)]}' { "log": [ { "commit": "d1abaeb3be7b5fa6d7a1fbbd2e14e3310005c4c1", "tree": "39d81bf58eb9132e2da2163fe2ee8214ab58c906", "parents": [ "6825e5a6c45dbd473f8b2993a065bbea15347632" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 14:31:08 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 14:31:08 2019 -0700" }, "message": "Linux 5.3-rc5\n" }, { "commit": "6825e5a6c45dbd473f8b2993a065bbea15347632", "tree": "52df289d9f503f2c378e74d32abde8dd96f3a866", "parents": [ "3039fadf2bfdc104dc963820c305778c7c1a6229", "834de5c1aa768eb3d233d6544ea7153826c4b206" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 12:56:42 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 12:56:42 2019 -0700" }, "message": "Merge tag \u0027fixes-for-5.3-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mtd/linux\n\nPull MTD fix from Richard Weinberger:\n \"A single fix for MTD to correctly set the spi-nor WP pin\"\n\n* tag \u0027fixes-for-5.3-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mtd/linux:\n mtd: spi-nor: Fix the disabling of write protection at init\n" }, { "commit": "3039fadf2bfdc104dc963820c305778c7c1a6229", "tree": "1adbef5e37da3f3feece08b8c7dfa6e1bab4ce74", "parents": [ "c332f3a70e7a094e4a60d68a2c4c6f051ed7f04d", "07301df7d2fc220d3de5f7ad804dcb941400cb00" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 09:51:48 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 09:51:48 2019 -0700" }, "message": "Merge tag \u0027for-5.3-rc4-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux\n\nPull btrfs fixes from David Sterba:\n \"Two fixes that popped up during testing:\n\n - fix for sysfs-related code that adds/removes block groups, warnings\n appear during several fstests in connection with sysfs updates in\n 5.3, the fix essentially replaces a workaround with scope NOFS and\n applies to 5.2-based branch too\n\n - add sanity check of trim range\"\n\n* tag \u0027for-5.3-rc4-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux:\n btrfs: trim: Check the range passed into to prevent overflow\n Btrfs: fix sysfs warning and missing raid sysfs directories\n" }, { "commit": "c332f3a70e7a094e4a60d68a2c4c6f051ed7f04d", "tree": "898fdc281a401a44dc83df22dac27e4d64d298a2", "parents": [ "645c03aaca2bc02f5d5cc70804ca00b248b729dc", "a90118c445cc7f07781de26a9684d4ec58bfcfd1" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 09:45:42 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 09:45:42 2019 -0700" }, "message": "Merge branch \u0027x86-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull x86 fixes from Thomas Gleixner:\n \"A set of fixes for x86:\n\n - Fix the inconsistent error handling in the umwait init code\n\n - Rework the boot param zeroing so gcc9 stops complaining about out\n of bound memset. The resulting source code is actually more sane to\n read than the smart solution we had\n\n - Maintainers update so Tony gets involved when Intel models are\n added\n\n - Some more fallthrough fixes\"\n\n* \u0027x86-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n x86/boot: Save fields explicitly, zero out everything else\n MAINTAINERS, x86/CPU: Tony Luck will maintain asm/intel-family.h\n x86/fpu/math-emu: Address fallthrough warnings\n x86/apic/32: Fix yet another implicit fallthrough warning\n x86/umwait: Fix error handling in umwait_init()\n" }, { "commit": "645c03aaca2bc02f5d5cc70804ca00b248b729dc", "tree": "e0b6376e2382049ce235f90ca441e97322a77d12", "parents": [ "5bba5c9c86b31895f5cb67f2db2b0f0cddc96dc6", "cbd32a1c56e36fedaa93a727699188bd3e6e6f67" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 09:36:51 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 09:36:51 2019 -0700" }, "message": "Merge branch \u0027efi-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull EFI fix from Thomas Gleixner:\n \"A single fix for a EFI mixed mode regression caused by recent rework\n which did not take the firmware bitwidth into account\"\n\n* \u0027efi-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n efi-stub: Fix get_efi_config_table on mixed-mode setups\n" }, { "commit": "5bba5c9c86b31895f5cb67f2db2b0f0cddc96dc6", "tree": "43558609a8405a5fa723f5ac79d2942cffaba5c0", "parents": [ "4503c0a41571bf17ef49bd147da83250d86ff7d5", "0dda5907b0fc60f72f67f479f224e02c95d06e21" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 09:26:16 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 09:26:16 2019 -0700" }, "message": "Merge tag \u0027spdx-5.3-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/spdx\n\nPull SPDX fixes from Greg KH:\n \"Here are four small SPDX fixes for 5.3-rc5.\n\n A few style fixes for some SPDX comments, added an SPDX tag for one\n file, and fix up some GPL boilerplate for another file.\n\n All of these have been in linux-next for a few weeks with no reported\n issues (they are comment changes only, so that\u0027s to be expected...)\"\n\n* tag \u0027spdx-5.3-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/spdx:\n i2c: stm32: Use the correct style for SPDX License Identifier\n intel_th: Use the correct style for SPDX License Identifier\n coccinelle: api/atomic_as_refcounter: add SPDX License Identifier\n kernel/configs: Replace GPL boilerplate code with SPDX identifier\n" }, { "commit": "4503c0a41571bf17ef49bd147da83250d86ff7d5", "tree": "391465c39a2f9542eb12439360eca1a877e933b1", "parents": [ "ae1a616af36e5ad0726407b76feed5060a424744", "9cd02b09a0f4439e5323c20b710331771c2b6341" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 09:17:41 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 09:17:41 2019 -0700" }, "message": "Merge tag \u0027char-misc-5.3-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc\n\nPull char/misc driver fixes from Greg KH:\n \"Here are some small char and misc driver fixes for 5.3-rc5.\n\n These are two different subsystems needing some fixes, the habanalabs\n driver which is has some more big endian fixes for problems found. The\n other are some small soundwire fixes, including some Kconfig\n dependencies needed to resolve reported build errors.\n\n All of these have been in linux-next this week with no reported\n issues\"\n\n* tag \u0027char-misc-5.3-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc:\n misc: xilinx-sdfec: fix dependency and build error\n habanalabs: fix device IRQ unmasking for BE host\n habanalabs: fix endianness handling for internal QMAN submission\n habanalabs: fix completion queue handling when host is BE\n habanalabs: fix endianness handling for packets from user\n habanalabs: fix DRAM usage accounting on context tear down\n habanalabs: Avoid double free in error flow\n soundwire: fix regmap dependencies and align with other serial links\n soundwire: cadence_master: fix definitions for INTSTAT0/1\n soundwire: cadence_master: fix register definition for SLAVE_STATE\n" }, { "commit": "ae1a616af36e5ad0726407b76feed5060a424744", "tree": "6ae514aab7617b7900cb74b17211e6f4903f75c8", "parents": [ "359334caf777854fc0647c610f4c34be5eaeb3ca", "48b30e10bfc20ec6195642cc09ea6f08a8015df7" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 09:14:56 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 09:14:56 2019 -0700" }, "message": "Merge tag \u0027staging-5.3-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging\n\nPull staging/IIO fixes from Greg KH:\n \"Here are four small staging and iio driver fixes for 5.3-rc5\n\n Two are for the dt3000 comedi driver for some reported problems found\n in that codebase, and two are some small iio fixes.\n\n All of these have been in linux-next this week with no reported\n issues\"\n\n* tag \u0027staging-5.3-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging:\n staging: comedi: dt3000: Fix rounding up of timer divisor\n staging: comedi: dt3000: Fix signed integer overflow \u0027divider * base\u0027\n iio: adc: max9611: Fix temperature reading in probe\n iio: frequency: adf4371: Fix output frequency setting\n" }, { "commit": "359334caf777854fc0647c610f4c34be5eaeb3ca", "tree": "e1138a741264d7e36aa2d5f815128b4e30d37a7c", "parents": [ "8fde2832bd0bdc5a2b57330a9e9c3d2fa16bd1d8", "6a5f43d1d8bd3779e428178438caf33f60427124" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 09:11:29 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Aug 18 09:11:29 2019 -0700" }, "message": "Merge tag \u0027usb-5.3-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb\n\nPull USB fixes from Greg KH:\n \"Here are number of small USB fixes for 5.3-rc5.\n\n Syzbot has been on a tear recently now that it has some good USB\n debugging hooks integrated, so there\u0027s a number of fixes in here found\n by those tools for some _very_ old bugs. Also a handful of gadget\n driver fixes for reported issues, some hopefully-final dma fixes for\n host controller drivers, and some new USB serial gadget driver ids.\n\n All of these have been in linux-next this week with no reported issues\n (the usb-serial ones were in linux-next in its own branch, but merged\n into mine on Friday)\"\n\n* tag \u0027usb-5.3-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb:\n usb: add a hcd_uses_dma helper\n usb: don\u0027t create dma pools for HCDs with a localmem_pool\n usb: chipidea: imx: fix EPROBE_DEFER support during driver probe\n usb: host: fotg2: restart hcd after port reset\n USB: CDC: fix sanity checks in CDC union parser\n usb: cdc-acm: make sure a refcount is taken early enough\n USB: serial: option: add the BroadMobi BM818 card\n USB: serial: option: Add Motorola modem UARTs\n USB: core: Fix races in character device registration and deregistraion\n usb: gadget: mass_storage: Fix races between fsg_disable and fsg_set_alt\n usb: gadget: composite: Clear \"suspended\" on reset/disconnect\n usb: gadget: udc: renesas_usb3: Fix sysfs interface of \"role\"\n USB: serial: option: add D-Link DWM-222 device ID\n USB: serial: option: Add support for ZTE MF871A\n" }, { "commit": "8fde2832bd0bdc5a2b57330a9e9c3d2fa16bd1d8", "tree": "d25b713c9e9389c9a56938168d19426357abff9c", "parents": [ "85d8d3b172eb37b23dcdbe9fa7a85e343642bfea", "a982eeb09b6030e567b8b815277c8c9197168040" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 19:39:54 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 19:39:54 2019 -0700" }, "message": "Merge tag \u0027for-linus-2019-08-17\u0027 of git://git.kernel.dk/linux-block\n\nPull block fixes from Jens Axboe:\n \"A collection of fixes that should go into this series. This contains:\n\n - Revert of the REQ_NOWAIT_INLINE and associated dio changes. There\n were still corner cases there, and even though I had a solution for\n it, it\u0027s too involved for this stage. (me)\n\n - Set of NVMe fixes (via Sagi)\n\n - io_uring fix for fixed buffers (Anthony)\n\n - io_uring defer issue fix (Jackie)\n\n - Regression fix for queue sync at exit time (zhengbin)\n\n - xen blk-back memory leak fix (Wenwen)\"\n\n* tag \u0027for-linus-2019-08-17\u0027 of git://git.kernel.dk/linux-block:\n io_uring: fix an issue when IOSQE_IO_LINK is inserted into defer list\n block: remove REQ_NOWAIT_INLINE\n io_uring: fix manual setup of iov_iter for fixed buffers\n xen/blkback: fix memory leaks\n blk-mq: move cancel of requeue_work to the front of blk_exit_queue\n nvme-pci: Fix async probe remove race\n nvme: fix controller removal race with scan work\n nvme-rdma: fix possible use-after-free in connect error flow\n nvme: fix a possible deadlock when passthru commands sent to a multipath device\n nvme-core: Fix extra device_put() call on error path\n nvmet-file: fix nvmet_file_flush() always returning an error\n nvmet-loop: Flush nvme_delete_wq when removing the port\n nvmet: Fix use-after-free bug when a port is removed\n nvme-multipath: revalidate nvme_ns_head gendisk in nvme_validate_ns\n" }, { "commit": "85d8d3b172eb37b23dcdbe9fa7a85e343642bfea", "tree": "fa6a84582c4940def5e9535b265cf90d29977067", "parents": [ "05c525326957b504561d271f669d3b315930422f", "bafe1e79e05de725e26b3f60c90b49e635b686b9" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 19:31:30 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 19:31:30 2019 -0700" }, "message": "Merge tag \u0027hyperv-fixes-signed\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/hyperv/linux\n\nPull Hyper-V fixes from Sasha Levin:\n\n - A few fixes for the userspace hyper-v tools from Adrian Vladu.\n\n - A fix for the hyper-v MAINTAINERs entry from Lan Tianyu.\n\n - Fix for SPDX license identifier in the userspace tools from Nishad\n Kamdar.\n\n* tag \u0027hyperv-fixes-signed\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/hyperv/linux:\n MAINTAINERS: Fix Hyperv vIOMMU driver file name\n tools: hv: Use the correct style for SPDX License Identifier\n tools: hv: fix typos in toolchain\n tools: hv: fix KVP and VSS daemons exit code\n tools: hv: fixed Python pep8/flake8 warnings for lsvmbus\n" }, { "commit": "bafe1e79e05de725e26b3f60c90b49e635b686b9", "tree": "2559f2985b84ad7887b584f7a75a854608b51be3", "parents": [ "61e0f39105b7926a41bc03158eccf5ed13207ebd" ], "author": { "name": "Lan Tianyu", "email": "Tianyu.Lan@microsoft.com", "time": "Tue Mar 26 14:28:21 2019 +0800" }, "committer": { "name": "Sasha Levin", "email": "sashal@kernel.org", "time": "Sat Aug 17 15:29:39 2019 -0400" }, "message": "MAINTAINERS: Fix Hyperv vIOMMU driver file name\n\nThe Hyperv vIOMMU file name should be \"hyperv-iommu.c\" rather\nthan \"hyperv_iommu.c\". This patch is to fix it.\n\nSigned-off-by: Lan Tianyu \u003cTianyu.Lan@microsoft.com\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "61e0f39105b7926a41bc03158eccf5ed13207ebd", "tree": "208b04a446d3912fb2bb24cd4444bdef86e07710", "parents": [ "2d35c66036b2494c329a32468c85405493370e75" ], "author": { "name": "Nishad Kamdar", "email": "nishadkamdar@gmail.com", "time": "Mon Jul 22 19:01:17 2019 +0530" }, "committer": { "name": "Sasha Levin", "email": "sashal@kernel.org", "time": "Sat Aug 17 15:29:34 2019 -0400" }, "message": "tools: hv: Use the correct style for SPDX License Identifier\n\nThis patch corrects the SPDX License Identifier style\nin the trace header file related to Microsoft Hyper-V\nclient drivers.\nFor C header files Documentation/process/license-rules.rst\nmandates C-like comments (opposed to C source files where\nC++ style should be used)\n\nChanges made by using a script provided by Joe Perches here:\nhttps://lkml.org/lkml/2019/2/7/46\n\nSuggested-by: Joe Perches \u003cjoe@perches.com\u003e\nSigned-off-by: Nishad Kamdar \u003cnishadkamdar@gmail.com\u003e\nAcked-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "2d35c66036b2494c329a32468c85405493370e75", "tree": "9d396815ac094015b918b8b36b845a95184ea986", "parents": [ "b0995156071b0ff29a5902964a9dc8cfad6f81c0" ], "author": { "name": "Adrian Vladu", "email": "avladu@cloudbasesolutions.com", "time": "Mon May 06 16:51:24 2019 +0000" }, "committer": { "name": "Sasha Levin", "email": "sashal@kernel.org", "time": "Sat Aug 17 15:29:28 2019 -0400" }, "message": "tools: hv: fix typos in toolchain\n\nFix typos in the HyperV toolchain.\n\nSigned-off-by: Adrian Vladu \u003cavladu@cloudbasesolutions.com\u003e\n\nCc: \"K. Y. Srinivasan\" \u003ckys@microsoft.com\u003e\nCc: Haiyang Zhang \u003chaiyangz@microsoft.com\u003e\nCc: Stephen Hemminger \u003csthemmin@microsoft.com\u003e\nCc: Sasha Levin \u003csashal@kernel.org\u003e\nCc: Alessandro Pilotti \u003capilotti@cloudbasesolutions.com\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "b0995156071b0ff29a5902964a9dc8cfad6f81c0", "tree": "a16745466b81e7ba63fe5ddebed2ef369e3cd8c2", "parents": [ "5912e791f3018de0a007c8cfa9cb38c97d3e5f5c" ], "author": { "name": "Adrian Vladu", "email": "avladu@cloudbasesolutions.com", "time": "Mon May 06 16:50:58 2019 +0000" }, "committer": { "name": "Sasha Levin", "email": "sashal@kernel.org", "time": "Sat Aug 17 15:29:23 2019 -0400" }, "message": "tools: hv: fix KVP and VSS daemons exit code\n\nHyperV KVP and VSS daemons should exit with 0 when the \u0027--help\u0027\nor \u0027-h\u0027 flags are used.\n\nSigned-off-by: Adrian Vladu \u003cavladu@cloudbasesolutions.com\u003e\n\nCc: \"K. Y. Srinivasan\" \u003ckys@microsoft.com\u003e\nCc: Haiyang Zhang \u003chaiyangz@microsoft.com\u003e\nCc: Stephen Hemminger \u003csthemmin@microsoft.com\u003e\nCc: Sasha Levin \u003csashal@kernel.org\u003e\nCc: Alessandro Pilotti \u003capilotti@cloudbasesolutions.com\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "5912e791f3018de0a007c8cfa9cb38c97d3e5f5c", "tree": "e625a4adad4a5551fe961d7fa211b682bd7e7601", "parents": [ "5f9e832c137075045d15cd6899ab0505cfb2ca4b" ], "author": { "name": "Adrian Vladu", "email": "avladu@cloudbasesolutions.com", "time": "Mon May 06 17:27:37 2019 +0000" }, "committer": { "name": "Sasha Levin", "email": "sashal@kernel.org", "time": "Sat Aug 17 15:29:18 2019 -0400" }, "message": "tools: hv: fixed Python pep8/flake8 warnings for lsvmbus\n\nFixed pep8/flake8 python style code for lsvmbus tool.\n\nThe TAB indentation was on purpose ignored (pep8 rule W191) to make\nsure the code is complying with the Linux code guideline.\nThe following command doe not show any warnings now:\npep8 --ignore\u003dW191 lsvmbus\nflake8 --ignore\u003dW191 lsvmbus\n\nSigned-off-by: Adrian Vladu \u003cavladu@cloudbasesolutions.com\u003e\n\nCc: \"K. Y. Srinivasan\" \u003ckys@microsoft.com\u003e\nCc: Haiyang Zhang \u003chaiyangz@microsoft.com\u003e\nCc: Stephen Hemminger \u003csthemmin@microsoft.com\u003e\nCc: Sasha Levin \u003csashal@kernel.org\u003e\nCc: Dexuan Cui \u003cdecui@microsoft.com\u003e\nCc: Alessandro Pilotti \u003capilotti@cloudbasesolutions.com\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\n" }, { "commit": "05c525326957b504561d271f669d3b315930422f", "tree": "ce1de45b47a96bd1d378e9ebd51db2df952b7ca9", "parents": [ "2f478b60118f48bf66eaddcca0d23e80f87a682d", "90865a3dc597bd8463efacb749561095ba70b0aa" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 10:44:50 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 10:44:50 2019 -0700" }, "message": "Merge branch \u0027i2c/for-current\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux\n\nPull i2c fixes from Wolfram Sang:\n \"I2C has one revert because of a regression, two fixes for tiny race\n windows (which we were not able to trigger), a MAINTAINERS addition,\n and a SPDX fix\"\n\n* \u0027i2c/for-current\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux:\n i2c: stm32: Use the correct style for SPDX License Identifier\n i2c: emev2: avoid race when unregistering slave client\n i2c: rcar: avoid race when unregistering slave client\n MAINTAINERS: i2c-imx: take over maintainership\n Revert \"i2c: imx: improve the error handling in i2c_imx_dma_request()\"\n" }, { "commit": "2f478b60118f48bf66eaddcca0d23e80f87a682d", "tree": "9a4e6341f103e0e758f58b9db3e3d3a325145737", "parents": [ "6e625a1a3f471d63989d3a66cdf6a0c307654848", "69703eb9a8ae28a46cd5bce7d69ceeef6273a104" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 10:36:47 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Aug 17 10:36:47 2019 -0700" }, "message": "Merge tag \u0027riscv/for-v5.3-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux\n\nPull RISC-V fixes from Paul Walmsley:\n\n - Two patches to fix significant bugs in floating point register\n context handling\n\n - A minor fix in RISC-V flush_tlb_page(), to supply a valid end address\n to flush_tlb_range()\n\n - Two minor defconfig additions: to build the virtio hwrng driver by\n default (for QEMU targets), and to partially synchronize the 32-bit\n defconfig with the 64-bit defconfig\n\n* tag \u0027riscv/for-v5.3-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux:\n riscv: Make __fstate_clean() work correctly.\n riscv: Correct the initialized flow of FP register\n riscv: defconfig: Update the defconfig\n riscv: rv32_defconfig: Update the defconfig\n riscv: fix flush_tlb_range() end address for flush_tlb_page()\n" }, { "commit": "6a5f43d1d8bd3779e428178438caf33f60427124", "tree": "c5ab7f84b755578e80ab3bfb49d6f5c66a177576", "parents": [ "edfbcb321faf07ca970e4191abe061deeb7d3788", "e5d8badf37e6b547842f2fcde10361b29e08bd36" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Sat Aug 17 17:09:33 2019 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Sat Aug 17 17:09:33 2019 +0200" }, "message": "Merge tag \u0027usb-serial-5.3-rc5\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/johan/usb-serial into usb-linus\n\nJohan writes:\n\nUSB-serial fixes for 5.3-rc5\n\nHere are some new modem device ids.\n\nAll have been in linux-next with no reported issues.