[PATCH 3.18 11/50] arm64: fix COMPAT_SHMLBA definition for large pages

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit b9b7aebb42d1b1392f3111de61136bb6cf3aae3f ] ARM glibc uses (4 * __getpagesize()) for SHMLBA, which is correct for 4KB pages and works fine for 64KB pages, but the kernel uses a hardco

[PATCH 3.18 37/50] ALSA: pcm: Fix possible OOB access in PCM oss plugins

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit ca0214ee2802dd47239a4e39fb21c5b00ef61b22 upstream. The PCM OSS emulation converts and transfers the data on the fly via "plugins". The data is converted over the dynamical

[PATCH 3.18 35/50] sctp: get sctphdr by offset in sctp_compute_cksum

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Xin Long [ Upstream commit 273160ffc6b993c7c91627f5a84799c66dfe4dee ] sctp_hdr(skb) only works when skb->transport_header is set properly. But in Netfilter, skb->transport_header for ipv6 is

[PATCH 3.18 38/50] ALSA: pcm: Dont suspend stream in unrecoverable PCM state

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Takashi Iwai commit 113ce08109f8e3b091399e7cc32486df1cff48e7 upstream. Currently PCM core sets each opened stream forcibly to SUSPENDED state via snd_pcm_suspend_all() call, and the user-space

[PATCH 3.18 41/50] USB: serial: cp210x: add new device id

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Greg Kroah-Hartman commit a595ecdd5f60b2d93863cebb07eec7f935839b54 upstream. Lorenz Messtechnik has a device that is controlled by the cp210x driver, so add the device id to the driver. The d

[PATCH 3.18 42/50] USB: serial: ftdi_sio: add additional NovaTech products

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: George McCollister commit 422c2537ba9d42320f8ab6573940269f87095320 upstream. Add PIDs for the NovaTech OrionLX+ and Orion I/O so they can be automatically detected. Signed-off-by: George McCo

Re: [PATCHv1 6/7] vfio/mdev: Fix aborting mdev child device removal if one fails

2019-04-01 Thread Cornelia Huck
On Tue, 26 Mar 2019 22:45:44 -0500 Parav Pandit wrote: > device_for_each_child() stops executing callback function for remaining > child devices, if callback hits an error. > Each child mdev device is independent of each other. > While unregistering parent device, mdev core must remove all child

[PATCH 3.18 48/50] xhci: Fix port resume done detection for SS ports with LPM enabled

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Mathias Nyman commit 6cbcf596934c8e16d6288c7cc62dfb7ad8eadf15 upstream. A suspended SS port in U3 link state will go to U0 when resumed, but can almost immediately after that enter U1 or U2 li

[PATCH 3.18 12/50] ARM: 8458/1: bL_switcher: add GIC dependency

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 6c044fecdf78be3fda159a5036bb33700cdd5e59 ] It is not possible to build the bL_switcher code if the GIC driver is disabled, because it relies on calling into some gic specific interfa

[PATCH 3.18 16/50] staging: ashmem: Add missing include

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 90a2f171383b5ae43b33ab4d9d566b9765622ac7 ] Include into ashmem.h to ensure referenced types are defined Cc: Android Kernel Team Cc: Greg KH Signed-off-by: Rom Lemarchand [jstult

[PATCH 3.18 45/50] fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: YueHaibing commit 23da9588037ecdd4901db76a5b79a42b529c4ec3 upstream. Syzkaller reports: kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: [#1]

[PATCH 3.18 17/50] staging: ion: Set minimum carveout heap allocation order to PAGE_SHIFT

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 1328d8efef17d5e16bd6e9cfe59130a833674534 ] In carveout heap, change minimum allocation order from 12 to PAGE_SHIFT. After this change each bit in bitmap (genalloc - General purpose s

[PATCH 3.18 39/50] scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP devices

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Steffen Maier commit 242ec1455151267fe35a0834aa9038e4c4670884 upstream. Suppose more than one non-NPIV FCP device is active on the same channel. Send I/O to storage and have some of the pendin

[PATCH 3.18 47/50] KVM: Reject device ioctls from processes other than the VMs creator

