[PATCH 5.7 366/393] mtd: rawnand: qcom: avoid write to unavailable register

2020-08-17 Thread Greg Kroah-Hartman
From: Sivaprakash Murugesan commit 443440cc4a901af462239d286cd10721aa1c7dfc upstream. SFLASHC_BURST_CFG is only available on older ipq NAND platforms, this register has been removed when the NAND controller got implemented in the qpic controller. Avoid writing this register on devices which

[PATCH 5.7 354/393] drm/ttm/nouveau: dont call tt destroy callback on alloc failure.

2020-08-17 Thread Greg Kroah-Hartman
From: Dave Airlie commit 5de5b6ecf97a021f29403aa272cb4e03318ef586 upstream. This is confusing, and from my reading of all the drivers only nouveau got this right. Just make the API act under driver control of it's own allocation failing, and don't call destroy, if the page table fails to

[PATCH 5.7 377/393] ARM: 8992/1: Fix unwind_frame for clang-built kernels

2020-08-17 Thread Greg Kroah-Hartman
From: Nathan Huckleberry commit b4d5ec9b39f8b31d98f65bc5577b5d15d93795d7 upstream. Since clang does not push pc and sp in function prologues, the current implementation of unwind_frame does not work. By using the previous frame's lr/fp instead of saved pc/sp we get valid unwinds on clang-built

[PATCH 5.7 372/393] Revert "parisc: Revert "Release spinlocks using ordered store""

2020-08-17 Thread Greg Kroah-Hartman
From: Helge Deller commit 157e9afcc4fa25068b0e8743bc254a9b56010e13 upstream. This reverts commit 86d4d068df573a8c2105554624796c086d6bec3d. Signed-off-by: Helge Deller Cc: # v5.0+ Signed-off-by: Greg Kroah-Hartman --- arch/parisc/include/asm/spinlock.h |4 ++--

[PATCH 5.7 375/393] parisc: mask out enable and reserved bits from sba imask

2020-08-17 Thread Greg Kroah-Hartman
From: Sven Schnelle commit 5b24993c21cbf2de11aff077a48c5cb0505a0450 upstream. When using kexec the SBA IOMMU IBASE might still have the RE bit set. This triggers a WARN_ON when trying to write back the IBASE register later, and it also makes some mask calculations fail. Cc: Signed-off-by:

Re: [RFT 12/16] memory: brcmstb_dpfe: Add separate entry for compile test

2020-08-17 Thread Krzysztof Kozlowski
On Fri, Jul 24, 2020 at 11:40:09AM -0700, Florian Fainelli wrote: > On 7/24/20 11:23 AM, Krzysztof Kozlowski wrote: > > Add separate entry for Broadcom STB DPFE driver, selected by platforms > > by default. This allows further customization and compile testing. > > > > Signed-off-by: Krzysztof

[PATCH 5.7 378/393] firmware: qcom_scm: Fix legacy convention SCM accessors

2020-08-17 Thread Greg Kroah-Hartman
From: Jonathan McDowell commit b88c28280c3f7097546db93824686db1e7dceee1 upstream. The move to a combined driver for the QCOM SCM hardware changed the io_writel and io_readl helpers to use non-atomic calls, despite the commit message saying that atomic was a better option. This breaks these

[PATCH 2/2 v4] usb: typec: pd: Fix formatting in pd.h header

2020-08-17 Thread Badhri Jagan Sridharan
Replacing spaces with tabs for PD_T_* constants. Signed-off-by: Badhri Jagan Sridharan Reviewed-by: Guenter Roeck Reviewed-by: Heikki Krogerus --- Change history: -First version at v3. Keeping the version number same as the parent. Changes since v3: -Added Reviewed-by tags ---

[PATCH 1/2 v4] tcpm: During PR_SWAP, source caps should be sent only after tSwapSourceStart

2020-08-17 Thread Badhri Jagan Sridharan
The patch addresses the compliance test failures while running TD.PD.CP.E3, TD.PD.CP.E4, TD.PD.CP.E5 of the "Deterministic PD Compliance MOI" test plan published in https://www.usb.org/usbc. For a product to be Type-C compliant, it's expected that these tests are run on usb.org certified Type-C

Re: [PATCH v2] RAS/CEC: Fix cec_init prototype

2020-08-17 Thread Sami Tolvanen
On Mon, Aug 17, 2020 at 8:13 AM Borislav Petkov wrote: > > On Wed, Aug 12, 2020 at 02:09:09PM -0700, Sami Tolvanen wrote: > > The type mismatch broke allyesconfig in my test tree and your patch > > fixes the issue. > > How are you building your allyesconfigs? Because allyesconfig works here >

[PATCH 5.7 381/393] xen/balloon: fix accounting in alloc_xenballooned_pages error path

2020-08-17 Thread Greg Kroah-Hartman
From: Roger Pau Monne commit 1951fa33ec259abdf3497bfee7b63e7ddbb1a394 upstream. target_unpopulated is incremented with nr_pages at the start of the function, but the call to free_xenballooned_pages will only subtract pgno number of pages, and thus the rest need to be subtracted before returning

Re: [PATCH 10/16] memory: omap-gpmc: Consistently use !res for NULL checks

2020-08-17 Thread Krzysztof Kozlowski
On Fri, Jul 24, 2020 at 08:23:22PM +0200, Krzysztof Kozlowski wrote: > The driver already uses 'if (!res)' pattern in the probe function so be > consistent. > > Signed-off-by: Krzysztof Kozlowski > --- > drivers/memory/omap-gpmc.c | 2 +- Applied. Best regards, Krzysztof

[PATCH 5.7 382/393] xen/balloon: make the balloon wait interruptible

2020-08-17 Thread Greg Kroah-Hartman
From: Roger Pau Monne commit 88a479ff6ef8af7f07e11593d58befc644244ff7 upstream. So it can be killed, or else processes can get hung indefinitely waiting for balloon pages. Signed-off-by: Roger Pau Monné Reviewed-by: Juergen Gross Cc: sta...@vger.kernel.org Link:

[PATCH 5.7 356/393] io_uring: use TWA_SIGNAL for task_work uncondtionally

2020-08-17 Thread Greg Kroah-Hartman
From: Jens Axboe commit 0ba9c9edcd152158a0e321a4c13ac1dfc571ff3d upstream. An earlier commit: b7db41c9e03b ("io_uring: fix regression with always ignoring signals in io_cqring_wait()") ensured that we didn't get stuck waiting for eventfd reads when it's registered with the io_uring ring for

[PATCH 5.7 384/393] drm/xen-front: Fix misused IS_ERR_OR_NULL checks

2020-08-17 Thread Greg Kroah-Hartman
From: Oleksandr Andrushchenko commit 14dee058610446aa464254fc5c8e88c7535195e0 upstream. The patch c575b7eeb89f: "drm/xen-front: Add support for Xen PV display frontend" from Apr 3, 2018, leads to the following static checker warning: drivers/gpu/drm/xen/xen_drm_front_gem.c:140

[PATCH 5.7 044/393] regulator: fix memory leak on error path of regulator_register()

2020-08-17 Thread Greg Kroah-Hartman
From: Vladimir Zapolskiy [ Upstream commit 9177514ce34902b3adb2abd490b6ad05d1cfcb43 ] The change corrects registration and deregistration on error path of a regulator, the problem was manifested by a reported memory leak on deferred probe: as3722-regulator as3722-regulator: regulator 13

[PATCH 5.7 355/393] io_uring: set ctx sq/cq entry count earlier

2020-08-17 Thread Greg Kroah-Hartman
From: Jens Axboe commit bd74048108c179cea0ff52979506164c80f29da7 upstream. If we hit an earlier error path in io_uring_create(), then we will have accounted memory, but not set ctx->{sq,cq}_entries yet. Then when the ring is torn down in error, we use those values to unaccount the memory.

Re: [PATCH v2] lib/string.c: implement stpcpy

2020-08-17 Thread Nick Desaulniers
On Mon, Aug 17, 2020 at 10:14 AM Sami Tolvanen wrote: > > On Sun, Aug 16, 2020 at 8:02 AM Arvind Sankar wrote: > > > > On Sun, Aug 16, 2020 at 07:22:35AM +0200, Sedat Dilek wrote: > > > On Sun, Aug 16, 2020 at 2:19 AM 'Fangrui Song' via Clang Built Linux > > > wrote: > > > > > > > > Adding a

[PATCH 5.7 388/393] io_uring: sanitize double poll handling

2020-08-17 Thread Greg Kroah-Hartman
From: Jens Axboe commit d4e7cd36a90e38e0276d6ce0c20f5ccef17ec38c upstream. There's a bit of confusion on the matching pairs of poll vs double poll, depending on if the request is a pure poll (IORING_OP_POLL_ADD) or poll driven retry. Add io_poll_get_double() that returns the double poll

Re: v5.9-rc1 commit reliably breaks pci nvme detection

2020-08-17 Thread Jens Axboe
On 8/17/20 8:56 AM, Keith Busch wrote: > On Mon, Aug 17, 2020 at 03:50:11PM +0200, Ahmed S. Darwish wrote: >> Hello, >> >> Below v5.9-rc1 commit reliably breaks my boot on a Thinkpad e480 >> laptop. PCI nvme detection fails, and the kernel becomes not able >> anymore to find the rootfs / parse

Re: [RFT 08/16] memory: omap-gpmc: Use WARN() instead of BUG() on wrong free

2020-08-17 Thread Krzysztof Kozlowski
On Fri, Jul 24, 2020 at 08:23:20PM +0200, Krzysztof Kozlowski wrote: > Since driver tracks reserved memory, freeing a non-reserved GPMC should > not be fatal and crash the system. Printing a warning is friendlier. > > Signed-off-by: Krzysztof Kozlowski > > --- > > Not tested on HW. > --- >

[PATCH 5.7 361/393] cpufreq: dt: fix oops on armada37xx

2020-08-17 Thread Greg Kroah-Hartman
From: Ivan Kokshaysky commit 10470dec3decaf5ed3c596f85debd7c42777ae12 upstream. Commit 0c868627e617e43a295d8 (cpufreq: dt: Allow platform specific intermediate callbacks) added two function pointers to the struct cpufreq_dt_platform_data. However, armada37xx_cpufreq_driver_init() has this

[PATCH 5.7 357/393] io_uring: fail poll arm on queue proc failure

2020-08-17 Thread Greg Kroah-Hartman
From: Jens Axboe commit a36da65c46565d2527eec3efdb546251e38253fd upstream. Check the ipt.error value, it must have been either cleared to zero or set to another error than the default -EINVAL if we don't go through the waitqueue proc addition. Just give up on poll at that point and return

[PATCH 5.7 387/393] s390/gmap: improve THP splitting

2020-08-17 Thread Greg Kroah-Hartman
From: Gerald Schaefer commit ba925fa35057a062ac98c3e8138b013ce4ce351c upstream. During s390_enable_sie(), we need to take care of splitting all qemu user process THP mappings. This is currently done with follow_page(FOLL_SPLIT), by simply iterating over all vma ranges, with PAGE_SIZE increment.

