Re: [PATCH] mmc: sdhci-pci-gli: Enlarge ASPM L1 entry delay of GL9763E (v2)

2021-01-15 Thread Ulf Hansson
On Fri, 15 Jan 2021 at 06:47, Renius Chen wrote: > > GL9763E enters ASPM L1 state after a very short idle in default, > even during a burst of request. So the R/W performance of GL9763E > is low with some platforms, which support ASPM mechanism, due to > entering ASPM L1 state very frequently in R

Re: [PATCH v2] powerpc: fix alignment bug whithin the init sections

2021-01-15 Thread Michael Ellerman
On Sat, 2 Jan 2021 22:11:56 +0200, Ariel Marcovitch wrote: > This is a bug that causes early crashes in builds with a > .exit.text section smaller than a page and a .init.text section that > ends in the beginning of a physical page (this is kinda random, which > might explain why this wasn't really

Re: [PATCH v3] powerpc/vdso: fix clock_gettime_fallback for vdso32

2021-01-15 Thread Michael Ellerman
On Tue, 12 Jan 2021 11:55:15 + (UTC), Christophe Leroy wrote: > The second argument of __kernel_clock_gettime64 points to a struct > __kernel_timespec, with 64-bit time_t, so use the clock_gettime64 syscall > in the fallback function for the 32-bit vdso. Similarily, > clock_getres_fallback sho

Re: [PATCH v2] powerpc: Handle .text.{hot,unlikely}.* in linker script

2021-01-15 Thread Michael Ellerman
On Mon, 4 Jan 2021 13:59:53 -0700, Nathan Chancellor wrote: > Commit eff8728fe698 ("vmlinux.lds.h: Add PGO and AutoFDO input > sections") added ".text.unlikely.*" and ".text.hot.*" due to an LLVM > change [1]. > > After another LLVM change [2], these sections are seen in some PowerPC > builds, whe

Re: [PATCH v4 1/2] arm64: dts: sdm845: add oneplus6/6t devices

2021-01-15 Thread Konrad Dybcio
Please move gpio-keys before reserved-memory to keep things sorted. > + vreg_l25a_3p3: ldo25 { > + regulator-min-microvolt = <330>; > + regulator-max-microvolt = <3312000>; > + regulator-initial-mode = ; > +

[PATCH v2 net-next 1/4] net: ipa: remove a remoteproc dependency

2021-01-15 Thread Alex Elder
The IPA driver currently requires a DT property to be defined whose value is the phandle for the modem subsystem. This was needed to look up a remoteproc structure pointer used when registering for notifications in the original IPA notification mechanism. Remoteproc provides a more generic SSR no

[PATCH 4.4 11/18] ubifs: wbuf: Dont leak kernel memory to flash

2021-01-15 Thread Greg Kroah-Hartman
From: Richard Weinberger commit 20f1431160c6b590cdc269a846fc5a448abf5b98 upstream Write buffers use a kmalloc()'ed buffer, they can leak up to seven bytes of kernel memory to flash if writes are not aligned. So use ubifs_pad() to fill these gaps with padding bytes. This was never a problem while

[PATCH 4.4 12/18] spi: pxa2xx: Fix use-after-free on unbind

2021-01-15 Thread Greg Kroah-Hartman
From: Lukas Wunner commit 5626308bb94d9f930aa5f7c77327df4c6daa7759 upstream pxa2xx_spi_remove() accesses the driver's private data after calling spi_unregister_controller() even though that function releases the last reference on the spi_controller and thereby frees the private data. Fix by swi

[PATCH 4.4 10/18] vmlinux.lds.h: Add PGO and AutoFDO input sections

2021-01-15 Thread Greg Kroah-Hartman
From: Nick Desaulniers commit eff8728fe69880d3f7983bec3fb6cea4c306261f upstream. Basically, consider .text.{hot|unlikely|unknown}.* part of .text, too. When compiling with profiling information (collected via PGO instrumentations or AutoFDO sampling), Clang will separate code into .text.hot, .t

[PATCH 4.4 01/18] target: add XCOPY target/segment desc sense codes

2021-01-15 Thread Greg Kroah-Hartman
From: David Disseldorp [ Upstream commit e864212078ded276bdb272b2e0ee6a979357ca8a ] As defined in http://www.t10.org/lists/asc-num.htm. To be used during validation of XCOPY target and segment descriptor lists. Signed-off-by: David Disseldorp Reviewed-by: Christoph Hellwig Signed-off-by: Bart

[PATCH 4.4 13/18] cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get()

2021-01-15 Thread Greg Kroah-Hartman
From: Colin Ian King commit 943bdd0cecad06da8392a33093230e30e501eccc upstream. Currently there is an unlikely case where cpufreq_cpu_get() returns a NULL policy and this will cause a NULL pointer dereference later on. Fix this by passing the policy to transition_frequency_fidvid() from the call

[PATCH v2 net-next 3/4] arm64: dts: qcom: sc7180: kill IPA modem-remoteproc property

2021-01-15 Thread Alex Elder
The "modem-remoteproc" property is no longer required for the IPA driver, so get rid of it. Signed-off-by: Alex Elder --- arch/arm64/boot/dts/qcom/sc7180.dtsi | 2 -- 1 file changed, 2 deletions(-) diff --git a/arch/arm64/boot/dts/qcom/sc7180.dtsi b/arch/arm64/boot/dts/qcom/sc7180.dtsi index 2

[PATCH v2 net-next 0/4] net: ipa: remove a build dependency

2021-01-15 Thread Alex Elder
Rob, for some reason I can't find in my mailbox your report that the binding caused a problem. I only discovered it when looking into why the series was not accepted yet. Version 2 includes <.../arm-gic.h> rather than <.../irq.h> in the example section of the binding, to ensure GIC_SPI is defined

[PATCH v2 net-next 4/4] arm64: dts: qcom: sdm845: kill IPA modem-remoteproc property

