[PATCH V9 20/21] MAINTAINERS: Add csky

2018-10-15 Thread Guo Ren
Add a maintainer information for the csky(C-SKY) architecture. Signed-off-by: Guo Ren --- MAINTAINERS | 9 + 1 file changed, 9 insertions(+) diff --git a/MAINTAINERS b/MAINTAINERS index d870cb5..9dac20e 100644 --- a/MAINTAINERS +++ b/MAINTAINERS @@ -3211,6 +3211,15 @@ T: git git:/

Re: [PATCH v4 2/7] ARM: dts: axp81x: add AC power supply subnode

2018-10-15 Thread Chen-Yu Tsai
On Sat, Oct 13, 2018 at 4:09 PM Oskari Lemmela wrote: > > Add AC power supply subnode for AXP81X PMIC. > > Signed-off-by: Oskari Lemmela > Reviewed-by: Quentin Schulz Reviewed-by: Chen-Yu Tsai

Re: [PATCH v4 1/7] dt-bindings: power: supply: axp20x: add AXP813 AC power DT binding

2018-10-15 Thread Chen-Yu Tsai
On Sat, Oct 13, 2018 at 4:09 PM Oskari Lemmela wrote: > > The AXP803/AXP813 AC power supply can limit input current and voltage. > > Signed-off-by: Oskari Lemmela > Reviewed-by: Rob Herring > Reviewed-by: Quentin Schulz Reviewed-by: Chen-Yu Tsai

[PATCH] pinctrl: uniphier: include instead of

2018-10-15 Thread Masahiro Yamada
The reason of including here is just for BIT() macro. Since commit 8bd9cb51daac8 ("locking/atomics, asm-generic: Move some macros from to a new file"), is enough for such compile-time macros. Signed-off-by: Masahiro Yamada --- drivers/pinctrl/uniphier/pinctrl-uniphier.h | 2 +- 1 file chan

Re: [PATCH v4 3/7] arm64: dts: allwinner: axp803: add AC and battery power supplies

2018-10-15 Thread Chen-Yu Tsai
On Sat, Oct 13, 2018 at 4:09 PM Oskari Lemmela wrote: > > AXP803 is compatible with AXP813. Add DT nodes ADC, GPIO, > AC and battery power supplies. > > Signed-off-by: Oskari Lemmela > Reviewed-by: Quentin Schulz > --- > arch/arm64/boot/dts/allwinner/axp803.dtsi | 31 +++ >

[PATCH AUTOSEL 4.18 016/100] netfilter: bridge: Don't sabotage nf_hook calls from an l3mdev

2018-10-15 Thread Sasha Levin
From: David Ahern [ Upstream commit a173f066c7cfc031acb8f541708041e009fc9812 ] For starters, the bridge netfilter code registers operations that are invoked any time nh_hook is called. Specifically, ip_sabotage_in watches for nested calls for NF_INET_PRE_ROUTING when a bridge is in the stack. P

[PATCH AUTOSEL 4.18 003/100] xfrm: reset transport header back to network header after all input transforms ahave been applied

2018-10-15 Thread Sasha Levin
From: Sowmini Varadhan [ Upstream commit bfc0698bebcb16d19ecfc89574ad4d696955e5d3 ] A policy may have been set up with multiple transforms (e.g., ESP and ipcomp). In this situation, the ingress IPsec processing iterates in xfrm_input() and applies each transform in turn, processing the nexthdr t

[PATCH AUTOSEL 4.18 019/100] ARM: dts: BCM63xx: Fix incorrect interrupt specifiers

2018-10-15 Thread Sasha Levin
From: Florian Fainelli [ Upstream commit 3ab97942d0213b6583a5408630a8cbbfbf54730f ] A number of our interrupts were incorrectly specified, fix both the PPI and SPI interrupts to be correct. Fixes: b5762cacc411 ("ARM: bcm63138: add NAND DT support") Fixes: 46d4bca0445a ("ARM: BCM63XX: add BCM631

[PATCH AUTOSEL 4.18 049/100] lan78xx: Check for supported Wake-on-LAN modes

2018-10-15 Thread Sasha Levin
From: Florian Fainelli [ Upstream commit eb9ad088f96653a26b340f7c447c44cf023d5cdc ] The driver supports a fair amount of Wake-on-LAN modes, but is not checking that the user specified one that is supported. Fixes: 55d7de9de6c3 ("Microchip's LAN7800 family USB 2/3 to 10/100/1000 Ethernet device

[PATCH AUTOSEL 4.18 037/100] bnxt_en: Fix TX timeout during netpoll.

2018-10-15 Thread Sasha Levin
From: Michael Chan [ Upstream commit 73f21c653f930f438d53eed29b5e4c65c8a0f906 ] The current netpoll implementation in the bnxt_en driver has problems that may miss TX completion events. bnxt_poll_work() in effect is only handling at most 1 TX packet before exiting. In addition, there may be in

[PATCH AUTOSEL 4.18 038/100] nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds

2018-10-15 Thread Sasha Levin
From: Masashi Honma [ Upstream commit 1222a16014888ed9733c11e221730d4a8196222b ] Use array_index_nospec() to sanitize i with respect to speculation. Note that the user doesn't control i directly, but can make it out of bounds by not finding a threshold in the array. Signed-off-by: Masashi Honm

[PATCH AUTOSEL 4.18 065/100] perf/core: Fix perf_pmu_unregister() locking

2018-10-15 Thread Sasha Levin
From: Peter Zijlstra [ Upstream commit a9f9772114c8b07ae75bcb3654bd017461248095 ] When we unregister a PMU, we fail to serialize the @pmu_idr properly. Fix that by doing the entire thing under pmu_lock. Signed-off-by: Peter Zijlstra (Intel) Cc: Alexander Shishkin Cc: Arnaldo Carvalho de Melo