[PATCH 5.7 352/393] driver core: Fix probe_count imbalance in really_probe()

2020-08-17 Thread Greg Kroah-Hartman
From: Tetsuo Handa commit b292b50b0efcc7095d8bf15505fba6909bb35dce upstream. syzbot is reporting hung task in wait_for_device_probe() [1]. At least, we always need to decrement probe_count if we incremented probe_count in really_probe(). However, since I can't find "Resources present before

[PATCH 5.4 010/270] arm64: dts: rockchip: fix rk3399-puma vcc5v0-host gpio

2020-08-17 Thread Greg Kroah-Hartman
From: Heiko Stuebner [ Upstream commit 7a7184f6cfa9279f1a1c10a1845d247d7fad54ff ] The puma vcc5v0_host regulator node currently uses opposite active-values for the enable pin. The gpio-declaration uses active-high while the separate enable-active-low property marks the pin as active low. While

[PATCH 5.7 385/393] s390/dasd: fix inability to use DASD with DIAG driver

2020-08-17 Thread Greg Kroah-Hartman
From: Stefan Haberland commit 9f4aa52387c68049403b59939df5c0dd8e3872cc upstream. During initialization of the DASD DIAG driver a request is issued that has a bio structure that resides on the stack. With virtually mapped kernel stacks this bio address might be in virtual storage which is

[PATCH 5.7 393/393] io_uring: hold ctx reference around task_work queue + execute

2020-08-17 Thread Greg Kroah-Hartman
From: Jens Axboe commit 6d816e088c359866f9867057e04f244c608c42fe upstream. We're holding the request reference, but we need to go one higher to ensure that the ctx remains valid after the request has finished. If the ring is closed with pending task_work inflight, and the given io_kiocb

Re: [PATCH v2 24/29] memory: tegra: tegra210-emc: Fix indentation

2020-08-17 Thread Krzysztof Kozlowski
On Fri, Jul 24, 2020 at 09:40:33AM +0200, Krzysztof Kozlowski wrote: > Use tabs instead of spaces for indentation. > > Signed-off-by: Krzysztof Kozlowski > --- > drivers/memory/tegra/tegra210-emc-cc-r21021.c | 2 +- Applied. Best regards, Krzysztof

[PATCH 5.7 389/393] io_uring: Fix NULL pointer dereference in loop_rw_iter()

2020-08-17 Thread Greg Kroah-Hartman
From: Guoyu Huang commit 2dd2111d0d383df104b144e0d1f6b5a00cb7cd88 upstream. loop_rw_iter() does not check whether the file has a read or write function. This can lead to NULL pointer dereference when the user passes in a file descriptor that does not have read or write function. The crash log

[PATCH 5.7 390/393] task_work: only grab task signal lock when needed

2020-08-17 Thread Greg Kroah-Hartman
From: Jens Axboe commit ebf0d100df0731901c16632f78d78d35f4123bc4 upstream. If JOBCTL_TASK_WORK is already set on the targeted task, then we need not go through {lock,unlock}_task_sighand() to set it again and queue a signal wakeup. This is safe as we're checking it _after_ adding the new

Re: [PATCH 1/2] x86/MCE/AMD, EDAC/mce_amd: Use AMD NodeId for Family17h+ DRAM Decode

2020-08-17 Thread Yazen Ghannam
On Sat, Aug 15, 2020 at 10:42:12AM +0200, Ingo Molnar wrote: > > * Yazen Ghannam wrote: > > > From: Yazen Ghannam > > > > The edac_mce_amd module calls decode_dram_ecc() on AMD Family17h and > > later systems. This function is used in amd64_edac_mod to do > > system-specific decoding for DRAM

[PATCH 5.4 018/270] firmware: arm_scmi: Fix SCMI genpd domain probing

2020-08-17 Thread Greg Kroah-Hartman
From: Cristian Marussi [ Upstream commit e0f1a30cf184821499eeb67daedd7a3f21bbcb0b ] When, at probe time, an SCMI communication failure inhibits the capacity to query power domains states, such domains should be skipped. Registering partially initialized SCMI power domains with genpd will

[PATCH 5.4 001/270] tracepoint: Mark __tracepoint_strings __used

2020-08-17 Thread Greg Kroah-Hartman
From: Nick Desaulniers commit f3751ad0116fb6881f2c3c957d66a9327f69cefb upstream. __tracepoint_string's have their string data stored in .rodata, and an address to that data stored in the "__tracepoint_str" section. Functions that refer to those strings refer to the symbol of the address.

[PATCH 5.4 016/270] crypto: ccree - fix resource leak on error path

2020-08-17 Thread Greg Kroah-Hartman
From: Gilad Ben-Yossef [ Upstream commit 9bc6165d608d676f05d8bf156a2c9923ee38d05b ] Fix a small resource leak on the error path of cipher processing. Signed-off-by: Gilad Ben-Yossef Fixes: 63ee04c8b491e ("crypto: ccree - add skcipher support") Cc: Markus Elfring Signed-off-by: Herbert Xu

[PATCH 5.4 015/270] blktrace: fix debugfs use after free

2020-08-17 Thread Greg Kroah-Hartman
From: Luis Chamberlain [ Upstream commit bad8e64fb19d3a0de5e564d9a7271c31bd684369 ] On commit 6ac93117ab00 ("blktrace: use existing disk debugfs directory") merged on v4.12 Omar fixed the original blktrace code for request-based drivers (multiqueue). This however left in place a possible crash,

Re: [PATCH v2 16/29] memory: renesas-rpc-if: Simplify with PTR_ERR_OR_ZERO

2020-08-17 Thread Krzysztof Kozlowski
On Fri, Jul 24, 2020 at 09:40:25AM +0200, Krzysztof Kozlowski wrote: > Use PTR_ERR_OR_ZERO to make the code a little bit simpler. > > Signed-off-by: Krzysztof Kozlowski > --- > drivers/memory/renesas-rpc-if.c | 4 +--- Applied. Best regards, Krzysztof

[PATCH 5.4 011/270] arm64: dts: rockchip: fix rk3399-puma gmac reset gpio

2020-08-17 Thread Greg Kroah-Hartman
From: Heiko Stuebner [ Upstream commit 8a445086f8af0b7b9bd8d1901d6f306bb154f70d ] The puma gmac node currently uses opposite active-values for the gmac phy reset pin. The gpio-declaration uses active-high while the separate snps,reset-active-low property marks the pin as active low. While on