2021-01-15 Thread Alex Elder
The "modem-remoteproc" property is no longer required for the IPA driver, so get rid of it. Signed-off-by: Alex Elder --- arch/arm64/boot/dts/qcom/sdm845.dtsi | 2 -- 1 file changed, 2 deletions(-) diff --git a/arch/arm64/boot/dts/qcom/sdm845.dtsi b/arch/arm64/boot/dts/qcom/sdm845.dtsi index b

[PATCH v2 net-next 2/4] dt-bindings: net: remove modem-remoteproc property

2021-01-15 Thread Alex Elder
The IPA driver uses the remoteproc SSR notifier now, rather than the temporary IPA notification system used initially. As a result it no longer needs a property identifying the modem subsystem DT node. Use GIC_SPI rather than 0 in the example interrupt definition. Signed-off-by: Alex Elder ---

[PATCH 4.4 03/18] target: simplify XCOPY wwn->se_dev lookup helper

2021-01-15 Thread Greg Kroah-Hartman
From: David Disseldorp [ Upstream commit 94aae4caacda89a1bdb7198b260f4ca3595b7ed7 ] target_xcopy_locate_se_dev_e4() is used to locate an se_dev, based on the WWN provided with the XCOPY request. Remove a couple of unneeded arguments, and rely on the caller for the src/dst test. Signed-off-by: D

[PATCH 4.4 17/18] block: fix use-after-free in disk_part_iter_next

2021-01-15 Thread Greg Kroah-Hartman
From: Ming Lei commit aebf5db917055b38f4945ed6d621d9f07a44ff30 upstream. Make sure that bdgrab() is done on the 'block_device' instance before referring to it for avoiding use-after-free. Cc: Reported-by: syzbot+825f0f9657d4e5280...@syzkaller.appspotmail.com Signed-off-by: Ming Lei Reviewed-b

[PATCH 4.4 05/18] xcopy: loop over devices using idr helper

2021-01-15 Thread Greg Kroah-Hartman
From: Mike Christie [ Upstream commit 6906d008b4b06e42cad393ac25bec76fbf31fabd ] This converts the xcopy code to use the idr helper. The next patch will drop the g_device_list and make g_device_mutex local to the target_core_device.c file. Signed-off-by: Mike Christie Reviewed-by: Bart Van Ass

[PATCH 4.4 07/18] powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at

2021-01-15 Thread Greg Kroah-Hartman
From: Mathieu Desnoyers [ Upstream commit d85be8a49e733dcd23674aa6202870d54bf5600d ] The placeholder for instruction selection should use the second argument's operand, which is %1, not %0. This could generate incorrect assembly code if the memory addressing of operand %0 is a different form fro

[PATCH 4.9 19/25] block: rsxx: select CONFIG_CRC32

2021-01-15 Thread Greg Kroah-Hartman
From: Arnd Bergmann commit 36a106a4c1c100d55ba3d32a21ef748cfcd4fa99 upstream. Without crc32, the driver fails to link: arm-linux-gnueabi-ld: drivers/block/rsxx/config.o: in function `rsxx_load_config': config.c:(.text+0x124): undefined reference to `crc32_le' Fixes: 8722ff8cdbfa ("block: IBM

[PATCH 4.9 02/25] target: simplify XCOPY wwn->se_dev lookup helper

2021-01-15 Thread Greg Kroah-Hartman
From: David Disseldorp [ Upstream commit 94aae4caacda89a1bdb7198b260f4ca3595b7ed7 ] target_xcopy_locate_se_dev_e4() is used to locate an se_dev, based on the WWN provided with the XCOPY request. Remove a couple of unneeded arguments, and rely on the caller for the src/dst test. Signed-off-by: D

[PATCH 4.9 22/25] wan: ds26522: select CONFIG_BITREVERSE

2021-01-15 Thread Greg Kroah-Hartman
From: Arnd Bergmann commit 69931e11288520c250152180ecf9b6ac5e6e40ed upstream. Without this, the driver runs into a link failure arm-linux-gnueabi-ld: drivers/net/wan/slic_ds26522.o: in function `slic_ds26522_probe': slic_ds26522.c:(.text+0x100c): undefined reference to `byte_rev_table' arm-lin

[PATCH 4.9 04/25] xcopy: loop over devices using idr helper

2021-01-15 Thread Greg Kroah-Hartman
From: Mike Christie [ Upstream commit 6906d008b4b06e42cad393ac25bec76fbf31fabd ] This converts the xcopy code to use the idr helper. The next patch will drop the g_device_list and make g_device_mutex local to the target_core_device.c file. Signed-off-by: Mike Christie Reviewed-by: Bart Van Ass

[PATCH 4.9 07/25] powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at

2021-01-15 Thread Greg Kroah-Hartman
From: Mathieu Desnoyers [ Upstream commit d85be8a49e733dcd23674aa6202870d54bf5600d ] The placeholder for instruction selection should use the second argument's operand, which is %1, not %0. This could generate incorrect assembly code if the memory addressing of operand %0 is a different form fro

[PATCH 4.4 00/18] 4.4.252-rc1 review

2021-01-15 Thread Greg Kroah-Hartman
This is the start of the stable review cycle for the 4.4.252 release. There are 18 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 17 Jan 2021 12:19:42 +. Anything rec

[PATCH 4.9 20/25] iommu/intel: Fix memleak in intel_irq_remapping_alloc

2021-01-15 Thread Greg Kroah-Hartman
From: Dinghao Liu commit ff2b46d7cff80d27d82f7f3252711f4ca1666129 upstream. When irq_domain_get_irq_data() or irqd_cfg() fails at i == 0, data allocated by kzalloc() has not been freed before returning, which leads to memleak. Fixes: b106ee63abcc ("irq_remapping/vt-d: Enhance Intel IR driver to

[PATCH 4.14 15/28] i2c: sprd: use a specific timeout to avoid system hang up issue

