[PATCH 5.4 080/107] can: j1939: add rxtimer for multipacket broadcast session

2020-08-24 Thread Greg Kroah-Hartman
From: Zhang Changzhong [ Upstream commit 0ae18a82686f9b9965a8ce0dd81371871b306ffe ] According to SAE J1939/21 (Chapter 5.12.3 and APPENDIX C), for transmit side the required time interval between packets of a multipacket broadcast message is 50 to 200 ms, the responder shall use a timeout of 250

[RFC PATCH 2/3] dmaengine: add peripheral configuration

2020-08-24 Thread Vinod Koul
Some complex dmaengine controllers have capability to program the peripheral device, so pass on the peripheral configuration as part of dma_slave_config Signed-off-by: Vinod Koul --- include/linux/dmaengine.h | 75 +++ 1 file changed, 75 insertions(+) diff --

[PATCH 5.4 069/107] bpf: sock_ops sk access may stomp registers when dst_reg = src_reg

2020-08-24 Thread Greg Kroah-Hartman
From: John Fastabend [ Upstream commit 84f44df664e9f0e261157e16ee1acd77cc1bb78d ] Similar to patch ("bpf: sock_ops ctx access may stomp registers") if the src_reg = dst_reg when reading the sk field of a sock_ops struct we generate xlated code, 53: (61) r9 = *(u32 *)(r9 +28) 54: (15) if r9

Re: [PATCH v3] usb-serial:cp210x: add support to software flow control

2020-08-24 Thread Johan Hovold
On Thu, Aug 20, 2020 at 03:52:40PM +0800, Sheng Long Wang wrote: > From: Wang Sheng Long > > When data is transmitted between two serial ports, > the phenomenon of data loss often occurs. The two kinds > of flow control commonly used in serial communication > are hardware flow control and softwar

[PATCH 5.4 041/107] scsi: ufs: Add DELAY_BEFORE_LPM quirk for Micron devices

2020-08-24 Thread Greg Kroah-Hartman
From: Stanley Chu [ Upstream commit c0a18ee0ce78d7957ec1a53be35b1b3beba80668 ] It is confirmed that Micron device needs DELAY_BEFORE_LPM quirk to have a delay before VCC is powered off. Sdd Micron vendor ID and this quirk for Micron devices. Link: https://lore.kernel.org/r/20200612012625.6615-2

[PATCH 1/3] dt-bindings: dmaengine: Document qcom,gpi dma binding

2020-08-24 Thread Vinod Koul
Add devicetree binding documentation for GPI DMA controller implemented on Qualcomm SoCs Signed-off-by: Vinod Koul --- .../devicetree/bindings/dma/qcom-gpi.yaml | 87 +++ 1 file changed, 87 insertions(+) create mode 100644 Documentation/devicetree/bindings/dma/qcom-gpi.yaml

[PATCH 5.4 065/107] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian

2020-08-24 Thread Greg Kroah-Hartman
From: Stephen Suryaputra [ Upstream commit b428336676dbca363262cc134b6218205df4f530 ] On big-endian machine, the returned register data when the exthdr is present is not being compared correctly because little-endian is assumed. The function nft_cmp_fast_mask(), called by nft_cmp_fast_eval() and

[PATCH 5.4 061/107] alpha: fix annotation of io{read,write}{16,32}be()

2020-08-24 Thread Greg Kroah-Hartman
From: Luc Van Oostenryck [ Upstream commit bd72866b8da499e60633ff28f8a4f6e09ca78efe ] These accessors must be used to read/write a big-endian bus. The value returned or written is native-endian. However, these accessors are defined using be{16,32}_to_cpu() or cpu_to_be{16,32}() to make the end

[PATCH 5.4 045/107] media: vpss: clean up resources in init

2020-08-24 Thread Greg Kroah-Hartman
From: Evgeny Novikov [ Upstream commit 9c487b0b0ea7ff22127fe99a7f67657d8730ff94 ] If platform_driver_register() fails within vpss_init() resources are not cleaned up. The patch fixes this issue by introducing the corresponding error handling. Found by Linux Driver Verification project (linuxtes

[PATCH 5.4 066/107] spi: stm32: fixes suspend/resume management

2020-08-24 Thread Greg Kroah-Hartman
From: Amelie Delaunay [ Upstream commit db96bf976a4fc65439be0b4524c0d41427d98814 ] This patch adds pinctrl power management, and reconfigure spi controller in case of resume. Fixes: 038ac869c9d2 ("spi: stm32: add runtime PM support") Signed-off-by: Amelie Delaunay Signed-off-by: Alain Volmat

[PATCH 5.4 056/107] scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases

2020-08-24 Thread Greg Kroah-Hartman
From: Javed Hasan [ Upstream commit ec007ef40abb6a164d148b0dc19789a7a2de2cc8 ] In fc_disc_gpn_id_resp(), skb is supposed to get freed in all cases except for PTR_ERR. However, in some cases it didn't. This fix is to call fc_frame_free(fp) before function returns. Link: https://lore.kernel.org/

[PATCH 5.4 053/107] ceph: fix use-after-free for fsc->mdsc

2020-08-24 Thread Greg Kroah-Hartman
From: Xiubo Li [ Upstream commit a7caa88f8b72c136f9a401f498471b8a8e35370d ] If the ceph_mdsc_init() fails, it will free the mdsc already. Reported-by: syzbot+b57f46d8d6ea51960...@syzkaller.appspotmail.com Signed-off-by: Xiubo Li Reviewed-by: Jeff Layton Signed-off-by: Ilya Dryomov Signed-off

[PATCH 5.4 051/107] drm/ttm: fix offset in VMAs with a pg_offs in ttm_bo_vm_access

2020-08-24 Thread Greg Kroah-Hartman
From: Felix Kuehling [ Upstream commit c0001213d195d1bac83e0744c06ff06dd5a8ba53 ] VMAs with a pg_offs that's offset from the start of the vma_node need to adjust the offset within the BO accordingly. This matches the offset calculation in ttm_bo_vm_fault_reserved. Signed-off-by: Felix Kuehling