[PATCH 5.4 019/270] arm64: dts: exynos: Fix silent hang after boot on Espresso

2020-08-17 Thread Greg Kroah-Hartman
From: Alim Akhtar [ Upstream commit b072714bfc0e42c984b8fd6e069f3ca17de8137a ] Once regulators are disabled after kernel boot, on Espresso board silent hang observed because of LDO7 being disabled. LDO7 actually provide power to CPU cores and non-cpu blocks circuitries. Keep this regulator

[PATCH 5.4 022/270] m68k: mac: Dont send IOP message until channel is idle

2020-08-17 Thread Greg Kroah-Hartman
From: Finn Thain [ Upstream commit aeb445bf2194d83e12e85bf5c65baaf1f093bd8f ] In the following sequence of calls, iop_do_send() gets called when the "send" channel is not in the IOP_MSG_IDLE state: iop_ism_irq() iop_handle_send() (msg->handler)()

[PATCH 5.4 020/270] sched/uclamp: Fix initialization of struct uclamp_rq

2020-08-17 Thread Greg Kroah-Hartman
From: Qais Yousef [ Upstream commit d81ae8aac85ca2e307d273f6dc7863a721bf054e ] struct uclamp_rq was zeroed out entirely in assumption that in the first call to uclamp_rq_inc() they'd be initialized correctly in accordance to default settings. But when next patch introduces a static key to skip

[PATCH 5.4 025/270] platform/x86: intel-vbtn: Fix return value check in check_acpi_dev()

2020-08-17 Thread Greg Kroah-Hartman
From: Lu Wei [ Upstream commit 64dd4a5a7d214a07e3d9f40227ec30ac8ba8796e ] In the function check_acpi_dev(), if it fails to create platform device, the return value is ERR_PTR() or NULL. Thus it must use IS_ERR_OR_NULL() to check return value. Fixes: 332e081225fc ("intel-vbtn: new driver for

[PATCH 5.4 021/270] clk: scmi: Fix min and max rate when registering clocks with discrete rates

2020-08-17 Thread Greg Kroah-Hartman
From: Sudeep Holla [ Upstream commit fcd2e0deae50bce48450f14c8fc5611b08d7438c ] Currently we are not initializing the scmi clock with discrete rates correctly. We fetch the min_rate and max_rate value only for clocks with ranges and ignore the ones with discrete rates. This will lead to wrong

[PATCH 5.4 024/270] platform/x86: intel-hid: Fix return value check in check_acpi_dev()

2020-08-17 Thread Greg Kroah-Hartman
From: Lu Wei [ Upstream commit 71fbe886ce6dd0be17f20aded9c63fe58edd2806 ] In the function check_acpi_dev(), if it fails to create platform device, the return value is ERR_PTR() or NULL. Thus it must use IS_ERR_OR_NULL() to check return value. Fixes: ecc83e52b28c ("intel-hid: new hid event

[PATCH 5.4 003/270] nvme: add a Identify Namespace Identification Descriptor list quirk

2020-08-17 Thread Greg Kroah-Hartman
From: Christoph Hellwig commit 5bedd3afee8eb01ccd256f0cd2cc0fa6f841417a upstream. Add a quirk for a device that does not support the Identify Namespace Identification Descriptor list despite claiming 1.3 compliance. Fixes: ea43d9709f72 ("nvme: fix identify error status silent ignore")

[PATCH 5.4 023/270] m68k: mac: Fix IOP status/control register writes

2020-08-17 Thread Greg Kroah-Hartman
From: Finn Thain [ Upstream commit 931fc82a6aaf4e2e4a5490addaa6a090d78c24a7 ] When writing values to the IOP status/control register make sure those values do not have any extraneous bits that will clear interrupt flags. To place the SCC IOP into bypass mode would be desirable but this is not

Re: [RFT v2 21/29] memory: omap-gpmc: Remove GPMC_SET_ONE_CD_MAX macro for safety

2020-08-17 Thread Krzysztof Kozlowski
On Fri, Jul 24, 2020 at 09:40:30AM +0200, Krzysztof Kozlowski wrote: > The GPMC_SET_ONE_CD_MAX macro uses return statement and variable 'cs' > coming from called scope. This is not a good practice. Also > checkpatch complained: > > WARNING: Macros with flow control statements should be

Re: [RFT v2 20/29] memory: omap-gpmc: Return meaningful error codes in gpmc_cs_set_timings()

2020-08-17 Thread Krzysztof Kozlowski
On Fri, Jul 24, 2020 at 09:40:29AM +0200, Krzysztof Kozlowski wrote: > The callers of gpmc_cs_set_timings() expect to receive -ERRNO on errors > and they pass further what they have received. > > However gpmc_cs_set_timings() was returning -1 (equal to -EPERM) which > does not make sense in this

[PATCH 5.4 009/270] arm64: dts: rockchip: fix rk3368-lion gmac reset gpio

2020-08-17 Thread Greg Kroah-Hartman
From: Heiko Stuebner [ Upstream commit 2300e6dab473e93181cf76e4fe6671aa3d24c57b ] The lion gmac node currently uses opposite active-values for the gmac phy reset pin. The gpio-declaration uses active-high while the separate snps,reset-active-low property marks the pin as active low. While on

[PATCH 5.4 006/270] x86/mce/inject: Fix a wrong assignment of i_mce.status

2020-08-17 Thread Greg Kroah-Hartman
From: Zhenzhong Duan [ Upstream commit 5d7f7d1d5e01c22894dee7c9c9266500478dca99 ] The original code is a nop as i_mce.status is or'ed with part of itself, fix it. Fixes: a1300e505297 ("x86/ras/mce_amd_inj: Trigger deferred and thresholding errors interrupts") Signed-off-by: Zhenzhong Duan

