[PATCH 5.2 059/162] iwlwifi: fix locking in delayed GTK setting

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 6569e7d36773956298ec1d5f4e6a2487913d2752 ] This code clearly never could have worked, since it locks while already locked. Add an unlocked __iwl_mvm_mac_set_key() variant that doesn't do locking to fix that. Signed-off-by: Johannes Berg Signed-off-by: Luca Coelho Signed-off-by

[PATCH 5.2 068/162] ASoC: amd: acp3x: use dma_ops of parent device for acp3x dma driver

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 88639051017fb61a414b636dd0fc490da2b62b64 ] AMD platform device acp3x_rv_i2s created by parent PCI device driver. Pass struct device of the parent to snd_pcm_lib_preallocate_pages() so dma_alloc_coherent() can use correct dma_ops. Otherwise, it will use default dma_ops which is no

[PATCH 5.2 018/162] ASoC: dapm: Fix handling of custom_stop_condition on DAPM graph walks

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 8dd26dff00c0636b1d8621acaeef3f6f3a39dd77 ] DPCM uses snd_soc_dapm_dai_get_connected_widgets to build a list of the widgets connected to a specific front end DAI so it can search through this list for available back end DAIs. The custom_stop_condition was added to is_connected_ep

[PATCH 5.2 072/162] NFSv4: When recovering state fails with EAGAIN, retry the same recovery

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit c34fae003c79570b6c930b425fea3f0b7b1e7056 ] If the server returns with EAGAIN when we're trying to recover from a server reboot, we currently delay for 1 second, but then mark the stateid as needing recovery after the grace period has expired. Instead, we should just retry the sa

[PATCH 5.2 020/162] spi: pxa2xx: Balance runtime PM enable/disable on error

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 1274204542f683e1d8491ebe9cc86284d5a8ebcc ] Don't undo the PM initialization if we error out before we managed to initialize it. The call to pm_runtime_disable() without being preceded by pm_runtime_enable() would disturb the balance of the Force. In practice, this happens if we

[PATCH 5.2 088/162] ata: rb532_cf: Fix unused variable warning in rb532_pata_driver_probe

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit db341a049ec7e87053c91008cb452d0bfa6dde72 ] Fix the following warning (Building: rb532_defconfig mips): drivers/ata/pata_rb532_cf.c: In function ‘rb532_pata_driver_remove’: drivers/ata/pata_rb532_cf.c:161:24: warning: unused variable ‘info’ [-Wunused-variable] struct rb532_cf_

[PATCH 5.2 071/162] NFSv4: Fix a credential refcount leak in nfs41_check_delegation_stateid

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 8c39a39e28b86a4021d9be314ce01019bafa5fdc ] It is unsafe to dereference delegation outside the rcu lock, and in any case, the refcount is guaranteed held if cred is non-zero. Signed-off-by: Trond Myklebust Signed-off-by: Sasha Levin --- fs/nfs/nfs4proc.c | 3 +-- 1 file change

[PATCH 5.2 055/162] nvmem: Use the same permissions for eeprom as for nvmem

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit e70d8b287301eb6d7c7761c6171c56af62110ea3 ] The compatibility "eeprom" attribute is currently root-only no matter what the configuration says. The "nvmem" attribute does respect the setting of the root_only configuration bit, so do the same for "eeprom". Signed-off-by: Jean Delva

[PATCH 5.2 056/162] iwlwifi: mvm: avoid races in rate init and rate perform

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 0f8084cdc1f9d4a6693ef4168167febb0918c6f6 ] Rate perform uses the lq_sta table to calculate the next rate to scale while rate init resets the same table, Rate perform is done in soft irq context in parallel to rate init that can be called in case we are doing changes like AP chan

[PATCH 5.2 028/162] selftests: forwarding: gre_multipath: Enable IPv4 forwarding

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit efa7b79f675da0efafe3f32ba0d6efe916cf4867 ] The test did not enable IPv4 forwarding during its setup phase, which causes the test to fail on machines where IPv4 forwarding is disabled. Fixes: 54818c4c4b93 ("selftests: forwarding: Test multipath tunneling") Signed-off-by: Ido Schi

[PATCH 5.2 043/162] ASoC: ti: davinci-mcasp: Correct slot_width posed constraint

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 1e112c35e3c96db7c8ca6ddaa96574f00c06e7db ] The slot_width is a property for the bus while the constraint for SNDRV_PCM_HW_PARAM_SAMPLE_BITS is for the in memory format. Applying slot_width constraint to sample_bits works most of the time, but it will blacklist valid formats in s

[PATCH 5.2 041/162] ASoC: ti: davinci-mcasp: Fix clk PDIR handling for i2s master mode

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 34a2a80ff30b5d2330abfa8980c7f0cc15a8158a ] When running McASP as master capture alone will not record any audio unless a parallel playback stream is running. As soon as the playback stops the captured data is going to be silent again. In McASP master mode we need to set the PDIR

[PATCH 5.2 029/162] selftests: forwarding: gre_multipath: Fix flower filters

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 1be79d89b7ae96e004911bd228ce8c2b5cc6415f ] The TC filters used in the test do not work with veth devices because the outer Ethertype is 802.1Q and not IPv4. The test passes with mlxsw netdevs since the hardware always looks at "The first Ethertype that does not point to either: V

[PATCH 5.2 046/162] isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in start_isoc_chain()

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit a0d57a552b836206ad7705a1060e6e1ce5a38203 ] In start_isoc_chain(), usb_alloc_urb() on line 1392 may fail and return NULL. At this time, fifo->iso[i].urb is assigned to NULL. Then, fifo->iso[i].urb is used at some places, such as: LINE 1405:fill_isoc_urb(fifo->iso[i].urb, ...)