[PATCH 5.4 048/107] m68knommu: fix overwriting of bits in ColdFire V3 cache control

2020-08-24 Thread Greg Kroah-Hartman
From: Greg Ungerer [ Upstream commit bdee0e793cea10c516ff48bf3ebb4ef1820a116b ] The Cache Control Register (CACR) of the ColdFire V3 has bits that control high level caching functions, and also enable/disable the use of the alternate stack pointer register (the EUSP bit) to provide separate supe

[PATCH 5.4 040/107] opp: Enable resources again if they were disabled earlier

2020-08-24 Thread Greg Kroah-Hartman
From: Rajendra Nayak [ Upstream commit a4501bac0e553bed117b7e1b166d49731caf7260 ] dev_pm_opp_set_rate() can now be called with freq = 0 in order to either drop performance or bandwidth votes or to disable regulators on platforms which support them. In such cases, a subsequent call to dev_pm_opp

[PATCH 5.4 058/107] media: camss: fix memory leaks on error handling paths in probe

2020-08-24 Thread Greg Kroah-Hartman
From: Evgeny Novikov [ Upstream commit f45882cfb152f5d3a421fd58f177f227e44843b9 ] camss_probe() does not free camss on error handling paths. The patch introduces an additional error label for this purpose. Besides, it removes call of v4l2_async_notifier_cleanup() from camss_of_parse_ports() sinc

[PATCH 5.4 059/107] tools/testing/selftests/cgroup/cgroup_util.c: cg_read_strcmp: fix null pointer dereference

2020-08-24 Thread Greg Kroah-Hartman
From: Gaurav Singh [ Upstream commit d830020656c5b68ced962ed3cb51a90e0a89d4c4 ] Haven't reproduced this issue. This PR is does a minor code cleanup. Signed-off-by: Gaurav Singh Signed-off-by: Andrew Morton Reviewed-by: Andrew Morton Cc: Shuah Khan Cc: Tejun Heo Cc: Michal Koutn Cc: Roman

[PATCH 5.4 052/107] jffs2: fix UAF problem

2020-08-24 Thread Greg Kroah-Hartman
From: Zhe Li [ Upstream commit 798b7347e4f29553db4b996393caf12f5b233daf ] The log of UAF problem is listed below. BUG: KASAN: use-after-free in jffs2_rmdir+0xa4/0x1cc [jffs2] at addr c1f165fc Read of size 4 by task rm/8283 =

[PATCH 5.4 036/107] drm/amdgpu/display: use GFP_ATOMIC in dcn20_validate_bandwidth_internal

2020-08-24 Thread Greg Kroah-Hartman
From: Daniel Kolesa commit f41ed88cbd6f025f7a683a11a74f901555fba11c upstream. GFP_KERNEL may and will sleep, and this is being executed in a non-preemptible context; this will mess things up since it's called inbetween DC_FP_START/END, and rescheduling will result in the DC_FP_END later being ca

[PATCH 5.4 010/107] drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset()

2020-08-24 Thread Greg Kroah-Hartman
From: Chris Wilson [ Upstream commit 119c53d2d4044c59c450c4f5a568d80b9d861856 ] drm_gem_dumb_map_offset() now exists and does everything vgem_gem_dump_map does and *ought* to do. In particular, vgem_gem_dumb_map() was trying to reject mmapping an imported dmabuf by checking the existence of obj

[PATCH 5.4 049/107] svcrdma: Fix another Receive buffer leak

2020-08-24 Thread Greg Kroah-Hartman
From: Chuck Lever [ Upstream commit 64d26422516b2e347b32e6d9b1d40b3c19a62aae ] During a connection tear down, the Receive queue is flushed before the device resources are freed. Typically, all the Receives flush with IB_WR_FLUSH_ERR. However, any pending successful Receives flush with IB_WR_SUC

[PATCH 5.4 037/107] drm/amd/display: Fix EDID parsing after resume from suspend

2020-08-24 Thread Greg Kroah-Hartman
From: Stylon Wang commit b24bdc37d03a0478189e20a50286092840f414fa upstream. [Why] Resuming from suspend, CEA blocks from EDID are not parsed and no video modes can support YUV420. When this happens, output bpc cannot go over 8-bit with 4K modes on HDMI. [How] In amdgpu_dm_update_connector_after

[PATCH 5.4 006/107] kbuild: remove PYTHON2 variable

2020-08-24 Thread Greg Kroah-Hartman
From: Masahiro Yamada commit 94f7345b712405b79647a6a4bf8ccbd0d78fa69d upstream. Python 2 has retired. There is no user of this variable. Signed-off-by: Masahiro Yamada Signed-off-by: Nick Desaulniers Signed-off-by: Greg Kroah-Hartman --- Makefile |3 +-- 1 file changed, 1 insertion(+),

[PATCH 5.4 030/107] mm, page_alloc: fix core hung in free_pcppages_bulk()

2020-08-24 Thread Greg Kroah-Hartman
From: Charan Teja Reddy commit 88e8ac11d2ea3acc003cf01bb5a38c8aa76c3cfd upstream. The following race is observed with the repeated online, offline and a delay between two successive online of memory blocks of movable zone. P1 P2 Online the first mem

[PATCH v1 1/2] scsi: ufs: Abort tasks before clear them from doorbell

2020-08-24 Thread Can Guo
To recovery non-fatal errors, no full reset is required, err_handler only clears those pending TRs/TMRs so that scsi layer can re-issue them. In current err_handler, TRs are directly cleared from UFS host's doorbell but not aborted from device side. However, according to the UFSHCI JEDEC spec, the

[PATCH 5.4 007/107] kbuild: remove AS variable

2020-08-24 Thread Greg Kroah-Hartman
From: Masahiro Yamada commit aa824e0c962b532d5073cbb41b2efcd6f5e72bae upstream. As commit 5ef872636ca7 ("kbuild: get rid of misleading $(AS) from documents") noted, we rarely use $(AS) directly in the kernel build. Now that the only/last user of $(AS) in drivers/net/wan/Makefile was converted t

