[PATCH 5.11 345/775] RDMA/rtrs-clt: Refactor the failure cases in alloc_clt

2021-03-01 Thread Greg Kroah-Hartman
From: Guoqing Jiang [ Upstream commit eab098246625e91c1cbd6e8f75b09e4c9c28a9fc ] Make all failure cases go to the common path to avoid duplicate code. And some issued existed before. 1. clt need to be freed to avoid memory leak. 2. return ERR_PTR(-ENOMEM) if kobject_create_and_add fails,

[PATCH 5.4 261/340] erofs: initialized fields can only be observed after bit is set

2021-03-01 Thread Greg Kroah-Hartman
From: Gao Xiang commit ce063129181312f8781a047a50be439c5859747b upstream. Currently, although set_bit() & test_bit() pairs are used as a fast- path for initialized configurations. However, these atomic ops are actually relaxed forms. Instead, load-acquire & store-release form is needed to make

[PATCH 5.10 066/663] staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules

2021-03-01 Thread Greg Kroah-Hartman
From: Chen-Yu Tsai [ Upstream commit 61834c967a929f6b4b7fcb91f43fa225cc29aa19 ] The custom regulatory ruleset in the rtl8723bs driver lists an incorrect number of rules: one too many. This results in an out-of-bounds access, as detected by KASAN. This was possible thanks to the newly added

[PATCH 5.10 206/663] mm: proc: Invalidate TLB after clearing soft-dirty page state

2021-03-01 Thread Greg Kroah-Hartman
From: Will Deacon [ Upstream commit 912efa17e5121693dfbadae29768f4144a3f9e62 ] Since commit 0758cd830494 ("asm-generic/tlb: avoid potential double flush"), TLB invalidation is elided in tlb_finish_mmu() if no entries were batched via the tlb_remove_*() functions. Consequently, the page-table

[PATCH 5.11 066/775] usb: dwc2: Abort transaction after errors with unknown reason

2021-03-01 Thread Greg Kroah-Hartman
From: Guenter Roeck [ Upstream commit f74b68c61cbc4b2245022fcce038509333d63f6f ] In some situations, the following error messages are reported. dwc2 ff54.usb: dwc2_hc_chhltd_intr_dma: Channel 1 - ChHltd set, but reason is unknown dwc2 ff54.usb: hcint 0x0002, intsts 0x0421

[PATCH 5.10 039/663] arm64: dts: qcom: msm8916-samsung-a5u: Fix iris compatible

2021-03-01 Thread Greg Kroah-Hartman
From: Stephan Gerhold [ Upstream commit 826e6faf49ae1eb065759a30832a2e34740bd8b1 ] Unlike most MSM8916 boards, samsung-a5u uses WCN3660B instead of WCN3620 to support the 5 GHz band additionally. WCN3660B has similar requirements as WCN3620, but it needs the XO clock to run at 48 MHz instead

[PATCH 5.11 285/775] nvmet-tcp: fix receive data digest calculation for multiple h2cdata PDUs

2021-03-01 Thread Greg Kroah-Hartman
From: Sagi Grimberg [ Upstream commit fda871c0ba5d2eed2cd1c881573168129da70058 ] When a host sends multiple h2cdata PDUs for a single command, we should verify the data digest calculation per PDU and not per command. Fixes: 872d26a391da ("nvmet-tcp: add NVMe over TCP target driver")

[PATCH 5.10 189/663] media: vidtv: psi: fix missing crc for PMT

2021-03-01 Thread Greg Kroah-Hartman
From: Daniel W. S. Almeida [ Upstream commit 0a933a7f73d6c545dcbecb4f7a92d272aef4417b ] The PMT write function was refactored and this broke the CRC computation. Fix it. Fixes: db9569f67e2e ("media: vidtv: cleanup PMT write table function") Signed-off-by: Daniel W. S. Almeida Signed-off-by:

[PATCH 5.10 622/663] cpufreq: qcom-hw: drop devm_xxx() calls from init/exit hooks

2021-03-01 Thread Greg Kroah-Hartman
From: Shawn Guo commit 67fc209b527d023db4d087c68e44e9790aa089ef upstream. Commit f17b3e44320b ("cpufreq: qcom-hw: Use devm_platform_ioremap_resource() to simplify code") introduces a regression on platforms using the driver, by failing to initialise a policy, when one is created post hotplug.