[PATCH AUTOSEL 4.14 02/61] xfrm6: call kfree_skb when skb is toobig

2018-10-15 Thread Sasha Levin
From: Thadeu Lima de Souza Cascardo [ Upstream commit 215ab0f021c9fea3c18b75e7d522400ee6a49990 ] After commit d6990976af7c5d8f55903bfb4289b6fb030bf754 ("vti6: fix PMTU caching and reporting on xmit"), some too big skbs might be potentially passed down to __xfrm6_output, causing it to fail to tra

[PATCH AUTOSEL 4.18 063/100] tun: initialize napi_mutex unconditionally

2018-10-15 Thread Sasha Levin
From: Eric Dumazet [ Upstream commit c7256f579f8302ce2c038181c30060d0b40017b2 ] This is the first part to fix following syzbot report : console output: https://syzkaller.appspot.com/x/log.txt?x=145378e640 kernel config: https://syzkaller.appspot.com/x/.config?x=443816db871edd66 dashboard l

[PATCH AUTOSEL 4.14 08/61] cfg80211: Address some corner cases in scan result channel updating

2018-10-15 Thread Sasha Levin
From: Jouni Malinen [ Upstream commit 119f94a6fefcc76d47075b83d2b73d04c895df78 ] cfg80211_get_bss_channel() is used to update the RX channel based on the available frame payload information (channel number from DSSS Parameter Set element or HT Operation element). This is needed on 2.4 GHz channe

[PATCH AUTOSEL 4.18 099/100] x86/paravirt: Fix some warning messages

2018-10-15 Thread Sasha Levin
From: Dan Carpenter [ Upstream commit 571d0563c8881595f4ab027aef9ed1c55e3e7b7c ] The first argument to WARN_ONCE() is a condition. Fixes: 5800dc5c19f3 ("x86/paravirt: Fix spectre-v2 mitigations for paravirt guests") Signed-off-by: Dan Carpenter Signed-off-by: Thomas Gleixner Reviewed-by: Jue

[PATCH AUTOSEL 4.18 080/100] net: qualcomm: rmnet: Fix incorrect allocation flag in receive path

2018-10-15 Thread Sasha Levin
From: Subash Abhinov Kasiviswanathan [ Upstream commit ec405641e2b73160e26ef17580d0cf28565d146c ] The incoming skb needs to be reallocated in case the headroom is not sufficient to adjust the ethernet header. This allocation needs to be atomic otherwise it results in this splat [<600601bb>] __

[PATCH AUTOSEL 4.18 074/100] nfp: avoid soft lockups under control message storm

2018-10-15 Thread Sasha Levin
From: Jakub Kicinski [ Upstream commit ff58e2df62ce29d0552278c290ae494b30fe0c6f ] When FW floods the driver with control messages try to exit the cmsg processing loop every now and then to avoid soft lockups. Cmsg processing is generally very lightweight so 512 seems like a reasonable budget, w

[PATCH AUTOSEL 4.18 084/100] team: Forbid enslaving team device to itself

2018-10-15 Thread Sasha Levin
From: Ido Schimmel [ Upstream commit 471b83bd8bbe4e89743683ef8ecb78f7029d8288 ] team's ndo_add_slave() acquires 'team->lock' and later tries to open the newly enslaved device via dev_open(). This emits a 'NETDEV_UP' event that causes the VLAN driver to add VLAN 0 on the team device. team's ndo_v

[PATCH AUTOSEL 4.18 077/100] bonding: fix warning message

2018-10-15 Thread Sasha Levin
From: Mahesh Bandewar [ Upstream commit 0f3b914c9cfcd7bbedd445dc4ac5dd999fa213c2 ] RX queue config for bonding master could be different from its slave device(s). With the commit 6a9e461f6fe4 ("bonding: pass link-local packets to bonding master also."), the packet is reinjected into stack with s

[PATCH AUTOSEL 4.18 095/100] ocfs2: fix crash in ocfs2_duplicate_clusters_by_page()

2018-10-15 Thread Sasha Levin
From: Larry Chen [ Upstream commit 69eb7765b9c6902444c89c54e7043242faf981e5 ] ocfs2_duplicate_clusters_by_page() may crash if one of the extent's pages is dirty. When a page has not been written back, it is still in dirty state. If ocfs2_duplicate_clusters_by_page() is called against the dirty

[PATCH AUTOSEL 4.18 068/100] perf/x86/intel/uncore: Fix PCI BDF address of M3UPI on SKX

2018-10-15 Thread Sasha Levin
From: Kan Liang [ Upstream commit 9d92cfeaf5215158d26d2991be7f7ff865cb98f3 ] The counters on M3UPI Link 0 and Link 3 don't count properly, and writing 0 to these counters may causes system crash on some machines. The PCI BDF addresses of the M3UPI in the current code are incorrect. The correct

[PATCH AUTOSEL 4.18 066/100] perf/x86/intel/uncore: Use boot_cpu_data.phys_proc_id instead of hardcorded physical package ID 0

2018-10-15 Thread Sasha Levin
From: Masayoshi Mizuma [ Upstream commit 6265adb9726098b7f4f7ca70bc51992b25fdd9d6 ] Physical package id 0 doesn't always exist, we should use boot_cpu_data.phys_proc_id here. Signed-off-by: Masayoshi Mizuma Signed-off-by: Peter Zijlstra (Intel) Cc: Alexander Shishkin Cc: Arnaldo Carvalho de

[PATCH AUTOSEL 4.18 082/100] drm/amd/display: Signal hw_done() after waiting for flip_done()

2018-10-15 Thread Sasha Levin
From: Shirish S [ Upstream commit 987bf116445db5d63a5c2ed94c4479687d9c9973 ] In amdgpu_dm_commit_tail(), wait until flip_done() is signaled before we signal hw_done(). [Why] This is to temporarily address a paging error that occurs when a nonblocking commit contends with another commit, partic

[PATCH AUTOSEL 4.18 072/100] net: fec: fix rare tx timeout

2018-10-15 Thread Sasha Levin
From: Rickard x Andersson [ Upstream commit 657ade07df72847f591ccdb36bd9b91ed0edbac3 ] During certain heavy network loads TX could time out with TX ring dump. TX is sometimes never restarted after reaching "tx_stop_threshold" because function "fec_enet_tx_queue" only tests the first queue. In a