[PATCH 5.4 008/107] kbuild: replace AS=clang with LLVM_IAS=1

2020-08-24 Thread Greg Kroah-Hartman
From: Masahiro Yamada commit 7e20e47c70f810d678d02941fa3c671209c4ca97 upstream. The 'AS' variable is unused for building the kernel. Only the remaining usage is to turn on the integrated assembler. A boolean flag is a better fit for this purpose. AS=clang was added for experts. So, I replaced i

[PATCH 5.4 029/107] mm: include CMA pages in lowmem_reserve at boot

2020-08-24 Thread Greg Kroah-Hartman
From: Doug Berger commit e08d3fdfe2dafa0331843f70ce1ff6c1c4900bf4 upstream. The lowmem_reserve arrays provide a means of applying pressure against allocations from lower zones that were targeted at higher zones. Its values are a function of the number of pages managed by higher zones and are as

[PATCH 5.4 026/107] romfs: fix uninitialized memory leak in romfs_dev_read()

2020-08-24 Thread Greg Kroah-Hartman
From: Jann Horn commit bcf85fcedfdd17911982a3e3564fcfec7b01eebd upstream. romfs has a superblock field that limits the size of the filesystem; data beyond that limit is never accessed. romfs_dev_read() fetches a caller-supplied number of bytes from the backing device. It returns 0 on success o

[PATCH 5.4 018/107] btrfs: dont show full path of bind mounts in subvol=

2020-08-24 Thread Greg Kroah-Hartman
From: Josef Bacik [ Upstream commit 3ef3959b29c4a5bd65526ab310a1a18ae533172a ] Chris Murphy reported a problem where rpm ostree will bind mount a bunch of things for whatever voodoo it's doing. But when it does this /proc/mounts shows something like /dev/sda /mnt/test btrfs rw,relatime,subvo

[PATCH 5.4 024/107] can: j1939: socket: j1939_sk_bind(): make sure ml_priv is allocated

2020-08-24 Thread Greg Kroah-Hartman
From: Oleksij Rempel commit af804b7826350d5af728dca4715e473338fbd7e5 upstream. This patch adds check to ensure that the struct net_device::ml_priv is allocated, as it is used later by the j1939 stack. The allocation is done by all mainline CAN network drivers, but when using bond or team device

[PATCH 5.4 016/107] bcache: avoid nr_stripes overflow in bcache_device_init()

2020-08-24 Thread Greg Kroah-Hartman
From: Coly Li [ Upstream commit 65f0f017e7be8c70330372df23bcb2a407ecf02d ] For some block devices which large capacity (e.g. 8TB) but small io_opt size (e.g. 8 sectors), in bcache_device_init() the stripes number calcu- lated by, DIV_ROUND_UP_ULL(sectors, d->stripe_size); might be overfl

[PATCH 5.4 000/107] 5.4.61-rc1 review

2020-08-24 Thread Greg Kroah-Hartman
This is the start of the stable review cycle for the 5.4.61 release. There are 107 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 26 Aug 2020 08:23:34 +. Anything rec

[PATCH v1 2/2] scsi: ufs: Handle LINERESET indication in err handler

2020-08-24 Thread Can Guo
PA Layer issues a LINERESET to the PHY at the recovery step in the Power Mode change operation. If it happens during auto or mannual hibern8 enter, even if hibern8 enter succeeds, UFS power mode shall be set to PWM-G1 mode and kept in that mode after exit from hibern8, leading to bad performance. H

Re: (EXT) Re: [PATCH mmc-next v2] mmc: allow setting slot index via device tree alias

2020-08-24 Thread Matthias Schiffer
On Fri, 2020-08-21 at 13:39 +0200, Ulf Hansson wrote: > On Thu, 20 Aug 2020 at 09:59, Matthias Schiffer > wrote: > > > > As with GPIO, UART and others, allow specifying the device index > > via the > > aliases node in the device tree. > > > > On embedded devices, there is often a combination of

[PATCH 5.4 017/107] btrfs: export helpers for subvolume name/id resolution

2020-08-24 Thread Greg Kroah-Hartman
From: Marcos Paulo de Souza [ Upstream commit c0c907a47dccf2cf26251a8fb4a8e7a3bf79ce84 ] The functions will be used outside of export.c and super.c to allow resolving subvolume name from a given id, eg. for subvolume deletion by id ioctl. Signed-off-by: Marcos Paulo de Souza Reviewed-by: David

Re: [PATCH] staging: greybus: fix warnings detected by sparse

2020-08-24 Thread Dan Carpenter
On Mon, Aug 24, 2020 at 10:50:59AM +0800, Coiby Xu wrote: > This patch fix the following warnings from sparse, > > $ make C=2 drivers/staging/greybus/ > drivers/staging/greybus/audio_codec.c:691:36: warning: incorrect type in > initializer (different base types) > drivers/staging/greybus/audio_co

[PATCH 5.7 096/124] scsi: ufs: Introduce UFSHCD_QUIRK_PRDT_BYTE_GRAN quirk

2020-08-24 Thread Greg Kroah-Hartman
From: Alim Akhtar [ Upstream commit 26f968d7de823ba4974a8f25c8bd8ee2df6ab74b ] Some UFS host controllers like Exynos uses granularities of PRDT length and offset as bytes, whereas others use actual segment count. Link: https://lore.kernel.org/r/20200528011658.71590-5-alim.akh...@samsung.com Rev

[PATCH 5.4 005/107] x86/boot: kbuild: allow readelf executable to be specified

2020-08-24 Thread Greg Kroah-Hartman
From: Dmitry Golovin commit eefb8c124fd969e9a174ff2bedff86aa305a7438 upstream. Introduce a new READELF variable to top-level Makefile, so the name of readelf binary can be specified. Before this change the name of the binary was hardcoded to "$(CROSS_COMPILE)readelf" which might not be present