\n\nSigned-off-by: Johan Hovold \u003cjohan@kernel.org\u003e\n\n* tag \u0027usb-serial-5.3-rc5\u0027 of https://git.kernel.org/pub/scm/linux/kernel/git/johan/usb-serial:\n USB: serial: option: add the BroadMobi BM818 card\n USB: serial: option: Add Motorola modem UARTs\n USB: serial: option: add D-Link DWM-222 device ID\n USB: serial: option: Add support for ZTE MF871A\n" }, { "commit": "6e625a1a3f471d63989d3a66cdf6a0c307654848", "tree": "02f1e71eab7280762248880f0decdd1180a61c83", "parents": [ "b7e7c85dc7b0ea5ff821756c331489e3b151eed1", "cd8869f4cb257f22b89495ca40f5281e58ba359c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 17:27:55 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 17:27:55 2019 -0700" }, "message": "Merge tag \u0027xtensa-20190816\u0027 of git://github.com/jcmvbkbc/linux-xtensa\n\nPull Xtensa fix from Max Filippov:\n \"Add missing isync into cpu_reset to make sure ITLB changes are\n effective\"\n\n* tag \u0027xtensa-20190816\u0027 of git://github.com/jcmvbkbc/linux-xtensa:\n xtensa: add missing isync to the cpu_reset TLB code\n" }, { "commit": "b7e7c85dc7b0ea5ff821756c331489e3b151eed1", "tree": "60113a949e3a35025323e7fe8e45fb62b1a9c87d", "parents": [ "2d63ba3e41db3ceb0d23924ed2879b910276e24c", "b6143d10d23ebb4a77af311e8b8b7f019d0163e6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 10:51:47 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 10:51:47 2019 -0700" }, "message": "Merge tag \u0027arm64-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux\n\nPull arm64 fixes from Catalin Marinas:\n\n - Don\u0027t taint the kernel if CPUs have different sets of page sizes\n supported (other than the one in use).\n\n - Issue I-cache maintenance for module ftrace trampoline.\n\n* tag \u0027arm64-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:\n arm64: ftrace: Ensure module ftrace trampoline is coherent with I-side\n arm64: cpufeature: Don\u0027t treat granule sizes as strict\n" }, { "commit": "b6143d10d23ebb4a77af311e8b8b7f019d0163e6", "tree": "f2e7abeb246bc656dd7f1213b5b0e423fa0c4854", "parents": [ "5717fe5ab38f9ccb32718bcb03bea68409c9cce4" ], "author": { "name": "Will Deacon", "email": "will@kernel.org", "time": "Fri Aug 16 14:57:43 2019 +0100" }, "committer": { "name": "Catalin Marinas", "email": "catalin.marinas@arm.com", "time": "Fri Aug 16 17:40:03 2019 +0100" }, "message": "arm64: ftrace: Ensure module ftrace trampoline is coherent with I-side\n\nThe initial support for dynamic ftrace trampolines in modules made use\nof an indirect branch which loaded its target from the beginning of\na special section (e71a4e1bebaf7 (\"arm64: ftrace: add support for far\nbranches to dynamic ftrace\")). Since no instructions were being patched,\nno cache maintenance was needed. However, later in be0f272bfc83 (\"arm64:\nftrace: emit ftrace-mod.o contents through code\") this code was reworked\nto output the trampoline instructions directly into the PLT entry but,\nunfortunately, the necessary cache maintenance was overlooked.\n\nAdd a call to __flush_icache_range() after writing the new trampoline\ninstructions but before patching in the branch to the trampoline.\n\nCc: Ard Biesheuvel \u003card.biesheuvel@linaro.org\u003e\nCc: James Morse \u003cjames.morse@arm.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nFixes: be0f272bfc83 (\"arm64: ftrace: emit ftrace-mod.o contents through code\")\nSigned-off-by: Will Deacon \u003cwill@kernel.org\u003e\nSigned-off-by: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\n" }, { "commit": "2d63ba3e41db3ceb0d23924ed2879b910276e24c", "tree": "97f95a8c53b8d66277d2fe1ed05a5b4d2e93eb8b", "parents": [ "9da5bb24bb368567a43ac2df0e108e43d80f3564", "a3ee2477c45f73184a64d9c6cf97855a52732dc6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 09:13:16 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 09:13:16 2019 -0700" }, "message": "Merge tag \u0027pm-5.3-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull power management fixes from Rafael Wysocki:\n \"These add a check to avoid recent suspend-to-idle power regression on\n systems with NVMe drives where the PCIe ASPM policy is \"performance\"\n (or when the kernel is built without ASPM support), fix an issue\n related to frequency limits in the schedutil cpufreq governor and fix\n a mistake related to the PM QoS usage in the cpufreq core introduced\n recently.\n\n Specifics:\n\n - Disable NVMe power optimization related to suspend-to-idle added\n recently on systems where PCIe ASPM is not able to put PCIe links\n into low-power states to prevent excess power from being drawn by\n the system while suspended (Rafael Wysocki).\n\n - Make the schedutil governor handle frequency limits changes\n properly in all cases (Viresh Kumar).\n\n - Prevent the cpufreq core from treating positive values returned by\n dev_pm_qos_update_request() as errors (Viresh Kumar)\"\n\n* tag \u0027pm-5.3-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n nvme-pci: Allow PCI bus-level PM to be used if ASPM is disabled\n PCI/ASPM: Add pcie_aspm_enabled()\n cpufreq: schedutil: Don\u0027t skip freq update when limits change\n cpufreq: dev_pm_qos_update_request() can return 1 on success\n" }, { "commit": "9da5bb24bb368567a43ac2df0e108e43d80f3564", "tree": "2ae20063d159095dabad4f7a0eebb3d3aef2586d", "parents": [ "cfa0bb2aef998a64d5ad2c065be8511ad98d5d79", "d555c34338cae844b207564c482e5a3fb089d25e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 08:59:33 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 08:59:33 2019 -0700" }, "message": "Merge tag \u0027dmaengine-fix-5.3-rc5\u0027 of git://git.infradead.org/users/vkoul/slave-dma\n\nPull dmaengine fixes from Vinod Koul:\n \"Fixes in dmaengine drivers for:\n\n - dw-edma: endianess, _iomem type and stack usages\n\n - ste_dma40: unneeded variable and null-pointer dereference\n\n - tegra210-adma: unused function\n\n - omap-dma: off-by-one fix\"\n\n* tag \u0027dmaengine-fix-5.3-rc5\u0027 of git://git.infradead.org/users/vkoul/slave-dma:\n omap-dma/omap_vout_vrfb: fix off-by-one fi value\n dmaengine: stm32-mdma: Fix a possible null-pointer dereference in stm32_mdma_irq_handler()\n dmaengine: tegra210-adma: Fix unused function warnings\n dmaengine: ste_dma40: fix unneeded variable warning\n dmaengine: dw-edma: fix endianess confusion\n dmaengine: dw-edma: fix __iomem type confusion\n dmaengine: dw-edma: fix unnecessary stack usage\n" }, { "commit": "cfa0bb2aef998a64d5ad2c065be8511ad98d5d79", "tree": "c74e653b1d405b05ad9ae261ad798af88d685baa", "parents": [ "ec037ac244c070f9eedcdf5cdb23bd817e7b8cf4", "19bce474c45be69a284ecee660aa12d8f1e88f18" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 08:49:45 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 08:49:45 2019 -0700" }, "message": "Merge tag \u0027sound-5.3-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound\n\nPull sound fixes from Takashi Iwai:\n \"All small fixes targeted for stable:\n\n - Two fixes for USB-audio with malformed descriptor, spotted by\n fuzzers\n\n - Two fixes Conexant HD-audio codec wrt power management\n\n - Quirks for HD-audio AMD platform and HP laptop\n\n - HD-audio memory leak fix\"\n\n* tag \u0027sound-5.3-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound:\n ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term\n ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit\n ALSA: hda - Add a generic reboot_notify\n ALSA: hda - Let all conexant codec enter D3 when rebooting\n ALSA: hda/realtek - Add quirk for HP Envy x360\n ALSA: hda - Fix a memory leak bug\n ALSA: hda - Apply workaround for another AMD chip 1022:1487\n" }, { "commit": "ec037ac244c070f9eedcdf5cdb23bd817e7b8cf4", "tree": "2efd98226dd44b91194e7b5bf429178b2377e0cb", "parents": [ "a69e90512d9def6bd8064d84cff9ffd8b15eaa1b", "a85abd5d45adba75535b7fc6d9f78329a693b7a9" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 08:41:15 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Aug 16 08:41:15 2019 -0700" }, "message": "Merge tag \u0027drm-fixes-2019-08-16\u0027 of git://anongit.freedesktop.org/drm/drm\n\nPull drm fixes from Dave Airlie:\n \"Nothing too crazy this week, one amdgpu fix to use vmalloc for a\n struct that grew in size, and another MST fix for nouveau, and some\n other misc fixes:\n\n i915:\n - single GVT use after free fix\n\n scheduler:\n - entity destruction race fix\n\n amdgpu:\n - struct allocation fix\n - gfx9 soft recovery fix\n\n nouveau:\n - followup MST fix\n\n ast:\n - vga register race fix\"\n\n* tag \u0027drm-fixes-2019-08-16\u0027 of git://anongit.freedesktop.org/drm/drm:\n drm/nouveau: Only recalculate PBN/VCPI on mode/connector changes\n drm/ast: Fixed reboot test may cause system hanged\n drm/scheduler: use job count instead of peek\n drm/amd/display: use kvmalloc for dc_state (v2)\n drm/amdgpu: fix gfx9 soft recovery\n drm/i915: Use after free in error path in intel_vgpu_create_workload()\n" }, { "commit": "a3ee2477c45f73184a64d9c6cf97855a52732dc6", "tree": "5944233e282bd02b583045cc1617cdaf7d02a9bb", "parents": [ "4eaefe8c621c6195c91044396ed8060c179f7aae", "600f5badb78c316146d062cfd7af4a2cfb655baa" ], "author": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Fri Aug 16 14:24:51 2019 +0200" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Fri Aug 16 14:24:51 2019 +0200" }, "message": "Merge branch \u0027pm-cpufreq\u0027\n\n* pm-cpufreq:\n cpufreq: schedutil: Don\u0027t skip freq update when limits change\n cpufreq: dev_pm_qos_update_request() can return 1 on success\n" }, { "commit": "a90118c445cc7f07781de26a9684d4ec58bfcfd1", "tree": "7e3ef3805ffe0a7c4ee8b038002e0c4b063dec1f", "parents": [ "5ed1c835ed8b522ce25071cc2d56a9a09bd5b59e" ], "author": { "name": "John Hubbard", "email": "jhubbard@nvidia.com", "time": "Tue Jul 30 22:46:27 2019 -0700" }, "committer": { "name": "Thomas Gleixner", "email": "tglx@linutronix.de", "time": "Fri Aug 16 14:20:00 2019 +0200" }, "message": "x86/boot: Save fields explicitly, zero out everything else\n\nRecent gcc compilers (gcc 9.1) generate warnings about an out of bounds\nmemset, if the memset goes accross several fields of a struct. This\ngenerated a couple of warnings on x86_64 builds in sanitize_boot_params().\n\nFix this by explicitly saving the fields in struct boot_params\nthat are intended to be preserved, and zeroing all the rest.\n\n[ tglx: Tagged for stable as it breaks the warning free build there as well ]\n\nSuggested-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSuggested-by: H. Peter Anvin \u003chpa@zytor.com\u003e\nSigned-off-by: John Hubbard \u003cjhubbard@nvidia.com\u003e\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: stable@vger.kernel.org\nLink: https://lkml.kernel.org/r/20190731054627.5627-2-jhubbard@nvidia.com\n\n" }, { "commit": "9cd02b09a0f4439e5323c20b710331771c2b6341", "tree": "f40633176eaa74a07d8210815b986ce962d91e6e", "parents": [ "01fd150f4aff5bee03db5bda3b94c1bdbe9c6375", "8676b3ca4673517650fd509d7fa586aff87b3c28" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Aug 16 12:35:56 2019 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Aug 16 12:35:56 2019 +0200" }, "message": "Merge tag \u0027soundwire-5.3-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vkoul/soundwire into char-misc-linus\n\nVinod writes:\n\nsoundwire fixes for v5.3-rc5\n\nPierre sent fixes which are queued now for v5.3-rc5 are:\n - regmap dependecy\n - cadence register definitions\n\n* tag \u0027soundwire-5.3-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/vkoul/soundwire:\n soundwire: fix regmap dependencies and align with other serial links\n soundwire: cadence_master: fix definitions for INTSTAT0/1\n soundwire: cadence_master: fix register definition for SLAVE_STATE\n" }, { "commit": "a85abd5d45adba75535b7fc6d9f78329a693b7a9", "tree": "7e25432885fcebb81be1141741eb210828079109", "parents": [ "2f62c5d6ed0abae8e70bd83f4d41b9d63acde45a", "daa37200d48906d71c63ce178bf7d410b7e07082" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Aug 16 12:41:52 2019 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Aug 16 12:41:52 2019 +1000" }, "message": "Merge tag \u0027drm-intel-fixes-2019-08-15\u0027 of git://anongit.freedesktop.org/drm/drm-intel into drm-fixes\n\ndrm/i915 fixes for v5.4-rc5:\n- GVT use-after-free fix\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nFrom: Jani Nikula \u003cjani.nikula@intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/87zhkag9ic.fsf@intel.com\n" }, { "commit": "19bce474c45be69a284ecee660aa12d8f1e88f18", "tree": "9a58decee9c325aa1dc879780b3bc778d6793e36", "parents": [ "daac07156b330b18eb5071aec4b3ddca1c377f2c" ], "author": { "name": "Hui Peng", "email": "benquike@gmail.com", "time": "Thu Aug 15 00:31:34 2019 -0400" }, "committer": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Thu Aug 15 21:48:52 2019 +0200" }, "message": "ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term\n\n`check_input_term` recursively calls itself with input from\ndevice side (e.g., uac_input_terminal_descriptor.bCSourceID)\nas argument (id). In `check_input_term`, if `check_input_term`\nis called with the same `id` argument as the caller, it triggers\nendless recursive call, resulting kernel space stack overflow.\n\nThis patch fixes the bug by adding a bitmap to `struct mixer_build`\nto keep track of the checked ids and stop the execution if some id\nhas been checked (similar to how parse_audio_unit handles unitid\nargument).\n\nReported-by: Hui Peng \u003cbenquike@gmail.com\u003e\nReported-by: Mathias Payer \u003cmathias.payer@nebelwelt.net\u003e\nSigned-off-by: Hui Peng \u003cbenquike@gmail.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\n" }, { "commit": "a69e90512d9def6bd8064d84cff9ffd8b15eaa1b", "tree": "3bbc3a4972072c96d07a5067f33eeba4dbb20005", "parents": [ "4ec1fa692dc7dc915c3485a7fad928924fc13de2", "8612de3f7ba6e900465e340516b8313806d27b2d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Aug 15 12:29:36 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Aug 15 12:29:36 2019 -0700" }, "message": "Merge tag \u0027xfs-5.3-fixes-2\u0027 of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux\n\nPull xfs fixes from Darrick Wong:\n\n - Fix crashes when the attr fork isn\u0027t present due to errors but inode\n inactivation tries to zap the attr data anyway.\n\n - Convert more directory corruption debugging asserts to actual\n EFSCORRUPTED returns instead of blowing up later on.\n\n - Don\u0027t fail writeback just because we ran out of memory allocating\n metadata log data.\n\n* tag \u0027xfs-5.3-fixes-2\u0027 of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux:\n xfs: don\u0027t crash on null attr fork xfs_bmapi_read\n xfs: remove more ondisk directory corruption asserts\n fs: xfs: xfs_log: Don\u0027t use KM_MAYFAIL at xfs_log_reserve().\n" }, { "commit": "4ec1fa692dc7dc915c3485a7fad928924fc13de2", "tree": "50b17c82832f417217af5af47a51df6b3d49097b", "parents": [ "329120423947e8b36fd2f8b5cf69944405d0aece", "9a67b72552f8d019948453e56ca7db8c7e5a94ba" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Aug 15 12:15:45 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Aug 15 12:15:45 2019 -0700" }, "message": "Merge tag \u0027iomap-5.3-fixes-1\u0027 of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux\n\nPull iomap fixlet from Darrick Wong:\n \"A single update to the MAINTAINERS entry for iomap now that we\u0027ve\n removed fs/iomap.c\"\n\n* tag \u0027iomap-5.3-fixes-1\u0027 of git://git.kernel.org/pub/scm/fs/xfs/xfs-linux:\n MAINTAINERS: iomap: Remove fs/iomap.c record\n" }, { "commit": "a982eeb09b6030e567b8b815277c8c9197168040", "tree": "1086aec4590f89b11422f491c0887e38cb5864e0", "parents": [ "7b6620d7db566a46f49b4b9deab9fa061fd4b59b" ], "author": { "name": "Jackie Liu", "email": "liuyun01@kylinos.cn", "time": "Wed Aug 14 17:35:22 2019 +0800" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Aug 15 11:21:39 2019 -0600" }, "message": "io_uring: fix an issue when IOSQE_IO_LINK is inserted into defer list\n\nThis patch may fix two issues:\n\nFirst, when IOSQE_IO_DRAIN set, the next IOs need to be inserted into\ndefer list to delay execution, but link io will be actively scheduled to\nrun by calling io_queue_sqe.\n\nSecond, when multiple LINK_IOs are inserted together with defer_list,\nthe LINK_IO is no longer keep order.\n\n |-------------|\n | LINK_IO | ----\u003e insert to defer_list -----------\n |-------------| |\n | LINK_IO | ----\u003e insert to defer_list ----------|\n |-------------| |\n | LINK_IO | ----\u003e insert to defer_list ----------|\n |-------------| |\n | NORMAL_IO | ----\u003e insert to defer_list ----------|\n |-------------| |\n |\n queue_work at same time \u003c-----|\n\nFixes: 9e645e1105c (\"io_uring: add support for sqe links\")\nSigned-off-by: Jackie Liu \u003cliuyun01@kylinos.cn\u003e\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "7b6620d7db566a46f49b4b9deab9fa061fd4b59b", "tree": "ffa0da802600d0550043e195c102ea99c75637b5", "parents": [ "99c79f6692ccdc42e04deea8a36e22bb48168a62" ], "author": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Aug 15 11:09:16 2019 -0600" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Aug 15 11:09:16 2019 -0600" }, "message": "block: remove REQ_NOWAIT_INLINE\n\nWe had a few issues with this code, and there\u0027s still a problem around\nhow we deal with error handling for chained/split bios. For now, just\nrevert the code and we\u0027ll try again with a thoroug solution. This\nreverts commits:\n\ne15c2ffa1091 (\"block: fix O_DIRECT error handling for bio fragments\")\n0eb6ddfb865c (\"block: Fix __blkdev_direct_IO() for bio fragments\")\n6a43074e2f46 (\"block: properly handle IOCB_NOWAIT for async O_DIRECT IO\")\n893a1c97205a (\"blk-mq: allow REQ_NOWAIT to return an error inline\")\n\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "99c79f6692ccdc42e04deea8a36e22bb48168a62", "tree": "d665a31392cb938848e7a17e21d7fe2b034ed862", "parents": [ "ae78ca3cf3d9e9f914bfcd0bc5c389ff18b9c2e0" ], "author": { "name": "Aleix Roca Nonell", "email": "aleix.rocanonell@bsc.es", "time": "Thu Aug 15 14:03:22 2019 +0200" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Thu Aug 15 11:03:38 2019 -0600" }, "message": "io_uring: fix manual setup of iov_iter for fixed buffers\n\nCommit bd11b3a391e3 (\"io_uring: don\u0027t use iov_iter_advance() for fixed\nbuffers\") introduced an optimization to avoid using the slow\niov_iter_advance by manually populating the iov_iter iterator in some\ncases.\n\nHowever, the computation of the iterator count field was erroneous: The\nfirst bvec was always accounted for an extent of page size even if the\nbvec length was smaller.\n\nIn consequence, some I/O operations on fixed buffers were unable to\noperate on the full extent of the buffer, consistently skipping some\nbytes at the end of it.\n\nFixes: bd11b3a391e3 (\"io_uring: don\u0027t use iov_iter_advance() for fixed buffers\")\nCc: stable@vger.kernel.org\nSigned-off-by: Aleix Roca Nonell \u003caleix.rocanonell@bsc.es\u003e\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "329120423947e8b36fd2f8b5cf69944405d0aece", "tree": "cb7b405d40847026052b2af9bfb1fcc6a1d44d55", "parents": [ "2b245b8b033a90c6373400a29ec93a8713601eff", "6c4d6bc5486466e3a67cc47270001d0b4a26eed4" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Aug 15 09:20:17 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Aug 15 09:20:17 2019 -0700" }, "message": "Merge tag \u0027auxdisplay-for-linus-v5.3-rc5\u0027 of git://github.com/ojeda/linux\n\nPull auxdisplay fixes from Miguel Ojeda:\n \"A few minor auxdisplay improvements:\n\n - A couple of small header cleanups for charlcd (Masahiro Yamada)\n\n - A trivial typo fix for the examples of cfag12864b (Masahiro Yamada)\n\n - An Kconfig help text improvement for charlcd (Mans Rullgard)\n\n - An error path fix for panel (zhengbin)\"\n\n* tag \u0027auxdisplay-for-linus-v5.3-rc5\u0027 of git://github.com/ojeda/linux:\n auxdisplay: Fix a typo in cfag12864b-example.c\n auxdisplay: charlcd: add include guard to charlcd.h\n auxdisplay: charlcd: move charlcd.h to drivers/auxdisplay\n auxdisplay: charlcd: add help text for backlight initial state\n auxdisplay: panel: need to delete scan_timer when misc_register fails in panel_attach\n" }, { "commit": "2b245b8b033a90c6373400a29ec93a8713601eff", "tree": "7c5318e59b1cc0006b0bdc5882bd7b6644c6ce34", "parents": [ "41de59634046b19cd53a1983594a95135c656997", "83f82d7a42583e93d0f0dde3d61ed10f75c0f4d8" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Aug 15 09:18:56 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Aug 15 09:18:56 2019 -0700" }, "message": "Merge tag \u0027devicetree-fixes-for-5.3-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux\n\nPull devicetree fixes from Rob Herring:\n\n - Fix building DT binding examples for in tree builds\n\n - Correct some refcounting in adjust_local_phandle_references()\n\n - Update FSL FEC binding with deprecated properties\n\n - Schema fix in stm32 pinctrl\n\n - Fix typo in of_irq_parse_one docbook comment\n\n* tag \u0027devicetree-fixes-for-5.3-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux:\n of: irq: fix a trivial typo in a doc comment\n dt-bindings: pinctrl: stm32: Fix \u0027st,syscfg\u0027 schema\n dt-bindings: fec: explicitly mark deprecated properties\n of: resolver: Add of_node_put() before return and break\n dt-bindings: Fix generated example files getting added to schemas\n" }, { "commit": "01fd150f4aff5bee03db5bda3b94c1bdbe9c6375", "tree": "56516d75ee64161290c4714a4161788ca20c4d9a", "parents": [ "7ea33253e910647876c9ccab720b662ae240a157" ], "author": { "name": "Randy Dunlap", "email": "rdunlap@infradead.org", "time": "Tue Aug 13 16:01:20 2019 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 15 18:10:25 2019 +0200" }, "message": "misc: xilinx-sdfec: fix dependency and build error\n\nlib/devres.c, which implements devm_ioremap_resource(), is only built\nwhen CONFIG_HAS_IOMEM is set/enabled, so XILINX_SDFEC should depend\non HAS_IOMEM. Fixes this build error (as seen on UML builds):\n\nERROR: \"devm_ioremap_resource\" [drivers/misc/xilinx_sdfec.ko] undefined!