commit:     1997a02ef0c1e0a84ace148f3f9f520609bf7b43
Author:     Alice Ferrazzi <alicef <AT> gentoo <DOT> org>
AuthorDate: Wed Aug 22 10:06:11 2018 +0000
Commit:     Alice Ferrazzi <alicef <AT> gentoo <DOT> org>
CommitDate: Wed Aug 22 10:06:11 2018 +0000
URL:        https://gitweb.gentoo.org/proj/linux-patches.git/commit/?id=1997a02e

linux kernel 4.9.123

 0000_README              |   4 +
 1122_linux-4.9.123.patch | 626 +++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 630 insertions(+)

diff --git a/0000_README b/0000_README
index 5570ac1..41e0394 100644
--- a/0000_README
+++ b/0000_README
@@ -531,6 +531,10 @@ Patch:  1121_linux-4.9.122.patch
 From:   http://www.kernel.org
 Desc:   Linux 4.9.122
 
+Patch:  1122_linux-4.9.123.patch
+From:   http://www.kernel.org
+Desc:   Linux 4.9.123
+
 Patch:  1500_XATTR_USER_PREFIX.patch
 From:   https://bugs.gentoo.org/show_bug.cgi?id=470644
 Desc:   Support for namespace user.pax.* on tmpfs.

diff --git a/1122_linux-4.9.123.patch b/1122_linux-4.9.123.patch
new file mode 100644
index 0000000..2689818
--- /dev/null
+++ b/1122_linux-4.9.123.patch
@@ -0,0 +1,626 @@
+diff --git a/Makefile b/Makefile
+index 1f44343a1e04..b11e375bb18e 100644
+--- a/Makefile
++++ b/Makefile
+@@ -1,6 +1,6 @@
+ VERSION = 4
+ PATCHLEVEL = 9
+-SUBLEVEL = 122
++SUBLEVEL = 123
+ EXTRAVERSION =
+ NAME = Roaring Lionus
+ 
+diff --git a/arch/x86/include/asm/pgtable.h b/arch/x86/include/asm/pgtable.h
+index 5008be1ab183..c535012bdb56 100644
+--- a/arch/x86/include/asm/pgtable.h
++++ b/arch/x86/include/asm/pgtable.h
+@@ -190,6 +190,11 @@ static inline unsigned long pud_pfn(pud_t pud)
+       return (pfn & pud_pfn_mask(pud)) >> PAGE_SHIFT;
+ }
+ 
++static inline unsigned long pgd_pfn(pgd_t pgd)
++{
++      return (pgd_val(pgd) & PTE_PFN_MASK) >> PAGE_SHIFT;
++}
++
+ #define pte_page(pte) pfn_to_page(pte_pfn(pte))
+ 
+ static inline int pmd_large(pmd_t pte)
+@@ -621,8 +626,7 @@ static inline unsigned long pmd_page_vaddr(pmd_t pmd)
+  * Currently stuck as a macro due to indirect forward reference to
+  * linux/mmzone.h's __section_mem_map_addr() definition:
+  */
+-#define pmd_page(pmd)         \
+-      pfn_to_page((pmd_val(pmd) & pmd_pfn_mask(pmd)) >> PAGE_SHIFT)
++#define pmd_page(pmd) pfn_to_page(pmd_pfn(pmd))
+ 
+ /*
+  * the pmd page can be thought of an array like this: pmd_t[PTRS_PER_PMD]
+@@ -690,8 +694,7 @@ static inline unsigned long pud_page_vaddr(pud_t pud)
+  * Currently stuck as a macro due to indirect forward reference to
+  * linux/mmzone.h's __section_mem_map_addr() definition:
+  */
+-#define pud_page(pud)         \
+-      pfn_to_page((pud_val(pud) & pud_pfn_mask(pud)) >> PAGE_SHIFT)
++#define pud_page(pud) pfn_to_page(pud_pfn(pud))
+ 
+ /* Find an entry in the second-level page table.. */
+ static inline pmd_t *pmd_offset(pud_t *pud, unsigned long address)
+@@ -731,7 +734,7 @@ static inline unsigned long pgd_page_vaddr(pgd_t pgd)
+  * Currently stuck as a macro due to indirect forward reference to
+  * linux/mmzone.h's __section_mem_map_addr() definition:
+  */
+-#define pgd_page(pgd)         pfn_to_page(pgd_val(pgd) >> PAGE_SHIFT)
++#define pgd_page(pgd)         pfn_to_page(pgd_pfn(pgd))
+ 
+ /* to find an entry in a page-table-directory. */
+ static inline unsigned long pud_index(unsigned long address)
+diff --git a/drivers/acpi/sleep.c b/drivers/acpi/sleep.c