[PATCH 5.7 102/124] kconfig: qconf: fix signal connection to invalid slots

2020-08-24 Thread Greg Kroah-Hartman
From: Masahiro Yamada [ Upstream commit d85de3399f97467baa2026fbbbe587850d01ba8a ] If you right-click in the ConfigList window, you will see the following messages in the console: QObject::connect: No such slot QAction::setOn(bool) in scripts/kconfig/qconf.cc:888 QObject::connect: (sender nam

[PATCH 5.7 103/124] efi: avoid error message when booting under Xen

2020-08-24 Thread Greg Kroah-Hartman
From: Juergen Gross [ Upstream commit 6163a985e50cb19d5bdf73f98e45b8af91a77658 ] efifb_probe() will issue an error message in case the kernel is booted as Xen dom0 from UEFI as EFI_MEMMAP won't be set in this case. Avoid that message by calling efi_mem_desc_lookup() only if EFI_MEMMAP is set. F

[PATCH 5.4 002/107] Documentation/llvm: fix the name of llvm-size

2020-08-24 Thread Greg Kroah-Hartman
From: Fangrui Song commit 0f44fbc162b737ff6251ae248184390ae2279fee upstream. The tool is called llvm-size, not llvm-objsize. Fixes: fcf1b6a35c16 ("Documentation/llvm: add documentation on building w/ Clang/LLVM") Signed-off-by: Fangrui Song Reviewed-by: Nick Desaulniers Reviewed-by: Nathan C

[PATCH 5.7 104/124] Fix build error when CONFIG_ACPI is not set/enabled:

2020-08-24 Thread Greg Kroah-Hartman
From: Randy Dunlap [ Upstream commit ee87e1557c42dc9c2da11c38e11b87c311569853 ] ../arch/x86/pci/xen.c: In function ‘pci_xen_init’: ../arch/x86/pci/xen.c:410:2: error: implicit declaration of function ‘acpi_noirq_set’; did you mean ‘acpi_irq_get’? [-Werror=implicit-function-declaration] acpi_

[PATCH 5.7 105/124] RDMA/bnxt_re: Do not add user qps to flushlist

2020-08-24 Thread Greg Kroah-Hartman
From: Selvin Xavier [ Upstream commit a812f2d60a9fb7818f9c81f967180317b52545c0 ] Driver shall add only the kernel qps to the flush list for clean up. During async error events from the HW, driver is adding qps to this list without checking if the qp is kernel qp or not. Add a check to avoid use

[PATCH 5.7 124/124] xen: dont reschedule in preemption off sections

2020-08-24 Thread Greg Kroah-Hartman
From: Juergen Gross For support of long running hypercalls xen_maybe_preempt_hcall() is calling cond_resched() in case a hypercall marked as preemptible has been interrupted. Normally this is no problem, as only hypercalls done via some ioctl()s are marked to be preemptible. In rare cases when d

[PATCH 5.7 100/124] Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe"

2020-08-24 Thread Greg Kroah-Hartman
From: Quinn Tran [ Upstream commit dca93232b361d260413933903cd4bdbd92ebcc7f ] FCP T10-PI and NVMe features are independent of each other. This patch allows both features to co-exist. This reverts commit 5da05a26b8305a625bc9d537671b981795b46dab. Link: https://lore.kernel.org/r/20200806111014.28

[PATCH 5.7 070/124] can: j1939: fix kernel-infoleak in j1939_sk_sock2sockaddr_can()

2020-08-24 Thread Greg Kroah-Hartman
From: Eric Dumazet [ Upstream commit 38ba8b9241f5848a49b80fddac9ab5f4692e434e ] syzbot found that at least 2 bytes of kernel information were leaked during getsockname() on AF_CAN CAN_J1939 socket. Since struct sockaddr_can has in fact two holes, simply clear the whole area before filling it wi

[PATCH 5.7 071/124] can: j1939: transport: j1939_simple_recv(): ignore local J1939 messages send not by J1939 stack

2020-08-24 Thread Greg Kroah-Hartman
From: Oleksij Rempel [ Upstream commit b43e3a82bc432c1caaed8950e7662c143470c54c ] In current J1939 stack implementation, we process all locally send messages as own messages. Even if it was send by CAN_RAW socket. To reproduce it use following commands: testj1939 -P -r can0:0x80 & cansend can0

[PATCH 5.7 097/124] scsi: ufs: Add quirk to fix abnormal ocs fatal error

2020-08-24 Thread Greg Kroah-Hartman
From: Kiwoong Kim [ Upstream commit d779a6e90e189f4883ce6f900da02995fb000df5 ] Some controller like Exynos determines if FATAL ERROR (0x7) in OCS field in UTRD occurs for values other than GOOD (0x0) in STATUS field in response upiu as well as errors that a host controller can't cover. This pat

[PATCH 5.7 106/124] afs: Fix NULL deref in afs_dynroot_depopulate()

2020-08-24 Thread Greg Kroah-Hartman
From: David Howells [ Upstream commit 5e0b17b026eb7c6de9baa9b0d45a51b05f05abe1 ] If an error occurs during the construction of an afs superblock, it's possible that an error occurs after a superblock is created, but before we've created the root dentry. If the superblock has a dynamic root (ie.

