }, "message": "drm/imx: notify drm core before sending event during crtc disable\n\nNotify drm core before sending pending events during crtc disable.\nThis fixes the first event after disable having an old stale timestamp\nby having drm_crtc_vblank_off update the timestamp to now.\n\nThis was seen while debugging weston log message:\nWarning: computed repaint delay is insane: -8212 msec\n\nThis occurred due to:\n1. driver starts up\n2. fbcon comes along and restores fbdev, enabling vblank\n3. vblank_disable_fn fires via timer disabling vblank, keeping vblank\nseq number and time set at current value\n(some time later)\n4. weston starts and does a modeset\n5. atomic commit disables crtc while it does the modeset\n6. ipu_crtc_atomic_disable sends vblank with old seq number and time\n\nFixes: a474478642d5 (\"drm/imx: fix crtc vblank state regression\")\n\nSigned-off-by: Robert Beckett \u003cbob.beckett@collabora.com\u003e\nReviewed-by: Daniel Vetter \u003cdaniel.vetter@ffwll.ch\u003e\nSigned-off-by: Philipp Zabel \u003cp.zabel@pengutronix.de\u003e\n" }, { "commit": "550d1f5bda33fa3b203d8cf8df1396825dbfd213", "tree": "533be5b1a3f237dcac2c3cceaab618b9e79c5e7b", "parents": [ "179c96d9f715a619811ded5dcbd35b1fee8caf69", "074376ac0e1d1fcd4fafebca86ee6158e7c20680" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jul 04 10:26:17 2019 +0900" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jul 04 10:26:17 2019 +0900" }, "message": "Merge tag \u0027trace-v5.2-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace\n\nPull tracing fixes from Steven Rostedt:\n \"This includes three fixes:\n\n - Fix a deadlock from a previous fix to keep module loading and\n function tracing text modifications from stepping on each other\n (this has a few patches to help document the issue in comments)\n\n - Fix a crash when the snapshot buffer gets out of sync with the main\n ring buffer\n\n - Fix a memory leak when reading the memory logs\"\n\n* tag \u0027trace-v5.2-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace:\n ftrace/x86: Anotate text_mutex split between ftrace_arch_code_modify_post_process() and ftrace_arch_code_modify_prepare()\n tracing/snapshot: Resize spare buffer if size changed\n tracing: Fix memory leak in tracing_err_log_open()\n ftrace/x86: Add a comment to why we take text_mutex in ftrace_arch_code_modify_prepare()\n ftrace/x86: Remove possible deadlock between register_kprobe() and ftrace_run_update_code()\n" }, { "commit": "b5252bdf099a465e6b707e7cf11b7ef0b1e4cf09", "tree": "3ca2914a62e5966666d996f5cc6e826fafd6fe6b", "parents": [ "a956c56b6ad3c2812cf6158eaa579c4f4012e7ab", "be132e1375c1fffe48801296279079f8a59a9ed3" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Thu Jul 04 11:19:23 2019 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Thu Jul 04 11:19:34 2019 +1000" }, "message": "Merge branch \u0027etnaviv/fixes\u0027 of https://git.pengutronix.de/git/lst/linux into drm-fixes\n\nFix a kernel nullptr deref on module\nunload when any etnaviv GPU failed to initialize properly.\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nFrom: Lucas Stach \u003cl.stach@pengutronix.de\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/1561974148.2321.1.camel@pengutronix.de\n" }, { "commit": "a956c56b6ad3c2812cf6158eaa579c4f4012e7ab", "tree": "cd5840e020118af0f3f19ff562a26a3b82d49705", "parents": [ "5ee5d30a814d1310276cc023df1cf503d4c8d10f", "2f040d27080ddfffecff2be1a77107c494d0e4f4" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Thu Jul 04 11:17:44 2019 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Thu Jul 04 11:17:48 2019 +1000" }, "message": "Merge tag \u0027drm-misc-fixes-2019-07-03\u0027 of git://anongit.freedesktop.org/drm/drm-misc into drm-fixes\n\npanfrost- Avoid double free by deleting GEM handle in create_bo failure\n path (Boris)\n\nCc: Boris Brezillon \u003cboris.brezillon@collabora.com\u003e\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Sean Paul \u003csean@poorly.run\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20190704001302.GA260390@art_vandelay\n" }, { "commit": "5ee5d30a814d1310276cc023df1cf503d4c8d10f", "tree": "f9ecf9b8c33b315b40492ecdb84058443af1abec", "parents": [ "c84c9029d782a3a0d2a7f0522ecb907314d43e2c", "25f09f858835b0e9a06213811031190a17d8ab78" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Thu Jul 04 11:17:23 2019 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Thu Jul 04 11:17:23 2019 +1000" }, "message": "Merge tag \u0027drm-fixes-5.2-2019-07-02\u0027 of git://people.freedesktop.org/~agd5f/linux into drm-fixes\n\ndrm-fixes-5.2-2019-07-02:\n\nFixes for stable\n\namdgpu:\n- stability fix for gfx9\n- regression fix for HG on some polaris boards\n- crash fix for some new OEM boards\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nFrom: Alex Deucher \u003calexdeucher@gmail.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20190703015705.3162-1-alexander.deucher@amd.com\n" }, { "commit": "179c96d9f715a619811ded5dcbd35b1fee8caf69", "tree": "363b8b1b377eb919cf40ec77da58cb6d0f08dbef", "parents": [ "eca94432934fe5f141d084f2e36ee2c0e614cc04", "fbbf145a0e0a0177e089c52275fbfa55763e7d1d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jul 04 09:59:08 2019 +0900" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Jul 04 09:59:08 2019 +0900" }, "message": "Merge tag \u0027gpio-v5.2-4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio\n\nPull GPIO fix from Linus Walleij:\n \"A single fixup for the SPI CS gpios that regressed in the current\n kernel cycle\"\n\n* tag \u0027gpio-v5.2-4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio:\n gpio/spi: Fix spi-gpio regression on active high CS\n" }, { "commit": "3b2d4dcf71c4a91b420f835e52ddea8192300a3b", "tree": "3d184fbf8a5c7482910ec46ebb2b102a4c0ae3d5", "parents": [ "1e091c3bbf51d34d5d96337a59ce5ab2ac3ba2cc" ], "author": { "name": "Paul Menzel", "email": "pmenzel@molgen.mpg.de", "time": "Wed Jul 03 13:28:15 2019 +0200" }, "committer": { "name": "J. Bruce Fields", "email": "bfields@redhat.com", "time": "Wed Jul 03 17:51:31 2019 -0400" }, "message": "nfsd: Fix overflow causing non-working mounts on 1 TB machines\n\nSince commit 10a68cdf10 (nfsd: fix performance-limiting session\ncalculation) (Linux 5.1-rc1 and 4.19.31), shares from NFS servers with\n1 TB of memory cannot be mounted anymore. The mount just hangs on the\nclient.\n\nThe gist of commit 10a68cdf10 is the change below.\n\n -avail \u003d clamp_t(int, avail, slotsize, avail/3);\n +avail \u003d clamp_t(int, avail, slotsize, total_avail/3);\n\nHere are the macros.\n\n #define min_t(type, x, y) __careful_cmp((type)(x), (type)(y), \u003c)\n #define clamp_t(type, val, lo, hi) min_t(type, max_t(type, val, lo), hi)\n\n`total_avail` is 8,434,659,328 on the 1 TB machine. `clamp_t()` casts\nthe values to `int`, which for 32-bit integers can only hold values\n−2,147,483,648 (−2^31) through 2,147,483,647 (2^31 − 1).\n\n`avail` (in the function signature) is just 65536, so that no overflow\nwas happening. Before the commit the assignment would result in 21845,\nand `num \u003d 4`.\n\nWhen using `total_avail`, it is causing the assignment to be\n18446744072226137429 (printed as %lu), and `num` is then 4164608182.\n\nMy next guess is, that `nfsd_drc_mem_used` is then exceeded, and the\nserver thinks there is no memory available any more for this client.\n\nUpdating the arguments of `clamp_t()` and `min_t()` to `unsigned long`\nfixes the issue.\n\nNow, `avail \u003d 65536` (before commit 10a68cdf10 `avail \u003d 21845`), but\n`num \u003d 4` remains the same.\n\nFixes: c54f24e338ed (nfsd: fix performance-limiting session calculation)\nCc: stable@vger.kernel.org\nSigned-off-by: Paul Menzel \u003cpmenzel@molgen.mpg.de\u003e\nSigned-off-by: J. Bruce Fields \u003cbfields@redhat.com\u003e\n" }, { "commit": "21d4120ec6f5b5992b01b96ac484701163917b63", "tree": "18d69b23e94f70441f7399bbb9a3dd8b303d6d51", "parents": [ "1a0fad630e0b7cff38e7691b28b0517cfbb0633f" ], "author": { "name": "Eric Biggers", "email": "ebiggers@google.com", "time": "Tue Jul 02 14:17:00 2019 -0700" }, "committer": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Jul 03 22:11:55 2019 +0800" }, "message": "crypto: user - prevent operating on larval algorithms\n\nMichal Suchanek reported [1] that running the pcrypt_aead01 test from\nLTP [2] in a loop and holding Ctrl-C causes a NULL dereference of\nalg-\u003ecra_users.next in crypto_remove_spawns(), via crypto_del_alg().\nThe test repeatedly uses CRYPTO_MSG_NEWALG and CRYPTO_MSG_DELALG.\n\nThe crash occurs when the instance that CRYPTO_MSG_DELALG is trying to\nunregister isn\u0027t a real registered algorithm, but rather is a \"test\nlarval\", which is a special \"algorithm\" added to the algorithms list\nwhile the real algorithm is still being tested. Larvals don\u0027t have\ninitialized cra_users, so that causes the crash. Normally pcrypt_aead01\ndoesn\u0027t trigger this because CRYPTO_MSG_NEWALG waits for the algorithm\nto be tested; however, CRYPTO_MSG_NEWALG returns early when interrupted.\n\nEverything else in the \"crypto user configuration\" API has this same bug\ntoo, i.e. it inappropriately allows operating on larval algorithms\n(though it doesn\u0027t look like the other cases can cause a crash).\n\nFix this by making crypto_alg_match() exclude larval algorithms.