[PATCH 5.10 080/126] vfio/nvlink: Add missing SPAPR_TCE_IOMMU depends

2021-04-05 Thread Greg Kroah-Hartman
From: Jason Gunthorpe commit e0146a108ce4d2c22b9510fd12268e3ee72a0161 upstream. Compiling the nvlink stuff relies on the SPAPR_TCE_IOMMU otherwise there are compile errors: drivers/vfio/pci/vfio_pci_nvlink2.c:101:10: error: implicit declaration of function 'mm_iommu_put' [-Werror,-Wimplicit-f

[PATCH 5.10 081/126] pinctrl: rockchip: fix restore error in resume

2021-04-05 Thread Greg Kroah-Hartman
From: Wang Panzhenzhuan commit c971af25cda94afe71617790826a86253e88eab0 upstream. The restore in resume should match to suspend which only set for RK3288 SoCs pinctrl. Fixes: 8dca933127024 ("pinctrl: rockchip: save and restore gpio6_c6 pinmux in suspend/resume") Reviewed-by: Jianqun Xu Review

[PATCH 5.10 072/126] mm: fix race by making init_zero_pfn() early_initcall

2021-04-05 Thread Greg Kroah-Hartman
From: Ilya Lipnitskiy commit e720e7d0e983bf05de80b231bccc39f1487f0f16 upstream. There are code paths that rely on zero_pfn to be fully initialized before core_initcall. For example, wq_sysfs_init() is a core_initcall function that eventually results in a call to kernel_execve, which causes a pa

[PATCH 5.10 121/126] staging: rtl8192e: Change state information from u16 to u8

2021-04-05 Thread Greg Kroah-Hartman
From: Atul Gopinathan commit e78836ae76d20f38eed8c8c67f21db97529949da upstream. The "u16 CcxRmState[2];" array field in struct "rtllib_network" has 4 bytes in total while the operations performed on this array through-out the code base are only 2 bytes. The "CcxRmState" field is fed only 2 byte

[PATCH 5.10 112/126] USB: cdc-acm: fix double free on probe failure

2021-04-05 Thread Greg Kroah-Hartman
From: Johan Hovold commit 7180495cb3d0e2a2860d282a468b4146c21da78f upstream. If tty-device registration fails the driver copy of any Country Selection functional descriptor would end up being freed twice; first explicitly in the error path and then again in the tty-port destructor. Drop the fir

[PATCH 5.10 119/126] soc: qcom-geni-se: Cleanup the code to remove proxy votes

2021-04-05 Thread Greg Kroah-Hartman
From: Roja Rani Yarubandi commit 29d96eb261345c8d888e248ae79484e681be2faa upstream. This reverts commit 048eb908a1f2 ("soc: qcom-geni-se: Add interconnect support to fix earlycon crash") ICC core and platforms drivers supports sync_state feature, which ensures that the default ICC BW votes from

[PATCH 5.10 115/126] usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board.

2021-04-05 Thread Greg Kroah-Hartman
From: Artur Petrosyan commit 5e3bbae8ee3d677a0aa2919dc62b5c60ea01ba61 upstream. Increased the waiting timeout for HPRT0.PrtSusp register field to be set, because on HiKey 960 board HPRT0.PrtSusp wasn't generated with the existing timeout. Cc: # 4.18 Fixes: 22bb5cfdf13a ("usb: dwc2: Fix host ex

[PATCH 5.10 118/126] usb: dwc3: gadget: Clear DEP flags after stop transfers in ep disable

2021-04-05 Thread Greg Kroah-Hartman
From: Wesley Cheng commit 5aef629704ad4d983ecf5c8a25840f16e45b6d59 upstream. Ensure that dep->flags are cleared until after stop active transfers is completed. Otherwise, the ENDXFER command will not be executed during ep disable. Fixes: f09ddcfcb8c5 ("usb: dwc3: gadget: Prevent EP queuing whi

[PATCH 5.10 117/126] usb: dwc3: qcom: skip interconnect init for ACPI probe

2021-04-05 Thread Greg Kroah-Hartman
From: Shawn Guo commit 5e4010e36a58978e42b2ee13739ff9b50209c830 upstream. The ACPI probe starts failing since commit bea46b981515 ("usb: dwc3: qcom: Add interconnect support in dwc3 driver"), because there is no interconnect support for ACPI, and of_icc_get() call in dwc3_qcom_interconnect_init(

[PATCH 5.10 114/126] usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference

2021-04-05 Thread Greg Kroah-Hartman
From: Tong Zhang commit 72035f4954f0bca2d8c47cf31b3629c42116f5b7 upstream. init_dma_pools() calls dma_pool_create(...dev->dev) to create dma pool. however, dev->dev is actually set after calling init_dma_pools(), which effectively makes dma_pool_create(..NULL) and cause crash. To fix this issue,

[PATCH 5.10 120/126] staging: rtl8192e: Fix incorrect source in memcpy()

2021-04-05 Thread Greg Kroah-Hartman
From: Atul Gopinathan commit 72ad25fbbb78930f892b191637359ab5b94b3190 upstream. The variable "info_element" is of the following type: struct rtllib_info_element *info_element defined in drivers/staging/rtl8192e/rtllib.h: struct rtllib_info_element { u8 id;

[PATCH 5.10 111/126] USB: cdc-acm: downgrade message to debug

2021-04-05 Thread Greg Kroah-Hartman
From: Oliver Neukum commit e4c77070ad45fc940af1d7fb1e637c349e848951 upstream. This failure is so common that logging an error here amounts to spamming log files. Reviewed-by: Bruno Thomsen Signed-off-by: Oliver Neukum Cc: stable Link: https://lore.kernel.org/r/20210311130126.15972-2-oneu...@

[PATCH 5.11 001/152] arm64: mm: correct the inside linear map range during hotplug check

2021-04-05 Thread Greg Kroah-Hartman
From: Pavel Tatashin [ Upstream commit ee7febce051945be28ad86d16a15886f878204de ] Memory hotplug may fail on systems with CONFIG_RANDOMIZE_BASE because the linear map range is not checked correctly. The start physical address that linear map covers can be actually at the end of the range becaus