[PATCH 5.2 048/162] mac80211_hwsim: Fix possible null-pointer dereferences in hwsim_dump_radio_nl()

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit b55f3b841099e641bdb2701d361a4c304e2dbd6f ] In hwsim_dump_radio_nl(), when genlmsg_put() on line 3617 fails, hdr is assigned to NULL. Then hdr is used on lines 3622 and 3623: genl_dump_check_consistent(cb, hdr); genlmsg_end(skb, hdr); Thus, possible null-pointer dereferen

[PATCH 5.2 032/162] can: dev: call netif_carrier_off() in register_candev()

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit c63845609c4700488e5eacd6ab4d06d5d420e5ef ] CONFIG_CAN_LEDS is deprecated. When trying to use the generic netdev trigger as suggested, there's a small inconsistency with the link property: The LED is on initially, stays on when the device is brought up, and then turns off (as expe

[PATCH 5.2 036/162] Staging: fbtft: Fix GPIO handling

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 92e3e884887c0d278042fbbb6f6c9b41d6addb71 ] Commit c440eee1a7a1 ("Staging: fbtft: Switch to the gpio descriptor interface") breaks GPIO handling. In several places, checks to only set a GPIO if it was configured ended up backwards. I have tested this fix. The fixed driver works wi

[PATCH 5.2 069/162] net/ethernet/qlogic/qed: force the string buffer NULL-terminated

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 3690c8c9a8edff0db077a38783112d8fe12a7dd2 ] strncpy() does not ensure NULL-termination when the input string size equals to the destination buffer size 30. The output string is passed to qed_int_deassertion_aeu_bit() which calls DP_INFO() and relies NULL-termination. Use strlcpy

[PATCH 5.2 038/162] st21nfca_connectivity_event_received: null check the allocation

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 9891d06836e67324c9e9c4675ed90fc8b8110034 ] devm_kzalloc may fail and return null. So the null check is needed. Signed-off-by: Navid Emamdoost Signed-off-by: David S. Miller Signed-off-by: Sasha Levin --- drivers/nfc/st21nfca/se.c | 2 ++ 1 file changed, 2 insertions(+) diff

[PATCH 5.2 052/162] netfilter: ipset: Fix rename concurrency with listing

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 6c1f7e2c1b96ab9b09ac97c4df2bd9dc327206f6 ] Shijie Luo reported that when stress-testing ipset with multiple concurrent create, rename, flush, list, destroy commands, it can result ipset : Broken LIST kernel message: missing DATA part! error messages and broken list results. The

[PATCH 5.2 014/162] MIPS: kernel: only use i8253 clocksource with periodic clockevent

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit a07e3324538a989b7cdbf2c679be6a7f9df2544f ] i8253 clocksource needs a free running timer. This could only be used, if i8253 clockevent is set up as periodic. Signed-off-by: Thomas Bogendoerfer Signed-off-by: Paul Burton Cc: Ralf Baechle Cc: James Hogan Cc: linux-m...@vger.ker

[PATCH 5.2 035/162] ASoC: Fail card instantiation if DAI format setup fails

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 40aa5383e393d72f6aa3943a4e7b1aae25a1e43b ] If the DAI format setup fails, there is no valid communication format between CPU and CODEC, so fail card instantiation, rather than continue with a card that will most likely not function properly. Signed-off-by: Ricard Wanderlof Link

[PATCH 5.2 024/162] selftests/bpf: fix sendmsg6_prog on s390

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit c8eee4135a456bc031d67cadc454e76880d1afd8 ] "sendmsg6: rewrite IP & port (C)" fails on s390, because the code in sendmsg_v6_prog() assumes that (ctx->user_ip6[0] & 0x) refers to leading IPv6 address digits, which is not the case on big-endian machines. Since checking bitwise

[PATCH 5.2 044/162] net: usb: qmi_wwan: Add the BroadMobi BM818 card

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 9a07406b00cdc6ec689dc142540739575c717f3c ] The BroadMobi BM818 M.2 card uses the QMI protocol Signed-off-by: Bob Ham Signed-off-by: Angus Ainslie (Purism) Signed-off-by: David S. Miller Signed-off-by: Sasha Levin --- drivers/net/usb/qmi_wwan.c | 1 + 1 file changed, 1 inser

[PATCH 5.2 004/162] ASoC: audio-graph-card: fix use-after-free in graph_dai_link_of_dpcm()

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit aa2e362cb6b3f5ca88093ada01e1a0ace8a517b2 ] After calling of_node_put() on the ports, port, and node variables, they are still being used, which may result in use-after-free. Fix this issue by calling of_node_put() after the last usage. Fixes: dd98fbc558a0 ("ASoC: audio-graph-car

[PATCH 4.19 95/98] dm zoned: fix potential NULL dereference in dmz_do_reclaim()

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit e0702d90b79d430b0ccc276ead4f88440bb51352 ] This function is supposed to return error pointers so it matches the dmz_get_rnd_zone_for_reclaim() function. The current code could lead to a NULL dereference in dmz_do_reclaim() Fixes: b234c6d7a703 ("dm zoned: improve error handling