\n\n[1] https://lkml.kernel.org/r/20190625071624.27039-1-msuchanek@suse.de\n[2] https://github.com/linux-test-project/ltp/blob/20190517/testcases/kernel/crypto/pcrypt_aead01.c\n\nReported-by: Michal Suchanek \u003cmsuchanek@suse.de\u003e\nFixes: a38f7907b926 (\"crypto: Add userspace configuration API\")\nCc: \u003cstable@vger.kernel.org\u003e # v3.2+\nCc: Steffen Klassert \u003csteffen.klassert@secunet.com\u003e\nSigned-off-by: Eric Biggers \u003cebiggers@google.com\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n" }, { "commit": "1a0fad630e0b7cff38e7691b28b0517cfbb0633f", "tree": "880fc622aa8a5fb4acc28a676987c04b3f7f6dbe", "parents": [ "c8ea9fce2baf7b643384f36f29e4194fa40d33a6" ], "author": { "name": "Vincent Whitchurch", "email": "vincent.whitchurch@axis.com", "time": "Tue Jul 02 09:53:25 2019 +0200" }, "committer": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Jul 03 22:11:55 2019 +0800" }, "message": "crypto: cryptd - Fix skcipher instance memory leak\n\ncryptd_skcipher_free() fails to free the struct skcipher_instance\nallocated in cryptd_create_skcipher(), leading to a memory leak. This\nis detected by kmemleak on bootup on ARM64 platforms:\n\n unreferenced object 0xffff80003377b180 (size 1024):\n comm \"cryptomgr_probe\", pid 822, jiffies 4294894830 (age 52.760s)\n backtrace:\n kmem_cache_alloc_trace+0x270/0x2d0\n cryptd_create+0x990/0x124c\n cryptomgr_probe+0x5c/0x1e8\n kthread+0x258/0x318\n ret_from_fork+0x10/0x1c\n\nFixes: 4e0958d19bd8 (\"crypto: cryptd - Add support for skcipher\")\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Vincent Whitchurch \u003cvincent.whitchurch@axis.com\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n" }, { "commit": "c8ea9fce2baf7b643384f36f29e4194fa40d33a6", "tree": "ac6c28eff7d957212a01d18d2dc932ef9b54b3a6", "parents": [ "7829a0c1cb9c80debfb4fdb49b4d90019f2ea1ac" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Jun 24 18:32:26 2019 +0800" }, "committer": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Jul 03 22:11:55 2019 +0800" }, "message": "lib/mpi: Fix karactx leak in mpi_powm\n\nSometimes mpi_powm will leak karactx because a memory allocation\nfailure causes a bail-out that skips the freeing of karactx. This\npatch moves the freeing of karactx to the end of the function like\neverything else so that it can\u0027t be skipped.\n\nReported-by: syzbot+f7baccc38dcc1e094e77@syzkaller.appspotmail.com\nFixes: cdec9cb5167a (\"crypto: GnuPG based MPI lib - source files...\")\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nReviewed-by: Eric Biggers \u003cebiggers@kernel.org\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\n" }, { "commit": "eca94432934fe5f141d084f2e36ee2c0e614cc04", "tree": "a5e58b32d0607aca43923149f3aa97db03be7434", "parents": [ "6e692c3b721f30485a9124f93e27a0cb6569116c" ], "author": { "name": "Matias Karhumaa", "email": "matias.karhumaa@gmail.com", "time": "Tue Jul 02 16:35:09 2019 +0200" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Jul 03 16:09:09 2019 +0800" }, "message": "Bluetooth: Fix faulty expression for minimum encryption key size check\n\nFix minimum encryption key size check so that HCI_MIN_ENC_KEY_SIZE is\nalso allowed as stated in the comment.\n\nThis bug caused connection problems with devices having maximum\nencryption key size of 7 octets (56-bit).\n\nFixes: 693cd8ce3f88 (\"Bluetooth: Fix regression with minimum encryption key size alignment\")\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id\u003d203997\nSigned-off-by: Matias Karhumaa \u003cmatias.karhumaa@gmail.com\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "6e692c3b721f30485a9124f93e27a0cb6569116c", "tree": "313aba2b95016a2c486b581c7a39c5a5ef4cceba", "parents": [ "8d68d93255227da660c63b9162f7001e2f5d470a", "5de254dca87ab614b9c058246ee94c58a840e358" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Jul 03 16:06:36 2019 +0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Jul 03 16:06:36 2019 +0800" }, "message": "Merge tag \u00275.2-rc6-smb3-fix\u0027 of git://git.samba.org/sfrench/cifs-2.6\n\nPull cifs fix from Steve French:\n \"SMB3 fix (for stable as well) for crash mishandling one of the Windows\n reparse point symlink tags\"\n\n* tag \u00275.2-rc6-smb3-fix\u0027 of git://git.samba.org/sfrench/cifs-2.6:\n cifs: fix crash querying symlinks stored as reparse-points\n" }, { "commit": "8d68d93255227da660c63b9162f7001e2f5d470a", "tree": "259aadb2c5cc7263871132f27ef380a5c76a92d6", "parents": [ "4b1fe9b58e9d20f23f6b07d1c2e0dbd921da67bf", "28dd29c06d0dede4b32b2c559cff21955a830928" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Jul 03 16:00:21 2019 +0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Jul 03 16:00:21 2019 +0800" }, "message": "Merge tag \u0027for-linus-20190701\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brauner/linux\n\nPull pidfd fork() fix from Christian Brauner:\n \"A single small fix for copy_process() in kernel/fork.c:\n\n With Al\u0027s removal of ksys_close() from cleanup paths in copy_process()\n a bug was introduced. When anon_inode_getfile() failed the cleanup was\n correctly performed but the error code was not propagated to callers\n of copy_process() causing them to operate on a nonsensical pointer.\n\n The fix is a simple on-liner which makes sure that a proper negative\n error code is returned from copy_process().\n\n syzkaller has also verified that the bug is not reproducible with this\n fix\"\n\n* tag \u0027for-linus-20190701\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/brauner/linux:\n fork: return proper negative error code\n" }, { "commit": "4b1fe9b58e9d20f23f6b07d1c2e0dbd921da67bf", "tree": "f34ba0280adca87fdd0a81c923ee210b3d09a72a", "parents": [ "6fbc7275c7a9ba97877050335f290341a1fd8dbf", "aa69fb62bea15126e744af2e02acc0d6cf3ed4da" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Jul 03 15:57:30 2019 +0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Jul 03 15:57:30 2019 +0800" }, "message": "Merge tag \u0027arm64-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux\n\nPull arm64 fixes from Will Deacon:\n \"Fix a build failure with the LLVM linker and a module allocation\n failure when KASLR is active:\n\n - Fix module allocation when running with KASLR enabled\n\n - Fix broken build due to bug in LLVM linker (ld.lld)\"\n\n* tag \u0027arm64-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:\n arm64/efi: Mark __efistub_stext_offset as an absolute symbol explicitly\n arm64: kaslr: keep modules inside module region when KASAN is enabled\n" }, { "commit": "2659dc8d225c956b91d8a8e4ef05d91b2e985c02", "tree": "5cb6e035b6f154668f4f144b66ccc825a0c73df5", "parents": [ "521a503f5247de9a5cbc381f15c466a6c6f2793c", "4f2fe646770774d02d52a514849c181c9e0970f6" ], "author": { "name": "Olof Johansson", "email": "olof@lixom.net", "time": "Tue Jul 02 15:13:20 2019 -0700" }, "committer": { "name": "Olof Johansson", "email": "olof@lixom.net", "time": "Tue Jul 02 15:13:20 2019 -0700" }, "message": "Merge tag \u0027davinci-fixes-for-v5.2-part2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/nsekhar/linux-davinci into arm/fixes\n\nThis set of patches fixes regressions introduced in v5.2 kernel when DA8xx\nOHCI driver was converted over to use GPIO regulators.\n\n* tag \u0027davinci-fixes-for-v5.2-part2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/nsekhar/linux-davinci:\n ARM: davinci: da830-evm: fix GPIO lookup for OHCI\n ARM: davinci: omapl138-hawk: add missing regulator constraints for OHCI\n ARM: davinci: da830-evm: add missing regulator constraints for OHCI\n + Linux 5.2-rc7\n\nSigned-off-by: Olof Johansson \u003colof@lixom.net\u003e\n" }, { "commit": "5dd6c49339126c2c8df2179041373222362d6e49", "tree": "718036dd694397bc57bddaf4835f709bd1b6853a", "parents": [ "5676234f20fef02f6ca9bd66c63a8860fce62645" ], "author": { "name": "Maurizio Lombardi", "email": "mlombard@redhat.com", "time": "Wed Jun 26 19:27:34 2019 +0200" }, "committer": { "name": "Martin K. Petersen", "email": "martin.petersen@oracle.com", "time": "Tue Jul 02 16:38:35 2019 -0400" }, "message": "scsi: iscsi: set auth_protocol back to NULL if CHAP_A value is not supported\n\nIf the CHAP_A value is not supported, the chap_server_open() function\nshould free the auth_protocol pointer and set it to NULL, or we will leave\na dangling pointer around.\n\n[ 66.010905] Unsupported CHAP_A value\n[ 66.011660] Security negotiation failed.\n[ 66.012443] iSCSI Login negotiation failed.\n[ 68.413924] general protection fault: 0000 [#1] SMP PTI\n[ 68.414962] CPU: 0 PID: 1562 Comm: targetcli Kdump: loaded Not tainted 4.18.0-80.el8.x86_64 #1\n[ 68.416589] Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011\n[ 68.417677] RIP: 0010:__kmalloc_track_caller+0xc2/0x210\n\nSigned-off-by: Maurizio Lombardi \u003cmlombard@redhat.com\u003e\nReviewed-by: Chris Leech \u003ccleech@redhat.com\u003e\nSigned-off-by: Martin K. Petersen \u003cmartin.petersen@oracle.com\u003e\n" }, { "commit": "5676234f20fef02f6ca9bd66c63a8860fce62645", "tree": "3a70919db974650dc2538ea93252758af082e385", "parents": [ "240b4cc8fd5db138b675297d4226ec46594d9b3b" ], "author": { "name": "Roman Bolshakov", "email": "r.bolshakov@yadro.com", "time": "Tue Jul 02 22:16:38 2019 +0300" }, "committer": { "name": "Martin K. Petersen", "email": "martin.petersen@oracle.com", "time": "Tue Jul 02 16:35:52 2019 -0400" }, "message": "scsi: target/iblock: Fix overrun in WRITE SAME emulation\n\nWRITE SAME corrupts data on the block device behind iblock if the command\nis emulated. The emulation code issues (M - 1) * N times more bios than\nrequested, where M is the number of 512 blocks per real block size and N is\nthe NUMBER OF LOGICAL BLOCKS specified in WRITE SAME command. So, for a\ndevice with 4k blocks, 7 * N more LBAs gets written after the requested\nrange.\n\nThe issue happens because the number of 512 byte sectors to be written is\ndecreased one by one while the real bios are typically from 1 to 8 512 byte\nsectors per bio.\n\nFixes: c66ac9db8d4a (\"[SCSI] target: Add LIO target core v4.0.0-rc6\")\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Roman Bolshakov \u003cr.bolshakov@yadro.com\u003e\nReviewed-by: Bart Van Assche \u003cbvanassche@acm.org\u003e\nSigned-off-by: Martin K. Petersen \u003cmartin.petersen@oracle.com\u003e\n" }, { "commit": "fbbf145a0e0a0177e089c52275fbfa55763e7d1d", "tree": "9677741c28c810e5680f7664f67aabb430b05e61", "parents": [ "4b972a01a7da614b4796475f933094751a295a2f" ], "author": { "name": "Linus Walleij", "email": "linus.walleij@linaro.org", "time": "Tue Jul 02 21:39:59 2019 +0200" }, "committer": { "name": "Linus Walleij", "email": "linus.walleij@linaro.org", "time": "Tue Jul 02 22:31:37 2019 +0200" }, "message": "gpio/spi: Fix spi-gpio regression on active high CS\n\nI ran into an intriguing bug caused by\ncommit \"\"spi: gpio: Don\u0027t request CS GPIO in DT use-case\"\naffecting all SPI GPIO devices with an active high\nchip select line.\n\nThe commit switches the CS gpio handling over to the GPIO\ncore, which will parse and handle \"cs-gpios\" from the OF\nnode without even calling down to the driver to get the\njob done.\n\nHowever the GPIO core handles the standard bindings in\nDocumentation/devicetree/bindings/spi/spi-controller.yaml\nthat specifies that active high CS needs to be specified\nusing \"spi-cs-high\" in the DT node.