[PATCH 5.10 116/126] usb: dwc2: Prevent core suspend when port connection flag is 0

2021-04-05 Thread Greg Kroah-Hartman
From: Artur Petrosyan commit 93f672804bf2d7a49ef3fd96827ea6290ca1841e upstream. In host mode port connection status flag is "0" when loading the driver. After loading the driver system asserts suspend which is handled by "_dwc2_hcd_suspend()" function. Before the system suspend the port connecti

[PATCH 5.10 126/126] bpf: Use NOP_ATOMIC5 instead of emit_nops(&prog, 5) for BPF_TRAMP_F_CALL_ORIG

2021-04-05 Thread Greg Kroah-Hartman
From: Stanislav Fomichev commit b9082970478009b778aa9b22d5561eef35b53b63 upstream. __bpf_arch_text_poke does rewrite only for atomic nop5, emit_nops(xxx, 5) emits non-atomic one which breaks fentry/fexit with k8 atomics: P6_NOP5 == P6_NOP5_ATOMIC (0f1f44 == 0f1f44) K8_NOP5 != K8_NOP5_AT

[PATCH 5.10 113/126] USB: cdc-acm: fix use-after-free after probe failure

2021-04-05 Thread Greg Kroah-Hartman
From: Johan Hovold commit 4e49bf376c0451ad2eae2592e093659cde12be9a upstream. If tty-device registration fails the driver would fail to release the data interface. When the device is later disconnected, the disconnect callback would still be called for the data interface and would go about releas

[PATCH 5.10 125/126] Revert "kernel: freezer should treat PF_IO_WORKER like PF_KTHREAD for freezing"

2021-04-05 Thread Greg Kroah-Hartman
From: Jens Axboe commit d3dc04cd81e0eaf50b2d09ab051a13300e587439 upstream. This reverts commit 15b2219facadec583c24523eed40fa45865f859f. Before IO threads accepted signals, the freezer using take signals to wake up an IO thread would cause them to loop without any way to clear the pending signa

[PATCH 5.10 123/126] drivers: video: fbcon: fix NULL dereference in fbcon_cursor()

2021-04-05 Thread Greg Kroah-Hartman
From: Du Cheng commit 01faae5193d6190b7b3aa93dae43f514e866d652 upstream. add null-check on function pointer before dereference on ops->cursor Reported-by: syzbot+b67aaae8d3a927f68...@syzkaller.appspotmail.com Cc: stable Signed-off-by: Du Cheng Link: https://lore.kernel.org/r/20210312081421.45

[PATCH 5.11 010/152] ASoC: rt5651: Fix dac- and adc- vol-tlv values being off by a factor of 10

2021-04-05 Thread Greg Kroah-Hartman
From: Hans de Goede [ Upstream commit eee51df776bd6cac10a76b2779a9fdee3f622b2b ] The adc_vol_tlv volume-control has a range from -17.625 dB to +30 dB, not -176.25 dB to + 300 dB. This wrong scale is esp. a problem in userspace apps which translate the dB scale to a linear scale. With the logarit

[PATCH 5.10 124/126] riscv: evaluate put_user() arg before enabling user access

2021-04-05 Thread Greg Kroah-Hartman
From: Ben Dooks commit 285a76bb2cf51b0c74c634f2aaccdb93e1f2a359 upstream. The header has a problem with put_user(a, ptr) if the 'a' is not a simple variable, such as a function. This can lead to the compiler producing code as so: 1: enable_user_access() 2: evaluate 'a' into register

[PATCH 5.11 011/152] ASoC: sgtl5000: set DAP_AVC_CTRL register to correct default value on probe

2021-04-05 Thread Greg Kroah-Hartman
From: Benjamin Rood [ Upstream commit f86f58e3594fb0ab1993d833d3b9a2496f3c928c ] According to the SGTL5000 datasheet [1], the DAP_AVC_CTRL register has the following bit field definitions: | BITS | FIELD | RW | RESET | DEFINITION| | 15| RSVD| RO | 0x0

[PATCH 5.10 122/126] driver core: clear deferred probe reason on probe retry

2021-04-05 Thread Greg Kroah-Hartman
From: Ahmad Fatoum commit f0acf637d60ffcef3ccb6e279f743e587b3c7359 upstream. When retrying a deferred probe, any old defer reason string should be discarded. Otherwise, if the probe is deferred again at a different spot, but without setting a message, the now incorrect probe reason will remain.

[PATCH 5.11 012/152] ASoC: es8316: Simplify adc_pga_gain_tlv table

2021-04-05 Thread Greg Kroah-Hartman
From: Hans de Goede [ Upstream commit bb18c678754ce1514100fb4c0bf6113b5af36c48 ] Most steps in this table are steps of 3dB (300 centi-dB), so we can simplify the table. This not only reduces the amount of space it takes inside the kernel, this also makes alsa-lib's mixer code actually accept th

[PATCH 5.11 013/152] ASoC: soc-core: Prevent warning if no DMI table is present

2021-04-05 Thread Greg Kroah-Hartman
From: Jon Hunter [ Upstream commit 7de14d581dbed57c2b3c6afffa2c3fdc6955a3cd ] Many systems do not use ACPI and hence do not provide a DMI table. On non-ACPI systems a warning, such as the following, is printed on boot. WARNING KERN tegra-audio-graph-card sound: ASoC: no DMI vendor name! The v

[PATCH 5.11 014/152] ASoC: cs42l42: Fix Bitclock polarity inversion

2021-04-05 Thread Greg Kroah-Hartman
From: Lucas Tanure [ Upstream commit e793c965519b8b7f2fea51a48398405e2a501729 ] The driver was setting bit clock polarity opposite to intended polarity. Also simplify the code by grouping ADC and DAC clock configurations into a single field. Signed-off-by: Lucas Tanure Link: https://lore.kern

