)]}' { "log": [ { "commit": "f2bc9c908dfe3f56fe4ca4d92e5c5be80963b973", "tree": "885ecc2c3e864ed4fe0a3b062ce4f72fa72958aa", "parents": [ "bf3bd966dfd7d9582f50e9bd08b15922197cd277", "b1da6a51871c6929dced1a7fad81990988b36ed6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Apr 30 15:03:00 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Apr 30 15:03:00 2019 -0700" }, "message": "Merge tag \u0027fsnotify_for_v5.1-rc8\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs\n\nPull fsnotify fix from Jan Kara:\n \"A fix of user trigerable NULL pointer dereference syzbot has recently\n spotted.\n\n The problem was introduced in this merge window so no CC stable is\n needed\"\n\n* tag \u0027fsnotify_for_v5.1-rc8\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs:\n fsnotify: Fix NULL ptr deref in fanotify_get_fsid()\n" }, { "commit": "bf3bd966dfd7d9582f50e9bd08b15922197cd277", "tree": "d1cf495271b06cacd171173493db2b58b6858b8f", "parents": [ "fea27bc7ff43a8beb6bebe6d4fe9eb889e185d4a", "c114944d7d67f24e71562fcfc18d550ab787e4d4" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Apr 30 08:41:22 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Apr 30 08:41:22 2019 -0700" }, "message": "Merge tag \u0027usb-5.1-rc8\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb\n\nPull USB fixes from Greg KH:\n \"Here are some small USB fixes for a bunch of warnings/errors that the\n syzbot has been finding with it\u0027s new-found ability to stress-test the\n USB layer.\n\n All of these are tiny, but fix real issues, and are marked for stable\n as well. All of these have had lots of testing in linux-next as well\"\n\n* tag \u0027usb-5.1-rc8\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb:\n USB: w1 ds2490: Fix bug caused by improper use of altsetting array\n USB: yurex: Fix protection fault after device removal\n usb: usbip: fix isoc packet num validation in get_pipe\n USB: core: Fix bug caused by duplicate interface PM usage counter\n USB: dummy-hcd: Fix failure to give back unlinked URBs\n USB: core: Fix unterminated string returned by usb_string()\n" }, { "commit": "fea27bc7ff43a8beb6bebe6d4fe9eb889e185d4a", "tree": "060f6deb9eb907bff65c8118fb2cba09f79c8da0", "parents": [ "83a50840e72a5a964b4704fcdc2fbb2d771015ab", "dfbd199a7cfe3e3cd8531e1353cdbd7175bfbc5e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Apr 30 08:38:02 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Apr 30 08:38:02 2019 -0700" }, "message": "Merge tag \u0027selinux-pr-20190429\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux\n\nPull selinux fix from Paul Moore:\n \"One small patch for the stable folks to fix a problem when building\n against the latest glibc.\n\n I\u0027ll be honest and say that I\u0027m not really thrilled with the idea of\n sending this up right now, but Greg is a little annoyed so here I\n figured I would at least send this\"\n\n* tag \u0027selinux-pr-20190429\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux:\n selinux: use kernel linux/socket.h for genheaders and mdp\n" }, { "commit": "83a50840e72a5a964b4704fcdc2fbb2d771015ab", "tree": "9cbd662133d250f7e199a4e7a38a66dc67a7c935", "parents": [ "80871482fd5cb1cb396ea232237a7d9c540854f9", "7a0df7fbc14505e2e2be19ed08654a09e1ed5bf6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Apr 29 13:24:34 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Apr 29 13:24:34 2019 -0700" }, "message": "Merge tag \u0027seccomp-v5.1-rc8\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux\n\nPull seccomp fixes from Kees Cook:\n \"Syzbot found a use-after-free bug in seccomp due to flags that should\n not be allowed to be used together.\n\n Tycho fixed this, I updated the self-tests, and the syzkaller PoC has\n been running for several days without triggering KASan (before this\n fix, it would reproduce). These patches have also been in -next for\n almost a week, just to be sure.\n\n - Add logic for making some seccomp flags exclusive (Tycho)\n\n - Update selftests for exclusivity testing (Kees)\"\n\n* tag \u0027seccomp-v5.1-rc8\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux:\n seccomp: Make NEW_LISTENER and TSYNC flags exclusive\n selftests/seccomp: Prepare for exclusive seccomp flags\n" }, { "commit": "80871482fd5cb1cb396ea232237a7d9c540854f9", "tree": "4e831e907a6ecf4b4359de200cf8a3685d3faa73", "parents": [ "6a5c5d26c4c6c3cc486fef0bf04ff9551132611b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Apr 29 09:51:29 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Apr 29 09:51:29 2019 -0700" }, "message": "x86: make ZERO_PAGE() at least parse its argument\n\nThis doesn\u0027t really do anything, but at least we now parse teh\nZERO_PAGE() address argument so that we\u0027ll catch the most obvious errors\nin usage next time they\u0027ll happen.\n\nSee commit 6a5c5d26c4c6 (\"rdma: fix build errors on s390 and MIPS due to\nbad ZERO_PAGE use\") what happens when we don\u0027t have any use of the macro\nargument at all.\n\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "6a5c5d26c4c6c3cc486fef0bf04ff9551132611b", "tree": "4a0c2bb473b6dbd8dc1e0085689236b594634058", "parents": [ "37624b58542fb9f2d9a70e6ea006ef8a5f66c30b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Apr 29 09:48:53 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Apr 29 09:48:53 2019 -0700" }, "message": "rdma: fix build errors on s390 and MIPS due to bad ZERO_PAGE use\n\nThe parameter to ZERO_PAGE() was wrong, but since all architectures\nexcept for MIPS and s390 ignore it, it wasn\u0027t noticed until 0-day\nreported the build error.\n\nFixes: 67f269b37f9b (\"RDMA/ucontext: Fix regression with disassociate\")\nCc: stable@vger.kernel.org\nCc: Andrea Arcangeli \u003caarcange@redhat.com\u003e\nCc: Leon Romanovsky \u003cleonro@mellanox.com\u003e\nCc: Jason Gunthorpe \u003cjgg@mellanox.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "dfbd199a7cfe3e3cd8531e1353cdbd7175bfbc5e", "tree": "527947e637ba6820d179d9c107840e4964490358", "parents": [ "6a1afffb08ce5f9fb9ccc20f7ab24846c0142984" ], "author": { "name": "Paulo Alcantara", "email": "paulo@paulo.ac", "time": "Sun Feb 24 21:55:28 2019 -0300" }, "committer": { "name": "Paul Moore", "email": "paul@paul-moore.com", "time": "Mon Apr 29 11:34:58 2019 -0400" }, "message": "selinux: use kernel linux/socket.h for genheaders and mdp\n\nWhen compiling genheaders and mdp from a newer host kernel, the\nfollowing error happens:\n\n In file included from scripts/selinux/genheaders/genheaders.c:18:\n ./security/selinux/include/classmap.h:238:2: error: #error New\n address family defined, please update secclass_map. #error New\n address family defined, please update secclass_map. ^~~~~\n make[3]: *** [scripts/Makefile.host:107:\n scripts/selinux/genheaders/genheaders] Error 1 make[2]: ***\n [scripts/Makefile.build:599: scripts/selinux/genheaders] Error 2\n make[1]: *** [scripts/Makefile.build:599: scripts/selinux] Error 2\n make[1]: *** Waiting for unfinished jobs....\n\nInstead of relying on the host definition, include linux/socket.h in\nclassmap.h to have PF_MAX.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Paulo Alcantara \u003cpaulo@paulo.ac\u003e\nAcked-by: Stephen Smalley \u003csds@tycho.nsa.gov\u003e\n[PM: manually merge in mdp.c, subject line tweaks]\nSigned-off-by: Paul Moore \u003cpaul@paul-moore.com\u003e\n" }, { "commit": "37624b58542fb9f2d9a70e6ea006ef8a5f66c30b", "tree": "2863dd6de825312fda64e1c13fc652228a83d487", "parents": [ "9520b5324b0ed36c0e9907df93fce75436449093" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Apr 28 17:04:13 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Apr 28 17:04:13 2019 -0700" }, "message": "Linux 5.1-rc7\n" }, { "commit": "b1da6a51871c6929dced1a7fad81990988b36ed6", "tree": "2c487de5f9e6369a9ee459e93d10dd37f094e945", "parents": [ "ba25b50d582ff6c6021eee80824134aeb9ab8785" ], "author": { "name": "Jan Kara", "email": "jack@suse.cz", "time": "Wed Apr 24 18:39:57 2019 +0200" }, "committer": { "name": "Jan Kara", "email": "jack@suse.cz", "time": "Sun Apr 28 22:14:50 2019 +0200" }, "message": "fsnotify: Fix NULL ptr deref in fanotify_get_fsid()\n\nfanotify_get_fsid() is reading mark-\u003econnector-\u003efsid under srcu. It can\nhappen that it sees mark not fully initialized or mark that is already\ndetached from the object list. In these cases mark-\u003econnector\ncan be NULL leading to NULL ptr dereference. Fix the problem by\nbeing careful when reading mark-\u003econnector and check it for being NULL.\nAlso use WRITE_ONCE when writing the mark just to prevent compiler from\ndoing something stupid.\n\nReported-by: syzbot+15927486a4f1bfcbaf91@syzkaller.appspotmail.com\nFixes: 77115225acc6 (\"fanotify: cache fsid in fsnotify_mark_connector\")\nSigned-off-by: Jan Kara \u003cjack@suse.cz\u003e\n" }, { "commit": "9520b5324b0ed36c0e9907df93fce75436449093", "tree": "b575fc96a206ccc5688b64ba783b03107b295e89", "parents": [ "0d82044e1b7e5497c2177abd39b31e9ba27be8b7", "e17b1af96b2afc38e684aa2f1033387e2ed10029" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Apr 28 10:50:57 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Apr 28 10:50:57 2019 -0700" }, "message": "Merge tag \u0027for-linus\u0027 of git://git.armlinux.org.uk/~rmk/linux-arm\n\nPull ARM fixes from Russell King:\n \"A small number of ARM fixes\n\n - Fix function tracer and unwinder dependencies so that we don\u0027t end\n up building kernels that will crash\n\n - Fix ARMv7M nommu initialisation (missing register initialisation)\n\n - Fix EFI decompressor entry (ensuring barrier instructions are\n enabled prior to use)\"\n\n* tag \u0027for-linus\u0027 of git://git.armlinux.org.uk/~rmk/linux-arm:\n ARM: 8857/1: efi: enable CP15 DMB instructions before cleaning the cache\n ARM: 8856/1: NOMMU: Fix CCR register faulty initialization when MPU is disabled\n ARM: fix function graph tracer and unwinder dependencies\n" }, { "commit": "0d82044e1b7e5497c2177abd39b31e9ba27be8b7", "tree": "0d9f3ea99c192831c428e76c9e6789170e7fe484", "parents": [ "975a0f400f2e1b5f585fec0b8b4c5942c3b05792", "7a3a4d763837d3aa654cd1059030950410c04d77" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Apr 28 10:43:15 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Apr 28 10:43:15 2019 -0700" }, "message": "Merge tag \u0027powerpc-5.1-6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux\n\nPull powerpc fixes from Michael Ellerman:\n \"A one-liner to make our Radix MMU support depend on HUGETLB_PAGE. We\n use some of the hugetlb inlines (eg. pud_huge()) when operating on the\n linear mapping and if they\u0027re compiled into empty wrappers we can\n corrupt memory.\n\n Then two fixes to our VFIO IOMMU code. The first is not a regression\n but fixes the locking to avoid a user-triggerable deadlock.\n\n The second does fix a regression since rc1, and depends on the first\n fix. It makes it possible to run guests with large amounts of memory\n again (~256GB).\n\n Thanks to Alexey Kardashevskiy\"\n\n* tag \u0027powerpc-5.1-6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:\n powerpc/mm_iommu: Allow pinning large regions\n powerpc/mm_iommu: Fix potential deadlock\n powerpc/mm/radix: Make Radix require HUGETLB_PAGE\n" }, { "commit": "975a0f400f2e1b5f585fec0b8b4c5942c3b05792", "tree": "f2e987f7b50684625c862e53ebb2ed184514a29f", "parents": [ "14f974d7f0f1f93d8c35f496ae774ba0f1b3389a", "8358e3a8264a228cf2dfb6f3a05c0328f4118f12" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Apr 28 10:06:32 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Apr 28 10:06:32 2019 -0700" }, "message": "Merge tag \u0027for-linus-20190428\u0027 of git://git.kernel.dk/linux-block\n\nPull block fixes from Jens Axboe:\n \"A set of io_uring fixes that should go into this release. In\n particular, this contains:\n\n - The mutex lock vs ctx ref count fix (me)\n\n - Removal of a dead variable (me)\n\n - Two race fixes (Stefan)\n\n - Ring head/tail condition fix for poll full SQ detection (Stefan)\"\n\n* tag \u0027for-linus-20190428\u0027 of git://git.kernel.dk/linux-block:\n io_uring: remove \u0027state\u0027 argument from io_{read,write} path\n io_uring: fix poll full SQ detection\n io_uring: fix race condition when sq threads goes sleeping\n io_uring: fix race condition reading SQ entries\n io_uring: fail io_uring_register(2) on a dying io_uring instance\n" }, { "commit": "14f974d7f0f1f93d8c35f496ae774ba0f1b3389a", "tree": "f91018a260c8090311ef4cfde609a9487967daab", "parents": [ "72a6e35db32b63883e2e3d19cd6a515eac1f5d67", "2557fabd6e29f349bfa0ac13f38ac98aa5eafc74" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Apr 28 10:00:45 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Apr 28 10:00:45 2019 -0700" }, "message": "Merge tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma\n\nPull rdma fixes from Jason Gunthorpe:\n \"One core bug fix and a few driver ones\n\n - FRWR memory registration for hfi1/qib didn\u0027t work with with some\n iovas causing a NFSoRDMA failure regression due to a fix in the NFS\n side\n\n - A command flow error in mlx5 allowed user space to send a corrupt\n command (and also smash the kernel stack we\u0027ve since learned)\n\n - Fix a regression and some bugs with device hot unplug that was\n discovered while reviewing Andrea\u0027s patches\n\n - hns has a failure if the user asks for certain QP configurations\"\n\n* tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma:\n RDMA/hns: Bugfix for mapping user db\n RDMA/ucontext: Fix regression with disassociate\n RDMA/mlx5: Use rdma_user_map_io for mapping BAR pages\n RDMA/mlx5: Do not allow the user to write to the clock page\n IB/mlx5: Fix scatter to CQE in DCT QP creation\n IB/rdmavt: Fix frwr memory registration\n" }, { "commit": "72a6e35db32b63883e2e3d19cd6a515eac1f5d67", "tree": "005d1ce9461d78bd6e6fbeb746131547d3858908", "parents": [ "25cce03b1d06e4b742f6dafdda2f4d80c13bdc18", "5bb5c3a3ac102158b799bf5eda871223aa5e9c25" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Apr 28 09:45:18 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Apr 28 09:45:18 2019 -0700" }, "message": "Merge tag \u0027dmaengine-fix-5.1-rc7\u0027 of git://git.infradead.org/users/vkoul/slave-dma\n\nPull dmaengine fixes from Vinod Koul:\n\n - fix for wrong register use in mediatek driver\n\n - fix in sh driver for glitch is tx_status and treating 0 a valid\n residue for cyclic\n\n - fix in bcm driver for using right memory allocation flag\n\n* tag \u0027dmaengine-fix-5.1-rc7\u0027 of git://git.infradead.org/users/vkoul/slave-dma:\n dmaengine: mediatek-cqdma: fix wrong register usage in mtk_cqdma_start\n dmaengine: sh: rcar-dmac: Fix glitch in dmaengine_tx_status\n dmaengine: sh: rcar-dmac: With cyclic DMA residue 0 is valid\n dmaengine: bcm2835: Avoid GFP_KERNEL in device_prep_slave_sg\n" }, { "commit": "25cce03b1d06e4b742f6dafdda2f4d80c13bdc18", "tree": "e6698796fe1063223bbdb413d4a1314162edcab3", "parents": [ "037904a22bf8b2c999a6e2a8ba971b549c1e9600", "3a349763cf11e63534b8f2d302f2d0c790566497" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Apr 27 16:27:02 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Apr 27 16:27:02 2019 -0700" }, "message": "Merge branch \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input\n\nPull input fixes from Dmitry Torokhov:\n \"Just a couple of fixups for Synaptics RMI4 driver and allowing\n snvs_pwrkey to be selected on more boards\"\n\n* \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input:\n Input: synaptics-rmi4 - write config register values to the right offset\n Input: synaptics-rmi4 - fix possible double free\n Input: snvs_pwrkey - make it depend on ARCH_MXC\n" }, { "commit": "037904a22bf8b2c999a6e2a8ba971b549c1e9600", "tree": "b62e0b0feaf8efcd895e544815ee2e37a781588d", "parents": [ "15d4e26b816a39f2d1ba40bacb8e8ecf8884477c", "0d02113b31b2017dd349ec9df2314e798a90fa6e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Apr 27 10:21:29 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Apr 27 10:21:29 2019 -0700" }, "message": "Merge branch \u0027x86-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull x86 fixes from Ingo Molnar:\n\n - Fix an early boot crash in the RSDP parsing code by effectively\n turning off the parsing call - we ran out of time but want to fix the\n regression. The more involved fix is being worked on.\n\n - Fix a crash that can trigger in the kmemlek code.