- Linux-stable-mirror - lists.linaro.org

Re: [RFC PATCH stable-4.4] coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping

by Ajay Kaher

> From: Andrea Arcangeli <aarcange(a)redhat.com> > > Upstream 04f5866e41fb70690e28397487d8bd8eea7d712a commit. > > > Signed-off-by: Michal Hocko <mhocko(a)suse.com> > --- > Hi, > this is based on the backport I have done for out 4.4 based distribution > kernel. Please double check that I haven't missed anything before > applying to the stable tree. I have also CCed Joel for the binder part > which is not in the current upstream anymore but I believe it needs the > check as well. > > Review feedback welcome. > > drivers/android/binder.c | 6 ++++++ > fs/proc/task_mmu.c | 18 ++++++++++++++++++ > fs/userfaultfd.c | 10 ++++++++-- > include/linux/mm.h | 21 +++++++++++++++++++++ > mm/huge_memory.c | 2 +- > mm/mmap.c | 7 ++++++- > 6 files changed, 60 insertions(+), 4 deletions(-) > > diff --git a/drivers/android/binder.c b/drivers/android/binder.c > index 260ce0e60187..1fb1cddbd19a 100644 > --- a/drivers/android/binder.c > +++ b/drivers/android/binder.c > @@ -570,6 +570,12 @@ static int binder_update_page_range(struct binder_proc *proc, int allocate, > > if (mm) { > down_write(&mm->mmap_sem); > + if (!mmget_still_valid(mm)) { > + if (allocate == 0) > + goto free_range; Please cross check, free_range: should not end-up with modifications in vma. > + goto err_no_vma; > + } > + > vma = proc->vma; > if (vma && mm != proc->vma_vm_mm) { > pr_err("%d: vma mm and task mm mismatch\n",

5 years, 12 months

2
1
0 0

Dynamic overlay failure in 4.19 & 4.20

by Phil Elwell

Hi, I think patch f96278810150 ("of: overlay: set node fields from properties when add new overlay node") should be back-ported to 4.19, for the reasons outlined below (briefly: without it, overlay fragments that define phandles will appear to merged successfully, but they do so without those phandles, causing any references to them to break). Frank Rowand agrees that a back-port is necessary. I can verify that it solves the issue of the missing phandles, and as far as I know it doesn't cause any regressions. However, the code in question isn't really used in mainline kernels, so I understand if you prefer to leave things as they stand now rather than risk further breaking a stable kernel. Thanks, Phil Elwell, Raspberry Pi -------- Forwarded Message -------- Subject: Re: Dynamic overlay failure in 4.19 & 4.20 Date: Tue, 4 Jun 2019 11:20:43 -0700 From: Frank Rowand <frowand.list(a)gmail.com> To: Phil Elwell <phil(a)raspberrypi.org>, Rob Herring <robh+dt(a)kernel.org>, Pantelis Antoniou <pantelis.antoniou(a)konsulko.com>, devicetree(a)vger.kernel.org, linux-kernel(a)vger.kernel.org <linux-kernel(a)vger.kernel.org> Hi Phil, On 6/4/19 5:15 AM, Phil Elwell wrote: > Hi, > > In the downstream Raspberry Pi kernel we are using configfs to apply overlays at > runtime, using a patchset from Pantelis that hasn't been accepted upstream yet. > Apart from the occasional need to adapt to upstream changes, this has been working > well for us. > > A Raspberry Pi user recently noticed that this mechanism was failing for an overlay in > 4.19. Although the overlay appeared to be applied successfully, pinctrl was reporting > that one of the two fragments contained an invalid phandle, and an examination of the > live DT agreed - the target of the reference, which was in the other fragment, was > missing the phandle property. > > 5.0 added two patches - [1] to stop blindly copying properties from the overlay fragments > into the live tree, and [2] to explicitly copy across the name and phandle properties. > These two commits should be treated as a pair; the former requires the properties that > are legitimately defined by an overlay to be added via a changeset, but this mechanism > deliberately skips the name and phandle; the latter addresses this shortcoming. However, > [1] was back-ported to 4.19 and 4.20 but [2] wasn't, hence the problem. I have relied upon Greg's statement that he would handle the stable kernels, and that the process of doing so would not impact (or would minimally impact) maintainers. If I think something should go into stable, I will tag it as such, but otherwise I ignore the stable branches. For overlay related code specifically, my base standard is that overlay support is an under development, not yet ready for prime time feature and thus I do not tag my overlay patches for stable. Your research and analysis above sound like there are on target (thanks for providing the clear and detailed explanation!), so if you want the stable branches to work for overlays (out of tree, as you mentioned) I would suggest you email Greg, asking that the second patch be added to the stable branches. Since the two patches you pointed out are put of a larger series, you might also want to check which of the other patches in that series were included in stable or left out from stable. My suggestion that you request Greg add the second patch continues to rely on the concept that stable does not add to my workload, so I have not carefully analyzed whether adding the patch actually is the correct and full fix, but instead am relying on your good judgment that it is. To give you some context on the patch series, I started with 144552c78692 ("of: overlay: add tests to validate kfrees from overlay removal") due to my concerns with how memory is allocated and freed for overlays. The added tests exposed issues, and the rest of the patches in the series were dealing with the issues that were exposed. You can see the full series (with maybe an extra patch or so) with git log --oneline 144552c78692^..eeb07c573ec3 > The effect can be seen in the "overlay" overlay in the unittest data. Although the > overlay appears to apply correctly, the hvac-large-1 node is lacking the phandle it > should have as a result of the hvac_2 label, and that leaves the hvac-provider property > of ride@200 with an unresolved phandle. > > The obvious fix is to also back-port [2] to 4.19, but that leaves open the question of > whether either the overlay application mechanism or the unit test framework should have > detected the missing phandle. Yes, unittest showed the missing phandle, as you described in the /proc view of overlay.dts above. That portion of unittest depends on someone looking at the result of what is in /proc/device-tree and is not automated and is not documented. I intend to automate that check someday, but the task is still languishing on my todo list. > > Phil > > [1] 8814dc46bd9e ("of: overlay: do not duplicate properties from overlay for new nodes") > [2] f96278810150 ("of: overlay: set node fields from properties when add new overlay node") >

