[PATCH 5.10 462/663] r8169: fix jumbo packet handling on RTL8168e

2021-03-01 Thread Greg Kroah-Hartman
From: Heiner Kallweit [ Upstream commit 6cf739131a15e4177e58a1b4f2bede9d5da78552 ] Josef reported [0] that using jumbo packets fails on RTL8168e. Aligning the values for register MaxTxPacketSize with the vendor driver fixes the problem. [0] https://bugzilla.kernel.org/show_bug.cgi?id=211827

[PATCH 5.11 057/775] arm64: dts: qcom: sdm845-db845c: Fix reset-pin of ov8856 node

2021-03-01 Thread Greg Kroah-Hartman
From: Robert Foss [ Upstream commit d4863ef399a29cae3001b3fedfd2864e651055ba ] Switch reset pin of ov8856 node from GPIO_ACTIVE_HIGH to GPIO_ACTIVE_LOW, this issue prevented the ov8856 from probing properly as it did not respon to I2C messages. Fixes: d4919a44564b ("arm64: dts: qcom:

[PATCH 5.4 257/340] drm/amd/display: Add vupdate_no_lock interrupts for DCN2.1

2021-03-01 Thread Greg Kroah-Hartman
From: Rodrigo Siqueira commit 688f97ed3f5e339c0c2c09d9ee7ff23d5807b0a7 upstream. When run igt@kms_vrr in a device that uses DCN2.1 architecture, we noticed multiple failures. Furthermore, when we tested a VRR demo, we noticed a system hang where the mouse pointer still works, but the entire

[PATCH 5.10 562/663] media: i2c: max9286: fix access to unallocated memory

2021-03-01 Thread Greg Kroah-Hartman
From: Tomi Valkeinen commit e88ccf09e79cf33cac40316ba69c820d9eebc82b upstream. The asd allocated with v4l2_async_notifier_add_fwnode_subdev() must be of size max9286_asd, otherwise access to max9286_asd->source will go to unallocated memory. Fixes: 86d37bf31af6 ("media: i2c: max9286: Allocate

[PATCH 5.10 627/663] virtio/s390: implement virtio-ccw revision 2 correctly

2021-03-01 Thread Greg Kroah-Hartman
From: Cornelia Huck commit 182f709c5cff683e6732d04c78e328de0532284f upstream. CCW_CMD_READ_STATUS was introduced with revision 2 of virtio-ccw, and drivers should only rely on it being implemented when they negotiated at least that revision with the device. However, virtio_ccw_get_status()

[PATCH 5.10 421/663] nvmem: core: skip child nodes not matching binding

2021-03-01 Thread Greg Kroah-Hartman
From: Ahmad Fatoum [ Upstream commit 0445efacec75b85c2a3c176957ee050ba9be53f0 ] The nvmem cell binding applies to all eeprom child nodes matching "^.*@[0-9a-f]+$" without taking a compatible into account. Linux drivers, like at24, are even more extensive and assume _all_ at24 eeprom child

[PATCH 5.10 147/663] hwrng: ingenic - Fix a resource leak in an error handling path

2021-03-01 Thread Greg Kroah-Hartman
From: Christophe JAILLET [ Upstream commit c4ff41b93d1f10d1b8be258c31a0436c5769fc00 ] In case of error, we should call 'clk_disable_unprepare()' to undo a previous 'clk_prepare_enable()' call, as already done in the remove function. Fixes: 406346d22278 ("hwrng: ingenic - Add hardware TRNG for

[PATCH 5.10 103/663] net/mlx5e: Dont change interrupt moderation params when DIM is enabled

2021-03-01 Thread Greg Kroah-Hartman
From: Maxim Mikityanskiy [ Upstream commit 019f93bc4ba3a0dcb77f448ee77fc4c9c1b89565 ] When mlx5e_ethtool_set_coalesce doesn't change DIM state (enabled/disabled), it calls mlx5e_set_priv_channels_coalesce unconditionally, which in turn invokes a firmware command to set interrupt moderation

[PATCH 5.10 085/663] ath11k: fix a locking bug in ath11k_mac_op_start()

2021-03-01 Thread Greg Kroah-Hartman
From: Dan Carpenter [ Upstream commit c202e2ebe1dc454ad54fd0018c023ec553d47284 ] This error path leads to a Smatch warning: drivers/net/wireless/ath/ath11k/mac.c:4269 ath11k_mac_op_start() error: double unlocked '>conf_mutex' (orig line 4251) We're not holding the lock when we

[PATCH 5.10 430/663] mailbox: sprd: correct definition of SPRD_OUTBOX_FIFO_FULL

2021-03-01 Thread Greg Kroah-Hartman
From: Magnum Shan [ Upstream commit 4450f128c51160bfded6b483eba37d0628d7adb2 ] According to the specification, bit[2] represents SPRD_OUTBOX_FIFO_FULL, not bit[0], so correct it. Fixes: ca27fc26cd22 ("mailbox: sprd: Add Spreadtrum mailbox driver") Signed-off-by: Magnum Shan Signed-off-by:

[PATCH 5.10 440/663] nios2: fixed broken sys_clone syscall

2021-03-01 Thread Greg Kroah-Hartman
From: Andreas Oetken [ Upstream commit 9abcfcb20320e8f693e89d86573b58e6289931cb ] The tls pointer must be pushed on the stack prior to calling nios2_clone as it is the 5th function argument. Prior handling of the tls pointer was done inside former called function copy_thread_tls using the r8

[PATCH 5.11 223/775] media: software_node: Fix refcounts in software_node_get_next_child()

2021-03-01 Thread Greg Kroah-Hartman
From: Daniel Scally [ Upstream commit fb5ec981adf08b94e6ce27ca16b7765c94f4513c ] The software_node_get_next_child() function currently does not hold references to the child software_node that it finds or put the ref that is held against the old child - fix that. Fixes: 59abd83672f7 ("drivers:

[PATCH 5.11 303/775] Input: da7280 - protect OF match table with CONFIG_OF

2021-03-01 Thread Greg Kroah-Hartman
From: Dmitry Torokhov [ Upstream commit 6d2ad82fece2f5adcafe77252614fcf7211dec28 ] The OF match table is only used when OF is enabled. Fixes: cd3f609823a5 ("Input: new da7280 haptic driver") Reported-by: kernel test robot Acked-by: Roy Im Link:

[PATCH 5.10 165/663] media: vsp1: Fix an error handling path in the probe function

2021-03-01 Thread Greg Kroah-Hartman
From: Christophe JAILLET [ Upstream commit 7113469dafc2d545fa4fa9bc649c31dc27db492e ] A previous 'rcar_fcp_get()' call must be undone in the error handling path, as already done in the remove function. Fixes: 94fcdf829793 ("[media] v4l: vsp1: Add FCP support") Signed-off-by: Christophe JAILLET

[PATCH 5.10 242/663] nvme-multipath: set nr_zones for zoned namespaces

2021-03-01 Thread Greg Kroah-Hartman
From: Keith Busch [ Upstream commit 73a1a2298f3e9df24cea7a9aab412ba9470f6159 ] The bio based drivers only require the request_queue's nr_zones is set, so set this field in the head if the namespace path is zoned. Fixes: 240e6ee272c07 ("nvme: support for zoned namespaces") Reported-by: Minwoo

[PATCH 5.10 529/663] KEYS: trusted: Fix migratable=1 failing

2021-03-01 Thread Greg Kroah-Hartman
From: Jarkko Sakkinen commit 8da7520c80468c48f981f0b81fc1be6599e3b0ad upstream. Consider the following transcript: $ keyctl add trusted kmk "new 32 blobauth=helloworld keyhandle=8000 migratable=1" @u add_key: Invalid argument The documentation has the following description:

[PATCH 5.10 426/663] misc: fastrpc: fix incorrect usage of dma_map_sgtable

2021-03-01 Thread Greg Kroah-Hartman
From: Jonathan Marek [ Upstream commit b212658aebda82f92967bcbd4c7380d607c3d803 ] dma_map_sgtable() returns 0 on success, which is the opposite of what this code was doing. Fixes: 7cd7edb89437 ("misc: fastrpc: fix common struct sg_table related issues") Acked-by: Marek Szyprowski

[PATCH 5.10 219/663] ASoC: Intel: sof_sdw: add missing TGL_HDMI quirk for Dell SKU 0A5E

2021-03-01 Thread Greg Kroah-Hartman
From: Pierre-Louis Bossart [ Upstream commit f12bbc50f3b14c9b8ed902c6d1da980dd5addcce ] We missed adding the TGL_HDMI quirk which is very much needed to expose the 4 display pipelines and will be required on TGL topologies. Fixes: 9ad9bc59dde10 ('ASoC: Intel: sof_sdw: set proper flags for Dell

[PATCH 5.10 491/663] USB: serial: option: update interface mapping for ZTE P685M

2021-03-01 Thread Greg Kroah-Hartman
From: Lech Perczak commit 6420a569504e212d618d4a4736e2c59ed80a8478 upstream. This patch prepares for qmi_wwan driver support for the device. Previously "option" driver mapped itself to interfaces 0 and 3 (matching ff/ff/ff), while interface 3 is in fact a QMI port. Interfaces 1 and 2 (matching

[PATCH 5.10 104/663] net/mlx5e: Change interrupt moderation channel params also when channels are closed

2021-03-01 Thread Greg Kroah-Hartman
From: Maxim Mikityanskiy [ Upstream commit 65ba8594a238c20e458b3d2d39d91067cbffd0b1 ] struct mlx5e_params contains fields ({rx,tx}_cq_moderation) that depend on two things: whether DIM is enabled and the state of a private flag (MLX5E_PFLAG_{RX,TX}_CQE_BASED_MODER). Whenever the DIM state

[PATCH 5.10 023/663] Bluetooth: hci_uart: Fix a race for write_work scheduling

2021-03-01 Thread Greg Kroah-Hartman
From: Claire Chang [ Upstream commit afe0b1c86458f121b085271e4f3034017a90d4a3 ] In hci_uart_write_work, there is a loop/goto checking the value of HCI_UART_TX_WAKEUP. If HCI_UART_TX_WAKEUP is set again, it keeps trying hci_uart_dequeue; otherwise, it clears HCI_UART_SENDING and returns. In

[PATCH 5.4 323/340] dm writecache: fix writing beyond end of underlying device when shrinking

2021-03-01 Thread Greg Kroah-Hartman
From: Mikulas Patocka commit 4134455f2aafdfeab50cabb4cccb35e916034b93 upstream. Do not attempt to write any data beyond the end of the underlying data device while shrinking it. The DM writecache device must be suspended when the underlying data device is shrunk. Signed-off-by: Mikulas

[PATCH 5.10 479/663] blk-settings: align max_sectors on "logical_block_size" boundary

2021-03-01 Thread Greg Kroah-Hartman
From: Mikulas Patocka commit 97f433c3601a24d3513d06f575a389a2ca4e11e4 upstream. We get I/O errors when we run md-raid1 on the top of dm-integrity on the top of ramdisk. device-mapper: integrity: Bio not aligned on 8 sectors: 0xff00, 0xff device-mapper: integrity: Bio not aligned on 8 sectors:

[PATCH 5.11 381/775] objtool: Fix retpoline detection in asm code

2021-03-01 Thread Greg Kroah-Hartman
From: Josh Poimboeuf [ Upstream commit 1f9a1b74942485a0a29e7c4a9a9f2fe8aea17766 ] The JMP_NOSPEC macro branches to __x86_retpoline_*() rather than the __x86_indirect_thunk_*() wrappers used by C code. Detect jumps to __x86_retpoline_*() as retpoline dynamic jumps. Presumably this doesn't