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Sean Christopherson commit ddba91801aeb5c160b660caed1800eb3aef403f8 upstream. KVM's API requires thats ioctls must be issued from the same process that created the VM. In other words, userspa

[PATCH 3.18 08/50] Bluetooth: Check L2CAP option sizes returned from l2cap_get_conf_opt

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Marcel Holtmann commit af3d5d1c87664a4f150fcf3534c6567cb19909b0 upstream. When doing option parsing for standard type values of 1, 2 or 4 octets, the value is converted directly into a variabl

[PATCH 3.18 49/50] ARM: imx6q: cpuidle: fix bug that CPU might not wake up at expected time

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Kohji Okuno commit 91740fc8242b4f260cfa4d4536d8551804777fae upstream. In the current cpuidle implementation for i.MX6q, the CPU that sets 'WAIT_UNCLOCKED' and the CPU that returns to 'WAIT_CLO

[PATCH 3.18 14/50] asm-generic: Fix local variable shadow in __set_fixmap_offset

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 3694bd76781b76c4f8d2ecd85018feeb1609f0e5 ] Currently __set_fixmap_offset is a macro function which has a local variable called 'addr'. If a caller passes a 'phys' parameter which is

[PATCH 3.18 13/50] android: unconditionally remove callbacks in sync_fence_free()

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 699f685569434510d944e419f4048c4e3ba8d631 ] Using fence->status to determine whether or not there are callbacks remaining on the sync_fence is racy since fence->status may have been d

Re: [PATCH 2/4] staging: iio: ad9832: add SPDX identifier

2019-04-01 Thread Greg KH
On Mon, Apr 01, 2019 at 08:36:50PM +0530, Mukesh Ojha wrote: > > On 4/1/2019 8:07 PM, Marcelo Schmitt wrote: > > Add SPDX identifier of GPL-2.0 for the ad9832 driver. > > > > Signed-off-by: Marcelo Schmitt > > --- > > drivers/staging/iio/frequency/ad9832.c | 3 +-- > > 1 file changed, 1 inser

[PATCH 3.18 15/50] staging: ashmem: Avoid deadlock with mmap/shrink

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 18e77054de741ef3ed2a2489bc9bf82a318b2d5e ] Both ashmem_mmap and ashmem_shrink take the ashmem_lock. It may be possible for ashmem_mmap to invoke ashmem_shrink: -000|mutex_lock(lock

[PATCH 3.18 50/50] arm64: support keyctl() system call in 32-bit mode

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 5c2a625937ba49bc691089370638223d310cda9a ] As is the case for a number of other architectures that have a 32-bit compat mode, enable KEYS_COMPAT if both COMPAT and KEYS are enabled.

[PATCH 3.18 46/50] gpio: adnp: Fix testing wrong value in adnp_gpio_direction_input

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Axel Lin commit c5bc6e526d3f217ed2cc3681d256dc4a2af4cc2b upstream. Current code test wrong value so it does not verify if the written data is correctly read back. Fix it. Also make it return -

[PATCH 3.18 44/50] Disable kgdboc failed by echo space to /sys/module/kgdboc/parameters/kgdboc

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Wentao Wang commit 3ec8002951ea173e24b466df1ea98c56b7920e63 upstream. Echo "" to /sys/module/kgdboc/parameters/kgdboc will fail with "No such device” error. This is caused by function "config

[PATCH 3.18 40/50] serial: max310x: Fix to avoid potential NULL pointer dereference

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Aditya Pakki commit 3a10e3dd52e80b9a97a3346020024d17b2c272d6 upstream. of_match_device can return a NULL pointer when matching device is not found. This patch avoids a scenario causing NULL po

[PATCH 3.18 43/50] USB: serial: mos7720: fix mos_parport refcount imbalance on error path

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Lin Yi commit 2908b076f5198d231de62713cb2b633a3a4b95ac upstream. The write_parport_reg_nonblock() helper takes a reference to the struct mos_parport, but failed to release it in a couple of er

[PATCH 3.18 36/50] mac8390: Fix mmio access size probe

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Finn Thain [ Upstream commit bb9e5c5bcd76f4474eac3baf643d7a39f7bac7bb ] The bug that Stan reported is as follows. After a restart, a 16-bit NIC may be incorrectly identified as a 32-bit NIC an