\n\n* \u0027x86-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n x86/mm: Fix a crash with kmemleak_scan()\n x86/boot: Disable RSDP parsing temporarily\n" }, { "commit": "15d4e26b816a39f2d1ba40bacb8e8ecf8884477c", "tree": "4e19764816eded5f3fed5e2768c829d9beca6d53", "parents": [ "5084991663650a238dd9d1981e09eef00a90594c", "a860fa7b96e1a1c974556327aa1aee852d434c21" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Apr 27 10:18:40 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Apr 27 10:18:40 2019 -0700" }, "message": "Merge branch \u0027sched-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull scheduler fix from Ingo Molnar:\n \"Fix a division by zero bug that can trigger in the NUMA placement\n code\"\n\n* \u0027sched-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n sched/numa: Fix a possible divide-by-zero\n" }, { "commit": "5084991663650a238dd9d1981e09eef00a90594c", "tree": "0e27b4f7c0bbef7c627971b7548550c2f974c82f", "parents": [ "baf76f0c58aec435a3a864075b8f6d8ee5d1f17e", "82c99f7a81f28f8c1be5f701c8377d14c4075b10" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Apr 27 09:41:14 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Apr 27 09:41:14 2019 -0700" }, "message": "Merge branch \u0027perf-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull perf fix from Ingo Molnar:\n \"A cstate event enumeration fix for Kaby/Coffee Lake CPUs\"\n\n* \u0027perf-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n perf/x86/intel: Update KBL Package C-state events to also include PC8/PC9/PC10 counters\n" }, { "commit": "baf76f0c58aec435a3a864075b8f6d8ee5d1f17e", "tree": "39120990be591697b26a244388918c03675823af", "parents": [ "ce944935eef2a56f7efe5c765794e77380651b58" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Apr 25 16:13:58 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 18:19:09 2019 -0700" }, "message": "slip: make slhc_free() silently accept an error pointer\n\nThis way, slhc_free() accepts what slhc_init() returns, whether that is\nan error or not.\n\nIn particular, the pattern in sl_alloc_bufs() is\n\n slcomp \u003d slhc_init(16, 16);\n ...\n slhc_free(slcomp);\n\nfor the error handling path, and rather than complicate that code, just\nmake it ok to always free what was returned by the init function.\n\nThat\u0027s what the code used to do before commit 4ab42d78e37a (\"ppp, slip:\nValidate VJ compression slot parameters completely\") when slhc_init()\njust returned NULL for the error case, with no actual indication of the\ndetails of the error.\n\nReported-by: syzbot+45474c076a4927533d2e@syzkaller.appspotmail.com\nFixes: 4ab42d78e37a (\"ppp, slip: Validate VJ compression slot parameters completely\")\nAcked-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nCc: David Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "ce944935eef2a56f7efe5c765794e77380651b58", "tree": "2223065a8f33e7cf5cdf1bac36aa3366e4a34eff", "parents": [ "857e17c2ee7c426c1f8998ccd48e2d5a7542148d", "89189557b47b35683a27c80ee78aef18248eefb4" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 18:15:33 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 18:15:33 2019 -0700" }, "message": "Merge branch \u0027akpm\u0027 (patches from Andrew)\n\nMerge misc fixes from Andrew Morton:\n \"9 fixes\"\n\n* emailed patches from Andrew Morton \u003cakpm@linux-foundation.org\u003e:\n fs/proc/proc_sysctl.c: Fix a NULL pointer dereference\n mm/page_alloc.c: fix never set ALLOC_NOFRAGMENT flag\n mm/page_alloc.c: avoid potential NULL pointer dereference\n mm, page_alloc: always use a captured page regardless of compaction result\n mm: do not boost watermarks to avoid fragmentation for the DISCONTIG memory model\n lib/test_vmalloc.c: do not create cpumask_t variable on stack\n lib/Kconfig.debug: fix build error without CONFIG_BLOCK\n zram: pass down the bvec we need to read into in the work struct\n mm/memory_hotplug.c: drop memory device reference after find_memory_block()\n" }, { "commit": "3a349763cf11e63534b8f2d302f2d0c790566497", "tree": "afe88353fbb88a6cca322ae2b82320837b827566", "parents": [ "bce1a78423961fce676ac65540a31b6ffd179e6d" ], "author": { "name": "Lucas Stach", "email": "l.stach@pengutronix.de", "time": "Fri Apr 26 17:22:01 2019 -0700" }, "committer": { "name": "Dmitry Torokhov", "email": "dmitry.torokhov@gmail.com", "time": "Fri Apr 26 17:35:32 2019 -0700" }, "message": "Input: synaptics-rmi4 - write config register values to the right offset\n\nCurrently any changed config register values don\u0027t take effect, as the\nfunction to write them back is called with the wrong register offset.\n\nFixes: ff8f83708b3e (Input: synaptics-rmi4 - add support for 2D\n sensors and F11)\nSigned-off-by: Lucas Stach \u003cl.stach@pengutronix.de\u003e\nReviewed-by: Philipp Zabel \u003cp.zabel@pengutronix.de\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Dmitry Torokhov \u003cdmitry.torokhov@gmail.com\u003e\n" }, { "commit": "857e17c2ee7c426c1f8998ccd48e2d5a7542148d", "tree": "110dfa1eefee23724d48d4221db9a075b3b63184", "parents": [ "e9e1a2e7b486e3940badb6d743c8841ed94517b6", "4e69ecf4da1ee0b2ac735e1f1bb13935acd5a38d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 11:26:53 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 11:26:53 2019 -0700" }, "message": "Merge tag \u0027arm64-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux\n\nPull arm64 fixes from Catalin Marinas:\n\n - keep the tail of an unaligned initrd reserved\n\n - adjust ftrace_make_call() to deal with the relative nature of PLTs\n\n* tag \u0027arm64-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:\n arm64/module: ftrace: deal with place relative nature of PLTs\n arm64: mm: Ensure tail of unaligned initrd is reserved\n" }, { "commit": "e9e1a2e7b486e3940badb6d743c8841ed94517b6", "tree": "7bccb028f07659cbc060e142ecb8f46f4073b206", "parents": [ "29279d21997ae4e80dc8b094c5b916cca3e366b8", "d6097c9e4454adf1f8f2c9547c2fa6060d55d952" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 11:09:55 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 11:09:55 2019 -0700" }, "message": "Merge tag \u0027trace-v5.1-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace\n\nPull tracing fixes from Steven Rostedt:\n \"Three tracing fixes:\n\n - Use \"nosteal\" for ring buffer splice pages\n\n - Memory leak fix in error path of trace_pid_write()\n\n - Fix preempt_enable_no_resched() (use preempt_enable()) in ring\n buffer code\"\n\n* tag \u0027trace-v5.1-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace:\n trace: Fix preempt_enable_no_resched() abuse\n tracing: Fix a memory leak by early error exit in trace_pid_write()\n tracing: Fix buffer_ref pipe ops\n" }, { "commit": "29279d21997ae4e80dc8b094c5b916cca3e366b8", "tree": "73b9f958c86e793e8746c2f934e56a5996834b6b", "parents": [ "4e40f0f35be86ed5d8724d52bc38af5dbab06470", "357798909164bf423eac6a78ff7da7e98d2d7f7f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 10:46:22 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 10:46:22 2019 -0700" }, "message": "Merge tag \u0027gpio-v5.1-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio\n\nPull GPIO fixes from Linus Walleij:\n \"Not much to say about them, regular fixes:\n\n - Fix a bug on the errorpath of gpiochip_add_data_with_key()\n\n - IRQ type setting on the spreadtrum GPIO driver\"\n\n* tag \u0027gpio-v5.1-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio:\n gpio: Fix gpiochip_add_data_with_key() error path\n gpio: eic: sprd: Fix incorrect irq type setting for the sync EIC\n" }, { "commit": "4e40f0f35be86ed5d8724d52bc38af5dbab06470", "tree": "b2819457bfc69478cfbf1622d4f0a8c28d8e29ac", "parents": [ "d0473f978e61557464daa8547008fa2cd0c63a17", "6db71bea59f964d241bdcf1e73e47aebb7427888" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 10:39:46 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 10:39:46 2019 -0700" }, "message": "Merge tag \u0027drm-fixes-2019-04-26\u0027 of git://anongit.freedesktop.org/drm/drm\n\nPull drm fixes from Dave Airlie:\n \"Regular drm fixes, nothing too outstanding, I\u0027m guessing Easter was\n slowing people down.\n\n i915:\n - FEC enable fix\n - BXT display lanes fix\n\n ttm:\n - fix reinit for reloading drivers regression\n\n imx:\n - DP CSC fix\n\n sun4i:\n - module unload/load fix\n\n vc4:\n - memory leak fix\n - compile fix\n\n dw-hdmi:\n - rockchip scdc overflow fix\n\n sched:\n - docs fix\n\n vmwgfx:\n - dma api layering fix\"\n\n* tag \u0027drm-fixes-2019-04-26\u0027 of git://anongit.freedesktop.org/drm/drm:\n drm/bridge: dw-hdmi: fix SCDC configuration for ddc-i2c-bus\n drm/vmwgfx: Fix dma API layer violation\n drm/vc4: Fix compilation error reported by kbuild test bot\n drm/sun4i: Unbind components before releasing DRM and memory\n drm/vc4: Fix memory leak during gpu reset.\n drm/sched: Fix description of drm_sched_stop\n drm/imx: don\u0027t skip DP channel disable for background plane\n gpu: ipu-v3: dp: fix CSC handling\n drm/ttm: fix re-init of global structures\n drm/sun4i: Fix component unbinding and component master deletion\n drm/sun4i: Set device driver data at bind time for use in unbind\n drm/sun4i: Add missing drm_atomic_helper_shutdown at driver unbind\n drm/i915: Restore correct bxt_ddi_phy_calc_lane_lat_optim_mask() calculation\n drm/i915: Do not enable FEC without DSC\n drm: bridge: dw-hdmi: Fix overflow workaround for Rockchip SoCs\n" }, { "commit": "d0473f978e61557464daa8547008fa2cd0c63a17", "tree": "b069d3b4a81934f2696114a5b6d391ac43cfb943", "parents": [ "58130235bfcceb9198a3d979c91b04ea383a0fae", "a3d46aea46f99d134b4e0726e4826b824c3e5980" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 09:46:46 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 09:46:46 2019 -0700" }, "message": "Merge tag \u0027for-5.1-rc6-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux\n\nPull btrfs fix from David Sterba:\n \"One patch to fix a crash in io submission path, due to memory\n allocation errors.\n\n In short, the multipage bio work that landed in 5.1 caused larger bios\n that in turn require larger temporary memory for checksums. The patch\n is a workaround, we\u0027re going to rework the allocation so it does not\n require the vmalloc fallback.\n\n It took a while to identify that it\u0027s caused by patches in 5.1 and not\n a patchset that did some changes in error handling in the code. I\u0027ve\n tested it on various memory/cpu combinations, it could hit OOM but\n does not crash.\n\n The timestamp of the patch is less than a day due to updates in the\n changelog, tests were running meanwhile\"\n\n* tag \u0027for-5.1-rc6-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux:\n btrfs: Switch memory allocations in async csum calculation path to kvmalloc\n" }, { "commit": "58130235bfcceb9198a3d979c91b04ea383a0fae", "tree": "0f23a37bf20ec8b3155e33ffa6fe55eb17f8715d", "parents": [ "8113a85f872003a9f5c58f9f143054b0d8ec73a5", "13f5938d8264b5501368523c4513ff26608a33e8" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 09:45:39 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 09:45:39 2019 -0700" }, "message": "Merge tag \u00275.1-rc6-smb3-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6\n\nPull cifs fixes from Steve French:\n \"Three small SMB3 fixes (all for stable as well): two leaks and a\n rename bug\"\n\n* tag \u00275.1-rc6-smb3-fixes\u0027 of git://git.samba.org/sfrench/cifs-2.6:\n cifs: fix page reference leak with readv/writev\n cifs: do not attempt cifs operation on smb2+ rename error\n cifs: fix memory leak in SMB2_read\n" }, { "commit": "89189557b47b35683a27c80ee78aef18248eefb4", "tree": "9618fbc7b753bf2051441cae483422c4ff0a82d5", "parents": [ "8118b82eb756e271929697e8ada5f637dc443af1" ], "author": { "name": "YueHaibing", "email": "yuehaibing@huawei.com", "time": "Thu Apr 25 22:24:05 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 09:18:05 2019 -0700" }, "message": "fs/proc/proc_sysctl.c: Fix a NULL pointer dereference\n\nSyzkaller report this:\n\n sysctl could not get directory: /net//bridge -12\n kasan: CONFIG_KASAN_INLINE enabled\n kasan: GPF could be caused by NULL-ptr deref or user memory access\n general protection fault: 0000 [#1] SMP KASAN PTI\n CPU: 1 PID: 7027 Comm: syz-executor.0 Tainted: G C 5.1.0-rc3+ #8\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1ubuntu1 04/01/2014\n RIP: 0010:__write_once_size include/linux/compiler.h:220 [inline]\n RIP: 0010:__rb_change_child include/linux/rbtree_augmented.h:144 [inline]\n RIP: 0010:__rb_erase_augmented include/linux/rbtree_augmented.h:186 [inline]\n RIP: 0010:rb_erase+0x5f4/0x19f0 lib/rbtree.c:459\n Code: 00 0f 85 60 13 00 00 48 89 1a 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 48 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 \u003c80\u003e 3c 02 00 0f 85 75 0c 00 00 4d 85 ed 4c 89 2e 74 ce 4c 89 ea 48\n RSP: 0018:ffff8881bb507778 EFLAGS: 00010206\n RAX: dffffc0000000000 RBX: ffff8881f224b5b8 RCX: ffffffff818f3f6a\n RDX: 000000000000000a RSI: 0000000000000050 RDI: ffff8881f224b568\n RBP: 0000000000000000 R08: ffffed10376a0ef4 R09: ffffed10376a0ef4\n R10: 0000000000000001 R11: ffffed10376a0ef4 R12: ffff8881f224b558\n R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000\n FS: 00007f3e7ce13700(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00007fd60fbe9398 CR3: 00000001cb55c001 CR4: 00000000007606e0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n PKRU: 55555554\n Call Trace:\n erase_entry fs/proc/proc_sysctl.c:178 [inline]\n erase_header+0xe3/0x160 fs/proc/proc_sysctl.c:207\n start_unregistering fs/proc/proc_sysctl.c:331 [inline]\n drop_sysctl_table+0x558/0x880 fs/proc/proc_sysctl.c:1631\n get_subdir fs/proc/proc_sysctl.c:1022 [inline]\n __register_sysctl_table+0xd65/0x1090 fs/proc/proc_sysctl.c:1335\n br_netfilter_init+0x68/0x1000 [br_netfilter]\n do_one_initcall+0xbc/0x47d init/main.c:901\n do_init_module+0x1b5/0x547 kernel/module.c:3456\n load_module+0x6405/0x8c10 kernel/module.c:3804\n __do_sys_finit_module+0x162/0x190 kernel/module.c:3898\n do_syscall_64+0x9f/0x450 arch/x86/entry/common.c:290\n entry_SYSCALL_64_after_hwframe+0x49/0xbe\n Modules linked in: br_netfilter(+) backlight comedi(C) hid_sensor_hub max3100 ti_ads8688 udc_core fddi snd_mona leds_gpio rc_streamzap mtd pata_netcell nf_log_common rc_winfast udp_tunnel snd_usbmidi_lib snd_usb_toneport snd_usb_line6 snd_rawmidi snd_seq_device snd_hwdep videobuf2_v4l2 videobuf2_common videodev media videobuf2_vmalloc videobuf2_memops rc_gadmei_rm008z 8250_of smm665 hid_tmff hid_saitek hwmon_vid rc_ati_tv_wonder_hd_600 rc_core pata_pdc202xx_old dn_rtmsg as3722 ad714x_i2c ad714x snd_soc_cs4265 hid_kensington panel_ilitek_ili9322 drm drm_panel_orientation_quirks ipack cdc_phonet usbcore phonet hid_jabra hid extcon_arizona can_dev industrialio_triggered_buffer kfifo_buf industrialio adm1031 i2c_mux_ltc4306 i2c_mux ipmi_msghandler mlxsw_core snd_soc_cs35l34 snd_soc_core snd_pcm_dmaengine snd_pcm snd_timer ac97_bus snd_compress snd soundcore gpio_da9055 uio ecdh_generic mdio_thunder of_mdio fixed_phy libphy mdio_cavium iptable_security iptable_raw iptable_mangle\n iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 iptable_filter bpfilter ip6_vti ip_vti ip_gre ipip sit tunnel4 ip_tunnel hsr veth netdevsim vxcan batman_adv cfg80211 rfkill chnl_net caif nlmon dummy team bonding vcan bridge stp llc ip6_gre gre ip6_tunnel tunnel6 tun joydev mousedev ppdev tpm kvm_intel kvm irqbypass crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel aesni_intel ide_pci_generic piix aes_x86_64 crypto_simd cryptd ide_core glue_helper input_leds psmouse intel_agp intel_gtt serio_raw ata_generic i2c_piix4 agpgart pata_acpi parport_pc parport floppy rtc_cmos sch_fq_codel ip_tables x_tables sha1_ssse3 sha1_generic ipv6 [last unloaded: br_netfilter]\n Dumping ftrace buffer:\n (ftrace buffer empty)\n ---[ end trace 68741688d5fbfe85 ]---\n\ncommit 23da9588037e (\"fs/proc/proc_sysctl.c: fix NULL pointer\ndereference in put_links\") forgot to handle start_unregistering() case,\nwhile header-\u003eparent is NULL, it calls erase_header() and as seen in the\nabove syzkaller call trace, accessing \u0026header-\u003eparent-\u003eroot will trigger\na NULL pointer dereference.\n\nAs that commit explained, there is also no need to call\nstart_unregistering() if header-\u003eparent is NULL.\n\nLink: http://lkml.kernel.org/r/20190409153622.28112-1-yuehaibing@huawei.com\nFixes: 23da9588037e (\"fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links\")\nFixes: 0e47c99d7fe25 (\"sysctl: Replace root_list with links between sysctl_table_sets\")\nSigned-off-by: YueHaibing \u003cyuehaibing@huawei.com\u003e\nReported-by: Hulk Robot \u003chulkci@huawei.com\u003e\nReviewed-by: Kees Cook \u003ckeescook@chromium.org\u003e\nCc: Luis Chamberlain \u003cmcgrof@kernel.org\u003e\nCc: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: \"Eric W. Biederman\" \u003cebiederm@xmission.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "8118b82eb756e271929697e8ada5f637dc443af1", "tree": "bbbf95c64a11095a12f9e2148cdbd8037d9a141b", "parents": [ "8139ad043d632c0e9e12d760068a7a8e91659aa1" ], "author": { "name": "Andrey Ryabinin", "email": "aryabinin@virtuozzo.com", "time": "Thu Apr 25 22:24:01 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 09:18:05 2019 -0700" }, "message": "mm/page_alloc.c: fix never set ALLOC_NOFRAGMENT flag\n\nCommit 0a79cdad5eb2 (\"mm: use alloc_flags to record if kswapd can wake\")\nremoved setting of the ALLOC_NOFRAGMENT flag. Bring it back.