[PATCH 5.7 118/124] EDAC/{i7core,sb,pnd2,skx}: Fix error event severity

2020-08-24 Thread Greg Kroah-Hartman
From: Tony Luck commit 45bc6098a3e279d8e391d22428396687562797e2 upstream. IA32_MCG_STATUS.RIPV indicates whether the return RIP value pushed onto the stack as part of machine check delivery is valid or not. Various drivers copied a code fragment that uses the RIPV bit to determine the severity

[PATCH 5.7 110/124] bonding: fix active-backup failover for current ARP slave

2020-08-24 Thread Greg Kroah-Hartman
From: Jiri Wiesner [ Upstream commit 0410d07190961ac526f05085765a8d04d926545b ] When the ARP monitor is used for link detection, ARP replies are validated for all slaves (arp_validate=3) and fail_over_mac is set to active, two slaves of an active-backup bond may get stuck in a state where both o

[PATCH 5.7 114/124] hv_netvsc: Fix the queue_mapping in netvsc_vf_xmit()

2020-08-24 Thread Greg Kroah-Hartman
From: Haiyang Zhang [ Upstream commit c3d897e01aef8ddc43149e4d661b86f823e3aae7 ] netvsc_vf_xmit() / dev_queue_xmit() will call VF NIC’s ndo_select_queue or netdev_pick_tx() again. They will use skb_get_rx_queue() to get the queue number, so the “skb->queue_mapping - 1” will be used. This may cau

[PATCH 5.7 113/124] net: gemini: Fix missing free_netdev() in error path of gemini_ethernet_port_probe()

2020-08-24 Thread Greg Kroah-Hartman
From: Wang Hai [ Upstream commit cf96d977381d4a23957bade2ddf1c420b74a26b6 ] Replace alloc_etherdev_mq with devm_alloc_etherdev_mqs. In this way, when probe fails, netdev can be freed automatically. Fixes: 4d5ae32f5e1e ("net: ethernet: Add a driver for Gemini gigabit ethernet") Reported-by: Hulk

[PATCH 5.7 115/124] net: dsa: b53: check for timeout

2020-08-24 Thread Greg Kroah-Hartman
From: Tom Rix [ Upstream commit 774d977abfd024e6f73484544b9abe5a5cd62de7 ] clang static analysis reports this problem b53_common.c:1583:13: warning: The left expression of the compound assignment is an uninitialized value. The computed value will also be garbage ent.port &= ~BIT(por

Re: [PATCH v3] usb-serial:cp210x: add support to software flow control

2020-08-24 Thread Johan Hovold
On Mon, Aug 24, 2020 at 11:36:50AM +0200, Jan Kiszka wrote: > On 24.08.20 11:28, Wang, Sheng Long (EXT) (RC-CN DI FA R&D SW) wrote: > > Hi Johan, > > > > Thanks for your reminding. I am adjusting patch according to the latest > > Linux Master branch. > > Use git.kernel.org/pub/scm/linux/kern

[PATCH 5.7 107/124] ARM64: vdso32: Install vdso32 from vdso_install

2020-08-24 Thread Greg Kroah-Hartman
From: Stephen Boyd [ Upstream commit 8d75785a814241587802655cc33e384230744f0c ] Add the 32-bit vdso Makefile to the vdso_install rule so that 'make vdso_install' installs the 32-bit compat vdso when it is compiled. Fixes: a7f71a2c8903 ("arm64: compat: Add vDSO") Signed-off-by: Stephen Boyd Rev

[PATCH 5.7 108/124] powerpc/fixmap: Fix the size of the early debug area

2020-08-24 Thread Greg Kroah-Hartman
From: Christophe Leroy [ Upstream commit fdc6edbb31fba76fd25d7bd016b675a92908d81e ] Commit ("03fd42d458fb powerpc/fixmap: Fix FIX_EARLY_DEBUG_BASE when page size is 256k") reworked the setup of the early debug area and mistakenly replaced 128 * 1024 by SZ_128. Change to SZ_128K to restore the o

[PATCH 5.7 095/124] scsi: ufs: Add quirk to enable host controller without hce

2020-08-24 Thread Greg Kroah-Hartman
From: Alim Akhtar [ Upstream commit 39bf2d83b54e900675cd7b52737ded695bb60bf1 ] Some host controllers don't support host controller enable via HCE. Link: https://lore.kernel.org/r/20200528011658.71590-4-alim.akh...@samsung.com Reviewed-by: Can Guo Reviewed-by: Avri Altman Signed-off-by: Seungw

[PATCH 5.7 094/124] scsi: ufs: Add quirk to disallow reset of interrupt aggregation

2020-08-24 Thread Greg Kroah-Hartman
From: Alim Akhtar [ Upstream commit b638b5eb624bd5d0766683b6181d578f414585e9 ] Some host controllers support interrupt aggregation but don't allow resetting counter and timer in software. Link: https://lore.kernel.org/r/20200528011658.71590-3-alim.akh...@samsung.com Reviewed-by: Avri Altman Si

[PATCH 5.7 069/124] bpf: sock_ops sk access may stomp registers when dst_reg = src_reg

2020-08-24 Thread Greg Kroah-Hartman
From: John Fastabend [ Upstream commit 84f44df664e9f0e261157e16ee1acd77cc1bb78d ] Similar to patch ("bpf: sock_ops ctx access may stomp registers") if the src_reg = dst_reg when reading the sk field of a sock_ops struct we generate xlated code, 53: (61) r9 = *(u32 *)(r9 +28) 54: (15) if r9

[PATCH 5.7 087/124] ASoC: intel: Fix memleak in sst_media_open

2020-08-24 Thread Greg Kroah-Hartman
From: Dinghao Liu [ Upstream commit 062fa09f44f4fb3776a23184d5d296b0c8872eb9 ] When power_up_sst() fails, stream needs to be freed just like when try_module_get() fails. However, current code is returning directly and ends up leaking memory. Fixes: 0121327c1a68b ("ASoC: Intel: mfld-pcm: add con

[PATCH 5.7 072/124] can: j1939: transport: add j1939_session_skb_find_by_offset() function

2020-08-24 Thread Greg Kroah-Hartman
From: Oleksij Rempel [ Upstream commit 840835c9281215341d84966a8855f267a971e6a3 ] Sometimes it makes no sense to search the skb by pkt.dpo, since we need next the skb within the transaction block. This may happen if we have an ETP session with CTS set to less than 255 packets. After this patch,

Re: [PATCH] mtd: spi-nor: intel-spi: Do not try to make the SPI flash chip writable