\n\nFixes: 76d83e1c3233 (\"misc: xilinx-sdfec: add core driver\")\nSigned-off-by: Randy Dunlap \u003crdunlap@infradead.org\u003e\nCc: Derek Kiernan \u003cderek.kiernan@xilinx.com\u003e\nCc: Dragan Cvetic \u003cdragan.cvetic@xilinx.com\u003e\nCc: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nCc: Geert Uytterhoeven \u003cgeert@linux-m68k.org\u003e\nCc: Arnd Bergmann \u003carnd@arndb.de\u003e\nLink: https://lore.kernel.org/r/f9004be5-9925-327b-3ec2-6506e46fe565@infradead.org\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "edfbcb321faf07ca970e4191abe061deeb7d3788", "tree": "66aea00d395ce3865017ed0142933e539d2e502c", "parents": [ "dd3ecf17ba70a70d2c9ef9ba725281b84f8eef12" ], "author": { "name": "Christoph Hellwig", "email": "hch@lst.de", "time": "Sun Aug 11 10:05:16 2019 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 15 15:18:05 2019 +0200" }, "message": "usb: add a hcd_uses_dma helper\n\nThe USB buffer allocation code is the only place in the usb core (and in\nfact the whole kernel) that uses is_device_dma_capable, while the URB\nmapping code uses the uses_dma flag in struct usb_bus. Switch the buffer\nallocation to use the uses_dma flag used by the rest of the USB code,\nand create a helper in hcd.h that checks this flag as well as the\nCONFIG_HAS_DMA to simplify the caller a bit.\n\nSigned-off-by: Christoph Hellwig \u003chch@lst.de\u003e\nLink: https://lore.kernel.org/r/20190811080520.21712-3-hch@lst.de\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "dd3ecf17ba70a70d2c9ef9ba725281b84f8eef12", "tree": "edddd7da4fb718a3849c912b65691175798bf1ad", "parents": [ "141822aa3f79efc8a2ec3ed464f2fd2c93ccd803" ], "author": { "name": "Christoph Hellwig", "email": "hch@lst.de", "time": "Sun Aug 11 10:05:15 2019 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 15 15:17:07 2019 +0200" }, "message": "usb: don\u0027t create dma pools for HCDs with a localmem_pool\n\nIf the HCD provides a localmem pool we will never use the DMA pools, so\ndon\u0027t create them.\n\nFixes: b0310c2f09bb (\"USB: use genalloc for USB HCs with local memory\")\nSigned-off-by: Christoph Hellwig \u003chch@lst.de\u003e\nLink: https://lore.kernel.org/r/20190811080520.21712-2-hch@lst.de\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "141822aa3f79efc8a2ec3ed464f2fd2c93ccd803", "tree": "03a20162857e153d5e716209670e7290972ff993", "parents": [ "777758888ffe59ef754cc39ab2f275dc277732f4" ], "author": { "name": "André Draszik", "email": "git@andred.net", "time": "Sat Aug 10 16:07:58 2019 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 15 14:50:21 2019 +0200" }, "message": "usb: chipidea: imx: fix EPROBE_DEFER support during driver probe\n\nIf driver probe needs to be deferred, e.g. because ci_hdrc_add_device()\nisn\u0027t ready yet, this driver currently misbehaves badly:\n a) success is still reported to the driver core (meaning a 2nd\n probe attempt will never be done), leaving the driver in\n a dysfunctional state and the hardware unusable\n\n b) driver remove / shutdown OOPSes:\n [ 206.786916] Unable to handle kernel paging request at virtual address fffffdff\n [ 206.794148] pgd \u003d 880b9f82\n [ 206.796890] [fffffdff] *pgd\u003dabf5e861, *pte\u003d00000000, *ppte\u003d00000000\n [ 206.803179] Internal error: Oops: 37 [#1] PREEMPT SMP ARM\n [ 206.808581] Modules linked in: wl18xx evbug\n [ 206.813308] CPU: 1 PID: 1 Comm: systemd-shutdow Not tainted 4.19.35+gf345c93b4195 #1\n [ 206.821053] Hardware name: Freescale i.MX7 Dual (Device Tree)\n [ 206.826813] PC is at ci_hdrc_remove_device+0x4/0x20\n [ 206.831699] LR is at ci_hdrc_imx_remove+0x20/0xe8\n [ 206.836407] pc : [\u003c805cd4b0\u003e] lr : [\u003c805d62cc\u003e] psr: 20000013\n [ 206.842678] sp : a806be40 ip : 00000001 fp : 80adbd3c\n [ 206.847906] r10: 80b1b794 r9 : 80d5dfe0 r8 : a8192c44\n [ 206.853136] r7 : 80db93a0 r6 : a8192c10 r5 : a8192c00 r4 : a93a4a00\n [ 206.859668] r3 : 00000000 r2 : a8192ce4 r1 : ffffffff r0 : fffffdfb\n [ 206.866201] Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none\n [ 206.873341] Control: 10c5387d Table: a9e0c06a DAC: 00000051\n [ 206.879092] Process systemd-shutdow (pid: 1, stack limit \u003d 0xb271353c)\n [ 206.885624] Stack: (0xa806be40 to 0xa806c000)\n [ 206.889992] be40: a93a4a00 805d62cc a8192c1c a8170e10 a8192c10 8049a490 80d04d08 00000000\n [ 206.898179] be60: 00000000 80d0da2c fee1dead 00000000 a806a000 00000058 00000000 80148b08\n [ 206.906366] be80: 01234567 80148d8c a9858600 00000000 00000000 00000000 00000000 80d04d08\n [ 206.914553] bea0: 00000000 00000000 a82741e0 a9858600 00000024 00000002 a9858608 00000005\n [ 206.922740] bec0: 0000001e 8022c058 00000000 00000000 a806bf14 a9858600 00000000 a806befc\n [ 206.930927] bee0: a806bf78 00000000 7ee12c30 8022c18c a806bef8 a806befc 00000000 00000001\n [ 206.939115] bf00: 00000000 00000024 a806bf14 00000005 7ee13b34 7ee12c68 00000004 7ee13f20\n [ 206.947302] bf20: 00000010 7ee12c7c 00000005 7ee12d04 0000000a 76e7dc00 00000001 80d0f140\n [ 206.955490] bf40: ab637880 a974de40 60000013 80d0f140 ab6378a0 80d04d08 a8080470 a9858600\n [ 206.963677] bf60: a9858600 00000000 00000000 8022c24c 00000000 80144310 00000000 00000000\n [ 206.971864] bf80: 80101204 80d04d08 00000000 80d04d08 00000000 00000000 00000003 00000058\n [ 206.980051] bfa0: 80101204 80101000 00000000 00000000 fee1dead 28121969 01234567 00000000\n [ 206.988237] bfc0: 00000000 00000000 00000003 00000058 00000000 00000000 00000000 00000000\n [ 206.996425] bfe0: 0049ffb0 7ee13d58 0048a84b 76f245a6 60000030 fee1dead 00000000 00000000\n [ 207.004622] [\u003c805cd4b0\u003e] (ci_hdrc_remove_device) from [\u003c805d62cc\u003e] (ci_hdrc_imx_remove+0x20/0xe8)\n [ 207.013509] [\u003c805d62cc\u003e] (ci_hdrc_imx_remove) from [\u003c8049a490\u003e] (device_shutdown+0x16c/0x218)\n [ 207.022050] [\u003c8049a490\u003e] (device_shutdown) from [\u003c80148b08\u003e] (kernel_restart+0xc/0x50)\n [ 207.029980] [\u003c80148b08\u003e] (kernel_restart) from [\u003c80148d8c\u003e] (sys_reboot+0xf4/0x1f0)\n [ 207.037648] [\u003c80148d8c\u003e] (sys_reboot) from [\u003c80101000\u003e] (ret_fast_syscall+0x0/0x54)\n [ 207.045308] Exception stack(0xa806bfa8 to 0xa806bff0)\n [ 207.050368] bfa0: 00000000 00000000 fee1dead 28121969 01234567 00000000\n [ 207.058554] bfc0: 00000000 00000000 00000003 00000058 00000000 00000000 00000000 00000000\n [ 207.066737] bfe0: 0049ffb0 7ee13d58 0048a84b 76f245a6\n [ 207.071799] Code: ebffffa8 e3a00000 e8bd8010 e92d4010 (e5904004)\n [ 207.078021] ---[ end trace be47424e3fd46e9f ]---\n [ 207.082647] Kernel panic - not syncing: Fatal exception\n [ 207.087894] ---[ end Kernel panic - not syncing: Fatal exception ]---\n\n c) the error path in combination with driver removal causes\n imbalanced calls to the clk_*() and pm_()* APIs\n\na) happens because the original intended return value is\n overwritten (with 0) by the return code of\n regulator_disable() in ci_hdrc_imx_probe()\u0027s error path\nb) happens because ci_pdev is -EPROBE_DEFER, which causes\n ci_hdrc_remove_device() to OOPS\n\nFix a) by being more careful in ci_hdrc_imx_probe()\u0027s error\npath and not overwriting the real error code\n\nFix b) by calling the respective cleanup functions during\nremove only when needed (when ci_pdev !\u003d NULL, i.e. when\neverything was initialised correctly). This also has the\nside effect of not causing imbalanced clk_*() and pm_*()\nAPI calls as part of the error code path.\n\nFixes: 7c8e8909417e (\"usb: chipidea: imx: add HSIC support\")\nSigned-off-by: André Draszik \u003cgit@andred.net\u003e\nCc: stable \u003cstable@vger.kernel.org\u003e\nCC: Peter Chen \u003cPeter.Chen@nxp.com\u003e\nCC: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nCC: Shawn Guo \u003cshawnguo@kernel.org\u003e\nCC: Sascha Hauer \u003cs.hauer@pengutronix.de\u003e\nCC: Pengutronix Kernel Team \u003ckernel@pengutronix.de\u003e\nCC: Fabio Estevam \u003cfestevam@gmail.com\u003e\nCC: NXP Linux Team \u003clinux-imx@nxp.com\u003e\nCC: linux-usb@vger.kernel.org\nCC: linux-arm-kernel@lists.infradead.org\nCC: linux-kernel@vger.kernel.org\nLink: https://lore.kernel.org/r/20190810150758.17694-1-git@andred.net\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "777758888ffe59ef754cc39ab2f275dc277732f4", "tree": "3c12de05d2f9f92fcb185c3526ee3537e5b0f765", "parents": [ "54364278fb3cabdea51d6398b07c87415065b3fc" ], "author": { "name": "Hans Ulli Kroll", "email": "ulli.kroll@googlemail.com", "time": "Sat Aug 10 17:04:58 2019 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 15 14:49:16 2019 +0200" }, "message": "usb: host: fotg2: restart hcd after port reset\n\nOn the Gemini SoC the FOTG2 stalls after port reset\nso restart the HCD after each port reset.\n\nSigned-off-by: Hans Ulli Kroll \u003culli.kroll@googlemail.com\u003e\nSigned-off-by: Linus Walleij \u003clinus.walleij@linaro.org\u003e\nLink: https://lore.kernel.org/r/20190810150458.817-1-linus.walleij@linaro.org\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "54364278fb3cabdea51d6398b07c87415065b3fc", "tree": "d066871efff3b5af963d90e59369dbd76f53219f", "parents": [ "c52873e5a1ef72f845526d9f6a50704433f9c625" ], "author": { "name": "Oliver Neukum", "email": "oneukum@suse.com", "time": "Tue Aug 13 11:35:41 2019 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 15 14:49:16 2019 +0200" }, "message": "USB: CDC: fix sanity checks in CDC union parser\n\nA few checks checked for the size of the pointer to a structure\ninstead of the structure itself. Copy \u0026 paste issue presumably.\n\nFixes: e4c6fb7794982 (\"usbnet: move the CDC parser into USB core\")\nCc: stable \u003cstable@vger.kernel.org\u003e\nReported-by: syzbot+45a53506b65321c1fe91@syzkaller.appspotmail.com\nSigned-off-by: Oliver Neukum \u003coneukum@suse.com\u003e\nLink: https://lore.kernel.org/r/20190813093541.18889-1-oneukum@suse.com\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "c52873e5a1ef72f845526d9f6a50704433f9c625", "tree": "136da6da0627fede8a7afd52da66423eca351d48", "parents": [ "303911cfc5b95d33687d9046133ff184cf5043ff" ], "author": { "name": "Oliver Neukum", "email": "oneukum@suse.com", "time": "Thu Aug 08 16:21:19 2019 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 15 14:49:16 2019 +0200" }, "message": "usb: cdc-acm: make sure a refcount is taken early enough\n\ndestroy() will decrement the refcount on the interface, so that\nit needs to be taken so early that it never undercounts.\n\nFixes: 7fb57a019f94e (\"USB: cdc-acm: Fix potential deadlock (lockdep warning)\")\nCc: stable \u003cstable@vger.kernel.org\u003e\nReported-and-tested-by: syzbot+1b2449b7b5dc240d107a@syzkaller.appspotmail.com\nSigned-off-by: Oliver Neukum \u003coneukum@suse.com\u003e\nLink: https://lore.kernel.org/r/20190808142119.7998-1-oneukum@suse.com\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "e5d8badf37e6b547842f2fcde10361b29e08bd36", "tree": "ed837d99bed059350ccc6f62725906175016efcb", "parents": [ "6caf0be40a707689e8ff8824fdb96ef77685b1ba" ], "author": { "name": "Bob Ham", "email": "bob.ham@puri.sm", "time": "Wed Jul 24 07:52:26 2019 -0700" }, "committer": { "name": "Johan Hovold", "email": "johan@kernel.org", "time": "Thu Aug 15 13:46:22 2019 +0200" }, "message": "USB: serial: option: add the BroadMobi BM818 card\n\nAdd a VID:PID for the BroadMobi BM818 M.2 card\n\nT: Bus\u003d01 Lev\u003d03 Prnt\u003d40 Port\u003d03 Cnt\u003d01 Dev#\u003d 44 Spd\u003d480 MxCh\u003d 0\nD: Ver\u003d 2.00 Cls\u003d00(\u003eifc ) Sub\u003d00 Prot\u003d00 MxPS\u003d64 #Cfgs\u003d 1\nP: Vendor\u003d2020 ProdID\u003d2060 Rev\u003d00.00\nS: Manufacturer\u003dQualcomm, Incorporated\nS: Product\u003dQualcomm CDMA Technologies MSM\nC: #Ifs\u003d 5 Cfg#\u003d 1 Atr\u003de0 MxPwr\u003d500mA\nI: If#\u003d0x0 Alt\u003d 0 #EPs\u003d 2 Cls\u003dff(vend.) Sub\u003dff Prot\u003dff Driver\u003d(none)\nI: If#\u003d0x1 Alt\u003d 0 #EPs\u003d 2 Cls\u003dff(vend.) Sub\u003dff Prot\u003dff Driver\u003d(none)\nI: If#\u003d0x2 Alt\u003d 0 #EPs\u003d 3 Cls\u003dff(vend.) Sub\u003dff Prot\u003dff Driver\u003d(none)\nI: If#\u003d0x3 Alt\u003d 0 #EPs\u003d 3 Cls\u003dff(vend.) Sub\u003dfe Prot\u003dff Driver\u003d(none)\nI: If#\u003d0x4 Alt\u003d 0 #EPs\u003d 3 Cls\u003dff(vend.) Sub\u003dff Prot\u003dff Driver\u003d(none)\n\nSigned-off-by: Bob Ham \u003cbob.ham@puri.sm\u003e\nSigned-off-by: Angus Ainslie (Purism) \u003cangus@akkea.ca\u003e\nCc: stable \u003cstable@vger.kernel.org\u003e\n[ johan: use USB_DEVICE_INTERFACE_CLASS() ]\nSigned-off-by: Johan Hovold \u003cjohan@kernel.org\u003e\n" }, { "commit": "6caf0be40a707689e8ff8824fdb96ef77685b1ba", "tree": "2091f4ef447dc010d9ea8b1047a7706b33fcd416", "parents": [ "552573e42aab5f75aff9bab855a9677979d9a7d5" ], "author": { "name": "Tony Lindgren", "email": "tony@atomide.com", "time": "Thu Aug 15 01:26:02 2019 -0700" }, "committer": { "name": "Johan Hovold", "email": "johan@kernel.org", "time": "Thu Aug 15 13:28:47 2019 +0200" }, "message": "USB: serial: option: Add Motorola modem UARTs\n\nOn Motorola Mapphone devices such as Droid 4 there are five USB ports\nthat do not use the same layout as Gobi 1K/2K/etc devices listed in\nqcserial.c. So we should use qcaux.c or option.c as noted by\nDan Williams \u003cdan.j.williams@intel.com\u003e.\n\nAs the Motorola USB serial ports have an interrupt endpoint as shown\nwith lsusb -v, we should use option.c instead of qcaux.c as pointed out\nby Johan Hovold \u003cjohan@kernel.org\u003e.\n\nThe ff/ff/ff interfaces seem to always be UARTs on Motorola devices.\nFor the other interfaces, class 0x0a (CDC Data) should not in general\nbe added as they are typically part of a multi-interface function as\nnoted earlier by Bjørn Mork \u003cbjorn@mork.no\u003e.\n\nHowever, looking at the Motorola mapphone kernel code, the mdm6600 0x0a\nclass is only used for flashing the modem firmware, and there are no\nother interfaces. So I\u0027ve added that too with more details below as it\nworks just fine.\n\nThe ttyUSB ports on Droid 4 are:\n\nttyUSB0 DIAG, CQDM-capable\nttyUSB1 MUX or NMEA, no response\nttyUSB2 MUX or NMEA, no response\nttyUSB3 TCMD\nttyUSB4 AT-capable\n\nThe ttyUSB0 is detected as QCDM capable by ModemManager. I think\nit\u0027s only used for debugging with ModemManager --debug for sending\ncustom AT commands though. ModemManager already can manage data\nconnection using the USB QMI ports that are already handled by the\nqmi_wwan.c driver.\n\nTo enable the MUX or NMEA ports, it seems that something needs to be\ndone additionally to enable them, maybe via the DIAG or TCMD port.\nIt might be just a NVRAM setting somewhere, but I have no idea what\nNVRAM settings may need changing for that.\n\nThe TCMD port seems to be a Motorola custom protocol for testing\nthe modem and to configure it\u0027s NVRAM and seems to work just fine\nbased on a quick test with a minimal tcmdrw tool I wrote.\n\nThe voice modem AT-capable port seems to provide only partial\nsupport, and no PM support compared to the TS 27.010 based UART\nwired directly to the modem.\n\nThe UARTs added with this change are the same product IDs as the\nMotorola Mapphone Android Linux kernel mdm6600_id_table. I don\u0027t\nhave any mdm9600 based devices, so I have only tested these on\nmdm6600 based droid 4.\n\nThen for the class 0x0a (CDC Data) mode, the Motorola Mapphone Android\nLinux kernel driver moto_flashqsc.c just seems to change the\nport-\u003ebulk_out_size to 8K from the default. And is only used for\nflashing the modem firmware it seems.\n\nI\u0027ve verified that flashing the modem with signed firmware works just\nfine with the option driver after manually toggling the GPIO pins, so\nI\u0027ve added droid 4 modem flashing mode to the option driver. I\u0027ve not\nadded the other devices listed in moto_flashqsc.c in case they really\nneed different port-\u003ebulk_out_size. Those can be added as they get\ntested to work for flashing the modem.\n\nAfter this patch the output of /sys/kernel/debug/usb/devices has\nthe following for normal 22b8:2a70 mode including the related qmi_wwan\ninterfaces:\n\nT: Bus\u003d01 Lev\u003d01 Prnt\u003d01 Port\u003d00 Cnt\u003d01 Dev#\u003d 2 Spd\u003d12 MxCh\u003d 0\nD: Ver\u003d 2.00 Cls\u003d00(\u003eifc ) Sub\u003d00 Prot\u003d00 MxPS\u003d64 #Cfgs\u003d 1\nP: Vendor\u003d22b8 ProdID\u003d2a70 Rev\u003d 0.00\nS: Manufacturer\u003dMotorola, Incorporated\nS: Product\u003dFlash MZ600\nC:* #Ifs\u003d 9 Cfg#\u003d 1 Atr\u003de0 MxPwr\u003d500mA\nI:* If#\u003d 0 Alt\u003d 0 #EPs\u003d 2 Cls\u003dff(vend.) Sub\u003dff Prot\u003dff Driver\u003doption\nE: Ad\u003d81(I) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\nE: Ad\u003d01(O) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\nI:* If#\u003d 1 Alt\u003d 0 #EPs\u003d 2 Cls\u003dff(vend.) Sub\u003dff Prot\u003dff Driver\u003doption\nE: Ad\u003d82(I) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\nE: Ad\u003d02(O) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\nI:* If#\u003d 2 Alt\u003d 0 #EPs\u003d 2 Cls\u003dff(vend.) Sub\u003dff Prot\u003dff Driver\u003doption\nE: Ad\u003d83(I) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\nE: Ad\u003d03(O) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\nI:* If#\u003d 3 Alt\u003d 0 #EPs\u003d 2 Cls\u003dff(vend.) Sub\u003dff Prot\u003dff Driver\u003doption\nE: Ad\u003d84(I) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\nE: Ad\u003d04(O) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\nI:* If#\u003d 4 Alt\u003d 0 #EPs\u003d 3 Cls\u003dff(vend.) Sub\u003dff Prot\u003dff Driver\u003doption\nE: Ad\u003d85(I) Atr\u003d03(Int.) MxPS\u003d 64 Ivl\u003d5ms\nE: Ad\u003d86(I) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\nE: Ad\u003d05(O) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\nI:* If#\u003d 5 Alt\u003d 0 #EPs\u003d 3 Cls\u003dff(vend.) Sub\u003dfb Prot\u003dff Driver\u003dqmi_wwan\nE: Ad\u003d87(I) Atr\u003d03(Int.) MxPS\u003d 64 Ivl\u003d5ms\nE: Ad\u003d88(I) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\nE: Ad\u003d06(O) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\nI:* If#\u003d 6 Alt\u003d 0 #EPs\u003d 3 Cls\u003dff(vend.) Sub\u003dfb Prot\u003dff Driver\u003dqmi_wwan\nE: Ad\u003d89(I) Atr\u003d03(Int.) MxPS\u003d 64 Ivl\u003d5ms\nE: Ad\u003d8a(I) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\nE: Ad\u003d07(O) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\nI:* If#\u003d 7 Alt\u003d 0 #EPs\u003d 3 Cls\u003dff(vend.) Sub\u003dfb Prot\u003dff Driver\u003dqmi_wwan\nE: Ad\u003d8b(I) Atr\u003d03(Int.) MxPS\u003d 64 Ivl\u003d5ms\nE: Ad\u003d8c(I) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\nE: Ad\u003d08(O) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\nI:* If#\u003d 8 Alt\u003d 0 #EPs\u003d 3 Cls\u003dff(vend.) Sub\u003dfb Prot\u003dff Driver\u003dqmi_wwan\nE: Ad\u003d8d(I) Atr\u003d03(Int.) MxPS\u003d 64 Ivl\u003d5ms\nE: Ad\u003d8e(I) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\nE: Ad\u003d09(O) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\n\nIn 22b8:900e \"qc_dload\" mode the device shows up as:\n\nT: Bus\u003d01 Lev\u003d01 Prnt\u003d01 Port\u003d00 Cnt\u003d01 Dev#\u003d 2 Spd\u003d12 MxCh\u003d 0\nD: Ver\u003d 2.00 Cls\u003d00(\u003eifc ) Sub\u003d00 Prot\u003d00 MxPS\u003d64 #Cfgs\u003d 1\nP: Vendor\u003d22b8 ProdID\u003d900e Rev\u003d 0.00\nS: Manufacturer\u003dMotorola, Incorporated\nS: Product\u003dFlash MZ600\nC:* #Ifs\u003d 1 Cfg#\u003d 1 Atr\u003de0 MxPwr\u003d500mA\nI:* If#\u003d 0 Alt\u003d 0 #EPs\u003d 2 Cls\u003dff(vend.) Sub\u003dff Prot\u003dff Driver\u003doption\nE: Ad\u003d81(I) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\nE: Ad\u003d01(O) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\n\nAnd in 22b8:4281 \"ram_downloader\" mode the device shows up as:\n\nT: Bus\u003d01 Lev\u003d01 Prnt\u003d01 Port\u003d00 Cnt\u003d01 Dev#\u003d 2 Spd\u003d12 MxCh\u003d 0\nD: Ver\u003d 2.00 Cls\u003d00(\u003eifc ) Sub\u003d00 Prot\u003d00 MxPS\u003d64 #Cfgs\u003d 1\nP: Vendor\u003d22b8 ProdID\u003d4281 Rev\u003d 0.00\nS: Manufacturer\u003dMotorola, Incorporated\nS: Product\u003dFlash MZ600\nC:* #Ifs\u003d 1 Cfg#\u003d 1 Atr\u003de0 MxPwr\u003d500mA\nI:* If#\u003d 0 Alt\u003d 0 #EPs\u003d 2 Cls\u003d0a(data ) Sub\u003d00 Prot\u003dfc Driver\u003doption\nE: Ad\u003d81(I) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\nE: Ad\u003d01(O) Atr\u003d02(Bulk) MxPS\u003d 64 Ivl\u003d0ms\n\nCc: Bjørn Mork \u003cbjorn@mork.no\u003e\nCc: Dan Williams \u003cdan.j.williams@intel.com\u003e\nCc: Lars Melin \u003clarsm17@gmail.com\u003e\nCc: Marcel Partap \u003cmpartap@gmx.net\u003e\nCc: Merlijn Wajer \u003cmerlijn@wizzup.org\u003e\nCc: Michael Scott \u003chashcode0f@gmail.com\u003e\nCc: NeKit \u003cnekit1000@gmail.com\u003e\nCc: Pavel Machek \u003cpavel@ucw.cz\u003e\nCc: Sebastian Reichel \u003csre@kernel.org\u003e\nTested-by: Pavel Machek \u003cpavel@ucw.cz\u003e\nSigned-off-by: Tony Lindgren \u003ctony@atomide.com\u003e\nCc: stable \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Johan Hovold \u003cjohan@kernel.org\u003e\n" }, { "commit": "5ed1c835ed8b522ce25071cc2d56a9a09bd5b59e", "tree": "5eadff001a35f7b929c9a3d0b4953323dd25a951", "parents": [ "91be2587e82a0f16348fd8f12a57e4c328baffc7" ], "author": { "name": "Tony Luck", "email": "tony.luck@intel.com", "time": "Wed Aug 14 16:40:30 2019 -0700" }, "committer": { "name": "Borislav Petkov", "email": "bp@suse.de", "time": "Thu Aug 15 09:54:05 2019 +0200" }, "message": "MAINTAINERS, x86/CPU: Tony Luck will maintain asm/intel-family.h\n\nThere are a few different subsystems in the kernel that depend on model\nspecific behaviour (perf, EDAC, power, ...). Easier for just one person\nto have the task to get new model numbers included instead of having\nthese groups trip over each other to do it.