[PATCH AUTOSEL 4.18 100/100] clk: mvebu: armada-37xx-periph: Remove unused var num_parents

2018-10-15 Thread Sasha Levin
From: Anders Roxell [ Upstream commit 8927c27b32703e28041ae19bf25ea53461be83a1 ] When building armada-37xx-periph, num_parents isn't used in function clk_pm_cpu_get_parent: drivers/clk/mvebu/armada-37xx-periph.c: In function ‘clk_pm_cpu_get_parent’: drivers/clk/mvebu/armada-37xx-periph.c:419:6:

[PATCH AUTOSEL 4.18 067/100] perf/ring_buffer: Prevent concurent ring buffer access

2018-10-15 Thread Sasha Levin
From: Jiri Olsa [ Upstream commit cd6fb677ce7e460c25bdd66f689734102ec7d642 ] Some of the scheduling tracepoints allow the perf_tp_event code to write to ring buffer under different cpu than the code is running on. This results in corrupted ring buffer data demonstrated in following perf command

[PATCH AUTOSEL 4.14 38/61] r8152: Check for supported Wake-on-LAN Modes

2018-10-15 Thread Sasha Levin
From: Florian Fainelli [ Upstream commit f2750df1548bd8a2b060eb609fc43ca82811af4c ] The driver does not check for Wake-on-LAN modes specified by an user, but will conditionally set the device as wake-up enabled or not based on that, which could be a very confusing user experience. Fixes: 21ff2e

[PATCH AUTOSEL 4.14 24/61] pxa168fb: prepare the clock

2018-10-15 Thread Sasha Levin
From: Lubomir Rintel [ Upstream commit d85536cde91fcfed6fb8d983783bd2b92c843939 ] Add missing prepare/unprepare operations for fbi->clk, this fixes following kernel warning: [ cut here ] WARNING: CPU: 0 PID: 1 at drivers/clk/clk.c:874 clk_core_enable+0x2c/0x1b0 Ena

[PATCH AUTOSEL 4.14 15/61] arm64: hugetlb: Fix handling of young ptes

2018-10-15 Thread Sasha Levin
From: Steve Capper [ Upstream commit 469ed9d823b7d240d6b9574f061ded7c3834c167 ] In the contiguous bit hugetlb break-before-make code we assume that all hugetlb pages are young. In fact, remove_migration_pte is able to place an old hugetlb pte so this assumption is not valid. This patch fixes t

[PATCH AUTOSEL 4.14 46/61] perf/core: Fix perf_pmu_unregister() locking

2018-10-15 Thread Sasha Levin
From: Peter Zijlstra [ Upstream commit a9f9772114c8b07ae75bcb3654bd017461248095 ] When we unregister a PMU, we fail to serialize the @pmu_idr properly. Fix that by doing the entire thing under pmu_lock. Signed-off-by: Peter Zijlstra (Intel) Cc: Alexander Shishkin Cc: Arnaldo Carvalho de Melo

[PATCH AUTOSEL 4.14 26/61] qed: Fix mask parameter in qed_vf_prep_tunn_req_tlv

2018-10-15 Thread Sasha Levin
From: Nathan Chancellor [ Upstream commit db803f36e56f23b5a2266807e190d1dc11554d54 ] Clang complains when one enumerated type is implicitly converted to another. drivers/net/ethernet/qlogic/qed/qed_vf.c:686:6: warning: implicit conversion from enumeration type 'enum qed_tunn_mode' to different

[PATCH AUTOSEL 4.14 48/61] perf/x86/intel/uncore: Fix PCI BDF address of M3UPI on SKX

2018-10-15 Thread Sasha Levin
From: Kan Liang [ Upstream commit 9d92cfeaf5215158d26d2991be7f7ff865cb98f3 ] The counters on M3UPI Link 0 and Link 3 don't count properly, and writing 0 to these counters may causes system crash on some machines. The PCI BDF addresses of the M3UPI in the current code are incorrect. The correct

[PATCH AUTOSEL 4.14 53/61] bonding: fix warning message

2018-10-15 Thread Sasha Levin
From: Mahesh Bandewar [ Upstream commit 0f3b914c9cfcd7bbedd445dc4ac5dd999fa213c2 ] RX queue config for bonding master could be different from its slave device(s). With the commit 6a9e461f6fe4 ("bonding: pass link-local packets to bonding master also."), the packet is reinjected into stack with s

[PATCH AUTOSEL 4.14 57/61] be2net: don't flip hw_features when VXLANs are added/deleted

2018-10-15 Thread Sasha Levin
From: Davide Caratti [ Upstream commit 2d52527e80c2dc0c5f43f50adf183781262ec565 ] the be2net implementation of .ndo_tunnel_{add,del}() changes the value of NETIF_F_GSO_UDP_TUNNEL bit in 'features' and 'hw_features', but it forgets to call netdev_features_change(). Moreover, ethtool setting for t

Re: [PATCH v4 4/7] arm64: dts: allwinner: a64: sopine: enable power supplies

2018-10-15 Thread Chen-Yu Tsai
On Sat, Oct 13, 2018 at 4:09 PM Oskari Lemmela wrote: > > Sopine baseboard have ACIN and battery connectors. The commit message should be more specific, like how the two connections from the PMIC are routed. In this case ACIN is routed from the SOM to the DC jack on the baseboard, while the batte

[PATCH AUTOSEL 4.14 61/61] mm/vmstat.c: fix outdated vmstat_text

2018-10-15 Thread Sasha Levin
From: Jann Horn [ Upstream commit 28e2c4bb99aa40f9d5f07ac130cbc4da0ea93079 ] 7a9cdebdcc17 ("mm: get rid of vmacache_flush_all() entirely") removed the VMACACHE_FULL_FLUSHES statistics, but didn't remove the corresponding entry in vmstat_text. This causes an out-of-bounds access in vmstat_show()

[PATCH AUTOSEL 4.14 60/61] ocfs2: fix crash in ocfs2_duplicate_clusters_by_page()