[PATCH 3.18 31/50] net: rose: fix a possible stack overflow

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit e5dcc0c3223c45c94100f05f28d8ef814db3d82c ] rose_write_internal() uses a temp buffer of 100 bytes, but a manual inspection showed that given arbitrary input, rose

[PATCH 3.18 32/50] Add hlist_add_tail_rcu() (Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net)

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: David S. Miller commit 1602f49b58abcb0d34a5f0a29d68e7c1769547aa upstream. [This commit was a merge, but it added hlist_add_tail_rcu(), which is what we need in this stable tree, so I've chang

[PATCH 3.18 34/50] tcp: do not use ipv6 header for ipv4 flow

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 89e4130939a20304f4059ab72179da81f5347528 ] When a dual stack tcp listener accepts an ipv4 flow, it should not attempt to use an ipv6 header or tcp_v6_iif() helpe

[PATCH 3.18 33/50] packets: Always register packet sk in the same order

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Maxime Chevallier [ Upstream commit a4dc6a49156b1f8d6e17251ffda17c9e6a5db78a ] When using fanouts with AF_PACKET, the demux functions such as fanout_demux_cpu will return an index in the fanou

Re: [PATCH v2 7/7] MAINTAINERS: sm712fb: list myself as one maintainer.

2019-04-01 Thread Tom Li
On Sun, Mar 31, 2019 at 08:08:01PM +0100, Sudip Mukherjee wrote: > Technically I donot have any problem with this, you seem to know more > about SM712 than I know. But Teddy Wang is also an existing maintainer > and I think there should be an ack from him before this is accepted. Okay, I'll write

Re: [PATCH AUTOSEL 4.14 18/37] nvme-pci: fix conflicting p2p resource adds

2019-04-01 Thread Heitke, Kenneth
On 3/29/2019 7:30 PM, Sasha Levin wrote: From: Keith Busch [ Upstream commit 9fe5c59ff6a1e5e26a39b75489a1420e7eaaf0b1 ] The nvme pci driver had been adding its CMB resource to the P2P DMA subsystem everytime on on a controller reset. This results in the following warning:

[PATCH 3.18 28/50] dccp: do not use ipv6 header for ipv4 flow

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit e0aa67709f89d08c8d8e5bdd9e0b649df61d0090 ] When a dual stack dccp listener accepts an ipv4 flow, it should not attempt to use an ipv6 header or inet6_iif() helpe

[PATCH 3.18 23/50] usb: gadget: configfs: add mutex lock before unregister gadget

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit cee51c33f52ebf673a088a428ac0fecc33ab77fa ] There may be a race condition if f_fs calls unregister_gadget_item in ffs_closed() when unregister_gadget is called by UDC store at the sam

[PATCH 3.18 22/50] ipv6: fix endianness error in icmpv6_err

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit dcb94b88c09ce82a80e188d49bcffdc83ba215a6 ] IPv6 ping socket error handler doesn't correctly convert the new 32 bit mtu to host endianness before using. Cc: Lorenzo Colitti Fixes: 6

[PATCH 3.18 09/50] Bluetooth: Verify that l2cap_get_conf_opt provides large enough buffer

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Marcel Holtmann commit 7c9cbd0b5e38a1672fcd137894ace3b042dfbf69 upstream. The function l2cap_get_conf_opt will return L2CAP_CONF_OPT_SIZE + opt->len as length value. The opt->len however is in

[PATCH 3.18 19/50] ARM: 8510/1: rework ARM_CPU_SUSPEND dependencies

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 1b9bdf5c1661873a10e193b8cbb803a87fe5c4a1 ] The code enabled by the ARM_CPU_SUSPEND config option is used by kernel subsystems for purposes that go beyond system suspend so its config

[PATCH 3.18 00/50] 3.18.138-stable review

2019-04-01 Thread Greg Kroah-Hartman
This is the start of the stable review cycle for the 3.18.138 release. There are 50 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Apr 3 16:59:36 UTC 2019. Anything recei

[PATCH 4.4 129/131] arm64: support keyctl() system call in 32-bit mode

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 5c2a625937ba49bc691089370638223d310cda9a ] As is the case for a number of other architectures that have a 32-bit compat mode, enable KEYS_COMPAT if both COMPAT and KEYS are enabled. T