[PATCH 5.10 628/663] um: mm: check more comprehensively for stub changes

2021-03-01 Thread Greg Kroah-Hartman
From: Johannes Berg commit 47da29763ec9a153b9b685bff9db659e4e09e494 upstream. If userspace tries to change the stub, we need to kill it, because otherwise it can escape the virtual machine. In a few cases the stub checks weren't good, e.g. if userspace just tries to mmap(0x10 -

[PATCH 5.11 109/775] net/mlx5e: Replace synchronize_rcu with synchronize_net

2021-03-01 Thread Greg Kroah-Hartman
From: Maxim Mikityanskiy [ Upstream commit 4d6e6b0c6d4bed8a7128500701354e2dc6098fa3 ] The commit cited below switched from using napi_synchronize to synchronize_rcu to have a guarantee that it will finish in finite time. However, on average, synchronize_rcu takes more time than

[PATCH 5.11 298/775] ubifs: Fix error return code in alloc_wbufs()

2021-03-01 Thread Greg Kroah-Hartman
From: Wang ShaoBo [ Upstream commit 42119dbe571eb419dae99b81dd20fa42f47464e1 ] Fix to return PTR_ERR() error code from the error handling case instead fo 0 in function alloc_wbufs(), as done elsewhere in this function. Fixes: 6a98bc4614de ("ubifs: Add authentication nodes to journal")

[PATCH 5.10 641/663] dm: fix deadlock when swapping to encrypted device

2021-03-01 Thread Greg Kroah-Hartman
From: Mikulas Patocka commit a666e5c05e7c4aaabb2c5d58117b0946803d03d2 upstream. The system would deadlock when swapping to a dm-crypt device. The reason is that for each incoming write bio, dm-crypt allocates memory that holds encrypted data. These excessive allocations exhaust all the memory

[PATCH 5.10 096/663] selftests/bpf: Convert test_xdp_redirect.sh to bash

2021-03-01 Thread Greg Kroah-Hartman
From: Björn Töpel [ Upstream commit 732fa32330667a80ce4985ca81b6e9d6b2ad2072 ] The test_xdp_redirect.sh script uses a bash feature, '&>'. On systems, e.g. Debian, where '/bin/sh' is dash, this will not work as expected. Use bash in the shebang to get the expected behavior. Further, using 'set

[PATCH 5.4 303/340] hugetlb: fix update_and_free_page contig page struct assumption

2021-03-01 Thread Greg Kroah-Hartman
From: Mike Kravetz commit dbfee5aee7e54f83d96ceb8e3e80717fac62ad63 upstream. page structs are not guaranteed to be contiguous for gigantic pages. The routine update_and_free_page can encounter a gigantic page, yet it assumes page structs are contiguous when setting page flags in subpages. If

[PATCH 5.10 191/663] media: qm1d1c0042: fix error return code in qm1d1c0042_init()

2021-03-01 Thread Greg Kroah-Hartman
From: Luo Meng [ Upstream commit fcf8d018bdca0453b8d6359062e6bc1512d04c38 ] Fix to return a negative error code from the error handling case instead of 0 in function qm1d1c0042_init(), as done elsewhere in this function. Fixes: ab4d14528fdf ("[media] em28xx: add support for PLEX PX-BCUD

[PATCH] scsi: ufs: Fix incorrect ufshcd_state after ufshcd_reset_and_restore()

2021-03-01 Thread Adrian Hunter
If ufshcd_probe_hba() fails it sets ufshcd_state to UFSHCD_STATE_ERROR, however, if it is called again, as it is within a loop in ufshcd_reset_and_restore(), and succeeds, then it will not set the state back to UFSHCD_STATE_OPERATIONAL unless the state was UFSHCD_STATE_RESET. That can result in

[PATCH 5.10 563/663] media: ir_toy: add another IR Droid device

2021-03-01 Thread Greg Kroah-Hartman
From: Sean Young commit 4487e0215560392bd11c9de08d60824d72c89cd9 upstream. This device is also supported. Cc: sta...@vger.kernel.org Tested-by: Georgi Bakalski Reported-by: Georgi Bakalski Signed-off-by: Sean Young Reviewed-by: Greg Kroah-Hartman Signed-off-by: Mauro Carvalho Chehab

[PATCH 5.10 431/663] device-dax: Fix default return code of range_parse()

2021-03-01 Thread Greg Kroah-Hartman
From: Shiyang Ruan [ Upstream commit 7323fb22f05ff1d20498d267828870a5fbbaebd6 ] The return value of range_parse() indicates the size when it is positive. The error code should be negative. Signed-off-by: Shiyang Ruan Reviewed-by: Joao Martins Link:

[PATCH 5.10 466/663] arm64: Add missing ISB after invalidating TLB in __primary_switch

2021-03-01 Thread Greg Kroah-Hartman
From: Marc Zyngier [ Upstream commit 9d41053e8dc115c92b8002c3db5f545d7602498b ] Although there has been a bit of back and forth on the subject, it appears that invalidating TLBs requires an ISB instruction when FEAT_ETS is not implemented by the CPU. >From the bible: | In an implementation

[PATCH 5.11 264/775] locking/lockdep: Avoid unmatched unlock

2021-03-01 Thread Greg Kroah-Hartman
From: Peter Zijlstra [ Upstream commit 7f82e631d236cafd28518b998c6d4d8dc2ef68f6 ] Commit f6f48e180404 ("lockdep: Teach lockdep about "USED" <- "IN-NMI" inversions") overlooked that print_usage_bug() releases the graph_lock and called it without the graph lock held. Fixes: f6f48e180404

[PATCH 5.10 261/663] clk: meson: clk-pll: make "ret" a signed integer

2021-03-01 Thread Greg Kroah-Hartman
From: Martin Blumenstingl [ Upstream commit 9e717285f0bd591d716fa0e7418f2cdaf756dd25 ] The error codes returned by meson_clk_get_pll_settings() are all negative. Make "ret" a signed integer in meson_clk_pll_set_rate() to make it match with the clk_ops.set_rate API as well as the data type