[PATCH 5.10 248/663] ASoC: simple-card-utils: Fix device module clock

2021-03-01 Thread Greg Kroah-Hartman
From: Sameer Pujar [ Upstream commit 1e30f642cf2939bbdac82ea0dd3071232670b5ab ] If "clocks = <>" is specified from the CPU or Codec component device node, the clock is not getting enabled. Thus audio playback or capture fails. Fix this by populating "simple_dai->clk" field when clocks property

[PATCH 5.10 453/663] wireguard: device: do not generate ICMP for non-IP packets

2021-03-01 Thread Greg Kroah-Hartman
From: Jason A. Donenfeld [ Upstream commit 99fff5264e7ab06f45b0ad60243475be0a8d0559 ] If skb->protocol doesn't match the actual skb->data header, it's probably not a good idea to pass it off to icmp{,v6}_ndo_send, which is expecting to reply to a valid IP packet. So this commit has that early

[PATCH 5.11 278/775] drm/vc4: hdmi: Update the CEC clock divider on HSM rate change

2021-03-01 Thread Greg Kroah-Hartman
From: Maxime Ripard [ Upstream commit 47fa9a80270e20a0c4ddaffca1f144d22cc59620 ] As part of the enable sequence we might change the HSM clock rate if the pixel rate is different than the one we were already dealing with. On the BCM2835 however, the CEC clock derives from the HSM clock so any

[PATCH 5.11 112/775] net/mlx5: Disallow RoCE on multi port slave device

2021-03-01 Thread Greg Kroah-Hartman
From: Shay Drory [ Upstream commit c70f8597fcc1399ef6d5b5ce648a31d887d5dba2 ] In dual port mode, setting roce enabled/disable for the slave device have no effect. e.g.: the slave device roce status remain unchanged. Therefore disable it and add an error message. Enable or disable roce of the

[PATCH 5.10 457/663] mm: memcontrol: fix slub memory accounting

2021-03-01 Thread Greg Kroah-Hartman
From: Muchun Song [ Upstream commit 96403bfe50c344b587ea53894954a9d152af1c9d ] SLUB currently account kmalloc() and kmalloc_node() allocations larger than order-1 page per-node. But it forget to update the per-memcg vmstats. So it can lead to inaccurate statistics of "slab_unreclaimable"

[PATCH 5.10 564/663] media: ipu3-cio2: Fix mbus_code processing in cio2_subdev_set_fmt()

2021-03-01 Thread Greg Kroah-Hartman
From: Pavel Machek commit 334de4b45892f7e67074e1b1b2ac36fd3e091118 upstream. Loop was useless as it would always exit on the first iteration. Fix it with right condition. Signed-off-by: Pavel Machek (CIP) Fixes: a86cf9b29e8b ("media: ipu3-cio2: Validate mbus format in setting subdev format")

[PATCH] Drivers: hv: vmbus: Drop error message when 'No request id available'

2021-03-01 Thread Andrea Parri (Microsoft)
Running out of request IDs on a channel essentially produces the same effect as running out of space in the ring buffer, in that -EAGAIN is returned. The error message in hv_ringbuffer_write() should either be dropped (since we don't output a message when the ring buffer is full) or be made

[PATCH 5.10 356/663] RDMA/hns: Fixed wrong judgments in the goto branch

2021-03-01 Thread Greg Kroah-Hartman
From: Wenpeng Liang [ Upstream commit bb74fe7e81c8b2b65c6a351a247fdb9a969cbaec ] When an error occurs, the qp_table must be cleared, regardless of whether the SRQ feature is enabled. Fixes: 5c1f167af112 ("RDMA/hns: Init SRQ table for hip08") Link:

Re: [PATCH 2/5] mm: memcontrol: make page_memcg{_rcu} only applicable for non-kmem page

2021-03-01 Thread Johannes Weiner
Muchun, can you please reduce the CC list to mm/memcg folks only for the next submission? I think probably 80% of the current recipients don't care ;-) On Mon, Mar 01, 2021 at 10:11:45AM -0800, Shakeel Butt wrote: > On Sun, Feb 28, 2021 at 10:25 PM Muchun Song wrote: > > > > We want to reuse the