5 years, 12 months

3
4
0 0

[PATCH 4.19 000/276] 4.19.47-stable review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 4.19.47 release. There are 276 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat 01 Jun 2019 03:02:08 AM UTC. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.47-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 4.19.47-rc1 Benjamin Coddington <bcodding(a)redhat.com> NFS: Fix a double unlock from nfs_match,get_client Maxime Ripard <maxime.ripard(a)bootlin.com> drm/sun4i: dsi: Enforce boundaries on the start delay Farhan Ali <alifm(a)linux.ibm.com> vfio-ccw: Prevent quiesce function going into an infinite loop Maxime Ripard <maxime.ripard(a)bootlin.com> drm/sun4i: dsi: Change the start delay calculation Chris Wilson <chris(a)chris-wilson.co.uk> drm: Wake up next in drm_read() chain if we are forced to putback the event Noralf Trønnes <noralf(a)tronnes.org> drm/drv: Hold ref on parent device during drm_device lifetime Eric Anholt <eric(a)anholt.net> drm/v3d: Handle errors from IRQ setup. Arnd Bergmann <arnd(a)arndb.de> ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM Chris Lesiak <chris.lesiak(a)licor.com> spi: Fix zero length xfer bug Trent Piepho <tpiepho(a)impinj.com> spi: imx: stop buffer overflow in RX FIFO flush Geert Uytterhoeven <geert+renesas(a)glider.be> spi: rspi: Fix sequencer reset during initialization Tony Lindgren <tony(a)atomide.com> drm/omap: dsi: Fix PM for display blank with paired dss_pll calls Aditya Pakki <pakki001(a)umn.edu> spi : spi-topcliff-pch: Fix to handle empty DMA buffers James Smart <jsmart2021(a)gmail.com> scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices Arnd Bergmann <arnd(a)arndb.de> media: saa7146: avoid high stack usage with clang James Smart <jsmart2021(a)gmail.com> scsi: lpfc: Fix fc4type information for FDMI James Smart <jsmart2021(a)gmail.com> scsi: lpfc: Fix FDMI manufacturer attribute value Hans Verkuil <hverkuil-cisco(a)xs4all.nl> media: vimc: zero the media_device on probe Arnd Bergmann <arnd(a)arndb.de> media: go7007: avoid clang frame overflow warning with KASAN Hans Verkuil <hverkuil-cisco(a)xs4all.nl> media: gspca: do not resubmit URBs when streaming has stopped Helen Fornazier <helen.koike(a)collabora.com> media: vimc: stream: fix thread state before sleep Kangjie Lu <kjlu(a)umn.edu> scsi: ufs: fix a missing check of devm_reset_control_get Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> drm/amd/display: Set stream->mode_changed when connectors change Murton Liu <murton.liu(a)amd.com> drm/amd/display: Fix Divide by 0 in memory calculations Arnd Bergmann <arnd(a)arndb.de> media: staging: davinci_vpfe: disallow building with COMPILE_TEST James Hutchinson <jahutchinson99(a)googlemail.com> media: m88ds3103: serialize reset messages in m88ds3103_set_frontend Stefan Brüns <stefan.bruens(a)rwth-aachen.de> media: dvbsky: Avoid leaking dvb frontend Kangjie Lu <kjlu(a)umn.edu> media: si2165: fix a missing check of return value Kai-Heng Feng <kai.heng.feng(a)canonical.com> igb: Exclude device from suspend direct complete optimization Noralf Trønnes <noralf(a)tronnes.org> tinydrm/mipi-dbi: Use dma-safe buffers for all SPI transfers Kai-Heng Feng <kai.heng.feng(a)canonical.com> e1000e: Disable runtime PM on CNP+ Kangjie Lu <kjlu(a)umn.edu> thunderbolt: property: Fix a NULL pointer dereference Dmytro Laktyushkin <Dmytro.Laktyushkin(a)amd.com> drm/amd/display: fix releasing planes when exiting odm Aditya Pakki <pakki001(a)umn.edu> thunderbolt: Fix to check for kmemdup failure Aditya Pakki <pakki001(a)umn.edu> thunderbolt: Fix to check return value of ida_simple_get Rouven Czerwinski <r.czerwinski(a)pengutronix.de> hwrng: omap - Set default quality Sameer Pujar <spujar(a)nvidia.com> dmaengine: tegra210-adma: use devm_clk_*() helpers Linus Lüssing <linus.luessing(a)c0d3.blue> batman-adv: allow updating DAT entry timeouts on incoming ARP Replies Arnd Bergmann <arnd(a)arndb.de> selinux: avoid uninitialized variable warning Arnd Bergmann <arnd(a)arndb.de> scsi: lpfc: avoid uninitialized variable warning Arnd Bergmann <arnd(a)arndb.de> scsi: qla4xxx: avoid freeing unallocated dma memory Tony Lindgren <tony(a)atomide.com> usb: core: Add PM runtime calls to usb_hcd_platform_shutdown Paul E. McKenney <paulmck(a)linux.ibm.com> rcuperf: Fix cleanup path for invalid perf_type strings Yazen Ghannam <yazen.ghannam(a)amd.com> x86/mce: Handle varying MCA bank counts Paul E. McKenney <paulmck(a)linux.ibm.com> rcutorture: Fix cleanup path for invalid torture_type strings Tony Luck <tony.luck(a)intel.com> x86/mce: Fix machine_check_poll() tests for error types Leon Romanovsky <leon(a)kernel.org> overflow: Fix -Wtype-limits compilation warnings Kangjie Lu <kjlu(a)umn.edu> tty: ipwireless: fix missing checks for ioremap Pankaj Gupta <pagupta(a)redhat.com> virtio_console: initialize vtermno value for ports Chad Dupuis <cdupuis(a)marvell.com> scsi: qedf: Add missing return in qedf_post_io_req() in the fcport offload check Thomas Gleixner <tglx(a)linutronix.de> timekeeping: Force upper bound for setting CLOCK_REALTIME Aditya Pakki <pakki001(a)umn.edu> thunderbolt: Fix to check the return value of kmemdup Kangjie Lu <kjlu(a)umn.edu> thunderbolt: property: Fix a missing check of kzalloc Ard Biesheuvel <ard.biesheuvel(a)linaro.org> efifb: Omit memory map check on legacy boot Ezequiel Garcia <ezequiel(a)collabora.com> media: gspca: Kill URBs on USB device disconnect Dan Carpenter <dan.carpenter(a)oracle.com> media: wl128x: prevent two potential buffer overflows Kangjie Lu <kjlu(a)umn.edu> media: video-mux: fix null pointer dereferences Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice. Sowjanya Komatineni <skomatineni(a)nvidia.com> spi: tegra114: reset controller on probe Hans de Goede <hdegoede(a)redhat.com> HID: logitech-hidpp: change low battery level threshold from 31 to 30 percent Gustavo A. R. Silva <gustavo(a)embeddedor.com> cxgb3/l2t: Fix undefined behaviour Wen Yang <wen.yang99(a)zte.com.cn> ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put Wen Yang <wen.yang99(a)zte.com.cn> ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put Nicolas Saenz Julienne <nsaenzjulienne(a)suse.de> HID: core: move Usage Page concatenation to Main item Geert Uytterhoeven <geert+renesas(a)glider.be> sh: sh7786: Add explicit I/O cast to sh7786_mm_sel() Leon Romanovsky <leon(a)kernel.org> RDMA/hns: Fix bad endianess of port_pd variable Chengguang Xu <cgxu519(a)gmx.com> chardev: add additional check for minor range overlap Peter Zijlstra <peterz(a)infradead.org> x86/uaccess: Fix up the fixup Peter Zijlstra <peterz(a)infradead.org> x86/ia32: Fix ia32_restore_sigcontext() AC leak Peter Zijlstra <peterz(a)infradead.org> x86/uaccess, signal: Fix AC=1 bloat Peter Zijlstra <peterz(a)infradead.org> x86/uaccess, ftrace: Fix ftrace_likely_update() vs. SMAP Lior David <liord(a)codeaurora.org> wil6210: fix return code of wmi_mgmt_tx and wmi_mgmt_tx_ext Wen Yang <wen.yang99(a)zte.com.cn> arm64: cpu_ops: fix a leaked reference by adding missing of_node_put Yannick Fertré <yannick.fertre(a)st.com> drm/panel: otm8009a: Add delay at the end of initialization Stanley Chu <stanley.chu(a)mediatek.com> scsi: ufs: Avoid configuring regulator with undefined voltage range Stanley Chu <stanley.chu(a)mediatek.com> scsi: ufs: Fix regulator load and icc-level configuration Ping-Ke Shih <pkshih(a)realtek.com> rtlwifi: fix potential NULL pointer dereference Alexandre Belloni <alexandre.belloni(a)bootlin.com> rtc: xgene: fix possible race condition Piotr Figiel <p.figiel(a)camlintechnologies.com> brcmfmac: fix Oops when bringing up interface during USB disconnect Piotr Figiel <p.figiel(a)camlintechnologies.com> brcmfmac: fix race during disconnect when USB completion is in progress Piotr Figiel <p.figiel(a)camlintechnologies.com> brcmfmac: fix WARNING during USB disconnect in case of unempty psq Piotr Figiel <p.figiel(a)camlintechnologies.com> brcmfmac: convert dev_init_lock mutex to completion Arnd Bergmann <arnd(a)arndb.de> b43: shut up clang -Wuninitialized variable warning Kangjie Lu <kjlu(a)umn.edu> brcmfmac: fix missing checks for kmemdup YueHaibing <yuehaibing(a)huawei.com> mwifiex: Fix mem leak in mwifiex_tm_cmd Kangjie Lu <kjlu(a)umn.edu> rtlwifi: fix a potential NULL pointer dereference Daniel T. Lee <danieltimlee(a)gmail.com> selftests/bpf: ksym_search won't check symbols exists Justin Chen <justinpopo6(a)gmail.com> iio: adc: ti-ads7950: Fix improper use of mlock Nathan Chancellor <natechancellor(a)gmail.com> iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data Kangjie Lu <kjlu(a)umn.edu> iio: hmc5843: fix potential NULL pointer dereferences Lars-Peter Clausen <lars(a)metafoo.de> iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion Wen Yang <wen.yang99(a)zte.com.cn> drm/pl111: fix possible object reference leak Kees Cook <keescook(a)chromium.org> x86/build: Keep local relocations with ld.lld David Kozub <zub(a)linux.fjfi.cvut.cz> block: sed-opal: fix IOC_OPAL_ENABLE_DISABLE_MBR Wen Yang <wen.yang99(a)zte.com.cn> cpufreq: kirkwood: fix possible object reference leak Wen Yang <wen.yang99(a)zte.com.cn> cpufreq: pmac32: fix possible object reference leak Wen Yang <wen.yang99(a)zte.com.cn> cpufreq/pasemi: fix possible object reference leak Wen Yang <wen.yang99(a)zte.com.cn> cpufreq: ppc_cbe: fix possible object reference leak Kristian Evensen <kristian.evensen(a)gmail.com> qmi_wwan: Add quirk for Quectel dynamic config Roman Gushchin <guro(a)fb.com> selftests: cgroup: fix cleanup path in test_memcg_subtree_control() Arnd Bergmann <arnd(a)arndb.de> s390: cio: fix cio_irb declaration Thomas Huth <thuth(a)redhat.com> s390/mm: silence compiler warning when compiling without CONFIG_PGSTE Borislav Petkov <bp(a)suse.de> x86/microcode: Fix the ancient deprecated microcode loading method Arnd Bergmann <arnd(a)arndb.de> s390: zcrypt: initialize variables before_use Douglas Anderson <dianders(a)chromium.org> clk: rockchip: Make rkpwm a critical clock on rk3288 Charles Keepax <ckeepax(a)opensource.cirrus.com> extcon: arizona: Disable mic detect if running when driver is removed Douglas Anderson <dianders(a)chromium.org> clk: rockchip: Fix video codec clocks on rk3288 Ulf Hansson <ulf.hansson(a)linaro.org> PM / core: Propagate dev->power.wakeup_path when no callbacks Christian König <christian.koenig(a)amd.com> drm/amdgpu: fix old fence check in amdgpu_fence_emit Yinbo Zhu <yinbo.zhu(a)nxp.com> mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support Yinbo Zhu <yinbo.zhu(a)nxp.com> mmc: sdhci-of-esdhc: add erratum A-009204 support Yinbo Zhu <yinbo.zhu(a)nxp.com> mmc: sdhci-of-esdhc: add erratum eSDHC5 support Kangjie Lu <kjlu(a)umn.edu> mmc_spi: add a status check for spi_sync_locked Andrea Merello <andrea.merello(a)gmail.com> mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers John Garry <john.garry(a)huawei.com> scsi: libsas: Do discovery on empty PHY to update PHY info Guenter Roeck <linux(a)roeck-us.net> hwmon: (f71805f) Use request_muxed_region for Super-IO accesses Guenter Roeck <linux(a)roeck-us.net> hwmon: (pc87427) Use request_muxed_region for Super-IO accesses Guenter Roeck <linux(a)roeck-us.net> hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses Guenter Roeck <linux(a)roeck-us.net> hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses Guenter Roeck <linux(a)roeck-us.net> hwmon: (vt1211) Use request_muxed_region for Super-IO accesses Kan Liang <kan.liang(a)linux.intel.com> perf/x86/intel/cstate: Add Icelake support Kan Liang <kan.liang(a)linux.intel.com> perf/x86/intel/rapl: Add Icelake support Kan Liang <kan.liang(a)linux.intel.com> perf/x86/msr: Add Icelake support Colin Ian King <colin.king(a)canonical.com> RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure Vincenzo Frascino <vincenzo.frascino(a)arm.com> arm64: vdso: Fix clock_getres() for CLOCK_REALTIME Kefeng Wang <wangkefeng.wang(a)huawei.com> ACPI/IORT: Reject platform device creation on NUMA node mapping failure Nicholas Nunley <nicholas.d.nunley(a)intel.com> i40e: don't allow changes to HW VLAN stripping on active port VLANs Adam Ludkiewicz <adam.ludkiewicz(a)intel.com> i40e: Able to add up to 16 MAC filters on an untrusted VF Arnd Bergmann <arnd(a)arndb.de> phy: mapphone-mdm6600: add gpiolib dependency Paul Kocialkowski <paul.kocialkowski(a)bootlin.com> phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode Russell King <rmk+kernel(a)armlinux.org.uk> drm: etnaviv: avoid DMA API warning when importing buffers Thomas Gleixner <tglx(a)linutronix.de> x86/irq/64: Limit IST stack overflow check to #DB stack Alan Stern <stern(a)rowland.harvard.edu> USB: core: Don't unbind interfaces following device reset failure Julian Wiedmann <jwi(a)linux.ibm.com> s390/qeth: handle error from qeth_update_from_chp_desc() Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Take