+index 097d630ab886..f0633169c35b 100644
+--- a/drivers/acpi/sleep.c
++++ b/drivers/acpi/sleep.c
+@@ -330,6 +330,14 @@ static struct dmi_system_id acpisleep_dmi_table[] 
__initdata = {
+               DMI_MATCH(DMI_PRODUCT_NAME, "K54HR"),
+               },
+       },
++      {
++      .callback = init_nvs_save_s3,
++      .ident = "Asus 1025C",
++      .matches = {
++              DMI_MATCH(DMI_SYS_VENDOR, "ASUSTeK COMPUTER INC."),
++              DMI_MATCH(DMI_PRODUCT_NAME, "1025C"),
++              },
++      },
+       /*
+        * https://bugzilla.kernel.org/show_bug.cgi?id=189431
+        * Lenovo G50-45 is a platform later than 2012, but needs nvs memory
+diff --git a/drivers/isdn/i4l/isdn_common.c b/drivers/isdn/i4l/isdn_common.c
+index e4c43a17b333..8088c34336aa 100644
+--- a/drivers/isdn/i4l/isdn_common.c
++++ b/drivers/isdn/i4l/isdn_common.c
+@@ -1655,13 +1655,7 @@ isdn_ioctl(struct file *file, uint cmd, ulong arg)
+                       } else
+                               return -EINVAL;
+               case IIOCDBGVAR:
+-                      if (arg) {
+-                              if (copy_to_user(argp, &dev, sizeof(ulong)))
+-                                      return -EFAULT;
+-                              return 0;
+-                      } else
+-                              return -EINVAL;
+-                      break;
++                      return -EINVAL;
+               default:
+                       if ((cmd & IIOCDRVCTL) == IIOCDRVCTL)
+                               cmd = ((cmd >> _IOC_NRSHIFT) & _IOC_NRMASK) & 
ISDN_DRVIOCTL_MASK;
+diff --git a/drivers/tty/serial/8250/8250_dw.c 
b/drivers/tty/serial/8250/8250_dw.c
+index 3eb01a719d22..3177264a1166 100644
+--- a/drivers/tty/serial/8250/8250_dw.c
++++ b/drivers/tty/serial/8250/8250_dw.c
+@@ -235,7 +235,7 @@ static void dw8250_set_termios(struct uart_port *p, struct 
ktermios *termios,
+       unsigned int rate;
+       int ret;
+ 
+-      if (IS_ERR(d->clk) || !old)
++      if (IS_ERR(d->clk))
+               goto out;
+ 
+       clk_disable_unprepare(d->clk);
+@@ -626,6 +626,7 @@ static const struct acpi_device_id dw8250_acpi_match[] = {
+       { "APMC0D08", 0},
+       { "AMD0020", 0 },
+       { "AMDI0020", 0 },
++      { "BRCM2032", 0 },
+       { "HISI0031", 0 },
+       { },
+ };
+diff --git a/drivers/tty/serial/8250/8250_port.c 
b/drivers/tty/serial/8250/8250_port.c
+index 5d9038a5bbc4..5b54439a8a9b 100644
+--- a/drivers/tty/serial/8250/8250_port.c
++++ b/drivers/tty/serial/8250/8250_port.c
+@@ -83,8 +83,7 @@ static const struct serial8250_config uart_config[] = {
+               .name           = "16550A",
+               .fifo_size      = 16,
+               .tx_loadsz      = 16,
+-              .fcr            = UART_FCR_ENABLE_FIFO | UART_FCR_R_TRIG_10 |
+-                                UART_FCR_CLEAR_RCVR | UART_FCR_CLEAR_XMIT,
++              .fcr            = UART_FCR_ENABLE_FIFO | UART_FCR_R_TRIG_10,
+               .rxtrig_bytes   = {1, 4, 8, 14},
+               .flags          = UART_CAP_FIFO,
+       },
+diff --git a/drivers/usb/serial/option.c b/drivers/usb/serial/option.c
+index d982c455e18e..2b81939fecd7 100644
+--- a/drivers/usb/serial/option.c
++++ b/drivers/usb/serial/option.c
+@@ -199,6 +199,8 @@ static void option_instat_callback(struct urb *urb);