\n\nThe runtime effect is that ALLOC_NOFRAGMENT behaviour is restored so\nthat allocations are spread across local zones to avoid fragmentation\ndue to mixing pageblocks as long as possible.\n\nLink: http://lkml.kernel.org/r/20190423120806.3503-2-aryabinin@virtuozzo.com\nFixes: 0a79cdad5eb2 (\"mm: use alloc_flags to record if kswapd can wake\")\nSigned-off-by: Andrey Ryabinin \u003caryabinin@virtuozzo.com\u003e\nAcked-by: Mel Gorman \u003cmgorman@techsingularity.net\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "8139ad043d632c0e9e12d760068a7a8e91659aa1", "tree": "0f1168febb3f2741513726bd7832a419147cde35", "parents": [ "ee8ab0eeb49bd3982090c8f14dc9cc65bcd13c5c" ], "author": { "name": "Andrey Ryabinin", "email": "aryabinin@virtuozzo.com", "time": "Thu Apr 25 22:23:58 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 09:18:05 2019 -0700" }, "message": "mm/page_alloc.c: avoid potential NULL pointer dereference\n\nac.preferred_zoneref-\u003ezone passed to alloc_flags_nofragment() can be NULL.\n\u0027zone\u0027 pointer unconditionally derefernced in alloc_flags_nofragment().\nBail out on NULL zone to avoid potential crash. Currently we don\u0027t see\nany crashes only because alloc_flags_nofragment() has another bug which\nallows compiler to optimize away all accesses to \u0027zone\u0027.\n\nLink: http://lkml.kernel.org/r/20190423120806.3503-1-aryabinin@virtuozzo.com\nFixes: 6bb154504f8b (\"mm, page_alloc: spread allocations across zones before introducing fragmentation\")\nSigned-off-by: Andrey Ryabinin \u003caryabinin@virtuozzo.com\u003e\nAcked-by: Mel Gorman \u003cmgorman@techsingularity.net\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "ee8ab0eeb49bd3982090c8f14dc9cc65bcd13c5c", "tree": "d77c45d5e1e6509eff55ec96a318888271419ddf", "parents": [ "24512228b7a3f412b5a51f189df302616b021c33" ], "author": { "name": "Mel Gorman", "email": "mgorman@techsingularity.net", "time": "Thu Apr 25 22:23:54 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 09:18:05 2019 -0700" }, "message": "mm, page_alloc: always use a captured page regardless of compaction result\n\nDuring the development of commit 5e1f0f098b46 (\"mm, compaction: capture\na page under direct compaction\"), a paranoid check was added to ensure\nthat if a captured page was available after compaction that it was\nconsistent with the final state of compaction. The intent was to catch\nserious programming bugs such as using a stale page pointer and causing\ncorruption problems.\n\nHowever, it is possible to get a captured page even if compaction was\nunsuccessful if an interrupt triggered and happened to free pages in\ninterrupt context that got merged into a suitable high-order page. It\u0027s\nhighly unlikely but Li Wang did report the following warning on s390\noccuring when testing OOM handling. Note that the warning is slightly\nedited for clarity.\n\n WARNING: CPU: 0 PID: 9783 at mm/page_alloc.c:3777 __alloc_pages_direct_compact+0x182/0x190\n Modules linked in: rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver nfs\n lockd grace fscache sunrpc pkey ghash_s390 prng xts aes_s390\n des_s390 des_generic sha512_s390 zcrypt_cex4 zcrypt vmur binfmt_misc\n ip_tables xfs libcrc32c dasd_fba_mod qeth_l2 dasd_eckd_mod dasd_mod\n qeth qdio lcs ctcm ccwgroup fsm dm_mirror dm_region_hash dm_log\n dm_mod\n CPU: 0 PID: 9783 Comm: copy.sh Kdump: loaded Not tainted 5.1.0-rc 5 #1\n\nThis patch simply removes the check entirely instead of trying to be\nclever about pages freed from interrupt context. If a serious\nprogramming error was introduced, it is highly likely to be caught by\nprep_new_page() instead.\n\nLink: http://lkml.kernel.org/r/20190419085133.GH18914@techsingularity.net\nFixes: 5e1f0f098b46 (\"mm, compaction: capture a page under direct compaction\")\nSigned-off-by: Mel Gorman \u003cmgorman@techsingularity.net\u003e\nReported-by: Li Wang \u003cliwang@redhat.com\u003e\nAcked-by: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "24512228b7a3f412b5a51f189df302616b021c33", "tree": "983d0e8ea8ebc889bf36b79e2a70ce2c74c13e1e", "parents": [ "e789803507b2e154ed452865ee981b038654e98d" ], "author": { "name": "Mel Gorman", "email": "mgorman@techsingularity.net", "time": "Thu Apr 25 22:23:51 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 09:18:05 2019 -0700" }, "message": "mm: do not boost watermarks to avoid fragmentation for the DISCONTIG memory model\n\nMikulas Patocka reported that commit 1c30844d2dfe (\"mm: reclaim small\namounts of memory when an external fragmentation event occurs\") \"broke\"\nmemory management on parisc.\n\nThe machine is not NUMA but the DISCONTIG model creates three pgdats\neven though it\u0027s a UMA machine for the following ranges\n\n 0) Start 0x0000000000000000 End 0x000000003fffffff Size 1024 MB\n 1) Start 0x0000000100000000 End 0x00000001bfdfffff Size 3070 MB\n 2) Start 0x0000004040000000 End 0x00000040ffffffff Size 3072 MB\n\nMikulas reported:\n\n\tWith the patch 1c30844d2, the kernel will incorrectly reclaim the\n\tfirst zone when it fills up, ignoring the fact that there are two\n\tcompletely free zones. Basiscally, it limits cache size to 1GiB.\n\n\tFor example, if I run:\n\t# dd if\u003d/dev/sda of\u003d/dev/null bs\u003d1M count\u003d2048\n\n\t- with the proper kernel, there should be \"Buffers - 2GiB\"\n\twhen this command finishes. With the patch 1c30844d2, buffers\n\twill consume just 1GiB or slightly more, because the kernel was\n\tincorrectly reclaiming them.\n\nThe page allocator and reclaim makes assumptions that pgdats really\nrepresent NUMA nodes and zones represent ranges and makes decisions on\nthat basis. Watermark boosting for small pgdats leads to unexpected\nresults even though this would have behaved reasonably on SPARSEMEM.\n\nDISCONTIG is essentially deprecated and even parisc plans to move to\nSPARSEMEM so there is no need to be fancy, this patch simply disables\nwatermark boosting by default on DISCONTIGMEM.\n\nLink: http://lkml.kernel.org/r/20190419094335.GJ18914@techsingularity.net\nFixes: 1c30844d2dfe (\"mm: reclaim small amounts of memory when an external fragmentation event occurs\")\nSigned-off-by: Mel Gorman \u003cmgorman@techsingularity.net\u003e\nReported-by: Mikulas Patocka \u003cmpatocka@redhat.com\u003e\nTested-by: Mikulas Patocka \u003cmpatocka@redhat.com\u003e\nAcked-by: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: James Bottomley \u003cJames.Bottomley@hansenpartnership.com\u003e\nCc: Matthew Wilcox \u003cwilly@infradead.org\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "e789803507b2e154ed452865ee981b038654e98d", "tree": "2ce43c282b482fdcf8ecff53198193a48fb15d09", "parents": [ "ae3d6a323347940f0548bbb4b17f0bb2e9164169" ], "author": { "name": "Uladzislau Rezki (Sony)", "email": "urezki@gmail.com", "time": "Thu Apr 25 22:23:47 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 09:18:05 2019 -0700" }, "message": "lib/test_vmalloc.c: do not create cpumask_t variable on stack\n\nOn my \"Intel(R) Xeon(R) W-2135 CPU @ 3.70GHz\" system(12 CPUs) i get the\nwarning from the compiler about frame size:\n\n warning: the frame size of 1096 bytes is larger than 1024 bytes [-Wframe-larger-than\u003d]\n\nthe size of cpumask_t depends on number of CPUs, therefore just make use\nof cpumask_of() in set_cpus_allowed_ptr() as a second argument.\n\nLink: http://lkml.kernel.org/r/20190418193925.9361-1-urezki@gmail.com\nSigned-off-by: Uladzislau Rezki (Sony) \u003curezki@gmail.com\u003e\nReviewed-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nReviewed-by: Roman Gushchin \u003cguro@fb.com\u003e\nCc: Uladzislau Rezki \u003curezki@gmail.com\u003e\nCc: Michal Hocko \u003cmhocko@suse.com\u003e\nCc: Matthew Wilcox \u003cwilly@infradead.org\u003e\nCc: Thomas Garnier \u003cthgarnie@google.com\u003e\nCc: Oleksiy Avramchenko \u003coleksiy.avramchenko@sonymobile.com\u003e\nCc: Steven Rostedt \u003crostedt@goodmis.org\u003e\nCc: Joel Fernandes \u003cjoelaf@google.com\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Ingo Molnar \u003cmingo@elte.hu\u003e\nCc: Tejun Heo \u003ctj@kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "ae3d6a323347940f0548bbb4b17f0bb2e9164169", "tree": "52b49fcd4af5e0fbbbea211e02486729fe719b29", "parents": [ "e153abc0739ff77bd89c9ba1688cdb963464af97" ], "author": { "name": "YueHaibing", "email": "yuehaibing@huawei.com", "time": "Thu Apr 25 22:23:44 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 09:18:05 2019 -0700" }, "message": "lib/Kconfig.debug: fix build error without CONFIG_BLOCK\n\nIf CONFIG_TEST_KMOD is set to M, while CONFIG_BLOCK is not set, XFS and\nBTRFS can not be compiled successly.\n\nLink: http://lkml.kernel.org/r/20190410075434.35220-1-yuehaibing@huawei.com\nFixes: d9c6a72d6fa2 (\"kmod: add test driver to stress test the module loader\")\nSigned-off-by: YueHaibing \u003cyuehaibing@huawei.com\u003e\nReported-by: Hulk Robot \u003chulkci@huawei.com\u003e\nReviewed-by: Kees Cook \u003ckeescook@chromium.org\u003e\nCc: Masahiro Yamada \u003cyamada.masahiro@socionext.com\u003e\nCc: Petr Mladek \u003cpmladek@suse.com\u003e\nCc: Andy Shevchenko \u003candriy.shevchenko@linux.intel.com\u003e\nCc: Matthew Wilcox \u003cwilly@infradead.org\u003e\nCc: Joe Lawrence \u003cjoe.lawrence@redhat.com\u003e\nCc: Robin Murphy \u003crobin.murphy@arm.com\u003e\nCc: Luis Chamberlain \u003cmcgrof@kernel.org\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "e153abc0739ff77bd89c9ba1688cdb963464af97", "tree": "87f8fcbdd0fda1970e0dffd7b1a10edfee6df158", "parents": [ "89c02e69fc5245f8a2f34b58b42d43a737af1a5e" ], "author": { "name": "Jérôme Glisse", "email": "jglisse@redhat.com", "time": "Thu Apr 25 22:23:41 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 09:18:05 2019 -0700" }, "message": "zram: pass down the bvec we need to read into in the work struct\n\nWhen scheduling work item to read page we need to pass down the proper\nbvec struct which points to the page to read into. Before this patch it\nuses a randomly initialized bvec (only if PAGE_SIZE !\u003d 4096) which is\nwrong.\n\nNote that without this patch on arch/kernel where PAGE_SIZE !\u003d 4096\nuserspace could read random memory through a zram block device (thought\nuserspace probably would have no control on the address being read).\n\nLink: http://lkml.kernel.org/r/20190408183219.26377-1-jglisse@redhat.com\nSigned-off-by: Jérôme Glisse \u003cjglisse@redhat.com\u003e\nReviewed-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nReviewed-by: Sergey Senozhatsky \u003csergey.senozhatsky@gmail.com\u003e\nAcked-by: Minchan Kim \u003cminchan@kernel.org\u003e\nCc: Nitin Gupta \u003cngupta@vflare.org\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "89c02e69fc5245f8a2f34b58b42d43a737af1a5e", "tree": "106f7511c88d943bfd8abc0a42468982a46b8c11", "parents": [ "8113a85f872003a9f5c58f9f143054b0d8ec73a5" ], "author": { "name": "David Hildenbrand", "email": "david@redhat.com", "time": "Thu Apr 25 22:23:37 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Apr 26 09:18:04 2019 -0700" }, "message": "mm/memory_hotplug.c: drop memory device reference after find_memory_block()\n\nRight now we are using find_memory_block() to get the node id for the\npfn range to online. We are missing to drop a reference to the memory\nblock device. While the device still gets unregistered via\ndevice_unregister(), resulting in no user visible problem, the device is\nnever released via device_release(), resulting in a memory leak. Fix\nthat by properly using a put_device().\n\nLink: http://lkml.kernel.org/r/20190411110955.1430-1-david@redhat.com\nFixes: d0dc12e86b31 (\"mm/memory_hotplug: optimize memory hotplug\")\nSigned-off-by: David Hildenbrand \u003cdavid@redhat.com\u003e\nReviewed-by: Oscar Salvador \u003cosalvador@suse.de\u003e\nReviewed-by: Wei Yang \u003crichard.weiyang@gmail.com\u003e\nAcked-by: Michal Hocko \u003cmhocko@suse.com\u003e\nAcked-by: Pankaj Gupta \u003cpagupta@redhat.com\u003e\nCc: David Hildenbrand \u003cdavid@redhat.com\u003e\nCc: Pavel Tatashin \u003cpasha.tatashin@soleen.com\u003e\nCc: Qian Cai \u003ccai@lca.pw\u003e\nCc: Arun KS \u003carunks@codeaurora.org\u003e\nCc: Mathieu Malaterre \u003cmalat@debian.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "d6097c9e4454adf1f8f2c9547c2fa6060d55d952", "tree": "cd9864136dae1127da63fa0b56ad79016cae53c3", "parents": [ "91862cc7867bba4ee5c8fcf0ca2f1d30427b6129" ], "author": { "name": "Peter Zijlstra", "email": "peterz@infradead.org", "time": "Tue Apr 23 22:03:18 2019 +0200" }, "committer": { "name": "Steven Rostedt (VMware)", "email": "rostedt@goodmis.org", "time": "Fri Apr 26 11:45:03 2019 -0400" }, "message": "trace: Fix preempt_enable_no_resched() abuse\n\nUnless the very next line is schedule(), or implies it, one must not use\npreempt_enable_no_resched(). It can cause a preemption to go missing and\nthereby cause arbitrary delays, breaking the PREEMPT\u003dy invariant.\n\nLink: http://lkml.kernel.org/r/20190423200318.GY14281@hirez.programming.kicks-ass.net\n\nCc: Waiman Long \u003clongman@redhat.com\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Ingo Molnar \u003cmingo@redhat.com\u003e\nCc: Will Deacon \u003cwill.deacon@arm.com\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: the arch/x86 maintainers \u003cx86@kernel.org\u003e\nCc: Davidlohr Bueso \u003cdave@stgolabs.net\u003e\nCc: Tim Chen \u003ctim.c.chen@linux.intel.com\u003e\nCc: huang ying \u003chuang.ying.caritas@gmail.com\u003e\nCc: Roman Gushchin \u003cguro@fb.com\u003e\nCc: Alexei Starovoitov \u003cast@kernel.org\u003e\nCc: Daniel Borkmann \u003cdaniel@iogearbox.net\u003e\nCc: stable@vger.kernel.org\nFixes: 2c2d7329d8af (\"tracing/ftrace: use preempt_enable_no_resched_notrace in ring_buffer_time_stamp()\")\nSigned-off-by: Peter Zijlstra (Intel) \u003cpeterz@infradead.org\u003e\nSigned-off-by: Steven Rostedt (VMware) \u003crostedt@goodmis.org\u003e\n" }, { "commit": "91862cc7867bba4ee5c8fcf0ca2f1d30427b6129", "tree": "e86c2be2969fddc37d14081504b90df8aab8c145", "parents": [ "b987222654f84f7b4ca95b3a55eca784cb30235b" ], "author": { "name": "Wenwen Wang", "email": "wang6495@umn.edu", "time": "Fri Apr 19 21:22:59 2019 -0500" }, "committer": { "name": "Steven Rostedt (VMware)", "email": "rostedt@goodmis.org", "time": "Fri Apr 26 11:45:03 2019 -0400" }, "message": "tracing: Fix a memory leak by early error exit in trace_pid_write()\n\nIn trace_pid_write(), the buffer for trace parser is allocated through\nkmalloc() in trace_parser_get_init(). Later on, after the buffer is used,\nit is then freed through kfree() in trace_parser_put(). However, it is\npossible that trace_pid_write() is terminated due to unexpected errors,\ne.g., ENOMEM. In that case, the allocated buffer will not be freed, which\nis a memory leak bug.\n\nTo fix this issue, free the allocated buffer when an error is encountered.\n\nLink: http://lkml.kernel.org/r/1555726979-15633-1-git-send-email-wang6495@umn.edu\n\nFixes: f4d34a87e9c10 (\"tracing: Use pid bitmap instead of a pid array for set_event_pid\")\nCc: stable@vger.kernel.org\nSigned-off-by: Wenwen Wang \u003cwang6495@umn.edu\u003e\nSigned-off-by: Steven Rostedt (VMware) \u003crostedt@goodmis.org\u003e\n" }, { "commit": "b987222654f84f7b4ca95b3a55eca784cb30235b", "tree": "ef55bb50dacc0c5631b0f9e3b5ec83bf63ce97fe", "parents": [ "79a3aaa7b82e3106be97842dedfd8429248896e6" ], "author": { "name": "Jann Horn", "email": "jannh@google.com", "time": "Thu Apr 04 23:59:25 2019 +0200" }, "committer": { "name": "Steven Rostedt (VMware)", "email": "rostedt@goodmis.org", "time": "Fri Apr 26 11:44:39 2019 -0400" }, "message": "tracing: Fix buffer_ref pipe ops\n\nThis fixes multiple issues in buffer_pipe_buf_ops:\n\n - The -\u003esteal() handler must not return zero unless the pipe buffer has\n the only reference to the page. But generic_pipe_buf_steal() assumes\n that every reference to the pipe is tracked by the page\u0027s refcount,\n which isn\u0027t true for these buffers - buffer_pipe_buf_get(), which\n duplicates a buffer, doesn\u0027t touch the page\u0027s refcount.\n Fix it by using generic_pipe_buf_nosteal(), which refuses every\n attempted theft. It should be easy to actually support -\u003esteal, but the\n only current users of pipe_buf_steal() are the virtio console and FUSE,\n and they also only use it as an optimization. So it\u0027s probably not worth\n the effort.\n - The -\u003eget() and -\u003erelease() handlers can be invoked concurrently on pipe\n buffers backed by the same struct buffer_ref. Make them safe against\n concurrency by using refcount_t.\n - The pointers stored in -\u003eprivate were only zeroed out when the last\n reference to the buffer_ref was dropped. As far as I know, this\n shouldn\u0027t be necessary anyway, but if we do it, let\u0027s always do it.