[PATCH 4.19 004/114] net: avoid weird emergency message

2019-05-23 Thread Greg Kroah-Hartman
From: Eric Dumazet [ Upstream commit d7c04b05c9ca14c55309eb139430283a45c4c25f ] When host is under high stress, it is very possible thread running netdev_wait_allrefs() returns from msleep(250) 10 seconds late. This leads to these messages in the syslog : [...] unregister_netdevice: waiting fo

[PATCH 4.19 005/114] net/mlx4_core: Change the error print to info print

2019-05-23 Thread Greg Kroah-Hartman
From: Yunjian Wang [ Upstream commit 00f9fec48157f3734e52130a119846e67a12314b ] The error print within mlx4_flow_steer_promisc_add() should be a info print. Fixes: 592e49dda812 ('net/mlx4: Implement promiscuous mode with device managed flow-steering') Signed-off-by: Yunjian Wang Reviewed-by:

[PATCH 4.19 000/114] 4.19.46-stable review

2019-05-23 Thread Greg Kroah-Hartman
This is the start of the stable review cycle for the 4.19.46 release. There are 114 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat 25 May 2019 06:15:02 PM UTC. Anything re

[PATCH 4.19 008/114] nfp: flower: add rcu locks when accessing netdev for tunnels

2019-05-23 Thread Greg Kroah-Hartman
From: Pieter Jansen van Vuuren [ Upstream commit cb07d915bf278a7a3938b983bbcb4921366b5eff ] Add rcu locks when accessing netdev when processing route request and tunnel keep alive messages received from hardware. Fixes: 8e6a9046b66a ("nfp: flower vxlan neighbour offload") Fixes: 856f5b135758 ("

[PATCH 4.19 009/114] ppp: deflate: Fix possible crash in deflate_init

2019-05-23 Thread Greg Kroah-Hartman
From: YueHaibing [ Upstream commit 3ebe1bca58c85325c97a22d4fc3f5b5420752e6f ] BUG: unable to handle kernel paging request at a018f000 PGD 3270067 P4D 3270067 PUD 3271063 PMD 2307eb067 PTE 0 Oops: [#1] PREEMPT SMP CPU: 0 PID: 4138 Comm: modprobe Not tainted 5.1.0-rc7+ #1 Hardware nam

[PATCH 4.19 006/114] net: test nouarg before dereferencing zerocopy pointers

2019-05-23 Thread Greg Kroah-Hartman
From: Willem de Bruijn [ Upstream commit 185ce5c38ea76f29b6bd9c7c8c7a5e5408834920 ] Zerocopy skbs without completion notification were added for packet sockets with PACKET_TX_RING user buffers. Those signal completion through the TP_STATUS_USER bit in the ring. Zerocopy annotation was added only

[PATCH 4.19 011/114] tipc: switch order of device registration to fix a crash

2019-05-23 Thread Greg Kroah-Hartman
From: Junwei Hu [ Upstream commit 7e27e8d6130c5e88fac9ddec4249f7f2337fe7f8 ] When tipc is loaded while many processes try to create a TIPC socket, a crash occurs: PANIC: Unable to handle kernel paging request at virtual address "dfff221d" pc : tipc_sk_create+0x374/0x1180 [tipc] lr :

[PATCH 4.19 023/114] brd: re-enable __GFP_HIGHMEM in brd_insert_page()

2019-05-23 Thread Greg Kroah-Hartman
From: Hou Tao commit f6b50160a06d4a0d6a3999ab0c5aec4f52dba248 upstream. __GFP_HIGHMEM is disabled if dax is enabled on brd, however dax support for brd has been removed since commit (7a862fbbdec6 "brd: remove dax support"), so restore __GFP_HIGHMEM in brd_insert_page(). Also remove the no longe

[PATCH 4.19 020/114] parisc: Rename LEVEL to PA_ASM_LEVEL to avoid name clash with DRBD code

2019-05-23 Thread Greg Kroah-Hartman
From: Helge Deller commit 1829dda0e87f4462782ca81be474c7890efe31ce upstream. LEVEL is a very common word, and now after many years it suddenly clashed with another LEVEL define in the DRBD code. Rename it to PA_ASM_LEVEL instead. Reported-by: kbuild test robot Signed-off-by: Helge Deller Cc:

Re: [PATCH 1/1] infiniband/mm: convert put_page() to put_user_page*()

2019-05-23 Thread John Hubbard
On 5/23/19 12:04 PM, Ira Weiny wrote: On Thu, May 23, 2019 at 10:46:38AM -0700, John Hubbard wrote: On 5/23/19 10:32 AM, Jason Gunthorpe wrote: On Thu, May 23, 2019 at 10:28:52AM -0700, Ira Weiny wrote: @@ -686,8 +686,8 @@ int ib_umem_odp_map_dma_pages(struct ib_umem_odp *umem_odp, u64 user_v

[PATCH 4.19 026/114] md: batch flush requests.

2019-05-23 Thread Greg Kroah-Hartman
From: NeilBrown commit 2bc13b83e6298486371761de503faeffd15b7534 upstream. Currently if many flush requests are submitted to an md device is quick succession, they are serialized and can take a long to process them all. We don't really need to call flush all those times - a single flush call can

[PATCH 4.19 024/114] proc: prevent changes to overridden credentials

2019-05-23 Thread Greg Kroah-Hartman
From: Paul Moore commit 35a196bef449b5824033865b963ed9a43fb8c730 upstream. Prevent userspace from changing the the /proc/PID/attr values if the task's credentials are currently overriden. This not only makes sense conceptually, it also prevents some really bizarre error cases caused when trying

[PATCH 4.19 028/114] dcache: sort the freeing-without-RCU-delay mess for good.