[PATCH 5.2 010/162] ASoC: samsung: odroid: fix a double-free issue for cpu_dai

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 2abee12c0ab1924a69993d2c063a39a952e7d836 ] The cpu_dai variable is still being used after the of_node_put() call, which may result in double-free: of_node_put(cpu_dai);---> released here ret = devm_snd_soc_register_card(dev, card); if (ret <

[PATCH 4.19 89/98] xfs: dont trip over uninitialized buffer on extent read of corrupted inode

2019-08-27 Thread Greg Kroah-Hartman
commit 6958d11f77d45db80f7e22a21a74d4d5f44dc667 upstream. We've had rather rare reports of bmap btree block corruption where the bmap root block has a level count of zero. The root cause of the corruption is so far unknown. We do have verifier checks to detect this form of on-disk corruption, but

[PATCH 4.19 98/98] rxrpc: Fix read-after-free in rxrpc_queue_local()

2019-08-27 Thread Greg Kroah-Hartman
From: David Howells commit 06d9532fa6b34f12a6d75711162d47c17c1add72 upstream. rxrpc_queue_local() attempts to queue the local endpoint it is given and then, if successful, prints a trace line. The trace line includes the current usage count - but we're not allowed to look at the local endpoint

[PATCH 4.19 96/98] powerpc: Allow flush_(inval_)dcache_range to work across ranges >4GB

2019-08-27 Thread Greg Kroah-Hartman
From: Alastair D'Silva The upstream commit: 22e9c88d486a ("powerpc/64: reuse PPC32 static inline flush_dcache_range()") has a similar effect, but since it is a rewrite of the assembler to C, is too invasive for stable. This patch is a minimal fix to address the issue in assembler. This patch a

[PATCH 4.19 93/98] xfs: Add attibute remove and helper functions

2019-08-27 Thread Greg Kroah-Hartman
commit 068f985a9e5ec70fde58d8f679994fdbbd093a36 upstream. This patch adds xfs_attr_remove_args. These sub-routines remove the attributes specified in @args. We will use this later for setting parent pointers as a deferred attribute operation. Signed-off-by: Allison Henderson Reviewed-by: Dave Ch

RE: [EXT] Re: [v4] rtc: pcf85363/pcf85263: fix error that failed to run hwclock -w

2019-08-27 Thread Biwen Li
> > On 8/27/19 7:37 AM, Biwen Li wrote: > > - In drivers/rtc/rtc-pcf85363.c, CTRL_STOP_EN is 0x2e, but DT_100THS > >is 0, max_regiter is 0x2f, then reg will be equal to 0x30, > >'0x30 < 0x2f' is false,so regmap_writeable will return false. > > > > - The pcf85363/pcf85263 has

[PATCH 4.19 90/98] xfs: Move fs/xfs/xfs_attr.h to fs/xfs/libxfs/xfs_attr.h

2019-08-27 Thread Greg Kroah-Hartman
commit e2421f0b5ff3ce279573036f5cfcb0ce28b422a9 upstream. This patch moves fs/xfs/xfs_attr.h to fs/xfs/libxfs/xfs_attr.h since xfs_attr.c is in libxfs. We will need these later in xfsprogs. Signed-off-by: Allison Henderson Reviewed-by: Dave Chinner Signed-off-by: Dave Chinner Signed-off-by: L

[PATCH 4.19 54/98] perf cpumap: Fix writing to illegal memory in handling cpumap mask

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 5f5e25f1c7933a6e1673515c0b1d5acd82fea1ed ] cpu_map__snprint_mask() would write to illegal memory pointed by zalloc(0) when there is only one cpu. This patch fixes the calculation and adds sanity check against the input parameters. Signed-off-by: He Zhe Cc: Alexander Shishkin

[PATCH 4.19 59/98] HID: wacom: correct misreported EKR ring values

2019-08-27 Thread Greg Kroah-Hartman
From: Aaron Armstrong Skomra commit fcf887e7caaa813eea821d11bf2b7619a37df37a upstream. The EKR ring claims a range of 0 to 71 but actually reports values 1 to 72. The ring is used in relative mode so this change should not affect users. Signed-off-by: Aaron Armstrong Skomra Fixes: 72b236d60218

[PATCH 4.19 56/98] KVM: arm64: Dont write junk to sysregs on reset

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 03fdfb2690099c19160a3f2c5b77db60b3afeded ] At the moment, the way we reset system registers is mildly insane: We write junk to them, call the reset functions, and then check that we have something else in them. The "fun" thing is that this can happen while the guest is running (

[PATCH 4.19 83/98] dm zoned: properly handle backing device failure

2019-08-27 Thread Greg Kroah-Hartman
From: Dmitry Fomichev commit 75d66ffb48efb30f2dd42f041ba8b39c5b2bd115 upstream. dm-zoned is observed to lock up or livelock in case of hardware failure or some misconfiguration of the backing zoned device. This patch adds a new dm-zoned target function that checks the status of the backing devi

[PATCH 4.19 81/98] dm zoned: improve error handling in reclaim

2019-08-27 Thread Greg Kroah-Hartman
From: Dmitry Fomichev commit b234c6d7a703661b5045c5bf569b7c99d2edbf88 upstream. There are several places in reclaim code where errors are not propagated to the main function, dmz_reclaim(). This function is responsible for unlocking zones that might be still locked at the end of any failed recla

[PATCH 4.19 80/98] dm table: fix invalid memory accesses with too high sector number