\n\nLink: http://lkml.kernel.org/r/20190404215925.253531-1-jannh@google.com\n\nCc: Ingo Molnar \u003cmingo@redhat.com\u003e\nCc: Masami Hiramatsu \u003cmhiramat@kernel.org\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: stable@vger.kernel.org\nFixes: 73a757e63114d (\"ring-buffer: Return reader page back into existing ring buffer\")\nSigned-off-by: Jann Horn \u003cjannh@google.com\u003e\nSigned-off-by: Steven Rostedt (VMware) \u003crostedt@goodmis.org\u003e\n" }, { "commit": "5bb5c3a3ac102158b799bf5eda871223aa5e9c25", "tree": "eeab3b4f482aa00ac6542ab8e5468a67f9580a82", "parents": [ "6e7da74775348d96e2d7efaf3f91410e18c481ef" ], "author": { "name": "Shun-Chih Yu", "email": "shun-chih.yu@mediatek.com", "time": "Thu Apr 25 11:53:50 2019 +0800" }, "committer": { "name": "Vinod Koul", "email": "vkoul@kernel.org", "time": "Fri Apr 26 17:26:38 2019 +0530" }, "message": "dmaengine: mediatek-cqdma: fix wrong register usage in mtk_cqdma_start\n\nThis patch fixes wrong register usage in the mtk_cqdma_start. The\ndestination register should be MTK_CQDMA_DST2 instead.\n\nFixes: b1f01e48df5a (\"dmaengine: mediatek: Add MediaTek Command-Queue DMA controller for MT6765 SoC\")\nSigned-off-by: Shun-Chih Yu \u003cshun-chih.yu@mediatek.com\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Vinod Koul \u003cvkoul@kernel.org\u003e\n" }, { "commit": "6db71bea59f964d241bdcf1e73e47aebb7427888", "tree": "f53b6ffab7f88a8b845b1c080a49a023866a5dd3", "parents": [ "a35d9d6a86774bef25a06f6ae1bae8af3f8b05fe", "7bcde275eb1d0ac8793c77c7e666a886eb16633d" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Apr 26 10:32:57 2019 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Apr 26 10:33:33 2019 +1000" }, "message": "Merge tag \u0027imx-drm-fixes-2019-04-25\u0027 of git://git.pengutronix.de/pza/linux into drm-fixes\n\ndrm/imx: fix DP CSC handling\n\n- Fix the DP color space conversion matrix setup to avoid bugs where\n disabling the overlay plane while both primary and overlay plane are\n routed via the CSC unit would not reconfigure the CSC routing\n properly, leaving the display in a nonworking state, or the CSC\n setting from a previously set mode would be left behind, causing\n wrong colors when reenabling the display in certain configurations.\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Philipp Zabel \u003cp.zabel@pengutronix.de\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/1556183136.2271.3.camel@pengutronix.de\n" }, { "commit": "a35d9d6a86774bef25a06f6ae1bae8af3f8b05fe", "tree": "287fd3ad312e35280b1461fa169bda63f51dc97a", "parents": [ "528ffbfe6431ba85de983a113221959e41b724d2", "81103355b1e23345dbcdeccad59962a424da4a34" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Apr 26 10:30:17 2019 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Apr 26 10:31:26 2019 +1000" }, "message": "Merge branch \u0027vmwgfx-fixes-5.1\u0027 of git://people.freedesktop.org/~thomash/linux into drm-fixes\n\nA single fix for a layer violation requested by Cristoph.\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nFrom: Thomas Hellstrom \u003cthellstrom@vmware.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20190425204100.3982-1-thellstrom@vmware.com\n" }, { "commit": "528ffbfe6431ba85de983a113221959e41b724d2", "tree": "274a48467b11621b4d2d0f2492c34647f878845e", "parents": [ "f21492d33ea413b649aa42de565900683a2723e0", "c4cba44eeecab9d5ccd3dd2d5520a7d1e5be544f" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Apr 26 10:29:07 2019 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Apr 26 10:29:16 2019 +1000" }, "message": "Merge tag \u0027drm-misc-fixes-2019-04-25\u0027 of git://anongit.freedesktop.org/drm/drm-misc into drm-fixes\n\n- sun4i: Fix module loading / unloading\n- vc4: Fix a compilation error and memory leak\n- dw-hdmi: Fix an overflow on Rockchip and SCDC configuration\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Maxime Ripard \u003cmaxime.ripard@bootlin.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20190425132739.pngmfiqucqmulxkz@flea\n" }, { "commit": "f21492d33ea413b649aa42de565900683a2723e0", "tree": "fad43d0fbd1b744c59c6cdb396d60db9afd0db68", "parents": [ "b3a39c7982137336eea04070f3d879e53cb85c16", "f5d356328d676deca698d01324000e0d98fba643" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Apr 26 10:25:57 2019 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Apr 26 10:26:02 2019 +1000" }, "message": "Merge branch \u0027drm-fixes-5.1\u0027 of git://people.freedesktop.org/~agd5f/linux into drm-fixes\n\n- ttm regression fix\n- sched documentation fix\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nFrom: Alex Deucher \u003calexdeucher@gmail.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20190424230120.3423-1-alexander.deucher@amd.com\n" }, { "commit": "b3a39c7982137336eea04070f3d879e53cb85c16", "tree": "acbf5cb1550e60232cd81406f076c4d0b1899cb4", "parents": [ "a0cecc23cfcbf2626497a8c8770856dd56b67917", "f5c58ba18ab8ea2169670ed880e4d31ed772ad10" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Apr 26 10:13:49 2019 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Fri Apr 26 10:13:59 2019 +1000" }, "message": "Merge tag \u0027drm-intel-fixes-2019-04-24\u0027 of git://anongit.freedesktop.org/drm/drm-intel into drm-fixes\n\nA fix for display lanes calculation for BXT and a protection\nto avoid enabling FEC without DSC.\n\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n\nFrom: Rodrigo Vivi \u003crodrigo.vivi@intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20190424215359.GA26100@intel.com\n" }, { "commit": "7a0df7fbc14505e2e2be19ed08654a09e1ed5bf6", "tree": "15ab530738a13f1b95c42a065744926bdd7f0e47", "parents": [ "4ee0776760af03f181e6b80baf5fb1cc1a980f50" ], "author": { "name": "Tycho Andersen", "email": "tycho@tycho.ws", "time": "Wed Mar 06 13:14:13 2019 -0700" }, "committer": { "name": "Kees Cook", "email": "keescook@chromium.org", "time": "Thu Apr 25 15:55:58 2019 -0700" }, "message": "seccomp: Make NEW_LISTENER and TSYNC flags exclusive\n\nAs the comment notes, the return codes for TSYNC and NEW_LISTENER\nconflict, because they both return positive values, one in the case of\nsuccess and one in the case of error. So, let\u0027s disallow both of these\nflags together.\n\nWhile this is technically a userspace break, all the users I know\nof are still waiting on me to land this feature in libseccomp, so I\nthink it\u0027ll be safe. Also, at present my use case doesn\u0027t require\nTSYNC at all, so this isn\u0027t a big deal to disallow. If someone\nwanted to support this, a path forward would be to add a new flag like\nTSYNC_AND_LISTENER_YES_I_UNDERSTAND_THAT_TSYNC_WILL_JUST_RETURN_EAGAIN,\nbut the use cases are so different I don\u0027t see it really happening.\n\nFinally, it\u0027s worth noting that this does actually fix a UAF issue: at the\nend of seccomp_set_mode_filter(), we have:\n\n if (flags \u0026 SECCOMP_FILTER_FLAG_NEW_LISTENER) {\n if (ret \u003c 0) {\n listener_f-\u003eprivate_data \u003d NULL;\n fput(listener_f);\n put_unused_fd(listener);\n } else {\n fd_install(listener, listener_f);\n ret \u003d listener;\n }\n }\nout_free:\n seccomp_filter_free(prepared);\n\nBut if ret \u003e 0 because TSYNC raced, we\u0027ll install the listener fd and then\nfree the filter out from underneath it, causing a UAF when the task closes\nit or dies. This patch also switches the condition to be simply if (ret),\nso that if someone does add the flag mentioned above, they won\u0027t have to\nremember to fix this too.\n\nReported-by: syzbot+b562969adb2e04af3442@syzkaller.appspotmail.com\nFixes: 6a21cc50f0c7 (\"seccomp: add a return code to trap to userspace\")\nCC: stable@vger.kernel.org # v5.0+\nSigned-off-by: Tycho Andersen \u003ctycho@tycho.ws\u003e\nSigned-off-by: Kees Cook \u003ckeescook@chromium.org\u003e\nAcked-by: James Morris \u003cjamorris@linux.microsoft.com\u003e\n" }, { "commit": "4ee0776760af03f181e6b80baf5fb1cc1a980f50", "tree": "382c4962edbab041134d37a906b698213790787b", "parents": [ "8c2ffd9174779014c3fe1f96d9dc3641d9175f00" ], "author": { "name": "Kees Cook", "email": "keescook@chromium.org", "time": "Wed Apr 24 09:32:55 2019 -0700" }, "committer": { "name": "Kees Cook", "email": "keescook@chromium.org", "time": "Thu Apr 25 15:55:48 2019 -0700" }, "message": "selftests/seccomp: Prepare for exclusive seccomp flags\n\nSome seccomp flags will become exclusive, so the selftest needs to\nbe adjusted to mask those out and test them individually for the \"all\nflags\" tests.\n\nCc: stable@vger.kernel.org # v5.0+\nSigned-off-by: Kees Cook \u003ckeescook@chromium.org\u003e\nReviewed-by: Tycho Andersen \u003ctycho@tycho.ws\u003e\nAcked-by: James Morris \u003cjamorris@linux.microsoft.com\u003e\n" }, { "commit": "a860fa7b96e1a1c974556327aa1aee852d434c21", "tree": "242bb6433d229e091cc9f75d775bdc43e1b0b026", "parents": [ "cd8dead0c39457e58ec1d36db93aedca811d48f1" ], "author": { "name": "Xie XiuQi", "email": "xiexiuqi@huawei.com", "time": "Sat Apr 20 16:34:16 2019 +0800" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Thu Apr 25 19:58:54 2019 +0200" }, "message": "sched/numa: Fix a possible divide-by-zero\n\nsched_clock_cpu() may not be consistent between CPUs. If a task\nmigrates to another CPU, then se.exec_start is set to that CPU\u0027s\nrq_clock_task() by update_stats_curr_start(). Specifically, the new\nvalue might be before the old value due to clock skew.\n\nSo then if in numa_get_avg_runtime() the expression:\n\n \u0027now - p-\u003elast_task_numa_placement\u0027\n\nends up as -1, then the divider \u0027*period + 1\u0027 in task_numa_placement()\nis 0 and things go bang. Similar to update_curr(), check if time goes\nbackwards to avoid this.\n\n[ peterz: Wrote new changelog. ]\n[ mingo: Tweaked the code comment. ]\n\nSigned-off-by: Xie XiuQi \u003cxiexiuqi@huawei.com\u003e\nSigned-off-by: Peter Zijlstra (Intel) \u003cpeterz@infradead.org\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: cj.chengjian@huawei.com\nCc: \u003cstable@vger.kernel.org\u003e\nLink: http://lkml.kernel.org/r/20190425080016.GX11158@hirez.programming.kicks-ass.net\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\n" }, { "commit": "8113a85f872003a9f5c58f9f143054b0d8ec73a5", "tree": "eddb62e625e4e9e016f1b766809962bcab204d13", "parents": [ "f6f3e747454fc539bbd7904cf70672368289d820", "37659182bff1eeaaeadcfc8f853c6d2b6dbc3f47" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Apr 25 10:48:50 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Apr 25 10:48:50 2019 -0700" }, "message": "Merge tag \u0027ceph-for-5.1-rc7\u0027 of git://github.com/ceph/ceph-client\n\nPull ceph fixes from Ilya Dryomov:\n \"dentry name handling fixes from Jeff and a memory leak fix from Zheng.\n\n Both are old issues, marked for stable\"\n\n* tag \u0027ceph-for-5.1-rc7\u0027 of git://github.com/ceph/ceph-client:\n ceph: fix ci-\u003ei_head_snapc leak\n ceph: handle the case where a dentry has been renamed on outstanding req\n ceph: ensure d_name stability in ceph_dentry_hash()\n ceph: only use d_name directly when parent is locked\n" }, { "commit": "f6f3e747454fc539bbd7904cf70672368289d820", "tree": "3eaf09808e449c370cf7c3e81d9aa6ea2f414099", "parents": [ "cd8dead0c39457e58ec1d36db93aedca811d48f1", "b257b48cd5830c5b1d0c347eb281f9c28056f881" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Apr 25 09:15:03 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Apr 25 09:15:03 2019 -0700" }, "message": "Merge branch \u0027linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6\n\nPull crypto fixes from Herbert Xu:\n \"This fixes a bug in xts and lrw where they may sleep in an atomic\n context\"\n\n* \u0027linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:\n crypto: lrw - Fix atomic sleep when walking skcipher\n crypto: xts - Fix atomic sleep when walking skcipher\n" }, { "commit": "2557fabd6e29f349bfa0ac13f38ac98aa5eafc74", "tree": "d24a5600944458223a3ba2b50a8c2371322a53eb", "parents": [ "67f269b37f9b4d52c5e7f97acea26c0852e9b8a1" ], "author": { "name": "Lijun Ou", "email": "oulijun@huawei.com", "time": "Tue Apr 23 17:30:26 2019 +0800" }, "committer": { "name": "Jason Gunthorpe", "email": "jgg@mellanox.com", "time": "Thu Apr 25 10:40:04 2019 -0300" }, "message": "RDMA/hns: Bugfix for mapping user db\n\nWhen the maximum send wr delivered by the user is zero, the qp does not\nhave a sq.\n\nWhen allocating the sq db buffer to store the user sq pi pointer and map\nit to the kernel mode, max_send_wr is used as the trigger condition, while\nthe kernel does not consider the max_send_wr trigger condition when\nmapmping db. It will cause sq record doorbell map fail and create qp fail.\n\nThe failed print information as follows:\n\n hns3 0000:7d:00.1: Send cmd: tail - 418, opcode - 0x8504, flag - 0x0011, retval - 0x0000\n hns3 0000:7d:00.1: Send cmd: 0xe59dc000 0x00000000 0x00000000 0x00000000 0x00000116 0x0000ffff\n hns3 0000:7d:00.1: sq record doorbell map failed!\n hns3 0000:7d:00.1: Create RC QP failed\n\nFixes: 0425e3e6e0c7 (\"RDMA/hns: Support flush cqe for hip08 in kernel space\")\nSigned-off-by: Lijun Ou \u003coulijun@huawei.com\u003e\nSigned-off-by: Jason Gunthorpe \u003cjgg@mellanox.com\u003e\n" }, { "commit": "a3d46aea46f99d134b4e0726e4826b824c3e5980", "tree": "17e3d7820b40192b8e45c7a302c449894fe9b107", "parents": [ "272e5326c7837697882ce3162029ba893059b616" ], "author": { "name": "Nikolay Borisov", "email": "nborisov@suse.com", "time": "Mon Apr 01 11:29:58 2019 +0300" }, "committer": { "name": "David Sterba", "email": "dsterba@suse.com", "time": "Thu Apr 25 14:17:38 2019 +0200" }, "message": "btrfs: Switch memory allocations in async csum calculation path to kvmalloc\n\nRecent multi-page biovec rework allowed creation of bios that can span\nlarge regions - up to 128 megabytes in the case of btrfs. OTOH btrfs\u0027\nsubmission path currently allocates a contiguous array to store the\nchecksums for every bio submitted. This means we can request up to\n(128mb / BTRFS_SECTOR_SIZE) * 4 bytes + 32bytes of memory from kmalloc.\nOn busy systems with possibly fragmented memory said kmalloc can fail\nwhich will trigger BUG_ON due to improper error handling IO submission\ncontext in btrfs.\n\nUntil error handling is improved or bios in btrfs limited to a more\nmanageable size (e.g. 1m) let\u0027s use kvmalloc to fallback to vmalloc for\nsuch large allocations. There is no hard requirement that the memory\nallocated for checksums during IO submission has to be contiguous, but\nthis is a simple fix that does not require several non-contiguous\nallocations.\n\nFor small writes this is unlikely to have any visible effect since\nkmalloc will still satisfy allocation requests as usual. For larger\nrequests the code will just fallback to vmalloc.\n\nWe\u0027ve performed evaluation on several workload types and there was no\nsignificant difference kmalloc vs kvmalloc.\n\nSigned-off-by: Nikolay Borisov \u003cnborisov@suse.com\u003e\nReviewed-by: David Sterba \u003cdsterba@suse.com\u003e\nSigned-off-by: David Sterba \u003cdsterba@suse.com\u003e\n" }, { "commit": "c114944d7d67f24e71562fcfc18d550ab787e4d4", "tree": "04f2d076bcc3f9a00ebf3395bfb90e21cc5eaf31", "parents": [ "ef61eb43ada6c1d6b94668f0f514e4c268093ff3" ], "author": { "name": "Alan Stern", "email": "stern@rowland.harvard.edu", "time": "Mon Apr 22 11:16:04 2019 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Apr 25 11:11:41 2019 +0200" }, "message": "USB: w1 ds2490: Fix bug caused by improper use of altsetting array\n\nThe syzkaller USB fuzzer spotted a slab-out-of-bounds bug in the\nds2490 driver. This bug is caused by improper use of the altsetting\narray in the usb_interface structure (the array\u0027s entries are not\nalways stored in numerical order), combined with a naive assumption\nthat all interfaces probed by the driver will have the expected number\nof altsettings.\n\nThe bug can be fixed by replacing references to the possibly\nnon-existent intf-\u003ealtsetting[alt] entry with the guaranteed-to-exist\nintf-\u003ecur_altsetting entry.\n\nSigned-off-by: Alan Stern \u003cstern@rowland.harvard.edu\u003e\nReported-and-tested-by: syzbot+d65f673b847a1a96cdba@syzkaller.appspotmail.com\nCC: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "ef61eb43ada6c1d6b94668f0f514e4c268093ff3", "tree": "6baba96101522d8530b2ce1532848f7d5ad5f13a", "parents": [ "c409ca3be3c6ff3a1eeb303b191184e80d412862" ], "author": { "name": "Alan Stern", "email": "stern@rowland.harvard.edu", "time": "Tue Apr 23 14:48:29 2019 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Apr 25 11:11:41 2019 +0200" }, "message": "USB: yurex: Fix protection fault after device removal\n\nThe syzkaller USB fuzzer found a general-protection-fault bug in the\nyurex driver. The fault occurs when a device has been unplugged; the\ndriver\u0027s interrupt-URB handler logs an error message referring to the\ndevice by name, after the device has been unregistered and its name\ndeallocated.