2019-05-23 Thread Greg Kroah-Hartman
From: Al Viro commit 5467a68cbf6884c9a9d91e2a89140afb1839c835 upstream. For lockless accesses to dentries we don't have pinned we rely (among other things) upon having an RCU delay between dropping the last reference and actually freeing the memory. On the other hand, for things like pipes and

[PATCH 4.19 027/114] md: add mddev->pers to avoid potential NULL pointer dereference

2019-05-23 Thread Greg Kroah-Hartman
From: Yufen Yu commit ee37e62191a59d253fc916b9fc763deb777211e2 upstream. When doing re-add, we need to ensure rdev->mddev->pers is not NULL, which can avoid potential NULL pointer derefence in fallowing add_bound_rdev(). Fixes: a6da4ef85cef ("md: re-add a failed disk") Cc: Xiao Ni Cc: NeilBrow

[PATCH 4.19 017/114] parisc: Export running_on_qemu symbol for modules

2019-05-23 Thread Greg Kroah-Hartman
From: Helge Deller commit 3e1120f4b57bc12437048494ab56648edaa5b57d upstream. Signed-off-by: Helge Deller CC: sta...@vger.kernel.org # v4.9+ Signed-off-by: Greg Kroah-Hartman --- arch/parisc/kernel/process.c |1 + 1 file changed, 1 insertion(+) --- a/arch/parisc/kernel/process.c +++ b/ar

[PATCH 4.19 015/114] net/mlx5: Imply MLXFW in mlx5_core

2019-05-23 Thread Greg Kroah-Hartman
From: Saeed Mahameed [ Upstream commit bad861f31bb15a99becef31aab59640eaeb247e2 ] mlxfw can be compiled as external module while mlx5_core can be builtin, in such case mlx5 will act like mlxfw is disabled. Since mlxfw is just a service library for mlx* drivers, imply it in mlx5_core to make it

[PATCH 4.19 018/114] parisc: Skip registering LED when running in QEMU

2019-05-23 Thread Greg Kroah-Hartman
From: Helge Deller commit b438749044356dd1329c45e9b5a9377b6ea13eb2 upstream. No need to spend CPU cycles when we run on QEMU. Signed-off-by: Helge Deller CC: sta...@vger.kernel.org # v4.9+ Signed-off-by: Greg Kroah-Hartman --- drivers/parisc/led.c |3 +++ 1 file changed, 3 insertions(+)

[PATCH 4.19 016/114] net/mlx5e: Fix ethtool rxfh commands when CONFIG_MLX5_EN_RXNFC is disabled

2019-05-23 Thread Greg Kroah-Hartman
From: Saeed Mahameed [ Upstream commit 8f0916c6dc5cd5e3bc52416fa2a9ff4075080180 ] ethtool user spaces needs to know ring count via ETHTOOL_GRXRINGS when executing (ethtool -x) which is retrieved via ethtool get_rxnfc callback, in mlx5 this callback is disabled when CONFIG_MLX5_EN_RXNFC=n. This

[PATCH 4.19 010/114] rtnetlink: always put IFLA_LINK for links with a link-netnsid

2019-05-23 Thread Greg Kroah-Hartman
From: Sabrina Dubroca [ Upstream commit feadc4b6cf42a53a8a93c918a569a0b7e62bd350 ] Currently, nla_put_iflink() doesn't put the IFLA_LINK attribute when iflink == ifindex. In some cases, a device can be created in a different netns with the same ifindex as its parent. That device will not dump i

[PATCH 4.19 045/114] udlfb: introduce a rendering mutex

2019-05-23 Thread Greg Kroah-Hartman
From: Mikulas Patocka commit babc250e278eac7b0e671bdaedf833759b43bb78 upstream. Rendering calls may be done simultaneously from the workqueue, dlfb_ops_write, dlfb_ops_ioctl, dlfb_ops_set_par and dlfb_dpy_deferred_io. The code is robust enough so that it won't crash on concurrent rendering. How

[PATCH 4.19 041/114] clk: mediatek: Disable tuner_en before change PLL rate

2019-05-23 Thread Greg Kroah-Hartman
From: Owen Chen commit be17ca6ac76a5cfd07cc3a0397dd05d6929fcbbb upstream. PLLs with tuner_en bit, such as APLL1, need to disable tuner_en before apply new frequency settings, or the new frequency settings (pcw) will not be applied. The tuner_en bit will be disabled during changing PLL rate and b

[PATCH 4.19 042/114] clk: rockchip: fix wrong clock definitions for rk3328

2019-05-23 Thread Greg Kroah-Hartman
From: Jonas Karlman commit fb903392131a324a243c7731389277db1cd9f8df upstream. This patch fixes definition of several clock gate and select register that is wrong for rk3328 referring to the TRM and vendor kernel. Also use correct number of softrst registers. Fix clock definition for: - clk_cryp

[PATCH 4.19 014/114] vsock/virtio: Initialize core virtio vsock before registering the driver

2019-05-23 Thread Greg Kroah-Hartman
From: "Jorge E. Moreira" [ Upstream commit ba95e5dfd36647622d8897a2a0470dde60e59ffd ] Avoid a race in which static variables in net/vmw_vsock/af_vsock.c are accessed (while handling interrupts) before they are initialized. [4.201410] BUG: unable to handle kernel paging request at ff

[PATCH 4.19 013/114] tipc: fix modprobe tipc failed after switch order of device registration

2019-05-23 Thread Greg Kroah-Hartman
From: Junwei Hu [ Upstream commit 532b0f7ece4cb2ffd24dc723ddf55242d1188e5e ] Error message printed: modprobe: ERROR: could not insert 'tipc': Address family not supported by protocol. when modprobe tipc after the following patch: switch order of device registration, commit 7e27e8d6130c ("tipc: s

[PATCH 4.19 039/114] clk: hi3660: Mark clk_gate_ufs_subsys as critical

2019-05-23 Thread Greg Kroah-Hartman
From: Leo Yan commit 9f77a60669d13ed4ddfa6cd7374c9d88da378ffa upstream. clk_gate_ufs_subsys is a system bus clock, turning off it will introduce lockup issue during system suspend flow. Let's mark clk_gate_ufs_subsys as critical clock, thus keeps it on during system suspend and resume. Fixes:

[PATCH 4.19 043/114] udlfb: delete the unused parameter for dlfb_handle_damage

2019-05-23 Thread Greg Kroah-Hartman
From: Mikulas Patocka commit bd86b6c5c60711dbd4fa21bdb497a188ecb6cf63 upstream. Remove the unused parameter "data" and unused variable "ret". Signed-off-by: Mikulas Patocka Cc: Bernie Thompson Cc: Ladislav Michl Cc: Signed-off-by: Bartlomiej Zolnierkiewicz Signed-off-by: Greg Kroah-Hartman

[PATCH 4.19 047/114] fuse: honor RLIMIT_FSIZE in fuse_file_fallocate

2019-05-23 Thread Greg Kroah-Hartman
From: Liu Bo commit 0cbade024ba501313da3b7e5dd2a188a6bc491b5 upstream. fstests generic/228 reported this failure that fuse fallocate does not honor what 'ulimit -f' has set. This adds the necessary inode_newsize_ok() check. Signed-off-by: Liu Bo Fixes: 05ba1f082300 ("fuse: add FALLOCATE opera

[PATCH 4.19 033/114] phy: ti-pipe3: fix missing bit-wise or operator when assigning val

2019-05-23 Thread Greg Kroah-Hartman
From: Colin Ian King commit e6577cb5103b7ca7c0204c0c86ef4af8aa6288f6 upstream. There seems to be a missing bit-wise or operator when setting val, fix this by adding it in. Fixes: 2796ceb0c18a ("phy: ti-pipe3: Update pcie phy settings") Cc: sta...@vger.kernel.org # v4.19+ Signed-off-by: Colin Ia

[PATCH 4.19 034/114] media: ov6650: Fix sensor possibly not detected on probe

2019-05-23 Thread Greg Kroah-Hartman
From: Janusz Krzysztofik commit 933c1320847f5ed6b61a7d10f0a948aa98ccd7b0 upstream. After removal of clock_start() from before soc_camera_init_i2c() in soc_camera_probe() by commit 9aea470b399d ("[media] soc-camera: switch I2C subdevice drivers to use v4l2-clk") introduced in v3.11, the ov6650 dr

[PATCH 4.19 046/114] fuse: fix writepages on 32bit

2019-05-23 Thread Greg Kroah-Hartman
From: Miklos Szeredi commit 9de5be06d0a89ca97b5ab902694d42dfd2bb77d2 upstream. Writepage requests were cropped to i_size & 0x, which meant that mmaped writes to any file larger than 4G might be silently discarded. Fix by storing the file size in a properly sized variable (loff_t instead

[PATCH 4.19 062/114] fbdev: sm712fb: fix brightness control on reboot, dont set SR30

2019-05-23 Thread Greg Kroah-Hartman
From: Yifeng Li commit 5481115e25e42b9215f2619452aa99c95f08492f upstream. On a Thinkpad s30 (Pentium III / i440MX, Lynx3DM), rebooting with sm712fb framebuffer driver would cause the role of brightness up/down button to swap. Experiments showed the FPR30 register caused this behavior. Moreover,

[PATCH 4.19 061/114] fbdev/efifb: Ignore framebuffer memmap entries that lack any memory types

2019-05-23 Thread Greg Kroah-Hartman
From: Ard Biesheuvel commit f8585539df0a1527c78b5d760665c89fe1c105a9 upstream. The following commit: 38ac0287b7f4 ("fbdev/efifb: Honour UEFI memory map attributes when mapping the FB") updated the EFI framebuffer code to use memory mappings for the linear framebuffer that are permitted by t

[PATCH 4.19 037/114] NFS4: Fix v4.0 client state corruption when mount

2019-05-23 Thread Greg Kroah-Hartman
From: ZhangXiaoxu commit f02f3755dbd14fb935d24b14650fff9ba92243b8 upstream. stat command with soft mount never return after server is stopped. When alloc a new client, the state of the client will be set to NFS4CLNT_LEASE_EXPIRED. When the server is stopped, the state manager will work, and ac

[PATCH 4.19 066/114] fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping VRAM

2019-05-23 Thread Greg Kroah-Hartman
From: Yifeng Li commit 9e0e59993df0601cddb95c4f6c61aa3d5e753c00 upstream. On a Thinkpad s30 (Pentium III / i440MX, Lynx3DM), running fbtest or X will crash the machine instantly, because the VRAM/framebuffer is not mapped correctly. On SM712, the framebuffer starts at the beginning of address s

[PATCH 4.19 038/114] PNFS fallback to MDS if no deviceid found

2019-05-23 Thread Greg Kroah-Hartman
From: Olga Kornievskaia commit b1029c9bc078a6f1515f55dd993b507dcc7e3440 upstream. If we fail to find a good deviceid while trying to pnfs instead of propogating an error back fallback to doing IO to the MDS. Currently, code with fals the IO with EINVAL. Signed-off-by: Olga Kornievskaia Fixes:

[PATCH 4.19 064/114] fbdev: sm712fb: fix white screen of death on reboot, dont set CR3B-CR3F

2019-05-23 Thread Greg Kroah-Hartman
From: Yifeng Li commit 8069053880e0ee3a75fd6d7e0a30293265fe3de4 upstream. On a Thinkpad s30 (Pentium III / i440MX, Lynx3DM), rebooting with sm712fb framebuffer driver would cause a white screen of death on the next POST, presumably the proper timings for the LCD panel was not reprogrammed proper

[PATCH 4.19 029/114] intel_th: msu: Fix single mode with IOMMU

2019-05-23 Thread Greg Kroah-Hartman
From: Alexander Shishkin commit 4e0eaf239fb33ebc671303e2b736fa043462e2f4 upstream. Currently, the pages that are allocated for the single mode of MSC are not mapped into the device's dma space and the code is incorrectly using *_to_phys() in place of a dma address. This fails with IOMMU enabled