\n\nThe code in drivers/spi/spi-gpio.c never respected this\nand never tried to inspect subnodes to see if they contained\n\"spi-cs-high\" like the gpiolib OF quirks does. Instead the\nonly way to get an active high CS was to tag it in the\ndevice tree using the flags cell such as\ncs-gpios \u003d \u003c\u0026gpio 4 GPIO_ACTIVE_HIGH\u003e;\n\nThis alters the quirks to not inspect the subnodes of SPI\nmasters on \"spi-gpio\" for the standard attribute \"spi-cs-high\",\nmaking old device trees work as expected.\n\nThis semantic is a bit ambigous, but just allowing the\nflags on the GPIO descriptor to modify polarity is what\nthe kernel at large mostly uses so let\u0027s encourage that.\n\nFixes: 249e2632dcd0 (\"spi: gpio: Don\u0027t request CS GPIO in DT use-case\")\nCc: Andrey Smirnov \u003candrew.smirnov@gmail.com\u003e\nCc: linux-gpio@vger.kernel.org\nCc: linux-spi@vger.kernel.org\nSigned-off-by: Linus Walleij \u003clinus.walleij@linaro.org\u003e\n" }, { "commit": "074376ac0e1d1fcd4fafebca86ee6158e7c20680", "tree": "a355f2efe4193e1afe470018af776773ae579b6c", "parents": [ "46cc0b44428d0f0e81f11ea98217fc0edfbeab07" ], "author": { "name": "Jiri Kosina", "email": "jkosina@suse.cz", "time": "Sat Jun 29 23:22:33 2019 +0200" }, "committer": { "name": "Steven Rostedt (VMware)", "email": "rostedt@goodmis.org", "time": "Tue Jul 02 15:41:35 2019 -0400" }, "message": "ftrace/x86: Anotate text_mutex split between ftrace_arch_code_modify_post_process() and ftrace_arch_code_modify_prepare()\n\nftrace_arch_code_modify_prepare() is acquiring text_mutex, while the\ncorresponding release is happening in ftrace_arch_code_modify_post_process().\n\nThis has already been documented in the code, but let\u0027s also make the fact\nthat this is intentional clear to the semantic analysis tools such as sparse.\n\nLink: http://lkml.kernel.org/r/nycvar.YFH.7.76.1906292321170.27227@cbobk.fhfr.pm\n\nFixes: 39611265edc1a (\"ftrace/x86: Add a comment to why we take text_mutex in ftrace_arch_code_modify_prepare()\")\nFixes: d5b844a2cf507 (\"ftrace/x86: Remove possible deadlock between register_kprobe() and ftrace_run_update_code()\")\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\nSigned-off-by: Steven Rostedt (VMware) \u003crostedt@goodmis.org\u003e\n" }, { "commit": "3450121997ce872eb7f1248417225827ea249710", "tree": "bbd7f14e4712084862a80d35a3b52f87918fbb65", "parents": [ "98482377dc7295d0c70e251925b7cc14aff4c5ac" ], "author": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Tue Jul 02 20:07:21 2019 +0200" }, "committer": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Tue Jul 02 20:11:22 2019 +0200" }, "message": "ALSA: line6: Fix write on zero-sized buffer\n\nLINE6 drivers allocate the buffers based on the value returned from\nusb_maxpacket() calls. The manipulated device may return zero for\nthis, and this results in the kmalloc() with zero size (and it may\nsucceed) while the other part of the driver code writes the packet\ndata with the fixed size -- which eventually overwrites.\n\nThis patch adds a simple sanity check for the invalid buffer size for\navoiding that problem.\n\nReported-by: syzbot+219f00fb49874dcaea17@syzkaller.appspotmail.com\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\n" }, { "commit": "bb34e690e9340bc155ebed5a3d75fc63ff69e082", "tree": "a6faab7f0bc3f7fa06ac44d560e51acc12a4fc07", "parents": [ "323d73a8ecad22bf3284f11112a7cce576ade6af" ], "author": { "name": "Wanpeng Li", "email": "wanpengli@tencent.com", "time": "Tue Jul 02 17:25:02 2019 +0800" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Tue Jul 02 19:02:46 2019 +0200" }, "message": "KVM: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC\n\nThomas reported that:\n\n | Background:\n |\n | In preparation of supporting IPI shorthands I changed the CPU offline\n | code to software disable the local APIC instead of just masking it.\n | That\u0027s done by clearing the APIC_SPIV_APIC_ENABLED bit in the APIC_SPIV\n | register.\n |\n | Failure:\n |\n | When the CPU comes back online the startup code triggers occasionally\n | the warning in apic_pending_intr_clear(). That complains that the IRRs\n | are not empty.\n |\n | The offending vector is the local APIC timer vector who\u0027s IRR bit is set\n | and stays set.\n |\n | It took me quite some time to reproduce the issue locally, but now I can\n | see what happens.\n |\n | It requires apicv_enabled\u003d0, i.e. full apic emulation. With apicv_enabled\u003d1\n | (and hardware support) it behaves correctly.\n |\n | Here is the series of events:\n |\n | Guest CPU\n |\n | goes down\n |\n | native_cpu_disable()\n |\n | \t\t\tapic_soft_disable();\n |\n | play_dead()\n |\n | ....\n |\n | startup()\n |\n | if (apic_enabled())\n | apic_pending_intr_clear()\t\u003c- Not taken\n |\n | enable APIC\n |\n | apic_pending_intr_clear()\t\u003c- Triggers warning because IRR is stale\n |\n | When this happens then the deadline timer or the regular APIC timer -\n | happens with both, has fired shortly before the APIC is disabled, but the\n | interrupt was not serviced because the guest CPU was in an interrupt\n | disabled region at that point.\n |\n | The state of the timer vector ISR/IRR bits:\n |\n | \t \t \t ISR IRR\n | before apic_soft_disable() 0\t 1\n | after apic_soft_disable() 0\t 1\n |\n | On startup\t\t \t\t 0\t 1\n |\n | Now one would assume that the IRR is cleared after the INIT reset, but this\n | happens only on CPU0.\n |\n | Why?\n |\n | Because our CPU0 hotplug is just for testing to make sure nothing breaks\n | and goes through an NMI wakeup vehicle because INIT would send it through\n | the boots-trap code which is not really working if that CPU was not\n | physically unplugged.\n |\n | Now looking at a real world APIC the situation in that case is:\n |\n | \t \t \t \tISR IRR\n | before apic_soft_disable() 0\t 1\n | after apic_soft_disable() 0\t 1\n |\n | On startup\t\t \t\t 0\t 0\n |\n | Why?\n |\n | Once the dying CPU reenables interrupts the pending interrupt gets\n | delivered as a spurious interupt and then the state is clear.\n |\n | While that CPU0 hotplug test case is surely an esoteric issue, the APIC\n | emulation is still wrong, Even if the play_dead() code would not enable\n | interrupts then the pending IRR bit would turn into an ISR .. interrupt\n | when the APIC is reenabled on startup.\n\nFrom SDM 10.4.7.2 Local APIC State After It Has Been Software Disabled\n* Pending interrupts in the IRR and ISR registers are held and require\n masking or handling by the CPU.\n\nIn Thomas\u0027s testing, hardware cpu will not respect soft disable LAPIC\nwhen IRR has already been set or APICv posted-interrupt is in flight,\nso we can skip soft disable APIC checking when clearing IRR and set ISR,\ncontinue to respect soft disable APIC when attempting to set IRR.\n\nReported-by: Rong Chen \u003crong.a.chen@intel.com\u003e\nReported-by: Feng Tang \u003cfeng.tang@intel.com\u003e\nReported-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nTested-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\nCc: Radim Krčmář \u003crkrcmar@redhat.com\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Rong Chen \u003crong.a.chen@intel.com\u003e\nCc: Feng Tang \u003cfeng.tang@intel.com\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Wanpeng Li \u003cwanpengli@tencent.com\u003e\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\n" }, { "commit": "323d73a8ecad22bf3284f11112a7cce576ade6af", "tree": "ccf5fcf87d98ceada68d8af3f9b6b8b23e0f7d45", "parents": [ "65b712f1560abdd9ebec005e9bd17c21ecacc849" ], "author": { "name": "Liran Alon", "email": "liran.alon@oracle.com", "time": "Wed Jun 26 16:09:27 2019 +0300" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Tue Jul 02 19:02:45 2019 +0200" }, "message": "KVM: nVMX: Change KVM_STATE_NESTED_EVMCS to signal vmcs12 is copied from eVMCS\n\nCurrently KVM_STATE_NESTED_EVMCS is used to signal that eVMCS\ncapability is enabled on vCPU.\nAs indicated by vmx-\u003enested.enlightened_vmcs_enabled.\n\nThis is quite bizarre as userspace VMM should make sure to expose\nsame vCPU with same CPUID values in both source and destination.\nIn case vCPU is exposed with eVMCS support on CPUID, it is also\nexpected to enable KVM_CAP_HYPERV_ENLIGHTENED_VMCS capability.\nTherefore, KVM_STATE_NESTED_EVMCS is redundant.\n\nKVM_STATE_NESTED_EVMCS is currently used on restore path\n(vmx_set_nested_state()) only to enable eVMCS capability in KVM\nand to signal need_vmcs12_sync such that on next VMEntry to guest\nnested_sync_from_vmcs12() will be called to sync vmcs12 content\ninto eVMCS in guest memory.\nHowever, because restore nested-state is rare enough, we could\nhave just modified vmx_set_nested_state() to always signal\nneed_vmcs12_sync.\n\nFrom all the above, it seems that we could have just removed\nthe usage of KVM_STATE_NESTED_EVMCS. However, in order to preserve\nbackwards migration compatibility, we cannot do that.\n(vmx_get_nested_state() needs to signal flag when migrating from\nnew kernel to old kernel).\n\nReturning KVM_STATE_NESTED_EVMCS when just vCPU have eVMCS enabled\nhave a bad side-effect of userspace VMM having to send nested-state\nfrom source to destination as part of migration stream. Even if\nguest have never used eVMCS as it doesn\u0027t even run a nested\nhypervisor workload. This requires destination userspace VMM and\nKVM to support setting nested-state. Which make it more difficult\nto migrate from new host to older host.\nTo avoid this, change KVM_STATE_NESTED_EVMCS to signal eVMCS is\nnot only enabled but also active. i.e. Guest have made some\neVMCS active via an enlightened VMEntry. i.e. vmcs12 is copied\nfrom eVMCS and therefore should be restored into eVMCS resident\nin memory (by copy_vmcs12_to_enlightened()).\n\nReviewed-by: Vitaly Kuznetsov \u003cvkuznets@redhat.com\u003e\nReviewed-by: Maran Wilson \u003cmaran.wilson@oracle.com\u003e\nReviewed-by: Krish Sadhukhan \u003ckrish.sadhukhan@oracle.com\u003e\nSigned-off-by: Liran Alon \u003cliran.alon@oracle.com\u003e\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\n" }, { "commit": "65b712f1560abdd9ebec005e9bd17c21ecacc849", "tree": "d90008d652f75fb570ae47a975b4327c59f7a799", "parents": [ "3f16a5c318392cbb5a0c7a3d19dff8c8ef3c38ee" ], "author": { "name": "Liran Alon", "email": "liran.alon@oracle.com", "time": "Tue Jun 25 14:26:42 2019 +0300" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Tue Jul 02 19:02:44 2019 +0200" }, "message": "KVM: nVMX: Allow restore nested-state to enable eVMCS when vCPU in SMM\n\nAs comment in code specifies, SMM temporarily disables VMX so we cannot\nbe in guest mode, nor can VMLAUNCH/VMRESUME be pending.