\n\nThis problem is caused by the fact that the interrupt URB isn\u0027t\ncancelled until the driver\u0027s private data structure is released, which\ncan happen long after the device is gone. The cure is to make sure\nthat the interrupt URB is killed before yurex_disconnect() returns;\nthis is exactly the sort of thing that usb_poison_urb() was meant for.\n\nSigned-off-by: Alan Stern \u003cstern@rowland.harvard.edu\u003e\nReported-and-tested-by: syzbot+2eb9121678bdb36e6d57@syzkaller.appspotmail.com\nCC: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "c409ca3be3c6ff3a1eeb303b191184e80d412862", "tree": "de3fb83b5dbfaf81240eaa43527fa359e46cf844", "parents": [ "c2b71462d294cf517a0bc6e4fd6424d7cee5596f" ], "author": { "name": "Malte Leip", "email": "malte@leip.net", "time": "Sun Apr 14 12:00:12 2019 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Apr 25 11:11:41 2019 +0200" }, "message": "usb: usbip: fix isoc packet num validation in get_pipe\n\nChange the validation of number_of_packets in get_pipe to compare the\nnumber of packets to a fixed maximum number of packets allowed, set to\nbe 1024. This number was chosen due to it being used by other drivers as\nwell, for example drivers/usb/host/uhci-q.c\n\nBackground/reason:\nThe get_pipe function in stub_rx.c validates the number of packets in\nisochronous mode and aborts with an error if that number is too large,\nin order to prevent malicious input from possibly triggering large\nmemory allocations. This was previously done by checking whether\npdu-\u003eu.cmd_submit.number_of_packets is bigger than the number of packets\nthat would be needed for pdu-\u003eu.cmd_submit.transfer_buffer_length bytes\nif all except possibly the last packet had maximum length, given by\nusb_endpoint_maxp(epd) * usb_endpoint_maxp_mult(epd). This leads to an\nerror if URBs with packets shorter than the maximum possible length are\nsubmitted, which is allowed according to\nDocumentation/driver-api/usb/URB.rst and occurs for example with the\nsnd-usb-audio driver.\n\nFixes: c6688ef9f297 (\"usbip: fix stub_rx: harden CMD_SUBMIT path to handle malicious input\")\nSigned-off-by: Malte Leip \u003cmalte@leip.net\u003e\nCc: stable \u003cstable@vger.kernel.org\u003e\nAcked-by: Shuah Khan \u003cskhan@linuxfoundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "c4cba44eeecab9d5ccd3dd2d5520a7d1e5be544f", "tree": "d2785f4d61c42d26fc3ea53d53609f84ef091c17", "parents": [ "462ce5d963f18b71c63f6b7730a35a2ee5273540" ], "author": { "name": "Jonas Karlman", "email": "jonas@kwiboo.se", "time": "Sun Apr 21 08:25:50 2019 +0000" }, "committer": { "name": "Andrzej Hajda", "email": "a.hajda@samsung.com", "time": "Thu Apr 25 10:38:21 2019 +0200" }, "message": "drm/bridge: dw-hdmi: fix SCDC configuration for ddc-i2c-bus\n\nWhen ddc-i2c-bus property is used, a NULL pointer dereference is reported:\n\n[ 31.041669] Unable to handle kernel NULL pointer dereference at virtual address 00000008\n[ 31.041671] pgd \u003d 4d3c16f6\n[ 31.041673] [00000008] *pgd\u003d00000000\n[ 31.041678] Internal error: Oops: 5 [#1] SMP ARM\n\n[ 31.041711] Hardware name: Rockchip (Device Tree)\n[ 31.041718] PC is at i2c_transfer+0x8/0xe4\n[ 31.041721] LR is at drm_scdc_read+0x54/0x84\n[ 31.041723] pc : [\u003cc073273c\u003e] lr : [\u003cc05926c4\u003e] psr: 280f0013\n[ 31.041725] sp : edffdad0 ip : 5ccb5511 fp : 00000058\n[ 31.041727] r10: 00000780 r9 : edf91608 r8 : c11b0f48\n[ 31.041728] r7 : 00000438 r6 : 00000000 r5 : 00000000 r4 : 00000000\n[ 31.041730] r3 : edffdae7 r2 : 00000002 r1 : edffdaec r0 : 00000000\n\n[ 31.041908] [\u003cc073273c\u003e] (i2c_transfer) from [\u003cc05926c4\u003e] (drm_scdc_read+0x54/0x84)\n[ 31.041913] [\u003cc05926c4\u003e] (drm_scdc_read) from [\u003cc0592858\u003e] (drm_scdc_set_scrambling+0x30/0xbc)\n[ 31.041919] [\u003cc0592858\u003e] (drm_scdc_set_scrambling) from [\u003cc05cc0f4\u003e] (dw_hdmi_update_power+0x1440/0x1610)\n[ 31.041926] [\u003cc05cc0f4\u003e] (dw_hdmi_update_power) from [\u003cc05cc574\u003e] (dw_hdmi_bridge_enable+0x2c/0x70)\n[ 31.041932] [\u003cc05cc574\u003e] (dw_hdmi_bridge_enable) from [\u003cc05aed48\u003e] (drm_bridge_enable+0x24/0x34)\n[ 31.041938] [\u003cc05aed48\u003e] (drm_bridge_enable) from [\u003cc0591060\u003e] (drm_atomic_helper_commit_modeset_enables+0x114/0x220)\n[ 31.041943] [\u003cc0591060\u003e] (drm_atomic_helper_commit_modeset_enables) from [\u003cc05c3fe0\u003e] (rockchip_atomic_helper_commit_tail_rpm+0x28/0x64)\n\nhdmi-\u003ei2c may not be set when ddc-i2c-bus property is used in device tree.\nFix this by using hdmi-\u003eddc as the i2c adapter when calling drm_scdc_*().\nAlso report that SCDC is not supported when there is no DDC bus.\n\nFixes: 264fce6cc2c1 (\"drm/bridge: dw-hdmi: Add SCDC and TMDS Scrambling support\")\nSigned-off-by: Jonas Karlman \u003cjonas@kwiboo.se\u003e\nReviewed-by: Heiko Stuebner \u003cheiko@sntech.de\u003e\nReviewed-by: Neil Armstrong \u003cnarmstrong@baylibre.com\u003e\nReviewed-by: Laurent Pinchart \u003claurent.pinchart@ideasonboard.com\u003e\nSigned-off-by: Andrzej Hajda \u003ca.hajda@samsung.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/VE1PR03MB59031814B5BCAB2152923BDAAC210@VE1PR03MB5903.eurprd03.prod.outlook.com\n" }, { "commit": "357798909164bf423eac6a78ff7da7e98d2d7f7f", "tree": "51b80bbf8e787f8f39f0a2f3c3469cafe1501e64", "parents": [ "102bbe34b31c9159e714432afd64458f6f3876d7" ], "author": { "name": "Geert Uytterhoeven", "email": "geert+renesas@glider.be", "time": "Wed Apr 24 15:59:33 2019 +0200" }, "committer": { "name": "Linus Walleij", "email": "linus.walleij@linaro.org", "time": "Thu Apr 25 09:12:00 2019 +0200" }, "message": "gpio: Fix gpiochip_add_data_with_key() error path\n\nThe err_remove_chip block is too coarse, and may perform cleanup that\nmust not be done. E.g. if of_gpiochip_add() fails, of_gpiochip_remove()\nis still called, causing:\n\n OF: ERROR: Bad of_node_put() on /soc/gpio@e6050000\n CPU: 1 PID: 20 Comm: kworker/1:1 Not tainted 5.1.0-rc2-koelsch+ #407\n Hardware name: Generic R-Car Gen2 (Flattened Device Tree)\n Workqueue: events deferred_probe_work_func\n [\u003cc020ec74\u003e] (unwind_backtrace) from [\u003cc020ae58\u003e] (show_stack+0x10/0x14)\n [\u003cc020ae58\u003e] (show_stack) from [\u003cc07c1224\u003e] (dump_stack+0x7c/0x9c)\n [\u003cc07c1224\u003e] (dump_stack) from [\u003cc07c5a80\u003e] (kobject_put+0x94/0xbc)\n [\u003cc07c5a80\u003e] (kobject_put) from [\u003cc0470420\u003e] (gpiochip_add_data_with_key+0x8d8/0xa3c)\n [\u003cc0470420\u003e] (gpiochip_add_data_with_key) from [\u003cc0473738\u003e] (gpio_rcar_probe+0x1d4/0x314)\n [\u003cc0473738\u003e] (gpio_rcar_probe) from [\u003cc052fca8\u003e] (platform_drv_probe+0x48/0x94)\n\nand later, if a GPIO consumer tries to use a GPIO from a failed\ncontroller:\n\n WARNING: CPU: 0 PID: 1 at lib/refcount.c:156 kobject_get+0x38/0x4c\n refcount_t: increment on 0; use-after-free.\n Modules linked in:\n CPU: 0 PID: 1 Comm: swapper/0 Not tainted 5.1.0-rc2-koelsch+ #407\n Hardware name: Generic R-Car Gen2 (Flattened Device Tree)\n [\u003cc020ec74\u003e] (unwind_backtrace) from [\u003cc020ae58\u003e] (show_stack+0x10/0x14)\n [\u003cc020ae58\u003e] (show_stack) from [\u003cc07c1224\u003e] (dump_stack+0x7c/0x9c)\n [\u003cc07c1224\u003e] (dump_stack) from [\u003cc0221580\u003e] (__warn+0xd0/0xec)\n [\u003cc0221580\u003e] (__warn) from [\u003cc02215e0\u003e] (warn_slowpath_fmt+0x44/0x6c)\n [\u003cc02215e0\u003e] (warn_slowpath_fmt) from [\u003cc07c58fc\u003e] (kobject_get+0x38/0x4c)\n [\u003cc07c58fc\u003e] (kobject_get) from [\u003cc068b3ec\u003e] (of_node_get+0x14/0x1c)\n [\u003cc068b3ec\u003e] (of_node_get) from [\u003cc0686f24\u003e] (of_find_node_by_phandle+0xc0/0xf0)\n [\u003cc0686f24\u003e] (of_find_node_by_phandle) from [\u003cc0686fbc\u003e] (of_phandle_iterator_next+0x68/0x154)\n [\u003cc0686fbc\u003e] (of_phandle_iterator_next) from [\u003cc0687fe4\u003e] (__of_parse_phandle_with_args+0x40/0xd0)\n [\u003cc0687fe4\u003e] (__of_parse_phandle_with_args) from [\u003cc0688204\u003e] (of_parse_phandle_with_args_map+0x100/0x3ac)\n [\u003cc0688204\u003e] (of_parse_phandle_with_args_map) from [\u003cc0471240\u003e] (of_get_named_gpiod_flags+0x38/0x380)\n [\u003cc0471240\u003e] (of_get_named_gpiod_flags) from [\u003cc046f864\u003e] (gpiod_get_from_of_node+0x24/0xd8)\n [\u003cc046f864\u003e] (gpiod_get_from_of_node) from [\u003cc0470aa4\u003e] (devm_fwnode_get_index_gpiod_from_child+0xa0/0x144)\n [\u003cc0470aa4\u003e] (devm_fwnode_get_index_gpiod_from_child) from [\u003cc05f425c\u003e] (gpio_keys_probe+0x418/0x7bc)\n [\u003cc05f425c\u003e] (gpio_keys_probe) from [\u003cc052fca8\u003e] (platform_drv_probe+0x48/0x94)\n\nFix this by splitting the cleanup block, and adding a missing call to\ngpiochip_irqchip_remove().\n\nFixes: 28355f81969962cf (\"gpio: defer probe if pinctrl cannot be found\")\nSigned-off-by: Geert Uytterhoeven \u003cgeert+renesas@glider.be\u003e\nReviewed-by: Mukesh Ojha \u003cmojha@codeaurora.org\u003e\nSigned-off-by: Linus Walleij \u003clinus.walleij@linaro.org\u003e\n" }, { "commit": "81103355b1e23345dbcdeccad59962a424da4a34", "tree": "3dc7d108affe3a79d42f21cffc0c2f863f57aa42", "parents": [ "c2d311553855395764e2e5bf401d987ba65c2056" ], "author": { "name": "Thomas Hellstrom", "email": "thellstrom@vmware.com", "time": "Tue Apr 23 14:02:57 2019 +0200" }, "committer": { "name": "Thomas Hellstrom", "email": "thellstrom@vmware.com", "time": "Thu Apr 25 09:05:03 2019 +0200" }, "message": "drm/vmwgfx: Fix dma API layer violation\n\nRemove the check for IOMMU presence since it was considered a\nlayer violation.\nThis means we have no reliable way to destinguish between coherent\nhardware IOMMU DMA address translations and incoherent SWIOTLB DMA\naddress translations, which we can\u0027t handle. So always presume the\nformer. This means that if anybody forces SWIOTLB without also setting\nthe vmw_force_coherent\u003d1 vmwgfx option, driver operation will fail,\nlike it will on most other graphics drivers.\n\nSigned-off-by: Thomas Hellstrom \u003cthellstrom@vmware.com\u003e\nReviewed-by: Christoph Hellwig \u003chch@lst.de\u003e\n" }, { "commit": "82c99f7a81f28f8c1be5f701c8377d14c4075b10", "tree": "e17021a401e3e6dc902f11bf20bde2c088e0a3b9", "parents": [ "cd8dead0c39457e58ec1d36db93aedca811d48f1" ], "author": { "name": "Harry Pan", "email": "harry.pan@intel.com", "time": "Wed Apr 24 22:50:33 2019 +0800" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Thu Apr 25 08:59:31 2019 +0200" }, "message": "perf/x86/intel: Update KBL Package C-state events to also include PC8/PC9/PC10 counters\n\nKaby Lake (and Coffee Lake) has PC8/PC9/PC10 residency counters.\n\nThis patch updates the list of Kaby/Coffee Lake PMU event counters\nfrom the snb_cstates[] list of events to the hswult_cstates[]\nlist of events, which keeps all previously supported events and\nalso adds the PKG_C8, PKG_C9 and PKG_C10 residency counters.\n\nThis allows user space tools to profile them through the perf interface.\n\nSigned-off-by: Harry Pan \u003charry.pan@intel.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nCc: Alexander Shishkin \u003calexander.shishkin@linux.intel.com\u003e\nCc: Arnaldo Carvalho de Melo \u003cacme@redhat.com\u003e\nCc: Borislav Petkov \u003cbp@alien8.de\u003e\nCc: Jiri Olsa \u003cjolsa@redhat.com\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCc: Stephane Eranian \u003ceranian@google.com\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Vince Weaver \u003cvincent.weaver@maine.edu\u003e\nCc: gs0622@gmail.com\nLink: http://lkml.kernel.org/r/20190424145033.1924-1-harry.pan@intel.com\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\n" }, { "commit": "cd8dead0c39457e58ec1d36db93aedca811d48f1", "tree": "6d3e01f3de3afa104f86f4d29206623e5b448d40", "parents": [ "11bfe6473bf2c83e4cc44fe97d95a8b0dae1e419", "20ff83f10f113c88d0bb74589389b05250994c16" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Apr 24 16:18:59 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Apr 24 16:18:59 2019 -0700" }, "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net\n\nPull networking fixes from David Miller:\n \"Just the usual assortment of small\u0027ish fixes:\n\n 1) Conntrack timeout is sometimes not initialized properly, from\n Alexander Potapenko.\n\n 2) Add a reasonable range limit to tcp_min_rtt_wlen to avoid\n undefined behavior. From ZhangXiaoxu.\n\n 3) des1 field of descriptor in stmmac driver is initialized with the\n wrong variable. From Yue Haibing.\n\n 4) Increase mlxsw pci sw reset timeout a little bit more, from Ido\n Schimmel.\n\n 5) Match IOT2000 stmmac devices more accurately, from Su Bao Cheng.\n\n 6) Fallback refcount fix in TLS code, from Jakub Kicinski.\n\n 7) Fix max MTU check when using XDP in mlx5, from Maxim Mikityanskiy.\n\n 8) Fix recursive locking in team driver, from Hangbin Liu.\n\n 9) Fix tls_set_device_offload_Rx() deadlock, from Jakub Kicinski.\n\n 10) Don\u0027t use napi_alloc_frag() outside of softiq context of socionext\n driver, from Ilias Apalodimas.\n\n 11) MAC address increment overflow in ncsi, from Tao Ren.\n\n 12) Fix a regression in 8K/1M pool switching of RDS, from Zhu Yanjun.\n\n 13) ipv4_link_failure has to validate the headers that are actually\n there because RAW sockets can pass in arbitrary garbage, from Eric\n Dumazet\"\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (43 commits)\n ipv4: add sanity checks in ipv4_link_failure()\n net/rose: fix unbound loop in rose_loopback_timer()\n rxrpc: fix race condition in rxrpc_input_packet()\n net: rds: exchange of 8K and 1M pool\n net: vrf: Fix operation not supported when set vrf mac\n net/ncsi: handle overflow when incrementing mac address\n net: socionext: replace napi_alloc_frag with the netdev variant on init\n net: atheros: fix spelling mistake \"underun\" -\u003e \"underrun\"\n spi: ST ST95HF NFC: declare missing of table\n spi: Micrel eth switch: declare missing of table\n net: stmmac: move stmmac_check_ether_addr() to driver probe\n netfilter: fix nf_l4proto_log_invalid to log invalid packets\n netfilter: never get/set skb-\u003etstamp\n netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON\n Documentation: decnet: remove reference to CONFIG_DECNET_ROUTE_FWMARK\n dt-bindings: add an explanation for internal phy-mode\n net/tls: don\u0027t leak IV and record seq when offload fails\n net/tls: avoid potential deadlock in tls_set_device_offload_rx()\n selftests/net: correct the return value for run_afpackettests\n team: fix possible recursive locking when add slaves\n ...\n" }, { "commit": "11bfe6473bf2c83e4cc44fe97d95a8b0dae1e419", "tree": "b08977a632fc977a0d1732eaac6ab39037f9c8e7", "parents": [ "ba25b50d582ff6c6021eee80824134aeb9ab8785", "52fb56f7b5a9cc23a07b2c237bad91180263a492" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Apr 24 16:15:38 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Apr 24 16:15:38 2019 -0700" }, "message": "Merge tag \u0027leds-for-5.1-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/j.anaszewski/linux-leds\n\nPull LED update from Jacek Anaszewski:\n \"A single change to MAINTAINERS:\n\n We announce a new LED reviewer - Dan Murphy\"\n\n* tag \u0027leds-for-5.1-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/j.anaszewski/linux-leds:\n MAINTAINERS: LEDs: Add designated reviewer for LED subsystem\n" }, { "commit": "20ff83f10f113c88d0bb74589389b05250994c16", "tree": "cbe40fe7210b1eb6b524f93e52aa356a9eda1bb3", "parents": [ "0453c682459583910d611a96de928f4442205493" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Wed Apr 24 08:04:05 2019 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Apr 24 14:40:41 2019 -0700" }, "message": "ipv4: add sanity checks in ipv4_link_failure()\n\nBefore calling __ip_options_compile(), we need to ensure the network\nheader is a an IPv4 one, and that it is already pulled in skb-\u003ehead.\n\nRAW sockets going through a tunnel can end up calling ipv4_link_failure()\nwith total garbage in the skb, or arbitrary lengthes.