domain lock in switch sysfs attribute callbacks Nicholas Piggin <npiggin(a)gmail.com> irq_work: Do not raise an IPI when queueing work on the local CPU Wen Yang <wen.yang99(a)zte.com.cn> drm/msm: a5xx: fix possible object reference leak Nicholas Mc Guire <hofrat(a)osadl.org> staging: vc04_services: handle kzalloc failure Konstantin Khlebnikov <khlebnikov(a)yandex-team.ru> sched/core: Handle overflow in cpu_shares_write_u64 Konstantin Khlebnikov <khlebnikov(a)yandex-team.ru> sched/rt: Check integer overflow at usec to nsec conversion Konstantin Khlebnikov <khlebnikov(a)yandex-team.ru> sched/core: Check quota and period overflow at usec to nsec conversion Roman Gushchin <guro(a)fb.com> cgroup: protect cgroup->nr_(dying_)descendants by css_set_lock Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> random: add a spinlock_t to struct batched_entropy Jon DeVree <nuxi(a)vault24.org> random: fix CRNG initialization when random.trust_cpu=1 Russell Currey <ruscur(a)russell.cc> powerpc/64: Fix booting large kernels with STRICT_KERNEL_RWX Nathan Lynch <nathanl(a)linux.ibm.com> powerpc/numa: improve control of topology updates Yufen Yu <yuyufen(a)huawei.com> block: fix use-after-free on gendisk Fabrice Gasnier <fabrice.gasnier(a)st.com> iio: adc: stm32-dfsdm: fix unmet direct dependencies detected Dan Carpenter <dan.carpenter(a)oracle.com> media: pvrusb2: Prevent a buffer overflow Shuah Khan <shuah(a)kernel.org> media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable() Hugues Fruchet <hugues.fruchet(a)st.com> media: stm32-dcmi: fix crash when subdev do not expose any formats Wenwen Wang <wang6495(a)umn.edu> audit: fix a memory leak bug Akinobu Mita <akinobu.mita(a)gmail.com> media: ov2659: make S_FMT succeed even if requested format doesn't match Hans Verkuil <hverkuil(a)xs4all.nl> media: au0828: stop video streaming only when last user stops Janusz Krzysztofik <jmkrzyszt(a)gmail.com> media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper Philipp Zabel <p.zabel(a)pengutronix.de> media: coda: clear error return value before picture run Nicolas Ferre <nicolas.ferre(a)microchip.com> dmaengine: at_xdmac: remove BUG_ON macro in tasklet Robin Murphy <robin.murphy(a)arm.com> perf/arm-cci: Remove broken race mitigation Douglas Anderson <dianders(a)chromium.org> clk: rockchip: undo several noc and special clocks as critical on rk3288 Wen Yang <wen.yang99(a)zte.com.cn> pinctrl: samsung: fix leaked of_node references Wen Yang <wen.yang99(a)zte.com.cn> pinctrl: pistachio: fix leaked of_node references Hans de Goede <hdegoede(a)redhat.com> HID: logitech-hidpp: use RAP instead of FAP to get the protocol version Balakrishna Godavarthi <bgodavar(a)codeaurora.org> Bluetooth: hci_qca: Give enough time to ROME controller to bootup. Peter Zijlstra <peterz(a)infradead.org> mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions Jiri Kosina <jkosina(a)suse.cz> x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault() Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> smpboot: Place the __percpu annotation correctly Kees Cook <keescook(a)chromium.org> x86/build: Move _etext to actual end of .text Farhan Ali <alifm(a)linux.ibm.com> vfio-ccw: Release any channel program when releasing/removing vfio-ccw mdev Farhan Ali <alifm(a)linux.ibm.com> vfio-ccw: Do not call flush_workqueue while holding the spinlock Parav Pandit <parav(a)mellanox.com> RDMA/cma: Consider scope_id while binding to ipv6 ll address Arnd Bergmann <arnd(a)arndb.de> bcache: avoid clang -Wunintialized warning Coly Li <colyli(a)suse.de> bcache: add failure check to run_cache_set() for journal replay Tang Junhui <tang.junhui.linux(a)gmail.com> bcache: fix failure in journal relplay Coly Li <colyli(a)suse.de> bcache: return error immediately in bch_journal_replay() Shenghui Wang <shhuiw(a)foxmail.com> bcache: avoid potential memleak of list of journal_replay(s) in the CACHE_SYNC branch of run_cache_set Corentin Labbe <clabbe.montjoie(a)gmail.com> crypto: sun4i-ss - Fix invalid calculation of hash end Sagi Grimberg <sagi(a)grimberg.me> nvme-rdma: fix a NULL deref when an admin connect times out Sagi Grimberg <sagi(a)grimberg.me> nvme: set 0 capacity if namespace block size exceeds PAGE_SIZE Kangjie Lu <kjlu(a)umn.edu> net: cw1200: fix a NULL pointer dereference Aditya Pakki <pakki001(a)umn.edu> rsi: Fix NULL pointer dereference in kmalloc Dan Carpenter <dan.carpenter(a)oracle.com> mwifiex: prevent an array overflow Daniel Baluta <daniel.baluta(a)nxp.com> ASoC: fsl_sai: Update is_slave_mode with correct value Kangjie Lu <kjlu(a)umn.edu> slimbus: fix a potential NULL pointer dereference in of_qcom_slim_ngd_register Daniel T. Lee <danieltimlee(a)gmail.com> libbpf: fix samples/bpf build failure due to undefined UINT32_MAX Sergey Matyukevich <sergey.matyukevich.os(a)quantenna.com> mac80211/cfg80211: update bss channel on channel switch Sugar Zhang <sugar.zhang(a)rock-chips.com> dmaengine: pl330: _stop: clear interrupt status Arnd Bergmann <arnd(a)arndb.de> s390: qeth: address type mismatch warning Mariusz Bialonczyk <manio(a)skyboo.net> w1: fix the resume command API Nicholas Piggin <npiggin(a)gmail.com> sched/nohz: Run NOHZ idle load balancer on HK_FLAG_MISC CPUs Philipp Rudo <prudo(a)linux.ibm.com> s390/kexec_file: Fix detection of text segment in ELF loader Manish Rangankar <mrangankar(a)marvell.com> scsi: qedi: Abort ep termination if offload not scheduled Fabien Dessenne <fabien.dessenne(a)st.com> rtc: stm32: manage the get_irq probe defer case Sven Van Asbroeck <thesven73(a)gmail.com> rtc: 88pm860x: prevent use-after-free on device remove Johannes Berg <johannes.berg(a)intel.com> iwlwifi: pcie: don't crash on invalid RX interrupt Qu Wenruo <wqu(a)suse.com> btrfs: Don't panic when we can't find a root key Josef Bacik <josef(a)toxicpanda.com> btrfs: fix panic during relocation after ENOSPC before writeback happens Robbie Ko <robbieko(a)synology.com> Btrfs: fix data bytes_may_use underflow with fallocate due to failed quota reserve Nadav Amit <namit(a)vmware.com> x86/modules: Avoid breaking W^X while loading modules Bart Van Assche <bvanassche(a)acm.org> scsi: qla2xxx: Fix hardirq-unsafe locking Bart Van Assche <bvanassche(a)acm.org> scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session() Bart Van Assche <bvanassche(a)acm.org> scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending() Bart Van Assche <bvanassche(a)acm.org> scsi: qla2xxx: Fix a qla24xx_enable_msix() error path Viresh Kumar <viresh.kumar(a)linaro.org> sched/cpufreq: Fix kobject memleak Nicholas Piggin <npiggin(a)gmail.com> powerpc/watchdog: Use hrtimers for per-CPU heartbeat Qian Cai <cai(a)lca.pw> arm64: Fix compiler warning from pte_unmap() with -Wunused-but-set-variable Marc Zyngier <marc.zyngier(a)arm.com> ARM: vdso: Remove dependency with the arch_timer driver internals Fabien Dessenne <fabien.dessenne(a)st.com> media: stm32-dcmi: return appropriate error codes during probe Jon Derrick <jonathan.derrick(a)intel.com> drm/nouveau/bar/nv50: ensure BAR is mapped Pierre-Louis Bossart <pierre-louis.bossart(a)linux.intel.com> ACPI / property: fix handling of data_nodes in acpi_get_next_subnode() Dan Carpenter <dan.carpenter(a)oracle.com> brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() Flavio Suligoi <f.suligoi(a)asem.it> spi: pxa2xx: fix SCR (divisor) calculation Arnd Bergmann <arnd(a)arndb.de> ASoC: imx: fix fiq dependencies Anju T Sudhakar <anju(a)linux.vnet.ibm.com> powerpc/perf: Fix loop exit condition in nest_imc_event_init Bo YU <tsu.yubo(a)gmail.com> powerpc/boot: Fix missing check of lseek() return value Anju T Sudhakar <anju(a)linux.vnet.ibm.com> powerpc/perf: Return accordingly on invalid chip-id in Jerome Brunet <jbrunet(a)baylibre.com> ASoC: hdmi-codec: unlock the device on startup errors Marek Szyprowski <m.szyprowski(a)samsung.com> usb: dwc3: move synchronize_irq() out of the spinlock protected block Minas Harutyunyan <minas.harutyunyan(a)synopsys.com> usb: dwc2: gadget: Increase descriptors count for ISOC's Mac Chiang <mac.chiang(a)intel.com> ASoC: Intel: kbl_da7219_max98357a: Map BTN_0 to KEY_PLAYPAUSE Wen Yang <wen.yang99(a)zte.com.cn> pinctrl: zte: fix leaked of_node references João Paulo Rechi Vita <jprvita(a)gmail.com> Bluetooth: Ignore CC events not matching the last HCI command Haiyang Zhang <haiyangz(a)microsoft.com> hv_netvsc: fix race that may miss tx queue wakeup Sameeh Jubran <sameehj(a)amazon.com> net: ena: gcc 8: fix compilation warning Sameer Pujar <spujar(a)nvidia.com> dmaengine: tegra210-dma: free dma controller in remove() Masahiro Yamada <yamada.masahiro(a)socionext.com> bpftool: exclude bash-completion/bpftool from .gitignore pattern Yonghong Song <yhs(a)fb.com> selftests/bpf: set RLIMIT_MEMLOCK properly for test_libbpf_open.c Vineet Gupta <Vineet.Gupta1(a)synopsys.com> tools/bpf: fix perf build error with uClibc (seen on ARC) Raul E Rangel <rrangel(a)chromium.org> mmc: core: Verify SD bus width Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Fix occasional glock use-after-free Mike Marciniszyn <mike.marciniszyn(a)intel.com> IB/hfi1: Fix WQ_MEM_RECLAIM warning Roberto Bergantinos Corpas <rbergant(a)redhat.com> NFS: make nfs_match_client killable YueHaibing <yuehaibing(a)huawei.com> cxgb4: Fix error path in cxgb4_init_module Ross Lagerwall <ross.lagerwall(a)citrix.com> gfs2: Fix lru_count going negative David Sterba <dsterba(a)suse.com> Revert "btrfs: Honour FITRIM range constraints during free space trim" Al Viro <viro(a)zeniv.linux.org.uk> acct_on(): don't mess with freeze protection YueHaibing <yuehaibing(a)huawei.com> at76c50x-usb: Don't register led_trigger if usb_register_driver failed Linus Lüssing <linus.luessing(a)c0d3.blue> batman-adv: mcast: fix multicast tt/tvlv worker locking Eric Dumazet <edumazet(a)google.com> bpf: devmap: fix use-after-free Read in __dev_map_entry_free YueHaibing <yuehaibing(a)huawei.com> ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit Alexander Potapenko <glider(a)google.com> media: vivid: use vfree() instead of kfree() for dev->bitmap_cap Hans Verkuil <hverkuil(a)xs4all.nl> media: vb2: add waiting_in_dqbuf flag YueHaibing <yuehaibing(a)huawei.com> media: serial_ir: Fix use-after-free in serial_ir_init_module YueHaibing <yuehaibing(a)huawei.com> media: cpia2: Fix use-after-free in cpia2_exit Jiufei Xue <jiufei.xue(a)linux.alibaba.com> fbdev: fix WARNING in __alloc_pages_nodemask bug Amir Goldstein <amir73il(a)gmail.com> ovl: relax WARN_ON() for overlapping layers use case Josef Bacik <josef(a)toxicpanda.com> btrfs: honor path->skip_locking in backref code Will Deacon <will.deacon(a)arm.com> arm64: errata: Add workaround for Cortex-A76 erratum #1463225 Arend van Spriel <arend.vanspriel(a)broadcom.com> brcmfmac: add subtype check for event handling in data path Arend van Spriel <arend.vanspriel(a)broadcom.com> brcmfmac: assure SSID length from firmware is limited Daniel Borkmann <daniel(a)iogearbox.net> bpf: add bpf_jit_limit knob to restrict unpriv allocations Olga Kornievskaia <kolga(a)netapp.com> NFSv4.1 fix incorrect return value in copy_file_range Olga Kornievskaia <olga.kornievskaia(a)gmail.com> NFSv4.2 fix unnecessary retry in nfs4_copy_file_range Shile Zhang <shile.zhang(a)linux.alibaba.com> fbdev: fix divide error in fb_var_to_videomode Dan Carpenter <dan.carpenter(a)oracle.com> udlfb: fix some inconsistent NULL checking Tobin C. Harding <tobin(a)kernel.org> btrfs: sysfs: don't leak memory when failing add fsid Tobin C. Harding <tobin(a)kernel.org> btrfs: sysfs: Fix error path kobject memory leak Filipe Manana <fdmanana(a)suse.com> Btrfs: fix race between ranged fsync and writeback of adjacent ranges Filipe Manana <fdmanana(a)suse.com> Btrfs: avoid fallback to transaction commit during fsync of files with holes Filipe Manana <fdmanana(a)suse.com> Btrfs: do not abort transaction at btrfs_update_root() after failure to COW path Josef Bacik <josef(a)toxicpanda.com> btrfs: don't double unlock on error in btrfs_punch_hole Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Fix sign extension bug in gfs2_update_stats Christoph Hellwig <hch(a)lst.de> arm64/iommu: handle non-remapped addresses in ->mmap and ->get_sgtable Ard Biesheuvel <ard.biesheuvel(a)arm.com> arm64/kernel: kaslr: reduce module randomization range to 2 GB Dan Williams <dan.j.williams(a)intel.com> libnvdimm/pmem: Bypass CONFIG_HARDENED_USERCOPY overhead Suthikulpanit, Suravee <Suravee.Suthikulpanit(a)amd.com> kvm: svm/avic: fix off-by-one in checking host APIC ID Trac Hoang <trac.hoang(a)broadcom.com> mmc: sdhci-iproc: Set NO_HISPD bit to fix HS50 data hold time problem Trac Hoang <trac.hoang(a)broadcom.com> mmc: sdhci-iproc: cygnus: Set NO_HISPD bit to fix HS50 data hold time problem Daniel Axtens <dja(a)axtens.net> crypto: vmx - CTR: always increment IV as quadword Martin