\n\n [ bp: s/Cpu/CPU/ and add x86@kernel.org so that it gets CCed too as\n FYI. ]\n\nSigned-off-by: Tony Luck \u003ctony.luck@intel.com\u003e\nSigned-off-by: Borislav Petkov \u003cbp@suse.de\u003e\nAcked-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Dave Hansen \u003cdave.hansen@intel.com\u003e\nCc: x86-ml \u003cx86@kernel.org\u003e\nLink: https://lkml.kernel.org/r/20190814234030.30817-1-tony.luck@intel.com\n" }, { "commit": "2f62c5d6ed0abae8e70bd83f4d41b9d63acde45a", "tree": "6101c03f38f09707f4d6a991cb7f2cba1b152109", "parents": [ "db1231ddc04682f60d56ff42447f13099c6c4a4c", "e1b4ce25dbc93ab0cb8ed0f236a3b9ff7b03802c" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Thu Aug 15 13:29:18 2019 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Thu Aug 15 13:29:18 2019 +1000" }, "message": "Merge tag \u0027drm-fixes-5.3-2019-08-14\u0027 of git://people.freedesktop.org/~agd5f/linux into drm-fixes\n\ndrm-fixes-5.3-2019-08-14:\n\namdgpu:\n- Use kvalloc for dc_state to avoid allocation\n failures in some cases.\n- Fix gfx9 soft recovery\n\nscheduler:\n- Fix a race condition when destroying entities\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nFrom: Alex Deucher \u003calexdeucher@gmail.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20190815024919.3434-1-alexander.deucher@amd.com\n" }, { "commit": "db1231ddc04682f60d56ff42447f13099c6c4a4c", "tree": "fa1decf81936874dcc548a5edcf315e1b9828c84", "parents": [ "05b439711f6ff8700e8660f97a1179650778b9cb" ], "author": { "name": "Lyude Paul", "email": "lyude@redhat.com", "time": "Thu Aug 08 20:53:05 2019 -0400" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Thu Aug 15 13:27:59 2019 +1000" }, "message": "drm/nouveau: Only recalculate PBN/VCPI on mode/connector changes\n\nI -thought- I had fixed this entirely, but it looks like that I didn\u0027t\ntest this thoroughly enough as we apparently still make one big mistake\nwith nv50_msto_atomic_check() - we don\u0027t handle the following scenario:\n\n* CRTC #1 has n VCPI allocated to it, is attached to connector DP-4\n which is attached to encoder #1. enabled\u003dy active\u003dn\n* CRTC #1 is changed from DP-4 to DP-5, causing:\n * DP-4 crtc\u003d#1→NULL (VCPI n→0)\n * DP-5 crtc\u003dNULL→#1\n * CRTC #1 steals encoder #1 back from DP-4 and gives it to DP-5\n * CRTC #1 maintains the same mode as before, just with a different\n connector\n* mode_changed\u003dn connectors_changed\u003dy\n (we _SHOULD_ do VCPI 0→n here, but don\u0027t)\n\nOnce the above scenario is repeated once, we\u0027ll attempt freeing VCPI\nfrom the connector that we didn\u0027t allocate due to the connectors\nchanging, but the mode staying the same. Sigh.\n\nSince nv50_msto_atomic_check() has broken a few times now, let\u0027s rethink\nthings a bit to be more careful: limit both VCPI/PBN allocations to\nmode_changed || connectors_changed, since neither VCPI or PBN should\never need to change outside of routing and mode changes.\n\nChanges since v1:\n* Fix accidental reversal of clock and bpp arguments in\n drm_dp_calc_pbn_mode() - William Lewis\n\nSigned-off-by: Lyude Paul \u003clyude@redhat.com\u003e\nReported-by: Bohdan Milar \u003cbmilar@redhat.com\u003e\nTested-by: Bohdan Milar \u003cbmilar@redhat.com\u003e\nFixes: 232c9eec417a (\"drm/nouveau: Use atomic VCPI helpers for MST\")\nReferences: 412e85b60531 (\"drm/nouveau: Only release VCPI slots on mode changes\")\nCc: Lyude Paul \u003clyude@redhat.com\u003e\nCc: Ben Skeggs \u003cbskeggs@redhat.com\u003e\nCc: Daniel Vetter \u003cdaniel.vetter@ffwll.ch\u003e\nCc: David Airlie \u003cairlied@redhat.com\u003e\nCc: Jerry Zuo \u003cJerry.Zuo@amd.com\u003e\nCc: Harry Wentland \u003charry.wentland@amd.com\u003e\nCc: Juston Li \u003cjuston.li@intel.com\u003e\nCc: Laurent Pinchart \u003claurent.pinchart@ideasonboard.com\u003e\nCc: Karol Herbst \u003ckarolherbst@gmail.com\u003e\nCc: Ilia Mirkin \u003cimirkin@alum.mit.edu\u003e\nCc: \u003cstable@vger.kernel.org\u003e # v5.1+\nAcked-by: Ben Skeggs \u003cbskeggs@redhat.com\u003e\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20190809005307.18391-1-lyude@redhat.com\n" }, { "commit": "05b439711f6ff8700e8660f97a1179650778b9cb", "tree": "5becd511f360d29e872f03f33a360834e48a1f33", "parents": [ "d45331b00ddb179e291766617259261c112db872" ], "author": { "name": "Y.C. Chen", "email": "yc_chen@aspeedtech.com", "time": "Wed Apr 11 09:27:39 2018 +0800" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Thu Aug 15 13:04:57 2019 +1000" }, "message": "drm/ast: Fixed reboot test may cause system hanged\n\nThere is another thread still access standard VGA I/O while loading drm driver.\nDisable standard VGA I/O decode to avoid this issue.\n\nSigned-off-by: Y.C. Chen \u003cyc_chen@aspeedtech.com\u003e\nReviewed-by: Benjamin Herrenschmidt \u003cbenh@kernel.crashing.org\u003e\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/1523410059-18415-1-git-send-email-yc_chen@aspeedtech.com\n" }, { "commit": "83f82d7a42583e93d0f0dde3d61ed10f75c0f4d8", "tree": "e4e1b68973d52fc81a314e4250fcb58b80b1ac5c", "parents": [ "626633425c079742c04f4f2d81c16962b084605c" ], "author": { "name": "Lubomir Rintel", "email": "lkundrak@v3.sk", "time": "Wed Aug 07 15:22:31 2019 +0200" }, "committer": { "name": "Rob Herring", "email": "robh@kernel.org", "time": "Wed Aug 14 20:12:16 2019 -0600" }, "message": "of: irq: fix a trivial typo in a doc comment\n\nDiverged from what the code does with commit 530210c7814e (\"of/irq: Replace\nof_irq with of_phandle_args\").\n\nSigned-off-by: Lubomir Rintel \u003clkundrak@v3.sk\u003e\nSigned-off-by: Rob Herring \u003crobh@kernel.org\u003e\n" }, { "commit": "626633425c079742c04f4f2d81c16962b084605c", "tree": "84f707c6976090807a07e0964f795d680892ebe2", "parents": [ "fd295733e702a63c189fea8294c12e04b5e5ecc0" ], "author": { "name": "Rob Herring", "email": "robh@kernel.org", "time": "Tue Aug 13 14:47:54 2019 -0600" }, "committer": { "name": "Rob Herring", "email": "robh@kernel.org", "time": "Wed Aug 14 20:07:43 2019 -0600" }, "message": "dt-bindings: pinctrl: stm32: Fix \u0027st,syscfg\u0027 schema\n\nThe proper way to add additional contraints to an existing json-schema\nis using \u0027allOf\u0027 to reference the base schema. Using just \u0027$ref\u0027 doesn\u0027t\nwork. Fix this for the \u0027st,syscfg\u0027 property.\n\nCc: Mark Rutland \u003cmark.rutland@arm.com\u003e\nCc: Maxime Coquelin \u003cmcoquelin.stm32@gmail.com\u003e\nCc: Alexandre Torgue \u003calexandre.torgue@st.com\u003e\nCc: linux-gpio@vger.kernel.org\nCc: linux-stm32@st-md-mailman.stormreply.com\nCc: linux-arm-kernel@lists.infradead.org\nReviewed-by: Linus Walleij \u003clinus.walleij@linaro.org\u003e\nSigned-off-by: Rob Herring \u003crobh@kernel.org\u003e\n" }, { "commit": "41de59634046b19cd53a1983594a95135c656997", "tree": "823d24ad76727f30558511e5805294e02c8e581e", "parents": [ "e22a97a2a85d2a0bdfb134cbbc7ff856ae67edba", "1ee1119d184bb06af921b48c3021d921bbd85bac" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Aug 14 15:29:53 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Aug 14 15:29:53 2019 -0700" }, "message": "Merge tag \u0027Wimplicit-fallthrough-5.3-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gustavoars/linux\n\nPull fallthrough fixes from Gustavo A. R. Silva:\n \"Fix sh mainline builds:\n\n - Fix fall-through warning in sh.\n\n - Fix missing break bug in sh (this is a 10-year-old bug)\n\n Currently, mainline builds for sh are broken. These patches fix that\"\n\n* tag \u0027Wimplicit-fallthrough-5.3-rc5\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gustavoars/linux:\n sh: kernel: hw_breakpoint: Fix missing break in switch statement\n sh: kernel: disassemble: Mark expected switch fall-throughs\n" }, { "commit": "e22a97a2a85d2a0bdfb134cbbc7ff856ae67edba", "tree": "411173ff2f9a4aeb73fb579e39fd3fbc7e1eadb4", "parents": [ "a8dba0531bc0ba8b65e77a4a858da4b6eeaa1b92", "9dd0b82ef530cdfe805c9f7079c99e104be59a14" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Aug 14 14:21:14 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Aug 14 14:21:14 2019 -0700" }, "message": "Merge tag \u0027afs-fixes-20190814\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs\n\nPull afs fixes from David Howells:\n\n - Fix the CB.ProbeUuid handler to generate its reply correctly.\n\n - Fix a mix up in indices when parsing a Volume Location entry record.\n\n - Fix a potential NULL-pointer deref when cleaning up a read request.\n\n - Fix the expected data version of the destination directory in\n afs_rename().\n\n - Fix afs_d_revalidate() to only update d_fsdata if it\u0027s not the same\n as the directory data version to reduce the likelihood of overwriting\n the result of a competing operation. (d_fsdata carries the directory\n DV or the least-significant word thereof).\n\n - Fix the tracking of the data-version on a directory and make sure\n that dentry objects get properly initialised, updated and\n revalidated.\n\n Also fix rename to update d_fsdata to match the new directory\u0027s DV if\n the dentry gets moved over and unhash the dentry to stop\n afs_d_revalidate() from interfering.\n\n* tag \u0027afs-fixes-20190814\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs:\n afs: Fix missing dentry data version updating\n afs: Only update d_fsdata if different in afs_d_revalidate()\n afs: Fix off-by-one in afs_rename() expected data version calculation\n fs: afs: Fix a possible null-pointer dereference in afs_put_read()\n afs: Fix loop index mixup in afs_deliver_vl_get_entry_by_name_u()\n afs: Fix the CB.ProbeUuid service handler to reply correctly\n" }, { "commit": "e1b4ce25dbc93ab0cb8ed0f236a3b9ff7b03802c", "tree": "2d6fed0206a76b9cfa53001ce820922bcc803253", "parents": [ "31ec0dd38085aaeb75ab04211bf3b51ad917c9b4" ], "author": { "name": "Christian König", "email": "christian.koenig@amd.com", "time": "Fri Aug 09 17:27:21 2019 +0200" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Wed Aug 14 15:45:53 2019 -0500" }, "message": "drm/scheduler: use job count instead of peek\n\nThe spsc_queue_peek function is accessing queue-\u003ehead which belongs to\nthe consumer thread and shouldn\u0027t be accessed by the producer\n\nThis is fixing a rare race condition when destroying entities.\n\nSigned-off-by: Christian König \u003cchristian.koenig@amd.com\u003e\nAcked-by: Andrey Grodzovsky \u003candrey.grodzovsky@amd.com\u003e\nReviewed-by: Monk.liu@amd.com\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n" }, { "commit": "69703eb9a8ae28a46cd5bce7d69ceeef6273a104", "tree": "6ac4d72a059e1d5eec05d0f2d0a62844d5ff0fbb", "parents": [ "8ac71d7e46b94a4fc8ffc6f1c88004cdf24459e8" ], "author": { "name": "Vincent Chen", "email": "vincent.chen@sifive.com", "time": "Wed Aug 14 16:23:53 2019 +0800" }, "committer": { "name": "Paul Walmsley", "email": "paul.walmsley@sifive.com", "time": "Wed Aug 14 13:20:46 2019 -0700" }, "message": "riscv: Make __fstate_clean() work correctly.\n\nMake the __fstate_clean() function correctly set the\nstate of sstatus.FS in pt_regs to SR_FS_CLEAN.\n\nFixes: 7db91e57a0acd (\"RISC-V: Task implementation\")\nCc: linux-stable \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Vincent Chen \u003cvincent.chen@sifive.com\u003e\nReviewed-by: Anup Patel \u003canup@brainfault.org\u003e\nReviewed-by: Christoph Hellwig \u003chch@lst.de\u003e\n[paul.walmsley@sifive.com: expanded \"Fixes\" commit ID]\nSigned-off-by: Paul Walmsley \u003cpaul.walmsley@sifive.com\u003e" }, { "commit": "8ac71d7e46b94a4fc8ffc6f1c88004cdf24459e8", "tree": "57e7f00d36ad3be2cb2e1244eeac8af7cd67cda3", "parents": [ "d568cb3f935123b4fb42b9029ebcfebc4e4533a2" ], "author": { "name": "Vincent Chen", "email": "vincent.chen@sifive.com", "time": "Wed Aug 14 16:23:52 2019 +0800" }, "committer": { "name": "Paul Walmsley", "email": "paul.walmsley@sifive.com", "time": "Wed Aug 14 13:11:11 2019 -0700" }, "message": "riscv: Correct the initialized flow of FP register\n\n The following two reasons cause FP registers are sometimes not\ninitialized before starting the user program.\n1. Currently, the FP context is initialized in flush_thread() function\n and we expect these initial values to be restored to FP register when\n doing FP context switch. However, the FP context switch only occurs in\n switch_to function. Hence, if this process does not be scheduled out\n and scheduled in before entering the user space, the FP registers\n have no chance to initialize.\n2. In flush_thread(), the state of reg-\u003esstatus.FS inherits from the\n parent. Hence, the state of reg-\u003esstatus.FS may be dirty. If this\n process is scheduled out during flush_thread() and initializing the\n FP register, the fstate_save() in switch_to will corrupt the FP context\n which has been initialized until flush_thread().\n\n To solve the 1st case, the initialization of the FP register will be\ncompleted in start_thread(). It makes sure all FP registers are initialized\nbefore starting the user program. For the 2nd case, the state of\nreg-\u003esstatus.FS in start_thread will be set to SR_FS_OFF to prevent this\nprocess from corrupting FP context in doing context save. The FP state is\nset to SR_FS_INITIAL in start_trhead().\n\nSigned-off-by: Vincent Chen \u003cvincent.chen@sifive.com\u003e\nReviewed-by: Anup Patel \u003canup@brainfault.org\u003e\nReviewed-by: Christoph Hellwig \u003chch@lst.de\u003e\nFixes: 7db91e57a0acd (\"RISC-V: Task implementation\")\nCc: stable@vger.kernel.org\n[paul.walmsley@sifive.com: fixed brace alignment issue reported by\n checkpatch]\nSigned-off-by: Paul Walmsley \u003cpaul.walmsley@sifive.com\u003e\n" }, { "commit": "a8dba0531bc0ba8b65e77a4a858da4b6eeaa1b92", "tree": "5669b7bc527e7c98529800ac9f2ff28f3f607fb9", "parents": [ "e83b009c5c366b678c7986fa6c1d38fed06c954c", "2c8ccb37b08fe364f02a9914daca474d43151453" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Aug 14 11:10:38 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Aug 14 11:10:38 2019 -0700" }, "message": "Merge tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma\n\nPull rdma fixes from Doug Ledford:\n \"Fairly small pull request for -rc3. I\u0027m out of town the rest of this\n week, so I made sure to clean out as much as possible from patchworks\n in enough time for 0-day to chew through it (Yay! for 0-day being back\n online! :-)). Jason might send through any emergency stuff that could\n pop up, otherwise I\u0027m back next week.\n\n The only real thing of note is the siw ABI change. Since we just\n merged siw *this* release, there are no prior kernel releases to\n maintain kernel ABI with. I told Bernard that if there is anything\n else about the siw ABI he thinks he might want to change before it\n goes set in stone, he should get it in ASAP. The siw module was around\n for several years outside the kernel tree, and it had to be revamped\n considerably for inclusion upstream, so we are making no attempts to\n be backward compatible with the out of tree version. Once 5.3 is\n actually released, we will have our baseline ABI to maintain.\n\n Summary:\n\n - Fix a memory registration release flow issue that was causing a\n WARN_ON (mlx5)\n\n - If the counters for a port aren\u0027t allocated, then we can\u0027t do\n operations on the non-existent counters (core)\n\n - Check the right variable for error code result (mlx5)\n\n - Fix a use after free issue (mlx5)\n\n - Fix an off by one memory leak (siw)\n\n - Actually return an error code on error (core)\n\n - Allow siw to be built on 32bit arches (siw, ABI change, but OK\n since siw was just merged this merge window and there is no prior\n released kernel to maintain compatibility with and we also updated\n the rdma-core user space package to match)\"\n\n* tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma:\n RDMA/siw: Change CQ flags from 64-\u003e32 bits\n RDMA/core: Fix error code in stat_get_doit_qp()\n RDMA/siw: Fix a memory leak in siw_init_cpulist()\n IB/mlx5: Fix use-after-free error while accessing ev_file pointer\n IB/mlx5: Check the correct variable in error handling code\n RDMA/counter: Prevent QP counter binding if counters unsupported\n IB/mlx5: Fix implicit MR release flow\n" }, { "commit": "daac07156b330b18eb5071aec4b3ddca1c377f2c", "tree": "cca841f4517aff5cca1d5edbb49b947cdcf9a780", "parents": [ "871b9066027702e6e6589da0e1edd3b7dede7205" ], "author": { "name": "Hui Peng", "email": "benquike@gmail.com", "time": "Tue Aug 13 22:34:04 2019 -0400" }, "committer": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Wed Aug 14 20:05:56 2019 +0200" }, "message": "ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit\n\nThe `uac_mixer_unit_descriptor` shown as below is read from the\ndevice side. In `parse_audio_mixer_unit`, `baSourceID` field is\naccessed from index 0 to `bNrInPins` - 1, the current implementation\nassumes that descriptor is always valid (the length of descriptor\nis no shorter than 5 + `bNrInPins`). If a descriptor read from\nthe device side is invalid, it may trigger out-of-bound memory\naccess.\n\n```\nstruct uac_mixer_unit_descriptor {\n\t__u8 bLength;\n\t__u8 bDescriptorType;\n\t__u8 bDescriptorSubtype;\n\t__u8 bUnitID;\n\t__u8 bNrInPins;\n\t__u8 baSourceID[];\n}\n```\n\nThis patch fixes the bug by add a sanity check on the length of\nthe descriptor.\n\nReported-by: Hui Peng \u003cbenquike@gmail.com\u003e\nReported-by: Mathias Payer \u003cmathias.payer@nebelwelt.net\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Hui Peng \u003cbenquike@gmail.com\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\n" }, { "commit": "e83b009c5c366b678c7986fa6c1d38fed06c954c", "tree": "a7cc0449b32c7086ba44441dfac547a3940528be", "parents": [ "b5e33e44d994bb03c75f1901d47b1cf971f752a0", "33dcb37cef741294b481f4d889a465b8091f11bf" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Aug 14 10:31:11 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Aug 14 10:31:11 2019 -0700" }, "message": "Merge tag \u0027dma-mapping-5.3-4\u0027 of git://git.infradead.org/users/hch/dma-mapping\n\nPull dma-mapping fixes from Christoph Hellwig:\n\n - fix the handling of the bus_dma_mask in dma_get_required_mask, which\n caused a regression in this merge window (Lucas Stach)\n\n - fix a regression in the handling of DMA_ATTR_NO_KERNEL_MAPPING (me)\n\n - fix dma_mmap_coherent to not cause page attribute mismatches on\n coherent architectures like x86 (me)\n\n* tag \u0027dma-mapping-5.3-4\u0027 of git://git.infradead.org/users/hch/dma-mapping:\n dma-mapping: fix page attributes for dma_mmap_*\n dma-direct: don\u0027t truncate dma_required_mask to bus addressing capabilities\n dma-direct: fix DMA_ATTR_NO_KERNEL_MAPPING\n" }, { "commit": "b5e33e44d994bb03c75f1901d47b1cf971f752a0", "tree": "d7a8c44ab9c24f066ab9fadefc15b722011fdfe0", "parents": [ "cab6d5b66b984ddeb8b0ff2ad2ddc06f7f406cda", "3a18844dcf89e636b2d0cbf577e3963b0bcb6d23" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Aug 14 10:16:59 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Aug 14 10:16:59 2019 -0700" }, "message": "Merge tag \u0027iommu-fixes-v5.3-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu\n\nPull iommu fixes from Joerg Roedel:\n\n - A couple more fixes for the Intel VT-d driver for bugs introduced\n during the recent conversion of this driver to use IOMMU core default\n domains.\n\n - Fix for common dma-iommu code to make sure MSI mappings happen in the\n correct domain for a device.\n\n - Fix a corner case in the handling of sg-lists in dma-iommu code that\n might cause dma_length to be truncated.\n\n - Mark a switch as fall-through in arm-smmu code.\n\n* tag \u0027iommu-fixes-v5.3-rc4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu:\n iommu/vt-d: Fix possible use-after-free of private domain\n iommu/vt-d: Detach domain before using a private one\n iommu/dma: Handle SG length overflow better\n iommu/vt-d: Correctly check format of page table in debugfs\n iommu/vt-d: Detach domain when move device out of group\n iommu/arm-smmu: Mark expected switch fall-through\n iommu/dma: Handle MSI mappings separately\n" }, { "commit": "cab6d5b66b984ddeb8b0ff2ad2ddc06f7f406cda", "tree": "e76a391a2b11af03231627baf7a757cf4c6a226e", "parents": [ "ee1c7bd33e66376067fd6306b730789ee2ae53e4", "4643d67e8cb0b3536ef0ab5cddd1cedc73fa14ad" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Aug 14 09:53:46 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Aug 14 09:53:46 2019 -0700" }, "message": "Merge branch \u0027akpm\u0027 (patches from Andrew)\n\nMerge misc VM fixes from Andrew Morton:\n \"A bunch of hotfixes, all affecting mm/.