[PATCH 4.4 130/131] coresight: removing bind/unbind options from sysfs

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit b15f0fb657e040401d875d11ae13b269af8a16e0 ] The coresight drivers have absolutely no control over bind and unbind operations triggered from sysfs. The operations simply can't be cancel

[PATCH 3.18 02/50] futex: Ensure that futex address is aligned in handle_futex_death()

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Chen Jie commit 5a07168d8d89b00fe1760120714378175b3ef992 upstream. The futex code requires that the user space addresses of futexes are 32bit aligned. sys_futex() checks this in futex_get_keys

[PATCH 3.18 01/50] udf: Fix crash on IO error during truncate

2019-04-01 Thread Greg Kroah-Hartman
3.18-stable review patch. If anyone has any objections, please let me know. -- From: Jan Kara commit d3ca4651d05c0ff7259d087d8c949bcf3e14fb46 upstream. When truncate(2) hits IO error when reading indirect extent block the code just bugs with: kernel BUG at linux-4.15.0/fs/udf

[PATCH 4.4 128/131] Revert "USB: core: only clean up what we allocated"

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Greg Kroah-Hartman commit cf4df407e0d7cde60a45369c2a3414d18e2d4fdd upstream. This reverts commit 32fd87b3bbf5f7a045546401dfe2894dbbf4d8c3. Alan wrote a better fix for this... Cc: Andrey Konov

[PATCH 4.4 124/131] perf intel-pt: Fix TSC slip

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Adrian Hunter commit f3b4e06b3bda759afd042d3d5fa86bea8f1fe278 upstream. A TSC packet can slip past MTC packets so that the timestamp appears to go backwards. One estimate is that can be up to a

Re: [PATCH 4.4 034/131] lib/int_sqrt: optimize small argument

2019-04-01 Thread Joe Perches
On Mon, 2019-04-01 at 19:01 +0200, Greg Kroah-Hartman wrote: > 4.4-stable review patch. If anyone has any objections, please let me know. If this is to be ported just for an optimization (which I think is dubious as it's not a bug fix), why not port the __fls optimization too? __fls has a bigger

[PATCH 4.4 086/131] arm64: kconfig: drop CONFIG_RTC_LIB dependency

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 99a507771fa57238dc7ffe674ae06090333d02c9 ] The rtc-lib dependency is not required, and seems it was just copy-pasted from ARM's Kconfig. If platform requires rtc-lib, they should sele

WARNING in cma_exit_net

2019-04-01 Thread syzbot
Hello, syzbot found the following crash on: HEAD commit:e3ecb83e Add linux-next specific files for 20190401 git tree: linux-next console output: https://syzkaller.appspot.com/x/log.txt?x=13bc36cd20 kernel config: https://syzkaller.appspot.com/x/.config?x=db6c9f2bfeb91a99

RE: [PATCH V3 05/10] arm64: tegra: fix default tap and trim values

2019-04-01 Thread Sowjanya Komatineni
> > > > > > Default tap and trim values are incorrect for Tegra186 SDMMC4. > > > This patch fixes it. > > > > > > Tested-by: Jon Hunter > > > Signed-off-by: Sowjanya Komatineni > > > > Is this a fix and/or for stable? > > > > In either case, I am leaving this for arm-soc. > > > > Kind regards > >

[PATCH 4.4 119/131] USB: serial: option: set driver_info for SIM5218 and compatibles

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Mans Rullgard commit f8df5c2c3e2df5ffaf9fb5503da93d477a8c7db4 upstream. The SIMCom SIM5218 and compatible devices have 5 USB interfaces, only 4 of which are serial ports. The fifth is a networ

[PATCH 4.4 083/131] usb: gadget: rndis: free response queue during REMOTE_NDIS_RESET_MSG

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 207707d8fd48ebc977fb2b2794004a020e1ee08e ] When rndis data transfer is in progress, some Windows7 Host PC is not sending the GET_ENCAPSULATED_RESPONSE command for receiving the respon