\n\nHowever, code currently assumes that these are the only flags that can be\nset on kvm_state-\u003eflags. This is not true as KVM_STATE_NESTED_EVMCS\ncan also be set on this field to signal that eVMCS should be enabled.\n\nTherefore, fix code to check for guest-mode and pending VMLAUNCH/VMRESUME\nexplicitly.\n\nReviewed-by: Joao Martins \u003cjoao.m.martins@oracle.com\u003e\nSigned-off-by: Liran Alon \u003cliran.alon@oracle.com\u003e\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\n" }, { "commit": "3f16a5c318392cbb5a0c7a3d19dff8c8ef3c38ee", "tree": "c531c40fc27d078d5cc6dd89fea49f46ac9b4d70", "parents": [ "6fbc7275c7a9ba97877050335f290341a1fd8dbf" ], "author": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Wed Jun 26 14:16:13 2019 +0200" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Tue Jul 02 19:02:44 2019 +0200" }, "message": "KVM: x86: degrade WARN to pr_warn_ratelimited\n\nThis warning can be triggered easily by userspace, so it should certainly not\ncause a panic if panic_on_warn is set.\n\nReported-by: syzbot+c03f30b4f4c46bdf8575@syzkaller.appspotmail.com\nSuggested-by: Alexander Potapenko \u003cglider@google.com\u003e\nAcked-by: Alexander Potapenko \u003cglider@google.com\u003e\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\n" }, { "commit": "4f2fe646770774d02d52a514849c181c9e0970f6", "tree": "d895d465945cc6656627b6873783635df80981a8", "parents": [ "ed667776d6e652819f3f44d28cd79bdffac15141" ], "author": { "name": "Bartosz Golaszewski", "email": "bgolaszewski@baylibre.com", "time": "Tue Jun 25 17:16:12 2019 +0200" }, "committer": { "name": "Sekhar Nori", "email": "nsekhar@ti.com", "time": "Tue Jul 02 20:18:33 2019 +0530" }, "message": "ARM: davinci: da830-evm: fix GPIO lookup for OHCI\n\nThe fixed regulator driver doesn\u0027t specify any con_id for gpio lookup\nso it must be NULL in the table entry.\n\nFixes: 274e4c336192 (\"ARM: davinci: da830-evm: add a fixed regulator for ohci-da8xx\")\nCc: stable@vger.kernel.org\nSigned-off-by: Bartosz Golaszewski \u003cbgolaszewski@baylibre.com\u003e\nSigned-off-by: Sekhar Nori \u003cnsekhar@ti.com\u003e\n" }, { "commit": "ed667776d6e652819f3f44d28cd79bdffac15141", "tree": "b25f319439d8726a6f4144b49b8dc70820860374", "parents": [ "018ad0523208ad86ec85d47ebb59abd91d3f0d8b" ], "author": { "name": "Bartosz Golaszewski", "email": "bgolaszewski@baylibre.com", "time": "Tue Jun 25 18:49:15 2019 +0200" }, "committer": { "name": "Sekhar Nori", "email": "nsekhar@ti.com", "time": "Tue Jul 02 20:18:33 2019 +0530" }, "message": "ARM: davinci: omapl138-hawk: add missing regulator constraints for OHCI\n\nWe need to enable status changes for the fixed power supply for the USB\ncontroller.\n\nFixes: 1d272894ec4f (\"ARM: davinci: omapl138-hawk: add a fixed regulator for ohci-da8xx\")\nSigned-off-by: Bartosz Golaszewski \u003cbgolaszewski@baylibre.com\u003e\nSigned-off-by: Sekhar Nori \u003cnsekhar@ti.com\u003e\n" }, { "commit": "018ad0523208ad86ec85d47ebb59abd91d3f0d8b", "tree": "7587531d26281f8e09e4bed8cd82e8cf1dea2977", "parents": [ "6fbc7275c7a9ba97877050335f290341a1fd8dbf" ], "author": { "name": "Bartosz Golaszewski", "email": "bgolaszewski@baylibre.com", "time": "Tue Jun 25 18:49:14 2019 +0200" }, "committer": { "name": "Sekhar Nori", "email": "nsekhar@ti.com", "time": "Tue Jul 02 20:18:33 2019 +0530" }, "message": "ARM: davinci: da830-evm: add missing regulator constraints for OHCI\n\nWe need to enable status changes for the fixed power supply for the USB\ncontroller.\n\nFixes: 274e4c336192 (\"ARM: davinci: da830-evm: add a fixed regulator for ohci-da8xx\")\nSigned-off-by: Bartosz Golaszewski \u003cbgolaszewski@baylibre.com\u003e\nSigned-off-by: Sekhar Nori \u003cnsekhar@ti.com\u003e\n" }, { "commit": "c84c9029d782a3a0d2a7f0522ecb907314d43e2c", "tree": "0efde6e27838e113479b4b2d44f92bc4978a65ce", "parents": [ "665d6d4e32313a7952bb3339647f74c3a6b0d78a" ], "author": { "name": "Chris Wilson", "email": "chris@chris-wilson.co.uk", "time": "Fri Apr 19 12:17:47 2019 +0100" }, "committer": { "name": "Daniel Vetter", "email": "daniel.vetter@ffwll.ch", "time": "Tue Jul 02 14:46:29 2019 +0200" }, "message": "drm/i915/ringbuffer: EMIT_INVALIDATE *before* switch context\n\nDespite what I think the prm recommends, commit f2253bd9859b\n(\"drm/i915/ringbuffer: EMIT_INVALIDATE after switch context\") turned out\nto be a huge mistake when enabling Ironlake contexts as the GPU would\nhang on either a MI_FLUSH or PIPE_CONTROL immediately following the\nMI_SET_CONTEXT of an active mesa context (more vanilla contexts, e.g.\nsimple rendercopies with igt, do not suffer).\n\nVille found the following clue,\n\n \"[DevCTG+]: For the invalidate operation of the pipe control, the\n following pointers are affected. The\n invalidate operation affects the restore of these packets. If the pipe\n control invalidate operation is completed\n before the context save, the indirect pointers will not be restored from\n memory.\n 1. Pipeline State Pointer\n 2. Media State Pointer\n 3. Constant Buffer Packet\"\n\nwhich suggests by us emitting the INVALIDATE prior to the MI_SET_CONTEXT,\nwe prevent the context-restore from chasing the dangling pointers within\nthe image, and explains why this likely prevents the GPU hang.\n\nSigned-off-by: Chris Wilson \u003cchris@chris-wilson.co.uk\u003e\nReviewed-by: Ville Syrjälä \u003cville.syrjala@linux.intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20190419111749.3910-1-chris@chris-wilson.co.uk\n(cherry picked from commit 928f8f42310f244501a7c70daac82c196112c190 in drm-intel-next)\nCc: stable@vger.kernel.org\nBugzilla: https://bugs.freedesktop.org/show_bug.cgi?id\u003d111014\nFixes: f2253bd9859b (\"drm/i915/ringbuffer: EMIT_INVALIDATE after switch context\")\nSigned-off-by: Daniel Vetter \u003cdaniel.vetter@ffwll.ch\u003e\n" }, { "commit": "521a503f5247de9a5cbc381f15c466a6c6f2793c", "tree": "984d1262a51c83093d6543c8a9eabff1d568a8b9", "parents": [ "180ae5095246402ed47d57568d8c31568c3c4f18" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Mon Jun 17 15:01:05 2019 +0200" }, "committer": { "name": "Olof Johansson", "email": "olof@lixom.net", "time": "Mon Jul 01 15:26:09 2019 -0700" }, "message": "soc: ti: fix irq-ti-sci link error\n\nThe irqchip driver depends on the SoC specific driver, but we want\nto be able to compile-test it elsewhere:\n\nWARNING: unmet direct dependencies detected for TI_SCI_INTA_MSI_DOMAIN\n Depends on [n]: SOC_TI [\u003dn]\n Selected by [y]:\n - TI_SCI_INTA_IRQCHIP [\u003dy] \u0026\u0026 TI_SCI_PROTOCOL [\u003dy]\n\ndrivers/irqchip/irq-ti-sci-inta.o: In function `ti_sci_inta_irq_domain_probe\u0027:\nirq-ti-sci-inta.c:(.text+0x204): undefined reference to `ti_sci_inta_msi_create_irq_domain\u0027\n\nRearrange the Kconfig and Makefile so we build the soc driver whenever\nits users are there, regardless of the SOC_TI option.\n\nFixes: 49b323157bf1 (\"soc: ti: Add MSI domain bus support for Interrupt Aggregator\")\nFixes: f011df6179bd (\"irqchip/ti-sci-inta: Add msi domain support\")\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\nReviewed-by: Lokesh Vutla \u003clokeshvutla@ti.com\u003e\nAcked-by: Santosh Shilimkar \u003cssantosh@kernel.org\u003e\nSigned-off-by: Olof Johansson \u003colof@lixom.net\u003e\n" }, { "commit": "180ae5095246402ed47d57568d8c31568c3c4f18", "tree": "37a9a0dee4f9a0956b67387a31b2a5a018a38751", "parents": [ "e73f65930f8880fafaccf2cc1e5c44272e9523ec", "80031361747aec92163464f2ee08870fec33bcb0" ], "author": { "name": "Olof Johansson", "email": "olof@lixom.net", "time": "Mon Jul 01 15:14:09 2019 -0700" }, "committer": { "name": "Olof Johansson", "email": "olof@lixom.net", "time": "Mon Jul 01 15:14:09 2019 -0700" }, "message": "Merge tag \u0027mvebu-fixes-5.2-2\u0027 of git://git.infradead.org/linux-mvebu into arm/fixes\n\nmvebu fixes for 5.2 (part 2)\n\nUse the armada-38x-uart compatible strings for Armada XP 98dx3236 SoCs\nin order to not loose character anymore.\n\n* tag \u0027mvebu-fixes-5.2-2\u0027 of git://git.infradead.org/linux-mvebu:\n ARM: dts: armada-xp-98dx3236: Switch to armada-38x-uart serial node\n\nSigned-off-by: Olof Johansson \u003colof@lixom.net\u003e\n" }, { "commit": "98482377dc7295d0c70e251925b7cc14aff4c5ac", "tree": "3e66beae9641f23b3337b163b587d8a96adc6d80", "parents": [ "7fbd1753b64eafe21cf842348a40a691d0dee440" ], "author": { "name": "Evan Green", "email": "evgreen@chromium.org", "time": "Mon Jul 01 10:30:30 2019 -0700" }, "committer": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Mon Jul 01 20:13:04 2019 +0200" }, "message": "ALSA: hda: Fix widget_mutex incomplete protection\n\nThe widget_mutex was introduced to serialize callers to\nhda_widget_sysfs_{re}init. However, its protection of the sysfs widget array\nis incomplete. For example, it is acquired around the call to\nhda_widget_sysfs_reinit(), which actually creates the new array, but isn\u0027t\nstill acquired when codec-\u003enum_nodes and codec-\u003estart_nid is updated. So\nthe lock ensures one thread sets up the new array at a time, but doesn\u0027t\nensure which thread\u0027s value will end up in codec-\u003enum_nodes. If a larger\nnum_nodes wins but a smaller array was set up, the next call to\nrefresh_widgets() will touch free memory as it iterates over codec-\u003enum_nodes\nthat aren\u0027t there.\n\nThe widget_lock really protects both the tree as well as codec-\u003enum_nodes,\nstart_nid, and end_nid, so make sure it\u0027s held across that update. It should\nalso be held during snd_hdac_get_sub_nodes(), so that a very old read from that\nfunction doesn\u0027t end up clobbering a later update.\n\nFixes: ed180abba7f1 (\"ALSA: hda: Fix race between creating and refreshing sysfs entries\")\nSigned-off-by: Evan Green \u003cevgreen@chromium.org\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\n" }, { "commit": "25f09f858835b0e9a06213811031190a17d8ab78", "tree": "62b2b1f4214104ff94e96e2a1a218e797a7d1103", "parents": [ "688f3d1ebedffa310b6591bd1b63fa0770d945fe" ], "author": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Mon Jul 01 08:38:12 2019 -0500" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Mon Jul 01 12:16:26 2019 -0500" }, "message": "drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE\n\nRecommended by the hw team.