[PATCH 5.11 015/152] ASoC: cs42l42: Fix channel width support

2021-04-05 Thread Greg Kroah-Hartman
From: Lucas Tanure [ Upstream commit 2bdc4f5c6838f7c3feb4fe68e4edbeea158ec0a2 ] Remove the hard coded 32 bits width and replace with the correct width calculated by params_width. Signed-off-by: Lucas Tanure Link: https://lore.kernel.org/r/20210305173442.195740-3-tanur...@opensource.cirrus.com

[PATCH 5.11 016/152] ASoC: cs42l42: Fix mixer volume control

2021-04-05 Thread Greg Kroah-Hartman
From: Lucas Tanure [ Upstream commit 72d904763ae6a8576e7ad034f9da4f0e3c44bf24 ] The minimum value is 0x3f (-63dB), which also is mute Signed-off-by: Lucas Tanure Link: https://lore.kernel.org/r/20210305173442.195740-4-tanur...@opensource.cirrus.com Signed-off-by: Mark Brown Signed-off-by: Sa

[PATCH 5.11 017/152] ASoC: cs42l42: Always wait at least 3ms after reset

2021-04-05 Thread Greg Kroah-Hartman
From: Lucas Tanure [ Upstream commit 19325cfea04446bc79b36bffd4978af15f46a00e ] This delay is part of the power-up sequence defined in the datasheet. A runtime_resume is a power-up so must also include the delay. Signed-off-by: Lucas Tanure Link: https://lore.kernel.org/r/20210305173442.19574

[PATCH 5.11 018/152] NFSD: fix error handling in NFSv4.0 callbacks

2021-04-05 Thread Greg Kroah-Hartman
From: Olga Kornievskaia [ Upstream commit b4250dd868d1b42c0a65de11ef3afbee67ba5d2f ] When the server tries to do a callback and a client fails it due to authentication problems, we need the server to set callback down flag in RENEW so that client can recover. Suggested-by: Bruce Fields Signed-

[PATCH 5.11 019/152] ASoC: mediatek: mt8192: fix tdm out data is valid on rising edge

2021-04-05 Thread Greg Kroah-Hartman
From: Jiaxin Yu [ Upstream commit 8d06b9633a66f41fed520f6eebd163189518ba79 ] This patch correct tdm out bck inverse register to AUDIO_TOP_CON3[3]. Signed-off-by: Jiaxin Yu Link: https://lore.kernel.org/r/1615516005-781-1-git-send-email-jiaxin...@mediatek.com Signed-off-by: Mark Brown Signed-

[PATCH 5.11 022/152] io_uring: fix ->flags races by linked timeouts

2021-04-05 Thread Greg Kroah-Hartman
From: Pavel Begunkov [ Upstream commit efe814a471e0e58f28f1efaf430c8784a4f36626 ] It's racy to modify req->flags from a not owning context, e.g. linked timeout calling req_set_fail_links() for the master request might race with that request setting/clearing flags while being executed concurrentl

[PATCH 5.11 020/152] kernel: freezer should treat PF_IO_WORKER like PF_KTHREAD for freezing

2021-04-05 Thread Greg Kroah-Hartman
From: Jens Axboe [ Upstream commit 15b2219facadec583c24523eed40fa45865f859f ] Don't send fake signals to PF_IO_WORKER threads, they don't accept signals. Just treat them like kthreads in this regard, all they need is a wakeup as no forced kernel/user transition is needed. Suggested-by: Linus To

[PATCH 5.11 021/152] vhost: Fix vhost_vq_reset()

2021-04-05 Thread Greg Kroah-Hartman
From: Laurent Vivier [ Upstream commit beb691e69f4dec7bfe8b81b509848acfd1f0dbf9 ] vhost_reset_is_le() is vhost_init_is_le(), and in the case of cross-endian legacy, vhost_init_is_le() depends on vq->user_be. vq->user_be is set by vhost_disable_cross_endian(). But in vhost_vq_reset(), we have:

[PATCH 5.11 023/152] io_uring: halt SQO submission on ctx exit

2021-04-05 Thread Greg Kroah-Hartman
From: Pavel Begunkov [ Upstream commit f6d54255f4235448d4bbe442362d4caa62da97d5 ] io_sq_thread_finish() is called in io_ring_ctx_free(), so SQPOLL task is potentially running submitting new requests. It's not a disaster because of using a "try" variant of percpu_ref_get, but is far from nice. R

[PATCH 5.11 024/152] scsi: st: Fix a use after free in st_open()

2021-04-05 Thread Greg Kroah-Hartman
From: Lv Yunlong [ Upstream commit c8c165dea4c8f5ad67b1240861e4f6c5395fa4ac ] In st_open(), if STp->in_use is true, STp will be freed by scsi_tape_put(). However, STp is still used by DEBC_printk() after. It is better to DEBC_printk() before scsi_tape_put(). Link: https://lore.kernel.org/r/2021

[PATCH 5.11 003/152] ext4: shrink race window in ext4_should_retry_alloc()

2021-04-05 Thread Greg Kroah-Hartman
From: Eric Whitney [ Upstream commit efc61345274d6c7a46a0570efbc916fcbe3e927b ] When generic/371 is run on kvm-xfstests using 5.10 and 5.11 kernels, it fails at significant rates on the two test scenarios that disable delayed allocation (ext3conv and data_journal) and force actual block allocati

[PATCH 5.11 025/152] scsi: qla2xxx: Fix broken #endif placement

2021-04-05 Thread Greg Kroah-Hartman
From: Alexey Dobriyan [ Upstream commit 5999b9e5b1f8a2f5417b755130919b3ac96f5550 ] Only half of the file is under include guard because terminating #endif is placed too early. Link: https://lore.kernel.org/r/YE4snvoW1SuwcXAn@localhost.localdomain Reviewed-by: Himanshu Madhani Signed-off-by: Al