KASAN: use-after-free Read in cma_check_port

2019-04-01 Thread syzbot
Hello, syzbot found the following crash on: HEAD commit:e3ecb83e Add linux-next specific files for 20190401 git tree: linux-next console output: https://syzkaller.appspot.com/x/log.txt?x=12e4893720 kernel config: https://syzkaller.appspot.com/x/.config?x=db6c9f2bfeb91a99

[PATCH 4.4 082/131] usb: gadget: configfs: add mutex lock before unregister gadget

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit cee51c33f52ebf673a088a428ac0fecc33ab77fa ] There may be a race condition if f_fs calls unregister_gadget_item in ffs_closed() when unregister_gadget is called by UDC store at the same

[PATCH 4.4 114/131] serial: max310x: Fix to avoid potential NULL pointer dereference

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Aditya Pakki commit 3a10e3dd52e80b9a97a3346020024d17b2c272d6 upstream. of_match_device can return a NULL pointer when matching device is not found. This patch avoids a scenario causing NULL poi

[PATCH 4.4 109/131] scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Steffen Maier commit fe67888fc007a76b81e37da23ce5bd8fb95890b0 upstream. An already deleted SCSI device can exist on the Scsi_Host and remain there because something still holds a reference. A

[PATCH 4.4 103/131] ALSA: compress: add support for 32bit calls in a 64bit kernel

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Ravindra Lokhande commit c10368897e104c008c610915a218f0fe5fa4ec96 upstream. Compress offload does not support ioctl calls from a 32bit userspace in a 64 bit kernel. This patch adds support for

[PATCH 4.4 101/131] btrfs: raid56: properly unmap parity page in finish_parity_scrub()

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Andrea Righi commit 3897b6f0a859288c22fb793fad11ec2327e60fcd upstream. Parity page is incorrectly unmapped in finish_parity_scrub(), triggering a reference counter bug on i386, i.e.: [ 157.66

[PATCH] habanalabs: prevent CPU soft lockup on Palladium

2019-04-01 Thread Oded Gabbay
Unmapping ptes in the device MMU on Palladium can take a long time, which can cause a kernel BUG of CPU soft lockup. This patch minimize the chances for this bug by sleeping a little between unmapping ptes. Signed-off-by: Oded Gabbay --- drivers/misc/habanalabs/memory.c | 11 +-- 1 file

[PATCH 4.4 096/131] tcp: do not use ipv6 header for ipv4 flow

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit 89e4130939a20304f4059ab72179da81f5347528 ] When a dual stack tcp listener accepts an ipv4 flow, it should not attempt to use an ipv6 header or tcp_v6_iif() helper

[RFC PATCH 2/5] dt: bindings: Add multicolor class dt bindings documention

2019-04-01 Thread Dan Murphy
Add DT bindings for the LEDs multicolor class framework. Signed-off-by: Dan Murphy --- .../bindings/leds/leds-class-multicolor.txt | 140 ++ 1 file changed, 140 insertions(+) create mode 100644 Documentation/devicetree/bindings/leds/leds-class-multicolor.txt diff --git a/Doc

[PATCH 4.4 095/131] packets: Always register packet sk in the same order

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Maxime Chevallier [ Upstream commit a4dc6a49156b1f8d6e17251ffda17c9e6a5db78a ] When using fanouts with AF_PACKET, the demux functions such as fanout_demux_cpu will return an index in the fanout

[RFC PATCH 5/5] leds: multicolor: Introduce a multicolor class definition

2019-04-01 Thread Dan Murphy
Introduce a multicolor class that groups colored LEDs within a LED node. The framework allows for dynamically setting individual LEDs or setting brightness levels of LEDs and updating them virtually simultaneously. Signed-off-by: Dan Murphy --- drivers/leds/Kconfig | 10 + driv

[RFC PATCH 0/5] MultiColor LED framework Documentation

2019-04-01 Thread Dan Murphy
I am RFCing these patches to start this Multicolor framework as it appears we have a few devices that need to leverage a framework like this. I have attempted to create as much documentation as possible and have no issue in combining documents into a single document but I think this patchset is l

[PATCH 4.4 094/131] Add hlist_add_tail_rcu() (Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net)

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: David S. Miller commit 1602f49b58abcb0d34a5f0a29d68e7c1769547aa upstream. [This commit was a merge, but it added hlist_add_tail_rcu(), which is what we need in this stable tree, so I've change