2019-08-27 Thread Greg Kroah-Hartman
From: Mikulas Patocka commit 1cfd5d3399e87167b7f9157ef99daa0e959f395d upstream. If the sector number is too high, dm_table_find_target() should return a pointer to a zeroed dm_target structure (the caller should test it with dm_target_is_valid). However, for some table sizes, the code in dm_tab

[PATCH 1/2] powerpc: permanently include 8xx registers in reg.h

2019-08-27 Thread Christophe Leroy
Most 8xx registers have specific names, so just include reg_8xx.h all the time in reg.h in order to have them defined even when CONFIG_PPC_8xx is not selected. This will avoid the need for #ifdefs in C code. Guard SPRN_ICTRL in an #ifdef CONFIG_PPC_8xx as this register has same name but different

[PATCH 2/2] powerpc: cleanup hw_irq.h

2019-08-27 Thread Christophe Leroy
SET_MSR_EE() is just use in this file and doesn't provide any added value compared to mtmsr(). Drop it. Add macros to use wrtee/wrteei insn. Replace #ifdefs by IS_ENABLED() Signed-off-by: Christophe Leroy --- arch/powerpc/include/asm/hw_irq.h | 57 ++- arch/

[PATCH 4.19 76/98] dm btree: fix order of block initialization in btree_split_beneath

2019-08-27 Thread Greg Kroah-Hartman
From: ZhangXiaoxu commit e4f9d6013820d1eba1432d51dd1c5795759aa77f upstream. When btree_split_beneath() splits a node to two new children, it will allocate two blocks: left and right. If right block's allocation failed, the left block will be unlocked and marked dirty. If this happened, the lef

[PATCH 4.19 69/98] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx

2019-08-27 Thread Greg Kroah-Hartman
From: Oleg Nesterov commit 46d0b24c5ee10a15dfb25e20642f5a5ed59c5003 upstream. userfaultfd_release() should clear vm_flags/vm_userfaultfd_ctx even if mm->core_state != NULL. Otherwise a page fault can see userfaultfd_missing() == T and use an already freed userfaultfd_ctx. Link: http://lkml.ker

[PATCH 4.19 68/98] Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE

2019-08-27 Thread Greg Kroah-Hartman
From: Dexuan Cui commit a9fc4340aee041dd186d1fb8f1b5d1e9caf28212 upstream. In the case of X86_PAE, unsigned long is u32, but the physical address type should be u64. Due to the bug here, the netvsc driver can not load successfully, and sometimes the VM can panic due to memory corruption (the hyp

[PATCH 4.19 79/98] dm space map metadata: fix missing store of apply_bops() return value

2019-08-27 Thread Greg Kroah-Hartman
From: ZhangXiaoxu commit ae148243d3f0816b37477106c05a2ec7d5f32614 upstream. In commit 6096d91af0b6 ("dm space map metadata: fix occasional leak of a metadata block on resize"), we refactor the commit logic to a new function 'apply_bops'. But when that logic was replaced in out() the return valu

[PATCH 4.19 87/98] mm/zsmalloc.c: fix race condition in zs_destroy_pool

2019-08-27 Thread Greg Kroah-Hartman
From: Henry Burns commit 701d678599d0c1623aaf4139c03eea260a75b027 upstream. In zs_destroy_pool() we call flush_work(&pool->free_work). However, we have no guarantee that migration isn't happening in the background at that time. Since migration can't directly free pages, it relies on free_work

[PATCH 4.19 51/98] drm/vmwgfx: fix memory leak when too many retries have occurred

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 6b7c3b86f0b63134b2ab56508921a0853ffa687a ] Currently when too many retries have occurred there is a memory leak on the allocation for reply on the error return path. Fix this by kfree'ing reply before returning. Addresses-Coverity: ("Resource leak") Fixes: a9cd9c044aa9 ("drm/vmw

[PATCH 4.19 10/98] selftests: forwarding: gre_multipath: Fix flower filters

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 1be79d89b7ae96e004911bd228ce8c2b5cc6415f ] The TC filters used in the test do not work with veth devices because the outer Ethertype is 802.1Q and not IPv4. The test passes with mlxsw netdevs since the hardware always looks at "The first Ethertype that does not point to either: V

[PATCH RFC v2 0/8] drm/bridge: dw-hdmi: implement bus-format negotiation and YUV420 support

2019-08-27 Thread Neil Armstrong
This patchset is based on Boris's v2 "drm: Add support for bus-format negotiation" at [1] patchset to implement full bus-format negotiation for DW-HDMI, including YUV420 support and 10/12/16bit YUV444, YUV422 and RGB. The Color Space Converter support is already implemented. And the counterpart

[PATCH RFC v2 5/8] drm/bridge: dw-hdmi: allow ycbcr420 modes for >= 0x200a

2019-08-27 Thread Neil Armstrong
Now the DW-HDMI Controller supports the HDMI2.0 modes, enable support for these modes in the connector if the platform supports them. We limit these modes to DW-HDMI IP version >= 0x200a which are designed to support HDMI2.0 display modes. Signed-off-by: Neil Armstrong --- drivers/gpu/drm/bridge

[PATCH 4.19 42/98] net: cxgb3_main: Fix a resource leak in a error path in init_one()

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit debea2cd3193ac868289e8893c3a719c265b0612 ] A call to 'kfree_skb()' is missing in the error handling path of 'init_one()'. This is already present in 'remove_one()' but is missing here. Signed-off-by: Christophe JAILLET Signed-off-by: David S. Miller Signed-off-by: Sasha Levin