[PATCH 5.10 327/663] powerpc/sstep: Fix incorrect return from analyze_instr()

2021-03-01 Thread Greg Kroah-Hartman
From: Ananth N Mavinakayanahalli [ Upstream commit 718aae916fa6619c57c348beaedd675835cf1aa1 ] We currently just percolate the return value from analyze_instr() to the caller of emulate_step(), especially if it is a -1. For one particular case (opcode = 4) for instructions that aren't currently

[PATCH 5.11 307/775] power: supply: cpcap: Add missing IRQF_ONESHOT to fix regression

2021-03-01 Thread Greg Kroah-Hartman
From: Tony Lindgren [ Upstream commit e62333e26be649bfc3c167b9f2bbca38b92332c5 ] Commit 25d76fed7ffe ("phy: cpcap-usb: Use IRQF_ONESHOT") started causing errors loading phy-cpcap-usb driver: cpcap_battery cpcap_battery.0: failed to register power supply genirq: Flags mismatch irq 211. 2080

[PATCH 5.10 153/663] drm: rcar-du: Fix leak of CMM platform device reference

2021-03-01 Thread Greg Kroah-Hartman
From: Laurent Pinchart [ Upstream commit 9fa120458da142da0d1d3eaf6f6a3a2c2c91d27b ] The device references acquired by of_find_device_by_node() are not released by the driver. Fix this by registering a cleanup action. Fixes: 8de707aeb452 ("drm: rcar-du: kms: Initialize CMM instances")

[PATCH 5.11 037/775] memory: mtk-smi: Fix PM usage counter unbalance in mtk_smi ops

2021-03-01 Thread Greg Kroah-Hartman
From: Zhang Qilong [ Upstream commit a2d522ff0f5cc26915c4ccee9457fd4b4e1edc48 ] pm_runtime_get_sync will increment pm usage counter even it failed. Forgetting to putting operation will result in reference leak here. We fix it by replacing it with pm_runtime_resume_and_get to keep usage counter

[PATCH 5.10 581/663] arm64: uprobe: Return EOPNOTSUPP for AARCH32 instruction probing

2021-03-01 Thread Greg Kroah-Hartman
From: He Zhe commit d47422d953e258ad587b5edf2274eb95d08bdc7d upstream. As stated in linux/errno.h, ENOTSUPP should never be seen by user programs. When we set up uprobe with 32-bit perf and arm64 kernel, we would see the following vague error without useful hint. The sys_perf_event_open()

[PATCH 5.11 374/775] power: supply: smb347-charger: Fix interrupt usage if interrupt is unavailable

2021-03-01 Thread Greg Kroah-Hartman
From: Dmitry Osipenko [ Upstream commit 6996312642d2dad3070c3d276c7621f35e721f30 ] The IRQ=0 could be a valid interrupt number in kernel because interrupt numbers are virtual in a modern kernel. Hence fix the interrupt usage in a case if interrupt is unavailable by not overriding the interrupt

[PATCH 5.11 054/775] arm64: dts: rockchip: rk3328: Add clock_in_out property to gmac2phy node

2021-03-01 Thread Greg Kroah-Hartman
From: Chen-Yu Tsai [ Upstream commit c6433083f5930fdf52ad47c8c0459719c810dc89 ] The gmac2phy is integrated with the PHY within the SoC. Any properties related to this integration can be included in the .dtsi file, instead of having board dts files specify them separately. Add the clock_in_out

[PATCH 5.10 520/663] drm/sched: Cancel and flush all outstanding jobs before finish.