2020-08-24 Thread Mika Westerberg
On Mon, Aug 24, 2020 at 11:31:40AM +0200, Arnd Bergmann wrote: > On Mon, Aug 24, 2020 at 11:15 AM Mika Westerberg > wrote: > > On Mon, Aug 24, 2020 at 11:08:33AM +0200, Arnd Bergmann wrote: > > > On Mon, Aug 24, 2020 at 10:22 AM Mika Westerberg > > > wrote: > > > > On Sat, Aug 22, 2020 at 06:06:0

[PATCH 5.7 068/124] bpf: sock_ops ctx access may stomp registers in corner case

2020-08-24 Thread Greg Kroah-Hartman
From: John Fastabend [ Upstream commit fd09af010788a884de1c39537c288830c3d305db ] I had a sockmap program that after doing some refactoring started spewing this splat at me: [18610.807284] BUG: unable to handle kernel NULL pointer dereference at 0001 [...] [18610.807359] Call Trace

[PATCH 5.7 091/124] of/address: check for invalid range.cpu_addr

2020-08-24 Thread Greg Kroah-Hartman
From: Colin Ian King [ Upstream commit f49c7faf776f16607c948d852a03b04a88c3b583 ] Currently invalid CPU addresses are not being sanity checked resulting in SATA setup failure on a SynQuacer SC2A11 development machine. The original check was removed by and earlier commit, so add a sanity check ba

[PATCH 5.7 084/124] s390/runtime_instrumentation: fix storage key handling

2020-08-24 Thread Greg Kroah-Hartman
From: Heiko Carstens [ Upstream commit 9eaba29c7985236e16468f4e6a49cc18cf01443e ] The key member of the runtime instrumentation control block contains only the access key, not the complete storage key. Therefore the value must be shifted by four bits. Note: this is only relevant for debugging pu

[PATCH 5.7 116/124] epoll: Keep a reference on files added to the check list

2020-08-24 Thread Greg Kroah-Hartman
From: Marc Zyngier commit a9ed4a6560b8562b7e2e2bed9527e88001f7b682 upstream. When adding a new fd to an epoll, and that this new fd is an epoll fd itself, we recursively scan the fds attached to it to detect cycles, and add non-epool files to a "check list" that gets subsequently parsed. Howeve

BUG: Bad page state in process true pfn:a8fed on arm

2020-08-24 Thread Naresh Kamboju
Kernel BUG noticed on arm architecture on linux next 20200824 tag kernel while running LTP CVE "thp01 -I 120" , LTP mm, LTP hugetlb test cases and libhugetlbfs test suite. metadata: git branch: master git repo: https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git

[PATCH 5.7 090/124] kvm: x86: Toggling CR4.PKE does not load PDPTEs in PAE mode

2020-08-24 Thread Greg Kroah-Hartman
From: Jim Mattson [ Upstream commit cb957adb4ea422bd758568df5b2478ea3bb34f35 ] See the SDM, volume 3, section 4.4.1: If PAE paging would be in use following an execution of MOV to CR0 or MOV to CR4 (see Section 4.1.1) and the instruction is modifying any of CR0.CD, CR0.NW, CR0.PG, CR4.PAE, CR4.

[PATCH 5.7 088/124] vfio/type1: Add proper error unwind for vfio_iommu_replay()

2020-08-24 Thread Greg Kroah-Hartman
From: Alex Williamson [ Upstream commit aae7a75a821a793ed6b8ad502a5890fb8e8f172d ] The vfio_iommu_replay() function does not currently unwind on error, yet it does pin pages, perform IOMMU mapping, and modify the vfio_dma structure to indicate IOMMU mapping. The IOMMU mappings are torn down whe

[PATCH 5.7 089/124] kvm: x86: Toggling CR4.SMAP does not load PDPTEs in PAE mode

2020-08-24 Thread Greg Kroah-Hartman
From: Jim Mattson [ Upstream commit 427890aff8558eb4326e723835e0eae0e6fe3102 ] See the SDM, volume 3, section 4.4.1: If PAE paging would be in use following an execution of MOV to CR0 or MOV to CR4 (see Section 4.1.1) and the instruction is modifying any of CR0.CD, CR0.NW, CR0.PG, CR4.PAE, CR4.

Re: [PATCH v8 1/4] power: supply: core: add quick charge type property

2020-08-24 Thread Qiwu Huang
On Mon, Aug 24, 2020 at 3:43 PM Greg KH wrote: > > On Mon, Aug 24, 2020 at 08:54:56AM +0800, Qiwu Huang wrote: > > On Tue, Aug 18, 2020 at 2:07 PM Greg KH wrote: > > > > > > On Tue, Aug 18, 2020 at 09:56:28AM +0800, Qiwu Huang wrote: > > > > On Fri, Aug 14, 2020 at 2:09 PM Greg KH > > > > wrote

[PATCH 5.7 083/124] ipvlan: fix device features

2020-08-24 Thread Greg Kroah-Hartman
From: Mahesh Bandewar [ Upstream commit d0f5c7076e01fef6fcb86988d9508bf3ce258bd4 ] Processing NETDEV_FEAT_CHANGE causes IPvlan links to lose NETIF_F_LLTX feature because of the incorrect handling of features in ipvlan_fix_features(). --before-- lpaa10:~# ethtool -k ipvl0 | grep tx-lockless tx-l

[PATCH 5.7 085/124] s390/ptrace: fix storage key handling

2020-08-24 Thread Greg Kroah-Hartman
From: Heiko Carstens [ Upstream commit fd78c59446b8d050ecf3e0897c5a486c7de7c595 ] The key member of the runtime instrumentation control block contains only the access key, not the complete storage key. Therefore the value must be shifted by four bits. Since existing user space does not necessari

[PATCH 5.7 066/124] ASoC: q6routing: add dummy register read/write function

2020-08-24 Thread Greg Kroah-Hartman
From: Srinivas Kandagatla [ Upstream commit 796a58fe2b8c9b6668db00d92512ec84be663027 ] Most of the DAPM widgets for DSP ASoC components reuse reg field of the widgets for its internal calculations, however these are not real registers. So read/writes to these numbers are not really valid. Howeve