K. Petersen <martin.petersen(a)oracle.com> Revert "scsi: sd: Keep disk read-only when re-reading partition" Andrea Parri <andrea.parri(a)amarulasolutions.com> sbitmap: fix improper use of smp_mb__before_atomic() Andrea Parri <andrea.parri(a)amarulasolutions.com> bio: fix improper use of smp_mb__before_atomic() Paolo Bonzini <pbonzini(a)redhat.com> KVM: x86: fix return value for reserved EFER Damien Le Moal <damien.lemoal(a)wdc.com> f2fs: Fix use of number of devices Jan Kara <jack(a)suse.cz> ext4: wait for outstanding dio during truncate in nojournal mode Jan Kara <jack(a)suse.cz> ext4: do not delete unlinked inode from orphan list on failed truncate Steven Rostedt (VMware) <rostedt(a)goodmis.org> x86: Hide the int3_emulate_call/jmp functions from UML ------------- Diffstat: Documentation/arm64/silicon-errata.txt | 1 + Documentation/sysctl/net.txt | 8 +++ Makefile | 4 +- arch/arm/include/asm/cp15.h | 2 + arch/arm/vdso/vgettimeofday.c | 5 +- arch/arm64/Kconfig | 18 +++++ arch/arm64/include/asm/cpucaps.h | 3 +- arch/arm64/include/asm/cputype.h | 2 + arch/arm64/include/asm/pgtable.h | 3 +- arch/arm64/include/asm/vdso_datapage.h | 1 + arch/arm64/kernel/asm-offsets.c | 2 +- arch/arm64/kernel/cpu_errata.c | 24 +++++++ arch/arm64/kernel/cpu_ops.c | 1 + arch/arm64/kernel/kaslr.c | 6 +- arch/arm64/kernel/module.c | 2 +- arch/arm64/kernel/syscall.c | 31 +++++++++ arch/arm64/kernel/vdso.c | 3 + arch/arm64/kernel/vdso/gettimeofday.S | 7 +- arch/arm64/mm/dma-mapping.c | 10 +++ arch/arm64/mm/fault.c | 37 +++++++++- arch/powerpc/boot/addnote.c | 6 +- arch/powerpc/kernel/head_64.S | 4 +- arch/powerpc/kernel/watchdog.c | 81 +++++++++++----------- arch/powerpc/mm/numa.c | 18 +++-- arch/powerpc/perf/imc-pmu.c | 7 +- arch/powerpc/platforms/powernv/opal-imc.c | 2 +- arch/s390/kernel/kexec_elf.c | 7 +- arch/s390/mm/pgtable.c | 2 + arch/sh/include/cpu-sh4/cpu/sh7786.h | 2 +- arch/x86/Makefile | 2 +- arch/x86/events/intel/cstate.c | 2 + arch/x86/events/intel/rapl.c | 2 + arch/x86/events/msr.c | 1 + arch/x86/ia32/ia32_signal.c | 29 ++++---- arch/x86/include/asm/text-patching.h | 4 +- arch/x86/kernel/alternative.c | 28 ++++++-- arch/x86/kernel/cpu/mcheck/mce-inject.c | 14 ++-- arch/x86/kernel/cpu/mcheck/mce.c | 66 ++++++++++++------ arch/x86/kernel/cpu/microcode/core.c | 3 +- arch/x86/kernel/irq_64.c | 19 +++-- arch/x86/kernel/module.c | 2 +- arch/x86/kernel/signal.c | 29 ++++---- arch/x86/kernel/vmlinux.lds.S | 6 +- arch/x86/kvm/svm.c | 6 +- arch/x86/kvm/x86.c | 2 +- arch/x86/lib/memcpy_64.S | 3 +- arch/x86/mm/fault.c | 2 - block/genhd.c | 19 +++++ block/partition-generic.c | 7 ++ block/sed-opal.c | 9 ++- drivers/acpi/arm64/iort.c | 19 +++-- drivers/acpi/property.c | 8 +++ drivers/base/power/main.c | 4 ++ drivers/bluetooth/hci_qca.c | 2 + drivers/char/hw_random/omap-rng.c | 1 + drivers/char/random.c | 57 ++++++++------- drivers/char/virtio_console.c | 3 +- drivers/clk/rockchip/clk-rk3288.c | 21 +++--- drivers/cpufreq/cpufreq.c | 1 + drivers/cpufreq/cpufreq_governor.c | 2 + drivers/cpufreq/kirkwood-cpufreq.c | 19 ++--- drivers/cpufreq/pasemi-cpufreq.c | 1 + drivers/cpufreq/pmac32-cpufreq.c | 2 + drivers/cpufreq/ppc_cbe_cpufreq.c | 1 + drivers/crypto/sunxi-ss/sun4i-ss-hash.c | 5 +- drivers/crypto/vmx/aesp8-ppc.pl | 2 +- drivers/dma/at_xdmac.c | 6 +- drivers/dma/pl330.c | 10 ++- drivers/dma/tegra210-adma.c | 28 ++++---- drivers/extcon/extcon-arizona.c | 10 +++ drivers/gpu/drm/amd/amdgpu/amdgpu_fence.c | 24 +++++-- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 3 +- drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 6 +- .../gpu/drm/amd/display/dc/dcn10/dcn10_dpp_dscl.c | 20 ++++-- drivers/gpu/drm/drm_drv.c | 5 +- drivers/gpu/drm/drm_file.c | 1 + drivers/gpu/drm/etnaviv/etnaviv_drv.c | 5 ++ drivers/gpu/drm/etnaviv/etnaviv_drv.h | 1 + drivers/gpu/drm/msm/adreno/a5xx_gpu.c | 10 +-- drivers/gpu/drm/nouveau/nvkm/subdev/bar/nv50.c | 12 +++- drivers/gpu/drm/omapdrm/dss/dsi.c | 60 ++++++++-------- drivers/gpu/drm/panel/panel-orisetech-otm8009a.c | 3 + drivers/gpu/drm/pl111/pl111_versatile.c | 4 ++ drivers/gpu/drm/sun4i/sun6i_mipi_dsi.c | 8 ++- drivers/gpu/drm/tinydrm/ili9225.c | 6 +- drivers/gpu/drm/tinydrm/mipi-dbi.c | 58 +++++++++++----- drivers/gpu/drm/v3d/v3d_drv.c | 8 ++- drivers/gpu/drm/v3d/v3d_drv.h | 2 +- drivers/gpu/drm/v3d/v3d_irq.c | 13 +++- drivers/hid/hid-core.c | 36 ++++++---- drivers/hid/hid-logitech-hidpp.c | 23 ++++-- drivers/hwmon/f71805f.c | 15 +++- drivers/hwmon/pc87427.c | 14 +++- drivers/hwmon/smsc47b397.c | 13 +++- drivers/hwmon/smsc47m1.c | 28 +++++--- drivers/hwmon/vt1211.c | 15 +++- drivers/iio/adc/Kconfig | 1 + drivers/iio/adc/ad_sigma_delta.c | 16 +++-- drivers/iio/adc/ti-ads7950.c | 19 +++-- drivers/iio/common/ssp_sensors/ssp_iio.c | 2 +- drivers/iio/magnetometer/hmc5843_i2c.c | 7 +- drivers/iio/magnetometer/hmc5843_spi.c | 7 +- drivers/infiniband/core/cma.c | 25 +++++-- drivers/infiniband/hw/cxgb4/cm.c | 2 + drivers/infiniband/hw/hfi1/init.c | 3 +- drivers/infiniband/hw/hns/hns_roce_ah.c | 2 +- drivers/md/bcache/alloc.c | 5 +- drivers/md/bcache/journal.c | 26 ++++++- drivers/md/bcache/super.c | 25 +++++-- drivers/media/common/videobuf2/videobuf2-core.c | 22 ++++++ drivers/media/dvb-frontends/m88ds3103.c | 9 ++- drivers/media/dvb-frontends/si2165.c | 8 ++- drivers/media/i2c/ov2659.c | 6 +- drivers/media/i2c/ov6650.c | 25 ++++--- drivers/media/pci/saa7146/hexium_gemini.c | 5 +- drivers/media/pci/saa7146/hexium_orion.c | 5 +- drivers/media/platform/coda/coda-bit.c | 3 + drivers/media/platform/stm32/stm32-dcmi.c | 20 ++++-- drivers/media/platform/video-mux.c | 5 ++ drivers/media/platform/vimc/vimc-core.c | 2 + drivers/media/platform/vimc/vimc-streamer.c | 2 +- drivers/media/platform/vivid/vivid-vid-cap.c | 2 +- drivers/media/radio/wl128x/fmdrv_common.c | 7 +- drivers/media/rc/serial_ir.c | 9 +-- drivers/media/usb/au0828/au0828-video.c | 16 +++-- drivers/media/usb/cpia2/cpia2_v4l.c | 3 +- drivers/media/usb/dvb-usb-v2/dvbsky.c | 18 ++--- drivers/media/usb/go7007/go7007-fw.c | 4 +- drivers/media/usb/gspca/gspca.c | 12 +++- drivers/media/usb/pvrusb2/pvrusb2-hdw.c | 2 + drivers/media/usb/pvrusb2/pvrusb2-hdw.h | 1 + drivers/mmc/core/pwrseq_emmc.c | 38 +++++----- drivers/mmc/core/sd.c | 8 +++ drivers/mmc/host/mmc_spi.c | 4 ++ drivers/mmc/host/sdhci-iproc.c | 6 +- drivers/mmc/host/sdhci-of-esdhc.c | 8 +++ drivers/net/ethernet/amazon/ena/ena_netdev.c | 2 +- drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +- drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 15 +++- drivers/net/ethernet/intel/e1000e/netdev.c | 2 +- drivers/net/ethernet/intel/i40e/i40e_main.c | 8 +++ drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 6 +- drivers/net/ethernet/intel/igb/igb_main.c | 3 + drivers/net/hyperv/netvsc.c | 15 ++-- drivers/net/usb/qmi_wwan.c | 65 +++++++++-------- drivers/net/wireless/ath/wil6210/cfg80211.c | 5 ++ drivers/net/wireless/ath/wil6210/wmi.c | 11 +-- drivers/net/wireless/atmel/at76c50x-usb.c | 4 +- drivers/net/wireless/broadcom/b43/phy_lp.c | 6 +- .../broadcom/brcm80211/brcmfmac/cfg80211.c | 6 ++ .../wireless/broadcom/brcm80211/brcmfmac/core.c | 15 ++-- .../wireless/broadcom/brcm80211/brcmfmac/fweh.h | 16 +++-- .../broadcom/brcm80211/brcmfmac/fwsignal.c | 42 ++++++----- .../wireless/broadcom/brcm80211/brcmfmac/msgbuf.c | 2 +- .../net/wireless/broadcom/brcm80211/brcmfmac/usb.c | 27 +++++--- .../wireless/broadcom/brcm80211/brcmfmac/vendor.c | 5 +- drivers/net/wireless/intel/iwlwifi/pcie/rx.c | 7 +- drivers/net/wireless/marvell/mwifiex/cfg80211.c | 6 +- drivers/net/wireless/marvell/mwifiex/cfp.c | 3 + drivers/net/wireless/realtek/rtlwifi/base.c | 5 ++ .../net/wireless/realtek/rtlwifi/rtl8188ee/fw.c | 2 + .../wireless/realtek/rtlwifi/rtl8192c/fw_common.c | 2 + .../net/wireless/realtek/rtlwifi/rtl8192ee/fw.c | 2 + .../net/wireless/realtek/rtlwifi/rtl8723ae/fw.c | 2 + .../net/wireless/realtek/rtlwifi/rtl8723be/fw.c | 2 + .../net/wireless/realtek/rtlwifi/rtl8821ae/fw.c | 4 ++ drivers/net/wireless/rsi/rsi_91x_mac80211.c | 30 ++++---- drivers/net/wireless/st/cw1200/main.c | 5 ++ drivers/nvdimm/pmem.c | 10 ++- drivers/nvme/host/core.c | 7 +- drivers/nvme/host/rdma.c | 10 +-- drivers/perf/arm-cci.c | 21 +++--- drivers/phy/allwinner/phy-sun4i-usb.c | 4 ++ drivers/phy/motorola/Kconfig | 2 +- drivers/pinctrl/pinctrl-pistachio.c | 2 + drivers/pinctrl/samsung/pinctrl-exynos-arm.c | 1 + drivers/pinctrl/zte/pinctrl-zx.c | 1 + drivers/rtc/rtc-88pm860x.c | 2 +- drivers/rtc/rtc-stm32.c | 9 ++- drivers/rtc/rtc-xgene.c | 18 +++-- drivers/s390/cio/cio.h | 2 +- drivers/s390/cio/vfio_ccw_drv.c | 32 +++++---- drivers/s390/cio/vfio_ccw_ops.c | 11 ++- drivers/s390/crypto/zcrypt_api.c | 4 ++ drivers/s390/net/qeth_core.h | 10 ++- drivers/s390/net/qeth_core_main.c | 14 ++-- drivers/scsi/libsas/sas_expander.c | 5 ++ drivers/scsi/lpfc/lpfc_ct.c | 20 ++++-- drivers/scsi/lpfc/lpfc_hbadisc.c | 11 ++- drivers/scsi/lpfc/lpfc_nvme.c | 8 +-- drivers/scsi/qedf/qedf_io.c | 1 + drivers/scsi/qedi/qedi_iscsi.c | 3 + drivers/scsi/qla2xxx/qla_isr.c | 6 +- drivers/scsi/qla2xxx/qla_target.c | 25 +++---- drivers/scsi/qla2xxx/tcm_qla2xxx.c | 7 +- drivers/scsi/qla4xxx/ql4_os.c | 2 +- drivers/scsi/sd.c | 3 +- drivers/scsi/ufs/ufs-hisi.c | 4 ++ drivers/scsi/ufs/ufshcd.c | 28 +++++--- drivers/slimbus/qcom-ngd-ctrl.c | 4 ++ drivers/spi/spi-imx.c | 2 +- drivers/spi/spi-pxa2xx.c | 8 ++- drivers/spi/spi-rspi.c | 9 ++- drivers/spi/spi-tegra114.c | 32 +++++---- drivers/spi/spi-topcliff-pch.c | 15 +++- drivers/spi/spi.c | 2 + drivers/ssb/bridge_pcmcia_80211.c | 9 ++- drivers/staging/media/davinci_vpfe/Kconfig | 2 +- .../interface/vchiq_arm/vchiq_2835_arm.c | 3 + .../vc04_services/interface/vchiq_arm/vchiq_core.c | 2 + drivers/thunderbolt/icm.c | 5 ++ drivers/thunderbolt/property.c | 12 +++- drivers/thunderbolt/switch.c | 67 +++++++++--------- drivers/thunderbolt/tb.h | 3 +- drivers/thunderbolt/xdomain.c | 8 ++- drivers/tty/ipwireless/main.c | 8 +++ drivers/usb/core/hcd.c | 3 + drivers/usb/core/hub.c | 5 +- drivers/usb/dwc2/gadget.c | 27 ++++---- drivers/usb/dwc3/core.c | 2 + drivers/usb/dwc3/gadget.c | 2 - drivers/video/fbdev/core/fbcmap.c | 2 + drivers/video/fbdev/core/modedb.c | 3 + drivers/video/fbdev/efifb.c | 3 +- drivers/video/fbdev/udlfb.c | 14 ++-- drivers/w1/w1_io.c | 3 +- fs/btrfs/backref.c | 19 +++-- fs/btrfs/extent-tree.c | 28 ++------ fs/btrfs/file.c | 19 +++-- fs/btrfs/relocation.c | 31 ++++++--- fs/btrfs/root-tree.c | 17 ++--- fs/btrfs/sysfs.c | 7 +- fs/btrfs/tree-log.c | 1 + fs/char_dev.c | 6 ++ fs/ext4/inode.c | 23 +++--- fs/f2fs/data.c | 17 +++-- fs/f2fs/f2fs.h | 13 +++- fs/f2fs/file.c | 2 +- fs/f2fs/gc.c | 2 +- fs/f2fs/segment.c | 13 ++-- fs/gfs2/glock.c | 23 +++--- fs/gfs2/lock_dlm.c | 9 +-- fs/gfs2/log.c | 3 +- fs/gfs2/lops.c | 6 +- fs/internal.h | 2 - fs/nfs/client.c | 7 +- fs/nfs/nfs42proc.c | 3 - fs/nfs/nfs4file.c | 12 ++-- fs/overlayfs/dir.c | 2 +- fs/overlayfs/inode.c | 3 +- include/drm/tinydrm/mipi-dbi.h | 5 +- include/linux/bio.h | 2 +- include/linux/cgroup-defs.h | 5 ++ include/linux/filter.h | 2 + include/linux/genhd.h | 1 + include/linux/hid.h | 1 + include/linux/iio/adc/ad_sigma_delta.h | 1 + include/linux/mount.h | 2 + include/linux/overflow.h | 12 +++- include/linux/smpboot.h | 2 +- include/linux/time64.h | 21 ++++++ include/media/videobuf2-core.h | 1 + include/net/bluetooth/hci.h | 1 + kernel/acct.c | 4 +- kernel/auditfilter.c | 12 ++-- kernel/bpf/core.c | 49 ++++++++++++- kernel/bpf/devmap.c | 3 + kernel/cgroup/cgroup.c | 6 ++ kernel/irq_work.c | 75 +++++++++++--------- kernel/module.c | 5 ++ kernel/rcu/rcuperf.c | 5 ++ kernel/rcu/rcutorture.c | 5 ++ kernel/sched/core.c | 9 ++- kernel/sched/fair.c | 16 +++-- kernel/sched/rt.c | 5 ++ kernel/time/time.c | 2 +- kernel/time/timekeeping.c | 6 +- kernel/trace/trace_branch.c | 4 ++ lib/kobject_uevent.c | 11 +-- lib/sbitmap.c | 2 +- lib/strncpy_from_user.c | 5 +- lib/strnlen_user.c | 4 +- net/batman-adv/distributed-arp-table.c | 4 +- net/batman-adv/main.c | 1 + net/batman-adv/multicast.c | 11 +-- net/batman-adv/types.h | 5 ++ net/bluetooth/hci_core.c | 5 ++ net/bluetooth/hci_event.c | 12 ++++ net/bluetooth/hci_request.c | 5 ++ net/bluetooth/hci_request.h | 1 + net/core/sysctl_net_core.c | 10 ++- net/mac80211/mlme.c | 3 - net/wireless/nl80211.c | 5 ++ security/selinux/netlabel.c | 14 ++-- sound/soc/codecs/hdmi-codec.c | 6 +- sound/soc/davinci/davinci-mcasp.c | 2 + sound/soc/fsl/Kconfig | 9 +-- sound/soc/fsl/eukrea-tlv320.c | 4 +- sound/soc/fsl/fsl_sai.c | 2 + sound/soc/fsl/fsl_utils.c | 1 + sound/soc/intel/boards/kbl_da7219_max98357a.c | 2 +- tools/bpf/bpftool/.gitignore | 2 +- tools/lib/bpf/bpf.c | 2 + tools/lib/bpf/bpf.h | 1 + tools/testing/selftests/bpf/test_libbpf_open.c | 2 + tools/testing/selftests/bpf/trace_helpers.c | 4 ++ tools/testing/selftests/cgroup/test_memcontrol.c | 38 +++++----- 307 files changed, 2130 insertions(+), 977 deletions(-)