[PATCH 5.10 213/663] f2fs: fix a wrong condition in __submit_bio

2021-03-01 Thread Greg Kroah-Hartman
From: Dehe Gu [ Upstream commit 39f71b7e40e21805d6b15fc7750bdd9cab6a5010 ] We should use !F2FS_IO_ALIGNED() to check and submit_io directly. Fixes: 8223ecc456d0 ("f2fs: fix to add missing F2FS_IO_ALIGNED() condition") Reviewed-by: Chao Yu Signed-off-by: Dehe Gu Signed-off-by: Ge Qiu

[PATCH 5.10 650/663] dm era: Verify the data block size hasnt changed

2021-03-01 Thread Greg Kroah-Hartman
From: Nikos Tsironis commit c8e846ff93d5eaa5384f6f325a1687ac5921aade upstream. dm-era doesn't support changing the data block size of existing devices, so check explicitly that the requested block size for a new target matches the one stored in the metadata. Fixes: eec40579d84873 ("dm: add era

[PATCH 5.11 064/775] ARM: dts: Configure missing thermal interrupt for 4430

2021-03-01 Thread Greg Kroah-Hartman
From: Tony Lindgren [ Upstream commit 44f416879a442600b006ef7dec3a6dc98bcf59c6 ] We have gpio_86 wired internally to the bandgap thermal shutdown interrupt on 4430 like we have it on 4460 according to the TRM. This can be found easily by searching for TSHUT. For some reason the thermal

[PATCH 5.10 106/663] net/mlx5e: Replace synchronize_rcu with synchronize_net

2021-03-01 Thread Greg Kroah-Hartman
From: Maxim Mikityanskiy [ Upstream commit 4d6e6b0c6d4bed8a7128500701354e2dc6098fa3 ] The commit cited below switched from using napi_synchronize to synchronize_rcu to have a guarantee that it will finish in finite time. However, on average, synchronize_rcu takes more time than

[PATCH 5.10 496/663] USB: serial: pl2303: fix line-speed handling on newer chips

2021-03-01 Thread Greg Kroah-Hartman
From: Johan Hovold commit 979d9cbe75b922ab1695b8ad5576115774f72e62 upstream. The latest chip family (HXN) apparently does not support setting the line speed using divisors and instead needs to use the direct encoding scheme for all rates. This specifically enables 50, 110, 134, 200 bps and

[PATCH 5.11 094/775] bpf_lru_list: Read double-checked variable once without lock

2021-03-01 Thread Greg Kroah-Hartman
From: Marco Elver [ Upstream commit 6df8fb83301d68ea0a0c0e1cbcc790fcc333ed12 ] For double-checked locking in bpf_common_lru_push_free(), node->type is read outside the critical section and then re-checked under the lock. However, concurrent writes to node->type result in data races. For

[PATCH 5.11 335/775] power: supply: cpcap-charger: Fix power_supply_put on null battery pointer

2021-03-01 Thread Greg Kroah-Hartman
From: Colin Ian King [ Upstream commit 39196cfe10dd2b46ee28b44abbc0db4f4cb7822f ] Currently if the pointer battery is null there is a null pointer dereference on the call to power_supply_put. Fix this by only performing the put if battery is not null. Addresses-Coverity: ("Dereference after

[PATCH 5.10 207/663] ata: ahci_brcm: Add back regulators management

2021-03-01 Thread Greg Kroah-Hartman
From: Florian Fainelli [ Upstream commit 10340f8d7b6dd54e616339c8ccb2f397133ebea0 ] While reworking the resources management and departing from using ahci_platform_enable_resources() which did not allow a proper step separation like we need, we unfortunately lost the ability to control AHCI

[PATCH 5.10 573/663] rcu/nocb: Perform deferred wake up before last idles need_resched() check

2021-03-01 Thread Greg Kroah-Hartman
From: Frederic Weisbecker commit 43789ef3f7d61aa7bed0cb2764e588fc990c30ef upstream. Entering RCU idle mode may cause a deferred wake up of an RCU NOCB_GP kthread (rcuog) to be serviced. Usually a local wake up happening while running the idle task is handled in one of the need_resched() checks

[PATCH 5.11 274/775] drm/vc4: hdmi: Fix register offset with longer CEC messages

2021-03-01 Thread Greg Kroah-Hartman
From: Dom Cobley [ Upstream commit 4a59ed546c0511f01a4bf6b886fe34b6cce2513f ] The code prior to 311e305fdb4e ("drm/vc4: hdmi: Implement a register layout abstraction") was relying on the fact that the register offset was incremented by 4 for each readl call. That worked since the register width

[PATCH 4.19 068/247] net: amd-xgbe: Reset the PHY rx data path when mailbox command timeout

2021-03-01 Thread Greg Kroah-Hartman
From: Shyam Sundar S K [ Upstream commit 30b7edc82ec82578f4f5e6706766f0a9535617d3 ] Sometimes mailbox commands timeout when the RX data path becomes unresponsive. This prevents the submission of new mailbox commands to DXIO. This patch identifies the timeout and resets the RX data path so that

[PATCH 5.10 118/663] bpf: Fix bpf_fib_lookup helper MTU check for SKB ctx

2021-03-01 Thread Greg Kroah-Hartman
From: Jesper Dangaard Brouer [ Upstream commit 2c0a10af688c02adcf127aad29e923e0056c6b69 ] BPF end-user on Cilium slack-channel (Carlo Carraro) wants to use bpf_fib_lookup for doing MTU-check, but *prior* to extending packet size, by adjusting fib_params 'tot_len' with the packet length plus the

[PATCH 5.4 329/340] dm era: only resize metadata in preresume

2021-03-01 Thread Greg Kroah-Hartman
From: Nikos Tsironis commit cca2c6aebe86f68103a8615074b3578e854b5016 upstream. Metadata resize shouldn't happen in the ctr. The ctr loads a temporary (inactive) table that will only become active upon resume. That is why resize should always be done in terms of resume. Otherwise a load (ctr)