+ #define DELL_PRODUCT_5800_V2_MINICARD_VZW     0x8196  /* Novatel E362 */
+ #define DELL_PRODUCT_5804_MINICARD_ATT                0x819b  /* Novatel E371 
*/
+ 
++#define DELL_PRODUCT_5821E                    0x81d7
++
+ #define KYOCERA_VENDOR_ID                     0x0c88
+ #define KYOCERA_PRODUCT_KPC650                        0x17da
+ #define KYOCERA_PRODUCT_KPC680                        0x180a
+@@ -1033,6 +1035,8 @@ static const struct usb_device_id option_ids[] = {
+       { USB_DEVICE_AND_INTERFACE_INFO(DELL_VENDOR_ID, 
DELL_PRODUCT_5800_MINICARD_VZW, 0xff, 0xff, 0xff) },
+       { USB_DEVICE_AND_INTERFACE_INFO(DELL_VENDOR_ID, 
DELL_PRODUCT_5800_V2_MINICARD_VZW, 0xff, 0xff, 0xff) },
+       { USB_DEVICE_AND_INTERFACE_INFO(DELL_VENDOR_ID, 
DELL_PRODUCT_5804_MINICARD_ATT, 0xff, 0xff, 0xff) },
++      { USB_DEVICE(DELL_VENDOR_ID, DELL_PRODUCT_5821E),
++        .driver_info = RSVD(0) | RSVD(1) | RSVD(6) },
+       { USB_DEVICE(ANYDATA_VENDOR_ID, ANYDATA_PRODUCT_ADU_E100A) },   /* 
ADU-E100, ADU-310 */
+       { USB_DEVICE(ANYDATA_VENDOR_ID, ANYDATA_PRODUCT_ADU_500A) },
+       { USB_DEVICE(ANYDATA_VENDOR_ID, ANYDATA_PRODUCT_ADU_620UW) },
+diff --git a/drivers/usb/serial/sierra.c b/drivers/usb/serial/sierra.c
+index e1994e264cc0..fbc7b29e855e 100644
+--- a/drivers/usb/serial/sierra.c
++++ b/drivers/usb/serial/sierra.c
+@@ -790,9 +790,9 @@ static void sierra_close(struct usb_serial_port *port)
+               kfree(urb->transfer_buffer);
+               usb_free_urb(urb);
+               usb_autopm_put_interface_async(serial->interface);
+-              spin_lock(&portdata->lock);
++              spin_lock_irq(&portdata->lock);
+               portdata->outstanding_urbs--;
+-              spin_unlock(&portdata->lock);
++              spin_unlock_irq(&portdata->lock);
+       }
+ 
+       sierra_stop_rx_urbs(port);
+diff --git a/include/net/af_vsock.h b/include/net/af_vsock.h
+index f32ed9ac181a..f38fe1c00564 100644
+--- a/include/net/af_vsock.h
++++ b/include/net/af_vsock.h
+@@ -62,7 +62,8 @@ struct vsock_sock {
+       struct list_head pending_links;
+       struct list_head accept_queue;
+       bool rejected;
+-      struct delayed_work dwork;
++      struct delayed_work connect_work;
++      struct delayed_work pending_work;
+       struct delayed_work close_work;
+       bool close_work_scheduled;
+       u32 peer_shutdown;
+@@ -75,7 +76,6 @@ struct vsock_sock {
+ 
+ s64 vsock_stream_has_data(struct vsock_sock *vsk);
+ s64 vsock_stream_has_space(struct vsock_sock *vsk);
+-void vsock_pending_work(struct work_struct *work);
+ struct sock *__vsock_create(struct net *net,
+                           struct socket *sock,
+                           struct sock *parent,
+diff --git a/include/net/llc.h b/include/net/llc.h
+index e8e61d4fb458..82d989995d18 100644
+--- a/include/net/llc.h
++++ b/include/net/llc.h
+@@ -116,6 +116,11 @@ static inline void llc_sap_hold(struct llc_sap *sap)
+       atomic_inc(&sap->refcnt);
+ }
+ 
++static inline bool llc_sap_hold_safe(struct llc_sap *sap)
++{
++      return atomic_inc_not_zero(&sap->refcnt);
++}
++
+ void llc_sap_close(struct llc_sap *sap);
+ 
+ static inline void llc_sap_put(struct llc_sap *sap)
+diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
+index 3125ce670c2f..95fd7a837dc5 100644
+--- a/net/bluetooth/sco.c
++++ b/net/bluetooth/sco.c
+@@ -392,7 +392,8 @@ static void sco_sock_cleanup_listen(struct sock *parent)