5 years, 12 months

11
292
0 0

✅ PASS: Stable queue: queue-5.1

by CKI Project

Hello, We ran automated tests on a patchset that was proposed for merging into this kernel tree. The patches were applied to: Kernel repo: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Commit: 2f7d9d47575e - Linux 5.1.7 The results of these automated tests are provided below. Overall result: PASSED Merge: OK Compile: OK Tests: OK Please reply to this email if you have any questions about the tests that we ran or if you have any suggestions on how to make future tests more effective. ,-. ,-. ( C ) ( K ) Continuous `-',-.`-' Kernel ( I ) Integration `-' ______________________________________________________________________________ Merge testing ------------- We cloned this repository and checked out the following commit: Repo: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Commit: 2f7d9d47575e - Linux 5.1.7 We then merged the patchset with `git am`: sparc64-fix-regression-in-non-hypervisor-tlb-flush-xcall.patch include-linux-bitops.h-sanitize-rotate-primitives.patch xhci-update-bounce-buffer-with-correct-sg-num.patch xhci-use-zu-for-printing-size_t-type.patch xhci-convert-xhci_handshake-to-use-readl_poll_timeout_atomic.patch usb-xhci-avoid-null-pointer-deref-when-bos-field-is-null.patch usbip-usbip_host-fix-bug-sleeping-function-called-from-invalid-context.patch usbip-usbip_host-fix-stub_dev-lock-context-imbalance-regression.patch usb-fix-slab-out-of-bounds-write-in-usb_get_bos_descriptor.patch usb-sisusbvga-fix-oops-in-error-path-of-sisusb_probe.patch usb-add-lpm-quirk-for-surface-dock-gige-adapter.patch usb-rio500-refuse-more-than-one-device-at-a-time.patch usb-rio500-fix-memory-leak-in-close-after-disconnect.patch media-usb-siano-fix-general-protection-fault-in-smsusb.patch media-usb-siano-fix-false-positive-uninitialized-variable-warning.patch media-smsusb-better-handle-optional-alignment.patch brcmfmac-fix-null-pointer-derefence-during-usb-disconnect.patch scsi-zfcp-fix-missing-zfcp_port-reference-put-on-ebusy-from-port_remove.patch scsi-zfcp-fix-to-prevent-port_remove-with-pure-auto-scan-luns-only-sdevs.patch tracing-avoid-memory-leak-in-predicate_parse.patch btrfs-fix-wrong-ctime-and-mtime-of-a-directory-after-log-replay.patch btrfs-fix-race-updating-log-root-item-during-fsync.patch btrfs-fix-fsync-not-persisting-changed-attributes-of-a-directory.patch btrfs-correct-zstd-workspace-manager-lock-to-use-spin_lock_bh.patch btrfs-qgroup-check-bg-while-resuming-relocation-to-avoid-null-pointer-dereference.patch btrfs-incremental-send-fix-file-corruption-when-no-holes-feature-is-enabled.patch btrfs-reloc-also-queue-orphan-reloc-tree-for-cleanup-to-avoid-bug_on.patch iio-dac-ds4422-ds4424-fix-chip-verification.patch iio-adc-ads124-avoid-buffer-overflow.patch iio-adc-modify-npcm-adc-read-reference-voltage.patch iio-adc-ti-ads8688-fix-timestamp-is-not-updated-in-buffer.patch s390-crypto-fix-gcm-aes-s390-selftest-failures.patch s390-crypto-fix-possible-sleep-during-spinlock-aquired.patch kvm-ppc-book3s-hv-xive-do-not-clear-irq-data-of-passthrough-interrupts.patch kvm-ppc-book3s-hv-fix-lockdep-warning-when-entering-guest-on-power9.patch kvm-ppc-book3s-hv-restore-sprg3-in-kvmhv_p9_guest_entry.patch powerpc-perf-fix-mmcra-corruption-by-bhrb_filter.patch powerpc-kexec-fix-loading-of-kernel-initramfs-with-kexec_file_load.patch alsa-line6-assure-canceling-delayed-work-at-disconnection.patch alsa-hda-realtek-set-default-power-save-node-to-0.patch alsa-hda-realtek-improve-the-headset-mic-for-acer-aspire-laptops.patch kvm-s390-do-not-report-unusabled-ids-via-kvm_cap_max_vcpu_id.patch drm-nouveau-i2c-disable-i2c-bus-access-after-fini.patch i2c-mlxcpld-fix-wrong-initialization-order-in-probe.patch i2c-synquacer-fix-synquacer_i2c_doxfer-return-value.patch tty-serial-msm_serial-fix-xon-xoff.patch tty-max310x-fix-external-crystal-register-setup.patch mm-memcg-consider-subtrees-in-memory.events.patch memcg-make-it-work-on-sparse-non-0-node-systems.patch kasan-initialize-tag-to-0xff-in-__kasan_kmalloc.patch kernel-signal.c-trace_signal_deliver-when-signal_group_exit.patch signal-arm64-use-force_sig-not-force_sig_fault-for-sigkill.patch mm-compaction-make-sure-we-isolate-a-valid-pfn.patch arm64-fix-the-arm64_personality-syscall-wrapper-redirection.patch docs-fix-conf.py-for-sphinx-2.0.patch doc-cope-with-the-deprecation-of-autoreporter.patch doc-cope-with-sphinx-logging-deprecations.patch x86-ima-check-efi_runtime_services-before-using.patch ima-fix-wrong-signed-policy-requirement-when-not-appraising.patch ima-show-rules-with-ima_inmask-correctly.patch evm-check-hash-algorithm-passed-to-init_desc.patch clk-imx-imx8mm-fix-int-pll-clk-gate.patch vt-fbcon-deinitialize-resources-in-visual_init-after-failed-memory-allocation.patch serial-sh-sci-disable-dma-for-uart_console.patch staging-vc04_services-prevent-integer-overflow-in-create_pagelist.patch staging-wlan-ng-fix-adapter-initialization-failure.patch cifs-fix-memory-leak-of-pneg_inbuf-on-eopnotsupp-ioctl-case.patch cifs-cifs_read_allocate_pages-don-t-iterate-through-whole-page-array-on-enomem.patch revert-lockd-show-pid-of-lockd-for-remote-locks.patch gcc-plugins-fix-build-failures-under-darwin-host.patch drm-tegra-gem-fix-cpu-cache-maintenance-for-bo-s-allocated-using-get_pages.patch drm-vmwgfx-fix-user-space-handle-equal-to-zero.patch drm-vmwgfx-fix-compat-mode-shader-operation.patch drm-vmwgfx-don-t-send-drm-sysfs-hotplug-events-on-initial-master-set.patch drm-sun4i-fix-sun8i-hdmi-phy-clock-initialization.patch drm-sun4i-fix-sun8i-hdmi-phy-configuration-for-148.5-mhz.patch drm-imx-ipuv3-plane-fix-atomic-update-status-query-for-non-plus-i.mx6q.patch drm-fb-helper-generic-call-drm_client_add-after-setup-is-done.patch drm-atomic-wire-file_priv-through-for-property-changes.patch drm-expose-fb_damage_clips-property-to-atomic-aware-user-space-only.patch drm-rockchip-shutdown-drm-subsystem-on-shutdown.patch drm-lease-make-sure-implicit-planes-are-leased.patch drm-cma-helper-fix-drm_gem_cma_free_object.patch revert-x86-build-move-_etext-to-actual-end-of-.text.patch x86-kprobes-set-instruction-page-as-executable.patch Compile testing --------------- We compiled the kernel for 4 architectures: aarch64: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/aarch64/kernel-stable_queue_5.1-aa… kernel build: https://artifacts.cki-project.org/builds/aarch64/kernel-stable_queue_5.1-aa… ppc64le: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/ppc64le/kernel-stable_queue_5.1-pp… kernel build: https://artifacts.cki-project.org/builds/ppc64le/kernel-stable_queue_5.1-pp… s390x: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/s390x/kernel-stable_queue_5.1-s390… kernel build: https://artifacts.cki-project.org/builds/s390x/kernel-stable_queue_5.1-s390… x86_64: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/x86_64/kernel-stable_queue_5.1-x86… kernel build: https://artifacts.cki-project.org/builds/x86_64/kernel-stable_queue_5.1-x86… Hardware testing ---------------- We booted each kernel and ran the following tests: aarch64: Host 1: ✅ Boot test [0] ✅ selinux-policy: serge-testsuite [1] Host 2: ✅ Boot test [0] ✅ LTP lite [2] ✅ Loopdev Sanity [3] ✅ AMTU (Abstract Machine Test Utility) [4] ✅ audit: audit testsuite test [5] ✅ httpd: mod_ssl smoke sanity [6] ✅ iotop: sanity [7] ✅ tuned: tune-processes-through-perf [8] ✅ Usex - version 1.9-29 [9] 🚧 ✅ stress: stress-ng [10] ppc64le: Host 1: ✅ Boot test [0] ✅ selinux-policy: serge-testsuite [1] Host 2: ✅ Boot test [0] ✅ LTP lite [2] ✅ Loopdev Sanity [3] ✅ AMTU (Abstract Machine Test Utility) [4] ✅ audit: audit testsuite test [5] ✅ httpd: mod_ssl smoke sanity [6] ✅ iotop: sanity [7] ✅ tuned: tune-processes-through-perf [8] ✅ Usex - version 1.9-29 [9] s390x: Host 1: ✅ Boot test [0] ✅ selinux-policy: serge-testsuite [1] Host 2: ✅ Boot test [0] ✅ LTP lite [2] ✅ Loopdev Sanity [3] ✅ audit: audit testsuite test [5] ✅ httpd: mod_ssl smoke sanity [6] ✅ iotop: sanity [7] ✅ tuned: tune-processes-through-perf [8] 🚧 ✅ stress: stress-ng [10] x86_64: Host 1: ✅ Boot test [0] ✅ LTP lite [2] ✅ Loopdev Sanity [3] ✅ AMTU (Abstract Machine Test Utility) [4] ✅ audit: audit testsuite test [5] ✅ httpd: mod_ssl smoke sanity [6] ✅ iotop: sanity [7] ✅ tuned: tune-processes-through-perf [8] ✅ Usex - version 1.9-29 [9] 🚧 ✅ stress: stress-ng [10] Host 2: ✅ Boot test [0] ✅ selinux-policy: serge-testsuite [1] Test source: 💚 Pull requests are welcome for new tests or improvements to existing tests! [0]: https://github.com/CKI-project/tests-beaker/archive/master.zip#distribution… [1]: https://github.com/CKI-project/tests-beaker/archive/master.zip#/packages/se… [2]: https://github.com/CKI-project/tests-beaker/archive/master.zip#distribution… [3]: https://github.com/CKI-project/tests-beaker/archive/master.zip#filesystems/… [4]: https://github.com/CKI-project/tests-beaker/archive/master.zip#misc/amtu [5]: https://github.com/CKI-project/tests-beaker/archive/master.zip#packages/aud… [6]: https://github.com/CKI-project/tests-beaker/archive/master.zip#packages/htt… [7]: https://github.com/CKI-project/tests-beaker/archive/master.zip#packages/iot… [8]: https://github.com/CKI-project/tests-beaker/archive/master.zip#packages/tun… [9]: https://github.com/CKI-project/tests-beaker/archive/master.zip#standards/us… [10]: https://github.com/CKI-project/tests-beaker/archive/master.zip#stress/stres… Waived tests (marked with 🚧) ----------------------------- This test run included waived tests. Such tests are executed but their results are not taken into account. Tests are waived when their results are not reliable enough, e.g. when they're just introduced or are being fixed.