Re: [PATCH] x86/hotplug: Silence APIC only after all irq's are migrated

2020-08-17 Thread Raj, Ashok
Hi Evan Some details below, On Mon, Aug 17, 2020 at 11:12:17AM -0700, Evan Green wrote: > Hi Ashok, > Thank you, Srikanth, and Sukumar for some very impressive debugging here. > > On Fri, Aug 14, 2020 at 2:38 PM Ashok Raj wrote: > > > > When offlining CPU's, fixup_irqs() migrates all

[PATCH 5.4 007/270] sched/fair: Fix NOHZ next idle balance

2020-08-17 Thread Greg Kroah-Hartman
From: Vincent Guittot [ Upstream commit 3ea2f097b17e13a8280f1f9386c331b326a3dbef ] With commit: 'b7031a02ec75 ("sched/fair: Add NOHZ_STATS_KICK")' rebalance_domains of the local cfs_rq happens before others idle cpus have updated nohz.next_balance and its value is overwritten. Move the

Re: Odd-sized kmem_cache_alloc and slub_debug=Z

2020-08-17 Thread Marco Elver
On Fri, 7 Aug 2020 at 21:06, Pekka Enberg wrote: ... > Yeah, it reproduces with defconfig too, as long as you remember to > pass "slub_debug=Z"... :-/ > > The following seems to be the culprit: > > commit 3202fa62fb43087387c65bfa9c100feffac74aa6 > Author: Kees Cook > Date: Wed Apr 1 21:04:27

[PATCH 5.4 008/270] sched: correct SD_flags returned by tl->sd_flags()

2020-08-17 Thread Greg Kroah-Hartman
From: Peng Liu [ Upstream commit 9b1b234bb86bcdcdb142e900d39b599185465dbb ] During sched domain init, we check whether non-topological SD_flags are returned by tl->sd_flags(), if found, fire a waning and correct the violation, but the code failed to correct the violation. Correct this. Fixes:

[PATCH 5.4 027/270] ARM: dts: gose: Fix ports node name for adv7612

2020-08-17 Thread Greg Kroah-Hartman
From: Niklas Söderlund [ Upstream commit 59692ac5a7bb8c97ff440fc8917828083fbc38d6 ] When adding the adv7612 device node the ports node was misspelled as port, fix this. Fixes: bc63cd87f3ce924f ("ARM: dts: gose: add HDMI input") Signed-off-by: Niklas Söderlund Link:

Re: [RFT v2 02/29] memory: omap-gpmc: Remove unused file-scope phys_base and mem_size

2020-08-17 Thread Krzysztof Kozlowski
On Fri, Jul 24, 2020 at 09:40:11AM +0200, Krzysztof Kozlowski wrote: > The file-scope variables phys_base and mem_size are assigned in > gpmc_probe() but never read. > > This fixes build error when compile testing on x86_64 architecture: > > drivers/memory/omap-gpmc.c:246:24: error:

[PATCH 5.4 000/270] 5.4.59-rc1 review

2020-08-17 Thread Greg Kroah-Hartman
This is the start of the stable review cycle for the 5.4.59 release. There are 270 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 19 Aug 2020 14:36:49 +. Anything

[PATCH 5.4 040/270] seccomp: Fix ioctl number for SECCOMP_IOCTL_NOTIF_ID_VALID

2020-08-17 Thread Greg Kroah-Hartman
From: Kees Cook [ Upstream commit 47e33c05f9f07cac3de833e531bcac9ae052c7ca ] When SECCOMP_IOCTL_NOTIF_ID_VALID was first introduced it had the wrong direction flag set. While this isn't a big deal as nothing currently enforces these bits in the kernel, it should be defined correctly. Fix the

[PATCH 5.4 043/270] nvme-rdma: fix controller reset hang during traffic

2020-08-17 Thread Greg Kroah-Hartman
From: Sagi Grimberg [ Upstream commit 9f98772ba307dd89a3d17dc2589f213d3972fc64 ] commit fe35ec58f0d3 ("block: update hctx map when use multiple maps") exposed an issue where we may hang trying to wait for queue freeze during I/O. We call blk_mq_update_nr_hw_queues which in case of multiple

[PATCH 5.4 042/270] nvme-tcp: fix controller reset hang during traffic

2020-08-17 Thread Greg Kroah-Hartman
From: Sagi Grimberg [ Upstream commit 2875b0aecabe2f081a8432e2bc85b85df0529490 ] commit fe35ec58f0d3 ("block: update hctx map when use multiple maps") exposed an issue where we may hang trying to wait for queue freeze during I/O. We call blk_mq_update_nr_hw_queues which in case of multiple

[PATCH 5.4 037/270] ARM: socfpga: PM: add missing put_device() call in socfpga_setup_ocram_self_refresh()

2020-08-17 Thread Greg Kroah-Hartman
From: Yu Kuai [ Upstream commit 3ad7b4e8f89d6bcc9887ca701cf2745a6aedb1a0 ] if of_find_device_by_node() succeed, socfpga_setup_ocram_self_refresh doesn't have a corresponding put_device(). Thus add a jump target to fix the exception handling for this function implementation. Fixes: 44fd8c7d4005

[PATCH 5.4 036/270] spi: rockchip: Fix error in SPI slave pio read

2020-08-17 Thread Greg Kroah-Hartman
From: Jon Lin [ Upstream commit 4294e4accf8d695ea5605f6b189008b692e3e82c ] The RXFLR is possible larger than rx_left in Rockchip SPI, fix it. Fixes: 01b59ce5dac8 ("spi: rockchip: use irq rather than polling") Signed-off-by: Jon Lin Tested-by: Emil Renner Berthing Reviewed-by: Heiko Stuebner

[PATCH 5.4 045/270] nvme-multipath: do not fall back to __nvme_find_path() for non-optimized paths