[PATCH 4.19 058/114] perf intel-pt: Fix sample timestamp wrt non-taken branches

2019-05-23 Thread Greg Kroah-Hartman
From: Adrian Hunter commit 1b6599a9d8e6c9f7e9b0476012383b1777f7fc93 upstream. The sample timestamp is updated to ensure that the timestamp represents the time of the sample and not a branch that the decoder is still walking towards. The sample timestamp is updated when the decoder returns, but t

[PATCH 4.19 065/114] fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA

2019-05-23 Thread Greg Kroah-Hartman
From: Yifeng Li commit ec1587d5073f29820e358f3a383850d61601d981 upstream. When the machine is booted in VGA mode, loading sm712fb would cause a glitch of random pixels shown on the screen. To prevent it from happening, we first clear the entire framebuffer, and we also need to stop calling smtcf

[PATCH 4.19 056/114] perf intel-pt: Fix instructions sampling rate

2019-05-23 Thread Greg Kroah-Hartman
From: Adrian Hunter commit 7ba8fa20e26eb3c0c04d747f7fd2223694eac4d5 upstream. The timestamp used to determine if an instruction sample is made, is an estimate based on the number of instructions since the last known timestamp. A consequence is that it might go backwards, which results in extra s

[PATCH 4.19 055/114] memory: tegra: Fix integer overflow on tick value calculation

2019-05-23 Thread Greg Kroah-Hartman
From: Dmitry Osipenko commit b906c056b6023c390f18347169071193fda57dde upstream. Multiplying the Memory Controller clock rate by the tick count results in an integer overflow and in result the truncated tick value is being programmed into hardware, such that the GR3D memory client performance is

[PATCH 4.19 054/114] tracing: Fix partial reading of trace events id file

2019-05-23 Thread Greg Kroah-Hartman
From: Elazar Leibovich commit cbe08bcbbe787315c425dde284dcb715cfbf3f39 upstream. When reading only part of the id file, the ppos isn't tracked correctly. This is taken care by simple_read_from_buffer. Reading a single byte, and then the next byte would result EOF. While this seems like not a b

[PATCH 4.19 052/114] x86_64: Allow breakpoints to emulate call instructions

2019-05-23 Thread Greg Kroah-Hartman
From: Peter Zijlstra commit 4b33dadf37666c0860b88f9e52a16d07bf6d0b03 upstream. In order to allow breakpoints to emulate call instructions, they need to push the return address onto the stack. The x86_64 int3 handler adds a small gap to allow the stack to grow some. Use this gap to add the return

[PATCH 4.19 051/114] x86_64: Add gap to int3 to allow for call emulation

2019-05-23 Thread Greg Kroah-Hartman
From: Josh Poimboeuf commit 2700fefdb2d9751c416ad56897e27d41e409324a upstream. To allow an int3 handler to emulate a call instruction, it must be able to push a return address onto the stack. Add a gap to the stack to allow the int3 handler to push the return address and change the return from i

[PATCH 4.19 068/114] fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display

2019-05-23 Thread Greg Kroah-Hartman
From: Yifeng Li commit 4ed7d2ccb7684510ec5f7a8f7ef534bc6a3d55b2 upstream. Loongson MIPS netbooks use 1024x600 LCD panels, which is the original target platform of this driver, but nearly all old x86 laptops have 1024x768. Lighting 768 panels using 600's timings would partially garble the display

[PATCH 4.19 073/114] PCI/AER: Change pci_aer_init() stub to return void

2019-05-23 Thread Greg Kroah-Hartman
From: Jisheng Zhang commit 31f996efbd5a7825f4d30150469e9d110aea00e8 upstream. Commit 60ed982a4e78 ("PCI/AER: Move internal declarations to drivers/pci/pci.h") changed pci_aer_init() to return "void", but didn't change the stub for when CONFIG_PCIEAER isn't enabled. Change the stub to match. Fi

[PATCH 4.19 077/114] dm cache metadata: Fix loading discard bitset

2019-05-23 Thread Greg Kroah-Hartman
From: Nikos Tsironis commit e28adc3bf34e434b30e8d063df4823ba0f3e0529 upstream. Add missing dm_bitset_cursor_next() to properly advance the bitset cursor. Otherwise, the discarded state of all blocks is set according to the discarded state of the first block. Fixes: ae4a46a1f6 ("dm cache metada

[PATCH 4.19 084/114] xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module

2019-05-23 Thread Greg Kroah-Hartman
[ Upstream commit 6ee02a54ef990a71bf542b6f0a4e3321de9d9c66 ] When unloading xfrm6_tunnel module, xfrm6_tunnel_fini directly frees the xfrm6_tunnel_spi_kmem. Maybe someone has gotten the xfrm6_tunnel_spi, so need to wait it. Fixes: 91cc3bb0b04ff("xfrm6_tunnel: RCU conversion") Signed-off-by: Su Ya

[PATCH 4.19 087/114] esp4: add length check for UDP encapsulation

2019-05-23 Thread Greg Kroah-Hartman
[ Upstream commit 8dfb4eba4100e7cdd161a8baef2d8d61b7a7e62e ] esp_output_udp_encap can produce a length that doesn't fit in the 16 bits of a UDP header's length field. In that case, we'll send a fragmented packet whose length is larger than IP_MAX_MTU (resulting in "Oversized IP packet" warnings on

[PATCH 4.19 079/114] dm delay: fix a crash when invalid device is specified

2019-05-23 Thread Greg Kroah-Hartman
From: Mikulas Patocka commit 81bc6d150ace6250503b825d9d0c10f7bbd24095 upstream. When the target line contains an invalid device, delay_ctr() will call delay_dtr() with NULL workqueue. Attempting to destroy the NULL workqueue causes a crash. Signed-off-by: Mikulas Patocka Cc: sta...@vger.kerne