Re: [PATCH] perf stat: improve readability of shadow stats

2021-03-01 Thread Jiri Olsa
On Tue, Mar 02, 2021 at 01:24:02AM +0800, Changbin Du wrote: > This does follow two changes: > 1) Select appropriate unit between K/M/G. > 2) Use 'cpu-sec' instead of 'sec' to state this is not the wall-time. > > $ sudo ./perf stat -a -- sleep 1 > > Before: Unit 'M' is selected even the

[PATCH 5.10 616/663] mfd: gateworks-gsc: Fix interrupt type

2021-03-01 Thread Greg Kroah-Hartman
From: Tim Harvey commit 8d9bf3c3e1451fc8de7b590040a868ade26d6b22 upstream. The Gateworks System Controller has an active-low interrupt. Fix the interrupt request type. Cc: Fixes: d85234994b2f ("mfd: Add Gateworks System Controller core driver") Signed-off-by: Tim Harvey Signed-off-by: Lee

[PATCH 5.10 513/663] drm/amd/display: Add FPU wrappers to dcn21_validate_bandwidth()

2021-03-01 Thread Greg Kroah-Hartman
From: Jan Kokemüller commit 41401ac67791810dd880345962339aa1bedd3c0d upstream. dcn21_validate_bandwidth() calls functions that use floating point math. On my machine this sometimes results in simd exceptions when there are other FPU users such as KVM virtual machines running. The screen freezes

[PATCH 5.10 210/663] mtd: parsers: afs: Fix freeing the part name memory in failure

2021-03-01 Thread Greg Kroah-Hartman
From: Manivannan Sadhasivam [ Upstream commit 7b844cf445f0a7daa68be0ce71eb2c88d68b0c5d ] In the case of failure while parsing the partitions, the iterator should be pre decremented by one before starting to free the memory allocated by kstrdup(). Because in the failure case, kstrdup() will not

[PATCH 5.11 214/775] media: ti-vpe: cal: fix write to unallocated memory

2021-03-01 Thread Greg Kroah-Hartman
From: Tomi Valkeinen [ Upstream commit 5a402af5e19f215689e8bf3cc244c21d94eba3c4 ] The asd allocated with v4l2_async_notifier_add_fwnode_subdev() must be of size cal_v4l2_async_subdev, otherwise access to cal_v4l2_async_subdev->phy will go to unallocated memory. Fixes: 8fcb7576ad19 ("media:

[PATCH 5.10 445/663] ice: report correct max number of TCs

2021-03-01 Thread Greg Kroah-Hartman
From: Dave Ertman [ Upstream commit 7dcf7aa01c7b9f18727cbe0f9cb4136f1c6cdcc2 ] In the driver currently, we are reporting max number of TCs to the DCBNL callback as a kernel define set to 8. This is preventing userspace applications performing DCBx to correctly down map the TCs from requested

[PATCH 5.10 626/663] s390/vtime: fix inline assembly clobber list

2021-03-01 Thread Greg Kroah-Hartman
From: Heiko Carstens commit b29c5093820d333eef22f58cd04ec0d089059c39 upstream. The stck/stckf instruction used within the inline assembly within do_account_vtime() changes the condition code. This is not reflected with the clobber list, and therefore might result in incorrect code generation.

[PATCH 5.11 071/775] can: mcp251xfd: mcp251xfd_probe(): fix errata reference

2021-03-01 Thread Greg Kroah-Hartman
From: Marc Kleine-Budde [ Upstream commit 28eb119c042e8d3420b577b5b3ea851a111e7b2d ] This patch fixes the reference to the errata for both the mcp2517fd and the mcp2518fd. Fixes: f5b84dedf7eb ("can: mcp25xxfd: mcp25xxfd_probe(): add SPI clk limit related errata information") Link:

[PATCH 5.11 001/775] vmlinux.lds.h: add DWARF v5 sections

2021-03-01 Thread Greg Kroah-Hartman
From: Nick Desaulniers commit 3c4fa46b30c551b1df2fb1574a684f68bc22067c upstream. We expect toolchains to produce these new debug info sections as part of DWARF v5. Add explicit placements to prevent the linker warnings from --orphan-section=warn. Compilers may produce such sections with

[PATCH 5.10 359/663] RDMA/hns: Disable RQ inline by default

2021-03-01 Thread Greg Kroah-Hartman
From: Lijun Ou [ Upstream commit 7373de9adb19aebed2781d3fdde576533d626d7a ] This feature should only be enabled by querying capability from firmware. Fixes: ba6bb7e97421 ("RDMA/hns: Add interfaces to get pf capabilities from firmware") Link:

[PATCH 5.11 110/775] net/mlx5e: kTLS, Use refcounts to free kTLS RX priv context

2021-03-01 Thread Greg Kroah-Hartman
From: Maxim Mikityanskiy [ Upstream commit b850bbff965129c34f50962638c0a66c82563536 ] wait_for_resync is unreliable - if it timeouts, priv_rx will be freed anyway. However, mlx5e_ktls_handle_get_psv_completion will be called sooner or later, leading to use-after-free. For example, it can happen

[PATCH 5.10 305/663] platform/chrome: cros_ec_proto: Add LID and BATTERY to default mask

2021-03-01 Thread Greg Kroah-Hartman
From: Evan Benn [ Upstream commit 852405d8efcbca0e02f14592fb1d1dcd0d3fb508 ] After 'platform/chrome: cros_ec_proto: Use EC_HOST_EVENT_MASK not BIT' some of the flags are not quite correct. LID_CLOSED is used to suspend the device, so it makes sense to ignore that. BATTERY events are also

[PATCH 5.10 230/663] drm/vc4: hdmi: Fix register offset with longer CEC messages

2021-03-01 Thread Greg Kroah-Hartman
From: Dom Cobley [ Upstream commit 4a59ed546c0511f01a4bf6b886fe34b6cce2513f ] The code prior to 311e305fdb4e ("drm/vc4: hdmi: Implement a register layout abstraction") was relying on the fact that the register offset was incremented by 4 for each readl call. That worked since the register width