2020-08-17 Thread Greg Kroah-Hartman
From: Hannes Reinecke [ Upstream commit fbd6a42d8932e172921c7de10468a2e12c34846b ] When nvme_round_robin_path() finds a valid namespace we should be using it; falling back to __nvme_find_path() for non-optimized paths will cause the result from nvme_round_robin_path() to be ignored for

[PATCH 5.4 047/270] soc: qcom: rpmh-rsc: Set suppress_bind_attrs flag

2020-08-17 Thread Greg Kroah-Hartman
From: Maulik Shah [ Upstream commit 1a53ce9ab4faeb841b33d62d23283dc76c0e7c5a ] rpmh-rsc driver is fairly core to system and should not be removable once its probed. However it allows to unbind driver from sysfs using below command which results into a crash on sc7180. echo 1820.rsc >

[PATCH 5.4 041/270] md: raid0/linear: fix dereference before null check on pointer mddev

2020-08-17 Thread Greg Kroah-Hartman
From: Colin Ian King [ Upstream commit 9a5a85972c073f720d81a7ebd08bfe278e6e16db ] Pointer mddev is being dereferenced with a test_bit call before mddev is being null checked, this may cause a null pointer dereference. Fix this by moving the null pointer checks to sanity check mddev before it is

[PATCH 5.4 048/270] Bluetooth: add a mutex lock to avoid UAF in do_enale_set

2020-08-17 Thread Greg Kroah-Hartman
From: Lihong Kou [ Upstream commit f9c70bdc279b191da8d60777c627702c06e4a37d ] In the case we set or free the global value listen_chan in different threads, we can encounter the UAF problems because the method is not protected by any lock, add one to avoid this bug. BUG: KASAN: use-after-free

[PATCH 5.4 049/270] loop: be paranoid on exit and prevent new additions / removals

2020-08-17 Thread Greg Kroah-Hartman
From: Luis Chamberlain [ Upstream commit 200f93377220504c5e56754823e7adfea6037f1a ] Be pedantic on removal as well and hold the mutex. This should prevent uses of addition while we exit. Signed-off-by: Luis Chamberlain Reviewed-by: Ming Lei Reviewed-by: Christoph Hellwig Signed-off-by: Jens

[PATCH 5.4 046/270] drm/tilcdc: fix leak & null ref in panel_connector_get_modes

2020-08-17 Thread Greg Kroah-Hartman
From: Tomi Valkeinen [ Upstream commit 3f9c1c872cc97875ddc8d63bc9fe6ee13652b933 ] If videomode_from_timings() returns true, the mode allocated with drm_mode_create will be leaked. Also, the return value of drm_mode_create() is never checked, and thus could cause NULL deref. Fix these two

[PATCH 5.4 052/270] drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync

2020-08-17 Thread Greg Kroah-Hartman
From: Aditya Pakki [ Upstream commit 9fb10671011143d15b6b40d6d5fa9c52c57e9d63 ] On calling pm_runtime_get_sync() the reference count of the device is incremented. In case of failure, decrement the reference count before returning the error. Acked-by: Evan Quan Signed-off-by: Aditya Pakki

[PATCH 5.4 029/270] ARM: dts: sunxi: bananapi-m2-plus-v1.2: Add regulator supply to all CPU cores

2020-08-17 Thread Greg Kroah-Hartman
From: Chen-Yu Tsai [ Upstream commit 55b271af765b0e03d1ff29502f81644b1a3c87fd ] The device tree currently only assigns the a supply for the first CPU core, when in reality the regulator supply is shared by all four cores. This might cause an issue if the implementation does not realize the

[PATCH 5.4 054/270] video: fbdev: savage: fix memory leak on error handling path in probe

2020-08-17 Thread Greg Kroah-Hartman
From: Evgeny Novikov [ Upstream commit e8d35898a78e34fc854ed9680bc3f9caedab08cd ] savagefb_probe() calls savage_init_fb_info() that can successfully allocate memory for info->pixmap.addr but then fail when fb_alloc_cmap() fails. savagefb_probe() goes to label failed_init and does not free

[PATCH 5.4 051/270] drm/amdgpu: avoid dereferencing a NULL pointer

2020-08-17 Thread Greg Kroah-Hartman
From: Jack Xiao [ Upstream commit 55611b507fd6453d26030c0c0619fdf0c262766d ] Check if irq_src is NULL to avoid dereferencing a NULL pointer, for MES ring is uneccessary to recieve an interrupt notification. Signed-off-by: Jack Xiao Acked-by: Alex Deucher Reviewed-by: Hawking Zhang

Re: [PATCH 08/30] net: wireless: ath: carl9170: Mark 'ar9170_qmap' as __maybe_unused

2020-08-17 Thread Christian Lamparter
On 2020-08-17 14:59, Kalle Valo wrote: Rasmus Villemoes writes: On 14/08/2020 17.14, Christian Lamparter wrote: On 2020-08-14 13:39, Lee Jones wrote: 'ar9170_qmap' is used in some source files which include carl9170.h, but not all of them.  Mark it as __maybe_unused to show that this is not

Re: Oops on current Raspian when closing an SCTP connection

2020-08-17 Thread Corey Minyard
On Mon, Aug 17, 2020 at 10:44:57AM -0300, Marcelo Ricardo Leitner wrote: > On Sun, Aug 16, 2020 at 06:06:24PM -0500, Corey Minyard wrote: > > I'm seeing the following when an SCTP connection terminates. This is on > > Raspian on a Raspberry Pi, version is Linux version 5.4.51-v7+. That's > >

[PATCH 5.4 056/270] bus: ti-sysc: Add missing quirk flags for usb_host_hs

2020-08-17 Thread Greg Kroah-Hartman
From: Tony Lindgren [ Upstream commit 4254632dba27271f6de66efd87e444ee405dee29 ] Similar to what we have for the legacy platform data, we need to configure SWSUP_SIDLE and SWSUP_MSTANDBY quirks for usb_host_hs. These are needed to drop the legacy platform data for usb_host_hs. Signed-off-by:

Re: [PATCH RFC 2/2] lkdtm: Add heap spraying test

2020-08-17 Thread Eric W. Biederman
Alexander Popov writes: > Add a simple test for CONFIG_SLAB_QUARANTINE. > > It performs heap spraying that aims to reallocate the recently freed heap > object. This technique is used for exploiting use-after-free > vulnerabilities in the kernel code. > > This test shows that

[PATCH 5.4 033/270] recordmcount: only record relocation of type R_AARCH64_CALL26 on arm64.