2021-01-15 Thread Greg Kroah-Hartman
From: Chunyan Zhang commit 0b884fe71f9ee6a5df35e677154256ea2099ebb8 upstream. If the i2c device SCL bus being pulled up due to some exception before message transfer done, the system cannot receive the completing interrupt signal any more, it would not exit waiting loop until MAX_SCHEDULE_TIMEOU

[PATCH 4.14 23/28] net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups

2021-01-15 Thread Greg Kroah-Hartman
From: Dinghao Liu commit 5b0bb12c58ac7d22e05b5bfdaa30a116c8c32e32 upstream. When mlx5_create_flow_group() fails, ft->g should be freed just like when kvzalloc() fails. The caller of mlx5e_create_l2_table_groups() does not catch this issue on failure, which leads to memleak. Fixes: 33cfaaa8f36f

[PATCH 4.14 18/28] dmaengine: xilinx_dma: check dma_async_device_register return value

2021-01-15 Thread Greg Kroah-Hartman
From: Shravya Kumbham commit 99974aedbd73523969afb09f33c6e3047cd0ddae upstream. dma_async_device_register() can return non-zero error code. Add condition to check the return value of dma_async_device_register function and handle the error path. Addresses-Coverity: Event check_return. Fixes: 9cd

[PATCH 4.14 09/28] drm/i915: Fix mismatch between misplaced vma check and vma insert

2021-01-15 Thread Greg Kroah-Hartman
From: Chris Wilson commit 0e53656ad8abc99e0a80c3de611e593ebbf55829 upstream When inserting a VMA, we restrict the placement to the low 4G unless the caller opts into using the full range. This was done to allow usersapce the opportunity to transition slowly from a 32b address space, and to avoid

[PATCH 4.14 28/28] net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet

2021-01-15 Thread Greg Kroah-Hartman
From: Vasily Averin commit 54970a2fbb673f090b7f02d7f57b10b2e0707155 upstream. syzbot reproduces BUG_ON in skb_checksum_help(): tun creates (bogus) skb with huge partial-checksummed area and small ip packet inside. Then ip_rcv trims the skb based on size of internal ip packet, after that csum off

[PATCH 4.14 27/28] block: fix use-after-free in disk_part_iter_next

2021-01-15 Thread Greg Kroah-Hartman
From: Ming Lei commit aebf5db917055b38f4945ed6d621d9f07a44ff30 upstream. Make sure that bdgrab() is done on the 'block_device' instance before referring to it for avoiding use-after-free. Cc: Reported-by: syzbot+825f0f9657d4e5280...@syzkaller.appspotmail.com Signed-off-by: Ming Lei Reviewed-b

[PATCH 4.19 01/43] net: cdc_ncm: correct overhead in delayed_ndp_size

2021-01-15 Thread Greg Kroah-Hartman
From: "Jouni K. Sepp�nen" [ Upstream commit 7a68d725e4ea384977445e0bcaed3d7de83ab5b3 ] Aligning to tx_ndp_modulus is not sufficient because the next align call can be cdc_ncm_align_tail, which can add up to ctx->tx_modulus + ctx->tx_remainder - 1 bytes. This used to lead to occasional crashes on

[PATCH 4.19 12/43] chtls: Fix panic when route to peer not configured

2021-01-15 Thread Greg Kroah-Hartman
From: Ayush Sawal [ Upstream commit 5a5fac9966bb6d513198634b0b1357be7e8447d2 ] If route to peer is not configured, we might get non tls devices from dst_neigh_lookup() which is invalid, adding a check to avoid it. Fixes: cc35c88ae4db ("crypto : chtls - CPL handler definition") Signed-off-by: Ro

[PATCH 4.19 14/43] chtls: Added a check to avoid NULL pointer dereference

2021-01-15 Thread Greg Kroah-Hartman
From: Ayush Sawal [ Upstream commit eade1e0a4fb31d48eeb1589d9bb859ae4dd6181d ] In case of server removal lookup_stid() may return NULL pointer, which is used as listen_ctx. So added a check before accessing this pointer. Fixes: cc35c88ae4db ("crypto : chtls - CPL handler definition") Signed-off

[PATCH 4.14 25/28] wan: ds26522: select CONFIG_BITREVERSE

2021-01-15 Thread Greg Kroah-Hartman
From: Arnd Bergmann commit 69931e11288520c250152180ecf9b6ac5e6e40ed upstream. Without this, the driver runs into a link failure arm-linux-gnueabi-ld: drivers/net/wan/slic_ds26522.o: in function `slic_ds26522_probe': slic_ds26522.c:(.text+0x100c): undefined reference to `byte_rev_table' arm-lin

[PATCH 4.19 16/43] x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR

2021-01-15 Thread Greg Kroah-Hartman
From: Fenghua Yu commit ae28d1aae48a1258bd09a6f707ebb4231d79a761 upstream Currently, when moving a task to a resource group the PQR_ASSOC MSR is updated with the new closid and rmid in an added task callback. If the task is running, the work is run as soon as possible. If the task is not running

[PATCH 4.19 26/43] cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get()

2021-01-15 Thread Greg Kroah-Hartman
From: Colin Ian King commit 943bdd0cecad06da8392a33093230e30e501eccc upstream. Currently there is an unlikely case where cpufreq_cpu_get() returns a NULL policy and this will cause a NULL pointer dereference later on. Fix this by passing the policy to transition_frequency_fidvid() from the call

[PATCH 4.19 03/43] net: stmmac: dwmac-sun8i: Balance internal PHY resource references

2021-01-15 Thread Greg Kroah-Hartman
From: Samuel Holland [ Upstream commit 529254216773acd5039c07aa18cf06fd1f9fccdd ] While stmmac_pltfr_remove calls sun8i_dwmac_exit, the sun8i_dwmac_init and sun8i_dwmac_exit functions are also called by the stmmac_platform suspend/resume callbacks. They may be called many times during the device