2021-03-01 Thread Greg Kroah-Hartman
From: Andrey Grodzovsky commit e582951baabba3e278c97169d0acc1e09b24a72e upstream. To avoid any possible use after free. Signed-off-by: Andrey Grodzovsky Reviewed-by: Christian König Link: https://patchwork.freedesktop.org/patch/414814/ CC: sta...@vger.kernel.org Signed-off-by: Christian

[PATCH 5.10 051/663] cpufreq: brcmstb-avs-cpufreq: Fix resource leaks in ->remove()

2021-03-01 Thread Greg Kroah-Hartman
From: Christophe JAILLET [ Upstream commit 3657f729b6fb5f2c0bf693742de2dcd49c572aa1 ] If 'cpufreq_unregister_driver()' fails, just WARN and continue, so that other resources are freed. Fixes: de322e085995 ("cpufreq: brcmstb-avs-cpufreq: AVS CPUfreq driver for Broadcom STB SoCs")

[PATCH 5.10 402/663] pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare()

2021-03-01 Thread Greg Kroah-Hartman
From: Simon South [ Upstream commit d5d8d675865ccddfe4da26c85f22c55cec663bf2 ] If rockchip_pwm_probe() fails to register a PWM device it calls clk_unprepare() for the device's PWM clock, without having first disabled the clock and before jumping to an error handler that also unprepares it. This

[PATCH 5.10 652/663] dm era: Use correct value size in equality function of writeset tree

2021-03-01 Thread Greg Kroah-Hartman
From: Nikos Tsironis commit 64f2d15afe7b336aafebdcd14cc835ecf856df4b upstream. Fix the writeset tree equality test function to use the right value size when comparing two btree values. Fixes: eec40579d84873 ("dm: add era target") Cc: sta...@vger.kernel.org # v3.15+ Signed-off-by: Nikos

[PATCH 5.10 493/663] usb: dwc3: gadget: Fix setting of DEPCFG.bInterval_m1

2021-03-01 Thread Greg Kroah-Hartman
From: Thinh Nguyen commit a1679af85b2ae35a2b78ad04c18bb069c37330cc upstream. Valid range for DEPCFG.bInterval_m1 is from 0 to 13, and it must be set to 0 when the controller operates in full-speed. See the programming guide for DEPCFG command section 3.2.2.1 (v3.30a). Fixes: 72246da40f37

[PATCH 5.10 319/663] objtool: Fix retpoline detection in asm code

2021-03-01 Thread Greg Kroah-Hartman
From: Josh Poimboeuf [ Upstream commit 1f9a1b74942485a0a29e7c4a9a9f2fe8aea17766 ] The JMP_NOSPEC macro branches to __x86_retpoline_*() rather than the __x86_indirect_thunk_*() wrappers used by C code. Detect jumps to __x86_retpoline_*() as retpoline dynamic jumps. Presumably this doesn't

[PATCH 5.10 569/663] x86/fault: Fix AMD erratum #91 errata fixup for user code

2021-03-01 Thread Greg Kroah-Hartman
From: Andy Lutomirski commit 35f1c89b0cce247bf0213df243ed902989b1dcda upstream. The recent rework of probe_kernel_address() and its conversion to get_kernel_nofault() inadvertently broke is_prefetch(). Before this change, probe_kernel_address() was used as a sloppy "read user or kernel memory"

[PATCH 5.11 172/775] drm/fb-helper: Add missed unlocks in setcmap_legacy()

2021-03-01 Thread Greg Kroah-Hartman
From: Chuhong Yuan [ Upstream commit 0a260e731d6c4c17547ac275a2cde888a9eb4a3d ] setcmap_legacy() does not call drm_modeset_unlock_all() in some exits, add the missed unlocks with goto to fix it. Fixes: 964c60063bff ("drm/fb-helper: separate the fb_setcmap helper into atomic and legacy paths")

[PATCH 5.10 533/663] btrfs: add asserts for deleting backref cache nodes

2021-03-01 Thread Greg Kroah-Hartman
From: Josef Bacik commit eddda68d97732ce05ca145f8e85e8a447f65cdad upstream. A weird KASAN problem that Zygo reported could have been easily caught if we checked for basic things in our backref freeing code. We have two methods of freeing a backref node - btrfs_backref_free_node: this just is

[PATCH 5.11 165/775] net: ipa: initialize all resources

2021-03-01 Thread Greg Kroah-Hartman
From: Alex Elder [ Upstream commit 25c5a7e89b1de80f4b04ad5365b2e05fefd92279 ] We configure the minimum and maximum number of various types of IPA resources in ipa_resource_config(). It iterates over resource types in the configuration data and assigns resource limits to each resource group for