5 years, 12 months

1
0
0 0

✅ PASS: Stable queue: queue-4.19

by CKI Project

Hello, We ran automated tests on a patchset that was proposed for merging into this kernel tree. The patches were applied to: Kernel repo: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Commit: e109a984cf38 - Linux 4.19.48 The results of these automated tests are provided below. Overall result: PASSED Merge: OK Compile: OK Tests: OK Please reply to this email if you have any questions about the tests that we ran or if you have any suggestions on how to make future tests more effective. ,-. ,-. ( C ) ( K ) Continuous `-',-.`-' Kernel ( I ) Integration `-' ______________________________________________________________________________ Merge testing ------------- We cloned this repository and checked out the following commit: Repo: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Commit: e109a984cf38 - Linux 4.19.48 We then merged the patchset with `git am`: sparc64-fix-regression-in-non-hypervisor-tlb-flush-xcall.patch include-linux-bitops.h-sanitize-rotate-primitives.patch xhci-update-bounce-buffer-with-correct-sg-num.patch xhci-use-zu-for-printing-size_t-type.patch xhci-convert-xhci_handshake-to-use-readl_poll_timeout_atomic.patch usb-xhci-avoid-null-pointer-deref-when-bos-field-is-null.patch usbip-usbip_host-fix-bug-sleeping-function-called-from-invalid-context.patch usbip-usbip_host-fix-stub_dev-lock-context-imbalance-regression.patch usb-fix-slab-out-of-bounds-write-in-usb_get_bos_descriptor.patch usb-sisusbvga-fix-oops-in-error-path-of-sisusb_probe.patch usb-add-lpm-quirk-for-surface-dock-gige-adapter.patch usb-rio500-refuse-more-than-one-device-at-a-time.patch usb-rio500-fix-memory-leak-in-close-after-disconnect.patch media-usb-siano-fix-general-protection-fault-in-smsusb.patch media-usb-siano-fix-false-positive-uninitialized-variable-warning.patch media-smsusb-better-handle-optional-alignment.patch brcmfmac-fix-null-pointer-derefence-during-usb-disconnect.patch scsi-zfcp-fix-missing-zfcp_port-reference-put-on-ebusy-from-port_remove.patch scsi-zfcp-fix-to-prevent-port_remove-with-pure-auto-scan-luns-only-sdevs.patch tracing-avoid-memory-leak-in-predicate_parse.patch btrfs-fix-wrong-ctime-and-mtime-of-a-directory-after-log-replay.patch btrfs-fix-race-updating-log-root-item-during-fsync.patch btrfs-fix-fsync-not-persisting-changed-attributes-of-a-directory.patch btrfs-incremental-send-fix-file-corruption-when-no-holes-feature-is-enabled.patch iio-dac-ds4422-ds4424-fix-chip-verification.patch iio-adc-ti-ads8688-fix-timestamp-is-not-updated-in-buffer.patch s390-crypto-fix-gcm-aes-s390-selftest-failures.patch s390-crypto-fix-possible-sleep-during-spinlock-aquired.patch kvm-ppc-book3s-hv-xive-do-not-clear-irq-data-of-passthrough-interrupts.patch powerpc-perf-fix-mmcra-corruption-by-bhrb_filter.patch alsa-line6-assure-canceling-delayed-work-at-disconnection.patch alsa-hda-realtek-set-default-power-save-node-to-0.patch alsa-hda-realtek-improve-the-headset-mic-for-acer-aspire-laptops.patch kvm-s390-do-not-report-unusabled-ids-via-kvm_cap_max_vcpu_id.patch drm-nouveau-i2c-disable-i2c-bus-access-after-fini.patch i2c-mlxcpld-fix-wrong-initialization-order-in-probe.patch i2c-synquacer-fix-synquacer_i2c_doxfer-return-value.patch tty-serial-msm_serial-fix-xon-xoff.patch tty-max310x-fix-external-crystal-register-setup.patch memcg-make-it-work-on-sparse-non-0-node-systems.patch kernel-signal.c-trace_signal_deliver-when-signal_group_exit.patch arm64-fix-the-arm64_personality-syscall-wrapper-redirection.patch docs-fix-conf.py-for-sphinx-2.0.patch doc-cope-with-the-deprecation-of-autoreporter.patch doc-cope-with-sphinx-logging-deprecations.patch ima-show-rules-with-ima_inmask-correctly.patch evm-check-hash-algorithm-passed-to-init_desc.patch vt-fbcon-deinitialize-resources-in-visual_init-after-failed-memory-allocation.patch serial-sh-sci-disable-dma-for-uart_console.patch staging-vc04_services-prevent-integer-overflow-in-create_pagelist.patch staging-wlan-ng-fix-adapter-initialization-failure.patch cifs-fix-memory-leak-of-pneg_inbuf-on-eopnotsupp-ioctl-case.patch cifs-cifs_read_allocate_pages-don-t-iterate-through-whole-page-array-on-enomem.patch revert-lockd-show-pid-of-lockd-for-remote-locks.patch gcc-plugins-fix-build-failures-under-darwin-host.patch drm-tegra-gem-fix-cpu-cache-maintenance-for-bo-s-allocated-using-get_pages.patch drm-vmwgfx-don-t-send-drm-sysfs-hotplug-events-on-initial-master-set.patch drm-sun4i-fix-sun8i-hdmi-phy-clock-initialization.patch drm-sun4i-fix-sun8i-hdmi-phy-configuration-for-148.5-mhz.patch drm-rockchip-shutdown-drm-subsystem-on-shutdown.patch drm-lease-make-sure-implicit-planes-are-leased.patch compiler-attributes-add-support-for-__copy-gcc-9.patch include-linux-module.h-copy-__init-__exit-attrs-to-init-cleanup_module.patch revert-x86-build-move-_etext-to-actual-end-of-.text.patch revert-binder-fix-handling-of-misaligned-binder-object.patch binder-fix-race-between-munmap-and-direct-reclaim.patch x86-ftrace-do-not-call-function-graph-from-dynamic-t.patch x86-ftrace-set-trampoline-pages-as-executable.patch x86-kprobes-set-instruction-page-as-executable.patch Compile testing --------------- We compiled the kernel for 4 architectures: aarch64: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/aarch64/kernel-stable_queue_4.19-a… kernel build: https://artifacts.cki-project.org/builds/aarch64/kernel-stable_queue_4.19-a… ppc64le: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/ppc64le/kernel-stable_queue_4.19-p… kernel build: https://artifacts.cki-project.org/builds/ppc64le/kernel-stable_queue_4.19-p… s390x: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/s390x/kernel-stable_queue_4.19-s39… kernel build: https://artifacts.cki-project.org/builds/s390x/kernel-stable_queue_4.19-s39… x86_64: build options: -j20 INSTALL_MOD_STRIP=1 targz-pkg configuration: https://artifacts.cki-project.org/builds/x86_64/kernel-stable_queue_4.19-x8… kernel build: https://artifacts.cki-project.org/builds/x86_64/kernel-stable_queue_4.19-x8… Hardware testing ---------------- We booted each kernel and ran the following tests: aarch64: Host 1: ✅ Boot test [0] ✅ LTP lite [1] ✅ Loopdev Sanity [2] ✅ AMTU (Abstract Machine Test Utility) [3] ✅ audit: audit testsuite test [4] ✅ httpd: mod_ssl smoke sanity [5] ✅ iotop: sanity [6] ✅ tuned: tune-processes-through-perf [7] ✅ Usex - version 1.9-29 [8] 🚧 ✅ stress: stress-ng [9] Host 2: ✅ Boot test [0] ✅ selinux-policy: serge-testsuite [10] ppc64le: Host 1: ✅ Boot test [0] ✅ LTP lite [1] ✅ Loopdev Sanity [2] ✅ AMTU (Abstract Machine Test Utility) [3] ✅ audit: audit testsuite test [4] ✅ httpd: mod_ssl smoke sanity [5] ✅ iotop: sanity [6] ✅ tuned: tune-processes-through-perf [7] ✅ Usex - version 1.9-29 [8] Host 2: ✅ Boot test [0] ✅ selinux-policy: serge-testsuite [10] s390x: Host 1: ✅ Boot test [0] ✅ LTP lite [1] ✅ Loopdev Sanity [2] ✅ audit: audit testsuite test [4] ✅ httpd: mod_ssl smoke sanity [5] ✅ iotop: sanity [6] ✅ tuned: tune-processes-through-perf [7] 🚧 ✅ stress: stress-ng [9] Host 2: ✅ Boot test [0] ✅ selinux-policy: serge-testsuite [10] x86_64: Host 1: ✅ Boot test [0] ✅ selinux-policy: serge-testsuite [10] Host 2: ✅ Boot test [0] ✅ LTP lite [1] ✅ Loopdev Sanity [2] ✅ AMTU (Abstract Machine Test Utility) [3] ✅ audit: audit testsuite test [4] ✅ httpd: mod_ssl smoke sanity [5] ✅ iotop: sanity [6] ✅ tuned: tune-processes-through-perf [7] ✅ Usex - version 1.9-29 [8] 🚧 ✅ stress: stress-ng [9] Test source: 💚 Pull requests are welcome for new tests or improvements to existing tests! [0]: https://github.com/CKI-project/tests-beaker/archive/master.zip#distribution… [1]: https://github.com/CKI-project/tests-beaker/archive/master.zip#distribution… [2]: https://github.com/CKI-project/tests-beaker/archive/master.zip#filesystems/… [3]: https://github.com/CKI-project/tests-beaker/archive/master.zip#misc/amtu [4]: https://github.com/CKI-project/tests-beaker/archive/master.zip#packages/aud… [5]: https://github.com/CKI-project/tests-beaker/archive/master.zip#packages/htt… [6]: https://github.com/CKI-project/tests-beaker/archive/master.zip#packages/iot… [7]: https://github.com/CKI-project/tests-beaker/archive/master.zip#packages/tun… [8]: https://github.com/CKI-project/tests-beaker/archive/master.zip#standards/us… [9]: https://github.com/CKI-project/tests-beaker/archive/master.zip#stress/stres… [10]: https://github.com/CKI-project/tests-beaker/archive/master.zip#/packages/se… Waived tests (marked with 🚧) ----------------------------- This test run included waived tests. Such tests are executed but their results are not taken into account. Tests are waived when their results are not reliable enough, e.g. when they're just introduced or are being fixed.