[PATCH 4.19 07/43] net: ip: always refragment ip defragmented packets

2021-01-15 Thread Greg Kroah-Hartman
From: Florian Westphal [ Upstream commit bb4cc1a18856a73f0ff5137df0c2a31f4c50f6cf ] Conntrack reassembly records the largest fragment size seen in IPCB. However, when this gets forwarded/transmitted, fragmentation will only be forced if one of the fragmented packets had the DF bit set. In that

[PATCH 4.19 29/43] dmaengine: xilinx_dma: check dma_async_device_register return value

2021-01-15 Thread Greg Kroah-Hartman
From: Shravya Kumbham commit 99974aedbd73523969afb09f33c6e3047cd0ddae upstream. dma_async_device_register() can return non-zero error code. Add condition to check the return value of dma_async_device_register function and handle the error path. Addresses-Coverity: Event check_return. Fixes: 9cd

[PATCH 4.19 32/43] wil6210: select CONFIG_CRC32

2021-01-15 Thread Greg Kroah-Hartman
From: Arnd Bergmann commit e186620d7bf11b274b985b839c38266d7918cc05 upstream. Without crc32, the driver fails to link: arm-linux-gnueabi-ld: drivers/net/wireless/ath/wil6210/fw.o: in function `wil_fw_verify': fw.c:(.text+0x74c): undefined reference to `crc32_le' arm-linux-gnueabi-ld: drivers/n

[PATCH 4.19 40/43] KVM: arm64: Dont access PMCR_EL0 when no PMU is available

2021-01-15 Thread Greg Kroah-Hartman
From: Marc Zyngier commit 2a5f1b67ec577fb1544b563086e0377f095f88e2 upstream. We reset the guest's view of PMCR_EL0 unconditionally, based on the host's view of this register. It is however legal for an implementation not to provide any PMU, resulting in an UNDEF. The obvious fix is to skip the

[PATCH 5.4 10/62] net: ipv6: fib: flush exceptions when purging route

2021-01-15 Thread Greg Kroah-Hartman
From: Sean Tranchetti [ Upstream commit d8f5c29653c3f6995e8979be5623d263e92f6b86 ] Route removal is handled by two code paths. The main removal path is via fib6_del_route() which will handle purging any PMTU exceptions from the cache, removing all per-cpu copies of the DST entry used by the rout

[PATCH 4.19 41/43] block: fix use-after-free in disk_part_iter_next

2021-01-15 Thread Greg Kroah-Hartman
From: Ming Lei commit aebf5db917055b38f4945ed6d621d9f07a44ff30 upstream. Make sure that bdgrab() is done on the 'block_device' instance before referring to it for avoiding use-after-free. Cc: Reported-by: syzbot+825f0f9657d4e5280...@syzkaller.appspotmail.com Signed-off-by: Ming Lei Reviewed-b

[PATCH 4.19 27/43] spi: stm32: FIFO threshold level - fix align packet size

2021-01-15 Thread Greg Kroah-Hartman
From: Roman Guskov commit a590370d918fc66c62df6620445791fbe840344a upstream. if cur_bpw <= 8 and xfer_len < 4 then the value of fthlv will be 1 and SPI registers content may have been lost. * If SPI data register is accessed as a 16-bit register and DSIZE <= 8bit, better to select FTHLV = 2,

[PATCH 4.19 28/43] dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the error handling path of the probe function

2021-01-15 Thread Greg Kroah-Hartman
From: Christophe JAILLET commit 33cbd54dc515cc04b5a603603414222b4bb1448d upstream. 'mtk_hsdma_hw_deinit()' should be called in the error handling path of the probe function to undo a previous 'mtk_hsdma_hw_init()' call, as already done in the remove function. Fixes: 548c4597e984 ("dmaengine: me

[PATCH 4.19 31/43] dmaengine: xilinx_dma: fix mixed_enum_type coverity warning

2021-01-15 Thread Greg Kroah-Hartman
From: Shravya Kumbham commit 2d5efea64472469117dc1a9a39530069e95b21e9 upstream. Typecast the fls(width -1) with (enum dmaengine_alignment) in xilinx_dma_chan_probe function to fix the coverity warning. Addresses-Coverity: Event mixed_enum_type. Fixes: 9cd4360de609 ("dma: Add Xilinx AXI Video Di

[PATCH 5.4 09/62] net/sonic: Fix some resource leaks in error handling paths

2021-01-15 Thread Greg Kroah-Hartman
From: Christophe JAILLET [ Upstream commit 0f7ba7bc46fa0b574ccacf5672991b321e028492 ] A call to dma_alloc_coherent() is wrapped by sonic_alloc_descriptors(). This is correctly freed in the remove function, but not in the error handling path of the probe function. Fix this by adding the missing

[PATCH 5.4 00/62] 5.4.90-rc1 review

2021-01-15 Thread Greg Kroah-Hartman
This is the start of the stable review cycle for the 5.4.90 release. There are 62 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 17 Jan 2021 12:19:42 +. Anything rece

[PATCH 5.4 01/62] x86/asm/32: Add ENDs to some functions and relabel with SYM_CODE_*

2021-01-15 Thread Greg Kroah-Hartman
From: Jiri Slaby commit 78762b0e79bc1dd01347be061abdf505202152c9 upstream. All these are functions which are invoked from elsewhere but they are not typical C functions. So annotate them using the new SYM_CODE_START. All these were not balanced with any END, so mark their ends by SYM_CODE_END, a

[PATCH 5.4 04/62] net: hns3: fix the number of queues actually used by ARQ

2021-01-15 Thread Greg Kroah-Hartman
From: Yufeng Mo [ Upstream commit 65e61e3c2a619c4d4b873885b2d5394025ed117b ] HCLGE_MBX_MAX_ARQ_MSG_NUM is used to apply memory for the number of queues used by ARQ(Asynchronous Receive Queue), so the head and tail pointers should also use this macro. Fixes: 07a0556a3a73 ("net: hns3: Changes to