[PATCH 5.7 079/124] can: j1939: cancel rxtimer on multipacket broadcast session complete

2020-08-24 Thread Greg Kroah-Hartman
From: Zhang Changzhong [ Upstream commit e8b17653088f28a87c81845fa41a2d295a3b458c ] If j1939_xtp_rx_dat_one() receive last frame of multipacket broadcast message, j1939_session_timers_cancel() should be called to cancel rxtimer. Fixes: 9d71dd0c7009 ("can: add support of SAE J1939 protocol") Sig

[PATCH 5.7 038/124] f2fs: fix to check page dirty status before writeback

2020-08-24 Thread Greg Kroah-Hartman
From: Chao Yu [ Upstream commit eb1353cfa9c1e9415b03dc117f8399969fa02102 ] In f2fs_write_raw_pages(), we need to check page dirty status before writeback, because there could be a racer (e.g. reclaimer) helps writebacking the dirty page. Signed-off-by: Chao Yu Signed-off-by: Jaegeuk Kim Signe

[PATCH 5.7 076/124] net: fec: correct the error path for regulator disable in probe

2020-08-24 Thread Greg Kroah-Hartman
From: Fugang Duan [ Upstream commit c6165cf0dbb82ded90163dce3ac183fc7a913dc4 ] Correct the error path for regulator disable. Fixes: 9269e5560b26 ("net: fec: add phy-reset-gpios PROBE_DEFER check") Signed-off-by: Fugang Duan Signed-off-by: David S. Miller Signed-off-by: Sasha Levin --- drive

[PATCH 5.7 074/124] i40e: Set RX_ONLY mode for unicast promiscuous on VLAN

2020-08-24 Thread Greg Kroah-Hartman
From: Przemyslaw Patynowski [ Upstream commit 4bd5e02a2ed1575c2f65bd3c557a077dd399f0e8 ] Trusted VF with unicast promiscuous mode set, could listen to TX traffic of other VFs. Set unicast promiscuous mode to RX traffic, if VSI has port VLAN configured. Rename misleading I40E_AQC_SET_VSI_PROMISC_

[PATCH 5.7 075/124] i40e: Fix crash during removing i40e driver

2020-08-24 Thread Greg Kroah-Hartman
From: Grzegorz Szczurek [ Upstream commit 5b6d4a7f20b09c47ca598760f6dafd554af8b6d5 ] Fix the reason of crashing system by add waiting time to finish reset recovery process before starting remove driver procedure. Now VSI is releasing if VSI is not in reset recovery mode. Without this fix it was

[PATCH 5.7 065/124] ASoC: q6afe-dai: mark all widgets registers as SND_SOC_NOPM

2020-08-24 Thread Greg Kroah-Hartman
From: Srinivas Kandagatla [ Upstream commit 56235e4bc5ae58cb8fcd9314dba4e9ab077ddda8 ] Looks like the q6afe-dai dapm widget registers are set as "0", which is a not correct. As this registers will be read by ASoC core during startup which will throw up errors, Fix this by making the registers a

[PATCH 5.7 037/124] media: budget-core: Improve exception handling in budget_register()

2020-08-24 Thread Greg Kroah-Hartman
From: Chuhong Yuan [ Upstream commit fc0456458df8b3421dba2a5508cd817fbc20ea71 ] budget_register() has no error handling after its failure. Add the missed undo functions for error handling to fix it. Signed-off-by: Chuhong Yuan Signed-off-by: Sean Young Signed-off-by: Mauro Carvalho Chehab Si

[PATCH 5.7 063/124] netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian

2020-08-24 Thread Greg Kroah-Hartman
From: Stephen Suryaputra [ Upstream commit b428336676dbca363262cc134b6218205df4f530 ] On big-endian machine, the returned register data when the exthdr is present is not being compared correctly because little-endian is assumed. The function nft_cmp_fast_mask(), called by nft_cmp_fast_eval() and

[PATCH 5.7 036/124] scsi: target: tcmu: Fix crash in tcmu_flush_dcache_range on ARM

2020-08-24 Thread Greg Kroah-Hartman
From: Bodo Stroesser [ Upstream commit 3145550a7f8b08356c8ff29feaa6c56aca12901d ] This patch fixes the following crash (see https://bugzilla.kernel.org/show_bug.cgi?id=208045) Process iscsi_trx (pid: 7496, stack limit = 0x10dd111a) CPU: 0 PID: 7496 Comm: iscsi_trx Not tainted 4.19.118

[PATCH 5.7 059/124] ext4: fix potential negative array index in do_split()

2020-08-24 Thread Greg Kroah-Hartman
From: Eric Sandeen [ Upstream commit 5872331b3d91820e14716632ebb56b1399b34fe1 ] If for any reason a directory passed to do_split() does not have enough active entries to exceed half the size of the block, we can end up iterating over all "count" entries without finding a split point. In this ca

Re: [PATCH v9 00/11] Genericize DW MIPI DSI bridge and add i.MX 6 driver

2020-08-24 Thread Neil Armstrong
Hi, On 15/08/2020 15:05, Ezequiel Garcia wrote: > Hi Neil, > > On Wed, 2020-07-01 at 09:35 +0300, Adrian Ratiu wrote: >> Hi Neil, >> >> On Mon, 29 Jun 2020, Neil Armstrong >> wrote: >>> Hi Adrian, >>> >>> On 09/06/2020 19:49, Adrian Ratiu wrote: [...] >> > > It's been a month so I think it'

Re: [PATCH 1/4] mm: Trial do_wp_page() simplification

2020-08-24 Thread Kirill Tkhai
On 22.08.2020 02:49, Peter Xu wrote: > From: Linus Torvalds > > How about we just make sure we're the only possible valid user fo the > page before we bother to reuse it? > > Simplify, simplify, simplify. > > And get rid of the nasty serialization on the page lock at the same time. > > Signed-

[PATCH 5.7 057/124] alpha: fix annotation of io{read,write}{16,32}be()