2020-08-17 Thread Greg Kroah-Hartman
From: Gregory Herrero [ Upstream commit ea0eada45632f4807b2f49de951072283e2d781c ] Currently, if a section has a relocation to '_mcount' symbol, a new __mcount_loc entry will be added whatever the relocation type is. This is problematic when a relocation to '_mcount' is in the middle of a

[PATCH 5.4 030/270] ARM: dts: sunxi: bananapi-m2-plus-v1.2: Fix CPU supply voltages

2020-08-17 Thread Greg Kroah-Hartman
From: Chen-Yu Tsai [ Upstream commit e4dae01bf08b754de79072441c357737220b873f ] The Bananapi M2+ uses a GPIO line to change the effective resistance of the CPU supply regulator's feedback resistor network. The voltages described in the device tree were given directly by the vendor. This turns

[PATCH 5.4 058/270] drm/nouveau/kms/nv50-: Fix disabling dithering

2020-08-17 Thread Greg Kroah-Hartman
From: Lyude Paul [ Upstream commit fb2420b701edbf96c2b6d557f0139902f455dc2b ] While we expose the ability to turn off hardware dithering for nouveau, we actually make the mistake of turning it on anyway, due to dithering_depth containing a non-zero value if our dithering depth isn't also set to

Re: [RFT v2 01/29] memory: omap-gpmc: Remove unneeded asm/mach-types.h inclusion

2020-08-17 Thread Krzysztof Kozlowski
On Fri, Jul 24, 2020 at 09:40:10AM +0200, Krzysztof Kozlowski wrote: > The driver does not use macros from asm/mach-types.h (neither MACH_TYPE > nor machine_is_xxx()). Removal of this include allows compile testing > on non-ARM architectures which lack this header. > > Signed-off-by: Krzysztof

Re: [PATCH 12/30] net: wireless: cisco: airo: Fix a myriad of coding style issues

2020-08-17 Thread Jesse Brandeburg
On Mon, 17 Aug 2020 16:27:01 +0300 Kalle Valo wrote: > I was surprised to see that someone was using this driver in 2015, so > I'm not sure anymore what to do. Of course we could still just remove > it and later revert if someone steps up and claims the driver is still > usable. Hmm. Does anyone

[PATCH 5.4 031/270] spi: lantiq: fix: Rx overflow error in full duplex mode

2020-08-17 Thread Greg Kroah-Hartman
From: Dilip Kota [ Upstream commit 661ccf2b3f1360be50242726f7c26ced6a9e7d52 ] In full duplex mode, rx overflow error is observed. To overcome the error, wait until the complete data got received and proceed further. Fixes: 17f84b793c01 ("spi: lantiq-ssc: add support for Lantiq SSC SPI

[PATCH 5.4 057/270] md-cluster: fix wild pointer of unlock_all_bitmaps()

2020-08-17 Thread Greg Kroah-Hartman
From: Zhao Heming [ Upstream commit 60f80d6f2d07a6d8aee485a1d12523270c81 ] reproduction steps: ``` node1 # mdadm -C /dev/md0 -b clustered -e 1.2 -n 2 -l mirror /dev/sda /dev/sdb node2 # mdadm -A /dev/md0 /dev/sda /dev/sdb node1 # mdadm -G /dev/md0 -b none mdadm: failed to remove clustered

[PATCH 5.4 034/270] regulator: fix memory leak on error path of regulator_register()

2020-08-17 Thread Greg Kroah-Hartman
From: Vladimir Zapolskiy [ Upstream commit 9177514ce34902b3adb2abd490b6ad05d1cfcb43 ] The change corrects registration and deregistration on error path of a regulator, the problem was manifested by a reported memory leak on deferred probe: as3722-regulator as3722-regulator: regulator 13

[PATCH 5.4 035/270] io_uring: fix sq array offset calculation

2020-08-17 Thread Greg Kroah-Hartman
From: Dmitry Vyukov [ Upstream commit b36200f543ff07a1cb346aa582349141df2c8068 ] rings_size() sets sq_offset to the total size of the rings (the returned value which is used for memory allocation). This is wrong: sq array should be located within the rings, not after them. Set sq_offset to

[PATCH 5.4 070/270] irqchip/irq-mtk-sysirq: Replace spinlock with raw_spinlock

2020-08-17 Thread Greg Kroah-Hartman
From: Bartosz Golaszewski [ Upstream commit 6eeb997ab5075e770a002c51351fa4ec2c6b5c39 ] This driver may take a regular spinlock when a raw spinlock (irq_desc->lock) is already taken which results in the following lockdep splat: = [ BUG: Invalid wait context ]

[PATCH 5.4 071/270] mm/mmap.c: Add cond_resched() for exit_mmap() CPU stalls

2020-08-17 Thread Greg Kroah-Hartman
From: Paul E. McKenney [ Upstream commit 0a3b3c253a1eb2c7fe7f34086d46660c909abeb3 ] A large process running on a heavily loaded system can encounter the following RCU CPU stall warning: rcu: INFO: rcu_sched self-detected stall on CPU rcu: 3-: (20998 ticks this GP)