[PATCH 5.11 004/152] ext4: fix bh ref count on error paths

2021-04-05 Thread Greg Kroah-Hartman
From: Zhaolong Zhang [ Upstream commit c915fb80eaa6194fa9bd0a4487705cd5b0dda2f1 ] __ext4_journalled_writepage should drop bhs' ref count on error paths Signed-off-by: Zhaolong Zhang Link: https://lore.kernel.org/r/1614678151-70481-1-git-send-email-zhangzl2...@126.com Signed-off-by: Theodore T

[PATCH 5.11 005/152] fs: nfsd: fix kconfig dependency warning for NFSD_V4

2021-04-05 Thread Greg Kroah-Hartman
From: Julian Braha [ Upstream commit 7005227369079963d25fb2d5d736d0feb2c44cf6 ] When NFSD_V4 is enabled and CRYPTO is disabled, Kbuild gives the following warning: WARNING: unmet direct dependencies detected for CRYPTO_SHA256 Depends on [n]: CRYPTO [=n] Selected by [y]: - NFSD_V4 [=y] &&

[PATCH 5.11 006/152] rpc: fix NULL dereference on kmalloc failure

2021-04-05 Thread Greg Kroah-Hartman
From: J. Bruce Fields [ Upstream commit 0ddc942394013f08992fc379ca04cffacbbe3dae ] I think this is unlikely but possible: svc_authenticate sets rq_authop and calls svcauth_gss_accept. The kmalloc(sizeof(*svcdata), GFP_KERNEL) fails, leaving rq_auth_data NULL, and returning SVC_DENIED. This ca

[PATCH 5.11 007/152] iomap: Fix negative assignment to unsigned sis->pages in iomap_swapfile_activate

2021-04-05 Thread Greg Kroah-Hartman
From: Ritesh Harjani [ Upstream commit 5808fecc572391867fcd929662b29c12e6d08d81 ] In case if isi.nr_pages is 0, we are making sis->pages (which is unsigned int) a huge value in iomap_swapfile_activate() by assigning -1. This could cause a kernel crash in kernel v4.18 (with below signature). Or c

[PATCH 5.11 002/152] virtiofs: Fail dax mount if device does not support it

2021-04-05 Thread Greg Kroah-Hartman
From: Vivek Goyal [ Upstream commit 3f9b9efd82a84f27e95d0414f852caf1fa839e83 ] Right now "mount -t virtiofs -o dax myfs /mnt/virtiofs" succeeds even if filesystem deivce does not have a cache window and hence DAX can't be supported. This gives a false sense to user that they are using DAX with

[PATCH 5.11 026/152] staging: comedi: cb_pcidas: fix request_irq() warn

2021-04-05 Thread Greg Kroah-Hartman
From: Tong Zhang [ Upstream commit 2e5848a3d86f03024ae096478bdb892ab3d79131 ] request_irq() wont accept a name which contains slash so we need to repalce it with something else -- otherwise it will trigger a warning and the entry in /proc/irq/ will not be created since the .name might be used by

[PATCH 5.11 009/152] ASoC: rt5640: Fix dac- and adc- vol-tlv values being off by a factor of 10

2021-04-05 Thread Greg Kroah-Hartman
From: Hans de Goede [ Upstream commit cfa26ed1f9f885c2fd8f53ca492989d1e16d0199 ] The adc_vol_tlv volume-control has a range from -17.625 dB to +30 dB, not -176.25 dB to + 300 dB. This wrong scale is esp. a problem in userspace apps which translate the dB scale to a linear scale. With the logarit

[PATCH 5.11 000/152] 5.11.12-rc1 review

2021-04-05 Thread Greg Kroah-Hartman
This is the start of the stable review cycle for the 5.11.12 release. There are 152 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 07 Apr 2021 08:50:09 +. Anything re

[PATCH 5.11 043/152] mptcp: init mptcp request socket earlier

2021-04-05 Thread Greg Kroah-Hartman
From: Paolo Abeni [ Upstream commit d8b59efa64060d17b7b61f97d891de2d9f2bd9f0 ] The mptcp subflow route_req() callback performs the subflow req initialization after the route_req() check. If the latter fails, mptcp-specific bits of the current request sockets are left uninitialized. The above ca

[PATCH 5.11 042/152] mptcp: fix poll after shutdown

2021-04-05 Thread Greg Kroah-Hartman
From: Paolo Abeni [ Upstream commit dd913410b0a442a53d41a9817ed2208850858e99 ] The current mptcp_poll() implementation gives unexpected results after shutdown(SEND_SHUTDOWN) and when the msk status is TCP_CLOSE. Set the correct mask. Fixes: 8edf08649eed ("mptcp: rework poll+nospace handling")

[PATCH 5.11 039/152] io_uring: call req_set_fail_links() on short send[msg]()/recv[msg]() with MSG_WAITALL

2021-04-05 Thread Greg Kroah-Hartman
From: Stefan Metzmacher [ Upstream commit 0031275d119efe16711cd93519b595e6f9b4b330 ] Without that it's not safe to use them in a linked combination with others. Now combinations like IORING_OP_SENDMSG followed by IORING_OP_SPLICE should be possible. We already handle short reads and writes for

[PATCH 5.11 040/152] net: mvpp2: fix interrupt mask/unmask skip condition

2021-04-05 Thread Greg Kroah-Hartman
[ Upstream commit 7867299cde34e9c2d2c676f2a384a9d5853b914d ] The condition should be skipped if CPU ID equal to nthreads. The patch doesn't fix any actual issue since nthreads = min_t(unsigned int, num_present_cpus(), MVPP2_MAX_THREADS). On all current Armada platforms, the number of CPU's is less

[PATCH 5.11 008/152] ASoC: rt1015: fix i2c communication error

2021-04-05 Thread Greg Kroah-Hartman
From: Jack Yu [ Upstream commit 9e0bdaa9fcb8c64efc1487a7fba07722e7bc515e ] Remove 0x100 cache re-sync to solve i2c communication error. Signed-off-by: Jack Yu Link: https://lore.kernel.org/r/20210222090057.29532-1-jack...@realtek.com Signed-off-by: Mark Brown Signed-off-by: Sasha Levin ---