[PATCH 4.19 071/114] PCI: Mark Atheros AR9462 to avoid bus reset

2019-05-23 Thread Greg Kroah-Hartman
From: James Prestwood commit 6afb7e26978da5e86e57e540fdce65c8b04f398a upstream. When using PCI passthrough with this device, the host machine locks up completely when starting the VM, requiring a hard reboot. Add a quirk to avoid bus resets on this device. Fixes: c3e59ee4e766 ("PCI: Mark Ather

Re: [PATCH 1/1] infiniband/mm: convert put_page() to put_user_page*()

2019-05-23 Thread Jason Gunthorpe
On Thu, May 23, 2019 at 10:46:38AM -0700, John Hubbard wrote: > On 5/23/19 10:32 AM, Jason Gunthorpe wrote: > > On Thu, May 23, 2019 at 10:28:52AM -0700, Ira Weiny wrote: > > > > @@ -686,8 +686,8 @@ int ib_umem_odp_map_dma_pages(struct ib_umem_odp > > > > *umem_odp, u64 user_virt, > > > >

[PATCH 4.19 078/114] dm zoned: Fix zone report handling

2019-05-23 Thread Greg Kroah-Hartman
From: Damien Le Moal commit 7aedf75ff740a98f3683439449cd91c8662d03b2 upstream. The function blkdev_report_zones() returns success even if no zone information is reported (empty report). Empty zone reports can only happen if the report start sector passed exceeds the device capacity. The conditio

[PATCH 4.19 074/114] PCI: rcar: Add the initialization of PCIe link in resume_noirq()

2019-05-23 Thread Greg Kroah-Hartman
From: Kazufumi Ikeda commit be20bbcb0a8cb5597cc62b3e28d275919f3431df upstream. Reestablish the PCIe link very early in the resume process in case it went down to prevent PCI accesses from hanging the bus. Such accesses can happen early in the PCI resume process, as early as the SUSPEND_RESUME_NO

[PATCH 4.19 080/114] dm integrity: correctly calculate the size of metadata area

2019-05-23 Thread Greg Kroah-Hartman
From: Mikulas Patocka commit 30bba430ddf737978e40561198693ba91386dac1 upstream. When we use separate devices for data and metadata, dm-integrity would incorrectly calculate the size of the metadata device as if it had 512-byte block size - and it would refuse activation with larger block size an

[PATCH 4.19 081/114] dm mpath: always free attached_handler_name in parse_path()

2019-05-23 Thread Greg Kroah-Hartman
From: Martin Wilck commit 940bc471780b004a5277c1931f52af363c2fc9da upstream. Commit b592211c33f7 ("dm mpath: fix attached_handler_name leak and dangling hw_handler_name pointer") fixed a memory leak for the case where setup_scsi_dh() returns failure. But setup_scsi_dh may return success and not

[PATCH 4.19 076/114] PCI: Work around Pericom PCIe-to-PCI bridge Retrain Link erratum

2019-05-23 Thread Greg Kroah-Hartman
From: Stefan Mätje commit 4ec73791a64bab25cabf16a6067ee478692e506d upstream. Due to an erratum in some Pericom PCIe-to-PCI bridges in reverse mode (conventional PCI on primary side, PCIe on downstream side), the Retrain Link bit needs to be cleared manually to allow the link training to complete

[PATCH 4.19 082/114] fuse: Add FOPEN_STREAM to use stream_open()

2019-05-23 Thread Greg Kroah-Hartman
From: Kirill Smelkov commit bbd84f33652f852ce5992d65db4d020aba21f882 upstream. Starting from commit 9c225f2655e3 ("vfs: atomic f_pos accesses as per POSIX") files opened even via nonseekable_open gate read and write via lock and do not allow them to be run simultaneously. This can create read vs

[PATCH 4.19 067/114] fbdev: sm712fb: fix support for 1024x768-16 mode

2019-05-23 Thread Greg Kroah-Hartman
From: Yifeng Li commit 6053d3a4793e5bde6299ac5388e76a3bf679ff65 upstream. In order to support the 1024x600 panel on Yeeloong Loongson MIPS laptop, the original 1024x768-16 table was modified to 1024x600-16, without leaving the original. It causes problem on x86 laptop as the 1024x768-16 support

[PATCH 4.19 085/114] vti4: ipip tunnel deregistration fixes.

2019-05-23 Thread Greg Kroah-Hartman
[ Upstream commit 5483844c3fc18474de29f5d6733003526e0a9f78 ] If tunnel registration failed during module initialization, the module would fail to deregister the IPPROTO_COMP protocol and would attempt to deregister the tunnel. The tunnel was not deregistered during module-exit. Fixes: dd9ee34440

[PATCH 4.19 100/114] bpf: Fix preempt_enable_no_resched() abuse

2019-05-23 Thread Greg Kroah-Hartman
[ Upstream commit 0edd6b64d1939e9e9168ff27947995bb7751db5d ] Unless the very next line is schedule(), or implies it, one must not use preempt_enable_no_resched(). It can cause a preemption to go missing and thereby cause arbitrary delays, breaking the PREEMPT=y invariant. Cc: Roman Gushchin Cc:

[PATCH 4.19 102/114] iwlwifi: mvm: check for length correctness in iwl_mvm_create_skb()

2019-05-23 Thread Greg Kroah-Hartman
[ Upstream commit de1887c064b9996ac03120d90d0a909a3f678f98 ] We don't check for the validity of the lengths in the packet received from the firmware. If the MPDU length received in the rx descriptor is too short to contain the header length and the crypt length together, we may end up trying to c

[PATCH 4.19 098/114] KVM: arm/arm64: Ensure vcpu target is unset on reset failure