\n\nReviewed-and-Tested-by: Huang Rui \u003cray.huang@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nCc: stable@vger.kernel.org\n" }, { "commit": "7fbd1753b64eafe21cf842348a40a691d0dee440", "tree": "cbde16bbd3741978beee0d4bd35e7c9fbdb8650c", "parents": [ "c3ea60c231446663afd6ea1054da6b7f830855ca" ], "author": { "name": "Takashi Sakamoto", "email": "o-takashi@sakamocchi.jp", "time": "Mon Jul 01 23:43:53 2019 +0900" }, "committer": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Mon Jul 01 16:59:02 2019 +0200" }, "message": "ALSA: firewire-lib/fireworks: fix miss detection of received MIDI messages\n\nIn IEC 61883-6, 8 MIDI data streams are multiplexed into single\nMIDI conformant data channel. The index of stream is calculated by\nmodulo 8 of the value of data block counter.\n\nIn fireworks, the value of data block counter in CIP header has a quirk\nwith firmware version v5.0.0, v5.7.3 and v5.8.0. This brings ALSA\nIEC 61883-1/6 packet streaming engine to miss detection of MIDI\nmessages.\n\nThis commit fixes the miss detection to modify the value of data block\ncounter for the modulo calculation.\n\nFor maintainers, this bug exists since a commit 18f5ed365d3f (\"ALSA:\nfireworks/firewire-lib: add support for recent firmware quirk\") in Linux\nkernel v4.2. There\u0027re many changes since the commit. This fix can be\nbackported to Linux kernel v4.4 or later. I tagged a base commit to the\nbackport for your convenience.\n\nBesides, my work for Linux kernel v5.3 brings heavy code refactoring and\nsome structure members are renamed in \u0027sound/firewire/amdtp-stream.h\u0027.\nThe content of this patch brings conflict when merging -rc tree with\nthis patch and the latest tree. I request maintainers to solve the\nconflict to replace \u0027tx_first_dbc\u0027 with \u0027ctx_data.tx.first_dbc\u0027.\n\nFixes: df075feefbd3 (\"ALSA: firewire-lib: complete AM824 data block processing layer\")\nCc: \u003cstable@vger.kernel.org\u003e # v4.4+\nSigned-off-by: Takashi Sakamoto \u003co-takashi@sakamocchi.jp\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\n" }, { "commit": "570d7a98e7d6d5d8706d94ffd2d40adeaa318332", "tree": "56980b6ac051d46174e62c1919ec14d02d25ad5d", "parents": [ "d728cf79164bb38e9628d15276e636539f857ef1" ], "author": { "name": "Eric Biggers", "email": "ebiggers@google.com", "time": "Sat Jun 29 13:27:44 2019 -0700" }, "committer": { "name": "Al Viro", "email": "viro@zeniv.linux.org.uk", "time": "Mon Jul 01 10:46:36 2019 -0400" }, "message": "vfs: move_mount: reject moving kernel internal mounts\n\nsys_move_mount() crashes by dereferencing the pointer MNT_NS_INTERNAL,\na.k.a. ERR_PTR(-EINVAL), if the old mount is specified by fd for a\nkernel object with an internal mount, such as a pipe or memfd.\n\nFix it by checking for this case and returning -EINVAL.\n\n[AV: what we want is is_mounted(); use that instead of making the\ncondition even more convoluted]\n\nReproducer:\n\n #include \u003cunistd.h\u003e\n\n #define __NR_move_mount 429\n #define MOVE_MOUNT_F_EMPTY_PATH 0x00000004\n\n int main()\n {\n \tint fds[2];\n\n \tpipe(fds);\n syscall(__NR_move_mount, fds[0], \"\", -1, \"/\", MOVE_MOUNT_F_EMPTY_PATH);\n }\n\nReported-by: syzbot+6004acbaa1893ad013f0@syzkaller.appspotmail.com\nFixes: 2db154b3ea8e (\"vfs: syscall: Add move_mount(2) to move mounts around\")\nSigned-off-by: Eric Biggers \u003cebiggers@google.com\u003e\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n" }, { "commit": "28dd29c06d0dede4b32b2c559cff21955a830928", "tree": "bc5030fce4ccd0f87dc96a372df63677f207c104", "parents": [ "6fbc7275c7a9ba97877050335f290341a1fd8dbf" ], "author": { "name": "Christian Brauner", "email": "christian@brauner.io", "time": "Mon Jul 01 16:01:46 2019 +0200" }, "committer": { "name": "Christian Brauner", "email": "christian@brauner.io", "time": "Mon Jul 01 16:43:30 2019 +0200" }, "message": "fork: return proper negative error code\n\nMake sure to return a proper negative error code from copy_process()\nwhen anon_inode_getfile() fails with CLONE_PIDFD.\nOtherwise _do_fork() will not detect an error and get_task_pid() will\noperator on a nonsensical pointer:\n\nR10: 0000000000000000 R11: 0000000000000246 R12: 00000000006dbc2c\nR13: 00007ffc15fbb0ff R14: 00007ff07e47e9c0 R15: 0000000000000000\nkasan: CONFIG_KASAN_INLINE enabled\nkasan: GPF could be caused by NULL-ptr deref or user memory access\ngeneral protection fault: 0000 [#1] PREEMPT SMP KASAN\nCPU: 1 PID: 7990 Comm: syz-executor290 Not tainted 5.2.0-rc6+ #9\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS\nGoogle 01/01/2011\nRIP: 0010:__read_once_size include/linux/compiler.h:194 [inline]\nRIP: 0010:get_task_pid+0xe1/0x210 kernel/pid.c:372\nCode: 89 ff e8 62 27 5f 00 49 8b 07 44 89 f1 4c 8d bc c8 90 01 00 00 eb 0c\ne8 0d fe 25 00 49 81 c7 38 05 00 00 4c 89 f8 48 c1 e8 03 \u003c80\u003e 3c 18 00 74\n08 4c 89 ff e8 31 27 5f 00 4d 8b 37 e8 f9 47 12 00\nRSP: 0018:ffff88808a4a7d78 EFLAGS: 00010203\nRAX: 00000000000000a7 RBX: dffffc0000000000 RCX: ffff888088180600\nRDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000\nRBP: ffff88808a4a7d90 R08: ffffffff814fb3a8 R09: ffffed1015d66bf8\nR10: ffffed1015d66bf8 R11: 1ffff11015d66bf7 R12: 0000000000041ffc\nR13: 1ffff11011494fbc R14: 0000000000000000 R15: 000000000000053d\nFS: 00007ff07e47e700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00000000004b5100 CR3: 0000000094df2000 CR4: 00000000001406e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n _do_fork+0x1b9/0x5f0 kernel/fork.c:2360\n __do_sys_clone kernel/fork.c:2454 [inline]\n __se_sys_clone kernel/fork.c:2448 [inline]\n __x64_sys_clone+0xc1/0xd0 kernel/fork.c:2448\n do_syscall_64+0xfe/0x140 arch/x86/entry/common.c:301\n entry_SYSCALL_64_after_hwframe+0x49/0xbe\n\nLink: https://lore.kernel.org/lkml/000000000000e0dc0d058c9e7142@google.com\nReported-and-tested-by: syzbot+002e636502bc4b64eb5c@syzkaller.appspotmail.com\nFixes: 6fd2fe494b17 (\"copy_process(): don\u0027t use ksys_close() on cleanups\")\nCc: Jann Horn \u003cjannh@google.com\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: Christian Brauner \u003cchristian@brauner.io\u003e\n" }, { "commit": "688f3d1ebedffa310b6591bd1b63fa0770d945fe", "tree": "ad8d5a9664a6c057054e68166efb59492ae9cc40", "parents": [ "f78c581e22d4b33359ac3462e8d0504735df01f4" ], "author": { "name": "Lyude Paul", "email": "lyude@redhat.com", "time": "Thu Jun 20 19:21:26 2019 -0400" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Mon Jul 01 09:15:00 2019 -0500" }, "message": "drm/amdgpu: Don\u0027t skip display settings in hwmgr_resume()\n\nI\u0027m not entirely sure why this is, but for some reason:\n\n921935dc6404 (\"drm/amd/powerplay: enforce display related settings only on needed\")\n\nBreaks runtime PM resume on the Radeon PRO WX 3100 (Lexa) in one the\npre-production laptops I have. The issue manifests as the following\nmessages in dmesg:\n\n[drm] UVD and UVD ENC initialized successfully.\namdgpu 0000:3b:00.0: [drm:amdgpu_ring_test_helper [amdgpu]] *ERROR* ring vce1 test failed (-110)\n[drm:amdgpu_device_ip_resume_phase2 [amdgpu]] *ERROR* resume of IP block \u003cvce_v3_0\u003e failed -110\n[drm:amdgpu_device_resume [amdgpu]] *ERROR* amdgpu_device_ip_resume failed (-110).\n\nAnd happens after about 6-10 runtime PM suspend/resume cycles (sometimes\nsooner, if you\u0027re lucky!). Unfortunately I can\u0027t seem to pin down\nprecisely which part in psm_adjust_power_state_dynamic that is causing\nthe issue, but not skipping the display setting setup seems to fix it.\nHopefully if there is a better fix for this, this patch will spark\ndiscussion around it.\n\nFixes: 921935dc6404 (\"drm/amd/powerplay: enforce display related settings only on needed\")\nCc: Evan Quan \u003cevan.quan@amd.com\u003e\nCc: Alex Deucher \u003calexander.deucher@amd.com\u003e\nCc: Huang Rui \u003cray.huang@amd.com\u003e\nCc: Rex Zhu \u003cRex.Zhu@amd.com\u003e\nCc: Likun Gao \u003cLikun.Gao@amd.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e # v5.1+\nSigned-off-by: Lyude Paul \u003clyude@redhat.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n" }, { "commit": "f78c581e22d4b33359ac3462e8d0504735df01f4", "tree": "8209d75bb22154f68b22fe6b5a05b916f7c520bd", "parents": [ "665d6d4e32313a7952bb3339647f74c3a6b0d78a" ], "author": { "name": "Evan Quan", "email": "evan.quan@amd.com", "time": "Thu Jun 27 11:01:04 2019 +0800" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Mon Jul 01 09:14:05 2019 -0500" }, "message": "drm/amd/powerplay: use hardware fan control if no powerplay fan table\n\nOtherwise, you may get divided-by-zero error or corrput the SMU fan\ncontrol feature.\n\nSigned-off-by: Evan Quan \u003cevan.quan@amd.com\u003e\nReviewed-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nTested-by: Slava Abramov \u003cslava.abramov@amd.com\u003e\nAcked-by: Slava Abramov \u003cslava.abramov@amd.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nCc: stable@vger.kernel.org\n" }, { "commit": "c403ec33b613a15d9fd8dde37f246b79cd56b5df", "tree": "eaa0519c1926331853be0a008249882f4812d0bc", "parents": [ "a126483e82957172b8a93ebb1d30fb2b1df3cbbc" ], "author": { "name": "Paul Cercueil", "email": "paul@crapouillou.net", "time": "Sat Jun 29 03:22:48 2019 +0200" }, "committer": { "name": "Miquel Raynal", "email": "miquel.raynal@bootlin.com", "time": "Mon Jul 01 14:50:38 2019 +0200" }, "message": "mtd: rawnand: ingenic: Fix ingenic_ecc dependency\n\nIf MTD_NAND_JZ4780 is y and MTD_NAND_JZ4780_BCH is m,\nwhich select CONFIG_MTD_NAND_INGENIC_ECC to m, building fails:\n\ndrivers/mtd/nand/raw/ingenic/ingenic_nand.o: In function `ingenic_nand_remove\u0027:\ningenic_nand.c:(.text+0x177): undefined reference to `ingenic_ecc_release\u0027\ndrivers/mtd/nand/raw/ingenic/ingenic_nand.o: In function `ingenic_nand_ecc_correct\u0027:\ningenic_nand.c:(.text+0x2ee): undefined reference to `ingenic_ecc_correct\u0027\n\nTo fix that, the ingenic_nand and ingenic_ecc modules have been fused\ninto one single module.\n- The ingenic_ecc.c code is now compiled in only if\n $(CONFIG_MTD_NAND_INGENIC_ECC) is set. This is now a boolean instead\n of tristate.\n- To avoid changing the module name, the ingenic_nand.c file is moved to\n ingenic_nand_drv.c. Then the module name is still ingenic_nand.\n- Since ingenic_ecc.c is no more a module, the module-specific macros\n have been dropped, and the functions are no more exported for use by\n the ingenic_nand driver.