[PATCH 5.4 03/62] net: cdc_ncm: correct overhead in delayed_ndp_size

2021-01-15 Thread Greg Kroah-Hartman
From: "Jouni K. Sepp�nen" [ Upstream commit 7a68d725e4ea384977445e0bcaed3d7de83ab5b3 ] Aligning to tx_ndp_modulus is not sufficient because the next align call can be cdc_ncm_align_tail, which can add up to ctx->tx_modulus + ctx->tx_remainder - 1 bytes. This used to lead to occasional crashes on

[PATCH 5.4 25/62] chtls: Added a check to avoid NULL pointer dereference

2021-01-15 Thread Greg Kroah-Hartman
From: Ayush Sawal [ Upstream commit eade1e0a4fb31d48eeb1589d9bb859ae4dd6181d ] In case of server removal lookup_stid() may return NULL pointer, which is used as listen_ctx. So added a check before accessing this pointer. Fixes: cc35c88ae4db ("crypto : chtls - CPL handler definition") Signed-off

[PATCH 5.4 26/62] chtls: Fix chtls resources release sequence

2021-01-15 Thread Greg Kroah-Hartman
From: Ayush Sawal [ Upstream commit 15ef6b0e30b354253e2c10b3836bc59767eb162b ] CPL_ABORT_RPL is sent after releasing the resources by calling chtls_release_resources(sk); and chtls_conn_done(sk); eventually causing kernel panic. Fixing it by calling release in appropriate order. Fixes: cc35c88a

Re: Live patching on ARM64

2021-01-15 Thread Mark Rutland
On Thu, Jan 14, 2021 at 04:07:55PM -0600, Madhavan T. Venkataraman wrote: > Hi all, > > My name is Madhavan Venkataraman. Hi Madhavan, > Microsoft is very interested in Live Patching support for ARM64. > On behalf of Microsoft, I would like to contribute. > > I would like to get in touch with t

[PATCH 5.4 21/62] chtls: Fix hardware tid leak

2021-01-15 Thread Greg Kroah-Hartman
From: Ayush Sawal [ Upstream commit 717df0f4cdc9044c415431a3522b3e9ccca5b4a3 ] send_abort_rpl() is not calculating cpl_abort_req_rss offset and ends up sending wrong TID with abort_rpl WR causng tid leaks. Replaced send_abort_rpl() with chtls_send_abort_rpl() as it is redundant. Fixes: cc35c88a

[PATCH 5.4 22/62] chtls: Remove invalid set_tcb call

2021-01-15 Thread Greg Kroah-Hartman
From: Ayush Sawal [ Upstream commit 827d329105bfde6701f0077e34a09c4a86e27145 ] At the time of SYN_RECV, connection information is not initialized at FW, updating tcb flag over uninitialized connection causes adapter crash. We don't need to update the flag during SYN_RECV state, so avoid this. F

[PATCH 5.4 29/62] exfat: Month timestamp metadata accidentally incremented

2021-01-15 Thread Greg Kroah-Hartman
From: "Valdis Klētnieks" The staging/exfat driver has departed, but a lot of distros are still tracking 5.4-stable, so we should fix this. There was an 0/1 offset error in month handling for file metadata, causing the month to get incremented on each reference to the file. Thanks to Sebastian G

[PATCH 5.4 40/62] spi: spi-geni-qcom: Fix geni_spi_isr() NULL dereference in timeout case

2021-01-15 Thread Greg Kroah-Hartman
From: Douglas Anderson commit 4aa1464acbe3697710279a4bd65cb4801ed30425 upstream. In commit 7ba9bdcb91f6 ("spi: spi-geni-qcom: Don't keep a local state variable") we changed handle_fifo_timeout() so that we set "mas->cur_xfer" to NULL to make absolutely sure that we don't mess with the buffers fr

[PATCH 5.4 33/62] ARM: OMAP2+: omap_device: fix idling of devices during probe

2021-01-15 Thread Greg Kroah-Hartman
From: Andreas Kemnade commit ec76c2eea903947202098090bbe07a739b5246e9 upstream. On the GTA04A5 od->_driver_status was not set to BUS_NOTIFY_BIND_DRIVER during probe of the second mmc used for wifi. Therefore omap_device_late_idle idled the device during probing causing oopses when accessing the

[PATCH 5.4 43/62] dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the error handling path of the probe function

2021-01-15 Thread Greg Kroah-Hartman
From: Christophe JAILLET commit 33cbd54dc515cc04b5a603603414222b4bb1448d upstream. 'mtk_hsdma_hw_deinit()' should be called in the error handling path of the probe function to undo a previous 'mtk_hsdma_hw_init()' call, as already done in the remove function. Fixes: 548c4597e984 ("dmaengine: me

[PATCH 5.4 16/62] nexthop: Unlink nexthop group entry in error path

2021-01-15 Thread Greg Kroah-Hartman
From: Ido Schimmel [ Upstream commit 7b01e53eee6dce7a8a6736e06b99b68cd0cc7a27 ] In case of error, remove the nexthop group entry from the list to which it was previously added. Fixes: 430a049190de ("nexthop: Add support for nexthop groups") Signed-off-by: Ido Schimmel Reviewed-by: Petr Machata

[PATCH 5.4 61/62] net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet

2021-01-15 Thread Greg Kroah-Hartman
From: Vasily Averin commit 54970a2fbb673f090b7f02d7f57b10b2e0707155 upstream. syzbot reproduces BUG_ON in skb_checksum_help(): tun creates (bogus) skb with huge partial-checksummed area and small ip packet inside. Then ip_rcv trims the skb based on size of internal ip packet, after that csum off

[PATCH 5.4 19/62] net/mlx5: Use port_num 1 instead of 0 when delete a RoCE address