+  */
+ static void sco_sock_kill(struct sock *sk)
+ {
+-      if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket)
++      if (!sock_flag(sk, SOCK_ZAPPED) || sk->sk_socket ||
++          sock_flag(sk, SOCK_DEAD))
+               return;
+ 
+       BT_DBG("sk %p state %d", sk, sk->sk_state);
+diff --git a/net/dccp/ccids/ccid2.c b/net/dccp/ccids/ccid2.c
+index 86a2ed0fb219..161dfcf86126 100644
+--- a/net/dccp/ccids/ccid2.c
++++ b/net/dccp/ccids/ccid2.c
+@@ -228,14 +228,16 @@ static void ccid2_cwnd_restart(struct sock *sk, const 
u32 now)
+       struct ccid2_hc_tx_sock *hc = ccid2_hc_tx_sk(sk);
+       u32 cwnd = hc->tx_cwnd, restart_cwnd,
+           iwnd = rfc3390_bytes_to_packets(dccp_sk(sk)->dccps_mss_cache);
++      s32 delta = now - hc->tx_lsndtime;
+ 
+       hc->tx_ssthresh = max(hc->tx_ssthresh, (cwnd >> 1) + (cwnd >> 2));
+ 
+       /* don't reduce cwnd below the initial window (IW) */
+       restart_cwnd = min(cwnd, iwnd);
+-      cwnd >>= (now - hc->tx_lsndtime) / hc->tx_rto;
+-      hc->tx_cwnd = max(cwnd, restart_cwnd);
+ 
++      while ((delta -= hc->tx_rto) >= 0 && cwnd > restart_cwnd)
++              cwnd >>= 1;
++      hc->tx_cwnd = max(cwnd, restart_cwnd);
+       hc->tx_cwnd_stamp = now;
+       hc->tx_cwnd_used  = 0;
+ 
+diff --git a/net/ipv6/ip6_tunnel.c b/net/ipv6/ip6_tunnel.c
+index c7b202c1720d..cda63426eefb 100644
+--- a/net/ipv6/ip6_tunnel.c
++++ b/net/ipv6/ip6_tunnel.c
+@@ -1133,12 +1133,8 @@ route_lookup:
+               max_headroom += 8;
+               mtu -= 8;
+       }
+-      if (skb->protocol == htons(ETH_P_IPV6)) {
+-              if (mtu < IPV6_MIN_MTU)
+-                      mtu = IPV6_MIN_MTU;
+-      } else if (mtu < 576) {
+-              mtu = 576;
+-      }
++      mtu = max(mtu, skb->protocol == htons(ETH_P_IPV6) ?
++                     IPV6_MIN_MTU : IPV4_MIN_MTU);
+ 
+       if (skb_dst(skb) && !t->parms.collect_md)
+               skb_dst(skb)->ops->update_pmtu(skb_dst(skb), NULL, skb, mtu);
+diff --git a/net/l2tp/l2tp_core.c b/net/l2tp/l2tp_core.c
+index ead98e8e0b1f..a5333f6cb65a 100644
+--- a/net/l2tp/l2tp_core.c
++++ b/net/l2tp/l2tp_core.c
+@@ -1239,7 +1239,7 @@ int l2tp_xmit_skb(struct l2tp_session *session, struct 
sk_buff *skb, int hdr_len
+ 
+       /* Get routing info from the tunnel socket */
+       skb_dst_drop(skb);
+-      skb_dst_set(skb, dst_clone(__sk_dst_check(sk, 0)));
++      skb_dst_set(skb, sk_dst_check(sk, 0));
+ 
+       inet = inet_sk(sk);
+       fl = &inet->cork.fl;
+diff --git a/net/llc/llc_core.c b/net/llc/llc_core.c
+index 842851cef698..e896a2c53b12 100644
+--- a/net/llc/llc_core.c
++++ b/net/llc/llc_core.c
+@@ -73,8 +73,8 @@ struct llc_sap *llc_sap_find(unsigned char sap_value)
+ 
+       rcu_read_lock_bh();
+       sap = __llc_sap_find(sap_value);
+-      if (sap)
+-              llc_sap_hold(sap);
++      if (!sap || !llc_sap_hold_safe(sap))
++              sap = NULL;
+       rcu_read_unlock_bh();
+       return sap;
+ }
+diff --git a/net/sched/cls_matchall.c b/net/sched/cls_matchall.c
+index e75fb65037d7..61ddfbad2aae 100644
+--- a/net/sched/cls_matchall.c
++++ b/net/sched/cls_matchall.c
+@@ -94,6 +94,8 @@ static bool mall_destroy(struct tcf_proto *tp, bool force)
+       if (!head)
+               return true;
+ 
++      tcf_unbind_filter(tp, &head->res);
++