[PATCH 5.11 045/152] flow_dissector: fix TTL and TOS dissection on IPv4 fragments

2021-04-05 Thread Greg Kroah-Hartman
From: Davide Caratti [ Upstream commit d2126838050ccd1dadf310ffb78b2204f3b032b9 ] the following command: # tc filter add dev $h2 ingress protocol ip pref 1 handle 101 flower \ $tcflags dst_ip 192.0.2.2 ip_ttl 63 action drop doesn't drop all IPv4 packets that match the configured TTL / dest

[PATCH 5.11 038/152] ext4: do not iput inode under running transaction in ext4_rename()

2021-04-05 Thread Greg Kroah-Hartman
From: zhangyi (F) [ Upstream commit 5dccdc5a1916d4266edd251f20113a5c495f ] In ext4_rename(), when RENAME_WHITEOUT failed to add new entry into directory, it ends up dropping new created whiteout inode under the running transaction. After commit <9b88f9fb0d2> ("ext4: Do not iput inode under r

[PATCH 5.11 029/152] ASoC: rt711: add snd_soc_component remove callback

2021-04-05 Thread Greg Kroah-Hartman
From: Bard Liao [ Upstream commit 899b12542b0897f92de9ba30944937c39ebb246d ] We do some IO operations in the snd_soc_component_set_jack callback function and snd_soc_component_set_jack() will be called when soc component is removed. However, we should not access SoundWire registers when the bus

[PATCH 5.11 028/152] ASoC: rt5659: Update MCLK rate in set_sysclk()

2021-04-05 Thread Greg Kroah-Hartman
From: Sameer Pujar [ Upstream commit dbf54a9534350d6aebbb34f5c1c606b81a4f35dd ] Simple-card/audio-graph-card drivers do not handle MCLK clock when it is specified in the codec device node. The expectation here is that, the codec should actually own up the MCLK clock and do necessary setup in the

[PATCH 5.11 047/152] mptcp: provide subflow aware release function

2021-04-05 Thread Greg Kroah-Hartman
From: Florian Westphal [ Upstream commit ad98dd37051e14fa8c785609430d907fcfd518ba ] mptcp re-used inet(6)_release, so the subflow sockets are ignored. Need to invoke ip(v6)_mc_drop_socket function to ensure mcast join resources get free'd. Fixes: 717e79c867ca5 ("mptcp: Add setsockopt()/getsocko

[PATCH 5.11 046/152] mptcp: fix DATA_FIN processing for orphaned sockets

2021-04-05 Thread Greg Kroah-Hartman
From: Paolo Abeni [ Upstream commit 341c65242fe18aac8900e4291d472df9f7ba7bc7 ] Currently we move orphaned msk sockets directly from FIN_WAIT2 state to CLOSE, with the rationale that incoming additional data could be just dropped by the TCP stack/TW sockets. Anyhow we miss sending MPTCP-level ac

[PATCH 5.11 050/152] mptcp: fix race in release_cb

2021-04-05 Thread Greg Kroah-Hartman
From: Paolo Abeni [ Upstream commit c2e6048fa1cf2228063aec299f93ac6eb256b457 ] If we receive a MPTCP_PUSH_PENDING even from a subflow when mptcp_release_cb() is serving the previous one, the latter will be delayed up to the next release_sock(msk). Address the issue implementing a test/serve loo

[PATCH 5.11 049/152] net: introduce CAN specific pointer in the struct net_device

2021-04-05 Thread Greg Kroah-Hartman
From: Oleksij Rempel [ Upstream commit 4e096a18867a5a989b510f6999d9c6b6622e8f7b ] Since 20dd3850bcf8 ("can: Speed up CAN frame receiption by using ml_priv") the CAN framework uses per device specific data in the AF_CAN protocol. For this purpose the struct net_device->ml_priv is used. Later the

[PATCH 5.11 041/152] mptcp: deliver ssk errors to msk

2021-04-05 Thread Greg Kroah-Hartman
From: Paolo Abeni [ Upstream commit 15cc10453398c22f78f6c2b897119ecce5e5dd89 ] Currently all errors received on msk subflows are ignored. We need to catch at least the errors on connect() and on fallback sockets. Use a custom sk_error_report callback at subflow level, and do the real action und

[PATCH 5.11 037/152] static_call: Align static_call_is_init() patching condition

2021-04-05 Thread Greg Kroah-Hartman
From: Peter Zijlstra [ Upstream commit 698bacefe993ad2922c9d3b1380591ad489355e9 ] The intent is to avoid writing init code after init (because the text might have been freed). The code is needlessly different between jump_label and static_call and not obviously correct. The existing code relies

[PATCH 5.11 053/152] can: tcan4x5x: fix max register value

2021-04-05 Thread Greg Kroah-Hartman
[ Upstream commit 6e1caaf8ed22eb700cc47ec353816eee33186c1c ] This patch fixes the max register value for the regmap. Reviewed-by: Dan Murphy Tested-by: Sean Nyekjaer Link: https://lore.kernel.org/r/20201215231746.1132907-12-...@pengutronix.de Signed-off-by: Marc Kleine-Budde Signed-off-by: Sas

[PATCH 5.11 052/152] mptcp: fix bit MPTCP_PUSH_PENDING tests

2021-04-05 Thread Greg Kroah-Hartman
From: Dan Carpenter [ Upstream commit 2e5de7e0c8d2caa860e133ef71fc94671cb8e0bf ] The MPTCP_PUSH_PENDING define is 6 and these tests should be testing if BIT(6) is set. Fixes: c2e6048fa1cf ("mptcp: fix race in release_cb") Signed-off-by: Dan Carpenter Reviewed-by: Matthieu Baerts Signed-off-by

[PATCH 5.11 054/152] brcmfmac: clear EAP/association status bits on linkdown events