[PATCH RFC v2 6/8] drm/meson: venc: add support for YUV420 setup

2019-08-27 Thread Neil Armstrong
This patch adds encoding support for the YUV420 output from the Amlogic Meson SoCs Video Processing Unit to the HDMI Controller. The YUV420 is obtained by generating a YUV444 pixel stream like the classic HDMI display modes, but then the Video Encoder output can be configured to down-sample the YU

[PATCH 4.19 13/98] can: gw: Fix error path of cgw_module_init

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit b7a14297f102b6e2ce6f16feffebbb9bde1e9b55 ] This patch add error path for cgw_module_init to avoid possible crash if some error occurs. Fixes: c1aabdf379bc ("can-gw: add netlink based CAN routing") Signed-off-by: YueHaibing Acked-by: Oliver Hartkopp Signed-off-by: Marc Kleine-B

[PATCH 4.14 61/62] dm zoned: fix potential NULL dereference in dmz_do_reclaim()

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit e0702d90b79d430b0ccc276ead4f88440bb51352 ] This function is supposed to return error pointers so it matches the dmz_get_rnd_zone_for_reclaim() function. The current code could lead to a NULL dereference in dmz_do_reclaim() Fixes: b234c6d7a703 ("dm zoned: improve error handling

[PATCH RFC v2 7/8] drm/meson: vclk: add support for YUV420 setup

2019-08-27 Thread Neil Armstrong
This patch adds clocking support for the YUV420 output from the Amlogic Meson SoCs Video Processing Unit to the HDMI Controller. The YUV420 is obtained by generating a YUV444 pixel stream like the classic HDMI display modes, but then the Video Encoder output can be configured to down-sample the YU

[PATCH RFC v2 4/8] drm/meson: dw-hdmi: stop enforcing input_bus_format

2019-08-27 Thread Neil Armstrong
To allow using formats from negociation, stop enforcing input_bus_format in the private dw-plat-data struct. Signed-off-by: Neil Armstrong --- drivers/gpu/drm/meson/meson_dw_hdmi.c | 1 - 1 file changed, 1 deletion(-) diff --git a/drivers/gpu/drm/meson/meson_dw_hdmi.c b/drivers/gpu/drm/meson/m

[PATCH 4.19 33/98] net/ethernet/qlogic/qed: force the string buffer NULL-terminated

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 3690c8c9a8edff0db077a38783112d8fe12a7dd2 ] strncpy() does not ensure NULL-termination when the input string size equals to the destination buffer size 30. The output string is passed to qed_int_deassertion_aeu_bit() which calls DP_INFO() and relies NULL-termination. Use strlcpy

[PATCH RFC v2 2/8] drm/meson: meson_dw_hdmi: switch to drm_bridge_funcs

2019-08-27 Thread Neil Armstrong
Switch the dw-hdmi driver to drm_bridge_funcs, and implement the atomic_get_input_bus_fmts/atomic_get_output_bus_fmts. Signed-off-by: Neil Armstrong --- drivers/gpu/drm/meson/meson_dw_hdmi.c | 67 +-- 1 file changed, 54 insertions(+), 13 deletions(-) diff --git a/drivers

[PATCH 4.19 28/98] isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the stack

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit d8a1de3d5bb881507602bc02e004904828f88711 ] Since linux 4.9 it is not possible to use buffers on the stack for DMA transfers. During usb probe the driver crashes with "transfer buffer is on stack" message. This fix k-allocates a buffer to be used on "read_reg_atomic", which is

5.3.0-rc6: i915 fails at typec_displayport 5120x1440

2019-08-27 Thread Leho Kraav
Hardware: Dell Latitude 7400 2-in-1, Whiskey Lake, Intel 620 5120x1440 fails to display. Next available mode 3840x1080 displays fine. Is this a kernel, or a driver level issue? It fails both in Xorg and Wayland, so seems something at the lower levels. This 49" monitor worked fine on Latitude 748

Re: [PATCH v1 0/6] Allow kexec reboot for GICv3 and device tree

2019-08-27 Thread Marc Zyngier
On 26/08/2019 22:25, Pavel Tatashin wrote: > On Mon, Aug 26, 2019 at 3:13 PM Marc Zyngier wrote: >> >> On Mon, 26 Aug 2019 15:00:50 -0400 >> Pavel Tatashin wrote: >> >>> Marc Zyngier added the support for kexec and GICv3 for EFI based systems. >>> However, it is still not possible todo on systems

[PATCH 4.19 03/98] mips: fix cacheinfo

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit b8bea8a5e5d942e62203416ab41edecaed4fda02 ] Because CONFIG_OF defined for MIPS, cacheinfo attempts to fill information from DT, ignoring data filled by architecture routine. This leads to error reported cacheinfo: Unable to detect cache hierarchy for CPU 0 Way to fix this provi

[PATCH 4.19 31/98] can: sja1000: force the string buffer NULL-terminated

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit cd28aa2e056cd1ea79fc5f24eed0ce868c6cab5c ] strncpy() does not ensure NULL-termination when the input string size equals to the destination buffer size IFNAMSIZ. The output string 'name' is passed to dev_info which relies on NULL-termination. Use strlcpy() instead. This issue is

[PATCH 4.19 21/98] isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in start_isoc_chain()

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit a0d57a552b836206ad7705a1060e6e1ce5a38203 ] In start_isoc_chain(), usb_alloc_urb() on line 1392 may fail and return NULL. At this time, fifo->iso[i].urb is assigned to NULL. Then, fifo->iso[i].urb is used at some places, such as: LINE 1405:fill_isoc_urb(fifo->iso[i].urb, ...)