2018-10-15 Thread Sasha Levin
From: Larry Chen [ Upstream commit 69eb7765b9c6902444c89c54e7043242faf981e5 ] ocfs2_duplicate_clusters_by_page() may crash if one of the extent's pages is dirty. When a page has not been written back, it is still in dirty state. If ocfs2_duplicate_clusters_by_page() is called against the dirty

[PATCH AUTOSEL 4.9 12/38] net: hns: fix for unmapping problem when SMMU is on

2018-10-15 Thread Sasha Levin
From: Yunsheng Lin [ Upstream commit 2e9361efa707e186d91b938e44f9e326725259f7 ] If SMMU is on, there is more likely that skb_shinfo(skb)->frags[i] can not send by a single BD. when this happen, the hns_nic_net_xmit_hw function map the whole data in a frags using skb_frag_dma_map, but unmap each

[PATCH AUTOSEL 4.9 17/38] Bluetooth: SMP: fix crash in unpairing

2018-10-15 Thread Sasha Levin
From: Matias Karhumaa [ Upstream commit cb28c306b93b71f2741ce1a5a66289db26715f4d ] In case unpair_device() was called through mgmt interface at the same time when pairing was in progress, Bluetooth kernel module crash was seen. [ 600.351225] general protection fault: [#1] SMP PTI [ 600.3

[PATCH AUTOSEL 4.9 16/38] mac80211_hwsim: do not omit multicast announce of first added radio

2018-10-15 Thread Sasha Levin
From: Martin Willi [ Upstream commit 28ef8b49a338dc1844e86b7954cfffc7dfa2660a ] The allocation of hwsim radio identifiers uses a post-increment from 0, so the first radio has idx 0. This idx is explicitly excluded from multicast announcements ever since, but it is unclear why. Drop that idx che

[PATCH AUTOSEL 4.9 30/38] qlcnic: fix Tx descriptor corruption on 82xx devices

2018-10-15 Thread Sasha Levin
From: Shahed Shaikh [ Upstream commit c333fa0c4f220f8f7ea5acd6b0ebf3bf13fd684d ] In regular NIC transmission flow, driver always configures MAC using Tx queue zero descriptor as a part of MAC learning flow. But with multi Tx queue supported NIC, regular transmission can occur on any non-zero Tx

[PATCH AUTOSEL 4.9 31/38] i2c: i2c-scmi: fix for i2c_smbus_write_block_data

2018-10-15 Thread Sasha Levin
From: Edgar Cherkasov [ Upstream commit 08d9db00fe0e300d6df976e6c294f974988226dd ] The i2c-scmi driver crashes when the SMBus Write Block transaction is executed: WARNING: CPU: 9 PID: 2194 at mm/page_alloc.c:3931 __alloc_pages_slowpath+0x9db/0xec0 Call Trace: ? get_page_from_freelist+0x49d/

[PATCH AUTOSEL 4.9 03/38] mac80211: Always report TX status

2018-10-15 Thread Sasha Levin
From: Andrei Otcheretianski [ Upstream commit 8682250b3c1b75a45feb7452bc413d004cfe3778 ] If a frame is dropped for any reason, mac80211 wouldn't report the TX status back to user space. As the user space may rely on the TX_STATUS to kick its state machines, resends etc, it's better to just repo

[PATCH AUTOSEL 4.9 38/38] mm/vmstat.c: fix outdated vmstat_text

2018-10-15 Thread Sasha Levin
From: Jann Horn [ Upstream commit 28e2c4bb99aa40f9d5f07ac130cbc4da0ea93079 ] 7a9cdebdcc17 ("mm: get rid of vmacache_flush_all() entirely") removed the VMACACHE_FULL_FLUSHES statistics, but didn't remove the corresponding entry in vmstat_text. This causes an out-of-bounds access in vmstat_show()

[PATCH AUTOSEL 4.14 58/61] net: cxgb3_main: fix a missing-check bug

2018-10-15 Thread Sasha Levin
From: Wenwen Wang [ Upstream commit 2c05d88818ab6571816b93edce4d53703870d7ae ] In cxgb_extension_ioctl(), the command of the ioctl is firstly copied from the user-space buffer 'useraddr' to 'cmd' and checked through the switch statement. If the command is not as expected, an error code EOPNOTSUP

[PATCH AUTOSEL 4.14 59/61] yam: fix a missing-check bug

2018-10-15 Thread Sasha Levin
From: Wenwen Wang [ Upstream commit 0781168e23a2fc8dceb989f11fc5b39b3ccacc35 ] In yam_ioctl(), the concrete ioctl command is firstly copied from the user-space buffer 'ifr->ifr_data' to 'ioctl_cmd' and checked through the following switch statement. If the command is not as expected, an error co

[PATCH AUTOSEL 4.9 28/38] smsc75xx: Check for Wake-on-LAN modes

2018-10-15 Thread Sasha Levin
From: Florian Fainelli [ Upstream commit 9c734b2769a73eea2e9e9767c0e0bf839ff23679 ] The driver does not check for Wake-on-LAN modes specified by an user, but will conditionally set the device as wake-up enabled or not based on that, which could be a very confusing user experience. Fixes: 6c6365

[PATCH AUTOSEL 4.4 18/25] smsc75xx: Check for Wake-on-LAN modes

2018-10-15 Thread Sasha Levin
From: Florian Fainelli [ Upstream commit 9c734b2769a73eea2e9e9767c0e0bf839ff23679 ] The driver does not check for Wake-on-LAN modes specified by an user, but will conditionally set the device as wake-up enabled or not based on that, which could be a very confusing user experience. Fixes: 6c6365

[PATCH AUTOSEL 4.4 05/25] cfg80211: Address some corner cases in scan result channel updating

2018-10-15 Thread Sasha Levin
From: Jouni Malinen [ Upstream commit 119f94a6fefcc76d47075b83d2b73d04c895df78 ] cfg80211_get_bss_channel() is used to update the RX channel based on the available frame payload information (channel number from DSSS Parameter Set element or HT Operation element). This is needed on 2.4 GHz channe