\n\nFixes: 15de8c6efd0e (\"mtd: rawnand: ingenic: Separate top-level and SoC specific code\")\nSigned-off-by: Paul Cercueil \u003cpaul@crapouillou.net\u003e\nReported-by: Arnd Bergmann \u003carnd@arndb.de\u003e\nReported-by: Hulk Robot \u003chulkci@huawei.com\u003e\nCc: YueHaibing \u003cyuehaibing@huawei.com\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Miquel Raynal \u003cmiquel.raynal@bootlin.com\u003e\n" }, { "commit": "a126483e82957172b8a93ebb1d30fb2b1df3cbbc", "tree": "07aea8e1716e55d17ec89b68c647a335d93789f9", "parents": [ "6fbc7275c7a9ba97877050335f290341a1fd8dbf" ], "author": { "name": "Frieder Schrempf", "email": "frieder.schrempf@kontron.de", "time": "Thu Jun 06 17:07:55 2019 +0000" }, "committer": { "name": "Miquel Raynal", "email": "miquel.raynal@bootlin.com", "time": "Mon Jul 01 14:50:20 2019 +0200" }, "message": "mtd: spinand: Fix max_bad_eraseblocks_per_lun info in memorg\n\nThe 1Gb Macronix chip can have a maximum of 20 bad blocks, while\nthe 2Gb version has twice as many blocks and therefore the maximum\nnumber of bad blocks is 40.\n\nThe 4Gb GigaDevice GD5F4GQ4xA has twice as many blocks as its 2Gb\ncounterpart and therefore a maximum of 80 bad blocks.\n\nFixes: 377e517b5fa5 (\"mtd: nand: Add max_bad_eraseblocks_per_lun info to memorg\")\nReported-by: Emil Lenngren \u003cemil.lenngren@gmail.com\u003e\nSigned-off-by: Frieder Schrempf \u003cfrieder.schrempf@kontron.de\u003e\nSigned-off-by: Miquel Raynal \u003cmiquel.raynal@bootlin.com\u003e\n" }, { "commit": "6fbc7275c7a9ba97877050335f290341a1fd8dbf", "tree": "29acb5e3c330eea527e60989d9349cab04246d4d", "parents": [ "39132f746eceed6beecb16c7b79600fb54eb8b2b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 30 11:25:36 2019 +0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 30 11:25:36 2019 +0800" }, "message": "Linux 5.2-rc7\n" }, { "commit": "39132f746eceed6beecb16c7b79600fb54eb8b2b", "tree": "2fe6deca641d09195e1f4ce9dfee094bb53a4ba0", "parents": [ "7c15f41e8743df676f6cb0615e74e8ba30994d6a", "e13e7cd4c0c1cc9984d9b6a8663e10d76b53f2aa" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 30 11:20:52 2019 +0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 30 11:20:52 2019 +0800" }, "message": "Merge tag \u0027powerpc-5.2-7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux\n\nPull powerpc fix from Michael Ellerman:\n \"One fix for a regression in my commit adding KUAP (Kernel User Access\n Prevention) on Radix, which incorrectly touched the AMR in the early\n machine check handler.\n\n Thanks to Nicholas Piggin\"\n\n* tag \u0027powerpc-5.2-7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:\n powerpc/64s/exception: Fix machine check early corrupting AMR\n" }, { "commit": "7c15f41e8743df676f6cb0615e74e8ba30994d6a", "tree": "867c17795b2d2b3e154ec5a742ed26ae1ec6dc96", "parents": [ "728254541ebcc7fee869c3c4c3f36f96be791edb", "33d4a5a7a5b4d02915d765064b2319e90a11cbde" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 30 11:19:17 2019 +0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Jun 30 11:19:17 2019 +0800" }, "message": "Merge branch \u0027smp-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull SMP fixes from Thomas Gleixner:\n \"Two small changes for the cpu hotplug code:\n\n - Prevent out of bounds access which actually might crash the machine\n caused by a missing bounds check in the fail injection code\n\n - Warn about unsupported migitation mode command line arguments to\n make people aware that they typoed the paramater. Not necessarily a\n fix but quite some people tripped over that\"\n\n* \u0027smp-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n cpu/hotplug: Fix out-of-bounds read when setting fail state\n cpu/speculation: Warn on unsupported mitigations\u003d parameter\n" }, { "commit": "728254541ebcc7fee869c3c4c3f36f96be791edb", "tree": "7a49c04a3a933db926e9492b45106fc7f4cf696e", "parents": [ "57103eb7c6cad04c0611b7a5767a381b34b8b0ab", "ae6a45a0868986f69039a2150d3b2b9ca294c378" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 19:42:30 2019 +0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 19:42:30 2019 +0800" }, "message": "Merge branch \u0027x86-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull x86 fixes from Ingo Molnar:\n \"Misc fixes all over the place:\n\n - might_sleep() atomicity fix in the microcode loader\n\n - resctrl boundary condition fix\n\n - APIC arithmethics bug fix for frequencies \u003e\u003d 4.2 GHz\n\n - three 5-level paging crash fixes\n\n - two speculation fixes\n\n - a perf/stacktrace fix\"\n\n* \u0027x86-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n x86/unwind/orc: Fall back to using frame pointers for generated code\n perf/x86: Always store regs-\u003eip in perf_callchain_kernel()\n x86/speculation: Allow guests to use SSBD even if host does not\n x86/mm: Handle physical-virtual alignment mismatch in phys_p4d_init()\n x86/boot/64: Add missing fixup_pointer() for next_early_pgt access\n x86/boot/64: Fix crash if kernel image crosses page table boundary\n x86/apic: Fix integer overflow on 10 bit left shift of cpu_khz\n x86/resctrl: Prevent possible overrun during bitmap operations\n x86/microcode: Fix the microcode load on CPU hotplug for real\n" }, { "commit": "57103eb7c6cad04c0611b7a5767a381b34b8b0ab", "tree": "e9691621b8c0be4b1e3f82f6b17948c8140c43f9", "parents": [ "eed7d30e126dc5b883b77f3e26bbca6c5b0f4222", "8b12b812f5367c2469fb937da7e28dd321ad8d7b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 19:39:17 2019 +0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 19:39:17 2019 +0800" }, "message": "Merge branch \u0027perf-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull perf fixes from Ingo Molnar:\n \"Various fixes, most of them related to bugs perf fuzzing found in the\n x86 code\"\n\n* \u0027perf-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n perf/x86/regs: Use PERF_REG_EXTENDED_MASK\n perf/x86: Remove pmu-\u003epebs_no_xmm_regs\n perf/x86: Clean up PEBS_XMM_REGS\n perf/x86/regs: Check reserved bits\n perf/x86: Disable extended registers for non-supported PMUs\n perf/ioctl: Add check for the sample_period value\n perf/core: Fix perf_sample_regs_user() mm check\n" }, { "commit": "eed7d30e126dc5b883b77f3e26bbca6c5b0f4222", "tree": "dc0cd7d7d3d2070f17833ad2e9b133d42ea747d6", "parents": [ "a7211bc9f3d50d77efe77c332b269458a94fcfd2", "a52548dd0491a544558e971cd5963501e1a2024d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 19:36:53 2019 +0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 19:36:53 2019 +0800" }, "message": "Merge branch \u0027irq-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull irq fixes from Ingo Molnar:\n \"Diverse irqchip driver fixes\"\n\n* \u0027irq-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n irqchip/gic-v3-its: Fix command queue pointer comparison bug\n irqchip/mips-gic: Use the correct local interrupt map registers\n irqchip/ti-sci-inta: Fix kernel crash if irq_create_fwspec_mapping fail\n irqchip/irq-csky-mpintc: Support auto irq deliver to all cpus\n" }, { "commit": "a7211bc9f3d50d77efe77c332b269458a94fcfd2", "tree": "7706737cdba1e29534a31c3055942e71ea74bce1", "parents": [ "2407e486066b8ce00dabd7e2b3a2cbcc59ea6186", "48c7d73b2362ce61503551ad70052617b3e8857d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 19:32:09 2019 +0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 19:32:09 2019 +0800" }, "message": "Merge branch \u0027efi-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull EFI fixes from Ingo Molnar:\n \"Four fixes:\n - fix a kexec crash on arm64\n - fix a reboot crash on some Android platforms\n - future-proof the code for upcoming ACPI 6.2 changes\n - fix a build warning on x86\"\n\n* \u0027efi-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n efibc: Replace variable set function in notifier call\n x86/efi: fix a -Wtype-limits compilation warning\n efi/bgrt: Drop BGRT status field reserved bits check\n efi/memreserve: deal with memreserve entries in unmapped memory\n" }, { "commit": "2407e486066b8ce00dabd7e2b3a2cbcc59ea6186", "tree": "5e4fcdb178bcb824f8b3af6742b4221c3a889935", "parents": [ "01305db842e1e637944090a3de7e4259c4a3a029", "471a739a47aa7d582f0cdf9d392957d04632bae2" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 19:29:45 2019 +0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 19:29:45 2019 +0800" }, "message": "Merge tag \u0027pm-5.2-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull power management fix from Rafael Wysocki:\n \"Avoid skipping bus-level PCI power management during system resume for\n PCIe ports left in D0 during the preceding suspend transition on\n platforms where the power states of those ports can change out of the\n PCI layer\u0027s control\"\n\n* tag \u0027pm-5.2-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n PCI: PM: Avoid skipping bus-level PM on platforms without ACPI\n" }, { "commit": "01305db842e1e637944090a3de7e4259c4a3a029", "tree": "eab0952f853d209e0ad964d74f998ae5e5df85e7", "parents": [ "0839c537628df5a3b713d0f619b2dcc8469f08c0", "12fd2aee6db765ab4e97c4a37e6d1f6c10e74ee6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 17:14:57 2019 +0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 17:14:57 2019 +0800" }, "message": "Merge tag \u0027xarray-5.2-rc6\u0027 of git://git.infradead.org/users/willy/linux-dax\n\nPull XArray fixes from Matthew Wilcox:\n\n - Account XArray nodes for the page cache to the appropriate cgroup\n (Johannes Weiner)\n\n - Fix idr_get_next() when called under the RCU lock (Matthew Wilcox)\n\n - Add a test for xa_insert() (Matthew Wilcox)\n\n* tag \u0027xarray-5.2-rc6\u0027 of git://git.infradead.org/users/willy/linux-dax:\n XArray tests: Add check_insert\n idr: Fix idr_get_next race with idr_remove\n mm: fix page cache convergence regression\n" }, { "commit": "0839c537628df5a3b713d0f619b2dcc8469f08c0", "tree": "a43199428b64d4f31c4b6f55de10bb3ee71971b6", "parents": [ "f8b5c72227618780f49e53fb77b0e7ddb2996552", "8f9fab480c7a87b10bb5440b5555f370272a5d59" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 17:11:01 2019 +0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 17:11:01 2019 +0800" }, "message": "Merge branch \u0027akpm\u0027 (patches from Andrew)\n\nMerge misc fixes from Andrew Morton:\n \"15 fixes\"\n\n* emailed patches from Andrew Morton \u003cakpm@linux-foundation.org\u003e:\n linux/kernel.h: fix overflow for DIV_ROUND_UP_ULL\n mm, swap: fix THP swap out\n fork,memcg: alloc_thread_stack_node needs to set tsk-\u003estack\n MAINTAINERS: add CLANG/LLVM BUILD SUPPORT info\n mm/vmalloc.c: avoid bogus -Wmaybe-uninitialized warning\n mm/page_idle.c: fix oops because end_pfn is larger than