[PATCH 4.19 17/98] ASoC: rockchip: Fix mono capture

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 789e162a6255325325bd321ab0cd51dc7e285054 ] This reverts commit db51707b9c9aeedd310ebce60f15d5bb006567e0. Revert "ASoC: rockchip: i2s: Support mono capture" Previous discussion in https://patchwork.kernel.org/patch/10147153/ explains the issue of the patch. While device is conf

[PATCH 4.19 18/98] ASoC: ti: davinci-mcasp: Correct slot_width posed constraint

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 1e112c35e3c96db7c8ca6ddaa96574f00c06e7db ] The slot_width is a property for the bus while the constraint for SNDRV_PCM_HW_PARAM_SAMPLE_BITS is for the in memory format. Applying slot_width constraint to sample_bits works most of the time, but it will blacklist valid formats in s

[PATCH 4.19 00/98] 4.19.69-stable review

2019-08-27 Thread Greg Kroah-Hartman
This is the start of the stable review cycle for the 4.19.69 release. There are 98 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu 29 Aug 2019 07:25:02 AM UTC. Anything rec

[PATCH 4.19 22/98] mac80211_hwsim: Fix possible null-pointer dereferences in hwsim_dump_radio_nl()

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit b55f3b841099e641bdb2701d361a4c304e2dbd6f ] In hwsim_dump_radio_nl(), when genlmsg_put() on line 3617 fails, hdr is assigned to NULL. Then hdr is used on lines 3622 and 3623: genl_dump_check_consistent(cb, hdr); genlmsg_end(skb, hdr); Thus, possible null-pointer dereferen

[PATCH 4.14 60/62] xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT

2019-08-27 Thread Greg Kroah-Hartman
From: Darrick J. Wong commit 1fb254aa983bf190cfd685d40c64a480a9bafaee upstream. Benjamin Moody reported to Debian that XFS partially wedges when a chgrp fails on account of being out of disk quota. I ran his reproducer script: # adduser dummy # adduser dummy plugdev # dd if=/dev/zero bs=1M co

[PATCH 4.14 55/62] dm zoned: properly handle backing device failure

2019-08-27 Thread Greg Kroah-Hartman
From: Dmitry Fomichev commit 75d66ffb48efb30f2dd42f041ba8b39c5b2bd115 upstream. dm-zoned is observed to lock up or livelock in case of hardware failure or some misconfiguration of the backing zoned device. This patch adds a new dm-zoned target function that checks the status of the backing devi

[PATCH][V2] bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA

2019-08-27 Thread Colin King
From: Colin Ian King An earlier commit re-worked the setting of the bitmask and is now assigning v with some bit flags rather than bitwise or-ing them into v, consequently the earlier bit-settings of v are being lost. Fix this by replacing an assignment with the bitwise or instead. Addresses-Cov

[PATCH 4.14 49/62] dm kcopyd: always complete failed jobs

2019-08-27 Thread Greg Kroah-Hartman
From: Dmitry Fomichev commit d1fef41465f0e8cae0693fb184caa6bfafb6cd16 upstream. This patch fixes a problem in dm-kcopyd that may leave jobs in complete queue indefinitely in the event of backing storage failure. This behavior has been observed while running 100% write file fio workload against

[PATCH 4.14 53/62] dm zoned: improve error handling in reclaim

2019-08-27 Thread Greg Kroah-Hartman
From: Dmitry Fomichev commit b234c6d7a703661b5045c5bf569b7c99d2edbf88 upstream. There are several places in reclaim code where errors are not propagated to the main function, dmz_reclaim(). This function is responsible for unlocking zones that might be still locked at the end of any failed recla

[PATCH 4.14 62/62] powerpc: Allow flush_(inval_)dcache_range to work across ranges >4GB

2019-08-27 Thread Greg Kroah-Hartman
From: Alastair D'Silva The upstream commit: 22e9c88d486a ("powerpc/64: reuse PPC32 static inline flush_dcache_range()") has a similar effect, but since it is a rewrite of the assembler to C, is too invasive for stable. This patch is a minimal fix to address the issue in assembler. This patch a

[PATCH 4.14 07/62] can: dev: call netif_carrier_off() in register_candev()

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit c63845609c4700488e5eacd6ab4d06d5d420e5ef ] CONFIG_CAN_LEDS is deprecated. When trying to use the generic netdev trigger as suggested, there's a small inconsistency with the link property: The LED is on initially, stays on when the device is brought up, and then turns off (as expe

[PATCH 4.14 38/62] Revert "dm bufio: fix deadlock with loop device"

2019-08-27 Thread Greg Kroah-Hartman
From: Mikulas Patocka commit cf3591ef832915892f2499b7e54b51d4c578b28c upstream. Revert the commit bd293d071ffe65e645b4d8104f9d8fe15ea13862. The proper fix has been made available with commit d0a255e795ab ("loop: set PF_MEMALLOC_NOIO for the worker thread"). Note that the fix offered by commit b

[PATCH 4.14 42/62] gpiolib: never report open-drain/source lines as input to user-space

2019-08-27 Thread Greg Kroah-Hartman
From: Bartosz Golaszewski commit 2c60e6b5c9241b24b8b523fefd3e44fb85622cda upstream. If the driver doesn't support open-drain/source config options, we emulate this behavior when setting the direction by calling gpiod_direction_input() if the default value is 0 (open-source) or 1 (open-drain), th