[PATCH AUTOSEL 4.4 07/25] xfrm: validate template mode

2018-10-15 Thread Sasha Levin
From: Sean Tranchetti [ Upstream commit 32bf94fb5c2ec4ec842152d0e5937cd4bb6738fa ] XFRM mode parameters passed as part of the user templates in the IP_XFRM_POLICY are never properly validated. Passing values other than valid XFRM modes can cause stack-out-of-bounds reads to occur later in the XF

[PATCH AUTOSEL 4.4 09/25] Bluetooth: SMP: fix crash in unpairing

2018-10-15 Thread Sasha Levin
From: Matias Karhumaa [ Upstream commit cb28c306b93b71f2741ce1a5a66289db26715f4d ] In case unpair_device() was called through mgmt interface at the same time when pairing was in progress, Bluetooth kernel module crash was seen. [ 600.351225] general protection fault: [#1] SMP PTI [ 600.3

[PATCH AUTOSEL 4.4 04/25] cfg80211: reg: Init wiphy_idx in regulatory_hint_core()

2018-10-15 Thread Sasha Levin
From: Andrei Otcheretianski [ Upstream commit 24f33e64fcd0d50a4b1a8e5b41bd0257aa66b0e8 ] Core regulatory hints didn't set wiphy_idx to WIPHY_IDX_INVALID. Since the regulatory request is zeroed, wiphy_idx was always implicitly set to 0. This resulted in updating only phy #0. Fix that. Fixes: 806

Re: [RFC PATCH 29/30] softirq: Make softirq processing softinterruptible

2018-10-15 Thread Pavan Kondeti
Hi Frederic, On Thu, Oct 11, 2018 at 01:12:16AM +0200, Frederic Weisbecker wrote: > From: Frederic Weisbecker > > Make do_softirq() re-entrant and allow a vector, being either processed > or disabled, to be interrupted by another vector. This way a vector > won't be able to monopolize the CPU fo

[PATCH AUTOSEL 3.18 01/15] xfrm: Validate address prefix lengths in the xfrm selector.

2018-10-15 Thread Sasha Levin
From: Steffen Klassert [ Upstream commit 07bf7908950a8b14e81aa1807e3c667eab39287a ] We don't validate the address prefix lengths in the xfrm selector we got from userspace. This can lead to undefined behaviour in the address matching functions if the prefix is too big for the given address famil

[PATCH AUTOSEL 4.4 25/25] mm/vmstat.c: fix outdated vmstat_text

2018-10-15 Thread Sasha Levin
From: Jann Horn [ Upstream commit 28e2c4bb99aa40f9d5f07ac130cbc4da0ea93079 ] 7a9cdebdcc17 ("mm: get rid of vmacache_flush_all() entirely") removed the VMACACHE_FULL_FLUSHES statistics, but didn't remove the corresponding entry in vmstat_text. This causes an out-of-bounds access in vmstat_show()

[PATCH AUTOSEL 4.4 22/25] perf/ring_buffer: Prevent concurent ring buffer access

2018-10-15 Thread Sasha Levin
From: Jiri Olsa [ Upstream commit cd6fb677ce7e460c25bdd66f689734102ec7d642 ] Some of the scheduling tracepoints allow the perf_tp_event code to write to ring buffer under different cpu than the code is running on. This results in corrupted ring buffer data demonstrated in following perf command

[PATCH AUTOSEL 4.4 21/25] i2c: i2c-scmi: fix for i2c_smbus_write_block_data

2018-10-15 Thread Sasha Levin
From: Edgar Cherkasov [ Upstream commit 08d9db00fe0e300d6df976e6c294f974988226dd ] The i2c-scmi driver crashes when the SMBus Write Block transaction is executed: WARNING: CPU: 9 PID: 2194 at mm/page_alloc.c:3931 __alloc_pages_slowpath+0x9db/0xec0 Call Trace: ? get_page_from_freelist+0x49d/

[PATCH AUTOSEL 4.4 24/25] net: cxgb3_main: fix a missing-check bug

2018-10-15 Thread Sasha Levin
From: Wenwen Wang [ Upstream commit 2c05d88818ab6571816b93edce4d53703870d7ae ] In cxgb_extension_ioctl(), the command of the ioctl is firstly copied from the user-space buffer 'useraddr' to 'cmd' and checked through the switch statement. If the command is not as expected, an error code EOPNOTSUP

[PATCH AUTOSEL 3.18 12/15] i2c: i2c-scmi: fix for i2c_smbus_write_block_data

2018-10-15 Thread Sasha Levin
From: Edgar Cherkasov [ Upstream commit 08d9db00fe0e300d6df976e6c294f974988226dd ] The i2c-scmi driver crashes when the SMBus Write Block transaction is executed: WARNING: CPU: 9 PID: 2194 at mm/page_alloc.c:3931 __alloc_pages_slowpath+0x9db/0xec0 Call Trace: ? get_page_from_freelist+0x49d/

[PATCH AUTOSEL 3.18 15/15] net: cxgb3_main: fix a missing-check bug

2018-10-15 Thread Sasha Levin
From: Wenwen Wang [ Upstream commit 2c05d88818ab6571816b93edce4d53703870d7ae ] In cxgb_extension_ioctl(), the command of the ioctl is firstly copied from the user-space buffer 'useraddr' to 'cmd' and checked through the switch statement. If the command is not as expected, an error code EOPNOTSUP

[PATCH AUTOSEL 4.4 23/25] net/usb: cancel pending work when unbinding smsc75xx

2018-10-15 Thread Sasha Levin
From: Yu Zhao [ Upstream commit f7b2a56e1f3dcbdb4cf09b2b63e859ffe0e09df8 ] Cancel pending work before freeing smsc75xx private data structure during binding. This fixes the following crash in the driver: BUG: unable to handle kernel NULL pointer dereference at 0050 IP: mutex_lock+0x

