android_kernel_samsung_a7y1.../drivers
Imre Deak dfdf674d3c drm/mst: Fix MST sideband up-reply failure handling
[ Upstream commit d8fd3722207f154b53c80eee2cf4977c3fc25a92 ]

Fix the breakage resulting in the stacktrace below, due to tx queue
being full when trying to send an up-reply. txmsg->seqno is -1 in this
case leading to a corruption of the mstb object by

	txmsg->dst->tx_slots[txmsg->seqno] = NULL;

in process_single_up_tx_qlock().

[  +0,005162] [drm:process_single_tx_qlock [drm_kms_helper]] set_hdr_from_dst_qlock: failed to find slot
[  +0,000015] [drm:drm_dp_send_up_ack_reply.constprop.19 [drm_kms_helper]] failed to send msg in q -11
[  +0,000939] BUG: kernel NULL pointer dereference, address: 00000000000005a0
[  +0,006982] #PF: supervisor write access in kernel mode
[  +0,005223] #PF: error_code(0x0002) - not-present page
[  +0,005135] PGD 0 P4D 0
[  +0,002581] Oops: 0002 [#1] PREEMPT SMP NOPTI
[  +0,004359] CPU: 1 PID: 1200 Comm: kworker/u16:3 Tainted: G     U            5.2.0-rc1+ #410
[  +0,008433] Hardware name: Intel Corporation Ice Lake Client Platform/IceLake U DDR4 SODIMM PD RVP, BIOS ICLSFWR1.R00.3175.A00.1904261428 04/26/2019
[  +0,013323] Workqueue: i915-dp i915_digport_work_func [i915]
[  +0,005676] RIP: 0010:queue_work_on+0x19/0x70
[  +0,004372] Code: ff ff ff 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 41 56 49 89 f6 41 55 41 89 fd 41 54 55 53 48 89 d3 9c 5d fa e8 e7 81 0c 00 <f0> 48 0f ba 2b 00 73 31 45 31 e4 f7 c5 00 02 00 00 74 13 e8 cf 7f
[  +0,018750] RSP: 0018:ffffc900007dfc50 EFLAGS: 00010006
[  +0,005222] RAX: 0000000000000046 RBX: 00000000000005a0 RCX: 0000000000000001
[  +0,007133] RDX: 000000000001b608 RSI: 0000000000000000 RDI: ffffffff82121972
[  +0,007129] RBP: 0000000000000202 R08: 0000000000000000 R09: 0000000000000001
[  +0,007129] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88847bfa5096
[  +0,007131] R13: 0000000000000010 R14: ffff88849c08f3f8 R15: 0000000000000000
[  +0,007128] FS:  0000000000000000(0000) GS:ffff88849dc80000(0000) knlGS:0000000000000000
[  +0,008083] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  +0,005749] CR2: 00000000000005a0 CR3: 0000000005210006 CR4: 0000000000760ee0
[  +0,007128] PKRU: 55555554
[  +0,002722] Call Trace:
[  +0,002458]  drm_dp_mst_handle_up_req+0x517/0x540 [drm_kms_helper]
[  +0,006197]  ? drm_dp_mst_hpd_irq+0x5b/0x9c0 [drm_kms_helper]
[  +0,005764]  drm_dp_mst_hpd_irq+0x5b/0x9c0 [drm_kms_helper]
[  +0,005623]  ? intel_dp_hpd_pulse+0x205/0x370 [i915]
[  +0,005018]  intel_dp_hpd_pulse+0x205/0x370 [i915]
[  +0,004836]  i915_digport_work_func+0xbb/0x140 [i915]
[  +0,005108]  process_one_work+0x245/0x610
[  +0,004027]  worker_thread+0x37/0x380
[  +0,003684]  ? process_one_work+0x610/0x610
[  +0,004184]  kthread+0x119/0x130
[  +0,003240]  ? kthread_park+0x80/0x80
[  +0,003668]  ret_from_fork+0x24/0x50