+       if (tc_should_offload(dev, tp, head->flags))
+               mall_destroy_hw_filter(tp, head, (unsigned long) head);
+ 
+diff --git a/net/sched/cls_tcindex.c b/net/sched/cls_tcindex.c
+index 0751245a6ace..db80a6440f37 100644
+--- a/net/sched/cls_tcindex.c
++++ b/net/sched/cls_tcindex.c
+@@ -414,11 +414,6 @@ tcindex_set_parms(struct net *net, struct tcf_proto *tp, 
unsigned long base,
+               tcf_bind_filter(tp, &cr.res, base);
+       }
+ 
+-      if (old_r)
+-              tcf_exts_change(tp, &r->exts, &e);
+-      else
+-              tcf_exts_change(tp, &cr.exts, &e);
+-
+       if (old_r && old_r != r) {
+               err = tcindex_filter_result_init(old_r);
+               if (err < 0) {
+@@ -429,12 +424,15 @@ tcindex_set_parms(struct net *net, struct tcf_proto *tp, 
unsigned long base,
+ 
+       oldp = p;
+       r->res = cr.res;
++      tcf_exts_change(tp, &r->exts, &e);
++
+       rcu_assign_pointer(tp->root, cp);
+ 
+       if (r == &new_filter_result) {
+               struct tcindex_filter *nfp;
+               struct tcindex_filter __rcu **fp;
+ 
++              f->result.res = r->res;
+               tcf_exts_change(tp, &f->result.exts, &r->exts);
+ 
+               fp = cp->h + (handle % cp->hash);
+diff --git a/net/vmw_vsock/af_vsock.c b/net/vmw_vsock/af_vsock.c
+index ee12e176256c..7566395e526d 100644
+--- a/net/vmw_vsock/af_vsock.c
++++ b/net/vmw_vsock/af_vsock.c
+@@ -448,14 +448,14 @@ static int vsock_send_shutdown(struct sock *sk, int mode)
+       return transport->shutdown(vsock_sk(sk), mode);
+ }
+ 
+-void vsock_pending_work(struct work_struct *work)
++static void vsock_pending_work(struct work_struct *work)
+ {
+       struct sock *sk;
+       struct sock *listener;
+       struct vsock_sock *vsk;
+       bool cleanup;
+ 
+-      vsk = container_of(work, struct vsock_sock, dwork.work);
++      vsk = container_of(work, struct vsock_sock, pending_work.work);
+       sk = sk_vsock(vsk);
+       listener = vsk->listener;
+       cleanup = true;
+@@ -495,7 +495,6 @@ out:
+       sock_put(sk);
+       sock_put(listener);
+ }
+-EXPORT_SYMBOL_GPL(vsock_pending_work);
+ 
+ /**** SOCKET OPERATIONS ****/
+ 
+@@ -594,6 +593,8 @@ static int __vsock_bind(struct sock *sk, struct 
sockaddr_vm *addr)
+       return retval;
+ }
+ 
++static void vsock_connect_timeout(struct work_struct *work);
++
+ struct sock *__vsock_create(struct net *net,
+                           struct socket *sock,
+                           struct sock *parent,
+@@ -636,6 +637,8 @@ struct sock *__vsock_create(struct net *net,
+       vsk->sent_request = false;
+       vsk->ignore_connecting_rst = false;
+       vsk->peer_shutdown = 0;
++      INIT_DELAYED_WORK(&vsk->connect_work, vsock_connect_timeout);
++      INIT_DELAYED_WORK(&vsk->pending_work, vsock_pending_work);
+ 
+       psk = parent ? vsock_sk(parent) : NULL;
+       if (parent) {
+@@ -1115,7 +1118,7 @@ static void vsock_connect_timeout(struct work_struct 
*work)
+       struct vsock_sock *vsk;
+       int cancel = 0;
+ 
+-      vsk = container_of(work, struct vsock_sock, dwork.work);
++      vsk = container_of(work, struct vsock_sock, connect_work.work);
+       sk = sk_vsock(vsk);
+ 
+       lock_sock(sk);
+@@ -1219,9 +1222,7 @@ static int vsock_stream_connect(struct socket *sock, 
struct sockaddr *addr,
+                        * timeout fires.