\n\nsyzbot report :\n\nBUG: KASAN: stack-out-of-bounds in memcpy include/linux/string.h:355 [inline]\nBUG: KASAN: stack-out-of-bounds in __ip_options_echo+0x294/0x1120 net/ipv4/ip_options.c:123\nWrite of size 69 at addr ffff888096abf068 by task syz-executor.4/9204\n\nCPU: 0 PID: 9204 Comm: syz-executor.4 Not tainted 5.1.0-rc5+ #77\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nCall Trace:\n __dump_stack lib/dump_stack.c:77 [inline]\n dump_stack+0x172/0x1f0 lib/dump_stack.c:113\n print_address_description.cold+0x7c/0x20d mm/kasan/report.c:187\n kasan_report.cold+0x1b/0x40 mm/kasan/report.c:317\n check_memory_region_inline mm/kasan/generic.c:185 [inline]\n check_memory_region+0x123/0x190 mm/kasan/generic.c:191\n memcpy+0x38/0x50 mm/kasan/common.c:133\n memcpy include/linux/string.h:355 [inline]\n __ip_options_echo+0x294/0x1120 net/ipv4/ip_options.c:123\n __icmp_send+0x725/0x1400 net/ipv4/icmp.c:695\n ipv4_link_failure+0x29f/0x550 net/ipv4/route.c:1204\n dst_link_failure include/net/dst.h:427 [inline]\n vti6_xmit net/ipv6/ip6_vti.c:514 [inline]\n vti6_tnl_xmit+0x10d4/0x1c0c net/ipv6/ip6_vti.c:553\n __netdev_start_xmit include/linux/netdevice.h:4414 [inline]\n netdev_start_xmit include/linux/netdevice.h:4423 [inline]\n xmit_one net/core/dev.c:3292 [inline]\n dev_hard_start_xmit+0x1b2/0x980 net/core/dev.c:3308\n __dev_queue_xmit+0x271d/0x3060 net/core/dev.c:3878\n dev_queue_xmit+0x18/0x20 net/core/dev.c:3911\n neigh_direct_output+0x16/0x20 net/core/neighbour.c:1527\n neigh_output include/net/neighbour.h:508 [inline]\n ip_finish_output2+0x949/0x1740 net/ipv4/ip_output.c:229\n ip_finish_output+0x73c/0xd50 net/ipv4/ip_output.c:317\n NF_HOOK_COND include/linux/netfilter.h:278 [inline]\n ip_output+0x21f/0x670 net/ipv4/ip_output.c:405\n dst_output include/net/dst.h:444 [inline]\n NF_HOOK include/linux/netfilter.h:289 [inline]\n raw_send_hdrinc net/ipv4/raw.c:432 [inline]\n raw_sendmsg+0x1d2b/0x2f20 net/ipv4/raw.c:663\n inet_sendmsg+0x147/0x5d0 net/ipv4/af_inet.c:798\n sock_sendmsg_nosec net/socket.c:651 [inline]\n sock_sendmsg+0xdd/0x130 net/socket.c:661\n sock_write_iter+0x27c/0x3e0 net/socket.c:988\n call_write_iter include/linux/fs.h:1866 [inline]\n new_sync_write+0x4c7/0x760 fs/read_write.c:474\n __vfs_write+0xe4/0x110 fs/read_write.c:487\n vfs_write+0x20c/0x580 fs/read_write.c:549\n ksys_write+0x14f/0x2d0 fs/read_write.c:599\n __do_sys_write fs/read_write.c:611 [inline]\n __se_sys_write fs/read_write.c:608 [inline]\n __x64_sys_write+0x73/0xb0 fs/read_write.c:608\n do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290\n entry_SYSCALL_64_after_hwframe+0x49/0xbe\nRIP: 0033:0x458c29\nCode: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00\nRSP: 002b:00007f293b44bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001\nRAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29\nRDX: 0000000000000014 RSI: 00000000200002c0 RDI: 0000000000000003\nRBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 00007f293b44c6d4\nR13: 00000000004c8623 R14: 00000000004ded68 R15: 00000000ffffffff\n\nThe buggy address belongs to the page:\npage:ffffea00025aafc0 count:0 mapcount:0 mapping:0000000000000000 index:0x0\nflags: 0x1fffc0000000000()\nraw: 01fffc0000000000 0000000000000000 ffffffff025a0101 0000000000000000\nraw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000\npage dumped because: kasan: bad access detected\n\nMemory state around the buggy address:\n ffff888096abef80: 00 00 00 f2 f2 f2 f2 f2 00 00 00 00 00 00 00 f2\n ffff888096abf000: f2 f2 f2 f2 00 00 00 00 00 00 00 00 00 00 00 00\n\u003effff888096abf080: 00 00 f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00\n ^\n ffff888096abf100: 00 00 00 00 f1 f1 f1 f1 00 00 f3 f3 00 00 00 00\n ffff888096abf180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n\nFixes: ed0de45a1008 (\"ipv4: recompile ip options in ipv4_link_failure\")\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nCc: Stephen Suryaputra \u003cssuryaextr@gmail.com\u003e\nAcked-by: Willem de Bruijn \u003cwillemb@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0453c682459583910d611a96de928f4442205493", "tree": "dad1bb753365fd411f05a8b11b5c63477c8dc682", "parents": [ "032be5f19a94de51093851757089133dcc1e92aa" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Wed Apr 24 05:35:00 2019 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Apr 24 14:39:26 2019 -0700" }, "message": "net/rose: fix unbound loop in rose_loopback_timer()\n\nThis patch adds a limit on the number of skbs that fuzzers can queue\ninto loopback_queue. 1000 packets for rose loopback seems more than enough.\n\nThen, since we now have multiple cpus in most linux hosts,\nwe also need to limit the number of skbs rose_loopback_timer()\ncan dequeue at each round.\n\nrose_loopback_queue() can be drop-monitor friendly, calling\nconsume_skb() or kfree_skb() appropriately.\n\nFinally, use mod_timer() instead of del_timer() + add_timer()\n\nsyzbot report was :\n\nrcu: INFO: rcu_preempt self-detected stall on CPU\nrcu: 0-...!: (10499 ticks this GP) idle\u003d536/1/0x4000000000000002 softirq\u003d103291/103291 fqs\u003d34\nrcu: (t\u003d10500 jiffies g\u003d140321 q\u003d323)\nrcu: rcu_preempt kthread starved for 10426 jiffies! g140321 f0x0 RCU_GP_WAIT_FQS(5) -\u003estate\u003d0x402 -\u003ecpu\u003d1\nrcu: RCU grace-period kthread stack dump:\nrcu_preempt I29168 10 2 0x80000000\nCall Trace:\n context_switch kernel/sched/core.c:2877 [inline]\n __schedule+0x813/0x1cc0 kernel/sched/core.c:3518\n schedule+0x92/0x180 kernel/sched/core.c:3562\n schedule_timeout+0x4db/0xfd0 kernel/time/timer.c:1803\n rcu_gp_fqs_loop kernel/rcu/tree.c:1971 [inline]\n rcu_gp_kthread+0x962/0x17b0 kernel/rcu/tree.c:2128\n kthread+0x357/0x430 kernel/kthread.c:253\n ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352\nNMI backtrace for cpu 0\nCPU: 0 PID: 7632 Comm: kworker/0:4 Not tainted 5.1.0-rc5+ #172\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nWorkqueue: events iterate_cleanup_work\nCall Trace:\n \u003cIRQ\u003e\n __dump_stack lib/dump_stack.c:77 [inline]\n dump_stack+0x172/0x1f0 lib/dump_stack.c:113\n nmi_cpu_backtrace.cold+0x63/0xa4 lib/nmi_backtrace.c:101\n nmi_trigger_cpumask_backtrace+0x1be/0x236 lib/nmi_backtrace.c:62\n arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:38\n trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline]\n rcu_dump_cpu_stacks+0x183/0x1cf kernel/rcu/tree.c:1223\n print_cpu_stall kernel/rcu/tree.c:1360 [inline]\n check_cpu_stall kernel/rcu/tree.c:1434 [inline]\n rcu_pending kernel/rcu/tree.c:3103 [inline]\n rcu_sched_clock_irq.cold+0x500/0xa4a kernel/rcu/tree.c:2544\n update_process_times+0x32/0x80 kernel/time/timer.c:1635\n tick_sched_handle+0xa2/0x190 kernel/time/tick-sched.c:161\n tick_sched_timer+0x47/0x130 kernel/time/tick-sched.c:1271\n __run_hrtimer kernel/time/hrtimer.c:1389 [inline]\n __hrtimer_run_queues+0x33e/0xde0 kernel/time/hrtimer.c:1451\n hrtimer_interrupt+0x314/0x770 kernel/time/hrtimer.c:1509\n local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1035 [inline]\n smp_apic_timer_interrupt+0x120/0x570 arch/x86/kernel/apic/apic.c:1060\n apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807\nRIP: 0010:__sanitizer_cov_trace_pc+0x0/0x50 kernel/kcov.c:95\nCode: 89 25 b4 6e ec 08 41 bc f4 ff ff ff e8 cd 5d ea ff 48 c7 05 9e 6e ec 08 00 00 00 00 e9 a4 e9 ff ff 90 90 90 90 90 90 90 90 90 \u003c55\u003e 48 89 e5 48 8b 75 08 65 48 8b 04 25 00 ee 01 00 65 8b 15 c8 60\nRSP: 0018:ffff8880ae807ce0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13\nRAX: ffff88806fd40640 RBX: dffffc0000000000 RCX: ffffffff863fbc56\nRDX: 0000000000000100 RSI: ffffffff863fbc1d RDI: ffff88808cf94228\nRBP: ffff8880ae807d10 R08: ffff88806fd40640 R09: ffffed1015d00f8b\nR10: ffffed1015d00f8a R11: 0000000000000003 R12: ffff88808cf941c0\nR13: 00000000fffff034 R14: ffff8882166cd840 R15: 0000000000000000\n rose_loopback_timer+0x30d/0x3f0 net/rose/rose_loopback.c:91\n call_timer_fn+0x190/0x720 kernel/time/timer.c:1325\n expire_timers kernel/time/timer.c:1362 [inline]\n __run_timers kernel/time/timer.c:1681 [inline]\n __run_timers kernel/time/timer.c:1649 [inline]\n run_timer_softirq+0x652/0x1700 kernel/time/timer.c:1694\n __do_softirq+0x266/0x95a kernel/softirq.c:293\n do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1027\n\nFixes: 1da177e4c3f4 (\"Linux-2.6.12-rc2\")\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nReported-by: syzbot \u003csyzkaller@googlegroups.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "032be5f19a94de51093851757089133dcc1e92aa", "tree": "14791d09ca7ec49e7b597d9facdbc5a0a407be5b", "parents": [ "4b9fc7146249a6e0e3175d0acc033fdcd2bfcb17" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Wed Apr 24 09:44:11 2019 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Apr 24 14:05:09 2019 -0700" }, "message": "rxrpc: fix race condition in rxrpc_input_packet()\n\nAfter commit 5271953cad31 (\"rxrpc: Use the UDP encap_rcv hook\"),\nrxrpc_input_packet() is directly called from lockless UDP receive\npath, under rcu_read_lock() protection.\n\nIt must therefore use RCU rules :\n\n- udp_sk-\u003esk_user_data can be cleared at any point in this function.\n rcu_dereference_sk_user_data() is what we need here.\n\n- Also, since sk_user_data might have been set in rxrpc_open_socket()\n we must observe a proper RCU grace period before kfree(local) in\n rxrpc_lookup_local()\n\nv4: @local can be NULL in xrpc_lookup_local() as reported by kbuild test robot \u003clkp@intel.com\u003e\n and Julia Lawall \u003cjulia.lawall@lip6.fr\u003e, thanks !\n\nv3,v2 : addressed David Howells feedback, thanks !\n\nsyzbot reported :\n\nkasan: CONFIG_KASAN_INLINE enabled\nkasan: GPF could be caused by NULL-ptr deref or user memory access\ngeneral protection fault: 0000 [#1] PREEMPT SMP KASAN\nCPU: 0 PID: 19236 Comm: syz-executor703 Not tainted 5.1.0-rc6 #79\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nRIP: 0010:__lock_acquire+0xbef/0x3fb0 kernel/locking/lockdep.c:3573\nCode: 00 0f 85 a5 1f 00 00 48 81 c4 10 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 \u003c80\u003e 3c 02 00 0f 85 4a 21 00 00 49 81 7d 00 20 54 9c 89 0f 84 cf f4\nRSP: 0018:ffff88809d7aef58 EFLAGS: 00010002\nRAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000\nRDX: 0000000000000026 RSI: 0000000000000000 RDI: 0000000000000001\nRBP: ffff88809d7af090 R08: 0000000000000001 R09: 0000000000000001\nR10: ffffed1015d05bc7 R11: ffff888089428600 R12: 0000000000000000\nR13: 0000000000000130 R14: 0000000000000001 R15: 0000000000000001\nFS: 00007f059044d700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00000000004b6040 CR3: 00000000955ca000 CR4: 00000000001406f0\nCall Trace:\n lock_acquire+0x16f/0x3f0 kernel/locking/lockdep.c:4211\n __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]\n _raw_spin_lock_irqsave+0x95/0xcd kernel/locking/spinlock.c:152\n skb_queue_tail+0x26/0x150 net/core/skbuff.c:2972\n rxrpc_reject_packet net/rxrpc/input.c:1126 [inline]\n rxrpc_input_packet+0x4a0/0x5536 net/rxrpc/input.c:1414\n udp_queue_rcv_one_skb+0xaf2/0x1780 net/ipv4/udp.c:2011\n udp_queue_rcv_skb+0x128/0x730 net/ipv4/udp.c:2085\n udp_unicast_rcv_skb.isra.0+0xb9/0x360 net/ipv4/udp.c:2245\n __udp4_lib_rcv+0x701/0x2ca0 net/ipv4/udp.c:2301\n udp_rcv+0x22/0x30 net/ipv4/udp.c:2482\n ip_protocol_deliver_rcu+0x60/0x8f0 net/ipv4/ip_input.c:208\n ip_local_deliver_finish+0x23b/0x390 net/ipv4/ip_input.c:234\n NF_HOOK include/linux/netfilter.h:289 [inline]\n NF_HOOK include/linux/netfilter.h:283 [inline]\n ip_local_deliver+0x1e9/0x520 net/ipv4/ip_input.c:255\n dst_input include/net/dst.h:450 [inline]\n ip_rcv_finish+0x1e1/0x300 net/ipv4/ip_input.c:413\n NF_HOOK include/linux/netfilter.h:289 [inline]\n NF_HOOK include/linux/netfilter.h:283 [inline]\n ip_rcv+0xe8/0x3f0 net/ipv4/ip_input.c:523\n __netif_receive_skb_one_core+0x115/0x1a0 net/core/dev.c:4987\n __netif_receive_skb+0x2c/0x1c0 net/core/dev.c:5099\n netif_receive_skb_internal+0x117/0x660 net/core/dev.c:5202\n napi_frags_finish net/core/dev.c:5769 [inline]\n napi_gro_frags+0xade/0xd10 net/core/dev.c:5843\n tun_get_user+0x2f24/0x3fb0 drivers/net/tun.c:1981\n tun_chr_write_iter+0xbd/0x156 drivers/net/tun.c:2027\n call_write_iter include/linux/fs.h:1866 [inline]\n do_iter_readv_writev+0x5e1/0x8e0 fs/read_write.c:681\n do_iter_write fs/read_write.c:957 [inline]\n do_iter_write+0x184/0x610 fs/read_write.c:938\n vfs_writev+0x1b3/0x2f0 fs/read_write.c:1002\n do_writev+0x15e/0x370 fs/read_write.c:1037\n __do_sys_writev fs/read_write.c:1110 [inline]\n __se_sys_writev fs/read_write.c:1107 [inline]\n __x64_sys_writev+0x75/0xb0 fs/read_write.c:1107\n do_syscall_64+0x103/0x610 arch/x86/entry/common.c:290\n entry_SYSCALL_64_after_hwframe+0x49/0xbe\n\nFixes: 5271953cad31 (\"rxrpc: Use the UDP encap_rcv hook\")\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nReported-by: syzbot \u003csyzkaller@googlegroups.com\u003e\nAcked-by: David Howells \u003cdhowells@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "52fb56f7b5a9cc23a07b2c237bad91180263a492", "tree": "229148ad79de6420a2cea774b8745a79441d3d49", "parents": [ "9e98c678c2d6ae3a17cb2de55d17f69dddaa231b" ], "author": { "name": "Dan Murphy", "email": "dmurphy@ti.com", "time": "Tue Apr 23 15:00:24 2019 -0500" }, "committer": { "name": "Jacek Anaszewski", "email": "jacek.anaszewski@gmail.com", "time": "Wed Apr 24 21:07:18 2019 +0200" }, "message": "MAINTAINERS: LEDs: Add designated reviewer for LED subsystem\n\nAdd a designated reviewer for the LED subsystem as there\nare already two maintainers assigned.\n\nSigned-off-by: Dan Murphy \u003cdmurphy@ti.com\u003e\nAcked-by: Pavel Machek \u003cpavel@ucw.cz\u003e\nSigned-off-by: Jacek Anaszewski \u003cjacek.anaszewski@gmail.com\u003e\n" }, { "commit": "4b9fc7146249a6e0e3175d0acc033fdcd2bfcb17", "tree": "9165eb637d041b983dbb92a4808191701b54fc2b", "parents": [ "6819e3f6d83a24777813b0d031ebe0861694db5a" ], "author": { "name": "Zhu Yanjun", "email": "yanjun.zhu@oracle.com", "time": "Wed Apr 24 02:56:42 2019 -0400" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Apr 24 12:07:08 2019 -0700" }, "message": "net: rds: exchange of 8K and 1M pool\n\nBefore the commit 490ea5967b0d (\"RDS: IB: move FMR code to its own file\"),\nwhen the dirty_count is greater than 9/10 of max_items of 8K pool,\n1M pool is used, Vice versa. After the commit 490ea5967b0d (\"RDS: IB: move\nFMR code to its own file\"), the above is removed. When we make the\nfollowing tests.\n\nServer:\n rds-stress -r 1.1.1.16 -D 1M\n\nClient:\n rds-stress -r 1.1.1.14 -s 1.1.1.16 -D 1M\n\nThe following will appear.\n\"\nconnecting to 1.1.1.16:4000\nnegotiated options, tasks will start in 2 seconds\nStarting up..header from 1.1.1.166:4001 to id 4001 bogus\n..\ntsks tx/s rx/s tx+rx K/s mbi K/s mbo K/s tx us/c rtt us\ncpu %\n 1 0 0 0.00 0.00 0.00 0.00 0.00 -1.00\n 1 0 0 0.00 0.00 0.00 0.00 0.00 -1.00\n 1 0 0 0.00 0.00 0.00 0.00 0.00 -1.00\n 1 0 0 0.00 0.00 0.00 0.00 0.00 -1.00\n 1 0 0 0.00 0.00 0.00 0.00 0.00 -1.00\n...\n\"\nSo this exchange between 8K and 1M pool is added back.\n\nFixes: commit 490ea5967b0d (\"RDS: IB: move FMR code to its own file\")\nSigned-off-by: Zhu Yanjun \u003cyanjun.zhu@oracle.com\u003e\nAcked-by: Santosh Shilimkar \u003csantosh.shilimkar@oracle.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "6819e3f6d83a24777813b0d031ebe0861694db5a", "tree": "fba11a15aa72133931b3480d308bf7eca4ad9988", "parents": [ "1c5c12ee308aacf635c8819cd4baa3bd58f8a8b7" ], "author": { "name": "Miaohe Lin", "email": "linmiaohe@huawei.com", "time": "Sat Apr 20 12:09:39 2019 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Apr 24 11:45:04 2019 -0700" }, "message": "net: vrf: Fix operation not supported when set vrf mac\n\nVrf device is not able to change mac address now because lack of\nndo_set_mac_address. Complete this in case some apps need to do\nthis.\n\nReported-by: Hui Wang \u003cwanghui104@huawei.com\u003e\nSigned-off-by: Miaohe Lin \u003clinmiaohe@huawei.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "13f5938d8264b5501368523c4513ff26608a33e8", "tree": "c69e1c167cebb240986c2f079d3f989e7d23e033", "parents": [ "652727bbe1b17993636346716ae5867627793647" ], "author": { "name": "Jérôme Glisse", "email": "jglisse@redhat.com", "time": "Wed Apr 10 15:37:47 2019 -0400" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Wed Apr 24 12:33:59 2019 -0500" }, "message": "cifs: fix page reference leak with readv/writev\n\nCIFS can leak pages reference gotten through GUP (get_user_pages*()\nthrough iov_iter_get_pages()). This happen if cifs_send_async_read()\nor cifs_write_from_iter() calls fail from within __cifs_readv() and\n__cifs_writev() respectively. This patch move page unreference to\ncifs_aio_ctx_release() which will happens on all code paths this is\nall simpler to follow for correctness.\n\nSigned-off-by: Jérôme Glisse \u003cjglisse@redhat.com\u003e\nCc: Steve French \u003csfrench@samba.org\u003e\nCc: linux-cifs@vger.kernel.org\nCc: samba-technical@lists.samba.org\nCc: Alexander Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: linux-fsdevel@vger.kernel.org\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Stable \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\nReviewed-by: Pavel Shilovsky \u003cpshilov@microsoft.com\u003e\n" }, { "commit": "652727bbe1b17993636346716ae5867627793647", "tree": "d0c67021774a1e2c34feed31ff224e259ee9a5ca", "parents": [ "05fd5c2c61732152a6bddc318aae62d7e436629b" ], "author": { "name": "Frank Sorenson", "email": "sorenson@redhat.com", "time": "Tue Apr 16 08:37:27 2019 -0500" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Wed Apr 24 12:33:59 2019 -0500" }, "message": "cifs: do not attempt cifs operation on smb2+ rename error\n\nA path-based rename returning EBUSY will incorrectly try opening\nthe file with a cifs (NT Create AndX) operation on an smb2+ mount,\nwhich causes the server to force a session close.