Cc: Lyude Paul <lyude@redhat.com>
Cc: Dave Airlie <airlied@redhat.com>
Signed-off-by: Imre Deak <imre.deak@intel.com>
Reviewed-by: Lyude Paul <lyude@redhat.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20190523212433.9058-1-imre.deak@intel.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-04-07 13:24:56 +02:00
..
accessibility A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
acpi ACPI: PM: Avoid attaching ACPI PM domain to certain devices 2020-04-07 13:07:24 +02:00
amba A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
android ANDROID: binder: synchronize_rcu() when using POLLFREE. 2020-04-07 08:06:59 +02:00
ata libata: Ensure ata_port probe has completed before detach 2020-04-07 13:20:53 +02:00
atm atm: zatm: Fix empty body Clang warnings 2020-04-07 12:35:08 +02:00
auxdisplay A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
base x86/bugs: Add ITLB_MULTIHIT bug infrastructure 2020-04-07 12:00:26 +02:00
battery A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
battery_v2 A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
bcma A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
block rsxx: add missed destroy_workqueue calls in remove 2020-04-07 12:44:10 +02:00
bluetooth Bluetooth: btusb: fix PM leak in error case of setup 2020-04-07 13:24:51 +02:00
bts A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
bus A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ccic A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
cdrom cdrom: respect device capabilities during opening action 2020-04-07 13:23:35 +02:00
char hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled 2020-04-07 13:20:24 +02:00
clk clk: pxa: fix one of the pxa RTC clocks 2020-04-07 13:23:20 +02:00
clocksource clocksource/drivers/asm9260: Add a check for of_clk_get 2020-04-07 13:22:56 +02:00
connector A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
cpufreq cpufreq: Register drivers only after CPU devices have been registered 2020-04-07 13:21:35 +02:00
cpuidle cpuidle: Do not unset the driver if it is there already 2020-04-07 13:07:18 +02:00
crypto crypto: vmx - Avoid weird build failures 2020-04-07 13:21:48 +02:00
dca A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
devfreq PM / devfreq: Don't fail devfreq_dev_release if not in list 2020-04-07 13:24:09 +02:00
dio A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
dma dmaengine: coh901318: Remove unused variable 2020-04-07 12:44:51 +02:00
dma-buf A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
edac EDAC/ghes: Fix grain calculation 2020-04-07 13:21:28 +02:00
eisa A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
extcon extcon: sm5502: Reset registers during initialization 2020-04-07 13:20:38 +02:00
fingerprint A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
firewire A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
firmware gsmi: Fix bug in append_to_eventlog sysfs handler 2020-04-07 12:34:33 +02:00
five A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
fmc A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
fpga A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
gator A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
gpio gpiolib: fix up emulated open drain outputs 2020-04-07 13:24:45 +02:00
gps A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
gpu drm/mst: Fix MST sideband up-reply failure handling 2020-04-07 13:24:56 +02:00
gud A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
hid HID: Improve Windows Precision Touchpad detection. 2020-04-07 13:23:24 +02:00
hsi A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
hv A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
hwmon hwmon: (pwm-fan) Silence error on probe deferral 2020-04-07 12:33:24 +02:00
hwspinlock A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
hwtracing stm class: Fix a double free of stm_source_device 2020-04-06 21:33:50 +02:00
i2c i2c: imx: don't print error message on probe defer 2020-04-07 12:45:01 +02:00
ide A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
idle A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
iio iio: adc: max1027: Reset the device at probe time 2020-04-07 13:20:44 +02:00
infiniband RDMA/cma: add missed unregister_pernet_subsys in init failure 2020-04-07 13:24:11 +02:00
input Input: atmel_mxt_ts - disable IRQ across suspend 2020-04-07 13:22:43 +02:00
iommu iommu/tegra-smmu: Fix page tables in > 4 GiB memory 2020-04-07 13:22:44 +02:00
ipack A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
irqchip irqchip: ingenic: Error out if IRQ domain creation failed 2020-04-07 13:23:09 +02:00
isdn staging: gigaset: add endpoint-type sanity check 2020-04-07 13:06:29 +02:00
leds leds: leds-lp5562 allow firmware files up to the maximum length 2020-04-07 07:37:48 +02:00
lguest A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
lightnvm A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
macintosh macintosh/windfarm_smu_sat: Fix debug output 2020-04-07 12:35:02 +02:00
mailbox mailbox: handle failed named mailbox channel request 2020-04-06 20:13:46 +02:00
mcb A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
md md: raid1: check rdev before reference in raid1_sync_request func 2020-04-07 13:24:22 +02:00
media media: si470x-i2c: add missed operations in remove 2020-04-07 13:21:26 +02:00
memory memory: tegra: Fix integer overflow on tick value calculation 2020-04-06 18:14:02 +02:00
memstick memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()' 2020-04-07 09:27:02 +02:00
message A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
mfd mfd: max8997: Enale irq-wakeup unconditionally 2020-04-07 12:35:27 +02:00