+                        */
+                       sock_hold(sk);
+-                      INIT_DELAYED_WORK(&vsk->dwork,
+-                                        vsock_connect_timeout);
+-                      schedule_delayed_work(&vsk->dwork, timeout);
++                      schedule_delayed_work(&vsk->connect_work, timeout);
+ 
+                       /* Skip ahead to preserve error code set above. */
+                       goto out_wait;
+diff --git a/net/vmw_vsock/vmci_transport.c b/net/vmw_vsock/vmci_transport.c
+index 4be4fbbc0b50..4aa391c5c733 100644
+--- a/net/vmw_vsock/vmci_transport.c
++++ b/net/vmw_vsock/vmci_transport.c
+@@ -1099,8 +1099,7 @@ static int vmci_transport_recv_listen(struct sock *sk,
+       vpending->listener = sk;
+       sock_hold(sk);
+       sock_hold(pending);
+-      INIT_DELAYED_WORK(&vpending->dwork, vsock_pending_work);
+-      schedule_delayed_work(&vpending->dwork, HZ);
++      schedule_delayed_work(&vpending->pending_work, HZ);
+ 
+ out:
+       return err;
+diff --git a/sound/core/memalloc.c b/sound/core/memalloc.c
+index f05cb6a8cbe0..78ffe445d775 100644
+--- a/sound/core/memalloc.c
++++ b/sound/core/memalloc.c
+@@ -239,16 +239,12 @@ int snd_dma_alloc_pages_fallback(int type, struct device 
*device, size_t size,
+       int err;
+ 
+       while ((err = snd_dma_alloc_pages(type, device, size, dmab)) < 0) {
+-              size_t aligned_size;
+               if (err != -ENOMEM)
+                       return err;
+               if (size <= PAGE_SIZE)
+                       return -ENOMEM;
+-              aligned_size = PAGE_SIZE << get_order(size);
+-              if (size != aligned_size)
+-                      size = aligned_size;
+-              else
+-                      size >>= 1;
++              size >>= 1;
++              size = PAGE_SIZE << get_order(size);
+       }
+       if (! dmab->area)
+               return -ENOMEM;
+diff --git a/sound/core/seq/seq_virmidi.c b/sound/core/seq/seq_virmidi.c
+index 8bdc4c961f04..1ebb34656241 100644
+--- a/sound/core/seq/seq_virmidi.c
++++ b/sound/core/seq/seq_virmidi.c
+@@ -163,6 +163,7 @@ static void snd_virmidi_output_trigger(struct 
snd_rawmidi_substream *substream,
+       int count, res;
+       unsigned char buf[32], *pbuf;
+       unsigned long flags;
++      bool check_resched = !in_atomic();
+ 
+       if (up) {
+               vmidi->trigger = 1;
+@@ -200,6 +201,15 @@ static void snd_virmidi_output_trigger(struct 
snd_rawmidi_substream *substream,
+                                       vmidi->event.type = 
SNDRV_SEQ_EVENT_NONE;
+                               }
+                       }
++                      if (!check_resched)
++                              continue;
++                      /* do temporary unlock & cond_resched() for avoiding
++                       * CPU soft lockup, which may happen via a write from
++                       * a huge rawmidi buffer
++                       */
++                      spin_unlock_irqrestore(&substream->runtime->lock, 
flags);
++                      cond_resched();
++                      spin_lock_irqsave(&substream->runtime->lock, flags);
+               }
+       out:
+               spin_unlock_irqrestore(&substream->runtime->lock, flags);
+diff --git a/sound/pci/cs5535audio/cs5535audio.h 
b/sound/pci/cs5535audio/cs5535audio.h
+index 0579daa62215..425d1b664029 100644
+--- a/sound/pci/cs5535audio/cs5535audio.h