2019-05-23 Thread Greg Kroah-Hartman
[ Upstream commit 811328fc3222f7b55846de0cd0404339e2e1e6d7 ] A failed KVM_ARM_VCPU_INIT should not set the vcpu target, as the vcpu target is used by kvm_vcpu_initialized() to determine if other vcpu ioctls may proceed. We need to set the target before calling kvm_reset_vcpu(), but if that call fa

[PATCH 4.19 090/114] clk: sunxi-ng: nkmp: Avoid GENMASK(-1, 0)

2019-05-23 Thread Greg Kroah-Hartman
[ Upstream commit 2abc330c514fe56c570bb1a6318b054b06a4f72e ] Sometimes one of the nkmp factors is unused. This means that one of the factors shift and width values are set to 0. Current nkmp clock code generates a mask for each factor with GENMASK(width + shift - 1, shift). For unused factor this

[PATCH 4.19 104/114] x86/mm/mem_encrypt: Disable all instrumentation for early SME setup

2019-05-23 Thread Greg Kroah-Hartman
[ Upstream commit b51ce3744f115850166f3d6c292b9c8cb849ad4f ] Enablement of AMD's Secure Memory Encryption feature is determined very early after start_kernel() is entered. Part of this procedure involves scanning the command line for the parameter 'mem_encrypt'. To determine intended state, the f

[PATCH 4.19 103/114] sched/cpufreq: Fix kobject memleak

2019-05-23 Thread Greg Kroah-Hartman
[ Upstream commit 9a4f26cc98d81b67ecc23b890c28e2df324e29f3 ] Currently the error return path from kobject_init_and_add() is not followed by a call to kobject_put() - which means we are leaking the kobject. Fix it by adding a call to kobject_put() in the error path of kobject_init_and_add(). Sign

[PATCH 4.19 094/114] PCI: Fix issue with "pci=disable_acs_redir" parameter being ignored

2019-05-23 Thread Greg Kroah-Hartman
[ Upstream commit d5bc73f34cc97c4b4b9202cc93182c2515076edf ] In most cases, kmalloc() will not be available early in boot when pci_setup() is called. Thus, the kstrdup() call that was added to fix the __initdata bug with the disable_acs_redir parameter usually returns NULL, so the parameter is di

[PATCH 4.19 088/114] xfrm: Honor original L3 slave device in xfrmi policy lookup

2019-05-23 Thread Greg Kroah-Hartman
[ Upstream commit 025c65e119bf58b610549ca359c9ecc5dee6a8d2 ] If an xfrmi is associated to a vrf layer 3 master device, xfrm_policy_check() fails after traffic decapsulation. The input interface is replaced by the layer 3 master device, and hence xfrmi_decode_session() can't match the xfrmi anymore

[PATCH 4.19 093/114] apparmorfs: fix use-after-free on symlink traversal

2019-05-23 Thread Greg Kroah-Hartman
[ Upstream commit f51dcd0f621caac5380ce90fbbeafc32ce4517ae ] symlink body shouldn't be freed without an RCU delay. Switch apparmorfs to ->destroy_inode() and use of call_rcu(); free both the inode and symlink body in the callback. Signed-off-by: Al Viro Signed-off-by: Sasha Levin --- security

[PATCH 4.19 091/114] power: supply: cpcap-battery: Fix division by zero

2019-05-23 Thread Greg Kroah-Hartman
[ Upstream commit dbe7208c6c4aec083571f2ec742870a0d0edbea3 ] If called fast enough so samples do not increment, we can get division by zero in kernel: __div0 cpcap_battery_cc_raw_div cpcap_battery_get_property power_supply_get_property.part.1 power_supply_get_property power_supply_show_property p

[PATCH 4.19 089/114] xfrm4: Fix uninitialized memory read in _decode_session4

2019-05-23 Thread Greg Kroah-Hartman
[ Upstream commit 8742dc86d0c7a9628117a989c11f04a9b6b898f3 ] We currently don't reload pointers pointing into skb header after doing pskb_may_pull() in _decode_session4(). So in case pskb_may_pull() changed the pointers, we read from random memory. Fix this by putting all the needed infos on the s

[PATCH 4.19 106/114] perf bench numa: Add define for RUSAGE_THREAD if not present

2019-05-23 Thread Greg Kroah-Hartman
[ Upstream commit bf561d3c13423fc54daa19b5d49dc15fafdb7acc ] While cross building perf to the ARC architecture on a fedora 30 host, we were failing with: CC /tmp/build/perf/bench/numa.o bench/numa.c: In function ‘worker_thread’: bench/numa.c:1261:12: error: ‘RUSAGE_THREAD’ undecla

[PATCH 4.19 086/114] xfrm: clean up xfrm protocol checks

2019-05-23 Thread Greg Kroah-Hartman
[ Upstream commit dbb2483b2a46fbaf833cfb5deb5ed9cace9c7399 ] In commit 6a53b7593233 ("xfrm: check id proto in validate_tmpl()") I introduced a check for xfrm protocol, but according to Herbert IPSEC_PROTO_ANY should only be used as a wildcard for lookup, so it should be removed from validate_tmpl(

[PATCH 4.19 110/114] driver core: Postpone DMA tear-down until after devres release for probe failure

2019-05-23 Thread Greg Kroah-Hartman
From: John Garry commit 0b777eee88d712256ba8232a9429edb17c4f9ceb upstream. In commit 376991db4b64 ("driver core: Postpone DMA tear-down until after devres release"), we changed the ordering of tearing down the device DMA ops and releasing all the device's resources; this was because the DMA ops

[PATCH 4.19 109/114] md/raid: raid5 preserve the writeback action after the parity check

2019-05-23 Thread Greg Kroah-Hartman
From: Nigel Croxon commit b2176a1dfb518d870ee073445d27055fea64dfb8 upstream. The problem is that any 'uptodate' vs 'disks' check is not precise in this path. Put a "WARN_ON(!test_bit(R5_UPTODATE, &dev->flags)" on the device that might try to kick off writes and then skip the action. Better to pr