\n\n The two-patch series from Andrea may be controversial. This restores\n patches which were reverted in Dec 2018 due to a regression report [*].\n\n After extensive discussion it is evident that the problems which these\n patches solved were significantly more serious than the problems they\n introduced. I am told that major distros are already carrying these\n two patches for this reason\"\n\n[*] See\n\n https://lore.kernel.org/lkml/alpine.DEB.2.21.1812061343240.144733@chino.kir.corp.google.com/\n https://lore.kernel.org/lkml/alpine.DEB.2.21.1812031545560.161134@chino.kir.corp.google.com/\n\n for the google-specific issues brought up by David Rijentes. And as\n Andrew says:\n\n \"I\u0027m unaware of anyone else who will be adversely affected by this,\n and google already carries over a thousand kernel patches - another\n won\u0027t kill them.\n\n There has been sporadic discussion about fixing these things for\n real but it\u0027s clear that nobody apart from David is particularly\n motivated\"\n\n* emailed patches from Andrew Morton \u003cakpm@linux-foundation.org\u003e:\n hugetlbfs: fix hugetlb page migration/fault race causing SIGBUS\n mm, vmscan: do not special-case slab reclaim when watermarks are boosted\n Revert \"mm, thp: restore node-local hugepage allocations\"\n Revert \"Revert \"mm, thp: consolidate THP gfp handling into alloc_hugepage_direct_gfpmask\"\"\n include/asm-generic/5level-fixup.h: fix variable \u0027p4d\u0027 set but not used\n seq_file: fix problem when seeking mid-record\n mm: workingset: fix vmstat counters for shadow nodes\n mm/usercopy: use memory range to be accessed for wraparound check\n mm: kmemleak: disable early logging in case of error\n mm/vmalloc.c: fix percpu free VM area search criteria\n mm/memcontrol.c: fix use after free in mem_cgroup_iter()\n mm/z3fold.c: fix z3fold_destroy_pool() race condition\n mm/z3fold.c: fix z3fold_destroy_pool() ordering\n mm: mempolicy: handle vma with unmovable pages mapped correctly in mbind\n mm: mempolicy: make the behavior consistent when MPOL_MF_MOVE* and MPOL_MF_STRICT were specified\n mm/hmm: fix bad subpage pointer in try_to_unmap_one\n mm/hmm: fix ZONE_DEVICE anon page mapping reuse\n mm: document zone device struct page field usage\n" }, { "commit": "90865a3dc597bd8463efacb749561095ba70b0aa", "tree": "7a2b10ced6d91b2a403f4ada6e99bfb640f5252d", "parents": [ "d7437fc0d8291181debe032671a289b6bd93f46f" ], "author": { "name": "Nishad Kamdar", "email": "nishadkamdar@gmail.com", "time": "Sat Aug 03 19:43:35 2019 +0530" }, "committer": { "name": "Wolfram Sang", "email": "wsa@the-dreams.de", "time": "Wed Aug 14 14:56:54 2019 +0200" }, "message": "i2c: stm32: Use the correct style for SPDX License Identifier\n\nThis patch corrects the SPDX License Identifier style\nin header file related to STM32 Driver for I2C hardware\nbus support.\nFor C header files Documentation/process/license-rules.rst\nmandates C-like comments (opposed to C source files where\nC++ style should be used)\n\nChanges made by using a script provided by Joe Perches here:\nhttps://lkml.org/lkml/2019/2/7/46\n\nSuggested-by: Joe Perches \u003cjoe@perches.com\u003e\nSigned-off-by: Nishad Kamdar \u003cnishadkamdar@gmail.com\u003e\nSigned-off-by: Wolfram Sang \u003cwsa@the-dreams.de\u003e\n" }, { "commit": "d7437fc0d8291181debe032671a289b6bd93f46f", "tree": "7eabc9f12af39ab71bee73ab3927e84219b5ef94", "parents": [ "7b814d852af6944657c2961039f404c4490771c0" ], "author": { "name": "Wolfram Sang", "email": "wsa+renesas@sang-engineering.com", "time": "Thu Aug 08 21:54:17 2019 +0200" }, "committer": { "name": "Wolfram Sang", "email": "wsa@the-dreams.de", "time": "Wed Aug 14 14:49:43 2019 +0200" }, "message": "i2c: emev2: avoid race when unregistering slave client\n\nAfter we disabled interrupts, there might still be an active one\nrunning. Sync before clearing the pointer to the slave device.\n\nFixes: c31d0a00021d (\"i2c: emev2: add slave support\")\nReported-by: Krzysztof Adamski \u003ckrzysztof.adamski@nokia.com\u003e\nSigned-off-by: Wolfram Sang \u003cwsa+renesas@sang-engineering.com\u003e\nReviewed-by: Krzysztof Adamski \u003ckrzysztof.adamski@nokia.com\u003e\nSigned-off-by: Wolfram Sang \u003cwsa@the-dreams.de\u003e\n" }, { "commit": "7b814d852af6944657c2961039f404c4490771c0", "tree": "d9c018472072e09d33fc9a0e7de6a46211b4e2da", "parents": [ "8fc3ae3b109d17157102f0abf9c8fb1e16bf810a" ], "author": { "name": "Wolfram Sang", "email": "wsa+renesas@sang-engineering.com", "time": "Thu Aug 08 21:39:10 2019 +0200" }, "committer": { "name": "Wolfram Sang", "email": "wsa@the-dreams.de", "time": "Wed Aug 14 14:49:36 2019 +0200" }, "message": "i2c: rcar: avoid race when unregistering slave client\n\nAfter we disabled interrupts, there might still be an active one\nrunning. Sync before clearing the pointer to the slave device.\n\nFixes: de20d1857dd6 (\"i2c: rcar: add slave support\")\nReported-by: Krzysztof Adamski \u003ckrzysztof.adamski@nokia.com\u003e\nSigned-off-by: Wolfram Sang \u003cwsa+renesas@sang-engineering.com\u003e\nReviewed-by: Krzysztof Adamski \u003ckrzysztof.adamski@nokia.com\u003e\nSigned-off-by: Wolfram Sang \u003cwsa@the-dreams.de\u003e\n" }, { "commit": "8fc3ae3b109d17157102f0abf9c8fb1e16bf810a", "tree": "90ea0326d917b55c7a9ba42577e0284897398dc0", "parents": [ "e8c220fac415d9f4a994b0c2871b835feac1eb4e" ], "author": { "name": "Oleksij Rempel", "email": "o.rempel@pengutronix.de", "time": "Mon Aug 12 07:08:17 2019 +0200" }, "committer": { "name": "Wolfram Sang", "email": "wsa@the-dreams.de", "time": "Wed Aug 14 11:53:49 2019 +0200" }, "message": "MAINTAINERS: i2c-imx: take over maintainership\n\nI would like to maintain the i2c-imx driver. Since I work with\ndifferent i.MX variants and have access to the hardware, I can spend\nsome time on the reviewing of this driver.\n\nSigned-off-by: Oleksij Rempel \u003co.rempel@pengutronix.de\u003e\nSigned-off-by: Wolfram Sang \u003cwsa@the-dreams.de\u003e\n" }, { "commit": "e8c220fac415d9f4a994b0c2871b835feac1eb4e", "tree": "6f85748ce99ecaead6c69850fb4e37b9fc0284f0", "parents": [ "d45331b00ddb179e291766617259261c112db872" ], "author": { "name": "Fabio Estevam", "email": "festevam@gmail.com", "time": "Thu Aug 08 18:01:36 2019 -0300" }, "committer": { "name": "Wolfram Sang", "email": "wsa@the-dreams.de", "time": "Wed Aug 14 11:53:00 2019 +0200" }, "message": "Revert \"i2c: imx: improve the error handling in i2c_imx_dma_request()\"\n\nSince commit e1ab9a468e3b (\"i2c: imx: improve the error handling in\ni2c_imx_dma_request()\") when booting with the DMA driver as module (such\nas CONFIG_FSL_EDMA\u003dm) the following endless clk warnings are seen:\n\n[ 153.077831] ------------[ cut here ]------------\n[ 153.082528] WARNING: CPU: 0 PID: 15 at drivers/clk/clk.c:924 clk_core_disable_lock+0x18/0x24\n[ 153.093077] i2c0 already disabled\n[ 153.096416] Modules linked in:\n[ 153.099521] CPU: 0 PID: 15 Comm: kworker/0:1 Tainted: G W 5.2.0+ #321\n[ 153.107290] Hardware name: Freescale Vybrid VF5xx/VF6xx (Device Tree)\n[ 153.113772] Workqueue: events deferred_probe_work_func\n[ 153.118979] [\u003cc0019560\u003e] (unwind_backtrace) from [\u003cc0014734\u003e] (show_stack+0x10/0x14)\n[ 153.126778] [\u003cc0014734\u003e] (show_stack) from [\u003cc083f8dc\u003e] (dump_stack+0x9c/0xd4)\n[ 153.134051] [\u003cc083f8dc\u003e] (dump_stack) from [\u003cc0031154\u003e] (__warn+0xf8/0x124)\n[ 153.141056] [\u003cc0031154\u003e] (__warn) from [\u003cc0031248\u003e] (warn_slowpath_fmt+0x38/0x48)\n[ 153.148580] [\u003cc0031248\u003e] (warn_slowpath_fmt) from [\u003cc040fde0\u003e] (clk_core_disable_lock+0x18/0x24)\n[ 153.157413] [\u003cc040fde0\u003e] (clk_core_disable_lock) from [\u003cc058f520\u003e] (i2c_imx_probe+0x554/0x6ec)\n[ 153.166076] [\u003cc058f520\u003e] (i2c_imx_probe) from [\u003cc04b9178\u003e] (platform_drv_probe+0x48/0x98)\n[ 153.174297] [\u003cc04b9178\u003e] (platform_drv_probe) from [\u003cc04b7298\u003e] (really_probe+0x1d8/0x2c0)\n[ 153.182605] [\u003cc04b7298\u003e] (really_probe) from [\u003cc04b7554\u003e] (driver_probe_device+0x5c/0x174)\n[ 153.190909] [\u003cc04b7554\u003e] (driver_probe_device) from [\u003cc04b58c8\u003e] (bus_for_each_drv+0x44/0x8c)\n[ 153.199480] [\u003cc04b58c8\u003e] (bus_for_each_drv) from [\u003cc04b746c\u003e] (__device_attach+0xa0/0x108)\n[ 153.207782] [\u003cc04b746c\u003e] (__device_attach) from [\u003cc04b65a4\u003e] (bus_probe_device+0x88/0x90)\n[ 153.215999] [\u003cc04b65a4\u003e] (bus_probe_device) from [\u003cc04b6a04\u003e] (deferred_probe_work_func+0x60/0x90)\n[ 153.225003] [\u003cc04b6a04\u003e] (deferred_probe_work_func) from [\u003cc004f190\u003e] (process_one_work+0x204/0x634)\n[ 153.234178] [\u003cc004f190\u003e] (process_one_work) from [\u003cc004f618\u003e] (worker_thread+0x20/0x484)\n[ 153.242315] [\u003cc004f618\u003e] (worker_thread) from [\u003cc0055c2c\u003e] (kthread+0x118/0x150)\n[ 153.249758] [\u003cc0055c2c\u003e] (kthread) from [\u003cc00090b4\u003e] (ret_from_fork+0x14/0x20)\n[ 153.257006] Exception stack(0xdde43fb0 to 0xdde43ff8)\n[ 153.262095] 3fa0: 00000000 00000000 00000000 00000000\n[ 153.270306] 3fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000\n[ 153.278520] 3fe0: 00000000 00000000 00000000 00000000 00000013 00000000\n[ 153.285159] irq event stamp: 3323022\n[ 153.288787] hardirqs last enabled at (3323021): [\u003cc0861c4c\u003e] _raw_spin_unlock_irq+0x24/0x2c\n[ 153.297261] hardirqs last disabled at (3323022): [\u003cc040d7a0\u003e] clk_enable_lock+0x10/0x124\n[ 153.305392] softirqs last enabled at (3322092): [\u003cc000a504\u003e] __do_softirq+0x344/0x540\n[ 153.313352] softirqs last disabled at (3322081): [\u003cc00385c0\u003e] irq_exit+0x10c/0x128\n[ 153.320946] ---[ end trace a506731ccd9bd703 ]---\n\nThis endless clk warnings behaviour is well explained by Andrey Smirnov:\n\n\"Allocating DMA after registering I2C adapter can lead to infinite\nprobing loop, for example, consider the following scenario:\n\n 1. i2c_imx_probe() is called and successfully registers an I2C\n adapter via i2c_add_numbered_adapter()\n\n 2. As a part of i2c_add_numbered_adapter() new I2C slave devices\n are added from DT which results in a call to\n driver_deferred_probe_trigger()\n\n 3. i2c_imx_probe() continues and calls i2c_imx_dma_request() which\n due to lack of proper DMA driver returns -EPROBE_DEFER\n\n 4. i2c_imx_probe() fails, removes I2C adapter and returns\n -EPROBE_DEFER, which places it into deferred probe list\n\n 5. Deferred probe work triggered in #2 above kicks in and calls\n i2c_imx_probe() again thus bringing us to step #1\"\n\nSo revert commit e1ab9a468e3b (\"i2c: imx: improve the error handling in\ni2c_imx_dma_request()\") and restore the old behaviour, in order to\navoid regressions on existing setups.\n\nCc: \u003cstable@vger.kernel.org\u003e\nReported-by: Andrey Smirnov \u003candrew.smirnov@gmail.com\u003e\nReported-by: Russell King \u003clinux@armlinux.org.uk\u003e\nFixes: e1ab9a468e3b (\"i2c: imx: improve the error handling in i2c_imx_dma_request()\")\nSigned-off-by: Fabio Estevam \u003cfestevam@gmail.com\u003e\nSigned-off-by: Wolfram Sang \u003cwsa@the-dreams.de\u003e\n" }, { "commit": "871b9066027702e6e6589da0e1edd3b7dede7205", "tree": "8234775a736ee5e4f918bc5dc5e6d9a57d93a529", "parents": [ "401714d9534aad8c24196b32600da683116bbe09" ], "author": { "name": "Hui Wang", "email": "hui.wang@canonical.com", "time": "Wed Aug 14 12:09:08 2019 +0800" }, "committer": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Wed Aug 14 08:38:23 2019 +0200" }, "message": "ALSA: hda - Add a generic reboot_notify\n\nMake codec enter D3 before rebooting or poweroff can fix the noise\nissue on some laptops. And in theory it is harmless for all codecs\nto enter D3 before rebooting or poweroff, let us add a generic\nreboot_notify, then realtek and conexant drivers can call this\nfunction.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Hui Wang \u003chui.wang@canonical.com\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\n" }, { "commit": "401714d9534aad8c24196b32600da683116bbe09", "tree": "fdbcb34b780d6830543d624475abd3e66ee4de5e", "parents": [ "190d03814eb3b49d4f87ff38fef26d36f3568a60" ], "author": { "name": "Hui Wang", "email": "hui.wang@canonical.com", "time": "Wed Aug 14 12:09:07 2019 +0800" }, "committer": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Wed Aug 14 08:38:16 2019 +0200" }, "message": "ALSA: hda - Let all conexant codec enter D3 when rebooting\n\nWe have 3 new lenovo laptops which have conexant codec 0x14f11f86,\nthese 3 laptops also have the noise issue when rebooting, after\nletting the codec enter D3 before rebooting or poweroff, the noise\ndisappers.\n\nInstead of adding a new ID again in the reboot_notify(), let us make\nthis function apply to all conexant codec. In theory make codec enter\nD3 before rebooting or poweroff is harmless, and I tested this change\non a couple of other Lenovo laptops which have different conexant\ncodecs, there is no side effect so far.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Hui Wang \u003chui.wang@canonical.com\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\n" }, { "commit": "d568cb3f935123b4fb42b9029ebcfebc4e4533a2", "tree": "2acfb0b2edd61bd6c077285f6dffaae29e075a03", "parents": [ "500bc2c1f48aa6efad9474fdbe0c7cd8d600484c" ], "author": { "name": "Alistair Francis", "email": "alistair.francis@wdc.com", "time": "Tue Aug 13 16:32:30 2019 -0700" }, "committer": { "name": "Paul Walmsley", "email": "paul.walmsley@sifive.com", "time": "Tue Aug 13 19:26:42 2019 -0700" }, "message": "riscv: defconfig: Update the defconfig\n\nUpdate the defconfig:\n - Add CONFIG_HW_RANDOM\u003dy and CONFIG_HW_RANDOM_VIRTIO\u003dy to enable\n VirtIORNG when running on QEMU\n\nSigned-off-by: Alistair Francis \u003calistair.francis@wdc.com\u003e\nSigned-off-by: Paul Walmsley \u003cpaul.walmsley@sifive.com\u003e" }, { "commit": "500bc2c1f48aa6efad9474fdbe0c7cd8d600484c", "tree": "68fe90c21b1c43ab61aed865ace7758be741f1fe", "parents": [ "eb93685847a9055283d05951c1b205e737f38533" ], "author": { "name": "Alistair Francis", "email": "alistair.francis@wdc.com", "time": "Tue Aug 13 16:32:29 2019 -0700" }, "committer": { "name": "Paul Walmsley", "email": "paul.walmsley@sifive.com", "time": "Tue Aug 13 19:26:38 2019 -0700" }, "message": "riscv: rv32_defconfig: Update the defconfig\n\nUpdate the rv32_defconfig:\n - Add \u0027CONFIG_DEVTMPFS_MOUNT\u003dy\u0027 to match the RISC-V defconfig\n - Add CONFIG_HW_RANDOM\u003dy and CONFIG_HW_RANDOM_VIRTIO\u003dy to enable\n VirtIORNG when running on QEMU\n\nSigned-off-by: Alistair Francis \u003calistair.francis@wdc.com\u003e\nSigned-off-by: Paul Walmsley \u003cpaul.walmsley@sifive.com\u003e" }, { "commit": "4643d67e8cb0b3536ef0ab5cddd1cedc73fa14ad", "tree": "d42fc9f79372aecd26c58acd2b482a1eadcdb2ff", "parents": [ "28360f398778d7623a5ff8a8e90958c0d925e120" ], "author": { "name": "Mike Kravetz", "email": "mike.kravetz@oracle.com", "time": "Tue Aug 13 15:38:00 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:06:53 2019 -0700" }, "message": "hugetlbfs: fix hugetlb page migration/fault race causing SIGBUS\n\nLi Wang discovered that LTP/move_page12 V2 sometimes triggers SIGBUS in\nthe kernel-v5.2.3 testing. This is caused by a race between hugetlb\npage migration and page fault.\n\nIf a hugetlb page can not be allocated to satisfy a page fault, the task\nis sent SIGBUS. This is normal hugetlbfs behavior. A hugetlb fault\nmutex exists to prevent two tasks from trying to instantiate the same\npage. This protects against the situation where there is only one\nhugetlb page, and both tasks would try to allocate. Without the mutex,\none would fail and SIGBUS even though the other fault would be\nsuccessful.\n\nThere is a similar race between hugetlb page migration and fault.\nMigration code will allocate a page for the target of the migration. It\nwill then unmap the original page from all page tables. It does this\nunmap by first clearing the pte and then writing a migration entry. The\npage table lock is held for the duration of this clear and write\noperation. However, the beginnings of the hugetlb page fault code\noptimistically checks the pte without taking the page table lock. If\nclear (as it can be during the migration unmap operation), a hugetlb\npage allocation is attempted to satisfy the fault. Note that the page\nwhich will eventually satisfy this fault was already allocated by the\nmigration code. However, the allocation within the fault path could\nfail which would result in the task incorrectly being sent SIGBUS.\n\nIdeally, we could take the hugetlb fault mutex in the migration code\nwhen modifying the page tables. However, locks must be taken in the\norder of hugetlb fault mutex, page lock, page table lock. This would\nrequire significant rework of the migration code. Instead, the issue is\naddressed in the hugetlb fault code. After failing to allocate a huge\npage, take the page table lock and check for huge_pte_none before\nreturning an error. This is the same check that must be made further in\nthe code even if page allocation is successful.\n\nLink: http://lkml.kernel.org/r/20190808000533.7701-1-mike.kravetz@oracle.com\nFixes: 290408d4a250 (\"hugetlb: hugepage migration core\")\nSigned-off-by: Mike Kravetz \u003cmike.kravetz@oracle.com\u003e\nReported-by: Li Wang \u003cliwang@redhat.com\u003e\nTested-by: Li Wang \u003cliwang@redhat.com\u003e\nReviewed-by: Naoya Horiguchi \u003cn-horiguchi@ah.jp.nec.com\u003e\nAcked-by: Michal Hocko \u003cmhocko@suse.com\u003e\nCc: Cyril Hrubis \u003cchrubis@suse.cz\u003e\nCc: Xishi Qiu \u003cxishi.qiuxishi@alibaba-inc.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "28360f398778d7623a5ff8a8e90958c0d925e120", "tree": "e53062cb83d4b5e8909d63c34b0b4f3aa343f1a1", "parents": [ "a8282608c88e08b1782141026eab61204c1e533f" ], "author": { "name": "Mel Gorman", "email": "mgorman@techsingularity.net", "time": "Tue Aug 13 15:37:57 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:06:53 2019 -0700" }, "message": "mm, vmscan: do not special-case slab reclaim when watermarks are boosted\n\nDave Chinner reported a problem pointing a finger at commit 1c30844d2dfe\n(\"mm: reclaim small amounts of memory when an external fragmentation\nevent occurs\").\n\nThe report is extensive:\n\n https://lore.kernel.org/linux-mm/20190807091858.2857-1-david@fromorbit.com/\n\nand it\u0027s worth recording the most relevant parts (colorful language and\ntypos included).\n\n\tWhen running a simple, steady state 4kB file creation test to\n\tsimulate extracting tarballs larger than memory full of small\n\tfiles into the filesystem, I noticed that once memory fills up\n\tthe cache balance goes to hell.\n\n\tThe workload is creating one dirty cached inode for every dirty\n\tpage, both of which should require a single IO each to clean and\n\treclaim, and creation of inodes is throttled by the rate at which\n\tdirty writeback runs at (via balance dirty pages). Hence the ingest\n\trate of new cached inodes and page cache pages is identical and\n\tsteady. As a result, memory reclaim should quickly find a steady\n\tbalance between page cache and inode caches.\n\n\tThe moment memory fills, the page cache is reclaimed at a much\n\tfaster rate than the inode cache, and evidence suggests that\n\tthe inode cache shrinker is not being called when large batches\n\tof pages are being reclaimed. In roughly the same time period\n\tthat it takes to fill memory with 50% pages and 50% slab caches,\n\tmemory reclaim reduces the page cache down to just dirty pages\n\tand slab caches fill the entirety of memory.\n\n\tThe LRU is largely full of dirty pages, and we\u0027re getting spikes\n\tof random writeback from memory reclaim so it\u0027s all going to shit.\n\tBehaviour never recovers, the page cache remains pinned at just\n\tdirty pages, and nothing I could tune would make any difference.\n\tvfs_cache_pressure makes no difference - I would set it so high\n\tit should trim the entire inode caches in a single pass, yet it\n\tdidn\u0027t do anything. It was clear from tracing and live telemetry\n\tthat the shrinkers were pretty much not running except when\n\tthere was absolutely no memory free at all, and then they did\n\tthe minimum necessary to free memory to make progress.\n\n\tSo I went looking at the code, trying to find places where pages\n\tgot reclaimed and the shrinkers weren\u0027t called. There\u0027s only one\n\t- kswapd doing boosted reclaim as per commit 1c30844d2dfe (\"mm:\n\treclaim small amounts of memory when an external fragmentation\n\tevent occurs\").\n\nThe watermark boosting introduced by the commit is triggered in response\nto an allocation \"fragmentation event\". The boosting was not intended\nto target THP specifically and triggers even if THP is disabled.\nHowever, with Dave\u0027s perfectly reasonable workload, fragmentation events\ncan be very common given the ratio of slab to page cache allocations so\nboosting remains active for long periods of time.