misc altera-stapl: check for a null key before strcasecmp'ing it 2020-04-07 12:44:57 +02:00
mmc mmc: sdhci: Update the tuning failed messages to pr_debug level 2020-04-07 13:24:04 +02:00
motor A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
mtd mtd: spear_smi: Fix Write Burst mode 2020-04-07 13:06:47 +02:00
muic A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
net 6pack,mkiss: fix possible deadlock 2020-04-07 13:23:56 +02:00
nfc NFC: nxp-nci: Fix NULL pointer dereference after I2C communication error 2020-04-07 12:44:04 +02:00
ntb ntb: intel: fix return value for ndev_vec_mask() 2020-04-07 12:36:03 +02:00
nubus A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
nvdimm libnvdimm/btt: Fix a kmemdup failure check 2020-04-06 16:43:30 +02:00
nvme A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
nvmem nvmem: core: return error code instead of NULL from nvmem_device_get 2020-04-07 12:27:36 +02:00
of of: make PowerMac cache node search conditional on CONFIG_PPC_PMAC 2020-04-07 12:27:09 +02:00
oprofile A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
parisc parisc: Disable HP HSC-PCI Cards to prevent kernel crash 2020-04-07 07:39:52 +02:00
parport parport: load lowlevel driver if ports not found 2020-04-07 13:21:33 +02:00
pci PCI/MSI: Fix incorrect MSI-X masking on resume 2020-04-07 13:12:43 +02:00
pcmcia A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
perf A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
phy phy: renesas: rcar-gen2: Fix memory leak at error paths 2020-04-06 20:06:04 +02:00
pinctrl pinctrl: sh-pfc: sh7734: Fix duplicate TCLK1_B 2020-04-07 13:20:55 +02:00
platform platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128 bytes 2020-04-07 13:22:28 +02:00
pnp A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
power PM / AVS: SmartReflex: NULL check before some freeing functions is not needed 2020-04-07 12:41:14 +02:00
powercap A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pps drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl 2020-04-06 20:26:27 +02:00
ps3 A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ptp A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
pwm pwm: Clear chip_data in pwm_put() 2020-04-07 12:43:26 +02:00
rapidio A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ras A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
regulator regulator: max8907: Fix the usage of uninitialized variable in max8907_regulator_probe() 2020-04-07 13:20:26 +02:00
remoteproc A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
reset A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
rpmsg A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
rtc rtc: max8997: Fix the returned value in case of error in 'max8997_rtc_read_alarm()' 2020-04-07 12:44:43 +02:00
s390 scsi: zfcp: trace channel log even for FCP command responses 2020-04-07 13:07:37 +02:00
sbus A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
scsi scsi: libsas: stop discovering if oob mode is disconnected 2020-04-07 13:24:18 +02:00
security/samsung/icdrv A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sensorhub A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sensors A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sfi A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sh A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
sn A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
soc soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher 2020-04-06 19:02:13 +02:00
spi spi: tegra20-slink: add missed clk_unprepare 2020-04-07 13:21:39 +02:00
spmi A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
ssb ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit 2020-04-06 18:15:20 +02:00
staging staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value 2020-04-07 13:22:30 +02:00
switch A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
target scsi: target: iscsi: Wait for all commands to finish before freeing a session 2020-04-07 13:23:29 +02:00
tc A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tee A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
thermal thermal: Fix deadlock in thermal thermal_zone_device_check 2020-04-07 12:46:09 +02:00
thunderbolt thunderbolt: Use 32-bit writes when writing ring producer/consumer 2020-04-07 09:27:58 +02:00
trace A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
tty tty: serial: msm_serial: Fix lockup for sysrq and oops 2020-04-07 13:24:55 +02:00
uh A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
uio A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
usb usb: gadget: fix wrong endpoint desc 2020-04-07 13:24:20 +02:00
uwb A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
vfio vfio/pci: call irq_bypass_unregister_producer() before freeing irq 2020-04-07 13:12:53 +02:00
vhost vhost: make sure log_num < in_num 2020-04-06 21:35:05 +02:00
video video/hdmi: Fix AVI bar unpack 2020-04-07 13:07:31 +02:00
virt drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl 2020-04-06 17:01:49 +02:00
virtio virtio-balloon: fix managed page counts when migrating pages between zones 2020-04-07 13:06:49 +02:00
vision A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
vlynq A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
vme A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
w1 w1: fix the resume command API 2020-04-06 18:15:45 +02:00
watchdog watchdog: bcm2835_wdt: Fix module autoload 2020-04-06 21:33:14 +02:00
xen xen/balloon: fix ballooned page accounting without hotplug enabled 2020-04-07 13:24:28 +02:00
zorro A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
Kconfig A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
Makefile A750FXXU4CTBC 2020-03-27 21:51:54 +05:30