2020-08-24 Thread Greg Kroah-Hartman
From: Luc Van Oostenryck [ Upstream commit bd72866b8da499e60633ff28f8a4f6e09ca78efe ] These accessors must be used to read/write a big-endian bus. The value returned or written is native-endian. However, these accessors are defined using be{16,32}_to_cpu() or cpu_to_be{16,32}() to make the end

[PATCH 5.7 055/124] tools/testing/selftests/cgroup/cgroup_util.c: cg_read_strcmp: fix null pointer dereference

2020-08-24 Thread Greg Kroah-Hartman
From: Gaurav Singh [ Upstream commit d830020656c5b68ced962ed3cb51a90e0a89d4c4 ] Haven't reproduced this issue. This PR is does a minor code cleanup. Signed-off-by: Gaurav Singh Signed-off-by: Andrew Morton Reviewed-by: Andrew Morton Cc: Shuah Khan Cc: Tejun Heo Cc: Michal Koutn Cc: Roman

[PATCH 5.7 044/124] svcrdma: Fix another Receive buffer leak

2020-08-24 Thread Greg Kroah-Hartman
From: Chuck Lever [ Upstream commit 64d26422516b2e347b32e6d9b1d40b3c19a62aae ] During a connection tear down, the Receive queue is flushed before the device resources are freed. Typically, all the Receives flush with IB_WR_FLUSH_ERR. However, any pending successful Receives flush with IB_WR_SUC

[PATCH 5.7 052/124] scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases

2020-08-24 Thread Greg Kroah-Hartman
From: Javed Hasan [ Upstream commit ec007ef40abb6a164d148b0dc19789a7a2de2cc8 ] In fc_disc_gpn_id_resp(), skb is supposed to get freed in all cases except for PTR_ERR. However, in some cases it didn't. This fix is to call fc_frame_free(fp) before function returns. Link: https://lore.kernel.org/

[PATCH 5.7 056/124] xfs: Fix UBSAN null-ptr-deref in xfs_sysfs_init

2020-08-24 Thread Greg Kroah-Hartman
From: Eiichi Tsukata [ Upstream commit 96cf2a2c75567ff56195fe3126d497a2e7e4379f ] If xfs_sysfs_init is called with parent_kobj == NULL, UBSAN shows the following warning: UBSAN: null-ptr-deref in ./fs/xfs/xfs_sysfs.h:37:23 member access within null pointer of type 'struct xfs_kobj' Call T

[PATCH 5.7 046/124] drm/ttm: fix offset in VMAs with a pg_offs in ttm_bo_vm_access

2020-08-24 Thread Greg Kroah-Hartman
From: Felix Kuehling [ Upstream commit c0001213d195d1bac83e0744c06ff06dd5a8ba53 ] VMAs with a pg_offs that's offset from the start of the vma_node need to adjust the offset within the BO accordingly. This matches the offset calculation in ttm_bo_vm_fault_reserved. Signed-off-by: Felix Kuehling

[tip: x86/fsgsbase] x86/entry/64: Correct the comment over SAVE_AND_SET_GSBASE

2020-08-24 Thread tip-bot2 for Borislav Petkov
The following commit has been merged into the x86/fsgsbase branch of tip: Commit-ID: 0b2c605fa4ee3117c00b97b7af67791576b28f88 Gitweb: https://git.kernel.org/tip/0b2c605fa4ee3117c00b97b7af67791576b28f88 Author:Borislav Petkov AuthorDate:Thu, 20 Aug 2020 11:10:15 +02:00 Comm

[PATCH 5.7 008/124] can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer()

2020-08-24 Thread Greg Kroah-Hartman
From: Oleksij Rempel commit cd3b3636c99fcac52c598b64061f3fe4413c6a12 upstream. The current stack implementation do not support ECTS requests of not aligned TP sized blocks. If ECTS will request a block with size and offset spanning two TP blocks, this will cause memcpy() to read beyond the queu

[PATCH 5.7 049/124] ceph: fix use-after-free for fsc->mdsc

2020-08-24 Thread Greg Kroah-Hartman
From: Xiubo Li [ Upstream commit a7caa88f8b72c136f9a401f498471b8a8e35370d ] If the ceph_mdsc_init() fails, it will free the mdsc already. Reported-by: syzbot+b57f46d8d6ea51960...@syzkaller.appspotmail.com Signed-off-by: Xiubo Li Reviewed-by: Jeff Layton Signed-off-by: Ilya Dryomov Signed-off

[PATCH 5.7 030/124] io_uring: cancel all tasks requests on exit

2020-08-24 Thread Greg Kroah-Hartman
From: Pavel Begunkov [ Upstream commit 44e728b8aae0bb6d4229129083974f9dea43f50b ] If a process is going away, io_uring_flush() will cancel only 1 request with a matching pid. Cancel all of them Signed-off-by: Pavel Begunkov Signed-off-by: Jens Axboe Signed-off-by: Sasha Levin --- fs/io-wq.c

[PATCH 5.7 009/124] can: j1939: socket: j1939_sk_bind(): make sure ml_priv is allocated

2020-08-24 Thread Greg Kroah-Hartman
From: Oleksij Rempel commit af804b7826350d5af728dca4715e473338fbd7e5 upstream. This patch adds check to ensure that the struct net_device::ml_priv is allocated, as it is used later by the j1939 stack. The allocation is done by all mainline CAN network drivers, but when using bond or team device

[PATCH 5.7 024/124] drm/amd/display: Fix EDID parsing after resume from suspend

2020-08-24 Thread Greg Kroah-Hartman
From: Stylon Wang commit b24bdc37d03a0478189e20a50286092840f414fa upstream. [Why] Resuming from suspend, CEA blocks from EDID are not parsed and no video modes can support YUV420. When this happens, output bpc cannot go over 8-bit with 4K modes on HDMI. [How] In amdgpu_dm_update_connector_after

<    2   3   4   5   6   7   8   9   10   11   >