\n\nAs high-order allocations might use compaction and compaction cannot\nmove slab pages the decision was made in the commit to special-case\nkswapd when watermarks are boosted -- kswapd avoids reclaiming slab as\nreclaiming slab does not directly help compaction.\n\nAs Dave notes, this decision means that slab can be artificially\nprotected for long periods of time and messes up the balance with slab\nand page caches.\n\nRemoving the special casing can still indirectly help avoid\nfragmentation by avoiding fragmentation-causing events due to slab\nallocation as pages from a slab pageblock will have some slab objects\nfreed. Furthermore, with the special casing, reclaim behaviour is\nunpredictable as kswapd sometimes examines slab and sometimes does not\nin a manner that is tricky to tune or analyse.\n\nThis patch removes the special casing. The downside is that this is not\na universal performance win. Some benchmarks that depend on the\nresidency of data when rereading metadata may see a regression when slab\nreclaim is restored to its original behaviour. Similarly, some\nbenchmarks that only read-once or write-once may perform better when\npage reclaim is too aggressive. The primary upside is that slab\nshrinker is less surprising (arguably more sane but that\u0027s a matter of\nopinion), behaves consistently regardless of the fragmentation state of\nthe system and properly obeys VM sysctls.\n\nA fsmark benchmark configuration was constructed similar to what Dave\nreported and is codified by the mmtest configuration\nconfig-io-fsmark-small-file-stream. It was evaluated on a 1-socket\nmachine to avoid dealing with NUMA-related issues and the timing of\nreclaim. The storage was an SSD Samsung Evo and a fresh trimmed XFS\nfilesystem was used for the test data.\n\nThis is not an exact replication of Dave\u0027s setup. The configuration\nscales its parameters depending on the memory size of the SUT to behave\nsimilarly across machines. The parameters mean the first sample\nreported by fs_mark is using 50% of RAM which will barely be throttled\nand look like a big outlier. Dave used fake NUMA to have multiple\nkswapd instances which I didn\u0027t replicate. Finally, the number of\niterations differ from Dave\u0027s test as the target disk was not large\nenough. While not identical, it should be representative.\n\n fsmark\n 5.3.0-rc3 5.3.0-rc3\n vanilla shrinker-v1r1\n Min 1-files/sec 4444.80 ( 0.00%) 4765.60 ( 7.22%)\n 1st-qrtle 1-files/sec 5005.10 ( 0.00%) 5091.70 ( 1.73%)\n 2nd-qrtle 1-files/sec 4917.80 ( 0.00%) 4855.60 ( -1.26%)\n 3rd-qrtle 1-files/sec 4667.40 ( 0.00%) 4831.20 ( 3.51%)\n Max-1 1-files/sec 11421.50 ( 0.00%) 9999.30 ( -12.45%)\n Max-5 1-files/sec 11421.50 ( 0.00%) 9999.30 ( -12.45%)\n Max-10 1-files/sec 11421.50 ( 0.00%) 9999.30 ( -12.45%)\n Max-90 1-files/sec 4649.60 ( 0.00%) 4780.70 ( 2.82%)\n Max-95 1-files/sec 4491.00 ( 0.00%) 4768.20 ( 6.17%)\n Max-99 1-files/sec 4491.00 ( 0.00%) 4768.20 ( 6.17%)\n Max 1-files/sec 11421.50 ( 0.00%) 9999.30 ( -12.45%)\n Hmean 1-files/sec 5004.75 ( 0.00%) 5075.96 ( 1.42%)\n Stddev 1-files/sec 1778.70 ( 0.00%) 1369.66 ( 23.00%)\n CoeffVar 1-files/sec 33.70 ( 0.00%) 26.05 ( 22.71%)\n BHmean-99 1-files/sec 5053.72 ( 0.00%) 5101.52 ( 0.95%)\n BHmean-95 1-files/sec 5053.72 ( 0.00%) 5101.52 ( 0.95%)\n BHmean-90 1-files/sec 5107.05 ( 0.00%) 5131.41 ( 0.48%)\n BHmean-75 1-files/sec 5208.45 ( 0.00%) 5206.68 ( -0.03%)\n BHmean-50 1-files/sec 5405.53 ( 0.00%) 5381.62 ( -0.44%)\n BHmean-25 1-files/sec 6179.75 ( 0.00%) 6095.14 ( -1.37%)\n\n 5.3.0-rc3 5.3.0-rc3\n vanillashrinker-v1r1\n Duration User 501.82 497.29\n Duration System 4401.44 4424.08\n Duration Elapsed 8124.76 8358.05\n\nThis is showing a slight skew for the max result representing a large\noutlier for the 1st, 2nd and 3rd quartile are similar indicating that\nthe bulk of the results show little difference. Note that an earlier\nversion of the fsmark configuration showed a regression but that\nincluded more samples taken while memory was still filling.\n\nNote that the elapsed time is higher. Part of this is that the\nconfiguration included time to delete all the test files when the test\ncompletes -- the test automation handles the possibility of testing\nfsmark with multiple thread counts. Without the patch, many of these\nobjects would be memory resident which is part of what the patch is\naddressing.\n\nThere are other important observations that justify the patch.\n\n1. With the vanilla kernel, the number of dirty pages in the system is\n very low for much of the test. With this patch, dirty pages is\n generally kept at 10% which matches vm.dirty_background_ratio which\n is normal expected historical behaviour.\n\n2. With the vanilla kernel, the ratio of Slab/Pagecache is close to\n 0.95 for much of the test i.e. Slab is being left alone and\n dominating memory consumption. With the patch applied, the ratio\n varies between 0.35 and 0.45 with the bulk of the measured ratios\n roughly half way between those values. This is a different balance to\n what Dave reported but it was at least consistent.\n\n3. Slabs are scanned throughout the entire test with the patch applied.\n The vanille kernel has periods with no scan activity and then\n relatively massive spikes.\n\n4. Without the patch, kswapd scan rates are very variable. With the\n patch, the scan rates remain quite steady.\n\n4. Overall vmstats are closer to normal expectations\n\n\t 5.3.0-rc3 5.3.0-rc3\n\t vanilla shrinker-v1r1\n Ops Direct pages scanned 99388.00 328410.00\n Ops Kswapd pages scanned 45382917.00 33451026.00\n Ops Kswapd pages reclaimed 30869570.00 25239655.00\n Ops Direct pages reclaimed 74131.00 5830.00\n Ops Kswapd efficiency % 68.02 75.45\n Ops Kswapd velocity 5585.75 4002.25\n Ops Page reclaim immediate 1179721.00 430927.00\n Ops Slabs scanned 62367361.00 73581394.00\n Ops Direct inode steals 2103.00 1002.00\n Ops Kswapd inode steals 570180.00 5183206.00\n\n\to Vanilla kernel is hitting direct reclaim more frequently,\n\t not very much in absolute terms but the fact the patch\n\t reduces it is interesting\n\to \"Page reclaim immediate\" in the vanilla kernel indicates\n\t dirty pages are being encountered at the tail of the LRU.\n\t This is generally bad and means in this case that the LRU\n\t is not long enough for dirty pages to be cleaned by the\n\t background flush in time. This is much reduced by the\n\t patch.\n\to With the patch, kswapd is reclaiming 10 times more slab\n\t pages than with the vanilla kernel. This is indicative\n\t of the watermark boosting over-protecting slab\n\nA more complete set of tests were run that were part of the basis for\nintroducing boosting and while there are some differences, they are well\nwithin tolerances.\n\nBottom line, the special casing kswapd to avoid slab behaviour is\nunpredictable and can lead to abnormal results for normal workloads.\n\nThis patch restores the expected behaviour that slab and page cache is\nbalanced consistently for a workload with a steady allocation ratio of\nslab/pagecache pages. It also means that if there are workloads that\nfavour the preservation of slab over pagecache that it can be tuned via\nvm.vfs_cache_pressure where as the vanilla kernel effectively ignores\nthe parameter when boosting is active.\n\nLink: http://lkml.kernel.org/r/20190808182946.GM2739@techsingularity.net\nFixes: 1c30844d2dfe (\"mm: reclaim small amounts of memory when an external fragmentation event occurs\")\nSigned-off-by: Mel Gorman \u003cmgorman@techsingularity.net\u003e\nReviewed-by: Dave Chinner \u003cdchinner@redhat.com\u003e\nAcked-by: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: Michal Hocko \u003cmhocko@kernel.org\u003e\nCc: \u003cstable@vger.kernel.org\u003e\t[5.0+]\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "a8282608c88e08b1782141026eab61204c1e533f", "tree": "d1705bf3b5d7429bb8c5027eaeae49e49bee8465", "parents": [ "92717d429b38e4f9f934eed7e605cc42858f1839" ], "author": { "name": "Andrea Arcangeli", "email": "aarcange@redhat.com", "time": "Tue Aug 13 15:37:53 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:06:52 2019 -0700" }, "message": "Revert \"mm, thp: restore node-local hugepage allocations\"\n\nThis reverts commit 2f0799a0ffc033b (\"mm, thp: restore node-local\nhugepage allocations\").\n\ncommit 2f0799a0ffc033b was rightfully applied to avoid the risk of a\nsevere regression that was reported by the kernel test robot at the end\nof the merge window. Now we understood the regression was a false\npositive and was caused by a significant increase in fairness during a\nswap trashing benchmark. So it\u0027s safe to re-apply the fix and continue\nimproving the code from there. The benchmark that reported the\nregression is very useful, but it provides a meaningful result only when\nthere is no significant alteration in fairness during the workload. The\nremoval of __GFP_THISNODE increased fairness.\n\n__GFP_THISNODE cannot be used in the generic page faults path for new\nmemory allocations under the MPOL_DEFAULT mempolicy, or the allocation\nbehavior significantly deviates from what the MPOL_DEFAULT semantics are\nsupposed to be for THP and 4k allocations alike.\n\nSetting THP defrag to \"always\" or using MADV_HUGEPAGE (with THP defrag\nset to \"madvise\") has never meant to provide an implicit MPOL_BIND on\nthe \"current\" node the task is running on, causing swap storms and\nproviding a much more aggressive behavior than even zone_reclaim_node \u003d\n3.\n\nAny workload who could have benefited from __GFP_THISNODE has now to\nenable zone_reclaim_mode\u003d1||2||3. __GFP_THISNODE implicitly provided\nthe zone_reclaim_mode behavior, but it only did so if THP was enabled:\nif THP was disabled, there would have been no chance to get any 4k page\nfrom the current node if the current node was full of pagecache, which\nfurther shows how this __GFP_THISNODE was misplaced in MADV_HUGEPAGE.\nMADV_HUGEPAGE has never been intended to provide any zone_reclaim_mode\nsemantics, in fact the two are orthogonal, zone_reclaim_mode \u003d 1|2|3\nmust work exactly the same with MADV_HUGEPAGE set or not.\n\nThe performance characteristic of memory depends on the hardware\ndetails. The numbers below are obtained on Naples/EPYC architecture and\nthe N/A projection extends them to show what we should aim for in the\nfuture as a good THP NUMA locality default. The benchmark used\nexercises random memory seeks (note: the cost of the page faults is not\npart of the measurement).\n\n D0 THP | D0 4k | D1 THP | D1 4k | D2 THP | D2 4k | D3 THP | D3 4k | ...\n 0% | +43% | +45% | +106% | +131% | +224% | N/A | N/A\n\nD0 means distance zero (i.e. local memory), D1 means distance one (i.e.\nintra socket memory), D2 means distance two (i.e. inter socket memory),\netc...\n\nFor the guest physical memory allocated by qemu and for guest mode\nkernel the performance characteristic of RAM is more complex and an\nideal default could be:\n\n D0 THP | D1 THP | D0 4k | D2 THP | D1 4k | D3 THP | D2 4k | D3 4k | ...\n 0% | +58% | +101% | N/A | +222% | N/A | N/A | N/A\n\nNOTE: the N/A are projections and haven\u0027t been measured yet, the\nmeasurement in this case is done on a 1950x with only two NUMA nodes.\nThe THP case here means THP was used both in the host and in the guest.\n\nAfter applying this commit the THP NUMA locality order that we\u0027ll get\nout of MADV_HUGEPAGE is this:\n\n D0 THP | D1 THP | D2 THP | D3 THP | ... | D0 4k | D1 4k | D2 4k | D3 4k | ...\n\nBefore this commit it was:\n\n D0 THP | D0 4k | D1 4k | D2 4k | D3 4k | ...\n\nEven if we ignore the breakage of large workloads that can\u0027t fit in a\nsingle node that the __GFP_THISNODE implicit \"current node\" mbind\ncaused, the THP NUMA locality order provided by __GFP_THISNODE was still\nnot the one we shall aim for in the long term (i.e. the first one at\nthe top).\n\nAfter this commit is applied, we can introduce a new allocator multi\norder API and to replace those two alloc_pages_vmas calls in the page\nfault path, with a single multi order call:\n\n unsigned int order \u003d (1 \u003c\u003c HPAGE_PMD_ORDER) | (1 \u003c\u003c 0);\n page \u003d alloc_pages_multi_order(..., \u0026order);\n if (!page)\n \tgoto out;\n if (!(order \u0026 (1 \u003c\u003c 0))) {\n \tVM_WARN_ON(order !\u003d 1 \u003c\u003c HPAGE_PMD_ORDER);\n \t/* THP fault */\n } else {\n \tVM_WARN_ON(order !\u003d 1 \u003c\u003c 0);\n \t/* 4k fallback */\n }\n\nThe page allocator logic has to be altered so that when it fails on any\nzone with order 9, it has to try again with a order 0 before falling\nback to the next zone in the zonelist.\n\nAfter that we need to do more measurements and evaluate if adding an\nopt-in feature for guest mode is worth it, to swap \"DN 4k | DN+1 THP\"\nwith \"DN+1 THP | DN 4k\" at every NUMA distance crossing.\n\nLink: http://lkml.kernel.org/r/20190503223146.2312-3-aarcange@redhat.com\nSigned-off-by: Andrea Arcangeli \u003caarcange@redhat.com\u003e\nAcked-by: Michal Hocko \u003cmhocko@suse.com\u003e\nAcked-by: Mel Gorman \u003cmgorman@suse.de\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: David Rientjes \u003crientjes@google.com\u003e\nCc: Zi Yan \u003czi.yan@cs.rutgers.edu\u003e\nCc: Stefan Priebe - Profihost AG \u003cs.priebe@profihost.ag\u003e\nCc: \"Kirill A. Shutemov\" \u003ckirill@shutemov.name\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "92717d429b38e4f9f934eed7e605cc42858f1839", "tree": "2b5cea9402de2d0ef9a8c1deff7a04a816c4878b", "parents": [ "0cfaee2af3a04c0be5f056cebe5f804dedc59a43" ], "author": { "name": "Andrea Arcangeli", "email": "aarcange@redhat.com", "time": "Tue Aug 13 15:37:50 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:06:52 2019 -0700" }, "message": "Revert \"Revert \"mm, thp: consolidate THP gfp handling into alloc_hugepage_direct_gfpmask\"\"\n\nPatch series \"reapply: relax __GFP_THISNODE for MADV_HUGEPAGE mappings\".\n\nThe fixes for what was originally reported as \"pathological THP\nbehavior\" we rightfully reverted to be sure not to introduced\nregressions at end of a merge window after a severe regression report\nfrom the kernel bot. We can safely re-apply them now that we had time\nto analyze the problem.\n\nThe mm process worked fine, because the good fixes were eventually\ncommitted upstream without excessive delay.\n\nThe regression reported by the kernel bot however forced us to revert\nthe good fixes to be sure not to introduce regressions and to give us\nthe time to analyze the issue further. The silver lining is that this\nextra time allowed to think more at this issue and also plan for a\nfuture direction to improve things further in terms of THP NUMA\nlocality.\n\nThis patch (of 2):\n\nThis reverts commit 356ff8a9a78fb35d (\"Revert \"mm, thp: consolidate THP\ngfp handling into alloc_hugepage_direct_gfpmask\"). So it reapplies\n89c83fb539f954 (\"mm, thp: consolidate THP gfp handling into\nalloc_hugepage_direct_gfpmask\").\n\nConsolidation of the THP allocation flags at the same place was meant to\nbe a clean up to easier handle otherwise scattered code which is\nimposing a maintenance burden. There were no real problems observed\nwith the gfp mask consolidation but the reversion was rushed through\nwithout a larger consensus regardless.\n\nThis patch brings the consolidation back because this should make the\nlong term maintainability easier as well as it should allow future\nchanges to be less error prone.\n\n[mhocko@kernel.org: changelog additions]\nLink: http://lkml.kernel.org/r/20190503223146.2312-2-aarcange@redhat.com\nSigned-off-by: Andrea Arcangeli \u003caarcange@redhat.com\u003e\nAcked-by: Michal Hocko \u003cmhocko@suse.com\u003e\nCc: Mel Gorman \u003cmgorman@techsingularity.net\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: David Rientjes \u003crientjes@google.com\u003e\nCc: Zi Yan \u003czi.yan@cs.rutgers.edu\u003e\nCc: Stefan Priebe - Profihost AG \u003cs.priebe@profihost.ag\u003e\nCc: \"Kirill A. Shutemov\" \u003ckirill@shutemov.name\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "0cfaee2af3a04c0be5f056cebe5f804dedc59a43", "tree": "d41868a7d16e527f249c18880e62c572ac127286", "parents": [ "6a2aeab59e97101b4001bac84388fc49a992f87e" ], "author": { "name": "Qian Cai", "email": "cai@lca.pw", "time": "Tue Aug 13 15:37:47 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:06:52 2019 -0700" }, "message": "include/asm-generic/5level-fixup.h: fix variable \u0027p4d\u0027 set but not used\n\nA compiler throws a warning on an arm64 system since commit 9849a5697d3d\n(\"arch, mm: convert all architectures to use 5level-fixup.h\"),\n\n mm/kasan/init.c: In function \u0027kasan_free_p4d\u0027:\n mm/kasan/init.c:344:9: warning: variable \u0027p4d\u0027 set but not used [-Wunused-but-set-variable]\n p4d_t *p4d;\n ^~~\n\nbecause p4d_none() in \"5level-fixup.h\" is compiled away while it is a\nstatic inline function in \"pgtable-nopud.h\".\n\nHowever, if converted p4d_none() to a static inline there, powerpc would\nbe unhappy as it reads those in assembler language in\n\"arch/powerpc/include/asm/book3s/64/pgtable.h\", so it needs to skip\nassembly include for the static inline C function.\n\nWhile at it, converted a few similar functions to be consistent with the\nones in \"pgtable-nopud.h\".\n\nLink: http://lkml.kernel.org/r/20190806232917.881-1-cai@lca.pw\nSigned-off-by: Qian Cai \u003ccai@lca.pw\u003e\nAcked-by: Arnd Bergmann \u003carnd@arndb.de\u003e\nCc: Kirill A. Shutemov \u003ckirill.shutemov@linux.intel.com\u003e\nCc: Michal Hocko \u003cmhocko@suse.com\u003e\nCc: Jason Gunthorpe \u003cjgg@ziepe.ca\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "6a2aeab59e97101b4001bac84388fc49a992f87e", "tree": "f2a3b5188de3354b5f53d1b605270407d6b6fb82", "parents": [ "ec9f02384f6053f2a5417e82b65078edc5364a8d" ], "author": { "name": "NeilBrown", "email": "neilb@suse.com", "time": "Tue Aug 13 15:37:44 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:06:52 2019 -0700" }, "message": "seq_file: fix problem when seeking mid-record\n\nIf you use lseek or similar (e.g. pread) to access a location in a\nseq_file file that is within a record, rather than at a record boundary,\nthen the first read will return the remainder of the record, and the\nsecond read will return the whole of that same record (instead of the\nnext record). When seeking to a record boundary, the next record is\ncorrectly returned.\n\nThis bug was introduced by a recent patch (identified below). Before\nthat patch, seq_read() would increment m-\u003eindex when the last of the\nbuffer was returned (m-\u003ecount \u003d\u003d 0). After that patch, we rely on\n-\u003enext to increment m-\u003eindex after filling the buffer - but there was\none place where that didn\u0027t happen.\n\nLink: https://lkml.kernel.org/lkml/877e7xl029.fsf@notabene.neil.brown.name/\nFixes: 1f4aace60b0e (\"fs/seq_file.c: simplify seq_file iteration code and interface\")\nSigned-off-by: NeilBrown \u003cneilb@suse.com\u003e\nReported-by: Sergei Turchanov \u003cturchanov@farpost.com\u003e\nTested-by: Sergei Turchanov \u003cturchanov@farpost.com\u003e\nCc: Alexander Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: Markus Elfring \u003cMarkus.Elfring@web.de\u003e\nCc: \u003cstable@vger.kernel.org\u003e\t[4.19+]\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "ec9f02384f6053f2a5417e82b65078edc5364a8d", "tree": "18f6d560869e620c21dacd71353f235c6a13f00a", "parents": [ "951531691c4bcaa59f56a316e018bc2ff1ddf855" ], "author": { "name": "Roman Gushchin", "email": "guro@fb.com", "time": "Tue Aug 13 15:37:41 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:06:52 2019 -0700" }, "message": "mm: workingset: fix vmstat counters for shadow nodes\n\nMemcg counters for shadow nodes are broken because the memcg pointer is\nobtained in a wrong way. The following approach is used:\n virt_to_page(xa_node)-\u003emem_cgroup\n\nSince commit 4d96ba353075 (\"mm: memcg/slab: stop setting\npage-\u003emem_cgroup pointer for slab pages\") page-\u003emem_cgroup pointer isn\u0027t\nset for slab pages, so memcg_from_slab_page() should be used instead.\n\nAlso I doubt that it ever worked correctly: virt_to_head_page() should\nbe used instead of virt_to_page(). Otherwise objects residing on tail\npages are not accounted, because only the head page contains a valid\nmem_cgroup pointer. That was a case since the introduction of these\ncounters by the commit 68d48e6a2df5 (\"mm: workingset: add vmstat counter\nfor shadow nodes\").\n\nLink: http://lkml.kernel.org/r/20190801233532.138743-1-guro@fb.com\nFixes: 4d96ba353075 (\"mm: memcg/slab: stop setting page-\u003emem_cgroup pointer for slab pages\")\nSigned-off-by: Roman Gushchin \u003cguro@fb.com\u003e\nAcked-by: Johannes Weiner \u003channes@cmpxchg.org\u003e\nCc: Vladimir Davydov \u003cvdavydov.dev@gmail.com\u003e\nCc: Shakeel Butt \u003cshakeelb@google.com\u003e\nCc: Michal Hocko \u003cmhocko@suse.