2021-04-05 Thread Greg Kroah-Hartman
From: Luca Pesce [ Upstream commit e862a3e4088070de352fdafe9bd9e3ae0a95a33c ] This ensure that previous association attempts do not leave stale statuses on subsequent attempts. This fixes the WARN_ON(!cr->bss)) from __cfg80211_connect_result() when connecting to an AP after a previous connectio

[PATCH 5.11 056/152] rtw88: coex: 8821c: correct antenna switch function

2021-04-05 Thread Greg Kroah-Hartman
From: Guo-Feng Fan [ Upstream commit adba838af159914eb98fcd55bfd3a89c9a7d41a8 ] This patch fixes a defect that uses incorrect function to access registers. Use 8 and 32 bit access function to access 8 and 32 bit long data respectively. Signed-off-by: Guo-Feng Fan Signed-off-by: Ping-Ke Shih S

[PATCH 5.11 048/152] can: dev: move driver related infrastructure into separate subdir

2021-04-05 Thread Greg Kroah-Hartman
From: Marc Kleine-Budde [ Upstream commit 3e77f70e734584e0ad1038e459ed3fd2400f873a ] This patch moves the CAN driver related infrastructure into a separate subdir. It will be split into more files in the coming patches. Reviewed-by: Vincent Mailhol Link: https://lore.kernel.org/r/202104193

[PATCH 5.11 044/152] mptcp: add a missing retransmission timer scheduling

2021-04-05 Thread Greg Kroah-Hartman
From: Paolo Abeni [ Upstream commit d09d818ec2ed31bce94fdcfcc4700233e01f8498 ] Currently we do not schedule the MPTCP retransmission timer after pushing the data when such action happens in the subflow context. This may cause hang-up on active-backup scenarios, or even when only single subflow

[PATCH 5.11 057/152] netdevsim: dev: Initialize FIB module after debugfs

2021-04-05 Thread Greg Kroah-Hartman
From: Ido Schimmel [ Upstream commit f57ab5b75f7193e194c83616cd104f41c8350f68 ] Initialize the dummy FIB offload module after debugfs, so that the FIB module could create its own directory there. Signed-off-by: Amit Cohen Signed-off-by: Ido Schimmel Signed-off-by: David S. Miller Signed-off-

[PATCH 5.11 051/152] net: bonding: fix error return code of bond_neigh_init()

2021-04-05 Thread Greg Kroah-Hartman
From: Jia-Ju Bai [ Upstream commit 2055a99da8a253a357bdfd359b3338ef3375a26c ] When slave is NULL or slave_ops->ndo_neigh_setup is NULL, no error return code of bond_neigh_init() is assigned. To fix this bug, ret is assigned with -EINVAL in these cases. Fixes: 9e99bfefdbce ("bonding: fix bond_ne

[PATCH 5.11 058/152] iwlwifi: pcie: dont disable interrupts for reg_lock

2021-04-05 Thread Greg Kroah-Hartman
From: Johannes Berg [ Upstream commit 874020f8adce535cd318af1768ffe744251b6593 ] The only thing we do touching the device in hard interrupt context is, at most, writing an interrupt ACK register, which isn't racing in with anything protected by the reg_lock. Thus, avoid disabling interrupts her

[PATCH 5.11 059/152] ath10k: hold RCU lock when calling ieee80211_find_sta_by_ifaddr()

2021-04-05 Thread Greg Kroah-Hartman
From: Shuah Khan [ Upstream commit 09078368d516918666a0122f2533dc73676d3d7e ] ieee80211_find_sta_by_ifaddr() must be called under the RCU lock and the resulting pointer is only valid under RCU lock as well. Fix ath10k_wmi_tlv_op_pull_peer_stats_info() to hold RCU lock before it calls ieee80211_

[PATCH 5.11 030/152] thermal/core: Add NULL pointer check before using cooling device stats

2021-04-05 Thread Greg Kroah-Hartman
From: Manaf Meethalavalappu Pallikunhi [ Upstream commit 2046a24ae121cd107929655a6aaf3b8c5beea01f ] There is a possible chance that some cooling device stats buffer allocation fails due to very high cooling device max state value. Later cooling device update sysfs can try to access stats data fo

[PATCH 5.11 060/152] net: ethernet: aquantia: Handle error cleanup of start on open

2021-04-05 Thread Greg Kroah-Hartman
From: Nathan Rossi [ Upstream commit 8a28af7a3e85ddf358f8c41e401a33002f7a9587 ] The aq_nic_start function can fail in a variety of cases which leaves the device in broken state. An example case where the start function fails is the request_threaded_irq which can be interrupted, resulting in a E

[PATCH 5.11 064/152] net: ipa: fix register write command validation

2021-04-05 Thread Greg Kroah-Hartman
From: Alex Elder [ Upstream commit 2d65ed76924bc772d3974b0894d870b1aa63b34a ] In ipa_cmd_register_write_valid() we verify that values we will supply to a REGISTER_WRITE IPA immediate command will fit in the fields that need to hold them. This patch fixes some issues in that function and ipa_cmd

[PATCH 5.11 063/152] net: ipa: use a separate pointer for adjusted GSI memory

2021-04-05 Thread Greg Kroah-Hartman
From: Alex Elder [ Upstream commit 571b1e7e58ad30b3a842254aea50d2e83b2396e1 ] This patch actually fixes a bug, though it doesn't affect the two platforms supported currently. The fix implements GSI memory pointers a bit differently. For IPA version 4.5 and above, the address space for almost a

[PATCH 5.11 055/152] ath11k: add ieee80211_unregister_hw to avoid kernel crash caused by NULL pointer

2021-04-05 Thread Greg Kroah-Hartman
From: Wen Gong [ Upstream commit 0d96968315d7ffbd70d608b29e9bea084210b96d ] When function return fail to __ath11k_mac_register after success called ieee80211_register_hw, then it set wiphy->dev.parent to NULL by SET_IEEE80211_DEV(ar->hw, NULL) in end of __ath11k_mac_register, then cfg80211_get_d