max_pfn\n initramfs: fix populate_initrd_image() section mismatch\n mm/oom_kill.c: fix uninitialized oc-\u003econstraint\n mm: hugetlb: soft-offline: dissolve_free_huge_page() return zero on !PageHuge\n mm: soft-offline: return -EBUSY if set_hwpoison_free_buddy_page() fails\n signal: remove the wrong signal_pending() check in restore_user_sigmask()\n fs/binfmt_flat.c: make load_flat_shared_library() work\n mm/mempolicy.c: fix an incorrect rebind node in mpol_rebind_nodemask\n fs/proc/array.c: allow reporting eip/esp for all coredumping threads\n mm/dev_pfn: exclude MEMORY_DEVICE_PRIVATE while computing virtual address\n" }, { "commit": "f8b5c72227618780f49e53fb77b0e7ddb2996552", "tree": "6cb72e0aa13cdb91d81747f71815d4571742d15c", "parents": [ "c57582adfda3e7026796fbde81e951ea72edbb66", "ec9b4feb1e41587c15d43d237844193318389dc3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 17:05:58 2019 +0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 17:05:58 2019 +0800" }, "message": "Merge tag \u0027arc-5.2-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vgupta/arc\n\nPull ARC fixes from Vineet Gupta:\n\n - hsdk platform unifying apertures\n\n - build system CROSS_COMPILE prefix\n\n* tag \u0027arc-5.2-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vgupta/arc:\n ARC: [plat-hsdk]: unify memory apertures configuration\n ARC: build: Try to guess CROSS_COMPILE with cc-cross-prefix\n" }, { "commit": "c57582adfda3e7026796fbde81e951ea72edbb66", "tree": "1baebbcd4ea1e406cf93580ae323397f8accc089", "parents": [ "c949c30b2640e52b580e1a230e3561d1662195ba", "0db7f5cd4aeba4cc63d0068598b3350eba8bb4cd" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 17:04:21 2019 +0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 17:04:21 2019 +0800" }, "message": "Merge tag \u0027riscv-for-v5.2/fixes-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux\n\nPull RISC-V fixes from Paul Walmsley:\n \"Minor RISC-V fixes and one defconfig update.\n\n The fixes have no functional impact:\n\n - Fix some comment text in the memory management vmalloc_fault path.\n\n - Fix some warnings from the DT compiler in our newly-added DT files.\n\n - Change the newly-added DT bindings such that SoC IP blocks with\n external I/O are marked as \"disabled\" by default, then enable them\n explicitly in board DT files when the devices are used on the\n board. This aligns the bindings with existing upstream practice.\n\n - Add the MIT license as an option for a minor header file, at the\n request of one of the U-Boot maintainers.\n\n The RISC-V defconfig update builds the SiFive SPI driver and the\n MMC-SPI driver by default. The intention here is to make v5.2 more\n usable for testers and users with RISC-V hardware\"\n\n* tag \u0027riscv-for-v5.2/fixes-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux:\n riscv: mm: Fix code comment\n dt-bindings: clock: sifive: add MIT license as an option for the header file\n dt-bindings: riscv: resolve \u0027make dt_binding_check\u0027 warnings\n riscv: dts: Re-organize the DT nodes\n RISC-V: defconfig: enable MMC \u0026 SPI for RISC-V\n" }, { "commit": "c949c30b2640e52b580e1a230e3561d1662195ba", "tree": "6961f9310be5e9595cf9c115b197197cda9fdf36", "parents": [ "43251dbd6ac278a8bdaaee43ec5e299c1a5dafdd", "68f461593f76bd5f17e87cdd0bea28f4278c7268" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 17:02:22 2019 +0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 17:02:22 2019 +0800" }, "message": "Merge tag \u0027nfs-for-5.2-4\u0027 of git://git.linux-nfs.org/projects/anna/linux-nfs\n\nPull two more NFS client fixes from Anna Schumaker:\n \"These are both stable fixes.\n\n One to calculate the correct client message length in the case of\n partial transmissions. And the other to set the proper TCP timeout for\n flexfiles\"\n\n* tag \u0027nfs-for-5.2-4\u0027 of git://git.linux-nfs.org/projects/anna/linux-nfs:\n NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O\n SUNRPC: Fix up calculation of client message length\n" }, { "commit": "43251dbd6ac278a8bdaaee43ec5e299c1a5dafdd", "tree": "9366f7cfe1d63c906838712e18fff37d85739d6d", "parents": [ "5b607ba862f30364aef0b0d40cab8afccf339616", "d6b8bd679c9c8856fa04b80490765c43a4cb613b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 17:01:02 2019 +0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 17:01:02 2019 +0800" }, "message": "Merge tag \u0027ceph-for-5.2-rc7\u0027 of git://github.com/ceph/ceph-client\n\nPull ceph fix from Ilya Dryomov:\n \"A small fix for a potential -rc1 regression from Jeff\"\n\n* tag \u0027ceph-for-5.2-rc7\u0027 of git://github.com/ceph/ceph-client:\n ceph: fix ceph_mdsc_build_path to not stop on first component\n" }, { "commit": "5b607ba862f30364aef0b0d40cab8afccf339616", "tree": "076c30d6e954178b922dce2ecde278e2587c2255", "parents": [ "9dda12b6fa0eba6b1fd32399b599d05765893dae", "240b4cc8fd5db138b675297d4226ec46594d9b3b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 16:59:45 2019 +0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 16:59:45 2019 +0800" }, "message": "Merge tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi\n\nPull SCSI fix from James Bottomley:\n \"One simple fix for a driver use after free\"\n\n* tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:\n scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck()\n" }, { "commit": "9dda12b6fa0eba6b1fd32399b599d05765893dae", "tree": "f303ca007424c0c3af40ba88b23b3e3e965bfc2a", "parents": [ "061913712d6ab77c77192584912afdbd8267c54c", "e6feaf215f07dd98d03ee783c9dd4c7f7e55b74d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 16:58:35 2019 +0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 16:58:35 2019 +0800" }, "message": "Merge tag \u0027for-linus-20190628\u0027 of git://git.kernel.dk/linux-block\n\nPull block fixes from Jens Axboe:\n \"Just two small fixes.\n\n One from Paolo, fixing a silly mistake in BFQ. The other one is from\n me, ensuring that we have -\u003efile cleared in the io_uring request a bit\n earlier. That avoids a use-before-free, if we encounter an error\n before -\u003efile is assigned\"\n\n* tag \u0027for-linus-20190628\u0027 of git://git.kernel.dk/linux-block:\n block, bfq: fix operator in BFQQ_TOTALLY_SEEKY\n io_uring: ensure req-\u003efile is cleared on allocation\n" }, { "commit": "061913712d6ab77c77192584912afdbd8267c54c", "tree": "08ae3f833c2c2297af14b77eb255b41c395c0764", "parents": [ "556e2f6020bf90f63c5dd65e9a2254be6db3185b", "9d957a959bc8c3dfe37572ac8e99affb5a885965" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 16:51:10 2019 +0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 16:51:10 2019 +0800" }, "message": "Merge tag \u0027pinctrl-v5.2-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl\n\nPull pin control fixes from Linus Walleij:\n \"Sorry to bomb in fixes this late. Maybe I can comfort you by saying it\n is only driver fixes, and mostly IRQ handling which is something GPIO\n and pin control drivers never get right. You think it works and then\n it doesn\u0027t.\n\n Summary:\n\n - Fix IRQ setup in the MCP23s08.\n\n - Fix pin setup on pins \u003e 31 in the Ocelot driver.\n\n - Fix IRQs in the Mediatek driver\"\n\n* tag \u0027pinctrl-v5.2-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl:\n pinctrl: mediatek: Update cur_mask in mask/mask ops\n pinctrl: mediatek: Ignore interrupts that are wake only during resume\n pinctrl: ocelot: fix pinmuxing for pins after 31\n pinctrl: ocelot: fix gpio direction for pins after 31\n pinctrl: mcp23s08: Fix add_data and irqchip_add_nested call order\n" }, { "commit": "8f9fab480c7a87b10bb5440b5555f370272a5d59", "tree": "a7980854d30c6713bfc9ca225fb1f79fc6274327", "parents": [ "1a5f439c7c02837d943e528d46501564d4226757" ], "author": { "name": "Vinod Koul", "email": "vkoul@kernel.org", "time": "Fri Jun 28 12:07:21 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 16:43:45 2019 +0800" }, "message": "linux/kernel.h: fix overflow for DIV_ROUND_UP_ULL\n\nDIV_ROUND_UP_ULL adds the two arguments and then invokes\nDIV_ROUND_DOWN_ULL. But on a 32bit system the addition of two 32 bit\nvalues can overflow. DIV_ROUND_DOWN_ULL does it correctly and stashes\nthe addition into a unsigned long long so cast the result to unsigned\nlong long here to avoid the overflow condition.\n\n[akpm@linux-foundation.org: DIV_ROUND_UP_ULL must be an rval]\nLink: http://lkml.kernel.org/r/20190625100518.30753-1-vkoul@kernel.org\nSigned-off-by: Vinod Koul \u003cvkoul@kernel.org\u003e\nReviewed-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nCc: Bjorn Andersson \u003cbjorn.andersson@linaro.org\u003e\nCc: Randy Dunlap \u003crdunlap@infradead.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "1a5f439c7c02837d943e528d46501564d4226757", "tree": "050e4d16ffe8dfb351de624fbd5267aeff1e87a0", "parents": [ "1bf4580e00a248a2c86269125390eb3648e1877c" ], "author": { "name": "Huang Ying", "email": "ying.huang@intel.com", "time": "Fri Jun 28 12:07:18 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 16:43:45 2019 +0800" }, "message": "mm, swap: fix THP swap out\n\n0-Day test system reported some OOM regressions for several THP\n(Transparent Huge Page) swap test cases. These regressions are bisected\nto 6861428921b5 (\"block: always define BIO_MAX_PAGES as 256\"). In the\ncommit, BIO_MAX_PAGES is set to 256 even when THP swap is enabled. So the\nbio_alloc(gfp_flags, 512) in get_swap_bio() may fail when swapping out\nTHP. That causes the OOM.\n\nAs in the patch description of 6861428921b5 (\"block: always define\nBIO_MAX_PAGES as 256\"), THP swap should use multi-page bvec to write THP\nto swap space. So the issue is fixed via doing that in get_swap_bio().\n\nBTW: I remember I have checked the THP swap code when 6861428921b5\n(\"block: always define BIO_MAX_PAGES as 256\") was merged, and thought the\nTHP swap code needn\u0027t to be changed. But apparently, I was wrong. I\nshould have done this at that time.