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "951531691c4bcaa59f56a316e018bc2ff1ddf855", "tree": "a26a939586580ccb3c570a558a58f138c55c19af", "parents": [ "fcf3a5b62f431ce9feeac73afbe128b7b6395dbc" ], "author": { "name": "Isaac J. Manjarres", "email": "isaacm@codeaurora.org", "time": "Tue Aug 13 15:37:37 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:06:52 2019 -0700" }, "message": "mm/usercopy: use memory range to be accessed for wraparound check\n\nCurrently, when checking to see if accessing n bytes starting at address\n\"ptr\" will cause a wraparound in the memory addresses, the check in\ncheck_bogus_address() adds an extra byte, which is incorrect, as the\nrange of addresses that will be accessed is [ptr, ptr + (n - 1)].\n\nThis can lead to incorrectly detecting a wraparound in the memory\naddress, when trying to read 4 KB from memory that is mapped to the the\nlast possible page in the virtual address space, when in fact, accessing\nthat range of memory would not cause a wraparound to occur.\n\nUse the memory range that will actually be accessed when considering if\naccessing a certain amount of bytes will cause the memory address to\nwrap around.\n\nLink: http://lkml.kernel.org/r/1564509253-23287-1-git-send-email-isaacm@codeaurora.org\nFixes: f5509cc18daa (\"mm: Hardened usercopy\")\nSigned-off-by: Prasad Sodagudi \u003cpsodagud@codeaurora.org\u003e\nSigned-off-by: Isaac J. Manjarres \u003cisaacm@codeaurora.org\u003e\nCo-developed-by: Prasad Sodagudi \u003cpsodagud@codeaurora.org\u003e\nReviewed-by: William Kucharski \u003cwilliam.kucharski@oracle.com\u003e\nAcked-by: Kees Cook \u003ckeescook@chromium.org\u003e\nCc: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nCc: Trilok Soni \u003ctsoni@codeaurora.org\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "fcf3a5b62f431ce9feeac73afbe128b7b6395dbc", "tree": "dd71cf52ac4dd8a03e3516c37e2e7499f920c52e", "parents": [ "5336e52c9e46afa69b7a85a0a091f0e4daa23d6e" ], "author": { "name": "Catalin Marinas", "email": "catalin.marinas@arm.com", "time": "Tue Aug 13 15:37:34 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:06:52 2019 -0700" }, "message": "mm: kmemleak: disable early logging in case of error\n\nIf an error occurs during kmemleak_init() (e.g. kmem cache cannot be\ncreated), kmemleak is disabled but kmemleak_early_log remains enabled.\nSubsequently, when the .init.text section is freed, the log_early()\nfunction no longer exists. To avoid a page fault in such scenario,\nensure that kmemleak_disable() also disables early logging.\n\nLink: http://lkml.kernel.org/r/20190731152302.42073-1-catalin.marinas@arm.com\nSigned-off-by: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nReported-by: Qian Cai \u003ccai@lca.pw\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "5336e52c9e46afa69b7a85a0a091f0e4daa23d6e", "tree": "a6b99e01556273ffb8aca36e647072aaafb34804", "parents": [ "54a83d6bcbf8f4700013766b974bf9190d40b689" ], "author": { "name": "Kuppuswamy Sathyanarayanan", "email": "sathyanarayanan.kuppuswamy@linux.intel.com", "time": "Tue Aug 13 15:37:31 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:06:52 2019 -0700" }, "message": "mm/vmalloc.c: fix percpu free VM area search criteria\n\nRecent changes to the vmalloc code by commit 68ad4a330433\n(\"mm/vmalloc.c: keep track of free blocks for vmap allocation\") can\ncause spurious percpu allocation failures. These, in turn, can result\nin panic()s in the slub code. One such possible panic was reported by\nDave Hansen in following link https://lkml.org/lkml/2019/6/19/939.\nAnother related panic observed is,\n\n RIP: 0033:0x7f46f7441b9b\n Call Trace:\n dump_stack+0x61/0x80\n pcpu_alloc.cold.30+0x22/0x4f\n mem_cgroup_css_alloc+0x110/0x650\n cgroup_apply_control_enable+0x133/0x330\n cgroup_mkdir+0x41b/0x500\n kernfs_iop_mkdir+0x5a/0x90\n vfs_mkdir+0x102/0x1b0\n do_mkdirat+0x7d/0xf0\n do_syscall_64+0x5b/0x180\n entry_SYSCALL_64_after_hwframe+0x44/0xa9\n\nVMALLOC memory manager divides the entire VMALLOC space (VMALLOC_START\nto VMALLOC_END) into multiple VM areas (struct vm_areas), and it mainly\nuses two lists (vmap_area_list \u0026 free_vmap_area_list) to track the used\nand free VM areas in VMALLOC space. And pcpu_get_vm_areas(offsets[],\nsizes[], nr_vms, align) function is used for allocating congruent VM\nareas for percpu memory allocator. In order to not conflict with\nVMALLOC users, pcpu_get_vm_areas allocates VM areas near the end of the\nVMALLOC space. So the search for free vm_area for the given requirement\nstarts near VMALLOC_END and moves upwards towards VMALLOC_START.\n\nPrior to commit 68ad4a330433, the search for free vm_area in\npcpu_get_vm_areas() involves following two main steps.\n\nStep 1:\n Find a aligned \"base\" adress near VMALLOC_END.\n va \u003d free vm area near VMALLOC_END\nStep 2:\n Loop through number of requested vm_areas and check,\n Step 2.1:\n if (base \u003c VMALLOC_START)\n 1. fail with error\n Step 2.2:\n // end is offsets[area] + sizes[area]\n if (base + end \u003e va-\u003evm_end)\n 1. Move the base downwards and repeat Step 2\n Step 2.3:\n if (base + start \u003c va-\u003evm_start)\n 1. Move to previous free vm_area node, find aligned\n base address and repeat Step 2\n\nBut Commit 68ad4a330433 removed Step 2.2 and modified Step 2.3 as below:\n\n Step 2.3:\n if (base + start \u003c va-\u003evm_start || base + end \u003e va-\u003evm_end)\n 1. Move to previous free vm_area node, find aligned\n base address and repeat Step 2\n\nAbove change is the root cause of spurious percpu memory allocation\nfailures. For example, consider a case where a relatively large vm_area\n(~ 30 TB) was ignored in free vm_area search because it did not pass the\nbase + end \u003c vm-\u003evm_end boundary check. Ignoring such large free\nvm_area\u0027s would lead to not finding free vm_area within boundary of\nVMALLOC_start to VMALLOC_END which in turn leads to allocation failures.\n\nSo modify the search algorithm to include Step 2.2.\n\nLink: http://lkml.kernel.org/r/20190729232139.91131-1-sathyanarayanan.kuppuswamy@linux.intel.com\nFixes: 68ad4a330433 (\"mm/vmalloc.c: keep track of free blocks for vmap allocation\")\nSigned-off-by: Kuppuswamy Sathyanarayanan \u003csathyanarayanan.kuppuswamy@linux.intel.com\u003e\nReported-by: Dave Hansen \u003cdave.hansen@intel.com\u003e\nAcked-by: Dennis Zhou \u003cdennis@kernel.org\u003e\nReviewed-by: Uladzislau Rezki (Sony) \u003curezki@gmail.com\u003e\nCc: Roman Gushchin \u003cguro@fb.com\u003e\nCc: sathyanarayanan kuppuswamy \u003csathyanarayanan.kuppuswamy@linux.intel.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "54a83d6bcbf8f4700013766b974bf9190d40b689", "tree": "83df2e0b420d00473ae5625373d3724f705ab9ad", "parents": [ "b997052bc3ac444a0bceab1093aff7ae71ed419e" ], "author": { "name": "Miles Chen", "email": "miles.chen@mediatek.com", "time": "Tue Aug 13 15:37:28 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:06:52 2019 -0700" }, "message": "mm/memcontrol.c: fix use after free in mem_cgroup_iter()\n\nThis patch is sent to report an use after free in mem_cgroup_iter()\nafter merging commit be2657752e9e (\"mm: memcg: fix use after free in\nmem_cgroup_iter()\").\n\nI work with android kernel tree (4.9 \u0026 4.14), and commit be2657752e9e\n(\"mm: memcg: fix use after free in mem_cgroup_iter()\") has been merged\nto the trees. However, I can still observe use after free issues\naddressed in the commit be2657752e9e. (on low-end devices, a few times\nthis month)\n\nbacktrace:\n css_tryget \u003c- crash here\n mem_cgroup_iter\n shrink_node\n shrink_zones\n do_try_to_free_pages\n try_to_free_pages\n __perform_reclaim\n __alloc_pages_direct_reclaim\n __alloc_pages_slowpath\n __alloc_pages_nodemask\n\nTo debug, I poisoned mem_cgroup before freeing it:\n\n static void __mem_cgroup_free(struct mem_cgroup *memcg)\n for_each_node(node)\n free_mem_cgroup_per_node_info(memcg, node);\n free_percpu(memcg-\u003estat);\n + /* poison memcg before freeing it */\n + memset(memcg, 0x78, sizeof(struct mem_cgroup));\n kfree(memcg);\n }\n\nThe coredump shows the position\u003d0xdbbc2a00 is freed.\n\n (gdb) p/x ((struct mem_cgroup_per_node *)0xe5009e00)-\u003eiter[8]\n $13 \u003d {position \u003d 0xdbbc2a00, generation \u003d 0x2efd}\n\n 0xdbbc2a00: 0xdbbc2e00 0x00000000 0xdbbc2800 0x00000100\n 0xdbbc2a10: 0x00000200 0x78787878 0x00026218 0x00000000\n 0xdbbc2a20: 0xdcad6000 0x00000001 0x78787800 0x00000000\n 0xdbbc2a30: 0x78780000 0x00000000 0x0068fb84 0x78787878\n 0xdbbc2a40: 0x78787878 0x78787878 0x78787878 0xe3fa5cc0\n 0xdbbc2a50: 0x78787878 0x78787878 0x00000000 0x00000000\n 0xdbbc2a60: 0x00000000 0x00000000 0x00000000 0x00000000\n 0xdbbc2a70: 0x00000000 0x00000000 0x00000000 0x00000000\n 0xdbbc2a80: 0x00000000 0x00000000 0x00000000 0x00000000\n 0xdbbc2a90: 0x00000001 0x00000000 0x00000000 0x00100000\n 0xdbbc2aa0: 0x00000001 0xdbbc2ac8 0x00000000 0x00000000\n 0xdbbc2ab0: 0x00000000 0x00000000 0x00000000 0x00000000\n 0xdbbc2ac0: 0x00000000 0x00000000 0xe5b02618 0x00001000\n 0xdbbc2ad0: 0x00000000 0x78787878 0x78787878 0x78787878\n 0xdbbc2ae0: 0x78787878 0x78787878 0x78787878 0x78787878\n 0xdbbc2af0: 0x78787878 0x78787878 0x78787878 0x78787878\n 0xdbbc2b00: 0x78787878 0x78787878 0x78787878 0x78787878\n 0xdbbc2b10: 0x78787878 0x78787878 0x78787878 0x78787878\n 0xdbbc2b20: 0x78787878 0x78787878 0x78787878 0x78787878\n 0xdbbc2b30: 0x78787878 0x78787878 0x78787878 0x78787878\n 0xdbbc2b40: 0x78787878 0x78787878 0x78787878 0x78787878\n 0xdbbc2b50: 0x78787878 0x78787878 0x78787878 0x78787878\n 0xdbbc2b60: 0x78787878 0x78787878 0x78787878 0x78787878\n 0xdbbc2b70: 0x78787878 0x78787878 0x78787878 0x78787878\n 0xdbbc2b80: 0x78787878 0x78787878 0x00000000 0x78787878\n 0xdbbc2b90: 0x78787878 0x78787878 0x78787878 0x78787878\n 0xdbbc2ba0: 0x78787878 0x78787878 0x78787878 0x78787878\n\nIn the reclaim path, try_to_free_pages() does not setup\nsc.target_mem_cgroup and sc is passed to do_try_to_free_pages(), ...,\nshrink_node().\n\nIn mem_cgroup_iter(), root is set to root_mem_cgroup because\nsc-\u003etarget_mem_cgroup is NULL. It is possible to assign a memcg to\nroot_mem_cgroup.nodeinfo.iter in mem_cgroup_iter().\n\n try_to_free_pages\n \tstruct scan_control sc \u003d {...}, target_mem_cgroup is 0x0;\n do_try_to_free_pages\n shrink_zones\n shrink_node\n \t mem_cgroup *root \u003d sc-\u003etarget_mem_cgroup;\n \t memcg \u003d mem_cgroup_iter(root, NULL, \u0026reclaim);\n mem_cgroup_iter()\n \tif (!root)\n \t\troot \u003d root_mem_cgroup;\n \t...\n\n \tcss \u003d css_next_descendant_pre(css, \u0026root-\u003ecss);\n \tmemcg \u003d mem_cgroup_from_css(css);\n \tcmpxchg(\u0026iter-\u003eposition, pos, memcg);\n\nMy device uses memcg non-hierarchical mode. When we release a memcg:\ninvalidate_reclaim_iterators() reaches only dead_memcg and its parents.\nIf non-hierarchical mode is used, invalidate_reclaim_iterators() never\nreaches root_mem_cgroup.\n\n static void invalidate_reclaim_iterators(struct mem_cgroup *dead_memcg)\n {\n struct mem_cgroup *memcg \u003d dead_memcg;\n\n for (; memcg; memcg \u003d parent_mem_cgroup(memcg)\n ...\n }\n\nSo the use after free scenario looks like:\n\n CPU1\t\t\t\t\t\tCPU2\n\n try_to_free_pages\n do_try_to_free_pages\n shrink_zones\n shrink_node\n mem_cgroup_iter()\n if (!root)\n \troot \u003d root_mem_cgroup;\n ...\n css \u003d css_next_descendant_pre(css, \u0026root-\u003ecss);\n memcg \u003d mem_cgroup_from_css(css);\n cmpxchg(\u0026iter-\u003eposition, pos, memcg);\n\n \t\t\t\tinvalidate_reclaim_iterators(memcg);\n \t\t\t\t...\n \t\t\t\t__mem_cgroup_free()\n \t\t\t\t\tkfree(memcg);\n\n try_to_free_pages\n do_try_to_free_pages\n shrink_zones\n shrink_node\n mem_cgroup_iter()\n if (!root)\n \troot \u003d root_mem_cgroup;\n ...\n mz \u003d mem_cgroup_nodeinfo(root, reclaim-\u003epgdat-\u003enode_id);\n iter \u003d \u0026mz-\u003eiter[reclaim-\u003epriority];\n pos \u003d READ_ONCE(iter-\u003eposition);\n css_tryget(\u0026pos-\u003ecss) \u003c- use after free\n\nTo avoid this, we should also invalidate root_mem_cgroup.nodeinfo.iter\nin invalidate_reclaim_iterators().\n\n[cai@lca.pw: fix -Wparentheses compilation warning]\n Link: http://lkml.kernel.org/r/1564580753-17531-1-git-send-email-cai@lca.pw\nLink: http://lkml.kernel.org/r/20190730015729.4406-1-miles.chen@mediatek.com\nFixes: 5ac8fb31ad2e (\"mm: memcontrol: convert reclaim iterator to simple css refcounting\")\nSigned-off-by: Miles Chen \u003cmiles.chen@mediatek.com\u003e\nSigned-off-by: Qian Cai \u003ccai@lca.pw\u003e\nAcked-by: Michal Hocko \u003cmhocko@suse.com\u003e\nCc: Johannes Weiner \u003channes@cmpxchg.org\u003e\nCc: Vladimir Davydov \u003cvdavydov.dev@gmail.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "b997052bc3ac444a0bceab1093aff7ae71ed419e", "tree": "fc64a1aff3aa46681dfcedf31c46db09df140996", "parents": [ "6051d3bd3b91e96c59e62b8be2dba1cc2b19ee40" ], "author": { "name": "Henry Burns", "email": "henryburns@google.com", "time": "Tue Aug 13 15:37:25 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:06:52 2019 -0700" }, "message": "mm/z3fold.c: fix z3fold_destroy_pool() race condition\n\nThe constraint from the zpool use of z3fold_destroy_pool() is there are\nno outstanding handles to memory (so no active allocations), but it is\npossible for there to be outstanding work on either of the two wqs in\nthe pool.\n\nCalling z3fold_deregister_migration() before the workqueues are drained\nmeans that there can be allocated pages referencing a freed inode,\ncausing any thread in compaction to be able to trip over the bad pointer\nin PageMovable().\n\nLink: http://lkml.kernel.org/r/20190726224810.79660-2-henryburns@google.com\nFixes: 1f862989b04a (\"mm/z3fold.c: support page migration\")\nSigned-off-by: Henry Burns \u003chenryburns@google.com\u003e\nReviewed-by: Shakeel Butt \u003cshakeelb@google.com\u003e\nReviewed-by: Jonathan Adams \u003cjwadams@google.com\u003e\nCc: Vitaly Vul \u003cvitaly.vul@sony.com\u003e\nCc: Vitaly Wool \u003cvitalywool@gmail.com\u003e\nCc: David Howells \u003cdhowells@redhat.com\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: Henry Burns \u003chenrywolfeburns@gmail.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "6051d3bd3b91e96c59e62b8be2dba1cc2b19ee40", "tree": "d920fb174a331f3072ce04fd508d3eba566ac801", "parents": [ "a53190a4aaa36494f4d7209fd1fcc6f2ee08e0e0" ], "author": { "name": "Henry Burns", "email": "henryburns@google.com", "time": "Tue Aug 13 15:37:21 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:06:52 2019 -0700" }, "message": "mm/z3fold.c: fix z3fold_destroy_pool() ordering\n\nThe constraint from the zpool use of z3fold_destroy_pool() is there are\nno outstanding handles to memory (so no active allocations), but it is\npossible for there to be outstanding work on either of the two wqs in\nthe pool.\n\nIf there is work queued on pool-\u003ecompact_workqueue when it is called,\nz3fold_destroy_pool() will do:\n\n z3fold_destroy_pool()\n destroy_workqueue(pool-\u003erelease_wq)\n destroy_workqueue(pool-\u003ecompact_wq)\n drain_workqueue(pool-\u003ecompact_wq)\n do_compact_page(zhdr)\n kref_put(\u0026zhdr-\u003erefcount)\n __release_z3fold_page(zhdr, ...)\n queue_work_on(pool-\u003erelease_wq, \u0026pool-\u003ework) *BOOM*\n\nSo compact_wq needs to be destroyed before release_wq.\n\nLink: http://lkml.kernel.org/r/20190726224810.79660-1-henryburns@google.com\nFixes: 5d03a6613957 (\"mm/z3fold.c: use kref to prevent page free/compact race\")\nSigned-off-by: Henry Burns \u003chenryburns@google.com\u003e\nReviewed-by: Shakeel Butt \u003cshakeelb@google.com\u003e\nReviewed-by: Jonathan Adams \u003cjwadams@google.com\u003e\nCc: Vitaly Vul \u003cvitaly.vul@sony.com\u003e\nCc: Vitaly Wool \u003cvitalywool@gmail.com\u003e\nCc: David Howells \u003cdhowells@redhat.com\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\nCc: Henry Burns \u003chenrywolfeburns@gmail.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "a53190a4aaa36494f4d7209fd1fcc6f2ee08e0e0", "tree": "1938cd74c463db7d2e1c27fc1bd5875b5af63481", "parents": [ "d883544515aae54842c21730b880172e7894fde9" ], "author": { "name": "Yang Shi", "email": "yang.shi@linux.alibaba.com", "time": "Tue Aug 13 15:37:18 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:06:52 2019 -0700" }, "message": "mm: mempolicy: handle vma with unmovable pages mapped correctly in mbind\n\nWhen running syzkaller internally, we ran into the below bug on 4.9.x\nkernel:\n\n kernel BUG at mm/huge_memory.c:2124!\n invalid opcode: 0000 [#1] SMP KASAN\n CPU: 0 PID: 1518 Comm: syz-executor107 Not tainted 4.9.168+ #2\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 0.5.1 01/01/2011\n task: ffff880067b34900 task.stack: ffff880068998000\n RIP: split_huge_page_to_list+0x8fb/0x1030 mm/huge_memory.c:2124\n Call Trace:\n split_huge_page include/linux/huge_mm.h:100 [inline]\n queue_pages_pte_range+0x7e1/0x1480 mm/mempolicy.c:538\n walk_pmd_range mm/pagewalk.c:50 [inline]\n walk_pud_range mm/pagewalk.c:90 [inline]\n walk_pgd_range mm/pagewalk.c:116 [inline]\n __walk_page_range+0x44a/0xdb0 mm/pagewalk.c:208\n walk_page_range+0x154/0x370 mm/pagewalk.c:285\n queue_pages_range+0x115/0x150 mm/mempolicy.c:694\n do_mbind mm/mempolicy.c:1241 [inline]\n SYSC_mbind+0x3c3/0x1030 mm/mempolicy.c:1370\n SyS_mbind+0x46/0x60 mm/mempolicy.c:1352\n do_syscall_64+0x1d2/0x600 arch/x86/entry/common.c:282\n entry_SYSCALL_64_after_swapgs+0x5d/0xdb\n Code: c7 80 1c 02 00 e8 26 0a 76 01 \u003c0f\u003e 0b 48 c7 c7 40 46 45 84 e8 4c\n RIP [\u003cffffffff81895d6b\u003e] split_huge_page_to_list+0x8fb/0x1030 mm/huge_memory.c:2124\n RSP \u003cffff88006899f980\u003e\n\nwith the below test:\n\n uint64_t r[1] \u003d {0xffffffffffffffff};\n\n int main(void)\n {\n syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0);\n intptr_t res \u003d 0;\n res \u003d syscall(__NR_socket, 0x11, 3, 0x300);\n if (res !\u003d -1)\n r[0] \u003d res;\n *(uint32_t*)0x20000040 \u003d 0x10000;\n *(uint32_t*)0x20000044 \u003d 1;\n *(uint32_t*)0x20000048 \u003d 0xc520;\n *(uint32_t*)0x2000004c \u003d 1;\n syscall(__NR_setsockopt, r[0], 0x107, 0xd, 0x20000040, 0x10);\n syscall(__NR_mmap, 0x20fed000, 0x10000, 0, 0x8811, r[0], 0);\n *(uint64_t*)0x20000340 \u003d 2;\n syscall(__NR_mbind, 0x20ff9000, 0x4000, 0x4002, 0x20000340, 0x45d4, 3);\n return 0;\n }\n\nActually the test does:\n\n mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) \u003d 0x20000000\n socket(AF_PACKET, SOCK_RAW, 768) \u003d 3\n setsockopt(3, SOL_PACKET, PACKET_TX_RING, {block_size\u003d65536, block_nr\u003d1, frame_size\u003d50464, frame_nr\u003d1}, 16) \u003d 0\n mmap(0x20fed000, 65536, PROT_NONE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_DENYWRITE, 3, 0) \u003d 0x20fed000\n mbind(..., MPOL_MF_STRICT|MPOL_MF_MOVE) \u003d 0\n\nThe setsockopt() would allocate compound pages (16 pages in this test)\nfor packet tx ring, then the mmap() would call packet_mmap() to map the\npages into the user address space specified by the mmap() call.\n\nWhen calling mbind(), it would scan the vma to queue the pages for\nmigration to the new node. It would split any huge page since 4.9\ndoesn\u0027t support THP migration, however, the packet tx ring compound\npages are not THP and even not movable. So, the above bug is triggered.\n\nHowever, the later kernel is not hit by this issue due to commit\nd44d363f6578 (\"mm: don\u0027t assume anonymous pages have SwapBacked flag\"),\nwhich just removes the PageSwapBacked check for a different reason.\n\nBut, there is a deeper issue. According to the semantic of mbind(), it\nshould return -EIO if MPOL_MF_MOVE or MPOL_MF_MOVE_ALL was specified and\nMPOL_MF_STRICT was also specified, but the kernel was unable to move all\nexisting pages in the range. The tx ring of the packet socket is\ndefinitely not movable, however, mbind() returns success for this case.\n\nAlthough the most socket file associates with non-movable pages, but XDP\nmay have movable pages from gup. So, it sounds not fine to just check\nthe underlying file type of vma in vma_migratable().\n\nChange migrate_page_add() to check if the page is movable or not, if it\nis unmovable, just return -EIO. But do not abort pte walk immediately,\nsince there may be pages off LRU temporarily. We should migrate other\npages if MPOL_MF_MOVE* is specified. Set has_unmovable flag if some\npaged could not be not moved, then return -EIO for mbind() eventually.\n\nWith this change the above test would return -EIO as expected.\n\n[yang.shi@linux.alibaba.com: fix review comments from Vlastimil]\n Link: http://lkml.kernel.org/r/1563556862-54056-3-git-send-email-yang.shi@linux.alibaba.com\nLink: http://lkml.kernel.org/r/1561162809-59140-3-git-send-email-yang.shi@linux.alibaba.com\nSigned-off-by: Yang Shi \u003cyang.shi@linux.alibaba.com\u003e\nReviewed-by: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: Michal Hocko \u003cmhocko@suse.com\u003e\nCc: Mel Gorman \u003cmgorman@techsingularity.net\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "d883544515aae54842c21730b880172e7894fde9", "tree": "c8cb9eb41b594cf752446cb4700de43b5379cb25", "parents": [ "1de13ee59225dfc98d483f8cce7d83f97c0b31de" ], "author": { "name": "Yang Shi", "email": "yang.shi@linux.alibaba.com", "time": "Tue Aug 13 15:37:15 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:06:52 2019 -0700" }, "message": "mm: mempolicy: make the behavior consistent when MPOL_MF_MOVE* and MPOL_MF_STRICT were specified\n\nWhen both MPOL_MF_MOVE* and MPOL_MF_STRICT was specified, mbind() should\ntry best to migrate misplaced pages, if some of the pages could not be\nmigrated, then return -EIO.