[PATCH 5.11 031/152] locking/ww_mutex: Simplify use_ww_ctx & ww_ctx handling

2021-04-05 Thread Greg Kroah-Hartman
From: Waiman Long [ Upstream commit 5de2055d31ea88fd9ae9709ac95c372a505a60fa ] The use_ww_ctx flag is passed to mutex_optimistic_spin(), but the function doesn't use it. The frequent use of the (use_ww_ctx && ww_ctx) combination is repetitive. In fact, ww_ctx should not be used at all if !use_w

[PATCH 5.11 033/152] nvmet-tcp: fix kmap leak when data digest in use

2021-04-05 Thread Greg Kroah-Hartman
From: Elad Grupi [ Upstream commit bac04454ef9fada009f0572576837548b190bf94 ] When data digest is enabled we should unmap pdu iovec before handling the data digest pdu. Signed-off-by: Elad Grupi Reviewed-by: Sagi Grimberg Signed-off-by: Christoph Hellwig Signed-off-by: Sasha Levin --- driv

[PATCH 5.11 032/152] locking/ww_mutex: Fix acquire/release imbalance in ww_acquire_init()/ww_acquire_fini()

2021-04-05 Thread Greg Kroah-Hartman
From: Waiman Long [ Upstream commit bee645788e07eea63055d261d2884ea45c2ba857 ] In ww_acquire_init(), mutex_acquire() is gated by CONFIG_DEBUG_LOCK_ALLOC. The dep_map in the ww_acquire_ctx structure is also gated by the same config. However mutex_release() in ww_acquire_fini() is gated by CONFIG_

[PATCH 5.11 061/152] appletalk: Fix skb allocation size in loopback case

2021-04-05 Thread Greg Kroah-Hartman
From: Doug Brown [ Upstream commit 39935dccb21c60f9bbf1bb72d22ab6fd14ae7705 ] If a DDP broadcast packet is sent out to a non-gateway target, it is also looped back. There is a potential for the loopback device to have a longer hardware header length than the original target route's device, which

[PATCH 5.11 062/152] net: ipa: remove two unused register definitions

2021-04-05 Thread Greg Kroah-Hartman
From: Alex Elder [ Upstream commit d5bc5015eb9d64cbd14e467db1a56db1472d0d6c ] We do not support inter-EE channel or event ring commands. Inter-EE interrupts are disabled (and never re-enabled) for all channels and event rings, so we have no need for the GSI registers that clear those interrupt

[PATCH 5.11 035/152] Revert "PM: ACPI: reboot: Use S5 for reboot"

2021-04-05 Thread Greg Kroah-Hartman
From: Josef Bacik [ Upstream commit 9d3fcb28f9b9750b474811a2964ce022df56336e ] This reverts commit d60cd06331a3566d3305b3c7b566e79edf4e2095. This patch causes a panic when rebooting my Dell Poweredge r440. I do not have the full panic log as it's lost at that stage of the reboot and I do not h

[PATCH 5.11 027/152] staging: comedi: cb_pcidas64: fix request_irq() warn

2021-04-05 Thread Greg Kroah-Hartman
From: Tong Zhang [ Upstream commit d2d106fe3badfc3bf0dd3899d1c3f210c7203eab ] request_irq() wont accept a name which contains slash so we need to repalce it with something else -- otherwise it will trigger a warning and the entry in /proc/irq/ will not be created since the .name might be used by

[PATCH 5.11 036/152] nouveau: Skip unvailable ttm page entries

2021-04-05 Thread Greg Kroah-Hartman
From: Tobias Klausmann [ Upstream commit e94c55b8e0a0bbe9a026250cf31e2fa45957d776 ] Starting with commit f295c8cfec833c2707ff1512da10d65386dde7af ("drm/nouveau: fix dma syncing warning with debugging on.") the following oops occures: BUG: kernel NULL pointer dereference, address: 000

[PATCH 5.11 075/152] ALSA: hda/realtek: call alc_update_headset_mode() in hp_automute_hook

2021-04-05 Thread Greg Kroah-Hartman
From: Hui Wang commit e54f30befa7990b897189b44a56c1138c6bfdbb5 upstream. We found the alc_update_headset_mode() is not called on some machines when unplugging the headset, as a result, the mode of the ALC_HEADSET_MODE_UNPLUGGED can't be set, then the current_headset_type is not cleared, if users

[PATCH 5.11 082/152] PM: runtime: Fix ordering in pm_runtime_get_suppliers()

2021-04-05 Thread Greg Kroah-Hartman
From: Adrian Hunter commit c0c33442f7203704aef345647e14c2fb86071001 upstream. rpm_active indicates how many times the supplier usage_count has been incremented. Consequently it must be updated after pm_runtime_get_sync() of the supplier, not before. Fixes: 4c06c4e6cf63 ("driver core: Fix possib

[PATCH 5.11 077/152] xtensa: fix uaccess-related livelock in do_page_fault

2021-04-05 Thread Greg Kroah-Hartman
From: Max Filippov commit 7b9acbb6aad4f54623dcd4bd4b1a60fe0c727b09 upstream. If a uaccess (e.g. get_user()) triggers a fault and there's a fault signal pending, the handler will return to the uaccess without having performed a uaccess fault fixup, and so the CPU will immediately execute the uacc

[PATCH 5.11 079/152] KVM: SVM: load control fields from VMCB12 before checking them

2021-04-05 Thread Greg Kroah-Hartman
From: Paolo Bonzini commit a58d9166a756a0f4a6618e4f593232593d6df134 upstream. Avoid races between check and use of the nested VMCB controls. This for example ensures that the VMRUN intercept is always reflected to the nested hypervisor, instead of being processed by the host. Without this patc

[PATCH 5.11 066/152] net: 9p: advance iov on empty read

2021-04-05 Thread Greg Kroah-Hartman
From: Jisheng Zhang [ Upstream commit d65614a01d24704b016635abf5cc028a54e45a62 ] I met below warning when cating a small size(about 80bytes) txt file on 9pfs(msize=2097152 is passed to 9p mount option), the reason is we miss iov_iter_advance() if the read count is 0 for zerocopy case, so we didn