[RFC PATCH 4/5] dt-bindings: leds: Add LED_COLOR_ID and COLOR_NAME definitions

2019-04-01 Thread Dan Murphy
This patch is being added to demonstrate reuse of Jacek's patch https://lore.kernel.org/patchwork/patch/1056726/ I have added color name definitions to the above patch. I do not claim authorship and the intent of this patch to strictly for demonstration. Signed-off-by: Dan Murphy --- include/dt

[RFC PATCH 1/5] leds: multicolor: Add sysfs interface definition

2019-04-01 Thread Dan Murphy
Add a documentation of LED Multicolor LED class specific sysfs attributes. Signed-off-by: Dan Murphy --- .../ABI/testing/sysfs-class-led-multicolor| 91 +++ 1 file changed, 91 insertions(+) create mode 100644 Documentation/ABI/testing/sysfs-class-led-multicolor diff --git a

[PATCH 4.4 093/131] net: rose: fix a possible stack overflow

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet [ Upstream commit e5dcc0c3223c45c94100f05f28d8ef814db3d82c ] rose_write_internal() uses a temp buffer of 100 bytes, but a manual inspection showed that given arbitrary input, rose_

[PATCH 4.4 080/131] stm class: Fix stm device initialization order

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 389b6699a2aa0b457aa69986e9ddf39f3b4030fd ] Currently, stm_register_device() makes the device visible and then proceeds to initializing spinlocks and other properties, which leaves a w

[PATCH 4.4 046/131] android: unconditionally remove callbacks in sync_fence_free()

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 699f685569434510d944e419f4048c4e3ba8d631 ] Using fence->status to determine whether or not there are callbacks remaining on the sync_fence is racy since fence->status may have been de

[PATCH 4.4 078/131] PM / Hibernate: Call flush_icache_range() on pages restored in-place

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit f6cf0545ec697ddc278b7457b7d0c0d86a2ea88e ] Some architectures require code written to memory as if it were data to be 'cleaned' from any data caches before the processor can fetch the

Re: WARNING in cma_exit_net

2019-04-01 Thread Jason Gunthorpe
On Mon, Apr 01, 2019 at 10:36:05AM -0700, syzbot wrote: > Hello, > > syzbot found the following crash on: > > HEAD commit:e3ecb83e Add linux-next specific files for 20190401 > git tree: linux-next > console output: https://syzkaller.appspot.com/x/log.txt?x=13

Re: [PATCH] usb: musb: Force-disable pullup on shutdown

2019-04-01 Thread Paul Cercueil
Le lun. 1 avril 2019 à 19:17, Bin Liu a écrit : On Thu, Mar 21, 2019 at 03:42:46PM +0100, Paul Cercueil wrote: When the musb is shutdown, for instance when the driver is unloaded, force-disable the pullup. Otherwise, the host will still see the gadget device even after the shutdown. h

Re: [PATCH v2 0/5] pid: add pidfd_open()

2019-04-01 Thread Linus Torvalds
On Mon, Apr 1, 2019 at 9:45 AM Daniel Colascione wrote: > > But doesn't the CSIGNAL approach still require that libraries somehow > coordinate which non-SIGCHLD signal they use? Yes. As mentioned, this was seldom used. In some cases it's ok, eg aio would just specify the signal in sigev_signo (e

[PATCH 4.4 064/131] stm class: Fix unbalanced module/device refcounting

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit f7c81c7176c72c7899390754b4b038a64b296e4d ] STM code takes references to the stm device and its module for the duration of the character device's existence or the stm_source link. Drop

[PATCH 4.4 062/131] stm class: Fix unlocking braino in the error path

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 1810f2c44817c74ca3d05d1e3981e3a2e2ceb6f5 ] If an illegal attempt is made to unlink stm source device from an stm device, the stm device's link spinlock mistakenly remains locked. Whil

[PATCH 4.4 063/131] stm class: Guard output assignment against concurrency

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit cde4ad8368840e414ecf67db258fe1dabaa5fd2e ] It is possible to concurrently assign the same output (a character device writer or an stm_source device) to different stm devices, which se