2021-01-15 Thread Greg Kroah-Hartman
From: Mark Zhang [ Upstream commit 0f2dcade69f2af56b74bce432e48ff3957830ce2 ] In multi-port mode, FW reports syndrome 0x2ea48 (invalid vhca_port_number) if the port_num is not 1 or 2. Fixes: 80f09dfc237f ("net/mlx5: Eswitch, enable RoCE loopback traffic") Signed-off-by: Mark Zhang Reviewed-by:

[PATCH 5.4 11/62] tools: selftests: add test for changing routes with PTMU exceptions

2021-01-15 Thread Greg Kroah-Hartman
From: Sean Tranchetti [ Upstream commit 5316a7c0130acf09bfc8bb0092407006010f ] Adds new 2 new tests to the PTMU script: pmtu_ipv4/6_route_change. These tests explicitly test for a recently discovered problem in the IPv6 routing framework where PMTU exceptions were not properly released when

[PATCH 5.4 55/62] regmap: debugfs: Fix a memory leak when calling regmap_attach_dev

2021-01-15 Thread Greg Kroah-Hartman
From: Xiaolei Wang commit cffa4b2122f5f3e53cf3d529bbc74651f95856d5 upstream. After initializing the regmap through syscon_regmap_lookup_by_compatible, then regmap_attach_dev to the device, because the debugfs_name has been allocated, there is no need to redistribute it again unreferenced object

[PATCH 5.4 59/62] KVM: arm64: Dont access PMCR_EL0 when no PMU is available

2021-01-15 Thread Greg Kroah-Hartman
From: Marc Zyngier commit 2a5f1b67ec577fb1544b563086e0377f095f88e2 upstream. We reset the guest's view of PMCR_EL0 unconditionally, based on the host's view of this register. It is however legal for an implementation not to provide any PMU, resulting in an UNDEF. The obvious fix is to skip the

[PATCH 5.4 52/62] bpftool: Fix compilation failure for net.o with older glibc

2021-01-15 Thread Greg Kroah-Hartman
From: Alan Maguire commit 6f02b540d7597f357bc6ee711346761045d4e108 upstream. For older glibc ~2.17, #include'ing both linux/if.h and net/if.h fails due to complaints about redefinition of interface flags: CC net.o In file included from net.c:13:0: /usr/include/linux/if.h:71:2: error: re

[PATCH 5.10 018/103] net: stmmac: dwmac-sun8i: Balance internal PHY resource references

2021-01-15 Thread Greg Kroah-Hartman
From: Samuel Holland [ Upstream commit 529254216773acd5039c07aa18cf06fd1f9fccdd ] While stmmac_pltfr_remove calls sun8i_dwmac_exit, the sun8i_dwmac_init and sun8i_dwmac_exit functions are also called by the stmmac_platform suspend/resume callbacks. They may be called many times during the device

[PATCH 5.4 44/62] dmaengine: xilinx_dma: check dma_async_device_register return value

2021-01-15 Thread Greg Kroah-Hartman
From: Shravya Kumbham commit 99974aedbd73523969afb09f33c6e3047cd0ddae upstream. dma_async_device_register() can return non-zero error code. Add condition to check the return value of dma_async_device_register function and handle the error path. Addresses-Coverity: Event check_return. Fixes: 9cd

[PATCH 5.10 012/103] btrfs: shrink delalloc pages instead of full inodes

2021-01-15 Thread Greg Kroah-Hartman
From: Josef Bacik [ Upstream commit e076ab2a2ca70a0270232067cd49f76cd92efe64 ] Commit 38d715f494f2 ("btrfs: use btrfs_start_delalloc_roots in shrink_delalloc") cleaned up how we do delalloc shrinking by utilizing some infrastructure we have in place to flush inodes that we use for device replace

[PATCH 5.10 025/103] net: ipv6: fib: flush exceptions when purging route

2021-01-15 Thread Greg Kroah-Hartman
From: Sean Tranchetti [ Upstream commit d8f5c29653c3f6995e8979be5623d263e92f6b86 ] Route removal is handled by two code paths. The main removal path is via fib6_del_route() which will handle purging any PMTU exceptions from the cache, removing all per-cpu copies of the DST entry used by the rout

[PATCH 5.10 027/103] net: fix pmtu check in nopmtudisc mode

2021-01-15 Thread Greg Kroah-Hartman
From: Florian Westphal [ Upstream commit 50c661670f6a3908c273503dfa206dfc7aa54c07 ] For some reason ip_tunnel insist on setting the DF bit anyway when the inner header has the DF bit set, EVEN if the tunnel was configured with 'nopmtudisc'. This means that the script added in the previous commi

[PATCH 5.10 028/103] net: ip: always refragment ip defragmented packets

2021-01-15 Thread Greg Kroah-Hartman
From: Florian Westphal [ Upstream commit bb4cc1a18856a73f0ff5137df0c2a31f4c50f6cf ] Conntrack reassembly records the largest fragment size seen in IPCB. However, when this gets forwarded/transmitted, fragmentation will only be forced if one of the fragmented packets had the DF bit set. In that

[PATCH 5.10 020/103] net: stmmac: dwmac-sun8i: Balance syscon (de)initialization

2021-01-15 Thread Greg Kroah-Hartman
From: Samuel Holland [ Upstream commit 9b1e39cf5dd81f33186cdb950fcf75a121f1a9a7 ] Previously, sun8i_dwmac_set_syscon was called from a chain of functions in several different files: sun8i_dwmac_probe stmmac_dvr_probe stmmac_hw_init stmmac_hwif_init sun8i_d

[PATCH 5.10 004/103] io_uring: patch up IOPOLL overflow_flush sync

2021-01-15 Thread Greg Kroah-Hartman
From: Pavel Begunkov commit 6c503150ae33ee19036255cfda0998463613352c upstream IOPOLL skips completion locking but keeps it under uring_lock, thus io_cqring_overflow_flush() and so io_cqring_events() need additional locking with uring_lock in some cases for IOPOLL. Remove __io_cqring_overflow_fl