Re: [PATCH v1] xen: ACPI: Get rid of ACPICA message printing

2021-03-01 Thread Jürgen Groß
On 01.03.21 17:16, Boris Ostrovsky wrote: On 3/1/21 9:11 AM, Rafael J. Wysocki wrote: On Sun, Feb 28, 2021 at 2:49 AM Boris Ostrovsky wrote: On 2/24/21 1:47 PM, Rafael J. Wysocki wrote: From: Rafael J. Wysocki The ACPI_DEBUG_PRINT() macro is used in a few places in xen-acpi-cpuhotplug.c

[PATCH 5.11 139/775] net: enetc: fix destroyed phylink dereference during unbind

2021-03-01 Thread Greg Kroah-Hartman
From: Vladimir Oltean [ Upstream commit 3af409ca278d4a8d50e91f9f7c4c33b175645cf3 ] The following call path suggests that calling unregister_netdev on an interface that is up will first bring it down. enetc_pf_remove -> unregister_netdev -> unregister_netdevice_queue ->

[PATCH 5.10 030/663] ARM: dts: exynos: correct PMIC interrupt trigger level on Spring

2021-03-01 Thread Greg Kroah-Hartman
From: Krzysztof Kozlowski [ Upstream commit 77e6a5467cb8657cf8b5e610a30a4c502085e4f9 ] The Samsung PMIC datasheets describe the interrupt line as active low with a requirement of acknowledge from the CPU. Without specifying the interrupt type in Devicetree, kernel might apply some fixed

[PATCH 5.10 228/663] s390/zcrypt: return EIO when msg retry limit reached

2021-03-01 Thread Greg Kroah-Hartman
From: Harald Freudenberger [ Upstream commit d39fae45c97c67b1b4da04773f2bb5a2f29088c4 ] When a msg is retried because the lower ap layer returns -EAGAIN there is a retry limit (currently 10). When this limit is reached the last return code from the lower layer is returned, causing the userspace

[PATCH 5.11 344/775] RDMA/rtrs-srv: Fix missing wr_cqe

2021-03-01 Thread Greg Kroah-Hartman
From: Jack Wang [ Upstream commit 8537f2de6519945890a2b0f3739b23f32b5c0a89 ] We had a few places wr_cqe is not set, which could lead to NULL pointer deref or GPF in error case. Fixes: 9cb837480424 ("RDMA/rtrs: server: main functionality") Link:

[PATCH 4.19 071/247] net: amd-xgbe: Fix network fluctuations when using 1G BELFUSE SFP

2021-03-01 Thread Greg Kroah-Hartman
From: Shyam Sundar S K [ Upstream commit 9eab3fdb419916f66a72d1572f68d82cd9b3f963 ] Frequent link up/down events can happen when a Bel Fuse SFP part is connected to the amd-xgbe device. Try to avoid the frequent link issues by resetting the PHY as documented in Bel Fuse SFP datasheets. Fixes:

[PATCH 5.11 352/775] clocksource/drivers/ixp4xx: Select TIMER_OF when needed

2021-03-01 Thread Greg Kroah-Hartman
From: Arnd Bergmann [ Upstream commit 7a3b8758bd6e45f7b671723b5c9fa2b69d0787ae ] Compile-testing the ixp4xx timer with CONFIG_OF enabled but CONFIG_TIMER_OF disabled leads to a harmless warning: arm-linux-gnueabi-ld: warning: orphan section `__timer_of_table' from

[PATCH 5.10 017/663] ALSA: pcm: Call sync_stop at disconnection

2021-03-01 Thread Greg Kroah-Hartman
From: Takashi Iwai commit 29bb274e94974669acb5186a75538f20df1508b6 upstream. The PCM core should perform the sync for the pending stop operations at disconnection. Otherwise it may lead to unexpected access. Currently the old user of sync_stop, USB-audio driver, has its own sync, so this

[PATCH 5.11 104/775] net: phy: consider that suspend2ram may cut off PHY power

2021-03-01 Thread Greg Kroah-Hartman
From: Heiner Kallweit [ Upstream commit 4c0d2e96ba055bd8911bb8287def4f8ebbad15b6 ] Claudiu reported that on his system S2R cuts off power to the PHY and after resuming certain PHY settings are lost. The PM folks confirmed that cutting off power to selected components in S2R is a valid case.

[PATCH 5.10 558/663] staging/mt7621-dma: mtk-hsdma.c->hsdma-mt7621.c

2021-03-01 Thread Greg Kroah-Hartman
From: Ilya Lipnitskiy commit 1f92798cbe7fe923479cff754dd06dd23d352e36 upstream. Also use KBUILD_MODNAME for module name. This driver is only used by RALINK MIPS MT7621 SoCs. Tested by building against that target using OpenWrt with Linux 5.10.10. Fixes the following error: error: the

[PATCH 5.10 117/663] bpf, devmap: Use GFP_KERNEL for xdp bulk queue allocation

2021-03-01 Thread Greg Kroah-Hartman
From: Jun'ichi Nomura [ Upstream commit 7d4553b69fb335496c597c31590e982485ebe071 ] The devmap bulk queue is allocated with GFP_ATOMIC and the allocation may fail if there is no available space in existing percpu pool. Since commit 75ccae62cb8d42 ("xdp: Move devmap bulk queue into struct

[PATCH 5.11 005/775] driver core: auxiliary bus: Fix calling stage for auxiliary bus init

2021-03-01 Thread Greg Kroah-Hartman
From: Dave Jiang commit 471b12c43f376d5203dbff0e91316eea11f6f4df upstream. When the auxiliary device code is built into the kernel, it can be executed before the auxiliary bus is registered. This causes bus->p to be not allocated and triggers a NULL pointer dereference when the auxiliary bus