\n\nLink: http://lkml.kernel.org/r/20190624075515.31040-1-ying.huang@intel.com\nFixes: 6861428921b5 (\"block: always define BIO_MAX_PAGES as 256\")\nSigned-off-by: \"Huang, Ying\" \u003cying.huang@intel.com\u003e\nReviewed-by: Ming Lei \u003cming.lei@redhat.com\u003e\nCc: Michal Hocko \u003cmhocko@kernel.org\u003e\nCc: Johannes Weiner \u003channes@cmpxchg.org\u003e\nCc: Hugh Dickins \u003chughd@google.com\u003e\nCc: Minchan Kim \u003cminchan@kernel.org\u003e\nCc: Rik van Riel \u003criel@redhat.com\u003e\nCc: Daniel Jordan \u003cdaniel.m.jordan@oracle.com\u003e\nCc: Jens Axboe \u003caxboe@kernel.dk\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "1bf4580e00a248a2c86269125390eb3648e1877c", "tree": "63f8510d48380fcf5d8133c2270b45501106769d", "parents": [ "8708e13c6a0600625eea3aebd027c0715a5d2bb2" ], "author": { "name": "Andrea Arcangeli", "email": "aarcange@redhat.com", "time": "Fri Jun 28 12:07:14 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 16:43:45 2019 +0800" }, "message": "fork,memcg: alloc_thread_stack_node needs to set tsk-\u003estack\n\nCommit 5eed6f1dff87 (\"fork,memcg: fix crash in free_thread_stack on\nmemcg charge fail\") corrected two instances, but there was a third\ninstance of this bug.\n\nWithout setting tsk-\u003estack, if memcg_charge_kernel_stack fails, it\u0027ll\nexecute free_thread_stack() on a dangling pointer.\n\nEnterprise kernels are compiled with VMAP_STACK\u003dy so this isn\u0027t\ncritical, but custom VMAP_STACK\u003dn builds should have some performance\nadvantage, with the drawback of risking to fail fork because compaction\ndidn\u0027t succeed. So as long as VMAP_STACK\u003dn is a supported option it\u0027s\nworth fixing it upstream.\n\nLink: http://lkml.kernel.org/r/20190619011450.28048-1-aarcange@redhat.com\nFixes: 9b6f7e163cd0 (\"mm: rework memcg kernel stack accounting\")\nSigned-off-by: Andrea Arcangeli \u003caarcange@redhat.com\u003e\nReviewed-by: Rik van Riel \u003criel@surriel.com\u003e\nAcked-by: Roman Gushchin \u003cguro@fb.com\u003e\nAcked-by: Michal Hocko \u003cmhocko@suse.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "8708e13c6a0600625eea3aebd027c0715a5d2bb2", "tree": "77ed01cca1a69d2b1bfb6d7c39c227429a7a60b9", "parents": [ "2c9292336a09f7bf019689580ceea9a2d116b999" ], "author": { "name": "Nick Desaulniers", "email": "ndesaulniers@google.com", "time": "Fri Jun 28 12:07:12 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 16:43:45 2019 +0800" }, "message": "MAINTAINERS: add CLANG/LLVM BUILD SUPPORT info\n\nAdd keyword support so that our mailing list gets cc\u0027ed for clang/llvm\npatches. We\u0027re pretty active on our mailing list so far as code review.\nThere are numerous Googlers like myself that are paid to support\nbuilding the Linux kernel with Clang and LLVM.\n\nLink: http://lkml.kernel.org/r/20190620001907.255803-1-ndesaulniers@google.com\nSigned-off-by: Nick Desaulniers \u003cndesaulniers@google.com\u003e\nReviewed-by: Nathan Chancellor \u003cnatechancellor@gmail.com\u003e\nCc: Joe Perches \u003cjoe@perches.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "2c9292336a09f7bf019689580ceea9a2d116b999", "tree": "372bf1a2471dac187071f09618841024e7d4812f", "parents": [ "7298e3b0a149c91323b3205d325e942c3b3b9ef6" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Fri Jun 28 12:07:09 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 16:43:45 2019 +0800" }, "message": "mm/vmalloc.c: avoid bogus -Wmaybe-uninitialized warning\n\ngcc gets confused in pcpu_get_vm_areas() because there are too many\nbranches that affect whether \u0027lva\u0027 was initialized before it gets used:\n\n mm/vmalloc.c: In function \u0027pcpu_get_vm_areas\u0027:\n mm/vmalloc.c:991:4: error: \u0027lva\u0027 may be used uninitialized in this function [-Werror\u003dmaybe-uninitialized]\n insert_vmap_area_augment(lva, \u0026va-\u003erb_node,\n ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\n \u0026free_vmap_area_root, \u0026free_vmap_area_list);\n ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\n mm/vmalloc.c:916:20: note: \u0027lva\u0027 was declared here\n struct vmap_area *lva;\n ^~~\n\nAdd an intialization to NULL, and check whether this has changed before\nthe first use.\n\n[akpm@linux-foundation.org: tweak comments]\nLink: http://lkml.kernel.org/r/20190618092650.2943749-1-arnd@arndb.de\nFixes: 68ad4a330433 (\"mm/vmalloc.c: keep track of free blocks for vmap allocation\")\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\nReviewed-by: Uladzislau Rezki (Sony) \u003curezki@gmail.com\u003e\nCc: Joel Fernandes \u003cjoelaf@google.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "7298e3b0a149c91323b3205d325e942c3b3b9ef6", "tree": "793cff5c2438d1dcbcbebeb0cc2b1b783006bf9b", "parents": [ "4ada1e810038e9dbc20e40b524e05ee1a9d31f98" ], "author": { "name": "Colin Ian King", "email": "colin.king@canonical.com", "time": "Fri Jun 28 12:07:05 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 16:43:45 2019 +0800" }, "message": "mm/page_idle.c: fix oops because end_pfn is larger than max_pfn\n\nCurrently the calcuation of end_pfn can round up the pfn number to more\nthan the actual maximum number of pfns, causing an Oops. Fix this by\nensuring end_pfn is never more than max_pfn.\n\nThis can be easily triggered when on systems where the end_pfn gets\nrounded up to more than max_pfn using the idle-page stress-ng stress test:\n\nsudo stress-ng --idle-page 0\n\n BUG: unable to handle kernel paging request at 00000000000020d8\n #PF error: [normal kernel read fault]\n PGD 0 P4D 0\n Oops: 0000 [#1] SMP PTI\n CPU: 1 PID: 11039 Comm: stress-ng-idle- Not tainted 5.0.0-5-generic #6-Ubuntu\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1ubuntu1 04/01/2014\n RIP: 0010:page_idle_get_page+0xc8/0x1a0\n Code: 0f b1 0a 75 7d 48 8b 03 48 89 c2 48 c1 e8 33 83 e0 07 48 c1 ea 36 48 8d 0c 40 4c 8d 24 88 49 c1 e4 07 4c 03 24 d5 00 89 c3 be \u003c49\u003e 8b 44 24 58 48 8d b8 80 a1 02 00 e8 07 d5 77 00 48 8b 53 08 48\n RSP: 0018:ffffafd7c672fde8 EFLAGS: 00010202\n RAX: 0000000000000005 RBX: ffffe36341fff700 RCX: 000000000000000f\n RDX: 0000000000000284 RSI: 0000000000000275 RDI: 0000000001fff700\n RBP: ffffafd7c672fe00 R08: ffffa0bc34056410 R09: 0000000000000276\n R10: ffffa0bc754e9b40 R11: ffffa0bc330f6400 R12: 0000000000002080\n R13: ffffe36341fff700 R14: 0000000000080000 R15: ffffa0bc330f6400\n FS: 00007f0ec1ea5740(0000) GS:ffffa0bc7db00000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00000000000020d8 CR3: 0000000077d68000 CR4: 00000000000006e0\n Call Trace:\n page_idle_bitmap_write+0x8c/0x140\n sysfs_kf_bin_write+0x5c/0x70\n kernfs_fop_write+0x12e/0x1b0\n __vfs_write+0x1b/0x40\n vfs_write+0xab/0x1b0\n ksys_write+0x55/0xc0\n __x64_sys_write+0x1a/0x20\n do_syscall_64+0x5a/0x110\n entry_SYSCALL_64_after_hwframe+0x44/0xa9\n\nLink: http://lkml.kernel.org/r/20190618124352.28307-1-colin.king@canonical.com\nFixes: 33c3fc71c8cf (\"mm: introduce idle page tracking\")\nSigned-off-by: Colin Ian King \u003ccolin.king@canonical.com\u003e\nReviewed-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nAcked-by: Vladimir Davydov \u003cvdavydov.dev@gmail.com\u003e\nCc: Michal Hocko \u003cmhocko@suse.com\u003e\nCc: Mike Rapoport \u003crppt@linux.vnet.ibm.com\u003e\nCc: Mel Gorman \u003cmgorman@techsingularity.net\u003e\nCc: Stephen Rothwell \u003csfr@canb.auug.org.au\u003e\nCc: Andrey Ryabinin \u003caryabinin@virtuozzo.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "4ada1e810038e9dbc20e40b524e05ee1a9d31f98", "tree": "8154c6c3a6dc835ad15283ae4e8a8c42fea39467", "parents": [ "432b1de0de02a83f64695e69a2d83cbee10c236f" ], "author": { "name": "Geert Uytterhoeven", "email": "geert@linux-m68k.org", "time": "Fri Jun 28 12:07:03 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 16:43:45 2019 +0800" }, "message": "initramfs: fix populate_initrd_image() section mismatch\n\nWith gcc-4.6.3:\n\n WARNING: vmlinux.o(.text.unlikely+0x140): Section mismatch in reference from the function populate_initrd_image() to the variable .init.ramfs.info:__initramfs_size\n The function populate_initrd_image() references\n the variable __init __initramfs_size.\n This is often because populate_initrd_image lacks a __init\n annotation or the annotation of __initramfs_size is wrong.\n\n WARNING: vmlinux.o(.text.unlikely+0x14c): Section mismatch in reference from the function populate_initrd_image() to the function .init.text:unpack_to_rootfs()\n The function populate_initrd_image() references\n the function __init unpack_to_rootfs().\n This is often because populate_initrd_image lacks a __init\n annotation or the annotation of unpack_to_rootfs is wrong.\n\n WARNING: vmlinux.o(.text.unlikely+0x198): Section mismatch in reference from the function populate_initrd_image() to the function .init.text:xwrite()\n The function populate_initrd_image() references\n the function __init xwrite().\n This is often because populate_initrd_image lacks a __init\n annotation or the annotation of xwrite is wrong.\n\nIndeed, if the compiler decides not to inline populate_initrd_image(), a\nwarning is generated.\n\nFix this by adding the missing __init annotations.\n\nLink: http://lkml.kernel.org/r/20190617074340.12779-1-geert@linux-m68k.org\nFixes: 7c184ecd262fe64f (\"initramfs: factor out a helper to populate the initrd image\")\nSigned-off-by: Geert Uytterhoeven \u003cgeert@linux-m68k.org\u003e\nReviewed-by: Christoph Hellwig \u003chch@lst.de\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "432b1de0de02a83f64695e69a2d83cbee10c236f", "tree": "43fd3b89e3be45fe5af4419a8afd00fbc852987b", "parents": [ "faf53def3b143df11062d87c12afe6afeb6f8cc7" ], "author": { "name": "Yafang Shao", "email": "laoar.shao@gmail.com", "time": "Fri Jun 28 12:06:59 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Jun 29 16:43:45 2019 +0800" }, "message": "mm/oom_kill.c: fix uninitialized oc-\u003econstraint\n\nIn dump_oom_summary() oc-\u003econstraint is used to show oom_constraint_text,\nbut it hasn\u0027t been set before. So the value of it is always the default\nvalue 0. We should inititialize it before.\n\nBellow is the output when memcg oom occurs,\n\nbefore this patch:\n oom-kill:constraint\u003dCONSTRAINT_NONE,nodemask\u003d(null), cpuset\u003d/,mems_allowed\u003d0,oom_memcg\u003d/foo,task_memcg\u003d/foo,task\u003dbash,pid\u003d7997,uid\u003d0\n\nafter this patch:\n oom-kill:constraint\u003dCONSTRAINT_MEMCG,nodemask\u003d(null), cpuset\u003d/,mems_allowed\u003d0,oom_memcg\u003d/foo,task_memcg\u003d/foo,task\u003dbash,pid\u003d13681,uid\u003d0\n\nLink: http://lkml.kernel.org/r/1560522038-15879-1-git-send-email-laoar.shao@gmail.com\nFixes: ef8444ea01d7 (\"mm, oom: reorganize the oom report in dump_header\")\nSigned-off-by: Yafang Shao \u003claoar.shao@gmail.com\u003e\nAcked-by: Michal Hocko \u003cmhocko@suse.com\u003e\nCc: Wind Yu \u003cyuzhoujian@didichuxing.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" } ], "next": "faf53def3b143df11062d87c12afe6afeb6f8cc7" }