\n\nThere are three different sub-cases:\n 1. vma is not migratable\n 2. vma is migratable, but there are unmovable pages\n 3. vma is migratable, pages are movable, but migrate_pages() fails\n\nIf #1 happens, kernel would just abort immediately, then return -EIO,\nafter a7f40cfe3b7a (\"mm: mempolicy: make mbind() return -EIO when\nMPOL_MF_STRICT is specified\").\n\nIf #3 happens, kernel would set policy and migrate pages with\nbest-effort, but won\u0027t rollback the migrated pages and reset the policy\nback.\n\nBefore that commit, they behaves in the same way. It\u0027d better to keep\ntheir behavior consistent. But, rolling back the migrated pages and\nresetting the policy back sounds not feasible, so just make #1 behave as\nsame as #3.\n\nUserspace will know that not everything was successfully migrated (via\n-EIO), and can take whatever steps it deems necessary - attempt\nrollback, determine which exact page(s) are violating the policy, etc.\n\nMake queue_pages_range() return 1 to indicate there are unmovable pages\nor vma is not migratable.\n\nThe #2 is not handled correctly in the current kernel, the following\npatch will fix it.\n\n[yang.shi@linux.alibaba.com: fix review comments from Vlastimil]\n Link: http://lkml.kernel.org/r/1563556862-54056-2-git-send-email-yang.shi@linux.alibaba.com\nLink: http://lkml.kernel.org/r/1561162809-59140-2-git-send-email-yang.shi@linux.alibaba.com\nSigned-off-by: Yang Shi \u003cyang.shi@linux.alibaba.com\u003e\nReviewed-by: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: Michal Hocko \u003cmhocko@suse.com\u003e\nCc: Mel Gorman \u003cmgorman@techsingularity.net\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "1de13ee59225dfc98d483f8cce7d83f97c0b31de", "tree": "7cbc9f97cd0b2c4f312761237a2dd0c1138ef3a8", "parents": [ "7ab0ad0e74f82db1a7e0810828785e44305cff20" ], "author": { "name": "Ralph Campbell", "email": "rcampbell@nvidia.com", "time": "Tue Aug 13 15:37:11 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:06:52 2019 -0700" }, "message": "mm/hmm: fix bad subpage pointer in try_to_unmap_one\n\nWhen migrating an anonymous private page to a ZONE_DEVICE private page,\nthe source page-\u003emapping and page-\u003eindex fields are copied to the\ndestination ZONE_DEVICE struct page and the page_mapcount() is\nincreased. This is so rmap_walk() can be used to unmap and migrate the\npage back to system memory.\n\nHowever, try_to_unmap_one() computes the subpage pointer from a swap pte\nwhich computes an invalid page pointer and a kernel panic results such\nas:\n\n BUG: unable to handle page fault for address: ffffea1fffffffc8\n\nCurrently, only single pages can be migrated to device private memory so\nno subpage computation is needed and it can be set to \"page\".\n\n[rcampbell@nvidia.com: add comment]\n Link: http://lkml.kernel.org/r/20190724232700.23327-4-rcampbell@nvidia.com\nLink: http://lkml.kernel.org/r/20190719192955.30462-4-rcampbell@nvidia.com\nFixes: a5430dda8a3a1c (\"mm/migrate: support un-addressable ZONE_DEVICE page in migration\")\nSigned-off-by: Ralph Campbell \u003crcampbell@nvidia.com\u003e\nCc: \"Jérôme Glisse\" \u003cjglisse@redhat.com\u003e\nCc: \"Kirill A. Shutemov\" \u003ckirill.shutemov@linux.intel.com\u003e\nCc: Mike Kravetz \u003cmike.kravetz@oracle.com\u003e\nCc: Christoph Hellwig \u003chch@lst.de\u003e\nCc: Jason Gunthorpe \u003cjgg@mellanox.com\u003e\nCc: John Hubbard \u003cjhubbard@nvidia.com\u003e\nCc: Andrea Arcangeli \u003caarcange@redhat.com\u003e\nCc: Andrey Ryabinin \u003caryabinin@virtuozzo.com\u003e\nCc: Christoph Lameter \u003ccl@linux.com\u003e\nCc: Dan Williams \u003cdan.j.williams@intel.com\u003e\nCc: Dave Hansen \u003cdave.hansen@linux.intel.com\u003e\nCc: Ira Weiny \u003cira.weiny@intel.com\u003e\nCc: Jan Kara \u003cjack@suse.cz\u003e\nCc: Lai Jiangshan \u003cjiangshanlai@gmail.com\u003e\nCc: Logan Gunthorpe \u003clogang@deltatee.com\u003e\nCc: Martin Schwidefsky \u003cschwidefsky@de.ibm.com\u003e\nCc: Matthew Wilcox \u003cwilly@infradead.org\u003e\nCc: Mel Gorman \u003cmgorman@techsingularity.net\u003e\nCc: Michal Hocko \u003cmhocko@suse.com\u003e\nCc: Pekka Enberg \u003cpenberg@kernel.org\u003e\nCc: Randy Dunlap \u003crdunlap@infradead.org\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "7ab0ad0e74f82db1a7e0810828785e44305cff20", "tree": "0023a5dcb1e12765b527c80cc5b70633e13645ee", "parents": [ "76470ccd62f18bfa0954bec10f2329339f793914" ], "author": { "name": "Ralph Campbell", "email": "rcampbell@nvidia.com", "time": "Tue Aug 13 15:37:07 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:06:52 2019 -0700" }, "message": "mm/hmm: fix ZONE_DEVICE anon page mapping reuse\n\nWhen a ZONE_DEVICE private page is freed, the page-\u003emapping field can be\nset. If this page is reused as an anonymous page, the previous value\ncan prevent the page from being inserted into the CPU\u0027s anon rmap table.\nFor example, when migrating a pte_none() page to device memory:\n\n migrate_vma(ops, vma, start, end, src, dst, private)\n migrate_vma_collect()\n src[] \u003d MIGRATE_PFN_MIGRATE\n migrate_vma_prepare()\n /* no page to lock or isolate so OK */\n migrate_vma_unmap()\n /* no page to unmap so OK */\n ops-\u003ealloc_and_copy()\n /* driver allocates ZONE_DEVICE page for dst[] */\n migrate_vma_pages()\n migrate_vma_insert_page()\n page_add_new_anon_rmap()\n __page_set_anon_rmap()\n /* This check sees the page\u0027s stale mapping field */\n if (PageAnon(page))\n return\n /* page-\u003emapping is not updated */\n\nThe result is that the migration appears to succeed but a subsequent CPU\nfault will be unable to migrate the page back to system memory or worse.\n\nClear the page-\u003emapping field when freeing the ZONE_DEVICE page so stale\npointer data doesn\u0027t affect future page use.\n\nLink: http://lkml.kernel.org/r/20190719192955.30462-3-rcampbell@nvidia.com\nFixes: b7a523109fb5c9d2d6dd (\"mm: don\u0027t clear -\u003emapping in hmm_devmem_free\")\nSigned-off-by: Ralph Campbell \u003crcampbell@nvidia.com\u003e\nReviewed-by: John Hubbard \u003cjhubbard@nvidia.com\u003e\nReviewed-by: Christoph Hellwig \u003chch@lst.de\u003e\nCc: Dan Williams \u003cdan.j.williams@intel.com\u003e\nCc: Jason Gunthorpe \u003cjgg@mellanox.com\u003e\nCc: Logan Gunthorpe \u003clogang@deltatee.com\u003e\nCc: Ira Weiny \u003cira.weiny@intel.com\u003e\nCc: Matthew Wilcox \u003cwilly@infradead.org\u003e\nCc: Mel Gorman \u003cmgorman@techsingularity.net\u003e\nCc: Jan Kara \u003cjack@suse.cz\u003e\nCc: \"Kirill A. Shutemov\" \u003ckirill.shutemov@linux.intel.com\u003e\nCc: Michal Hocko \u003cmhocko@suse.com\u003e\nCc: Andrea Arcangeli \u003caarcange@redhat.com\u003e\nCc: Mike Kravetz \u003cmike.kravetz@oracle.com\u003e\nCc: \"Jérôme Glisse\" \u003cjglisse@redhat.com\u003e\nCc: Andrey Ryabinin \u003caryabinin@virtuozzo.com\u003e\nCc: Christoph Lameter \u003ccl@linux.com\u003e\nCc: Dave Hansen \u003cdave.hansen@linux.intel.com\u003e\nCc: Lai Jiangshan \u003cjiangshanlai@gmail.com\u003e\nCc: Martin Schwidefsky \u003cschwidefsky@de.ibm.com\u003e\nCc: Pekka Enberg \u003cpenberg@kernel.org\u003e\nCc: Randy Dunlap \u003crdunlap@infradead.org\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "76470ccd62f18bfa0954bec10f2329339f793914", "tree": "72d5ecefb991a588c39bf47eca9ad178337ff459", "parents": [ "d45331b00ddb179e291766617259261c112db872" ], "author": { "name": "Ralph Campbell", "email": "rcampbell@nvidia.com", "time": "Tue Aug 13 15:37:04 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 16:06:52 2019 -0700" }, "message": "mm: document zone device struct page field usage\n\nPatch series \"mm/hmm: fixes for device private page migration\", v3.\n\nTesting the latest linux git tree turned up a few bugs with page\nmigration to and from ZONE_DEVICE private and anonymous pages.\nHopefully it clarifies how ZONE_DEVICE private struct page uses the same\nmapping and index fields from the source anonymous page mapping.\n\nThis patch (of 3):\n\nStruct page for ZONE_DEVICE private pages uses the page-\u003emapping and and\npage-\u003eindex fields while the source anonymous pages are migrated to\ndevice private memory. This is so rmap_walk() can find the page when\nmigrating the ZONE_DEVICE private page back to system memory.\nZONE_DEVICE pmem backed fsdax pages also use the page-\u003emapping and\npage-\u003eindex fields when files are mapped into a process address space.\n\nAdd comments to struct page and remove the unused \"_zd_pad_1\" field to\nmake this more clear.\n\nLink: http://lkml.kernel.org/r/20190724232700.23327-2-rcampbell@nvidia.com\nSigned-off-by: Ralph Campbell \u003crcampbell@nvidia.com\u003e\nReviewed-by: John Hubbard \u003cjhubbard@nvidia.com\u003e\nCc: Matthew Wilcox \u003cwilly@infradead.org\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: Christoph Lameter \u003ccl@linux.com\u003e\nCc: Dave Hansen \u003cdave.hansen@linux.intel.com\u003e\nCc: Jérôme Glisse \u003cjglisse@redhat.com\u003e\nCc: \"Kirill A . Shutemov\" \u003ckirill.shutemov@linux.intel.com\u003e\nCc: Lai Jiangshan \u003cjiangshanlai@gmail.com\u003e\nCc: Martin Schwidefsky \u003cschwidefsky@de.ibm.com\u003e\nCc: Pekka Enberg \u003cpenberg@kernel.org\u003e\nCc: Randy Dunlap \u003crdunlap@infradead.org\u003e\nCc: Andrey Ryabinin \u003caryabinin@virtuozzo.com\u003e\nCc: Christoph Hellwig \u003chch@lst.de\u003e\nCc: Jason Gunthorpe \u003cjgg@mellanox.com\u003e\nCc: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "eb93685847a9055283d05951c1b205e737f38533", "tree": "f39d6b813b5c7fae9a70c7f5cce7176034fe868b", "parents": [ "d45331b00ddb179e291766617259261c112db872" ], "author": { "name": "Paul Walmsley", "email": "paul.walmsley@sifive.com", "time": "Wed Aug 07 19:07:34 2019 -0700" }, "committer": { "name": "Paul Walmsley", "email": "paul.walmsley@sifive.com", "time": "Tue Aug 13 14:03:52 2019 -0700" }, "message": "riscv: fix flush_tlb_range() end address for flush_tlb_page()\n\nThe RISC-V kernel implementation of flush_tlb_page() when CONFIG_SMP\nis set is wrong. It passes zero to flush_tlb_range() as the final\naddress to flush, but it should be at least \u0027addr\u0027.\n\nSome other Linux architecture ports use the beginning address to\nflush, plus PAGE_SIZE, as the final address to flush. This might\nflush slightly more than what\u0027s needed, but it seems unlikely that\nbeing more clever would improve anything. So let\u0027s just take that\nimplementation for now.\n\nWhile here, convert the macro into a static inline function, primarily\nto avoid unintentional multiple evaluations of \u0027addr\u0027.\n\nThis second version of the patch fixes a coding style issue found by\nChristoph Hellwig \u003chch@lst.de\u003e.\n\nReported-by: Andreas Schwab \u003cschwab@suse.de\u003e\nSigned-off-by: Paul Walmsley \u003cpaul.walmsley@sifive.com\u003e\nReviewed-by: Christoph Hellwig \u003chch@lst.de\u003e" }, { "commit": "ee1c7bd33e66376067fd6306b730789ee2ae53e4", "tree": "5e41e3644225ad523dbdaf0b94cb4685be8f8d0b", "parents": [ "60a8db790255a6bebcdc41d97e8084a440398206", "2d6c25215ab26bb009de3575faab7b685f138e92" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 11:46:24 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 11:46:24 2019 -0700" }, "message": "Merge tag \u0027tpmdd-next-20190813\u0027 of git://git.infradead.org/users/jjs/linux-tpmdd\n\nPull tpm fixes from Jarkko Sakkinen:\n \"One more bug fix for the next release\"\n\n* tag \u0027tpmdd-next-20190813\u0027 of git://git.infradead.org/users/jjs/linux-tpmdd:\n KEYS: trusted: allow module init if TPM is inactive or deactivated\n" }, { "commit": "60a8db790255a6bebcdc41d97e8084a440398206", "tree": "c032792b24eb068d061acdd6f45d6687f0063a4e", "parents": [ "d45331b00ddb179e291766617259261c112db872", "a86c71ba3022331f79662d7f12d1b25188c7e377" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 10:31:31 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Aug 13 10:31:31 2019 -0700" }, "message": "Merge tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi\n\nPull SCSI fix from James Bottomley:\n \"Single lpfc fix, for a single-cpu corner case\"\n\n* tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:\n scsi: lpfc: Fix crash when cpu count is 1 and null irq affinity mask\n" }, { "commit": "2d6c25215ab26bb009de3575faab7b685f138e92", "tree": "c741ea6dc1f2b7040be70696eb10e3717aabdd3d", "parents": [ "d45331b00ddb179e291766617259261c112db872" ], "author": { "name": "Roberto Sassu", "email": "roberto.sassu@huawei.com", "time": "Mon Aug 05 18:44:27 2019 +0200" }, "committer": { "name": "Jarkko Sakkinen", "email": "jarkko.sakkinen@linux.intel.com", "time": "Tue Aug 13 19:59:23 2019 +0300" }, "message": "KEYS: trusted: allow module init if TPM is inactive or deactivated\n\nCommit c78719203fc6 (\"KEYS: trusted: allow trusted.ko to initialize w/o a\nTPM\") allows the trusted module to be loaded even if a TPM is not found, to\navoid module dependency problems.\n\nHowever, trusted module initialization can still fail if the TPM is\ninactive or deactivated. tpm_get_random() returns an error.\n\nThis patch removes the call to tpm_get_random() and instead extends the PCR\nspecified by the user with zeros. The security of this alternative is\nequivalent to the previous one, as either option prevents with a PCR update\nunsealing and misuse of sealed data by a user space process.\n\nEven if a PCR is extended with zeros, instead of random data, it is still\ncomputationally infeasible to find a value as input for a new PCR extend\noperation, to obtain again the PCR value that would allow unsealing.\n\nCc: stable@vger.kernel.org\nFixes: 240730437deb (\"KEYS: trusted: explicitly use tpm_chip structure...\")\nSigned-off-by: Roberto Sassu \u003croberto.sassu@huawei.com\u003e\nReviewed-by: Tyler Hicks \u003ctyhicks@canonical.com\u003e\nSuggested-by: Mimi Zohar \u003czohar@linux.ibm.com\u003e\nReviewed-by: Jarkko Sakkinen \u003cjarkko.sakkinen@linux.intel.com\u003e\nSigned-off-by: Jarkko Sakkinen \u003cjarkko.sakkinen@linux.intel.com\u003e\n" }, { "commit": "2c8ccb37b08fe364f02a9914daca474d43151453", "tree": "ca7161194d86802b9625c678de0707858da83779", "parents": [ "932727c55653c1d7838d0ecd0cdce4393be156e0" ], "author": { "name": "Bernard Metzler", "email": "bmt@zurich.ibm.com", "time": "Fri Aug 09 17:18:16 2019 +0200" }, "committer": { "name": "Doug Ledford", "email": "dledford@redhat.com", "time": "Tue Aug 13 12:22:06 2019 -0400" }, "message": "RDMA/siw: Change CQ flags from 64-\u003e32 bits\n\nThis patch changes the driver/user shared (mmapped) CQ notification\nflags field from unsigned 64-bits size to unsigned 32-bits size. This\nenables building siw on 32-bit architectures.\n\nThis patch changes the siw-abi, but as siw was only just merged in\nthis merge window cycle, there are no released kernels with the prior\nabi. We are making no attempt to be binary compatible with siw user\nspace libraries prior to the merge of siw into the upstream kernel,\nonly moving forward with upstream kernels and upstream rdma-core\nprovided siw libraries are we guaranteeing compatibility.\n\nSigned-off-by: Bernard Metzler \u003cbmt@zurich.ibm.com\u003e\nLink: https://lore.kernel.org/r/20190809151816.13018-1-bmt@zurich.ibm.com\nSigned-off-by: Doug Ledford \u003cdledford@redhat.com\u003e\n" }, { "commit": "190d03814eb3b49d4f87ff38fef26d36f3568a60", "tree": "98667bd18cef132c9e08837ecffeb3035078092a", "parents": [ "cfef67f016e4c00a2f423256fc678a6967a9fc09" ], "author": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Tue Aug 13 17:39:56 2019 +0200" }, "committer": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Tue Aug 13 17:41:19 2019 +0200" }, "message": "ALSA: hda/realtek - Add quirk for HP Envy x360\n\nHP Envy x360 (AMD Ryzen-based model) with 103c:8497 needs the same\nquirk like HP Spectre x360 for enabling the mute LED over Mic3 pin.\n\nBugLink: https://bugzilla.kernel.org/show_bug.cgi?id\u003d204373\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\n" }, { "commit": "9a67b72552f8d019948453e56ca7db8c7e5a94ba", "tree": "d8cc9a0b76a069e334c20a93aecb971bd9348666", "parents": [ "609488bc979f99f805f34e9a32c1e3b71179d10b" ], "author": { "name": "Denis Efremov", "email": "efremov@linux.com", "time": "Tue Aug 13 08:15:07 2019 -0700" }, "committer": { "name": "Darrick J. Wong", "email": "darrick.wong@oracle.com", "time": "Tue Aug 13 08:15:07 2019 -0700" }, "message": "MAINTAINERS: iomap: Remove fs/iomap.c record\n\nUpdate MAINTAINERS to reflect that fs/iomap.c file\nwas splitted into separate files in fs/iomap/\n\nCc: Darrick J. Wong \u003cdarrick.wong@oracle.com\u003e\nCc: Christoph Hellwig \u003chch@lst.de\u003e\nCc: linux-fsdevel@vger.kernel.org\nFixes: cb7181ff4b1c (\"iomap: move the main iteration code into a separate file\")\nSigned-off-by: Denis Efremov \u003cefremov@linux.com\u003e\nReviewed-by: Darrick J. Wong \u003cdarrick.wong@oracle.com\u003e\nSigned-off-by: Darrick J. Wong \u003cdarrick.wong@oracle.com\u003e\n" }, { "commit": "daa37200d48906d71c63ce178bf7d410b7e07082", "tree": "ec226b2248ce77f0d5bf6f1dad81f17c2c1925f8", "parents": [ "d45331b00ddb179e291766617259261c112db872", "eac4471d0882da14be652ef0a55b914145fab15a" ], "author": { "name": "Jani Nikula", "email": "jani.nikula@intel.com", "time": "Tue Aug 13 16:26:34 2019 +0300" }, "committer": { "name": "Jani Nikula", "email": "jani.nikula@intel.com", "time": "Tue Aug 13 16:26:34 2019 +0300" }, "message": "Merge tag \u0027gvt-fixes-2019-08-13\u0027 of https://github.com/intel/gvt-linux into drm-intel-fixes\n\ngvt-fixes-2019-08-13\n\n- Fix one use-after-free error (Dan)\n\nSigned-off-by: Jani Nikula \u003cjani.nikula@intel.com\u003e\nFrom: Zhenyu Wang \u003czhenyuw@linux.intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20190813095845.GF19140@zhen-hp.sh.intel.com\n" }, { "commit": "834de5c1aa768eb3d233d6544ea7153826c4b206", "tree": "f3910fe2e377e8b5371d0fdf63c8c32196d50ff4", "parents": [ "d45331b00ddb179e291766617259261c112db872" ], "author": { "name": "Tudor Ambarus", "email": "tudor.ambarus@microchip.com", "time": "Wed Jul 31 08:46:16 2019 +0000" }, "committer": { "name": "Richard Weinberger", "email": "richard@nod.at", "time": "Tue Aug 13 14:34:42 2019 +0200" }, "message": "mtd: spi-nor: Fix the disabling of write protection at init\n\nspi_nor_spansion_clear_sr_bp() depends on spansion_quad_enable().\nWhile spansion_quad_enable() is selected as default when\ninitializing the flash parameters, the nor-\u003equad_enable() method\ncan be overwritten later on when parsing BFPT.\n\nSelect the write protection disable mechanism at spi_nor_init() time,\nwhen the nor-\u003equad_enable() method is already known.\n\nFixes: 191f5c2ed4b6faba (\"mtd: spi-nor: use 16-bit WRR command when QE is set on spansion flashes\")\nSigned-off-by: Tudor Ambarus \u003ctudor.ambarus@microchip.com\u003e\nReviewed-by: Vignesh Raghavendra \u003cvigneshr@ti.com\u003e\nSigned-off-by: Richard Weinberger \u003crichard@nod.at\u003e\n" }, { "commit": "5717fe5ab38f9ccb32718bcb03bea68409c9cce4", "tree": "95aedf58ea673d3465e525e517e58dc3db92b199", "parents": [ "30e235389faadb9e3d918887b1f126155d7d761d" ], "author": { "name": "Will Deacon", "email": "will@kernel.org", "time": "Mon Aug 12 16:02:25 2019 +0100" }, "committer": { "name": "Catalin Marinas", "email": "catalin.marinas@arm.com", "time": "Tue Aug 13 12:56:35 2019 +0100" }, "message": "arm64: cpufeature: Don\u0027t treat granule sizes as strict\n\nIf a CPU doesn\u0027t support the page size for which the kernel is\nconfigured, then we will complain and refuse to bring it online. For\nsecondary CPUs (and the boot CPU on a system booting with EFI), we will\nalso print an error identifying the mismatch.\n\nConsequently, the only time that the cpufeature code can detect a\ngranule size mismatch is for a granule other than the one that is\ncurrently being used. Although we would rather such systems didn\u0027t\nexist, we\u0027ve unfortunately lost that battle and Kevin reports that\non his amlogic S922X (odroid-n2 board) we end up warning and taining\nwith defconfig because 16k pages are not supported by all of the CPUs.\n\nIn such a situation, we don\u0027t actually care about the feature mismatch,\nparticularly now that KVM only exposes the sanitised view of the CPU\nregisters (commit 93390c0a1b20 - \"arm64: KVM: Hide unsupported AArch64\nCPU features from guests\"). Treat the granule fields as non-strict and\nlet Kevin run without a tainted kernel.\n\nCc: Marc Zyngier \u003cmaz@kernel.org\u003e\nReported-by: Kevin Hilman \u003ckhilman@baylibre.com\u003e\nTested-by: Kevin Hilman \u003ckhilman@baylibre.com\u003e\nAcked-by: Mark Rutland \u003cmark.rutland@arm.com\u003e\nAcked-by: Suzuki K Poulose \u003csuzuki.poulose@arm.com\u003e\nSigned-off-by: Will Deacon \u003cwill@kernel.org\u003e\n[catalin.marinas@arm.com: changelog updated with KVM sanitised regs commit]\nSigned-off-by: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\n" } ], "next": "31ec0dd38085aaeb75ab04211bf3b51ad917c9b4" }