[PATCH 5.10 024/103] ptp: ptp_ines: prevent build when HAS_IOMEM is not set

2021-01-15 Thread Greg Kroah-Hartman
From: Randy Dunlap [ Upstream commit 1f685e6adbbe3c7b1bd9053be771b898d9efa655 ] ptp_ines.c uses devm_platform_ioremap_resource(), which is only built/available when CONFIG_HAS_IOMEM is enabled. CONFIG_HAS_IOMEM is not enabled for arch/s390/, so builds on S390 have a build error: s390-linux-ld:

[PATCH 5.10 042/103] s390/qeth: fix L2 header access in qeth_l3_osa_features_check()

2021-01-15 Thread Greg Kroah-Hartman
From: Julian Wiedmann [ Upstream commit f9c4845385c8f6631ebd5dddfb019ea7a285fba4 ] ip_finish_output_gso() may call .ndo_features_check() even before the skb has a L2 header. This conflicts with qeth_get_ip_version()'s attempt to inspect the L2 header via vlan_eth_hdr(). Switch to vlan_get_proto

[PATCH 5.10 006/103] iommu/arm-smmu-qcom: Initialize SCTLR of the bypass context

2021-01-15 Thread Greg Kroah-Hartman
From: Bjorn Andersson [ Upstream commit aded8c7c2b72f846a07a2c736b8e75bb8cf50a87 ] On SM8150 it's occasionally observed that the boot hangs in between the writing of SMEs and context banks in arm_smmu_device_reset(). The problem seems to coincide with a display refresh happening after updating

[PATCH 5.10 007/103] drm/panfrost: Dont corrupt the queue mutex on open/close

2021-01-15 Thread Greg Kroah-Hartman
From: Steven Price [ Upstream commit a17d609e3e216c406f7c0cec2a94086a4401ac06 ] The mutex within the panfrost_queue_state should have the lifetime of the queue, however it was erroneously initialised/destroyed during panfrost_job_{open,close} which is called every time a client opens/closes the

Re: [PATCH v2 2/9] KVM: arm64: Add a buffer that can pass UBSan data from hyp/nVHE to kernel

2021-01-15 Thread kernel test robot
Hi Elena, Thank you for the patch! Yet something to improve: [auto build test ERROR on arm64/for-next/core] [cannot apply to kvmarm/next soc/for-next arm/for-next xlnx/master v5.11-rc3 next-20210115] [If your patch is applied to the wrong git tree, kindly drop us a note. And when submitting

[PATCH 5.10 041/103] s390/qeth: fix locking for discipline setup / removal

2021-01-15 Thread Greg Kroah-Hartman
From: Julian Wiedmann [ Upstream commit b41b554c1ee75070a14c02a88496b1f231c7eacc ] Due to insufficient locking, qeth_core_set_online() and qeth_dev_layer2_store() can run in parallel, both attempting to load & setup the discipline (and stepping on each other toes along the way). A similar race c

[PATCH 5.10 054/103] dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk()

2021-01-15 Thread Greg Kroah-Hartman
From: Dan Carpenter commit 595a334148449bd1d27cf5d6fcb3b0d718cb1b9f upstream. If the dw_edma_alloc_burst() function fails then we free "chunk" but it's still on the "desc->chunk->list" list so it will lead to a use after free. Also the "->chunks_alloc" count is incremented when it shouldn't be.

[PATCH 5.10 048/103] scsi: lpfc: Fix variable vport set but not used in lpfc_sli4_abts_err_handler()

2021-01-15 Thread Greg Kroah-Hartman
From: James Smart commit 6998ff4e21619d47ebf4f5eb4cafa65c65856221 upstream. Remove vport variable that is assigned but not used in lpfc_sli4_abts_err_handler(). Link: https://lore.kernel.org/r/20201119203407.121913-1-james.sm...@broadcom.com Fixes: e7dab164a9aa ("scsi: lpfc: Fix scheduling call

[PATCH 5.10 049/103] ionic: start queues before announcing link up

2021-01-15 Thread Greg Kroah-Hartman
From: Shannon Nelson commit 8f56bc4dc1011be6e2a53198b615fdc588b4ef6a upstream. Change the order of operations in the link_up handling to be sure that the queues are up and ready before we announce that the link is up. Signed-off-by: Shannon Nelson Reviewed-by: Saeed Mahameed Signed-off-by: Ja

[PATCH 5.10 061/103] spi: spi-geni-qcom: Fix geni_spi_isr() NULL dereference in timeout case

2021-01-15 Thread Greg Kroah-Hartman
From: Douglas Anderson commit 4aa1464acbe3697710279a4bd65cb4801ed30425 upstream. In commit 7ba9bdcb91f6 ("spi: spi-geni-qcom: Don't keep a local state variable") we changed handle_fifo_timeout() so that we set "mas->cur_xfer" to NULL to make absolutely sure that we don't mess with the buffers fr

[PATCH 5.10 052/103] ARM: OMAP2+: omap_device: fix idling of devices during probe

2021-01-15 Thread Greg Kroah-Hartman
From: Andreas Kemnade commit ec76c2eea903947202098090bbe07a739b5246e9 upstream. On the GTA04A5 od->_driver_status was not set to BUS_NOTIFY_BIND_DRIVER during probe of the second mmc used for wifi. Therefore omap_device_late_idle idled the device during probing causing oopses when accessing the

[PATCH 5.10 073/103] arm64: mm: Fix ARCH_LOW_ADDRESS_LIMIT when !CONFIG_ZONE_DMA

2021-01-15 Thread Greg Kroah-Hartman
From: Nicolas Saenz Julienne commit 095507dc1350b3a2b8b39fdc05edba0c10859eca upstream. Systems configured with CONFIG_ZONE_DMA32, CONFIG_ZONE_NORMAL and !CONFIG_ZONE_DMA will fail to properly setup ARCH_LOW_ADDRESS_LIMIT. The limit will default to ~0ULL, effectively spanning the whole memory, wh