5 years, 12 months

1
0
0 0

[PATCH v2 1/3] i3c: fix i2c and i3c scl rate by bus mode

by Vitor Soares

Currently the I3C framework limits SCL frequency to FM speed when dealing with a mixed slow bus, even if all I2C devices are FM+ capable. The core was also not accounting for I3C speed limitations when operating in mixed slow mode and was erroneously using FM+ speed as the max I2C speed when operating in mixed fast mode. Fixes: 3a379bbcea0a ("i3c: Add core I3C infrastructure") Signed-off-by: Vitor Soares <vitor.soares(a)synopsys.com> Cc: Boris Brezillon <bbrezillon(a)kernel.org> Cc: <stable(a)vger.kernel.org> Cc: <linux-kernel(a)vger.kernel.org> --- Changes in v2: Enhance commit message Add dev_warn() in case user-defined i2c rate doesn't match LVR constraint Add dev_warn() in case user-defined i3c rate lower than i2c rate. drivers/i3c/master.c | 61 +++++++++++++++++++++++++++++++++++++++++----------- 1 file changed, 48 insertions(+), 13 deletions(-) diff --git a/drivers/i3c/master.c b/drivers/i3c/master.c index 5f4bd52..8cd5824 100644 --- a/drivers/i3c/master.c +++ b/drivers/i3c/master.c @@ -91,6 +91,12 @@ void i3c_bus_normaluse_unlock(struct i3c_bus *bus) up_read(&bus->lock); } +static struct i3c_master_controller * +i3c_bus_to_i3c_master(struct i3c_bus *i3cbus) +{ + return container_of(i3cbus, struct i3c_master_controller, bus); +} + static struct i3c_master_controller *dev_to_i3cmaster(struct device *dev) { return container_of(dev, struct i3c_master_controller, dev); @@ -565,20 +571,48 @@ static const struct device_type i3c_masterdev_type = { .groups = i3c_masterdev_groups, }; -int i3c_bus_set_mode(struct i3c_bus *i3cbus, enum i3c_bus_mode mode) +int i3c_bus_set_mode(struct i3c_bus *i3cbus, enum i3c_bus_mode mode, + unsigned long max_i2c_scl_rate) { - i3cbus->mode = mode; - if (!i3cbus->scl_rate.i3c) - i3cbus->scl_rate.i3c = I3C_BUS_TYP_I3C_SCL_RATE; + struct i3c_master_controller *master = i3c_bus_to_i3c_master(i3cbus); - if (!i3cbus->scl_rate.i2c) { - if (i3cbus->mode == I3C_BUS_MODE_MIXED_SLOW) - i3cbus->scl_rate.i2c = I3C_BUS_I2C_FM_SCL_RATE; - else - i3cbus->scl_rate.i2c = I3C_BUS_I2C_FM_PLUS_SCL_RATE; + i3cbus->mode = mode; + + switch (i3cbus->mode) { + case I3C_BUS_MODE_PURE: + if (!i3cbus->scl_rate.i3c) + i3cbus->scl_rate.i3c = I3C_BUS_TYP_I3C_SCL_RATE; + break; + case I3C_BUS_MODE_MIXED_FAST: + if (!i3cbus->scl_rate.i3c) + i3cbus->scl_rate.i3c = I3C_BUS_TYP_I3C_SCL_RATE; + if (!i3cbus->scl_rate.i2c) + i3cbus->scl_rate.i2c = max_i2c_scl_rate; + break; + case I3C_BUS_MODE_MIXED_SLOW: + if (!i3cbus->scl_rate.i2c) + i3cbus->scl_rate.i2c = max_i2c_scl_rate; + if (!i3cbus->scl_rate.i3c || + i3cbus->scl_rate.i3c > i3cbus->scl_rate.i2c) + i3cbus->scl_rate.i3c = i3cbus->scl_rate.i2c; + break; + default: + return -EINVAL; } + if (i3cbus->scl_rate.i3c < i3cbus->scl_rate.i2c) + dev_warn(&master->dev, + "i3c-scl-hz=%ld lower than i2c-scl-hz=%ld\n", + i3cbus->scl_rate.i3c, i3cbus->scl_rate.i2c); + + if (i3cbus->scl_rate.i2c != I3C_BUS_I2C_FM_SCL_RATE && + i3cbus->scl_rate.i2c != I3C_BUS_I2C_FM_PLUS_SCL_RATE && + i3cbus->mode != I3C_BUS_MODE_PURE) + dev_warn(&master->dev, + "i2c-scl-hz=%ld not defined according MIPI I3C spec\n" + , i3cbus->scl_rate.i2c); + /* * I3C/I2C frequency may have been overridden, check that user-provided * values are not exceeding max possible frequency. @@ -1966,9 +2000,6 @@ of_i3c_master_add_i2c_boardinfo(struct i3c_master_controller *master, /* LVR is encoded in reg[2]. */ boardinfo->lvr = reg[2]; - if (boardinfo->lvr & I3C_LVR_I2C_FM_MODE) - master->bus.scl_rate.i2c = I3C_BUS_I2C_FM_SCL_RATE; - list_add_tail(&boardinfo->node, &master->boardinfo.i2c); of_node_get(node); @@ -2417,6 +2448,7 @@ int i3c_master_register(struct i3c_master_controller *master, const struct i3c_master_controller_ops *ops, bool secondary) { + unsigned long i2c_scl_rate = I3C_BUS_I2C_FM_PLUS_SCL_RATE; struct i3c_bus *i3cbus = i3c_master_get_bus(master); enum i3c_bus_mode mode = I3C_BUS_MODE_PURE; struct i2c_dev_boardinfo *i2cbi; @@ -2466,9 +2498,12 @@ int i3c_master_register(struct i3c_master_controller *master, ret = -EINVAL; goto err_put_dev; } + + if (i2cbi->lvr & I3C_LVR_I2C_FM_MODE) + i2c_scl_rate = I3C_BUS_I2C_FM_SCL_RATE; } - ret = i3c_bus_set_mode(i3cbus, mode); + ret = i3c_bus_set_mode(i3cbus, mode, i2c_scl_rate); if (ret) goto err_put_dev; -- 2.7.4

5 years, 12 months

2
5
0 0

Kernel 4.19.47 with commit 8715ce033eb37f539e73b1570bf56404b21d46cd failed to execute NX-protected page

by Daniel Dao

Hi there, We are testing kernel 4.19.47 with some tools utilizing kprobe, resulting in panics that look like: [ 1085.318031] kernel tried to execute NX-protected page - exploit attempt? (uid: 65534) [ 1085.334028] BUG: unable to handle kernel paging request at ffffffffc0428000 [ 1085.349128] PGD 13a3e10067 P4D 13a3e10067 PUD 13a3e12067 PMD c1e860067 PTE 8000000bbd075061 [ 1085.365779] Oops: 0011 [#1] SMP KASAN PTI [ 1085.377879] CPU: 30 PID: 29734 Comm: nginx-fl Tainted: G B O 4.19.47-cloudflare-kasan-2019.6.0 #2019.6.0 [ 1085.396652] Hardware name: Quanta Computer Inc QuantaPlex T41S-2U/S2S-MB, BIOS S2S_3B10.03 06/21/2018 [ 1085.414041] RIP: 0010:0xffffffffc0428000 [ 1085.425965] Code: Bad RIP value. [ 1085.436832] RSP: 0018:ffff88a015e2fb18 EFLAGS: 00010246 [ 1085.449853] RAX: 0000000000000003 RBX: ffff889f73448900 RCX: 0000000000000218 [ 1085.464719] RDX: ffff889fe4893c00 RSI: 0000000000000002 RDI: ffff889f73448900 [ 1085.479626] RBP: ffff88a015e2fe18 R08: 0000000000000006 R09: 0000000000000000 [ 1085.494677] R10: 000000008a08850a R11: 0000000000000000 R12: ffff889f7344890c [ 1085.509890] R13: ffff889f73448c54 R14: ffff889f73448c7a R15: 0000000000002c19 [ 1085.525252] FS: 00007f51582f5680(0000) GS:ffff88a03fb80000(0000) knlGS:0000000000000000 [ 1085.541810] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1085.555812] CR2: ffffffffc0427fd6 CR3: 0000002039fee004 CR4: 00000000001606e0 [ 1085.571154] Call Trace: [ 1085.581676] ? tcp_set_state+0x5/0x5b0 [ 1085.593532] ? tcp_v4_connect+0xbd7/0x2000 [ 1085.605809] ? tcp_sk_init+0x1220/0x1220 [ 1085.617810] ? selinux_socket_connect_helper.isra.55+0x277/0x400 [ 1085.631808] ? sock_poll+0x218/0x300 [ 1085.643407] ? selinux_netcache_avc_callback+0x30/0x30 [ 1085.656701] ? __inet_stream_connect+0x630/0xbd0 [ 1085.669508] ? expand_files.part.9+0x640/0x640 [ 1085.682145] ? ipip_gro_complete+0x110/0x110 [ 1085.694627] ? __inet_stream_connect+0xbd0/0xbd0 [ 1085.707397] ? inet_stream_connect+0x53/0xa0 [ 1085.719830] ? __sys_connect+0x1f6/0x270 [ 1085.731964] ? __ia32_sys_accept+0xb0/0xb0 [ 1085.744201] ? mutex_lock+0x85/0xe0 [ 1085.755815] ? ep_show_fdinfo+0x3c0/0x3c0 [ 1085.767916] ? syscall_trace_enter+0x566/0xc30 [ 1085.780429] ? __x64_sys_epoll_ctl+0x237/0x1080 [ 1085.792883] ? exit_to_usermode_loop+0x140/0x140 [ 1085.805425] ? __audit_syscall_exit+0x73e/0xa30 [ 1085.817925] ? __x64_sys_connect+0x6f/0xb0 [ 1085.829915] ? do_syscall_64+0x8e/0x280 [ 1085.841539] ? prepare_exit_to_usermode+0xe1/0x140 [ 1085.854067] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1085.867000] Modules linked in: xt_length xt_connlimit nf_conncount xt_hashlimit iptable_security sch_fq md_mod dm_crypt algif_skcipher af_alg dm_mod dax ip6table_nat nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw xt_nat iptable_nat nf_nat_ipv4 nf_nat xt_TPROXY nf_tproxy_ipv6 nf_tproxy_ipv4 xt_connmark iptable_mangle xt_owner ip6table_filter ip6_tables xt_CT xt_socket nf_socket_ipv4 nf_socket_ipv6 iptable_raw nfnetlink_log xt_NFLOG xt_bpf xt_comment xt_conntrack xt_mark xt_multiport xt_set xt_tcpudp ipt_GLBREDIRECT(O) nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 fou ip6_udp_tunnel udp_tunnel iptable_filter bpfilter ip_set_hash_netport ip_set_hash_net ip_set_hash_ip ip_set nfnetlink sit ipip tunnel4 ip_tunnel tun 8021q garp stp mrp llc sb_edac x86_pkg_temp_thermal kvm_intel kvm irqbypass [ 1085.996378] crc32_pclmul crc32c_intel pcbc aesni_intel aes_x86_64 ipmi_ssif crypto_simd cryptd glue_helper intel_cstate intel_uncore sfc(O) intel_rapl_perf tpm_tis tpm_tis_core mdio tpm ipmi_si ipmi_devintf ipmi_msghandler efivarfs ip_tables x_tables Reproducible steps on my local machine are as follow: 1. Run kernel 4.19.47 2. We are going to test kprobe on tcp_set_state using https://github.com/iovisor/bcc/blob/master/tools/tcplife.py. But probably any workload utilizing kprobe would work - Run some workload that creating tcp connections. I'm runing `python -m SimpleHTTPServer` and `wrk -d60s -c10 http://localhost:8000` - Run the script https://github.com/iovisor/bcc/blob/master/tools/tcplife.py. Expect it to not crash the kernel and producing some output Reverting commit 8715ce033eb37f539e73b1570bf56404b21d46cd makes it work for me locally. I also tested kernel 5.2.0-rc3-00024-g788a024921c4 locally (latest Linus tree) and not seeing the issue, so maybe somewhere along the backporting process, we failed to backport all the required patches ? Cheers, Daniel.

5 years, 12 months

3
4
0 0

[PATCH v2 1/1] [v4.9.y] coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping

by Ajay Kaher

From: Andrea Arcangeli <aarcange(a)redhat.com> commit 04f5866e41fb70690e28397487d8bd8eea7d712a upstream. The core dumping code has always run without holding the mmap_sem for writing, despite that is the only way to ensure that the entire vma layout will not change from under it. Only using some signal serialization on the processes belonging to the mm is not nearly enough. This was pointed out earlier. For example in Hugh's post from Jul 2017: https://lkml.kernel.org/r/alpine.LSU.2.11.1707191716030.2055@eggly.anvils "Not strictly relevant here, but a related note: I was very surprised to discover, only quite recently, how handle_mm_fault() may be called without down_read(mmap_sem) - when core dumping. That seems a misguided optimization to me, which would also be nice to correct" In particular because the growsdown and growsup can move the vm_start/vm_end the various loops the core dump does around the vma will not be consistent if page faults can happen concurrently. Pretty much all users calling mmget_not_zero()/get_task_mm() and then taking the mmap_sem had the potential to introduce unexpected side effects in the core dumping code. Adding mmap_sem for writing around the ->core_dump invocation is a viable long term fix, but it requires removing all copy user and page faults and to replace them with get_dump_page() for all binary formats which is not suitable as a short term fix. For the time being this solution manually covers the places that can confuse the core dump either by altering the vma layout or the vma flags while it runs. Once ->core_dump runs under mmap_sem for writing the function mmget_still_valid() can be dropped. Allowing mmap_sem protected sections to run in parallel with the coredump provides some minor parallelism advantage to the swapoff code (which seems to be safe enough by never mangling any vma field and can keep doing swapins in parallel to the core dumping) and to some other corner case. In order to facilitate the backporting I added "Fixes: 86039bd3b4e6" however the side effect of this same race condition in /proc/pid/mem should be reproducible since before 2.6.12-rc2 so I couldn't add any other "Fixes:" because there's no hash beyond the git genesis commit. Because find_extend_vma() is the only location outside of the process context that could modify the "mm" structures under mmap_sem for reading, by adding the mmget_still_valid() check to it, all other cases that take the mmap_sem for reading don't need the new check after mmget_not_zero()/get_task_mm(). The expand_stack() in page fault context also doesn't need the new check, because all tasks under core dumping are frozen. Link: http://lkml.kernel.org/r/20190325224949.11068-1-aarcange@redhat.com Fixes: 86039bd3b4e6 ("userfaultfd: add new syscall to provide memory externalization") Signed-off-by: Andrea Arcangeli <aarcange(a)redhat.com> Reported-by: Jann Horn <jannh(a)google.com> Suggested-by: Oleg Nesterov <oleg(a)redhat.com> Acked-by: Peter Xu <peterx(a)redhat.com> Reviewed-by: Mike Rapoport <rppt(a)linux.ibm.com> Reviewed-by: Oleg Nesterov <oleg(a)redhat.com> Reviewed-by: Jann Horn <jannh(a)google.com> Acked-by: Jason Gunthorpe <jgg(a)mellanox.com> Acked-by: Michal Hocko <mhocko(a)suse.com> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds(a)linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> [Ajay: Dropped infiniband changes to get patch to apply on 4.9.y] Signed-off-by: Ajay Kaher <akaher(a)vmware.com> --- fs/proc/task_mmu.c | 18 ++++++++++++++++++ fs/userfaultfd.c | 9 +++++++++ include/linux/sched.h | 21 +++++++++++++++++++++ mm/mmap.c | 7 ++++++- 4 files changed, 54 insertions(+), 1 deletion(-) diff --git a/fs/proc/task_mmu.c b/fs/proc/task_mmu.c index 5138e78..4b207b1 100644 --- a/fs/proc/task_mmu.c +++ b/fs/proc/task_mmu.c @@ -1057,6 +1057,24 @@ static ssize_t clear_refs_write(struct file *file, const char __user *buf, count = -EINTR; goto out_mm; } + /* + * Avoid to modify vma->vm_flags + * without locked ops while the + * coredump reads the vm_flags. + */ + if (!mmget_still_valid(mm)) { + /* + * Silently return "count" + * like if get_task_mm() + * failed. FIXME: should this + * function have returned + * -ESRCH if get_task_mm() + * failed like if + * get_proc_task() fails? + */ + up_write(&mm->mmap_sem); + goto out_mm; + } for (vma = mm->mmap; vma; vma = vma->vm_next) { vma->vm_flags &= ~VM_SOFTDIRTY; vma_set_page_prot(vma); diff --git a/fs/userfaultfd.c b/fs/userfaultfd.c index 784d667..8bf425a 100644 --- a/fs/userfaultfd.c +++ b/fs/userfaultfd.c @@ -479,6 +479,8 @@ static int userfaultfd_release(struct inode *inode, struct file *file) * taking the mmap_sem for writing. */ down_write(&mm->mmap_sem); + if (!mmget_still_valid(mm)) + goto skip_mm; prev = NULL; for (vma = mm->mmap; vma; vma = vma->vm_next) { cond_resched(); @@ -501,6 +503,7 @@ static int userfaultfd_release(struct inode *inode, struct file *file) vma->vm_flags = new_flags; vma->vm_userfaultfd_ctx = NULL_VM_UFFD_CTX; } +skip_mm: up_write(&mm->mmap_sem); mmput(mm); wakeup: @@ -802,6 +805,9 @@ static int userfaultfd_register(struct userfaultfd_ctx *ctx, goto out; down_write(&mm->mmap_sem); + if (!mmget_still_valid(mm)) + goto out_unlock; + vma = find_vma_prev(mm, start, &prev); if (!vma) goto out_unlock; @@ -947,6 +953,9 @@ static int userfaultfd_unregister(struct userfaultfd_ctx *ctx, goto out; down_write(&mm->mmap_sem); + if (!mmget_still_valid(mm)) + goto out_unlock; + vma = find_vma_prev(mm, start, &prev); if (!vma) goto out_unlock; diff --git a/include/linux/sched.h b/include/linux/sched.h index 1c487a3..c3d9ca0 100644 --- a/include/linux/sched.h +++ b/include/linux/sched.h @@ -2933,6 +2933,27 @@ static inline void mmdrop_async(struct mm_struct *mm) } } +/* + * This has to be called after a get_task_mm()/mmget_not_zero() + * followed by taking the mmap_sem for writing before modifying the + * vmas or anything the coredump pretends not to change from under it. + * + * NOTE: find_extend_vma() called from GUP context is the only place + * that can modify the "mm" (notably the vm_start/end) under mmap_sem + * for reading and outside the context of the process, so it is also + * the only case that holds the mmap_sem for reading that must call + * this function. Generally if the mmap_sem is hold for reading + * there's no need of this check after get_task_mm()/mmget_not_zero(). + * + * This function can be obsoleted and the check can be removed, after + * the coredump code will hold the mmap_sem for writing before + * invoking the ->core_dump methods. + */ +static inline bool mmget_still_valid(struct mm_struct *mm) +{ + return likely(!mm->core_state); +} + static inline bool mmget_not_zero(struct mm_struct *mm) { return atomic_inc_not_zero(&mm->mm_users); diff --git a/mm/mmap.c b/mm/mmap.c index 3f2314a..acd93d1 100644 --- a/mm/mmap.c +++ b/mm/mmap.c @@ -45,6 +45,7 @@ #include <linux/moduleparam.h> #include <linux/pkeys.h> +#include <linux/sched.h> #include <asm/uaccess.h> #include <asm/cacheflush.h> #include <asm/tlb.h> @@ -2448,7 +2449,8 @@ find_extend_vma(struct mm_struct *mm, unsigned long addr) vma = find_vma_prev(mm, addr, &prev); if (vma && (vma->vm_start <= addr)) return vma; - if (!prev || expand_stack(prev, addr)) + /* don't alter vm_end if the coredump is running */ + if (!prev || !mmget_still_valid(mm) || expand_stack(prev, addr)) return NULL; if (prev->vm_flags & VM_LOCKED) populate_vma_page_range(prev, addr, prev->vm_end, NULL); @@ -2474,6 +2476,9 @@ find_extend_vma(struct mm_struct *mm, unsigned long addr) return vma; if (!(vma->vm_flags & VM_GROWSDOWN)) return NULL; + /* don't alter vm_start if the coredump is running */ + if (!mmget_still_valid(mm)) + return NULL; start = vma->vm_start; if (expand_stack(vma, addr)) return NULL; -- 2.7.4

5 years, 12 months

2
1
0 0

Re: Patch "coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping" has been added to the 4.4-stable tree

by Greg KH

On Tue, Jun 04, 2019 at 04:52:31PM +0200, Michal Hocko wrote: > Please note that I have posted my backport today > http://lkml.kernel.org/r/20190604094953.26688-1-mhocko@kernel.org and it > differs from this one. Please have a look! Ah, good point, I just noticed that. Ben, any thoughts as to the difference? thanks, greg k-h

5 years, 12 months

3
4
0 0

[PATCH 2/7] drm/i915/sdvo: Implement proper HDMI audio support for SDVO

by Ville Syrjala

From: Ville Syrjälä <ville.syrjala(a)linux.intel.com> Our SDVO audio support is pretty bogus. We can't push audio over the SDVO bus, so trying to enable audio in the SDVO control register doesn't do anything. In fact it looks like the SDVO encoder will always mix in the audio coming over HDA, and there's no (at least documented) way to disable that from our side. So HDMI audio does work currently but only by luck really. What is missing though is the ELD. To pass the ELD to the audio driver we need to write it to magic buffer in the SDVO encoder hardware which then gets pulled out via HDA in the other end. Ie. pretty much the same thing we had for native HDMI before we started to just pass the ELD between the drivers. This sort of explains why we even have that silly hardware buffer with native HDMI. $ cat /proc/asound/card0/eld#1.0 -monitor_present 0 -eld_valid 0 +monitor_present 1 +eld_valid 1 +monitor_name LG TV +connection_type HDMI +... This also fixes our state readout since we can now query the SDVO encoder about the state of the "ELD valid" and "presence detect" bits. As mentioned those don't actually control whether audio gets sent over the HDMI cable, but it's the best we can do. Cc: stable(a)vger.kernel.org Cc: Daniel Vetter <daniel.vetter(a)ffwll.ch> Cc: zardam(a)gmail.com Tested-by: zardam(a)gmail.com Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=108976 Fixes: de44e256b92c ("drm/i915/sdvo: Shut up state checker with hdmi cards on gen3") Signed-off-by: Ville Syrjälä <ville.syrjala(a)linux.intel.com> --- drivers/gpu/drm/i915/intel_sdvo.c | 58 +++++++++++++++++++++----- drivers/gpu/drm/i915/intel_sdvo_regs.h | 3 ++ 2 files changed, 50 insertions(+), 11 deletions(-) diff --git a/drivers/gpu/drm/i915/intel_sdvo.c b/drivers/gpu/drm/i915/intel_sdvo.c index 61db07244296..7f64352a3413 100644 --- a/drivers/gpu/drm/i915/intel_sdvo.c +++ b/drivers/gpu/drm/i915/intel_sdvo.c @@ -916,6 +916,13 @@ static bool intel_sdvo_set_colorimetry(struct intel_sdvo *intel_sdvo, return intel_sdvo_set_value(intel_sdvo, SDVO_CMD_SET_COLORIMETRY, &mode, 1); } +static bool intel_sdvo_set_audio_state(struct intel_sdvo *intel_sdvo, + u8 audio_state) +{ + return intel_sdvo_set_value(intel_sdvo, SDVO_CMD_SET_AUDIO_STAT, + &audio_state, 1); +} + #if 0 static void intel_sdvo_dump_hdmi_buf(struct intel_sdvo *intel_sdvo) { @@ -1487,11 +1494,6 @@ static void intel_sdvo_pre_enable(struct intel_encoder *intel_encoder, else sdvox |= SDVO_PIPE_SEL(crtc->pipe); - if (crtc_state->has_audio) { - WARN_ON_ONCE(INTEL_GEN(dev_priv) < 4); - sdvox |= SDVO_AUDIO_ENABLE; - } - if (INTEL_GEN(dev_priv) >= 4) { /* done in crtc_mode_set as the dpll_md reg must be written early */ } else if (IS_I945G(dev_priv) || IS_I945GM(dev_priv) || @@ -1635,8 +1637,13 @@ static void intel_sdvo_get_config(struct intel_encoder *encoder, if (sdvox & HDMI_COLOR_RANGE_16_235) pipe_config->limited_color_range = true; - if (sdvox & SDVO_AUDIO_ENABLE) - pipe_config->has_audio = true; + if (intel_sdvo_get_value(intel_sdvo, SDVO_CMD_GET_AUDIO_STAT, + &val, 1)) { + u8 mask = SDVO_AUDIO_ELD_VALID | SDVO_AUDIO_PRESENCE_DETECT; + + if ((val & mask) == mask) + pipe_config->has_audio = true; + } if (intel_sdvo_get_value(intel_sdvo, SDVO_CMD_GET_ENCODE, &val, 1)) { @@ -1647,6 +1654,32 @@ static void intel_sdvo_get_config(struct intel_encoder *encoder, intel_sdvo_get_avi_infoframe(intel_sdvo, pipe_config); } +static void intel_sdvo_disable_audio(struct intel_sdvo *intel_sdvo) +{ + intel_sdvo_set_audio_state(intel_sdvo, 0); +} + +static void intel_sdvo_enable_audio(struct intel_sdvo *intel_sdvo, + const struct intel_crtc_state *crtc_state, + const struct drm_connector_state *conn_state) +{ + const struct drm_display_mode *adjusted_mode = + &crtc_state->base.adjusted_mode; + struct drm_connector *connector = conn_state->connector; + u8 *eld = connector->eld; + + eld[6] = drm_av_sync_delay(connector, adjusted_mode) / 2; + + intel_sdvo_set_audio_state(intel_sdvo, 0); + + intel_sdvo_write_infoframe(intel_sdvo, SDVO_HBUF_INDEX_ELD, + SDVO_HBUF_TX_DISABLED, + eld, drm_eld_size(eld)); + + intel_sdvo_set_audio_state(intel_sdvo, SDVO_AUDIO_ELD_VALID | + SDVO_AUDIO_PRESENCE_DETECT); +} + static void intel_disable_sdvo(struct intel_encoder *encoder, const struct intel_crtc_state *old_crtc_state, const struct drm_connector_state *conn_state) @@ -1656,6 +1689,9 @@ static void intel_disable_sdvo(struct intel_encoder *encoder, struct intel_crtc *crtc = to_intel_crtc(old_crtc_state->base.crtc); u32 temp; + if (old_crtc_state->has_audio) + intel_sdvo_disable_audio(intel_sdvo); + intel_sdvo_set_active_outputs(intel_sdvo, 0); if (0) intel_sdvo_set_encoder_power_state(intel_sdvo, @@ -1741,6 +1777,9 @@ static void intel_enable_sdvo(struct intel_encoder *encoder, intel_sdvo_set_encoder_power_state(intel_sdvo, DRM_MODE_DPMS_ON); intel_sdvo_set_active_outputs(intel_sdvo, intel_sdvo->attached_output); + + if (pipe_config->has_audio) + intel_sdvo_enable_audio(intel_sdvo, pipe_config, conn_state); } static enum drm_mode_status @@ -2603,7 +2642,6 @@ static bool intel_sdvo_dvi_init(struct intel_sdvo *intel_sdvo, int device) { struct drm_encoder *encoder = &intel_sdvo->base.base; - struct drm_i915_private *dev_priv = to_i915(encoder->dev); struct drm_connector *connector; struct intel_encoder *intel_encoder = to_intel_encoder(encoder); struct intel_connector *intel_connector; @@ -2640,9 +2678,7 @@ intel_sdvo_dvi_init(struct intel_sdvo *intel_sdvo, int device) encoder->encoder_type = DRM_MODE_ENCODER_TMDS; connector->connector_type = DRM_MODE_CONNECTOR_DVID; - /* gen3 doesn't do the hdmi bits in the SDVO register */ - if (INTEL_GEN(dev_priv) >= 4 && - intel_sdvo_is_hdmi_connector(intel_sdvo, device)) { + if (intel_sdvo_is_hdmi_connector(intel_sdvo, device)) { connector->connector_type = DRM_MODE_CONNECTOR_HDMIA; intel_sdvo_connector->is_hdmi = true; } diff --git a/drivers/gpu/drm/i915/intel_sdvo_regs.h b/drivers/gpu/drm/i915/intel_sdvo_regs.h index db0ed499268a..e9ba3b047f93 100644 --- a/drivers/gpu/drm/i915/intel_sdvo_regs.h +++ b/drivers/gpu/drm/i915/intel_sdvo_regs.h @@ -707,6 +707,9 @@ struct intel_sdvo_enhancements_arg { #define SDVO_CMD_GET_AUDIO_ENCRYPT_PREFER 0x90 #define SDVO_CMD_SET_AUDIO_STAT 0x91 #define SDVO_CMD_GET_AUDIO_STAT 0x92 + #define SDVO_AUDIO_ELD_VALID (1 << 0) + #define SDVO_AUDIO_PRESENCE_DETECT (1 << 1) + #define SDVO_AUDIO_CP_READY (1 << 2) #define SDVO_CMD_SET_HBUF_INDEX 0x93 #define SDVO_HBUF_INDEX_ELD 0 #define SDVO_HBUF_INDEX_AVI_IF 1 -- 2.21.0

5 years, 12 months

3
2
0 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror