{"push_id":2515302432,"size":213,"distinct_size":213,"ref":"refs/heads/master","head":"95b6951e224a14d49c8ebe11f4f3d208c113c26c","before":"220648e1fe21f6b10bad6f65c1385296cf0ab579","commits":[{"sha":"9f591ae60e1be026901398ef99eede91237aa3a1","author":{"name":"Gerd Hoffmann","email":"cad73e70082427fddc9be3baaf34e698dffd21c0@redhat.com"},"message":"drm/i915/gvt: throw error on unhandled vfio ioctls\n\nOn unknown/unhandled ioctls the driver should return an error, so\nuserspace knows it tried to use something unsupported.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Gerd Hoffmann <kraxel@redhat.com>\nReviewed-by: Alex Williamson <alex.williamson@redhat.com>\nSigned-off-by: Zhenyu Wang <zhenyuw@linux.intel.com>","distinct":true,"url":"https://api.github.com/repos/GulajavaMinistudio/linux/commits/9f591ae60e1be026901398ef99eede91237aa3a1"},{"sha":"ac0fd9cfc837d1d30cb958dc34769e90aad43078","author":{"name":"Gustavo A. R. Silva","email":"beac5f8171fcde5e2ec734cc5d25d03e7362e8de@embeddedor.com"},"message":"drm/i915/gvt: Mark expected switch fall-through in handle_g2v_notification\n\nIn preparation to enabling -Wimplicit-fallthrough, mark switch cases\nwhere we are expecting to fall through.\n\nAddresses-Coverity-ID: 1466154 (\"Missing break in switch\")\nSigned-off-by: Gustavo A. R. Silva <gustavo@embeddedor.com>\nSigned-off-by: Zhenyu Wang <zhenyuw@linux.intel.com>","distinct":true,"url":"https://api.github.com/repos/GulajavaMinistudio/linux/commits/ac0fd9cfc837d1d30cb958dc34769e90aad43078"},{"sha":"5da795b061a139b55d7393e79c7af688c58a4267","author":{"name":"Zhipeng Gong","email":"d21a7e93d30c7901e891563e12a4450ad156a8c6@intel.com"},"message":"drm/i915/gvt: Make MI_USER_INTERRUPT nop in cmd parser\n\nGVT-g dispatches request to host i915 and depends on i915 notify\nring interrupt mechanism to check completion of request.\nFor now MI_USER_INTERRUPT in guest requests is passed through\nin GVT-g cmd parser and i915 does not use it, which causes\nunnecessary interrupt handling in i915.\nOn the other hand, if several requests from guest are combined into\none request in and contain MI_USER_INTERRUPT in the middle of\ncombined request. GVT-g still has to wait on the whole request to\ncomplete to inject user interrupts to guest.\n\nThis patch makes all the MI_USER_INTERRUPT nop to save some interrupt\nhandling.\n\nHere is test result to run glmark2 on guest for 10 seconds:\nhost master interrupts number is reduced from 16021 to 11162\nhost user interrupts number is reduced from 7936 to 3536\n\nv2:\n- revise commit message. (Kevin)\n\nReviewed-by: Kevin Tian <kevin.tian@intel.com>\nSigned-off-by: Zhipeng Gong <zhipeng.gong@intel.com>\nSigned-off-by: Zhenyu Wang <zhenyuw@linux.intel.com>","distinct":true,"url":"https://api.github.com/repos/GulajavaMinistudio/linux/commits/5da795b061a139b55d7393e79c7af688c58a4267"},{"sha":"7598e8700e9a507496660219924ca8c5aa3088d6","author":{"name":"Changbin Du","email":"cdcef747db330b5520897b70efe55c0a15209511@intel.com"},"message":"drm/i915/gvt: Missed to cancel dma map for ggtt entries\n\nWe have canceled dma map for ppgtt entries. Also we need to do it for\nggtt entries when them are invalidated.\n\nThis can fix task hung issue as:\n[13517.791767] INFO: task gvt_service_thr:1081 blocked for more than 120 seconds.\n[13517.792584] Not tainted 4.14.15+ #3\n[13517.793417] \"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n[13517.794267] gvt_service_thr D 0 1081 2 0x80000000\n[13517.795132] Call Trace:\n[13517.795996] ? __schedule+0x493/0x77b\n[13517.796859] schedule+0x79/0x82\n[13517.797740] schedule_preempt_disabled+0x5/0x6\n[13517.798614] __mutex_lock.isra.0+0x2b5/0x445\n[13517.799504] ? __switch_to_asm+0x24/0x60\n[13517.800381] ? intel_gvt_cleanup+0x10/0x10\n[13517.801261] ? intel_gvt_schedule+0x19/0x2b9\n[13517.802107] intel_gvt_schedule+0x19/0x2b9\n[13517.802954] ? intel_gvt_cleanup+0x10/0x10\n[13517.803824] gvt_service_thread+0xe3/0x10d\n[13517.804704] ? wait_woken+0x68/0x68\n[13517.805588] kthread+0x118/0x120\n[13517.806478] ? kthread_create_on_node+0x3a/0x3a\n[13517.807381] ? call_usermodehelper_exec_async+0x113/0x11a\n[13517.808307] ret_from_fork+0x35/0x40\n\nv3: split out ggtt reset case.\nv2: also unmap ggtt during reset.\n\nSigned-off-by: Changbin Du <changbin.du@intel.com>\nSigned-off-by: Zhenyu Wang <zhenyuw@linux.intel.com>","distinct":true,"url":"https://api.github.com/repos/GulajavaMinistudio/linux/commits/7598e8700e9a507496660219924ca8c5aa3088d6"},{"sha":"f4c43db356198d8091442f593871b0beb5c139b2","author":{"name":"Changbin Du","email":"cdcef747db330b5520897b70efe55c0a15209511@intel.com"},"message":"drm/i915/gvt: Cancel dma map when resetting ggtt entries\n\nDitto, don't forget ggtt entries during reset.\n\nSigned-off-by: Changbin Du <changbin.du@intel.com>\nSigned-off-by: Zhenyu Wang <zhenyuw@linux.intel.com>","distinct":true,"url":"https://api.github.com/repos/GulajavaMinistudio/linux/commits/f4c43db356198d8091442f593871b0beb5c139b2"},{"sha":"a733390f9a79876635013e57da25f91b6e78ffe6","author":{"name":"Xiong Zhang","email":"887154684953c1d7bc9f653d05b20c8de98c15bc@intel.com"},"message":"drm/i915/gvt: Delete redundant error message in fb_decode.c\n\nMuch error message exist in host dmesg when guest boot up with local\ndisplay enabled.\n[  167.680011] gvt: vgpu 1: invalid range gmadr 0x0 size 0x0\n[  167.680013] gvt: vgpu 1: invalid gma address: 0\n\nThe second error line duplicate with the first error line, so this\npatch remove this redundant error message and make the next error\nmessage much clearer.\n\nSigned-off-by: Xiong Zhang <xiong.y.zhang@intel.com>\nSigned-off-by: Zhenyu Wang <zhenyuw@linux.intel.com>","distinct":true,"url":"https://api.github.com/repos/GulajavaMinistudio/linux/commits/a733390f9a79876635013e57da25f91b6e78ffe6"},{"sha":"65eff272330c72689fb5e20dd6491826fd87a39c","author":{"name":"Xiong Zhang","email":"887154684953c1d7bc9f653d05b20c8de98c15bc@intel.com"},"message":"drm/i915/gvt: Disable primary/sprite/cursor plane at virtual display initialization\n\nMuch error exist in host dmesg during guest boot up with loca display\nenabled.\ngvt: vgpu 1: invalid range gmadr 0x0 size 0x0\n\nThis error happens when qemu get dmabuf info in case that the virtual\ndisplay plane is enabled but its base address is an invalid 0, such\ncase may be true before guest enable its plane. At this moment, its\nstate is copied from host where the plane may be enabled.\n\nThis patch disable primary/sprite/cursor plane at virtual display\ninitialization, so intel_vgpu_decode_primary/cursor/sprite could\nreturn early as plane is disabled, then plane base check is skipped and\nerror message disapper.\n\nSigned-off-by: Xiong Zhang <xiong.y.zhang@intel.com>\nSigned-off-by: Zhenyu Wang <zhenyuw@linux.intel.com>","distinct":true,"url":"https://api.github.com/repos/GulajavaMinistudio/linux/commits/65eff272330c72689fb5e20dd6491826fd87a39c"},{"sha":"10996f802109c83421ca30556cfe36ffc3bebae3","author":{"name":"Tina Zhang","email":"62198d639fa8e461845c7cb6bea9c787fde04863@intel.com"},"message":"drm/i915/gvt: Add drm_format_mod update\n\nAdd drm_format_mod update, which is omitted.\n\nFixes: e546e281(\"drm/i915/gvt: Dmabuf support for GVT-g\")\nCc: stable@vger.kernel.org\nSigned-off-by: Tina Zhang <tina.zhang@intel.com>\nSigned-off-by: Zhenyu Wang <zhenyuw@linux.intel.com>","distinct":true,"url":"https://api.github.com/repos/GulajavaMinistudio/linux/commits/10996f802109c83421ca30556cfe36ffc3bebae3"},{"sha":"fbcc85974a49e9a6f3deb67fe3a0d4fb1af49983","author":{"name":"Joonas Lahtinen","email":"a11ca63949063c01fa551bf27c25e0fe898387c4@linux.intel.com"},"message":"Merge tag 'gvt-fixes-2018-04-03' of https://github.com/intel/gvt-linux into drm-intel-next-fixes\n\ngvt-fixes-2018-04-03\n\n- fix unhandled vfio ioctl return value (Gerd)\n- no-op user interrupt for vGPU (Zhipeng)\n- fix ggtt dma unmap (Changbin)\n- fix warning in fb decoder (Xiong)\n- dmabuf drm_format_mod fix (Tina)\n- misc cleanup\n\nSigned-off-by: Joonas Lahtinen <joonas.lahtinen@linux.intel.com>\nLink: https://patchwork.freedesktop.org/patch/msgid/20180403072835.kltk47gcwy7kuenv@zhen-hp.sh.intel.com","distinct":true,"url":"https://api.github.com/repos/GulajavaMinistudio/linux/commits/fbcc85974a49e9a6f3deb67fe3a0d4fb1af49983"},{"sha":"38057aa1639b74d5c1e0dc1ca7c22bc7a31de714","author":{"name":"Chris Wilson","email":"711c73f64afdce07b7e38039a96d2224209e9a6c@chris-wilson.co.uk"},"message":"drm/i915/execlists: Clear user-active flag on preemption completion\n\nWhen cancelling the requests and clearing out the ports following a\nsuccessful preemption completion, also clear the active flag. I had\nassumed that all preemptions would be followed by an immediate dequeue\n(preserving the active user flag), but under rare circumstances we may\nbe triggering a preemption for the second port only for it to have\ncompleted before the preemotion kicks in; leaving execlists->active set\neven though the system is now idle.\n\nWe can clear the flag inside the common execlists_cancel_port_requests()\nas the other users also expect the semantics of active being cleared.\n\nFixes: f6322eddaff7 (\"drm/i915/preemption: Allow preemption between submission ports\")\nSigned-off-by: Chris Wilson <chris@chris-wilson.co.uk>\nCc: Michał Winiarski <michal.winiarski@intel.com>\nCc: Michel Thierry <michel.thierry@intel.com>\nCc: Mika Kuoppala <mika.kuoppala@linux.intel.com>\nCc: Tvrtko Ursulin <tvrtko.ursulin@intel.com>\nReviewed-by: Mika Kuoppala <mika.kuoppala@linux.intel.com>\nLink: https://patchwork.freedesktop.org/patch/msgid/20180324125829.27026-1-chris@chris-wilson.co.uk\n(cherry picked from commit eed7ec52f214bac2f25395ccaad610fbeb842a6e)\nSigned-off-by: Joonas Lahtinen <joonas.lahtinen@linux.intel.com>","distinct":true,"url":"https://api.github.com/repos/GulajavaMinistudio/linux/commits/38057aa1639b74d5c1e0dc1ca7c22bc7a31de714"},{"sha":"876c27314ce51fe7e7e2aeb24a6448da1a26c78f","author":{"name":"Florian Westphal","email":"cef439e78636cdab99cd2923826c5065a0743e5b@strlen.de"},"message":"netfilter: nf_conntrack_sip: allow duplicate SDP expectations\n\nCallum Sinclair reported SIP IP Phone errors that he tracked down to\nsuch phones sending session descriptions for different media types but\nwith same port numbers.\n\nThe expect core will only 'refresh' existing expectation if it is\nfrom same master AND same expectation class (media type).\nAs expectation class is different, we get an error.\n\nThe SIP connection tracking code will then\n\n1). drop the SDP packet\n2). if an rtp expectation was already installed successfully,\n    error on rtcp expectation will cancel the rtp one.\n\nMake the expect core report back to caller when the conflict is due\nto different expectation class and have SIP tracker ignore soft-error.\n\nReported-by: Callum Sinclair <Callum.Sinclair@alliedtelesis.co.nz>\nTested-by: Callum Sinclair <Callum.Sinclair@alliedtelesis.co.nz>\nSigned-off-by: Florian Westphal <fw@strlen.de>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/GulajavaMinistudio/linux/commits/876c27314ce51fe7e7e2aeb24a6448da1a26c78f"},{"sha":"5c64576a77894a50be80be0024bed27171b55989","author":{"name":"Julian Anastasov","email":"84572ef2253ef81e2d8cd8c65849f4d9a3881f47@ssi.bg"},"message":"ipvs: fix rtnl_lock lockups caused by start_sync_thread\n\nsyzkaller reports for wrong rtnl_lock usage in sync code [1] and [2]\n\nWe have 2 problems in start_sync_thread if error path is\ntaken, eg. on memory allocation error or failure to configure\nsockets for mcast group or addr/port binding:\n\n1. recursive locking: holding rtnl_lock while calling sock_release\nwhich in turn calls again rtnl_lock in ip_mc_drop_socket to leave\nthe mcast group, as noticed by Florian Westphal. Additionally,\nsock_release can not be called while holding sync_mutex (ABBA\ndeadlock).\n\n2. task hung: holding rtnl_lock while calling kthread_stop to\nstop the running kthreads. As the kthreads do the same to leave\nthe mcast group (sock_release -> ip_mc_drop_socket -> rtnl_lock)\nthey hang.\n\nFix the problems by calling rtnl_unlock early in the error path,\nnow sock_release is called after unlocking both mutexes.\n\nProblem 3 (task hung reported by syzkaller [2]) is variant of\nproblem 2: use _trylock to prevent one user to call rtnl_lock and\nthen while waiting for sync_mutex to block kthreads that execute\nsock_release when they are stopped by stop_sync_thread.\n\n[1]\nIPVS: stopping backup sync thread 4500 ...\nWARNING: possible recursive locking detected\n4.16.0-rc7+ #3 Not tainted\n--------------------------------------------\nsyzkaller688027/4497 is trying to acquire lock:\n  (rtnl_mutex){+.+.}, at: [<00000000bb14d7fb>] rtnl_lock+0x17/0x20\nnet/core/rtnetlink.c:74\n\nbut task is already holding lock:\nIPVS: stopping backup sync thread 4495 ...\n  (rtnl_mutex){+.+.}, at: [<00000000bb14d7fb>] rtnl_lock+0x17/0x20\nnet/core/rtnetlink.c:74\n\nother info that might help us debug this:\n  Possible unsafe locking scenario:\n\n        CPU0\n        ----\n   lock(rtnl_mutex);\n   lock(rtnl_mutex);\n\n  *** DEADLOCK ***\n\n  May be due to missing lock nesting notation\n\n2 locks held by syzkaller688027/4497:\n  #0:  (rtnl_mutex){+.+.}, at: [<00000000bb14d7fb>] rtnl_lock+0x17/0x20\nnet/core/rtnetlink.c:74\n  #1:  (ipvs->sync_mutex){+.+.}, at: [<00000000703f78e3>]\ndo_ip_vs_set_ctl+0x10f8/0x1cc0 net/netfilter/ipvs/ip_vs_ctl.c:2388\n\nstack backtrace:\nCPU: 1 PID: 4497 Comm: syzkaller688027 Not tainted 4.16.0-rc7+ #3\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS\nGoogle 01/01/2011\nCall Trace:\n  __dump_stack lib/dump_stack.c:17 [inline]\n  dump_stack+0x194/0x24d lib/dump_stack.c:53\n  print_deadlock_bug kernel/locking/lockdep.c:1761 [inline]\n  check_deadlock kernel/locking/lockdep.c:1805 [inline]\n  validate_chain kernel/locking/lockdep.c:2401 [inline]\n  __lock_acquire+0xe8f/0x3e00 kernel/locking/lockdep.c:3431\n  lock_acquire+0x1d5/0x580 kernel/locking/lockdep.c:3920\n  __mutex_lock_common kernel/locking/mutex.c:756 [inline]\n  __mutex_lock+0x16f/0x1a80 kernel/locking/mutex.c:893\n  mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:908\n  rtnl_lock+0x17/0x20 net/core/rtnetlink.c:74\n  ip_mc_drop_socket+0x88/0x230 net/ipv4/igmp.c:2643\n  inet_release+0x4e/0x1c0 net/ipv4/af_inet.c:413\n  sock_release+0x8d/0x1e0 net/socket.c:595\n  start_sync_thread+0x2213/0x2b70 net/netfilter/ipvs/ip_vs_sync.c:1924\n  do_ip_vs_set_ctl+0x1139/0x1cc0 net/netfilter/ipvs/ip_vs_ctl.c:2389\n  nf_sockopt net/netfilter/nf_sockopt.c:106 [inline]\n  nf_setsockopt+0x67/0xc0 net/netfilter/nf_sockopt.c:115\n  ip_setsockopt+0x97/0xa0 net/ipv4/ip_sockglue.c:1261\n  udp_setsockopt+0x45/0x80 net/ipv4/udp.c:2406\n  sock_common_setsockopt+0x95/0xd0 net/core/sock.c:2975\n  SYSC_setsockopt net/socket.c:1849 [inline]\n  SyS_setsockopt+0x189/0x360 net/socket.c:1828\n  do_syscall_64+0x281/0x940 arch/x86/entry/common.c:287\n  entry_SYSCALL_64_after_hwframe+0x42/0xb7\nRIP: 0033:0x446a69\nRSP: 002b:00007fa1c3a64da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036\nRAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000446a69\nRDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003\nRBP: 00000000006e29fc R08: 0000000000000018 R09: 0000000000000000\nR10: 00000000200000c0 R11: 0000000000000246 R12: 00000000006e29f8\nR13: 00676e697279656b R14: 00007fa1c3a659c0 R15: 00000000006e2b60\n\n[2]\nIPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 4,\nid = 0\nIPVS: stopping backup sync thread 25415 ...\nINFO: task syz-executor7:25421 blocked for more than 120 seconds.\n       Not tainted 4.16.0-rc6+ #284\n\"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\nsyz-executor7   D23688 25421   4408 0x00000004\nCall Trace:\n  context_switch kernel/sched/core.c:2862 [inline]\n  __schedule+0x8fb/0x1ec0 kernel/sched/core.c:3440\n  schedule+0xf5/0x430 kernel/sched/core.c:3499\n  schedule_timeout+0x1a3/0x230 kernel/time/timer.c:1777\n  do_wait_for_common kernel/sched/completion.c:86 [inline]\n  __wait_for_common kernel/sched/completion.c:107 [inline]\n  wait_for_common kernel/sched/completion.c:118 [inline]\n  wait_for_completion+0x415/0x770 kernel/sched/completion.c:139\n  kthread_stop+0x14a/0x7a0 kernel/kthread.c:530\n  stop_sync_thread+0x3d9/0x740 net/netfilter/ipvs/ip_vs_sync.c:1996\n  do_ip_vs_set_ctl+0x2b1/0x1cc0 net/netfilter/ipvs/ip_vs_ctl.c:2394\n  nf_sockopt net/netfilter/nf_sockopt.c:106 [inline]\n  nf_setsockopt+0x67/0xc0 net/netfilter/nf_sockopt.c:115\n  ip_setsockopt+0x97/0xa0 net/ipv4/ip_sockglue.c:1253\n  sctp_setsockopt+0x2ca/0x63e0 net/sctp/socket.c:4154\n  sock_common_setsockopt+0x95/0xd0 net/core/sock.c:3039\n  SYSC_setsockopt net/socket.c:1850 [inline]\n  SyS_setsockopt+0x189/0x360 net/socket.c:1829\n  do_syscall_64+0x281/0x940 arch/x86/entry/common.c:287\n  entry_SYSCALL_64_after_hwframe+0x42/0xb7\nRIP: 0033:0x454889\nRSP: 002b:00007fc927626c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036\nRAX: ffffffffffffffda RBX: 00007fc9276276d4 RCX: 0000000000454889\nRDX: 000000000000048c RSI: 0000000000000000 RDI: 0000000000000017\nRBP: 000000000072bf58 R08: 0000000000000018 R09: 0000000000000000\nR10: 0000000020000000 R11: 0000000000000246 R12: 00000000ffffffff\nR13: 000000000000051c R14: 00000000006f9b40 R15: 0000000000000001\n\nShowing all locks held in the system:\n2 locks held by khungtaskd/868:\n  #0:  (rcu_read_lock){....}, at: [<00000000a1a8f002>]\ncheck_hung_uninterruptible_tasks kernel/hung_task.c:175 [inline]\n  #0:  (rcu_read_lock){....}, at: [<00000000a1a8f002>] watchdog+0x1c5/0xd60\nkernel/hung_task.c:249\n  #1:  (tasklist_lock){.+.+}, at: [<0000000037c2f8f9>]\ndebug_show_all_locks+0xd3/0x3d0 kernel/locking/lockdep.c:4470\n1 lock held by rsyslogd/4247:\n  #0:  (&f->f_pos_lock){+.+.}, at: [<000000000d8d6983>]\n__fdget_pos+0x12b/0x190 fs/file.c:765\n2 locks held by getty/4338:\n  #0:  (&tty->ldisc_sem){++++}, at: [<00000000bee98654>]\nldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365\n  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<00000000c1d180aa>]\nn_tty_read+0x2ef/0x1a40 drivers/tty/n_tty.c:2131\n2 locks held by getty/4339:\n  #0:  (&tty->ldisc_sem){++++}, at: [<00000000bee98654>]\nldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365\n  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<00000000c1d180aa>]\nn_tty_read+0x2ef/0x1a40 drivers/tty/n_tty.c:2131\n2 locks held by getty/4340:\n  #0:  (&tty->ldisc_sem){++++}, at: [<00000000bee98654>]\nldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365\n  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<00000000c1d180aa>]\nn_tty_read+0x2ef/0x1a40 drivers/tty/n_tty.c:2131\n2 locks held by getty/4341:\n  #0:  (&tty->ldisc_sem){++++}, at: [<00000000bee98654>]\nldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365\n  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<00000000c1d180aa>]\nn_tty_read+0x2ef/0x1a40 drivers/tty/n_tty.c:2131\n2 locks held by getty/4342:\n  #0:  (&tty->ldisc_sem){++++}, at: [<00000000bee98654>]\nldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365\n  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<00000000c1d180aa>]\nn_tty_read+0x2ef/0x1a40 drivers/tty/n_tty.c:2131\n2 locks held by getty/4343:\n  #0:  (&tty->ldisc_sem){++++}, at: [<00000000bee98654>]\nldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365\n  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<00000000c1d180aa>]\nn_tty_read+0x2ef/0x1a40 drivers/tty/n_tty.c:2131\n2 locks held by getty/4344:\n  #0:  (&tty->ldisc_sem){++++}, at: [<00000000bee98654>]\nldsem_down_read+0x37/0x40 drivers/tty/tty_ldsem.c:365\n  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<00000000c1d180aa>]\nn_tty_read+0x2ef/0x1a40 drivers/tty/n_tty.c:2131\n3 locks held by kworker/0:5/6494:\n  #0:  ((wq_completion)\"%s\"(\"ipv6_addrconf\")){+.+.}, at:\n[<00000000a062b18e>] work_static include/linux/workqueue.h:198 [inline]\n  #0:  ((wq_completion)\"%s\"(\"ipv6_addrconf\")){+.+.}, at:\n[<00000000a062b18e>] set_work_data kernel/workqueue.c:619 [inline]\n  #0:  ((wq_completion)\"%s\"(\"ipv6_addrconf\")){+.+.}, at:\n[<00000000a062b18e>] set_work_pool_and_clear_pending kernel/workqueue.c:646\n[inline]\n  #0:  ((wq_completion)\"%s\"(\"ipv6_addrconf\")){+.+.}, at:\n[<00000000a062b18e>] process_one_work+0xb12/0x1bb0 kernel/workqueue.c:2084\n  #1:  ((addr_chk_work).work){+.+.}, at: [<00000000278427d5>]\nprocess_one_work+0xb89/0x1bb0 kernel/workqueue.c:2088\n  #2:  (rtnl_mutex){+.+.}, at: [<00000000066e35ac>] rtnl_lock+0x17/0x20\nnet/core/rtnetlink.c:74\n1 lock held by syz-executor7/25421:\n  #0:  (ipvs->sync_mutex){+.+.}, at: [<00000000d414a689>]\ndo_ip_vs_set_ctl+0x277/0x1cc0 net/netfilter/ipvs/ip_vs_ctl.c:2393\n2 locks held by syz-executor7/25427:\n  #0:  (rtnl_mutex){+.+.}, at: [<00000000066e35ac>] rtnl_lock+0x17/0x20\nnet/core/rtnetlink.c:74\n  #1:  (ipvs->sync_mutex){+.+.}, at: [<00000000e6d48489>]\ndo_ip_vs_set_ctl+0x10f8/0x1cc0 net/netfilter/ipvs/ip_vs_ctl.c:2388\n1 lock held by syz-executor7/25435:\n  #0:  (rtnl_mutex){+.+.}, at: [<00000000066e35ac>] rtnl_lock+0x17/0x20\nnet/core/rtnetlink.c:74\n1 lock held by ipvs-b:2:0/25415:\n  #0:  (rtnl_mutex){+.+.}, at: [<00000000066e35ac>] rtnl_lock+0x17/0x20\nnet/core/rtnetlink.c:74\n\nReported-and-tested-by: syzbot+a46d6abf9d56b1365a72@syzkaller.appspotmail.com\nReported-and-tested-by: syzbot+5fe074c01b2032ce9618@syzkaller.appspotmail.com\nFixes: e0b26cc997d5 (\"ipvs: call rtnl_lock early\")\nSigned-off-by: Julian Anastasov <ja@ssi.bg>\nSigned-off-by: Simon Horman <horms@verge.net.au>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/GulajavaMinistudio/linux/commits/5c64576a77894a50be80be0024bed27171b55989"},{"sha":"3f1e53abff84cf40b1adb3455d480dd295bf42e8","author":{"name":"Florian Westphal","email":"cef439e78636cdab99cd2923826c5065a0743e5b@strlen.de"},"message":"netfilter: ebtables: don't attempt to allocate 0-sized compat array\n\nDmitry reports 32bit ebtables on 64bit kernel got broken by\na recent change that returns -EINVAL when ruleset has no entries.\n\nebtables however only counts user-defined chains, so for the\ninitial table nentries will be 0.\n\nDon't try to allocate the compat array in this case, as no user\ndefined rules exist no rule will need 64bit translation.\n\nReported-by: Dmitry Vyukov <dvyukov@google.com>\nFixes: 7d7d7e02111e9 (\"netfilter: compat: reject huge allocation requests\")\nSigned-off-by: Florian Westphal <fw@strlen.de>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/GulajavaMinistudio/linux/commits/3f1e53abff84cf40b1adb3455d480dd295bf42e8"},{"sha":"c0db1b677e1d584fab5d7ac76a32e1c0157542e0","author":{"name":"Daniel J Blueman","email":"3d0f3b9ddcacec30c4008c5e030e6c13a478cb4f@quora.org"},"message":"drm/vc4: Fix memory leak during BO teardown\n\nDuring BO teardown, an indirect list 'uniform_addr_offsets' wasn't being\nfreed leading to leaking many 128B allocations. Fix the memory leak by\nreleasing it at teardown time.\n\nCc: stable@vger.kernel.org\nFixes: 6d45c81d229d (\"drm/vc4: Add support for branching in shader validation.\")\nSigned-off-by: Daniel J Blueman <daniel@quora.org>\nSigned-off-by: Eric Anholt <eric@anholt.net>\nReviewed-by: Eric Anholt <eric@anholt.net>\nLink: https://patchwork.freedesktop.org/patch/msgid/20180402071035.25356-1-daniel@quora.org","distinct":true,"url":"https://api.github.com/repos/GulajavaMinistudio/linux/commits/c0db1b677e1d584fab5d7ac76a32e1c0157542e0"},{"sha":"0abf854d7cbbb405e39e0f93d5c1da98dca24bc0","author":{"name":"Anders Roxell","email":"b4e8e89057bc64bc4f9625a4a821c9ac177a7ed2@linaro.org"},"message":"selftests: bpf: update .gitignore with missing generated files\n\nSigned-off-by: Anders Roxell <anders.roxell@linaro.org>\nSigned-off-by: Daniel Borkmann <daniel@iogearbox.net>","distinct":true,"url":"https://api.github.com/repos/GulajavaMinistudio/linux/commits/0abf854d7cbbb405e39e0f93d5c1da98dca24bc0"},{"sha":"3a38bb98d9abdc3856f26b5ed4332803065cd7cf","author":{"name":"Yonghong Song","email":"e76892bbe783db2f627de1232e139db4de43da60@fb.com"},"message":"bpf/tracing: fix a deadlock in perf_event_detach_bpf_prog\n\nsyzbot reported a possible deadlock in perf_event_detach_bpf_prog.\nThe error details:\n  ======================================================\n  WARNING: possible circular locking dependency detected\n  4.16.0-rc7+ #3 Not tainted\n  ------------------------------------------------------\n  syz-executor7/24531 is trying to acquire lock:\n   (bpf_event_mutex){+.+.}, at: [<000000008a849b07>] perf_event_detach_bpf_prog+0x92/0x3d0 kernel/trace/bpf_trace.c:854\n\n  but task is already holding lock:\n   (&mm->mmap_sem){++++}, at: [<0000000038768f87>] vm_mmap_pgoff+0x198/0x280 mm/util.c:353\n\n  which lock already depends on the new lock.\n\n  the existing dependency chain (in reverse order) is:\n\n  -> #1 (&mm->mmap_sem){++++}:\n       __might_fault+0x13a/0x1d0 mm/memory.c:4571\n       _copy_to_user+0x2c/0xc0 lib/usercopy.c:25\n       copy_to_user include/linux/uaccess.h:155 [inline]\n       bpf_prog_array_copy_info+0xf2/0x1c0 kernel/bpf/core.c:1694\n       perf_event_query_prog_array+0x1c7/0x2c0 kernel/trace/bpf_trace.c:891\n       _perf_ioctl kernel/events/core.c:4750 [inline]\n       perf_ioctl+0x3e1/0x1480 kernel/events/core.c:4770\n       vfs_ioctl fs/ioctl.c:46 [inline]\n       do_vfs_ioctl+0x1b1/0x1520 fs/ioctl.c:686\n       SYSC_ioctl fs/ioctl.c:701 [inline]\n       SyS_ioctl+0x8f/0xc0 fs/ioctl.c:692\n       do_syscall_64+0x281/0x940 arch/x86/entry/common.c:287\n       entry_SYSCALL_64_after_hwframe+0x42/0xb7\n\n  -> #0 (bpf_event_mutex){+.+.}:\n       lock_acquire+0x1d5/0x580 kernel/locking/lockdep.c:3920\n       __mutex_lock_common kernel/locking/mutex.c:756 [inline]\n       __mutex_lock+0x16f/0x1a80 kernel/locking/mutex.c:893\n       mutex_lock_nested+0x16/0x20 kernel/locking/mutex.c:908\n       perf_event_detach_bpf_prog+0x92/0x3d0 kernel/trace/bpf_trace.c:854\n       perf_event_free_bpf_prog kernel/events/core.c:8147 [inline]\n       _free_event+0xbdb/0x10f0 kernel/events/core.c:4116\n       put_event+0x24/0x30 kernel/events/core.c:4204\n       perf_mmap_close+0x60d/0x1010 kernel/events/core.c:5172\n       remove_vma+0xb4/0x1b0 mm/mmap.c:172\n       remove_vma_list mm/mmap.c:2490 [inline]\n       do_munmap+0x82a/0xdf0 mm/mmap.c:2731\n       mmap_region+0x59e/0x15a0 mm/mmap.c:1646\n       do_mmap+0x6c0/0xe00 mm/mmap.c:1483\n       do_mmap_pgoff include/linux/mm.h:2223 [inline]\n       vm_mmap_pgoff+0x1de/0x280 mm/util.c:355\n       SYSC_mmap_pgoff mm/mmap.c:1533 [inline]\n       SyS_mmap_pgoff+0x462/0x5f0 mm/mmap.c:1491\n       SYSC_mmap arch/x86/kernel/sys_x86_64.c:100 [inline]\n       SyS_mmap+0x16/0x20 arch/x86/kernel/sys_x86_64.c:91\n       do_syscall_64+0x281/0x940 arch/x86/entry/common.c:287\n       entry_SYSCALL_64_after_hwframe+0x42/0xb7\n\n  other info that might help us debug this:\n\n   Possible unsafe locking scenario:\n\n         CPU0                    CPU1\n         ----                    ----\n    lock(&mm->mmap_sem);\n                                 lock(bpf_event_mutex);\n                                 lock(&mm->mmap_sem);\n    lock(bpf_event_mutex);\n\n   *** DEADLOCK ***\n  ======================================================\n\nThe bug is introduced by Commit f371b304f12e (\"bpf/tracing: allow\nuser space to query prog array on the same tp\") where copy_to_user,\nwhich requires mm->mmap_sem, is called inside bpf_event_mutex lock.\nAt the same time, during perf_event file descriptor close,\nmm->mmap_sem is held first and then subsequent\nperf_event_detach_bpf_prog needs bpf_event_mutex lock.\nSuch a senario caused a deadlock.\n\nAs suggested by Daniel, moving copy_to_user out of the\nbpf_event_mutex lock should fix the problem.\n\nFixes: f371b304f12e (\"bpf/tracing: allow user space to query prog array on the same tp\")\nReported-by: syzbot+dc5ca0e4c9bfafaf2bae@syzkaller.appspotmail.com\nSigned-off-by: Yonghong Song <yhs@fb.com>\nSigned-off-by: Daniel Borkmann <daniel@iogearbox.net>","distinct":true,"url":"https://api.github.com/repos/GulajavaMinistudio/linux/commits/3a38bb98d9abdc3856f26b5ed4332803065cd7cf"},{"sha":"1f5781725dcbb026438e77091c91a94f678c3522","author":{"name":"Tetsuo Handa","email":"3d00b54ad717112934d0b63b7ac2975b44022a61@I-love.SAKURA.ne.jp"},"message":"commoncap: Handle memory allocation failure.\n\nsyzbot is reporting NULL pointer dereference at xattr_getsecurity() [1],\nfor cap_inode_getsecurity() is returning sizeof(struct vfs_cap_data) when\nmemory allocation failed. Return -ENOMEM if memory allocation failed.\n\n[1] https://syzkaller.appspot.com/bug?id=a55ba438506fe68649a5f50d2d82d56b365e0107\n\nSigned-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>\nFixes: 8db6c34f1dbc8e06 (\"Introduce v3 namespaced file capabilities\")\nReported-by: syzbot <syzbot+9369930ca44f29e60e2d@syzkaller.appspotmail.com>\nCc: stable <stable@vger.kernel.org> # 4.14+\nAcked-by: Serge E. Hallyn <serge@hallyn.com>\nAcked-by: James Morris <james.morris@microsoft.com>\nSigned-off-by: Eric W. Biederman <ebiederm@xmission.com>","distinct":true,"url":"https://api.github.com/repos/GulajavaMinistudio/linux/commits/1f5781725dcbb026438e77091c91a94f678c3522"},{"sha":"cf43ae63c024971e6df94665e829c01c22202a19","author":{"name":"Jack Ma","email":"b65610df84a8400e3c8235b421051c651c31e975@alliedtelesis.co.nz"},"message":"netfilter: xt_connmark: Add bit mapping for bit-shift operation.