Re: [PATCH] power: supply: Add dependency to lego-ev3-battery Kconfig options

2020-08-17 Thread David Lechner
On 8/17/20 12:43 PM, Alex Dewar wrote: On Wed, Aug 12, 2020 at 02:12:57PM -0500, David Lechner wrote: On 8/12/20 2:02 PM, Alex Dewar wrote: On Wed, Aug 12, 2020 at 10:24:30AM -0500, David Lechner wrote: On 8/12/20 8:37 AM, Alex Dewar wrote: On Tue, Aug 11, 2020 at 09:24:10AM -0500, David

[PATCH 5.4 077/270] brcmfmac: set state of hanger slot to FREE when flushing PSQ

2020-08-17 Thread Greg Kroah-Hartman
From: Wright Feng [ Upstream commit fcdd7a875def793c38d7369633af3eba6c7cf089 ] When USB or SDIO device got abnormal bus disconnection, host driver tried to clean up the skbs in PSQ and TXQ (The skb's pointer in hanger slot linked to PSQ and TSQ), so we should set the state of skb hanger slot to

[PATCH 5.4 075/270] brcmfmac: keep SDIO watchdog running when console_interval is non-zero

2020-08-17 Thread Greg Kroah-Hartman
From: Wright Feng [ Upstream commit eccbf46b15bb3e35d004148f7c3a8fa8e9b26c1e ] brcmfmac host driver makes SDIO bus sleep and stops SDIO watchdog if no pending event or data. As a result, host driver does not poll firmware console buffer before buffer overflow, which leads to missing firmware

[PATCH net] ptp: ptp_clockmatrix: use i2c_master_send for i2c write

2020-08-17 Thread min.li.xe
From: Min Li The old code for i2c write would break on some controllers, which fails at handling Repeated Start Condition. So we will just use i2c_master_send to handle write in one transanction. Signed-off-by: Min Li --- drivers/ptp/ptp_clockmatrix.c | 56

[PATCH 5.4 079/270] iwlegacy: Check the return value of pcie_capability_read_*()

2020-08-17 Thread Greg Kroah-Hartman
From: Bolarinwa Olayemi Saheed [ Upstream commit 9018fd7f2a73e9b290f48a56b421558fa31e8b75 ] On failure pcie_capability_read_dword() sets it's last parameter, val to 0. However, with Patch 14/14, it is possible that val is set to ~0 on failure. This would introduce a bug because (x & x) == (~0 &

[PATCH 5.4 086/270] dyndbg: fix a BUG_ON in ddebug_describe_flags

2020-08-17 Thread Greg Kroah-Hartman
From: Jim Cromie [ Upstream commit f678ce8cc3cb2ad29df75d8824c74f36398ba871 ] ddebug_describe_flags() currently fills a caller provided string buffer, after testing its size (also passed) in a BUG_ON. Fix this by replacing them with a known-big-enough string buffer wrapped in a struct, and

Re: [PATCH v4 00/20] gpio: cdev: add uAPI v2

2020-08-17 Thread Bartosz Golaszewski
On Fri, Aug 14, 2020 at 5:03 AM Kent Gibson wrote: > > This patchset defines and implements adds a new version of the > GPIO CDEV uAPI to address existing 32/64-bit alignment issues, add > support for debounce, event sequence numbers, and allowing for requested > lines with different

[PATCH 5.4 084/270] bdc: Fix bug causing crash after multiple disconnects

2020-08-17 Thread Greg Kroah-Hartman
From: Sasi Kumar [ Upstream commit a95bdfd22076497288868c028619bc5995f5cc7f ] Multiple connects/disconnects can cause a crash on the second disconnect. The driver had a problem where it would try to send endpoint commands after it was disconnected which is not allowed by the hardware. The fix

[PATCH v3] net: qrtr: fix usage of idr in port assignment to socket

2020-08-17 Thread Necip Fazil Yildiran
From: Necip Fazil Yildiran Passing large uint32 sockaddr_qrtr.port numbers for port allocation triggers a warning within idr_alloc() since the port number is cast to int, and thus interpreted as a negative number. This leads to the rejection of such valid port numbers in qrtr_port_assign() as

[PATCH 5.4 085/270] usb: bdc: Halt controller on suspend

2020-08-17 Thread Greg Kroah-Hartman
From: Danesh Petigara [ Upstream commit 5fc453d7de3d0c345812453823a3a56783c5f82c ] GISB bus error kernel panics have been observed during S2 transition tests on the 7271t platform. The errors are a result of the BDC interrupt handler trying to access BDC register space after the system's

[PATCH 5.4 091/270] drm/bridge: ti-sn65dsi86: Clear old error bits before AUX transfers

2020-08-17 Thread Greg Kroah-Hartman
From: Douglas Anderson [ Upstream commit baef4d56195b6d6e0f681f6eac03d8c6db011d34 ] The AUX channel transfer error bits in the status register are latched and need to be cleared. Clear them before doing our transfer so we don't see old bits and get confused. Without this patch having a single

[PATCH 5.4 090/270] drm/gem: Fix a leak in drm_gem_objects_lookup()

2020-08-17 Thread Greg Kroah-Hartman
From: Dan Carpenter [ Upstream commit ec0bb482de0ad5e4aba2a4537ea53eaeb77d11a6 ] If the "handles" allocation or the copy_from_user() fails then we leak "objs". It's supposed to be freed in panfrost_job_cleanup(). Fixes: c117aa4d8701 ("drm: Add a drm_gem_objects_lookup helper") Signed-off-by:

[PATCH 5.4 062/270] drm/nouveau: fix multiple instances of reference count leaks

2020-08-17 Thread Greg Kroah-Hartman
From: Aditya Pakki [ Upstream commit 659fb5f154c3434c90a34586f3b7aa1c39cf6062 ] On calling pm_runtime_get_sync() the reference count of the device is incremented. In case of failure, decrement the ref count before returning the error. Signed-off-by: Aditya Pakki Signed-off-by: Ben Skeggs

<    6   7   8   9   10   11   12   13   14   15   >