[PATCH AUTOSEL 3.18 14/15] net/usb: cancel pending work when unbinding smsc75xx

2018-10-15 Thread Sasha Levin
From: Yu Zhao [ Upstream commit f7b2a56e1f3dcbdb4cf09b2b63e859ffe0e09df8 ] Cancel pending work before freeing smsc75xx private data structure during binding. This fixes the following crash in the driver: BUG: unable to handle kernel NULL pointer dereference at 0050 IP: mutex_lock+0x

[PATCH AUTOSEL 3.18 13/15] perf/ring_buffer: Prevent concurent ring buffer access

2018-10-15 Thread Sasha Levin
From: Jiri Olsa [ Upstream commit cd6fb677ce7e460c25bdd66f689734102ec7d642 ] Some of the scheduling tracepoints allow the perf_tp_event code to write to ring buffer under different cpu than the code is running on. This results in corrupted ring buffer data demonstrated in following perf command

[PATCH AUTOSEL 3.18 10/15] smsc95xx: Check for Wake-on-LAN modes

2018-10-15 Thread Sasha Levin
From: Florian Fainelli [ Upstream commit c530c471ba37bdd9fe1c7185b01455c00ae606fb ] The driver does not check for Wake-on-LAN modes specified by an user, but will conditionally set the device as wake-up enabled or not based on that, which could be a very confusing user experience. Fixes: e0e474

[PATCH AUTOSEL 3.18 08/15] sr9800: Check for supported Wake-on-LAN modes

2018-10-15 Thread Sasha Levin
From: Florian Fainelli [ Upstream commit c5cb93e994ffb43b7b3b1ff10b9f928f54574a36 ] The driver currently silently accepts unsupported Wake-on-LAN modes (other than WAKE_PHY or WAKE_MAGIC) without reporting that to the user, which is confusing. Fixes: 19a38d8e0aa3 ("USB2NET : SR9800 : One chip U

[PATCH AUTOSEL 3.18 09/15] smsc75xx: Check for Wake-on-LAN modes

2018-10-15 Thread Sasha Levin
From: Florian Fainelli [ Upstream commit 9c734b2769a73eea2e9e9767c0e0bf839ff23679 ] The driver does not check for Wake-on-LAN modes specified by an user, but will conditionally set the device as wake-up enabled or not based on that, which could be a very confusing user experience. Fixes: 6c6365

[PATCH AUTOSEL 3.18 11/15] qlcnic: fix Tx descriptor corruption on 82xx devices

2018-10-15 Thread Sasha Levin
From: Shahed Shaikh [ Upstream commit c333fa0c4f220f8f7ea5acd6b0ebf3bf13fd684d ] In regular NIC transmission flow, driver always configures MAC using Tx queue zero descriptor as a part of MAC learning flow. But with multi Tx queue supported NIC, regular transmission can occur on any non-zero Tx

[PATCH AUTOSEL 3.18 03/15] cfg80211: reg: Init wiphy_idx in regulatory_hint_core()

2018-10-15 Thread Sasha Levin
From: Andrei Otcheretianski [ Upstream commit 24f33e64fcd0d50a4b1a8e5b41bd0257aa66b0e8 ] Core regulatory hints didn't set wiphy_idx to WIPHY_IDX_INVALID. Since the regulatory request is zeroed, wiphy_idx was always implicitly set to 0. This resulted in updating only phy #0. Fix that. Fixes: 806

[PATCH AUTOSEL 3.18 05/15] xfrm: validate template mode

2018-10-15 Thread Sasha Levin
From: Sean Tranchetti [ Upstream commit 32bf94fb5c2ec4ec842152d0e5937cd4bb6738fa ] XFRM mode parameters passed as part of the user templates in the IP_XFRM_POLICY are never properly validated. Passing values other than valid XFRM modes can cause stack-out-of-bounds reads to occur later in the XF

[PATCH AUTOSEL 3.18 06/15] asix: Check for supported Wake-on-LAN modes

2018-10-15 Thread Sasha Levin
From: Florian Fainelli [ Upstream commit c4ce446e33d7a0e978256ac6fea4c80e59d9de5f ] The driver currently silently accepts unsupported Wake-on-LAN modes (other than WAKE_PHY or WAKE_MAGIC) without reporting that to the user, which is confusing. Fixes: 2e55cc7210fe ("[PATCH] USB: usbnet (3/9) mod

Re: [PATCH v4 7/7] mfd: axp20x: Add supported cells for AXP803

2018-10-15 Thread Chen-Yu Tsai
On Sat, Oct 13, 2018 at 4:09 PM Oskari Lemmela wrote: > > AXP803 is compatible with AXP813. > Adding cells for GPIO, ADC, AC and battery power supplies. They are not _completely_ compatible. A better way to phrase this would be: Parts of the AXP803 are compatible with their counterparts on the A

[PATCH AUTOSEL 3.18 07/15] ax88179_178a: Check for supported Wake-on-LAN modes

2018-10-15 Thread Sasha Levin
From: Florian Fainelli [ Upstream commit 5ba6b4aa9a410c5e2c6417df52b5e2118ea9b467 ] The driver currently silently accepts unsupported Wake-on-LAN modes (other than WAKE_PHY or WAKE_MAGIC) without reporting that to the user, which is confusing. Fixes: e2ca90c276e1 ("ax88179_178a: ASIX AX88179_17

[PATCH AUTOSEL 3.18 04/15] ARM: 8799/1: mm: fix pci_ioremap_io() offset check

2018-10-15 Thread Sasha Levin
From: Thomas Petazzoni [ Upstream commit 3a58ac65e2d7969bcdf1b6acb70fa4d12a88e53e ] IO_SPACE_LIMIT is the ending address of the PCI IO space, i.e something like 0xf (and not 0x10). Therefore, when offset = 0xf is passed as argument, this function fails even though the offset + SZ_64

[PATCH AUTOSEL 3.18 02/15] xfrm6: call kfree_skb when skb is toobig

2018-10-15 Thread Sasha Levin
From: Thadeu Lima de Souza Cascardo [ Upstream commit 215ab0f021c9fea3c18b75e7d522400ee6a49990 ] After commit d6990976af7c5d8f55903bfb4289b6fb030bf754 ("vti6: fix PMTU caching and reporting on xmit"), some too big skbs might be potentially passed down to __xfrm6_output, causing it to fail to tra