[PATCH 5.10 038/663] staging: vchiq: Fix bulk transfers on 64-bit builds

2021-03-01 Thread Greg Kroah-Hartman
From: Phil Elwell [ Upstream commit 88753cc19f087abe0d39644b844e67a59cfb5a3d ] The recent change to the bulk transfer compat function missed the fact the relevant ioctl command is VCHIQ_IOC_QUEUE_BULK_TRANSMIT32, not VCHIQ_IOC_QUEUE_BULK_TRANSMIT, as any attempt to send a bulk block to the VPU

[PATCH 5.10 422/663] soundwire: bus: use sdw_update_no_pm when initializing a device

2021-03-01 Thread Greg Kroah-Hartman
From: Pierre-Louis Bossart [ Upstream commit b04c975e654cfdea6d691cd403b5a81cce7e593d ] When a Slave device is resumed, it may resume the bus and restart the enumeration. During that process, we absolutely don't want to call regular read/write routines which will wait for the resume to

[PATCH 5.10 469/663] mm,thp,shmem: make khugepaged obey tmpfs mount flags

2021-03-01 Thread Greg Kroah-Hartman
From: Rik van Riel [ Upstream commit cd89fb06509903f942a0ffe97ffa63034671ed0c ] Currently if thp enabled=[madvise], mounting a tmpfs filesystem with huge=always and mmapping files from that tmpfs does not result in khugepaged collapsing those mappings, despite the mount flag indicating that it

[PATCH 5.10 029/663] ARM: dts: exynos: correct PMIC interrupt trigger level on Rinato

2021-03-01 Thread Greg Kroah-Hartman
From: Krzysztof Kozlowski [ Upstream commit 437ae60947716bb479e2f32466f49445c0509b1e ] The Samsung PMIC datasheets describe the interrupt line as active low with a requirement of acknowledge from the CPU. Without specifying the interrupt type in Devicetree, kernel might apply some fixed

[PATCH 5.4 307/340] module: Ignore _GLOBAL_OFFSET_TABLE_ when warning for undefined symbols

2021-03-01 Thread Greg Kroah-Hartman
From: Fangrui Song commit ebfac7b778fac8b0e8e92ec91d0b055f046b4604 upstream. clang-12 -fno-pic (since https://github.com/llvm/llvm-project/commit/a084c0388e2a59b9556f2de008232da3f1d6) can emit `call __stack_chk_fail@PLT` instead of `call __stack_chk_fail` on x86. The two forms should have

[PATCH 5.10 310/663] spi: atmel: Put allocated master before return

2021-03-01 Thread Greg Kroah-Hartman
From: Pan Bian [ Upstream commit 21ea2743f015dbacec1831bdc8afc848db9c2b8c ] The allocated master is not released. Goto error handling label rather than directly return. Fixes: 5e9af37e46bc ("spi: atmel: introduce probe deferring") Signed-off-by: Pan Bian Fixes: 5e9af37e46bc ("spi: atmel:

[PATCH 5.10 454/663] wireguard: kconfig: use arm chacha even with no neon

2021-03-01 Thread Greg Kroah-Hartman
From: Jason A. Donenfeld [ Upstream commit bce2473927af8de12ad131a743f55d69d358c0b9 ] The condition here was incorrect: a non-neon fallback implementation is available on arm32 when NEON is not supported. Reported-by: Ilya Lipnitskiy Fixes: e7096c131e51 ("net: WireGuard secure network

[PATCH 5.10 094/663] iwlwifi: pnvm: increment the pointer before checking the TLV

2021-03-01 Thread Greg Kroah-Hartman
From: Luca Coelho [ Upstream commit ff11a8ee2d2d0f78514ac9b42fb50c525ca695c7 ] If the SKU_ID doesn't match, we don't increment the pointer and keep checking the same TLV over and over again. We need to increment the pointer in all situtations, namely if the TLV is not a SKU_ID, if the SKU_ID

[PATCH 5.10 361/663] spi: pxa2xx: Fix the controller numbering for Wildcat Point

2021-03-01 Thread Greg Kroah-Hartman
From: Andy Shevchenko [ Upstream commit 54c5d3bfb0cfb7b31259765524567871dee11615 ] Wildcat Point has two SPI controllers and added one is actually second one. Fix the numbering by adding the description of the first one. Fixes: caba248db286 ("spi: spi-pxa2xx-pci: Add ID and driver type for

[PATCH 5.11 246/775] irqchip/ls-extirq: add IRQCHIP_SKIP_SET_WAKE to the irqchip flags

2021-03-01 Thread Greg Kroah-Hartman
From: Biwen Li [ Upstream commit c60767421e102dfd1f4d99ad0cc7f8ba24461eb8 ] The ls-extirq driver doesn't implement the irq_set_wake() callback, while being wake-up capable. This results in ugly behaviours across suspend/resume cycles. Advertise this by adding IRQCHIP_SKIP_SET_WAKE to the

[PATCH 5.10 548/663] crypto: sun4i-ss - initialize need_fallback

2021-03-01 Thread Greg Kroah-Hartman
From: Corentin Labbe commit 4ec8977b921fd9d512701e009ce8082cb94b5c1c upstream. The need_fallback is never initialized and seem to be always true at runtime. So all hardware operations are always bypassed. Fixes: 0ae1f46c55f87 ("crypto: sun4i-ss - fallback when length is not multiple of

[PATCH 5.11 348/775] power: reset: at91-sama5d2_shdwc: fix wkupdbc mask

2021-03-01 Thread Greg Kroah-Hartman
From: Claudiu Beznea [ Upstream commit 95aa21a3f1183260db1b0395e03df5bebc5ed641 ] According to datasheet WKUPDBC mask is b/w bits 26..24. Fixes: f80cb48843987 ("power: reset: at91-shdwc: add new shutdown controller driver") Signed-off-by: Claudiu Beznea Reviewed-by: Alexandre Belloni

[PATCH 5.10 632/663] f2fs: enforce the immutable flag on open files

2021-03-01 Thread Greg Kroah-Hartman
From: Chao Yu commit e0fcd01510ad025c9bbce704c5c2579294056141 upstream. This patch ports commit 02b016ca7f99 ("ext4: enforce the immutable flag on open files") to f2fs. According to the chattr man page, "a file with the 'i' attribute cannot be modified..." Historically, this was only enforced

[PATCH 5.11 167/775] net: phy: mscc: coma mode disabled for VSC8514

2021-03-01 Thread Greg Kroah-Hartman
From: Bjarni Jonasson [ Upstream commit ca0d7fd0a58dfc9503775dae7daee341c115e0c7 ] The 'coma mode' (configurable through sw or hw) provides an optional feature that may be used to control when the PHYs become active. The typical usage is to synchronize the link-up time across all PHY instances.