++++ b/sound/pci/cs5535audio/cs5535audio.h
+@@ -66,9 +66,9 @@ struct cs5535audio_dma_ops {
+ };
+ 
+ struct cs5535audio_dma_desc {
+-      u32 addr;
+-      u16 size;
+-      u16 ctlreserved;
++      __le32 addr;
++      __le16 size;
++      __le16 ctlreserved;
+ };
+ 
+ struct cs5535audio_dma {
+diff --git a/sound/pci/cs5535audio/cs5535audio_pcm.c 
b/sound/pci/cs5535audio/cs5535audio_pcm.c
+index c208c1d8dbb2..b9912ec2375b 100644
+--- a/sound/pci/cs5535audio/cs5535audio_pcm.c
++++ b/sound/pci/cs5535audio/cs5535audio_pcm.c
+@@ -158,8 +158,8 @@ static int cs5535audio_build_dma_packets(struct 
cs5535audio *cs5535au,
+       lastdesc->addr = cpu_to_le32((u32) dma->desc_buf.addr);
+       lastdesc->size = 0;
+       lastdesc->ctlreserved = cpu_to_le16(PRD_JMP);
+-      jmpprd_addr = cpu_to_le32(lastdesc->addr +
+-                                (sizeof(struct 
cs5535audio_dma_desc)*periods));
++      jmpprd_addr = (u32)dma->desc_buf.addr +
++              sizeof(struct cs5535audio_dma_desc) * periods;
+ 
+       dma->substream = substream;
+       dma->period_bytes = period_bytes;
+diff --git a/sound/pci/hda/hda_intel.c b/sound/pci/hda/hda_intel.c
+index 4e9112001306..4e331dd5ff47 100644
+--- a/sound/pci/hda/hda_intel.c
++++ b/sound/pci/hda/hda_intel.c
+@@ -2058,7 +2058,7 @@ out_free:
+  */
+ static struct snd_pci_quirk power_save_blacklist[] = {
+       /* https://bugzilla.redhat.com/show_bug.cgi?id=1525104 */
+-      SND_PCI_QUIRK(0x1849, 0x0c0c, "Asrock B85M-ITX", 0),
++      SND_PCI_QUIRK(0x1849, 0xc892, "Asrock B85M-ITX", 0),
+       /* https://bugzilla.redhat.com/show_bug.cgi?id=1525104 */
+       SND_PCI_QUIRK(0x1043, 0x8733, "Asus Prime X370-Pro", 0),
+       /* https://bugzilla.redhat.com/show_bug.cgi?id=1572975 */
+diff --git a/sound/pci/hda/patch_conexant.c b/sound/pci/hda/patch_conexant.c
+index 6b5804e063a3..a6e98a4d6834 100644
+--- a/sound/pci/hda/patch_conexant.c
++++ b/sound/pci/hda/patch_conexant.c
+@@ -205,6 +205,7 @@ static void cx_auto_reboot_notify(struct hda_codec *codec)
+       struct conexant_spec *spec = codec->spec;
+ 
+       switch (codec->core.vendor_id) {
++      case 0x14f12008: /* CX8200 */
+       case 0x14f150f2: /* CX20722 */
+       case 0x14f150f4: /* CX20724 */
+               break;
+@@ -212,13 +213,14 @@ static void cx_auto_reboot_notify(struct hda_codec 
*codec)
+               return;
+       }
+ 
+-      /* Turn the CX20722 codec into D3 to avoid spurious noises
++      /* Turn the problematic codec into D3 to avoid spurious noises
+          from the internal speaker during (and after) reboot */
+       cx_auto_turn_eapd(codec, spec->num_eapds, spec->eapds, false);
+ 
+       snd_hda_codec_set_power_to_all(codec, codec->core.afg, AC_PWRST_D3);
+       snd_hda_codec_write(codec, codec->core.afg, 0,
+                           AC_VERB_SET_POWER_STATE, AC_PWRST_D3);
++      msleep(10);
+ }
+ 
+ static void cx_auto_free(struct hda_codec *codec)
+diff --git a/sound/pci/vx222/vx222_ops.c b/sound/pci/vx222/vx222_ops.c
+index 8e457ea27f89..1997bb048d8b 100644
+--- a/sound/pci/vx222/vx222_ops.c
++++ b/sound/pci/vx222/vx222_ops.c
+@@ -275,7 +275,7 @@ static void vx2_dma_write(struct vx_core *chip, struct 
snd_pcm_runtime *runtime,
+               length >>= 2; /* in 32bit words */
+               /* Transfer using pseudo-dma. */
+               for (; length > 0; length--) {
+-                      outl(cpu_to_le32(*addr), port);