Re: [PATCH] KVM: arm/arm64: vgic: Use a single IO device per redistributor

2019-08-27 Thread Auger Eric
Hi Zenghui, On 8/27/19 9:49 AM, Zenghui Yu wrote: > Hi Eric, > > Thanks for this patch! > > On 2019/8/24 1:52, Auger Eric wrote: >> Hi Zenghui, Marc, >> >> On 8/23/19 7:33 PM, Eric Auger wrote: >>> At the moment we use 2 IO devices per GICv3 redistributor: one >   

[PATCH 4.14 39/62] ceph: dont try fill file_lock on unsuccessful GETFILELOCK reply

2019-08-27 Thread Greg Kroah-Hartman
From: Jeff Layton commit 28a282616f56990547b9dcd5c6fbd2001344664c upstream. When ceph_mdsc_do_request returns an error, we can't assume that the filelock_reply pointer will be set. Only try to fetch fields out of the r_reply_info when it returns success. Cc: sta...@vger.kernel.org Reported-by:

[PATCH 4.14 10/62] st_nci_hci_connectivity_event_received: null check the allocation

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 3008e06fdf0973770370f97d5f1fba3701d8281d ] devm_kzalloc may fail and return NULL. So the null check is needed. Signed-off-by: Navid Emamdoost Signed-off-by: David S. Miller Signed-off-by: Sasha Levin --- drivers/nfc/st-nci/se.c | 2 ++ 1 file changed, 2 insertions(+) diff -

[PATCH 4.14 47/62] x86/boot: Save fields explicitly, zero out everything else

2019-08-27 Thread Greg Kroah-Hartman
From: John Hubbard commit a90118c445cc7f07781de26a9684d4ec58bfcfd1 upstream. Recent gcc compilers (gcc 9.1) generate warnings about an out of bounds memset, if the memset goes accross several fields of a struct. This generated a couple of warnings on x86_64 builds in sanitize_boot_params(). Fix

[PATCH 4.14 46/62] x86/CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h

2019-08-27 Thread Greg Kroah-Hartman
From: Tom Lendacky commit c49a0a80137c7ca7d6ced4c812c9e07a949f6f24 upstream. There have been reports of RDRAND issues after resuming from suspend on some AMD family 15h and family 16h systems. This issue stems from a BIOS not performing the proper steps during resume to ensure RDRAND continues t

[PATCH 4.14 34/62] perf pmu-events: Fix missing "cpu_clk_unhalted.core" event

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 8e6e5bea2e34c61291d00cb3f47560341aa84bc3 ] The events defined in pmu-events JSON are parsed and added into perf tool. For fixed counters, we handle the encodings between JSON and perf by using a static array fixed[]. But the fixed[] has missed an important event "cpu_clk_unhalte

[PATCH 4.14 29/62] libata: add SG safety checks in SFF pio transfers

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 752ead44491e8c91e14d7079625c5916b30921c5 ] Abort processing of a command if we run out of mapped data in the SG list. This should never happen, but a previous bug caused it to be possible. Play it safe and attempt to abort nicely if we don't have more SG segments left. Reviewed-

[PATCH 4.14 26/62] net: hisilicon: fix hip04-xmit never return TX_BUSY

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit f2243b82785942be519016067ee6c55a063bbfe2 ] TX_DESC_NUM is 256, in tx_count, the maximum value of mod(TX_DESC_NUM - 1) is 254, the variable "count" in the hip04_mac_start_xmit function is never equal to (TX_DESC_NUM - 1), so hip04_mac_start_xmit never return NETDEV_TX_BUSY. tx_co

[PATCH 4.14 22/62] HID: input: fix a4tech horizontal wheel custom usage

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 1c703b53e5bfb5c2205c30f0fb157ce271fd42fb ] Some a4tech mice use the 'GenericDesktop.00b8' usage to inform whether the previous wheel report was horizontal or vertical. Before c01908a14bf73 ("HID: input: add mapping for "Toggle Display" key") this usage was being mapped to 'Relati

[PATCH 4.14 09/62] st21nfca_connectivity_event_received: null check the allocation

2019-08-27 Thread Greg Kroah-Hartman
[ Upstream commit 9891d06836e67324c9e9c4675ed90fc8b8110034 ] devm_kzalloc may fail and return null. So the null check is needed. Signed-off-by: Navid Emamdoost Signed-off-by: David S. Miller Signed-off-by: Sasha Levin --- drivers/nfc/st21nfca/se.c | 2 ++ 1 file changed, 2 insertions(+) diff

[PATCH] clk: imx: lpcg: write twice when writing lpcg regs

2019-08-27 Thread Peng Fan
From: Peng Fan There is hardware issue that: The output clock the LPCG cell will not turn back on as expected, even though a read of the IPG registers in the LPCG indicates that the clock should be enabled. The software workaround is to write twice to enable the LPCG clock output. Signed-off-by

Re: [PATCH 00/21] ASoC: sun4i-i2s: Number of fixes and TDM Support

2019-08-27 Thread Chen-Yu Tsai
Hi everyone, On Tue, Aug 20, 2019 at 3:25 AM Maxime Ripard wrote: > > From: Maxime Ripard > > Hi, > > This series aims at fixing a number of issues in the current i2s driver, > mostly related to the i2s master support and the A83t support. It also uses > that occasion to cleanup a few things and