[PATCH 5.11 361/775] regulator: axp20x: Fix reference cout leak

2021-03-01 Thread Greg Kroah-Hartman
From: Pan Bian [ Upstream commit e78bf6be7edaacb39778f3a89416caddfc6c6d70 ] Decrements the reference count of device node and its child node. Fixes: dfe7a1b058bb ("regulator: AXP20x: Add support for regulators subsystem") Signed-off-by: Pan Bian Link:

[PATCH 5.10 561/663] floppy: reintroduce O_NDELAY fix

2021-03-01 Thread Greg Kroah-Hartman
From: Jiri Kosina commit 8a0c014cd20516ade9654fc13b51345ec58e7be8 upstream. This issue was originally fixed in 09954bad4 ("floppy: refactor open() flags handling"). The fix as a side-effect, however, introduce issue for open(O_ACCMODE) that is being used for ioctl-only open. I wrote a fix for

Re: [PATCH v2 3/3] kernel/smp: add more data to CSD lock debugging

2021-03-01 Thread Jürgen Groß
On 01.03.21 18:07, Peter Zijlstra wrote: On Mon, Mar 01, 2021 at 11:13:36AM +0100, Juergen Gross wrote: In order to help identifying problems with IPI handling and remote function execution add some more data to IPI debugging code. There have been multiple reports of cpus looping long times

Re: [PATCH v8 1/2] scsi: ufs: Enable power management for wlun

2021-03-01 Thread Adrian Hunter
On 1/03/21 8:10 pm, Asutosh Das wrote: > On Mon, Mar 01 2021 at 05:23 -0800, Adrian Hunter wrote: >> On 26/02/21 1:37 am, Asutosh Das wrote: >>> @@ -8901,43 +9125,14 @@ static int ufshcd_resume(struct ufs_hba *hba, enum >>> ufs_pm_op pm_op) >>> goto vendor_suspend; >>> } >> >>

[PATCH 5.4 305/340] arm64: Extend workaround for erratum 1024718 to all versions of Cortex-A55

2021-03-01 Thread Greg Kroah-Hartman
From: Suzuki K Poulose commit c0b15c25d25171db4b70cc0b7dbc1130ee94017d upstream. The erratum 1024718 affects Cortex-A55 r0p0 to r2p0. However we apply the work around for r0p0 - r1p0. Unfortunately this won't be fixed for the future revisions for the CPU. Thus extend the work around for all

[PATCH 5.4 308/340] mmc: sdhci-esdhc-imx: fix kernel panic when remove module

2021-03-01 Thread Greg Kroah-Hartman
From: Frank Li commit a56f44138a2c57047f1ea94ea121af31c595132b upstream. In sdhci_esdhc_imx_remove() the SDHCI_INT_STATUS in read. Under some circumstances, this may be done while the device is runtime suspended, triggering the below splat. Fix the problem by adding a pm_runtime_get_sync(),

[PATCH 5.10 243/663] nvmet: remove extra variable in identify ns

2021-03-01 Thread Greg Kroah-Hartman
From: Chaitanya Kulkarni [ Upstream commit 3c7b224f1956ed232b24ed2eb2c54e4476c6acb2 ] We remove the extra local variable struct nvmet_ns in nvmet_execute_identify_ns() since req already has ns member that can be reused, this also eliminates the explicit call to nvmet_put_namespace() which is

[PATCH 5.10 056/663] soc: qcom: socinfo: Fix an off by one in qcom_show_pmic_model()

2021-03-01 Thread Greg Kroah-Hartman
From: Dan Carpenter [ Upstream commit 5fb33d8960dc7abdabc6fe599a30c2c99b082ef6 ] These need to be < ARRAY_SIZE() instead of <= ARRAY_SIZE() to prevent accessing one element beyond the end of the array. Acked-by: Dmitry Baryshkov Reviewed-by: Douglas Anderson Reviewed-by: Stephen Boyd Fixes:

[PATCH 5.11 384/775] iommu: Switch gather->end to the inclusive end

2021-03-01 Thread Greg Kroah-Hartman
From: Yong Wu [ Upstream commit 862c3715de8f3e5350489240c951d697f04bd8c9 ] Currently gather->end is "unsigned long" which may be overflow in arch32 in the corner case: 0xfff0 + 0x10(iova + size). Although it doesn't affect the size(end - start), it affects the checking "gather->end <

[PATCH 5.10 250/663] jffs2: fix use after free in jffs2_sum_write_data()

2021-03-01 Thread Greg Kroah-Hartman
From: Tom Rix [ Upstream commit 19646447ad3a680d2ab08c097585b7d96a66126b ] clang static analysis reports this problem fs/jffs2/summary.c:794:31: warning: Use of memory after it is freed c->summary->sum_list_head = temp->u.next;

[PATCH 5.10 263/663] selftests/powerpc: Make the test check in eeh-basic.sh posix compliant

2021-03-01 Thread Greg Kroah-Hartman
From: Po-Hsu Lin [ Upstream commit 3db380570af7052620ace20c29e244938610ca71 ] The == operand is a bash extension, thus this will fail on Ubuntu with: ./eeh-basic.sh: 89: test: 2: unexpected operator As the /bin/sh on Ubuntu is pointed to DASH. Use -eq to fix this posix compatibility issue.

<    6   7   8   9   10   11   12   13   14   15   >