[PATCH 4.19 108/114] Revert "Dont jump to compute_result state from check_result state"

2019-05-23 Thread Greg Kroah-Hartman
From: Song Liu commit a25d8c327bb41742dbd59f8c545f59f3b9c39983 upstream. This reverts commit 4f4fd7c5798bbdd5a03a60f6269cf1177fbd11ef. Cc: Dan Williams Cc: Nigel Croxon Cc: Xiao Ni Signed-off-by: Song Liu Signed-off-by: Greg Kroah-Hartman --- drivers/md/raid5.c | 19 +++

[PATCH 5.0 004/139] net: avoid weird emergency message

2019-05-23 Thread Greg Kroah-Hartman
From: Eric Dumazet [ Upstream commit d7c04b05c9ca14c55309eb139430283a45c4c25f ] When host is under high stress, it is very possible thread running netdev_wait_allrefs() returns from msleep(250) 10 seconds late. This leads to these messages in the syslog : [...] unregister_netdevice: waiting fo

[PATCH 5.0 013/139] tipc: fix modprobe tipc failed after switch order of device registration

2019-05-23 Thread Greg Kroah-Hartman
From: Junwei Hu [ Upstream commit 532b0f7ece4cb2ffd24dc723ddf55242d1188e5e ] Error message printed: modprobe: ERROR: could not insert 'tipc': Address family not supported by protocol. when modprobe tipc after the following patch: switch order of device registration, commit 7e27e8d6130c ("tipc: s

[PATCH 4.19 114/114] bpf, lru: avoid messing with eviction heuristics upon syscall lookup

2019-05-23 Thread Greg Kroah-Hartman
From: Daniel Borkmann commit 50b045a8c0ccf44f76640ac3eea8d80ca53979a3 upstream. One of the biggest issues we face right now with picking LRU map over regular hash table is that a map walk out of user space, for example, to just dump the existing entries or to remove certain ones, will completely

[PATCH 4.19 105/114] ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour

2019-05-23 Thread Greg Kroah-Hartman
[ Upstream commit 4e9036042fedaffcd868d7f7aa948756c48c637d ] To choose whether to pick the GID from the old (16bit) or new (32bit) field, we should check if the old gid field is set to 0x. Mainline checks the old *UID* field instead - cut'n'paste from the corresponding code in ufs_get_inode_u

[PATCH 5.0 007/139] net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions

2019-05-23 Thread Greg Kroah-Hartman
From: Daniele Palmas [ Upstream commit b4e467c82f8c12af78b6f6fa5730cb7dea7af1b4 ] Added support for Telit LE910Cx 0x1260 and 0x1261 compositions. Signed-off-by: Daniele Palmas Acked-by: Bjørn Mork Signed-off-by: David S. Miller Signed-off-by: Greg Kroah-Hartman --- drivers/net/usb/qmi_wwan

[PATCH 5.0 012/139] vsock/virtio: free packets during the socket release

2019-05-23 Thread Greg Kroah-Hartman
From: Stefano Garzarella [ Upstream commit ac03046ece2b158ebd204dfc4896fd9f39f0e6c8 ] When the socket is released, we should free all packets queued in the per-socket list in order to avoid a memory leak. Signed-off-by: Stefano Garzarella Signed-off-by: David S. Miller Signed-off-by: Greg Kro

[PATCH 4.19 112/114] bpf: relax inode permission check for retrieving bpf program

2019-05-23 Thread Greg Kroah-Hartman
From: Chenbo Feng commit e547ff3f803e779a3898f1f48447b29f43c54085 upstream. For iptable module to load a bpf program from a pinned location, it only retrieve a loaded program and cannot change the program content so requiring a write permission for it might not be necessary. Also when adding or

[PATCH 5.0 015/139] net/mlx5e: Add missing ethtool driver info for representors

2019-05-23 Thread Greg Kroah-Hartman
From: Dmytro Linkin [ Upstream commit cf83c8fdcd4756644595521f48748ec22f7efede ] For all representors added firmware version info to show in ethtool driver info. For uplink representor, because only it is tied to the pci device sysfs, added pci bus info. Fixes: ff9b85de5d5d ("net/mlx5e: Add som

[PATCH 5.0 025/139] parisc: Add memory barrier to asm pdc and sync instructions

2019-05-23 Thread Greg Kroah-Hartman
From: Helge Deller commit 2d94a832e246ac00fd32eec241e6f1aa6fbc5700 upstream. Add compiler memory barriers to ensure the compiler doesn't reorder memory operations around these instructions. Cc: sta...@vger.kernel.org # v4.20+ Fixes: 3847dab77421 ("parisc: Add alternative coding infrastructure")

[PATCH 5.0 029/139] stm class: Fix channel free in stm output free path

2019-05-23 Thread Greg Kroah-Hartman
From: Tingwei Zhang commit ee496da4c3915de3232b5f5cd20e21ae3e46fe8d upstream. Number of free masters is not set correctly in stm free path. Fix this by properly adding the number of output channels before setting them to 0 in stm_output_disclaim(). Currently it is equivalent to doing nothing si

[PATCH 5.0 031/139] brd: re-enable __GFP_HIGHMEM in brd_insert_page()

2019-05-23 Thread Greg Kroah-Hartman
From: Hou Tao commit f6b50160a06d4a0d6a3999ab0c5aec4f52dba248 upstream. __GFP_HIGHMEM is disabled if dax is enabled on brd, however dax support for brd has been removed since commit (7a862fbbdec6 "brd: remove dax support"), so restore __GFP_HIGHMEM in brd_insert_page(). Also remove the no longe

[PATCH 5.0 026/139] parisc: Allow live-patching of __meminit functions

2019-05-23 Thread Greg Kroah-Hartman
From: Helge Deller commit d19a12906e5e558c0f6b6cfece7b7caf1012ef95 upstream. When making the text sections writeable with set_kernel_text_rw(1), include all text sections including those in the __init section. Otherwise functions marked with __meminit will stay read-only. Signed-off-by: Helge D