[PATCH 5.10 075/103] phy: dp83640: select CONFIG_CRC32

2021-01-15 Thread Greg Kroah-Hartman
From: Arnd Bergmann commit f9d6f94132f01d2a552dcbab54fa56496638186d upstream. Without crc32, this driver fails to link: arm-linux-gnueabi-ld: drivers/net/phy/dp83640.o: in function `match': dp83640.c:(.text+0x476c): undefined reference to `crc32_le' Fixes: 539e44d26855 ("dp83640: Include hash

[PATCH 5.10 036/103] octeontx2-af: fix memory leak of lmac and lmac->name

2021-01-15 Thread Greg Kroah-Hartman
From: Colin Ian King [ Upstream commit ac7996d680d8b4a51bb99bbdcee3dc838b985498 ] Currently the error return paths don't kfree lmac and lmac->name leading to some memory leaks. Fix this by adding two error return paths that kfree these objects Addresses-Coverity: ("Resource leak") Fixes: 1463f

[PATCH 5.10 080/103] iommu/vt-d: Fix misuse of ALIGN in qi_flush_piotlb()

2021-01-15 Thread Greg Kroah-Hartman
From: Lu Baolu commit 1efd17e7acb6692bffc6c58718f41f27fdfd62f5 upstream. Use IS_ALIGNED() instead. Otherwise, an unaligned address will be ignored. Fixes: 33cd6e642d6a ("iommu/vt-d: Flush PASID-based iotlb for iova over first level") Signed-off-by: Lu Baolu Link: https://lore.kernel.org/r/20

[PATCH 5.10 029/103] chtls: Fix hardware tid leak

2021-01-15 Thread Greg Kroah-Hartman
From: Ayush Sawal [ Upstream commit 717df0f4cdc9044c415431a3522b3e9ccca5b4a3 ] send_abort_rpl() is not calculating cpl_abort_req_rss offset and ends up sending wrong TID with abort_rpl WR causng tid leaks. Replaced send_abort_rpl() with chtls_send_abort_rpl() as it is redundant. Fixes: cc35c88a

[PATCH 5.10 076/103] wil6210: select CONFIG_CRC32

2021-01-15 Thread Greg Kroah-Hartman
From: Arnd Bergmann commit e186620d7bf11b274b985b839c38266d7918cc05 upstream. Without crc32, the driver fails to link: arm-linux-gnueabi-ld: drivers/net/wireless/ath/wil6210/fw.o: in function `wil_fw_verify': fw.c:(.text+0x74c): undefined reference to `crc32_le' arm-linux-gnueabi-ld: drivers/n

[PATCH 5.10 086/103] regmap: debugfs: Fix a memory leak when calling regmap_attach_dev

2021-01-15 Thread Greg Kroah-Hartman
From: Xiaolei Wang commit cffa4b2122f5f3e53cf3d529bbc74651f95856d5 upstream. After initializing the regmap through syscon_regmap_lookup_by_compatible, then regmap_attach_dev to the device, because the debugfs_name has been allocated, there is no need to redistribute it again unreferenced object

[PATCH 5.10 091/103] drm/i915/dp: Track pm_qos per connector

2021-01-15 Thread Greg Kroah-Hartman
From: Chris Wilson commit 9397d66212cdf7a21c66523f1583e5d63a609e84 upstream. Since multiple connectors may run intel_dp_aux_xfer conncurrently, a single global pm_qos does not suffice. (One connector may disable the dma-latency boost prematurely while the second is still depending on it.) Instea

[PATCH 5.10 065/103] bcache: set bcache device into read-only mode for BCH_FEATURE_INCOMPAT_OBSO_LARGE_BUCKET

2021-01-15 Thread Greg Kroah-Hartman
From: Coly Li commit 5342fd4255021ef0c4ce7be52eea1c4ebda11c63 upstream. If BCH_FEATURE_INCOMPAT_OBSO_LARGE_BUCKET is set in incompat feature set, it means the cache device is created with obsoleted layout with obso_bucket_site_hi. Now bcache does not support this feature bit, a new BCH_FEATURE_I

[PATCH 5.10 088/103] arm64: cpufeature: remove non-exist CONFIG_KVM_ARM_HOST

2021-01-15 Thread Greg Kroah-Hartman
From: Shannon Zhao commit 45ba7b195a369f35cb39094fdb32efe5908b34ad upstream. Commit d82755b2e781 ("KVM: arm64: Kill off CONFIG_KVM_ARM_HOST") deletes CONFIG_KVM_ARM_HOST option, it should use CONFIG_KVM instead. Just remove CONFIG_KVM_ARM_HOST here. Fixes: d82755b2e781 ("KVM: arm64: Kill off C

[PATCH 5.10 093/103] selftests: fib_nexthops: Fix wrong mausezahn invocation

2021-01-15 Thread Greg Kroah-Hartman
From: Ido Schimmel commit a5c9ca76a1c61fb5e4c35de8eb25aa925b03c9e4 upstream. For IPv6 traffic, mausezahn needs to be invoked with '-6'. Otherwise an error is returned: # ip netns exec me mausezahn veth1 -B 2001:db8:101::2 -A 2001:db8:91::1 -c 0 -t tcp "dp=1-1023, flags=syn" Failed to set sou

[PATCH 5.10 094/103] KVM: arm64: Dont access PMCR_EL0 when no PMU is available

2021-01-15 Thread Greg Kroah-Hartman
From: Marc Zyngier commit 2a5f1b67ec577fb1544b563086e0377f095f88e2 upstream. We reset the guest's view of PMCR_EL0 unconditionally, based on the host's view of this register. It is however legal for an implementation not to provide any PMU, resulting in an UNDEF. The obvious fix is to skip the

<    1   2   3   4   5   6   7   8   9   10   >