++                      outl(*addr, port);
+                       addr++;
+               }
+               addr = (u32 *)runtime->dma_area;
+@@ -285,7 +285,7 @@ static void vx2_dma_write(struct vx_core *chip, struct 
snd_pcm_runtime *runtime,
+       count >>= 2; /* in 32bit words */
+       /* Transfer using pseudo-dma. */
+       for (; count > 0; count--) {
+-              outl(cpu_to_le32(*addr), port);
++              outl(*addr, port);
+               addr++;
+       }
+ 
+@@ -313,7 +313,7 @@ static void vx2_dma_read(struct vx_core *chip, struct 
snd_pcm_runtime *runtime,
+               length >>= 2; /* in 32bit words */
+               /* Transfer using pseudo-dma. */
+               for (; length > 0; length--)
+-                      *addr++ = le32_to_cpu(inl(port));
++                      *addr++ = inl(port);
+               addr = (u32 *)runtime->dma_area;
+               pipe->hw_ptr = 0;
+       }
+@@ -321,7 +321,7 @@ static void vx2_dma_read(struct vx_core *chip, struct 
snd_pcm_runtime *runtime,
+       count >>= 2; /* in 32bit words */
+       /* Transfer using pseudo-dma. */
+       for (; count > 0; count--)
+-              *addr++ = le32_to_cpu(inl(port));
++              *addr++ = inl(port);
+ 
+       vx2_release_pseudo_dma(chip);
+ }
+diff --git a/sound/pcmcia/vx/vxp_ops.c b/sound/pcmcia/vx/vxp_ops.c
+index 56aa1ba73ccc..49a883341eff 100644
+--- a/sound/pcmcia/vx/vxp_ops.c
++++ b/sound/pcmcia/vx/vxp_ops.c
+@@ -375,7 +375,7 @@ static void vxp_dma_write(struct vx_core *chip, struct 
snd_pcm_runtime *runtime,
+               length >>= 1; /* in 16bit words */
+               /* Transfer using pseudo-dma. */
+               for (; length > 0; length--) {
+-                      outw(cpu_to_le16(*addr), port);
++                      outw(*addr, port);
+                       addr++;
+               }
+               addr = (unsigned short *)runtime->dma_area;
+@@ -385,7 +385,7 @@ static void vxp_dma_write(struct vx_core *chip, struct 
snd_pcm_runtime *runtime,
+       count >>= 1; /* in 16bit words */
+       /* Transfer using pseudo-dma. */
+       for (; count > 0; count--) {
+-              outw(cpu_to_le16(*addr), port);
++              outw(*addr, port);
+               addr++;
+       }
+       vx_release_pseudo_dma(chip);
+@@ -417,7 +417,7 @@ static void vxp_dma_read(struct vx_core *chip, struct 
snd_pcm_runtime *runtime,
+               length >>= 1; /* in 16bit words */
+               /* Transfer using pseudo-dma. */
+               for (; length > 0; length--)
+-                      *addr++ = le16_to_cpu(inw(port));
++                      *addr++ = inw(port);
+               addr = (unsigned short *)runtime->dma_area;
+               pipe->hw_ptr = 0;
+       }
+@@ -425,12 +425,12 @@ static void vxp_dma_read(struct vx_core *chip, struct 
snd_pcm_runtime *runtime,
+       count >>= 1; /* in 16bit words */
+       /* Transfer using pseudo-dma. */
+       for (; count > 1; count--)
+-              *addr++ = le16_to_cpu(inw(port));
++              *addr++ = inw(port);
+       /* Disable DMA */
+       pchip->regDIALOG &= ~VXP_DLG_DMAREAD_SEL_MASK;
+       vx_outb(chip, DIALOG, pchip->regDIALOG);
+       /* Read the last word (16 bits) */
+-      *addr = le16_to_cpu(inw(port));
++      *addr = inw(port);
+       /* Disable 16-bit accesses */
+       pchip->regDIALOG &= ~VXP_DLG_DMA16_SEL_MASK;
+       vx_outb(chip, DIALOG, pchip->regDIALOG);

Reply via email to