\n\nWith the addition of bit-shift operations, we are able to shift\nct/skbmark based on user requirements. However, this change might also\ncause the most left/right hand- side mark to be accidentially lost\nduring shift operations.\n\nThis patch adds the ability to 'grep' certain bits based on ctmask or\nnfmask out of the original mark. Then, apply shift operations to achieve\na new mapping between ctmark and skb->mark.\n\nFor example: If someone would like save the fourth F bits of ctmark\n0xFFF(F)000F into the seventh hexadecimal (0) skb->mark 0xABC000(0)E.\n\n\tnew_targetmark = (ctmark & ctmask) >> 12;\n\t(new) skb->mark = (skb->mark &~nfmask) ^\n        \t           new_targetmark;\n\nThis will preserve the other bits that are not related to this\noperation.\n\nFixes: 472a73e00757 (\"netfilter: xt_conntrack: Support bit-shifting for CONNMARK & MARK targets.\")\nReviewed-by: Florian Westphal <fw@strlen.de>\nSigned-off-by: Jack Ma <jack.ma@alliedtelesis.co.nz>\nSigned-off-by: Pablo Neira Ayuso <pablo@netfilter.org>","distinct":true,"url":"https://api.github.com/repos/GulajavaMinistudio/linux/commits/cf43ae63c024971e6df94665e829c01c22202a19"},{"sha":"7ecb46e9ee9af18e304eb9e7d6804c59a408e846","author":{"name":"Fabián Inostroza","email":"c4fa1b320adb2a28ef602c91200b88b1625d1fd0@gmail.com"},"message":"ALSA: line6: Use correct endpoint type for midi output\n\nSending MIDI messages to a PODxt through the USB connection shows\n\"usb_submit_urb failed\" in dmesg and the message is not received by\nthe POD.\n\nThe error is caused because in the funcion send_midi_async() in midi.c\nthere is a call to usb_sndbulkpipe() for endpoint 3 OUT, but the PODxt\nUSB descriptor shows that this endpoint it's an interrupt endpoint.\n\nPatch tested with PODxt only.\n\n[ The bug has been present from the very beginning in the staging\n  driver time, but Fixes below points to the commit moving to sound/\n  directory so that the fix can be cleanly applied -- tiwai ]\n\nFixes: 61864d844c29 (\"ALSA: move line6 usb driver into sound/usb\")\nSigned-off-by: Fabián Inostroza <fabianinostroza@udec.cl>\nCc: <stable@vger.kernel.org>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>","distinct":true,"url":"https://api.github.com/repos/GulajavaMinistudio/linux/commits/7ecb46e9ee9af18e304eb9e7d6804c59a408e846"},{"sha":"9dc9a95f03a69ab926d9ff1986ab2087f34a5dce","author":{"name":"Alexey Budankov","email":"7671ec355342d697645bef2490c68f98b6b1129c@linux.intel.com"},"message":"perf stat: Enable 1ms interval for printing event counters values\n\nCurrently print count interval for performance counters values is\nlimited by 10ms so reading the values at frequencies higher than 100Hz\nis restricted by the tool.\n\nThis change makes perf stat -I possible on frequencies up to 1KHz and,\nto some extent, makes perf stat -I to be on-par with perf record\nsampling profiling.\n\nWhen running perf stat -I for monitoring e.g. PCIe uncore counters and\nat the same time profiling some I/O workload by perf record e.g. for\ncpu-cycles and context switches, it is then possible to observe\nconsolidated CPU/OS/IO(Uncore) performance picture for that workload.\n\nTool overhead warning printed when specifying -v option can be missed\ndue to screen scrolling in case you have output to the console\nso message is moved into help available by running perf stat -h.\n\nSigned-off-by: Alexey Budankov <alexey.budankov@linux.intel.com>\nAcked-by: Jiri Olsa <jolsa@kernel.org>\nCc: Alexander Shishkin <alexander.shishkin@linux.intel.com>\nCc: Andi Kleen <ak@linux.intel.com>\nCc: Namhyung Kim <namhyung@kernel.org>\nCc: Peter Zijlstra <peterz@infradead.org>\nLink: http://lkml.kernel.org/r/b842ad6a-d606-32e4-afe5-974071b5198e@linux.intel.com\nSigned-off-by: Arnaldo Carvalho de Melo <acme@redhat.com>","distinct":true,"url":"https://api.github.com/repos/GulajavaMinistudio/linux/commits/9dc9a95f03a69ab926d9ff1986ab2087f34a5dce"}]}
{"actor":{"display_login":"GulajavaMinistudio"}}