[PATCH 4.4 060/131] stm class: Prevent user-controllable allocations

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit f08b18266c7116e2ec6885dd53a928f580060a71 ] Currently, the character device write method allocates a temporary buffer for user's data, but the user's data size is not sanitized and can

[PATCH v2] bmp085.yaml: transform DT documentation of iio sensor into YAML

2019-04-01 Thread Andreas Klinger
use bmp085.txt and change it into yaml format fix links to datasheets in replaced documentation Signed-off-by: Andreas Klinger --- .../devicetree/bindings/iio/pressure/bmp085.txt| 27 - .../devicetree/bindings/iio/pressure/bmp085.yaml | 70 ++ 2 files changed,

[PATCH 4.4 041/131] mmc: block: Allow more than 8 partitions per card

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 382c55f88ffeb218c446bf0c46d0fc25d2795fe2 ] It is quite common for Android devices to utilize more then 8 partitions on internal eMMC storage. The vanilla kernel can support this via

[PATCH 4.4 050/131] perf: Synchronously free aux pages in case of allocation failure

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 45c815f06b80031659c63d7b93e580015d6024dd ] We are currently using asynchronous deallocation in the error path in AUX mmap code, which is unnecessary and also presents a problem for us

[PATCH 4.4 055/131] coresight: coresight_unregister() function cleanup

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit fae54158792aec705620bdc3938d342879204f0c ] In its current form the code never frees csdev->refcnt allocated in coresight_register(). There is also a problem with csdev->conns that is

Re: [PATCH v2] writeback: use exact memcg dirty counts

2019-04-01 Thread Johannes Weiner
On Fri, Mar 29, 2019 at 10:46:09AM -0700, Greg Thelen wrote: > Since commit a983b5ebee57 ("mm: memcontrol: fix excessive complexity in > memory.stat reporting") memcg dirty and writeback counters are managed > as: > 1) per-memcg per-cpu values in range of [-32..32] > 2) per-memcg atomic counter > W

[PATCH 4.4 049/131] arm64: hide __efistub_ aliases from kallsyms

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 75feee3d9d51775072d3a04f47d4a439a4c4590e ] Commit e8f3010f7326 ("arm64/efi: isolate EFI stub from the kernel proper") isolated the EFI stub code from the kernel proper by prefixing al

[PATCH 4.4 011/131] media: v4l2-ctrls.c/uvc: zero v4l2_event

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Hans Verkuil commit f45f3f753b0a3d739acda8e311b4f744d82dc52a upstream. Control events can leak kernel memory since they do not fully zero the event. The same code is present in both v4l2-ctrls.

[PATCH 4.4 008/131] ext4: fix data corruption caused by unaligned direct AIO

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Lukas Czerner commit 372a03e01853f860560eade508794dd274e9b390 upstream. Ext4 needs to serialize unaligned direct AIO because the zeroing of partial blocks of two competing unaligned AIOs can re

[PATCH 4.4 035/131] USB: core: only clean up what we allocated

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Andrey Konovalov commit 32fd87b3bbf5f7a045546401dfe2894dbbf4d8c3 upstream. When cleaning up the configurations, make sure we only free the number of configurations and interfaces that we could

[PATCH 4.4 032/131] usb: renesas_usbhs: gadget: fix unused-but-set-variable warning

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Yoshihiro Shimoda commit b7d44c36a6f6d956e1539e0dd42f98b26e5a4684 upstream. The commit b8b9c974afee ("usb: renesas_usbhs: gadget: disable all eps when the driver stops") causes the unused-but-s

[PATCH 4.4 004/131] mips: loongson64: lemote-2f: Add IRQF_NO_SUSPEND to "cascade" irqaction.