\n\nIf the mount is smb2+, skip the fallback.\n\nSigned-off-by: Frank Sorenson \u003csorenson@redhat.com\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\nCC: Stable \u003cstable@vger.kernel.org\u003e\nReviewed-by: Ronnie Sahlberg \u003clsahlber@redhat.com\u003e\n" }, { "commit": "05fd5c2c61732152a6bddc318aae62d7e436629b", "tree": "440d07cdc7fcff71f9c0368c8bedfccc525ae5c1", "parents": [ "ba25b50d582ff6c6021eee80824134aeb9ab8785" ], "author": { "name": "Ronnie Sahlberg", "email": "lsahlber@redhat.com", "time": "Tue Apr 23 16:39:45 2019 +1000" }, "committer": { "name": "Steve French", "email": "stfrench@microsoft.com", "time": "Wed Apr 24 12:33:59 2019 -0500" }, "message": "cifs: fix memory leak in SMB2_read\n\nCommit 088aaf17aa79300cab14dbee2569c58cfafd7d6e introduced a leak where\nif SMB2_read() returned an error we would return without freeing the\nrequest buffer.\n\nCc: Stable \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Ronnie Sahlberg \u003clsahlber@redhat.com\u003e\nReviewed-by: Pavel Shilovsky \u003cpshilov@microsoft.com\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\n" }, { "commit": "bce1a78423961fce676ac65540a31b6ffd179e6d", "tree": "8201f766f8de098ddcc1aa48c338b7e9a4cffae9", "parents": [ "f06eba72274788db6a43012a05a99915c0283aef" ], "author": { "name": "Pan Bian", "email": "bianpan2016@163.com", "time": "Fri Apr 19 07:39:00 2019 +0000" }, "committer": { "name": "Dmitry Torokhov", "email": "dmitry.torokhov@gmail.com", "time": "Wed Apr 24 16:33:37 2019 +0000" }, "message": "Input: synaptics-rmi4 - fix possible double free\n\nThe RMI4 function structure has been released in rmi_register_function\nif error occurs. However, it will be released again in the function\nrmi_create_function, which may result in a double-free bug.\n\nSigned-off-by: Pan Bian \u003cbianpan2016@163.com\u003e\nSigned-off-by: Dmitry Torokhov \u003cdmitry.torokhov@gmail.com\u003e" }, { "commit": "67f269b37f9b4d52c5e7f97acea26c0852e9b8a1", "tree": "58f359e2dca30490e6962ae1c1933f05dab97a97", "parents": [ "d5e560d3f72382ac4e3bfe4e0f0420e6a220b039" ], "author": { "name": "Jason Gunthorpe", "email": "jgg@mellanox.com", "time": "Tue Apr 16 14:07:28 2019 +0300" }, "committer": { "name": "Jason Gunthorpe", "email": "jgg@mellanox.com", "time": "Wed Apr 24 13:32:25 2019 -0300" }, "message": "RDMA/ucontext: Fix regression with disassociate\n\nWhen this code was consolidated the intention was that the VMA would\nbecome backed by anonymous zero pages after the zap_vma_pte - however this\nvery subtly relied on setting the vm_ops \u003d NULL and clearing the VM_SHARED\nbits to transform the VMA into an anonymous VMA. Since the vm_ops was\nremoved this broke.\n\nNow userspace gets a SIGBUS if it touches the vma after disassociation.\n\nInstead of converting the VMA to anonymous provide a fault handler that\nputs a zero\u0027d page into the VMA when user-space touches it after\ndisassociation.\n\nCc: stable@vger.kernel.org\nSuggested-by: Andrea Arcangeli \u003caarcange@redhat.com\u003e\nFixes: 5f9794dc94f5 (\"RDMA/ucontext: Add a core API for mmaping driver IO memory\")\nSigned-off-by: Jason Gunthorpe \u003cjgg@mellanox.com\u003e\nSigned-off-by: Leon Romanovsky \u003cleonro@mellanox.com\u003e\nSigned-off-by: Jason Gunthorpe \u003cjgg@mellanox.com\u003e\n" }, { "commit": "f06eba72274788db6a43012a05a99915c0283aef", "tree": "68a2a4eb664d52b4412de93e9e2c32012109a514", "parents": [ "bf2a7ca39fd3ab47ef71c621a7ee69d1813b1f97" ], "author": { "name": "Jacky Bai", "email": "ping.bai@nxp.com", "time": "Fri Apr 05 10:31:09 2019 -0700" }, "committer": { "name": "Dmitry Torokhov", "email": "dmitry.torokhov@gmail.com", "time": "Wed Apr 24 16:32:11 2019 +0000" }, "message": "Input: snvs_pwrkey - make it depend on ARCH_MXC\n\nThe SNVS power key is not only used on i.MX6SX and i.MX7D, it is also\nused by i.MX6UL and NXP\u0027s latest ARMv8 based i.MX8M series SOC. So\nupdate the config dependency to use ARCH_MXC, and add the COMPILE_TEST\ntoo.\n\nSigned-off-by: Jacky Bai \u003cping.bai@nxp.com\u003e\nReviewed-by: Dong Aisheng \u003caisheng.dong@nxp.com\u003e\nSigned-off-by: Dmitry Torokhov \u003cdmitry.torokhov@gmail.com\u003e\n" }, { "commit": "d5e560d3f72382ac4e3bfe4e0f0420e6a220b039", "tree": "b5d29d24666017a08821125316e2a31d499ed0b2", "parents": [ "c660133c339f9ab684fdf568c0d51b9ae5e86002" ], "author": { "name": "Jason Gunthorpe", "email": "jgg@mellanox.com", "time": "Tue Apr 16 14:07:26 2019 +0300" }, "committer": { "name": "Jason Gunthorpe", "email": "jgg@mellanox.com", "time": "Wed Apr 24 13:06:40 2019 -0300" }, "message": "RDMA/mlx5: Use rdma_user_map_io for mapping BAR pages\n\nSince mlx5 supports device disassociate it must use this API for all\nBAR page mmaps, otherwise the pages can remain mapped after the device\nis unplugged causing a system crash.\n\nCc: stable@vger.kernel.org\nFixes: 5f9794dc94f5 (\"RDMA/ucontext: Add a core API for mmaping driver IO memory\")\nSigned-off-by: Jason Gunthorpe \u003cjgg@mellanox.com\u003e\nReviewed-by: Haggai Eran \u003chaggaie@mellanox.com\u003e\nSigned-off-by: Leon Romanovsky \u003cleonro@mellanox.com\u003e\n" }, { "commit": "c660133c339f9ab684fdf568c0d51b9ae5e86002", "tree": "20fed69f72f0cfb9e5acc778c79c1d7a13c07d38", "parents": [ "7249c8ea227a582c14f63e9e8853eb7369122f10" ], "author": { "name": "Jason Gunthorpe", "email": "jgg@mellanox.com", "time": "Tue Apr 16 14:07:25 2019 +0300" }, "committer": { "name": "Jason Gunthorpe", "email": "jgg@mellanox.com", "time": "Wed Apr 24 13:06:24 2019 -0300" }, "message": "RDMA/mlx5: Do not allow the user to write to the clock page\n\nThe intent of this VMA was to be read-only from user space, but the\nVM_MAYWRITE masking was missed, so mprotect could make it writable.\n\nCc: stable@vger.kernel.org\nFixes: 5c99eaecb1fc (\"IB/mlx5: Mmap the HCA\u0027s clock info to user-space\")\nSigned-off-by: Jason Gunthorpe \u003cjgg@mellanox.com\u003e\nReviewed-by: Haggai Eran \u003chaggaie@mellanox.com\u003e\nSigned-off-by: Leon Romanovsky \u003cleonro@mellanox.com\u003e\n" }, { "commit": "462ce5d963f18b71c63f6b7730a35a2ee5273540", "tree": "4ebd291d0840d1eab35a6c223a94b1fa80bbc9a1", "parents": [ "e02bc29b2cfa7806830d6da8b2322cddd67e8dfe" ], "author": { "name": "Maarten Lankhorst", "email": "maarten.lankhorst@linux.intel.com", "time": "Wed Apr 24 17:06:29 2019 +0200" }, "committer": { "name": "Maarten Lankhorst", "email": "maarten.lankhorst@linux.intel.com", "time": "Wed Apr 24 17:27:14 2019 +0200" }, "message": "drm/vc4: Fix compilation error reported by kbuild test bot\n\nA pointer to crtc was missing, resulting in the following build error:\ndrivers/gpu/drm/vc4/vc4_crtc.c:1045:44: sparse: sparse: incorrect type in argument 1 (different base types)\ndrivers/gpu/drm/vc4/vc4_crtc.c:1045:44: sparse: expected struct drm_crtc *crtc\ndrivers/gpu/drm/vc4/vc4_crtc.c:1045:44: sparse: got struct drm_crtc_state *state\ndrivers/gpu/drm/vc4/vc4_crtc.c:1045:39: sparse: sparse: not enough arguments for function vc4_crtc_destroy_state\n\nSigned-off-by: Maarten Lankhorst \u003cmaarten.lankhorst@linux.intel.com\u003e\nReported-by: kbuild test robot \u003clkp@intel.com\u003e\nCc: Eric Anholt \u003ceric@anholt.net\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/2b6ed5e6-81b0-4276-8860-870b54ca3262@linux.intel.com\nFixes: d08106796a78 (\"drm/vc4: Fix memory leak during gpu reset.\")\nCc: \u003cstable@vger.kernel.org\u003e # v4.6+\nAcked-by: Daniel Vetter \u003cdaniel.vetter@ffwll.ch\u003e\n" }, { "commit": "e02bc29b2cfa7806830d6da8b2322cddd67e8dfe", "tree": "748128b2f657796f0c9c8d2755662f6c6a0ae052", "parents": [ "d08106796a78a4273e39e1bbdf538dc4334b2635" ], "author": { "name": "Paul Kocialkowski", "email": "paul.kocialkowski@bootlin.com", "time": "Wed Apr 24 11:04:13 2019 +0200" }, "committer": { "name": "Paul Kocialkowski", "email": "paul.kocialkowski@bootlin.com", "time": "Wed Apr 24 15:09:08 2019 +0200" }, "message": "drm/sun4i: Unbind components before releasing DRM and memory\n\nOur components may still be using the DRM device driver (if only to\naccess our driver\u0027s private data), so make sure to unbind them before\nthe final drm_dev_put.\n\nAlso release our reserved memory after component unbind instead of\nbefore to match reverse creation order.\n\nFixes: f5a9ed867c83 (\"drm/sun4i: Fix component unbinding and component master deletion\")\nSigned-off-by: Paul Kocialkowski \u003cpaul.kocialkowski@bootlin.com\u003e\nReviewed-by: Chen-Yu Tsai \u003cwens@csie.org\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20190424090413.6918-1-paul.kocialkowski@bootlin.com\n" }, { "commit": "0d02113b31b2017dd349ec9df2314e798a90fa6e", "tree": "46e965be16d06e42c150950286f05f3797c64ccb", "parents": [ "36f0c423552dacaca152324b8e9bda42a6d88865" ], "author": { "name": "Qian Cai", "email": "cai@lca.pw", "time": "Tue Apr 23 12:58:11 2019 -0400" }, "committer": { "name": "Borislav Petkov", "email": "bp@suse.de", "time": "Wed Apr 24 11:32:34 2019 +0200" }, "message": "x86/mm: Fix a crash with kmemleak_scan()\n\nThe first kmemleak_scan() call after boot would trigger the crash below\nbecause this callpath:\n\n kernel_init\n free_initmem\n mem_encrypt_free_decrypted_mem\n free_init_pages\n\nunmaps memory inside the .bss when DEBUG_PAGEALLOC\u003dy.\n\nkmemleak_init() will register the .data/.bss sections and then\nkmemleak_scan() will scan those addresses and dereference them looking\nfor pointer references. If free_init_pages() frees and unmaps pages in\nthose sections, kmemleak_scan() will crash if referencing one of those\naddresses:\n\n BUG: unable to handle kernel paging request at ffffffffbd402000\n CPU: 12 PID: 325 Comm: kmemleak Not tainted 5.1.0-rc4+ #4\n RIP: 0010:scan_block\n Call Trace:\n scan_gray_list\n kmemleak_scan\n kmemleak_scan_thread\n kthread\n ret_from_fork\n\nSince kmemleak_free_part() is tolerant to unknown objects (not tracked\nby kmemleak), it is fine to call it from free_init_pages() even if not\nall address ranges passed to this function are known to kmemleak.\n\n [ bp: Massage. ]\n\nFixes: b3f0907c71e0 (\"x86/mm: Add .bss..decrypted section to hold shared variables\")\nSigned-off-by: Qian Cai \u003ccai@lca.pw\u003e\nSigned-off-by: Borislav Petkov \u003cbp@suse.de\u003e\nReviewed-by: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nCc: Andy Lutomirski \u003cluto@kernel.org\u003e\nCc: Brijesh Singh \u003cbrijesh.singh@amd.com\u003e\nCc: Dave Hansen \u003cdave.hansen@linux.intel.com\u003e\nCc: \"H. Peter Anvin\" \u003chpa@zytor.com\u003e\nCc: Ingo Molnar \u003cmingo@redhat.com\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: x86-ml \u003cx86@kernel.org\u003e\nLink: https://lkml.kernel.org/r/20190423165811.36699-1-cai@lca.pw\n" }, { "commit": "d08106796a78a4273e39e1bbdf538dc4334b2635", "tree": "4a80d46dbb3d6c3f54c0ba73897e567ddc8cc52d", "parents": [ "f5a9ed867c83875546c9aadd4ed8e785e9adcc3c" ], "author": { "name": "Maarten Lankhorst", "email": "maarten.lankhorst@linux.intel.com", "time": "Fri Mar 01 13:56:11 2019 +0100" }, "committer": { "name": "Maarten Lankhorst", "email": "maarten.lankhorst@linux.intel.com", "time": "Wed Apr 24 11:23:37 2019 +0200" }, "message": "drm/vc4: Fix memory leak during gpu reset.\n\n__drm_atomic_helper_crtc_destroy_state does not free memory, it only\ncleans it up. Fix this by calling the functions own destroy function.\n\nFixes: 6d6e50039187 (\"drm/vc4: Allocate the right amount of space for boot-time CRTC state.\")\nCc: Eric Anholt \u003ceric@anholt.net\u003e\nCc: \u003cstable@vger.kernel.org\u003e # v4.6+\nReviewed-by: Eric Anholt \u003ceric@anholt.net\u003e\nSigned-off-by: Maarten Lankhorst \u003cmaarten.lankhorst@linux.intel.com\u003e\nLink: https://patchwork.freedesktop.org/patch/msgid/20190301125627.7285-2-maarten.lankhorst@linux.intel.com\n" }, { "commit": "1c5c12ee308aacf635c8819cd4baa3bd58f8a8b7", "tree": "1c1ca7d6585c26d35d0e5f06288c9337a4052243", "parents": [ "ffbf9870dcf1342592a1a26f4cf70bda39046134" ], "author": { "name": "Tao Ren", "email": "taoren@fb.com", "time": "Wed Apr 24 01:43:32 2019 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Apr 23 21:15:15 2019 -0700" }, "message": "net/ncsi: handle overflow when incrementing mac address\n\nPreviously BMC\u0027s MAC address is calculated by simply adding 1 to the\nlast byte of network controller\u0027s MAC address, and it produces incorrect\nresult when network controller\u0027s MAC address ends with 0xFF.\n\nThe problem can be fixed by calling eth_addr_inc() function to increment\nMAC address; besides, the MAC address is also validated before assigning\nto BMC.\n\nFixes: cb10c7c0dfd9 (\"net/ncsi: Add NCSI Broadcom OEM command\")\nSigned-off-by: Tao Ren \u003ctaoren@fb.com\u003e\nAcked-by: Jakub Kicinski \u003cjakub.kicinski@netronome.com\u003e\nAcked-by: Samuel Mendoza-Jonas \u003csam@mendozajonas.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ba25b50d582ff6c6021eee80824134aeb9ab8785", "tree": "d6002f77ac65c936b489f21409c9b162acfc3c28", "parents": [ "12a54b150fb5b6c2f3da932dc0e665355f8a5a48", "a0cecc23cfcbf2626497a8c8770856dd56b67917" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Apr 23 21:08:52 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Apr 23 21:08:52 2019 -0700" }, "message": "Merge tag \u0027drm-fixes-2019-04-24\u0027 of git://anongit.freedesktop.org/drm/drm\n\nPull drm regression fixes from Dave Airlie:\n \"We interrupt your regularly scheduled drm fixes for a regression\n special.\n\n The first is for a fix in i915 that had unexpected side effects\n fallout in the userspace X.org modesetting driver where X would no\n longer start. I got tired of the nitpicking and issued a large hammer\n on it. The X.org driver is buggy, but blackscreen regressions are\n worse.\n\n The second was an oversight that myself and Gerd should have noticed\n better, Gerd is trying to fix this properly, but the regression is too\n large to leave, even if the original behaviour is bad in some cases,\n it\u0027s clearly bad to break a bunch of working use cases.\n\n I\u0027ll likely have a regular fixes pull later, but I really wanted to\n highlight these\"\n\n* tag \u0027drm-fixes-2019-04-24\u0027 of git://anongit.freedesktop.org/drm/drm:\n Revert \"drm/virtio: drop prime import/export callbacks\"\n Revert \"drm/i915/fbdev: Actually configure untiled displays\"\n" }, { "commit": "ffbf9870dcf1342592a1a26f4cf70bda39046134", "tree": "ff6b9ab303fe81ee7a156e9b09fed4dc06a50ad2", "parents": [ "66c031716bcd9647cd2304e4875163663b086405" ], "author": { "name": "Ilias Apalodimas", "email": "ilias.apalodimas@linaro.org", "time": "Tue Apr 23 09:01:41 2019 +0300" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Apr 23 19:39:16 2019 -0700" }, "message": "net: socionext: replace napi_alloc_frag with the netdev variant on init\n\nThe netdev variant is usable on any context since it disables interrupts.\nThe napi variant of the call should only be used within softirq context.\nReplace napi_alloc_frag on driver init with the correct netdev_alloc_frag\ncall\n\nChanges since v1:\n- Adjusted commit message\n\nAcked-by: Ard Biesheuvel \u003card.biesheuvel@linaro.org\u003e\nAcked-by: Jassi Brar \u003cjaswinder.singh@linaro.org\u003e\nFixes: 4acb20b46214 (\"net: socionext: different approach on DMA\")\nSigned-off-by: Ilias Apalodimas \u003cilias.apalodimas@linaro.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "66c031716bcd9647cd2304e4875163663b086405", "tree": "004d952e31cf22fd42f67b29fb917e93090ed07f", "parents": [ "d04830531d0c4a99c897a44038e5da3d23331d2f" ], "author": { "name": "Colin Ian King", "email": "colin.king@canonical.com", "time": "Tue Apr 23 15:30:07 2019 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Apr 23 18:46:27 2019 -0700" }, "message": "net: atheros: fix spelling mistake \"underun\" -\u003e \"underrun\"\n\nThere are spelling mistakes in structure elements, fix these.\n\nSigned-off-by: Colin Ian King \u003ccolin.king@canonical.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a0cecc23cfcbf2626497a8c8770856dd56b67917", "tree": "74e7055af31ad5ce1b45082cb6b1e80722b4f59b", "parents": [ "9fa246256e09dc30820524401cdbeeaadee94025" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Wed Apr 24 10:52:20 2019 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Wed Apr 24 10:52:52 2019 +1000" }, "message": "Revert \"drm/virtio: drop prime import/export callbacks\"\n\nThis patch does more harm than good, as it breaks both Xwayland and\ngnome-shell with X11.\n\nXwayland requires DRI3 \u0026 DRI3 requires PRIME.\n\nX11 crash for obscure double-free reason which are hard to debug\n(starting X11 by hand doesn\u0027t trigger the crash).\n\nI don\u0027t see an apparent problem implementing those stub prime\nfunctions, they may return an error at run-time, and it seems to be\nhandled fine by GNOME at least.\n\nThis reverts commit b318e3ff7ca065d6b107e424c85a63d7a6798a69.\n[airlied:\nThis broke userspace for virtio-gpus, and regressed things from DRI3 to DRI2.