Re: 5.3.0-rc6: i915 fails at typec_displayport 5120x1440

2019-08-27 Thread Leho Kraav
On Tue, Aug 27, 2019 at 11:08:34AM +0300, Leho Kraav wrote: > Hardware: Dell Latitude 7400 2-in-1, Whiskey Lake, Intel 620 > > 5120x1440 fails to display. Looks like I'm not alone, either https://www.reddit.com/r/linuxquestions/comments/cddpne/linux_and_ultrawide/

Re: [PATCH v2 04/15] kvm: x86: Add per-VM APICv state debugfs

2019-08-27 Thread Alexander Graf
On 26.08.19 21:41, Suthikulpanit, Suravee wrote: Alex, On 8/19/2019 4:57 AM, Alexander Graf wrote: On 15.08.19 18:25, Suthikulpanit, Suravee wrote: Currently, there is no way to tell whether APICv is active on a particular VM. This often cause confusion since APICv can be deactivated at ru

Re: [RFC PATCH 1/2] RISC-V: Mark existing SBI as legacy SBI.

2019-08-27 Thread Mike Rapoport
On Mon, Aug 26, 2019 at 04:32:55PM -0700, Atish Patra wrote: > As per the new SBI specification, current SBI implementation is > defined as legacy and will be removed/replaced in future. > > Rename existing implementation to reflect that. This patch is just > a preparatory patch for SBI v0.2 and d

Re: [PATCH 14/16] include/linux: prefer __section from compiler_attributes.h

2019-08-27 Thread Will Deacon
On Sat, Aug 24, 2019 at 02:51:46PM +0200, Miguel Ojeda wrote: > On Tue, Aug 13, 2019 at 10:33 AM Will Deacon wrote: > > > > -ENOCOMMITMESSAGE > > > > Otherwise, patch looks good to me. > > Do you want Ack, Review or nothing? You can add my Ack if a commit message appears. Will

Re: [PATCH] x86: tpm: Remove a busy bit of the NVS area for supporting AMD's fTPM

2019-08-27 Thread Seunghun Han
> > On Mon, Aug 26, 2019 at 1:18 AM Seunghun Han wrote: > > To support AMD's fTPM, I removed the busy bit from the ACPI NVS area like > > the reserved area so that AMD's fTPM regions could be assigned in it. > > drivers/acpi/nvs.c saves and restores the contents of NVS regions, and > if other driv

[PATCH 0/2] powerpc/82xx: Adjustments for pq2ads_pci_init_irq()

2019-08-27 Thread Markus Elfring
From: Markus Elfring Date: Tue, 27 Aug 2019 10:16:32 +0200 Two update suggestions were taken into account from static source code analysis. Markus Elfring (2): Delete an unnecessary of_node_put() call Use common error handling code arch/powerpc/platforms/82xx/pq2ads-pci-pic.c | 13 +---

Re: [RFC PATCH 2/2] RISC-V: Add basic support for SBI v0.2

2019-08-27 Thread Anup Patel
On Tue, Aug 27, 2019 at 1:28 PM Mike Rapoport wrote: > > On Mon, Aug 26, 2019 at 04:32:56PM -0700, Atish Patra wrote: > > The SBI v0.2 introduces a base extension which is backward compatible > > with v0.1. Implement all helper functions and minimum required SBI > > calls from v0.2 for now. All ot

Re: [GIT PULL] perf/core improvements and fixes

2019-08-27 Thread Ingo Molnar
* Arnaldo Carvalho de Melo wrote: > Hi Ingo/Thomas, > > Please consider pulling, > > Best regards, > > - Arnaldo > > Test results at the end of this message, as usual. > > The following changes since commit 39152ee51b77851689f9b23fde6f610d13566c39: > > perf/x86/intel/pt: Get rid o

[tip: perf/core] perf report: Fix --ns time sort key output

2019-08-27 Thread tip-bot2 for Andi Kleen
The following commit has been merged into the perf/core branch of tip: Commit-ID: 3dab6ac080dcd7f71cb9ceb84ad7dafecd6f7c07 Gitweb: https://git.kernel.org/tip/3dab6ac080dcd7f71cb9ceb84ad7dafecd6f7c07 Author:Andi Kleen AuthorDate:Fri, 23 Aug 2019 14:03:38 -07:00 Committer:

[tip: perf/core] libperf: Add PERF_RECORD_KSYMBOL 'struct ksymbol_event' to perf/event.h

2019-08-27 Thread tip-bot2 for Jiri Olsa
The following commit has been merged into the perf/core branch of tip: Commit-ID: f15e3c25a1b40794a0ef2647360afe873fe34f54 Gitweb: https://git.kernel.org/tip/f15e3c25a1b40794a0ef2647360afe873fe34f54 Author:Jiri Olsa AuthorDate:Sun, 25 Aug 2019 20:17:50 +02:00 Committer:

[tip: perf/core] perf evsel: Rename perf_missing_features::bpf_event to ::bpf

2019-08-27 Thread tip-bot2 for Arnaldo Carvalho de Melo
The following commit has been merged into the perf/core branch of tip: Commit-ID: 74a1e863eb73dcc9f069b671dfb40650f3832116 Gitweb: https://git.kernel.org/tip/74a1e863eb73dcc9f069b671dfb40650f3832116 Author:Arnaldo Carvalho de Melo AuthorDate:Mon, 26 Aug 2019 19:31:06 -03:0

<    1   2   3   4   5   6   7   8   9   10   >