[PATCH 5.0 028/139] parisc: Rename LEVEL to PA_ASM_LEVEL to avoid name clash with DRBD code

2019-05-23 Thread Greg Kroah-Hartman
From: Helge Deller commit 1829dda0e87f4462782ca81be474c7890efe31ce upstream. LEVEL is a very common word, and now after many years it suddenly clashed with another LEVEL define in the DRBD code. Rename it to PA_ASM_LEVEL instead. Reported-by: kbuild test robot Signed-off-by: Helge Deller Cc:

[PATCH 5.0 046/139] media: imx: Clear fwnode link struct for each endpoint iteration

2019-05-23 Thread Greg Kroah-Hartman
From: Steve Longerbeam commit 107927fa597c99eaeee4f51865ca0956ec71b6a2 upstream. In imx_media_create_csi_of_links(), the 'struct v4l2_fwnode_link' must be cleared for each endpoint iteration, otherwise if the remote port has no "reg" property, link.remote_port will not be reset to zero. This was

[PATCH 5.0 047/139] RDMA/mlx5: Use get_zeroed_page() for clock_info

2019-05-23 Thread Greg Kroah-Hartman
From: Jason Gunthorpe commit ddcdc368b1033e19fd3a5f750752e10e28a87826 upstream. get_zeroed_page() returns a virtual address for the page which is better than allocating a struct page and doing a permanent kmap on it. Cc: sta...@vger.kernel.org Signed-off-by: Jason Gunthorpe Reviewed-by: Haggai

[PATCH 5.0 032/139] proc: prevent changes to overridden credentials

2019-05-23 Thread Greg Kroah-Hartman
From: Paul Moore commit 35a196bef449b5824033865b963ed9a43fb8c730 upstream. Prevent userspace from changing the the /proc/PID/attr values if the task's credentials are currently overriden. This not only makes sense conceptually, it also prevents some really bizarre error cases caused when trying

[PATCH 5.0 018/139] net/mlx5e: Fix ethtool rxfh commands when CONFIG_MLX5_EN_RXNFC is disabled

2019-05-23 Thread Greg Kroah-Hartman
From: Saeed Mahameed [ Upstream commit 8f0916c6dc5cd5e3bc52416fa2a9ff4075080180 ] ethtool user spaces needs to know ring count via ETHTOOL_GRXRINGS when executing (ethtool -x) which is retrieved via ethtool get_rxnfc callback, in mlx5 this callback is disabled when CONFIG_MLX5_EN_RXNFC=n. This

[PATCH 5.0 027/139] parisc: Use PA_ASM_LEVEL in boot code

2019-05-23 Thread Greg Kroah-Hartman
From: Helge Deller commit bdca5d64ee92abeacd6dada0bc6f6f8e6350dd67 upstream. The LEVEL define clashed with the DRBD code. Reported-by: kbuild test robot Signed-off-by: Helge Deller Cc: # v4.14+ Signed-off-by: Greg Kroah-Hartman --- arch/parisc/boot/compressed/head.S |6 +++--- 1 file

[PATCH 5.0 020/139] blk-mq: free hw queues resource in hctxs release handler

2019-05-23 Thread Greg Kroah-Hartman
From: Ming Lei commit c7e2d94b3d1634988a95ac4d77a72dc7487ece06 upstream. Once blk_cleanup_queue() returns, tags shouldn't be used any more, because blk_mq_free_tag_set() may be called. Commit 45a9c9d909b2 ("blk-mq: Fix a use-after-free") fixes this issue exactly. However, that commit introduces

[PATCH 5.0 049/139] NFS4: Fix v4.0 client state corruption when mount

2019-05-23 Thread Greg Kroah-Hartman
From: ZhangXiaoxu commit f02f3755dbd14fb935d24b14650fff9ba92243b8 upstream. stat command with soft mount never return after server is stopped. When alloc a new client, the state of the client will be set to NFS4CLNT_LEASE_EXPIRED. When the server is stopped, the state manager will work, and ac

[PATCH 5.0 048/139] RDMA/ipoib: Allow user space differentiate between valid dev_port

2019-05-23 Thread Greg Kroah-Hartman
From: Leon Romanovsky commit b79656ed44c6865e17bcd93472ec39488bcc4984 upstream. Systemd triggers the following warning during IPoIB device load: mlx5_core :00:0c.0 ib0: "systemd-udevd" wants to know my dev_id. Should it look at dev_port instead? See Documentation/ABI/testin

[PATCH 5.0 023/139] parisc: Add memory clobber to TLB purges

2019-05-23 Thread Greg Kroah-Hartman
From: John David Anglin commit 44224bdb99150ad17cf394973b25736cb92c246a upstream. The pdtlb and pitlb instructions are strongly ordered. The asms invoking these instructions should be compiler memory barriers to ensure the compiler doesn't reorder memory operations around these instructions. Si

[PATCH 5.0 021/139] regulator: core: fix error path for regulator_set_voltage_unlocked

2019-05-23 Thread Greg Kroah-Hartman
From: Steve Twiss commit 70b464918e5331e488058870fcc6821d54c4e541 upstream. During several error paths in the function regulator_set_voltage_unlocked() the value of 'ret' can take on negative error values. However, in calls that go through the 'goto out' statement, this return value is lost and

[PATCH 5.0 017/139] net/mlx5: Imply MLXFW in mlx5_core

2019-05-23 Thread Greg Kroah-Hartman
From: Saeed Mahameed [ Upstream commit bad861f31bb15a99becef31aab59640eaeb247e2 ] mlxfw can be compiled as external module while mlx5_core can be builtin, in such case mlx5 will act like mlxfw is disabled. Since mlxfw is just a service library for mlx* drivers, imply it in mlx5_core to make it

<    3   4   5   6   7   8   9   10   11   12   >