\n\nThis brings back the original problem, but it\u0027s better than regressions.]\n\nFixes: b318e3ff7ca065d6b107e424c85a63d7a6798a (\"drm/virtio: drop prime import/export callbacks\")\nSigned-off-by: Marc-André Lureau \u003cmarcandre.lureau@redhat.com\u003e\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n" }, { "commit": "9fa246256e09dc30820524401cdbeeaadee94025", "tree": "2d640c68e947b448d00f2318d999d0902ed65584", "parents": [ "085b7755808aa11f78ab9377257e1dad2e6fa4bb" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Wed Apr 24 10:47:56 2019 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Wed Apr 24 10:47:56 2019 +1000" }, "message": "Revert \"drm/i915/fbdev: Actually configure untiled displays\"\n\nThis reverts commit d179b88deb3bf6fed4991a31fd6f0f2cad21fab5.\n\nThis commit is documented to break userspace X.org modesetting driver in certain configurations.\n\nThe X.org modesetting userspace driver is broken. No fixes are available yet. In order for this patch to be applied it either needs a config option or a workaround developed.\n\nThis has been reported a few times, saying it\u0027s a userspace problem is clearly against the regression rules.\n\nBugzilla: https://bugs.freedesktop.org/show_bug.cgi?id\u003d109806\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e # v3.19+\n" }, { "commit": "12a54b150fb5b6c2f3da932dc0e665355f8a5a48", "tree": "fa5d6becf0392244d4a44cc6afdbc93e363689d1", "parents": [ "d286e13d53f54b00bcd7443eedd067cd432cf547", "f456458e4d25a8962d0946891617c76cc3ff5fb9" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Apr 23 13:40:55 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Apr 23 13:40:55 2019 -0700" }, "message": "Merge tag \u0027nfsd-5.1-1\u0027 of git://linux-nfs.org/~bfields/linux\n\nPull nfsd bugfixes from Bruce Fields:\n \"Fix miscellaneous nfsd bugs, in NFSv4.1 callbacks, NFSv4.1\n lock-notification callbacks, NFSv3 readdir encoding, and the\n cache/upcall code\"\n\n* tag \u0027nfsd-5.1-1\u0027 of git://linux-nfs.org/~bfields/linux:\n nfsd: wake blocked file lock waiters before sending callback\n nfsd: wake waiters blocked on file_lock before deleting it\n nfsd: Don\u0027t release the callback slot unless it was actually held\n nfsd/nfsd3_proc_readdir: fix buffer count and page pointers\n sunrpc: don\u0027t mark uninitialised items as VALID.\n" }, { "commit": "d286e13d53f54b00bcd7443eedd067cd432cf547", "tree": "430fa735575c6835bf065c08bcc2f4babde0c09d", "parents": [ "7142eaa58b49d9de492ccc16d48df7c488a5fbb6", "39036cd2727395c3369b1051005da74059a85317" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Apr 23 13:34:17 2019 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Apr 23 13:34:17 2019 -0700" }, "message": "Merge tag \u0027syscalls-5.1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/asm-generic\n\nPull syscall numbering updates from Arnd Bergmann:\n \"arch: add pidfd and io_uring syscalls everywhere\n\n This comes a bit late, but should be in 5.1 anyway: we want the newly\n added system calls to be synchronized across all architectures in the\n release.\n\n I hope that in the future, any newly added system calls can be added\n to all architectures at the same time, and tested there while they are\n in linux-next, avoiding dependencies between the architecture\n maintainer trees and the tree that contains the new system call\"\n\n* tag \u0027syscalls-5.1\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/asm-generic:\n arch: add pidfd and io_uring syscalls everywhere\n" }, { "commit": "37659182bff1eeaaeadcfc8f853c6d2b6dbc3f47", "tree": "131b20cb2308f0fbd8b411fdeaf49d97b9ff7aa1", "parents": [ "4b8222870032715f9d995f3eb7c7acd8379a275d" ], "author": { "name": "Yan, Zheng", "email": "zyan@redhat.com", "time": "Thu Apr 18 11:24:57 2019 +0800" }, "committer": { "name": "Ilya Dryomov", "email": "idryomov@gmail.com", "time": "Tue Apr 23 21:37:54 2019 +0200" }, "message": "ceph: fix ci-\u003ei_head_snapc leak\n\nWe missed two places that i_wrbuffer_ref_head, i_wr_ref, i_dirty_caps\nand i_flushing_caps may change. When they are all zeros, we should free\ni_head_snapc.\n\nCc: stable@vger.kernel.org\nLink: https://tracker.ceph.com/issues/38224\nReported-and-tested-by: Luis Henriques \u003clhenriques@suse.com\u003e\nSigned-off-by: \"Yan, Zheng\" \u003czyan@redhat.com\u003e\nSigned-off-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\n" }, { "commit": "4b8222870032715f9d995f3eb7c7acd8379a275d", "tree": "922907eb1251073439bc094e76800b7f1188c098", "parents": [ "76a495d666e5043ffc315695f8241f5e94a98849" ], "author": { "name": "Jeff Layton", "email": "jlayton@kernel.org", "time": "Mon Apr 15 12:00:42 2019 -0400" }, "committer": { "name": "Ilya Dryomov", "email": "idryomov@gmail.com", "time": "Tue Apr 23 21:37:54 2019 +0200" }, "message": "ceph: handle the case where a dentry has been renamed on outstanding req\n\nIt\u0027s possible for us to issue a lookup to revalidate a dentry\nconcurrently with a rename. If done in the right order, then we could\nend up processing dentry info in the reply that no longer reflects the\nstate of the dentry.\n\nIf req-\u003er_dentry-\u003ed_name differs from the one in the trace, then just\nignore the trace in the reply. We only need to do this however if the\nparent\u0027s i_rwsem is not held.\n\nSigned-off-by: Jeff Layton \u003cjlayton@kernel.org\u003e\nReviewed-by: \"Yan, Zheng\" \u003czyan@redhat.com\u003e\nSigned-off-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\n" }, { "commit": "76a495d666e5043ffc315695f8241f5e94a98849", "tree": "93ace9f5486aa96bdf96cb120f97806592946da0", "parents": [ "1bcb344086f3ecf8d6705f6d708441baa823beb3" ], "author": { "name": "Jeff Layton", "email": "jlayton@kernel.org", "time": "Wed Apr 17 12:58:28 2019 -0400" }, "committer": { "name": "Ilya Dryomov", "email": "idryomov@gmail.com", "time": "Tue Apr 23 21:37:54 2019 +0200" }, "message": "ceph: ensure d_name stability in ceph_dentry_hash()\n\nTake the d_lock here to ensure that d_name doesn\u0027t change.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Jeff Layton \u003cjlayton@kernel.org\u003e\nReviewed-by: \"Yan, Zheng\" \u003czyan@redhat.com\u003e\nSigned-off-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\n" }, { "commit": "1bcb344086f3ecf8d6705f6d708441baa823beb3", "tree": "a74e633044deef292484f263c6ecba10e794d40d", "parents": [ "085b7755808aa11f78ab9377257e1dad2e6fa4bb" ], "author": { "name": "Jeff Layton", "email": "jlayton@kernel.org", "time": "Mon Apr 15 12:00:42 2019 -0400" }, "committer": { "name": "Ilya Dryomov", "email": "idryomov@gmail.com", "time": "Tue Apr 23 21:37:54 2019 +0200" }, "message": "ceph: only use d_name directly when parent is locked\n\nBen reported tripping the BUG_ON in create_request_message during some\nperformance testing. Analysis of the vmcore showed that the length of\nthe r_dentry-\u003ed_name string changed after we allocated the buffer, but\nbefore we encoded it.\n\nbuild_dentry_path returns pointers to d_name in the common case of\nnon-snapped dentries, but this optimization isn\u0027t safe unless the parent\ndirectory is locked. When it isn\u0027t, have the code make a copy of the\nd_name while holding the d_lock.\n\nCc: stable@vger.kernel.org\nReported-by: Ben England \u003cbengland@redhat.com\u003e\nSigned-off-by: Jeff Layton \u003cjlayton@kernel.org\u003e\nReviewed-by: \"Yan, Zheng\" \u003czyan@redhat.com\u003e\nSigned-off-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\n" }, { "commit": "d04830531d0c4a99c897a44038e5da3d23331d2f", "tree": "bb0a1ae718b655729f0ad0739088b82c1904c51a", "parents": [ "2f23a2a768bee7ad2ff1e9527c3f7e279e794a46" ], "author": { "name": "Daniel Gomez", "email": "dagmcr@gmail.com", "time": "Mon Apr 22 21:08:04 2019 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Apr 23 10:44:44 2019 -0700" }, "message": "spi: ST ST95HF NFC: declare missing of table\n\nAdd missing \u003cof_device_id\u003e table for SPI driver relying on SPI\ndevice match since compatible is in a DT binding or in a DTS.\n\nBefore this patch:\nmodinfo drivers/nfc/st95hf/st95hf.ko | grep alias\nalias: spi:st95hf\n\nAfter this patch:\nmodinfo drivers/nfc/st95hf/st95hf.ko | grep alias\nalias: spi:st95hf\nalias: of:N*T*Cst,st95hfC*\nalias: of:N*T*Cst,st95hf\n\nReported-by: Javier Martinez Canillas \u003cjavier@dowhile0.org\u003e\nSigned-off-by: Daniel Gomez \u003cdagmcr@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2f23a2a768bee7ad2ff1e9527c3f7e279e794a46", "tree": "c97c2d89c43f1163831e145cfa963e11c1096cbf", "parents": [ "b561af36b1841088552464cdc3f6371d92f17710" ], "author": { "name": "Daniel Gomez", "email": "dagmcr@gmail.com", "time": "Mon Apr 22 21:08:03 2019 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Apr 23 10:44:44 2019 -0700" }, "message": "spi: Micrel eth switch: declare missing of table\n\nAdd missing \u003cof_device_id\u003e table for SPI driver relying on SPI\ndevice match since compatible is in a DT binding or in a DTS.\n\nBefore this patch:\nmodinfo drivers/net/phy/spi_ks8995.ko | grep alias\nalias: spi:ksz8795\nalias: spi:ksz8864\nalias: spi:ks8995\n\nAfter this patch:\nmodinfo drivers/net/phy/spi_ks8995.ko | grep alias\nalias: spi:ksz8795\nalias: spi:ksz8864\nalias: spi:ks8995\nalias: of:N*T*Cmicrel,ksz8795C*\nalias: of:N*T*Cmicrel,ksz8795\nalias: of:N*T*Cmicrel,ksz8864C*\nalias: of:N*T*Cmicrel,ksz8864\nalias: of:N*T*Cmicrel,ks8995C*\nalias: of:N*T*Cmicrel,ks8995\n\nReported-by: Javier Martinez Canillas \u003cjavier@dowhile0.org\u003e\nSigned-off-by: Daniel Gomez \u003cdagmcr@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e17b1af96b2afc38e684aa2f1033387e2ed10029", "tree": "023f28096fec46dd5fc1b6c9141e8f5ed6f02e20", "parents": [ "c3143967807adb1357c36b68a7563fc0c4e1f615" ], "author": { "name": "Ard Biesheuvel", "email": "ard.biesheuvel@linaro.org", "time": "Fri Apr 12 22:34:18 2019 +0100" }, "committer": { "name": "Russell King", "email": "rmk+kernel@armlinux.org.uk", "time": "Tue Apr 23 17:28:37 2019 +0100" }, "message": "ARM: 8857/1: efi: enable CP15 DMB instructions before cleaning the cache\n\nThe EFI stub is entered with the caches and MMU enabled by the\nfirmware, and once the stub is ready to hand over to the decompressor,\nwe clean and disable the caches.\n\nThe cache clean routines use CP15 barrier instructions, which can be\ndisabled via SCTLR. Normally, when using the provided cache handling\nroutines to enable the caches and MMU, this bit is enabled as well.\nHowever, but since we entered the stub with the caches already enabled,\nthis routine is not executed before we call the cache clean routines,\nresulting in undefined instruction exceptions if the firmware never\nenabled this bit.\n\nSo set the bit explicitly in the EFI entry code, but do so in a way that\nguarantees that the resulting code can still run on v6 cores as well\n(which are guaranteed to have CP15 barriers enabled)\n\nCc: \u003cstable@vger.kernel.org\u003e # v4.9+\nAcked-by: Marc Zyngier \u003cmarc.zyngier@arm.com\u003e\nSigned-off-by: Ard Biesheuvel \u003card.biesheuvel@linaro.org\u003e\nSigned-off-by: Russell King \u003crmk+kernel@armlinux.org.uk\u003e\n" }, { "commit": "c3143967807adb1357c36b68a7563fc0c4e1f615", "tree": "366d4c17a8d55bf9c4830fd67630c4f7b9dc7016", "parents": [ "503621628b32782a07b2318e4112bd4372aa3401" ], "author": { "name": "Tigran Tadevosyan", "email": "tigran.tadevosyan@arm.com", "time": "Fri Apr 05 14:16:13 2019 +0100" }, "committer": { "name": "Russell King", "email": "rmk+kernel@armlinux.org.uk", "time": "Tue Apr 23 17:28:37 2019 +0100" }, "message": "ARM: 8856/1: NOMMU: Fix CCR register faulty initialization when MPU is disabled\n\nWhen CONFIG_ARM_MPU is not defined, the base address of v7M SCB register\nis not initialized with correct value. This prevents enabling I/D caches\nwhen the L1 cache poilcy is applied in kernel.\n\nFixes: 3c24121039c9da14692eb48f6e39565b28c0f3cf (\"ARM: 8756/1: NOMMU: Postpone MPU activation till __after_proc_init\")\nSigned-off-by: Tigran Tadevosyan \u003ctigran.tadevosyan@arm.com\u003e\nSigned-off-by: Vladimir Murzin \u003cvladimir.murzin@arm.com\u003e\nSigned-off-by: Russell King \u003crmk+kernel@armlinux.org.uk\u003e\n" }, { "commit": "503621628b32782a07b2318e4112bd4372aa3401", "tree": "cd5ca649274de5a59c9520b03c56b6fa868e646e", "parents": [ "9e98c678c2d6ae3a17cb2de55d17f69dddaa231b" ], "author": { "name": "Russell King", "email": "rmk+kernel@armlinux.org.uk", "time": "Tue Apr 23 17:09:38 2019 +0100" }, "committer": { "name": "Russell King", "email": "rmk+kernel@armlinux.org.uk", "time": "Tue Apr 23 17:28:32 2019 +0100" }, "message": "ARM: fix function graph tracer and unwinder dependencies\n\nNaresh Kamboju recently reported that the function-graph tracer crashes\non ARM. The function-graph tracer assumes that the kernel is built with\nframe pointers.\n\nWe explicitly disabled the function-graph tracer when building Thumb2,\nsince the Thumb2 ABI doesn\u0027t have frame pointers.\n\nWe recently changed the way the unwinder method was selected, which\nseems to have made it more likely that we can end up with the function-\ngraph tracer enabled but without the kernel built with frame pointers.\n\nFix up the function graph tracer dependencies so the option is not\navailable when we have no possibility of having frame pointers, and\nadjust the dependencies on the unwinder option to hide the non-frame\npointer unwinder options if the function-graph tracer is enabled.\n\nReviewed-by: Masami Hiramatsu \u003cmhiramat@kernel.org\u003e\nTested-by: Masami Hiramatsu \u003cmhiramat@kernel.org\u003e\nSigned-off-by: Russell King \u003crmk+kernel@armlinux.org.uk\u003e\n" }, { "commit": "f5d356328d676deca698d01324000e0d98fba643", "tree": "255a23da55db4c8ec272f4a9e12aec0a4214149c", "parents": [ "bd4264112f93045704731850c5e4d85db981cd85" ], "author": { "name": "Jonathan Neuschäfer", "email": "j.neuschaefer@gmx.net", "time": "Sat Apr 20 14:50:50 2019 +0200" }, "committer": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Apr 23 11:15:38 2019 -0500" }, "message": "drm/sched: Fix description of drm_sched_stop\n\nSince commit 222b5f044159 (\"drm/sched: Refactor ring mirror list\nhandling.\"), drm_sched_hw_job_reset is no longer there, so let\u0027s adjust\nthe doc comment accordingly.\n\nReviewed-by: Andrey Grodzovsky \u003candrey.grodzovsky@amd.com\u003e\nSigned-off-by: Jonathan Neuschäfer \u003cj.neuschaefer@gmx.net\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\n" }, { "commit": "8358e3a8264a228cf2dfb6f3a05c0328f4118f12", "tree": "f310ade889e169f6654ef4ba5747a7bb581e859c", "parents": [ "fb775faa9e46ff481e4ced11116c9bd45359cb43" ], "author": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Tue Apr 23 08:17:58 2019 -0600" }, "committer": { "name": "Jens Axboe", "email": "axboe@kernel.dk", "time": "Tue Apr 23 08:17:58 2019 -0600" }, "message": "io_uring: remove \u0027state\u0027 argument from io_{read,write} path\n\nSince commit 09bb839434b we don\u0027t use the state argument for any sort\nof on-stack caching in the io read and write path. Remove the stale\nand unused argument from them, and bubble it up to __io_submit_sqe()\nand down to io_prep_rw().\n\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n" }, { "commit": "7bcde275eb1d0ac8793c77c7e666a886eb16633d", "tree": "73e92f45c696acaddeba4d1e45292cfe2a709966", "parents": [ "d4fad0a426c6e26f48c9a7cdd21a7fe9c198d645" ], "author": { "name": "Lucas Stach", "email": "l.stach@pengutronix.de", "time": "Fri Apr 12 17:59:41 2019 +0200" }, "committer": { "name": "Philipp Zabel", "email": "p.zabel@pengutronix.de", "time": "Tue Apr 23 14:54:22 2019 +0200" }, "message": "drm/imx: don\u0027t skip DP channel disable for background plane\n\nIn order to make sure that the plane color space gets reset correctly.\n\nSigned-off-by: Lucas Stach \u003cl.stach@pengutronix.de\u003e\nSigned-off-by: Philipp Zabel \u003cp.zabel@pengutronix.de\u003e\n" }, { "commit": "d4fad0a426c6e26f48c9a7cdd21a7fe9c198d645", "tree": "f316db9449635ed6afacf03b2252639417f9978e", "parents": [ "dc4060a5dc2557e6b5aa813bf5b73677299d62d2" ], "author": { "name": "Lucas Stach", "email": "l.stach@pengutronix.de", "time": "Fri Apr 12 17:59:40 2019 +0200" }, "committer": { "name": "Philipp Zabel", "email": "p.zabel@pengutronix.de", "time": "Tue Apr 23 14:54:16 2019 +0200" }, "message": "gpu: ipu-v3: dp: fix CSC handling\n\nInitialize the flow input colorspaces to unknown and reset to that value\nwhen the channel gets disabled. This avoids the state getting mixed up\nwith a previous mode.\n\nAlso keep the CSC settings for the background flow intact when disabling\nthe foreground flow.\n\nRoot-caused-by: Jonathan Marek \u003cjonathan@marek.ca\u003e\nSigned-off-by: Lucas Stach \u003cl.stach@pengutronix.de\u003e\nSigned-off-by: Philipp Zabel \u003cp.zabel@pengutronix.de\u003e\n" } ], "next": "4e69ecf4da1ee0b2ac735e1f1bb13935acd5a38d" }