[PATCH AUTOSEL 4.4 16/25] sr9800: Check for supported Wake-on-LAN modes

2018-10-15 Thread Sasha Levin
From: Florian Fainelli [ Upstream commit c5cb93e994ffb43b7b3b1ff10b9f928f54574a36 ] The driver currently silently accepts unsupported Wake-on-LAN modes (other than WAKE_PHY or WAKE_MAGIC) without reporting that to the user, which is confusing. Fixes: 19a38d8e0aa3 ("USB2NET : SR9800 : One chip U

[PATCH AUTOSEL 4.4 14/25] ax88179_178a: Check for supported Wake-on-LAN modes

2018-10-15 Thread Sasha Levin
From: Florian Fainelli [ Upstream commit 5ba6b4aa9a410c5e2c6417df52b5e2118ea9b467 ] The driver currently silently accepts unsupported Wake-on-LAN modes (other than WAKE_PHY or WAKE_MAGIC) without reporting that to the user, which is confusing. Fixes: e2ca90c276e1 ("ax88179_178a: ASIX AX88179_17

[PATCH AUTOSEL 4.4 20/25] qlcnic: fix Tx descriptor corruption on 82xx devices

2018-10-15 Thread Sasha Levin
From: Shahed Shaikh [ Upstream commit c333fa0c4f220f8f7ea5acd6b0ebf3bf13fd684d ] In regular NIC transmission flow, driver always configures MAC using Tx queue zero descriptor as a part of MAC learning flow. But with multi Tx queue supported NIC, regular transmission can occur on any non-zero Tx

[PATCH AUTOSEL 4.4 19/25] smsc95xx: Check for Wake-on-LAN modes

2018-10-15 Thread Sasha Levin
From: Florian Fainelli [ Upstream commit c530c471ba37bdd9fe1c7185b01455c00ae606fb ] The driver does not check for Wake-on-LAN modes specified by an user, but will conditionally set the device as wake-up enabled or not based on that, which could be a very confusing user experience. Fixes: e0e474

[PATCH AUTOSEL 4.4 17/25] r8152: Check for supported Wake-on-LAN Modes

2018-10-15 Thread Sasha Levin
From: Florian Fainelli [ Upstream commit f2750df1548bd8a2b060eb609fc43ca82811af4c ] The driver does not check for Wake-on-LAN modes specified by an user, but will conditionally set the device as wake-up enabled or not based on that, which could be a very confusing user experience. Fixes: 21ff2e

[PATCH AUTOSEL 4.4 15/25] lan78xx: Check for supported Wake-on-LAN modes

2018-10-15 Thread Sasha Levin
From: Florian Fainelli [ Upstream commit eb9ad088f96653a26b340f7c447c44cf023d5cdc ] The driver supports a fair amount of Wake-on-LAN modes, but is not checking that the user specified one that is supported. Fixes: 55d7de9de6c3 ("Microchip's LAN7800 family USB 2/3 to 10/100/1000 Ethernet device

[PATCH AUTOSEL 4.4 11/25] bonding: avoid possible dead-lock

2018-10-15 Thread Sasha Levin
From: Mahesh Bandewar [ Upstream commit d4859d749aa7090ffb743d15648adb962a1baeae ] Syzkaller reported this on a slightly older kernel but it's still applicable to the current kernel - == WARNING: possible circular locking dependency detected 4

[PATCH AUTOSEL 4.4 13/25] asix: Check for supported Wake-on-LAN modes

2018-10-15 Thread Sasha Levin
From: Florian Fainelli [ Upstream commit c4ce446e33d7a0e978256ac6fea4c80e59d9de5f ] The driver currently silently accepts unsupported Wake-on-LAN modes (other than WAKE_PHY or WAKE_MAGIC) without reporting that to the user, which is confusing. Fixes: 2e55cc7210fe ("[PATCH] USB: usbnet (3/9) mod

[PATCH AUTOSEL 4.4 12/25] bnxt_en: Fix TX timeout during netpoll.

2018-10-15 Thread Sasha Levin
From: Michael Chan [ Upstream commit 73f21c653f930f438d53eed29b5e4c65c8a0f906 ] The current netpoll implementation in the bnxt_en driver has problems that may miss TX completion events. bnxt_poll_work() in effect is only handling at most 1 TX packet before exiting. In addition, there may be in

[PATCH AUTOSEL 4.4 10/25] pxa168fb: prepare the clock

2018-10-15 Thread Sasha Levin
From: Lubomir Rintel [ Upstream commit d85536cde91fcfed6fb8d983783bd2b92c843939 ] Add missing prepare/unprepare operations for fbi->clk, this fixes following kernel warning: [ cut here ] WARNING: CPU: 0 PID: 1 at drivers/clk/clk.c:874 clk_core_enable+0x2c/0x1b0 Ena

[PATCH AUTOSEL 4.4 02/25] xfrm6: call kfree_skb when skb is toobig

2018-10-15 Thread Sasha Levin
From: Thadeu Lima de Souza Cascardo [ Upstream commit 215ab0f021c9fea3c18b75e7d522400ee6a49990 ] After commit d6990976af7c5d8f55903bfb4289b6fb030bf754 ("vti6: fix PMTU caching and reporting on xmit"), some too big skbs might be potentially passed down to __xfrm6_output, causing it to fail to tra

[PATCH AUTOSEL 4.4 01/25] xfrm: Validate address prefix lengths in the xfrm selector.

2018-10-15 Thread Sasha Levin
From: Steffen Klassert [ Upstream commit 07bf7908950a8b14e81aa1807e3c667eab39287a ] We don't validate the address prefix lengths in the xfrm selector we got from userspace. This can lead to undefined behaviour in the address matching functions if the prefix is too big for the given address famil

[PATCH AUTOSEL 4.4 08/25] mac80211_hwsim: do not omit multicast announce of first added radio

2018-10-15 Thread Sasha Levin
From: Martin Willi [ Upstream commit 28ef8b49a338dc1844e86b7954cfffc7dfa2660a ] The allocation of hwsim radio identifiers uses a post-increment from 0, so the first radio has idx 0. This idx is explicitly excluded from multicast announcements ever since, but it is unclear why. Drop that idx che

[PATCH AUTOSEL 4.4 06/25] ARM: 8799/1: mm: fix pci_ioremap_io() offset check

2018-10-15 Thread Sasha Levin
From: Thomas Petazzoni [ Upstream commit 3a58ac65e2d7969bcdf1b6acb70fa4d12a88e53e ] IO_SPACE_LIMIT is the ending address of the PCI IO space, i.e something like 0xf (and not 0x10). Therefore, when offset = 0xf is passed as argument, this function fails even though the offset + SZ_64

[PATCH AUTOSEL 4.4 03/25] mac80211: Always report TX status

2018-10-15 Thread Sasha Levin
From: Andrei Otcheretianski [ Upstream commit 8682250b3c1b75a45feb7452bc413d004cfe3778 ] If a frame is dropped for any reason, mac80211 wouldn't report the TX status back to user space. As the user space may rely on the TX_STATUS to kick its state machines, resends etc, it's better to just repo

[PATCH AUTOSEL 4.9 37/38] net: cxgb3_main: fix a missing-check bug

2018-10-15 Thread Sasha Levin
From: Wenwen Wang [ Upstream commit 2c05d88818ab6571816b93edce4d53703870d7ae ] In cxgb_extension_ioctl(), the command of the ioctl is firstly copied from the user-space buffer 'useraddr' to 'cmd' and checked through the switch statement. If the command is not as expected, an error code EOPNOTSUP

[PATCH AUTOSEL 4.9 33/38] perf/x86/intel/uncore: Fix PCI BDF address of M3UPI on SKX

2018-10-15 Thread Sasha Levin
From: Kan Liang [ Upstream commit 9d92cfeaf5215158d26d2991be7f7ff865cb98f3 ] The counters on M3UPI Link 0 and Link 3 don't count properly, and writing 0 to these counters may causes system crash on some machines. The PCI BDF addresses of the M3UPI in the current code are incorrect. The correct

[PATCH AUTOSEL 4.9 36/38] net/usb: cancel pending work when unbinding smsc75xx

2018-10-15 Thread Sasha Levin
From: Yu Zhao [ Upstream commit f7b2a56e1f3dcbdb4cf09b2b63e859ffe0e09df8 ] Cancel pending work before freeing smsc75xx private data structure during binding. This fixes the following crash in the driver: BUG: unable to handle kernel NULL pointer dereference at 0050 IP: mutex_lock+0x

[PATCH AUTOSEL 4.9 29/38] smsc95xx: Check for Wake-on-LAN modes

2018-10-15 Thread Sasha Levin
From: Florian Fainelli [ Upstream commit c530c471ba37bdd9fe1c7185b01455c00ae606fb ] The driver does not check for Wake-on-LAN modes specified by an user, but will conditionally set the device as wake-up enabled or not based on that, which could be a very confusing user experience. Fixes: e0e474

[PATCH AUTOSEL 4.9 32/38] perf/ring_buffer: Prevent concurent ring buffer access

2018-10-15 Thread Sasha Levin
From: Jiri Olsa [ Upstream commit cd6fb677ce7e460c25bdd66f689734102ec7d642 ] Some of the scheduling tracepoints allow the perf_tp_event code to write to ring buffer under different cpu than the code is running on. This results in corrupted ring buffer data demonstrated in following perf command

[PATCH AUTOSEL 4.9 34/38] net: fec: fix rare tx timeout

2018-10-15 Thread Sasha Levin
From: Rickard x Andersson [ Upstream commit 657ade07df72847f591ccdb36bd9b91ed0edbac3 ] During certain heavy network loads TX could time out with TX ring dump. TX is sometimes never restarted after reaching "tx_stop_threshold" because function "fec_enet_tx_queue" only tests the first queue. In a

[PATCH AUTOSEL 4.9 35/38] declance: Fix continuation with the adapter identification message

2018-10-15 Thread Sasha Levin
From: "Maciej W. Rozycki" [ Upstream commit fe3a83af6a50199bf250fa331e94216912f79395 ] Fix a commit 4bcc595ccd80 ("printk: reinstate KERN_CONT for printing continuation lines") regression with the `declance' driver, which caused the adapter identification message to be split between two lines, e

[PATCH AUTOSEL 4.9 27/38] r8152: Check for supported Wake-on-LAN Modes

2018-10-15 Thread Sasha Levin
From: Florian Fainelli [ Upstream commit f2750df1548bd8a2b060eb609fc43ca82811af4c ] The driver does not check for Wake-on-LAN modes specified by an user, but will conditionally set the device as wake-up enabled or not based on that, which could be a very confusing user experience. Fixes: 21ff2e

[PATCH AUTOSEL 4.9 25/38] lan78xx: Check for supported Wake-on-LAN modes

2018-10-15 Thread Sasha Levin
From: Florian Fainelli [ Upstream commit eb9ad088f96653a26b340f7c447c44cf023d5cdc ] The driver supports a fair amount of Wake-on-LAN modes, but is not checking that the user specified one that is supported. Fixes: 55d7de9de6c3 ("Microchip's LAN7800 family USB 2/3 to 10/100/1000 Ethernet device

[PATCH AUTOSEL 4.9 26/38] sr9800: Check for supported Wake-on-LAN modes

2018-10-15 Thread Sasha Levin
From: Florian Fainelli [ Upstream commit c5cb93e994ffb43b7b3b1ff10b9f928f54574a36 ] The driver currently silently accepts unsupported Wake-on-LAN modes (other than WAKE_PHY or WAKE_MAGIC) without reporting that to the user, which is confusing. Fixes: 19a38d8e0aa3 ("USB2NET : SR9800 : One chip U

<    1   2   3   4   5   6   7   8   9   >