[PATCH 5.11 080/152] KVM: SVM: ensure that EFER.SVME is set when running nested guest or on nested vmexit

2021-04-05 Thread Greg Kroah-Hartman
From: Paolo Bonzini commit 3c346c0c60ab06a021d1c0884a0ef494bc4ee3a7 upstream. Fixing nested_vmcb_check_save to avoid all TOC/TOU races is a bit harder in released kernels, so do the bare minimum by avoiding that EFER.SVME is cleared. This is problematic because svm_set_efer frees the data struc

[PATCH 5.11 083/152] tracing: Fix stack trace event size

2021-04-05 Thread Greg Kroah-Hartman
From: Steven Rostedt (VMware) commit 9deb193af69d3fd6dd8e47f292b67c805a787010 upstream. Commit cbc3b92ce037 fixed an issue to modify the macros of the stack trace event so that user space could parse it properly. Originally the stack trace format to user space showed that the called stack was a

[PATCH 5.11 085/152] s390/vdso: fix tod_steering_delta type

2021-04-05 Thread Greg Kroah-Hartman
From: Heiko Carstens commit b24bacd67ffddd9192c4745500fd6f73dbfe565e upstream. The s390 specific vdso function __arch_get_hw_counter() is supposed to consider tod clock steering. If a tod clock steering event happens and the tod clock is set to a new value __arch_get_hw_counter() will not retur

[PATCH 5.11 076/152] ALSA: hda/realtek: fix mute/micmute LEDs for HP 640 G8

2021-04-05 Thread Greg Kroah-Hartman
From: Jeremy Szu commit 417eadfdd9e25188465280edf3668ed163fda2d0 upstream. The HP EliteBook 640 G8 Notebook PC is using ALC236 codec which is using 0x02 to control mute LED and 0x01 to control micmute LED. Therefore, add a quirk to make it works. Signed-off-by: Jeremy Szu Cc: Link: https://lo

[PATCH 5.11 102/152] pinctrl: qcom: sc7280: Fix SDC1_RCLK configurations

2021-04-05 Thread Greg Kroah-Hartman
From: Rajendra Nayak commit d0f9f47c07fe52b34e2ff8590cf09e0a9d8d6f99 upstream. Fix SDC1_RCLK configurations which are in a different register so fix the offset from 0xb3000 to 0xb3004. Fixes: ecb454594c43: ("pinctrl: qcom: Add sc7280 pinctrl driver") Reported-by: Veerabhadrarao Badiganti Signe

[PATCH 5.11 089/152] drm/amd/pm: no need to force MCLK to highest when no display connected

2021-04-05 Thread Greg Kroah-Hartman
From: Evan Quan commit acc7baafeb0b52a5b91be64c4776f827a163dda1 upstream. Correct the check for vblank short. Signed-off-by: Evan Quan Reviewed-by: Alex Deucher Tested-by: Alex Deucher Signed-off-by: Alex Deucher Cc: sta...@vger.kernel.org Signed-off-by: Greg Kroah-Hartman --- drivers/gpu

[PATCH 5.11 084/152] s390/vdso: copy tod_steering_delta value to vdso_data page

2021-04-05 Thread Greg Kroah-Hartman
From: Heiko Carstens commit 72bbc226ed2ef0a46c165a482861fff00dd6d4e1 upstream. When converting the vdso assembler code to C it was forgotten to actually copy the tod_steering_delta value to vdso_data page. Which in turn means that tod clock steering will not work correctly. Fix this by simply

[PATCH 5.11 095/152] drm/imx: fix memory leak when fails to init

2021-04-05 Thread Greg Kroah-Hartman
From: Pan Bian commit 69c3ed7282a143439bbc2d03dc00d49c68fcb629 upstream. Put DRM device on initialization failure path rather than directly return error code. Fixes: a67d5088ceb8 ("drm/imx: drop explicit drm_mode_config_cleanup") Signed-off-by: Pan Bian Signed-off-by: Philipp Zabel Signed-off

[PATCH 5.11 091/152] drm/amdgpu: fix offset calculation in amdgpu_vm_bo_clear_mappings()

2021-04-05 Thread Greg Kroah-Hartman
From: Nirmoy Das commit 5e61b84f9d3ddfba73091f9fbc940caae1c9eb22 upstream. Offset calculation wasn't correct as start addresses are in pfn not in bytes. CC: sta...@vger.kernel.org Signed-off-by: Nirmoy Das Reviewed-by: Christian König Signed-off-by: Alex Deucher Signed-off-by: Greg Kroah-Har

[PATCH 5.11 097/152] drm/tegra: sor: Grab runtime PM reference across reset

2021-04-05 Thread Greg Kroah-Hartman
From: Thierry Reding commit ac097aecfef0bb289ca53d2fe0b73fc7e1612a05 upstream. The SOR resets are exclusively shared with the SOR power domain. This means that exclusive access can only be granted temporarily and in order for that to work, a rigorous sequence must be observed. To ensure that a s

[PATCH 5.11 096/152] drm/tegra: dc: Restore coupling of display controllers

2021-04-05 Thread Greg Kroah-Hartman
From: Thierry Reding commit a31500fe7055451ed9043c8fff938dfa6f70ee37 upstream. Coupling of display controllers used to rely on runtime PM to take the companion controller out of reset. Commit fd67e9c6ed5a ("drm/tegra: Do not implement runtime PM") accidentally broke this when runtime PM was remo

[PATCH 5.11 068/152] ACPI: tables: x86: Reserve memory occupied by ACPI tables

2021-04-05 Thread Greg Kroah-Hartman
From: Rafael J. Wysocki commit 1a1c130ab7575498eed5bcf7220037ae09cd1f8a upstream. The following problem has been reported by George Kennedy: Since commit 7fef431be9c9 ("mm/page_alloc: place pages to tail in __free_pages_core()") the following use after free occurs intermittently when ACPI ta

<    1   2   3   4   5   6   7   8   9   10   >