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Yifeng Li commit 5f5f67da9781770df0403269bc57d7aae608fecd upstream. Timekeeping IRQs from CS5536 MFGPT are routed to i8259, which then triggers the "cascade" IRQ on MIPS CPU. Without IRQF_NO_SU

[PATCH 4.4 021/131] arm64: mm: Add trace_irqflags annotations to do_debug_exception()

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: James Morse commit 6afedcd23cfd7ac56c011069e4a8db37b46e4623 upstream. With CONFIG_PROVE_LOCKING, CONFIG_DEBUG_LOCKDEP and CONFIG_TRACE_IRQFLAGS enabled, lockdep will compare current->hardirqs_e

[PATCH 4.4 022/131] mmc: core: fix using wrong io voltage if mmc_select_hs200 fails

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Dong Aisheng commit e51534c806609c806d81bfb034f02737461f855c upstream. Currently MMC core will keep going if HS200/HS timing switch failed with -EBADMSG error by the assumption that the old tim

[PATCH 4.4 031/131] arm64: traps: disable irq in die()

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Qiao Zhou commit 6f44a0bacb79a03972c83759711832b382b1b8ac upstream. In current die(), the irq is disabled for __die() handle, not including the possible panic() handling. Since the log in __die

[PATCH 4.4 028/131] tcp/dccp: drop SYN packets if accept queue is full

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit 5ea8ea2cb7f1d0db15762c9b0bb9e7330425a071 upstream. Per listen(fd, backlog) rules, there is really no point accepting a SYN, sending a SYNACK, and dropping the following ACK

[PATCH 4.9 40/56] USB: serial: mos7720: fix mos_parport refcount imbalance on error path

2019-04-01 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Lin Yi commit 2908b076f5198d231de62713cb2b633a3a4b95ac upstream. The write_parport_reg_nonblock() helper takes a reference to the struct mos_parport, but failed to release it in a couple of err

[PATCH 4.4 001/131] mmc: pxamci: fix enum type confusion

2019-04-01 Thread Greg Kroah-Hartman
4.4-stable review patch. If anyone has any objections, please let me know. -- From: Arnd Bergmann commit e60a582bcde01158a64ff948fb799f21f5d31a11 upstream. clang points out several instances of mismatched types in this drivers, all coming from a single declaration: drivers/mm

[PATCH 4.9 39/56] USB: serial: ftdi_sio: add additional NovaTech products

2019-04-01 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: George McCollister commit 422c2537ba9d42320f8ab6573940269f87095320 upstream. Add PIDs for the NovaTech OrionLX+ and Orion I/O so they can be automatically detected. Signed-off-by: George McCol

[PATCH 4.9 36/56] serial: max310x: Fix to avoid potential NULL pointer dereference

2019-04-01 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Aditya Pakki commit 3a10e3dd52e80b9a97a3346020024d17b2c272d6 upstream. of_match_device can return a NULL pointer when matching device is not found. This patch avoids a scenario causing NULL poi

[PATCH 4.9 56/56] arm64: support keyctl() system call in 32-bit mode

2019-04-01 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- [ Upstream commit 5c2a625937ba49bc691089370638223d310cda9a ] As is the case for a number of other architectures that have a 32-bit compat mode, enable KEYS_COMPAT if both COMPAT and KEYS are enabled. T

[PATCH 4.9 52/56] KVM: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts

2019-04-01 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Sean Christopherson commit 0cf9135b773bf32fba9dd8e6699c1b331ee4b749 upstream. The CPUID flag ARCH_CAPABILITIES is unconditioinally exposed to host userspace for all x86 hosts, i.e. KVM advertis

Re: [PATCH] fs/open: Fix most outstanding security bugs

2019-04-01 Thread Dmitry Vyukov
On Mon, Apr 1, 2019 at 4:14 PM Nikolay Borisov wrote: > On 1.04.19 г. 12:01 ч., Johannes Thumshirn wrote: > > Over the last 20 years, the Linux kernel has accumulated hundreds if not > > thousands of security vulnerabilities. > > > > One common pattern in most of these security related reports is

[PATCH 4.9 47/56] usb: host: xhci-rcar: Add XHCI_TRUST_TX_LENGTH quirk

2019-04-01 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Yasushi Asano commit 40fc165304f0faaae78b761f8ee30b5d216b1850 upstream. When plugging BUFFALO LUA4-U3-AGT USB3.0 to Gigabit Ethernet LAN Adapter, warning messages filled up dmesg. [ 101.09828

[PATCH 4.9 44/56] fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links

2019-04-01 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: YueHaibing commit 23da9588037ecdd4901db76a5b79a42b529c4ec3 upstream. Syzkaller reports: kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: [#1] S

<    1   2   3   4   5   6   7   8   9   10   >