[PATCH 5.11 321/775] clk: renesas: r8a779a0: Fix parent of CBFUSA clock

2021-03-01 Thread Greg Kroah-Hartman
From: Geert Uytterhoeven [ Upstream commit 80d3e07ec509c5098d44e4f1416cc9f133fd436f ] According to Figure 8.1.1 ("Block Diagram of CPG (R-Car V3U-AD)") in the R-Car V3U Series User's Manual Rev. 0.5, the parent of the CBFUSA clock is EXTAL. Fixes: 17bcc8035d2d19fc ("clk: renesas: cpg-mssr: Add

[PATCH 5.10 178/663] media: ti-vpe: cal: fix write to unallocated memory

2021-03-01 Thread Greg Kroah-Hartman
From: Tomi Valkeinen [ Upstream commit 5a402af5e19f215689e8bf3cc244c21d94eba3c4 ] The asd allocated with v4l2_async_notifier_add_fwnode_subdev() must be of size cal_v4l2_async_subdev, otherwise access to cal_v4l2_async_subdev->phy will go to unallocated memory. Fixes: 8fcb7576ad19 ("media:

[PATCH 5.10 365/663] clk: aspeed: Fix APLL calculate formula from ast2600-A2

2021-03-01 Thread Greg Kroah-Hartman
From: Ryan Chen [ Upstream commit 6286ce1e3ece54799f12775f8ce2a1cba9cbcfc5 ] Starting from A2, the A-PLL calculation has changed. Use the existing formula for A0/A1 and the new formula for A2 onwards. Fixes: d3d04f6c330a ("clk: Add support for AST2600 SoC") Signed-off-by: Ryan Chen Link:

[PATCH 5.11 190/775] MIPS: lantiq: Explicitly compare LTQ_EBU_PCC_ISTAT against 0

2021-03-01 Thread Greg Kroah-Hartman
From: Nathan Chancellor [ Upstream commit c6f2a9e17b9bef7677caddb1626c2402f3e9d2bd ] When building xway_defconfig with clang: arch/mips/lantiq/irq.c:305:48: error: use of logical '&&' with constant operand [-Werror,-Wconstant-logical-operand] if ((irq == LTQ_ICU_EBU_IRQ) && (module ==

[PATCH 5.10 128/663] net: dsa: felix: dont deinitialize unused ports

2021-03-01 Thread Greg Kroah-Hartman
From: Vladimir Oltean [ Upstream commit 42b5adbbac03bdb396192316c015fa3e64ffd5a1 ] ocelot_init_port is called only if dsa_is_unused_port == false, however ocelot_deinit_port is called unconditionally. This causes a warning in the skb_queue_purge inside ocelot_deinit_port saying that the spin

[PATCH 5.10 027/663] ARM: dts: exynos: correct PMIC interrupt trigger level on Artik 5

2021-03-01 Thread Greg Kroah-Hartman
From: Krzysztof Kozlowski [ Upstream commit cb31334687db31c691901269d65074a7ffaecb18 ] The Samsung PMIC datasheets describe the interrupt line as active low with a requirement of acknowledge from the CPU. Without specifying the interrupt type in Devicetree, kernel might apply some fixed

[PATCH 5.10 218/663] Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind()

2021-03-01 Thread Greg Kroah-Hartman
From: Andrea Parri (Microsoft) [ Upstream commit e3fa4b747f085d2cda09bba0533b86fa76038635 ] When channel->device_obj is non-NULL, vmbus_onoffer_rescind() could invoke put_device(), that will eventually release the device and free the channel object (cf. vmbus_device_release()). However, a

[PATCH 5.10 657/663] ipv6: silence compilation warning for non-IPV6 builds

2021-03-01 Thread Greg Kroah-Hartman
From: Leon Romanovsky commit 1faba27f11c8da244e793546a1b35a9b1da8208e upstream. The W=1 compilation of allmodconfig generates the following warning: net/ipv6/icmp.c:448:6: warning: no previous prototype for 'icmp6_send' [-Wmissing-prototypes] 448 | void icmp6_send(struct sk_buff *skb, u8

[PATCH 5.11 117/775] mac80211: fix potential overflow when multiplying to u32 integers

2021-03-01 Thread Greg Kroah-Hartman
From: Colin Ian King [ Upstream commit 6194f7e6473be78acdc5d03edd116944bdbb2c4e ] The multiplication of the u32 variables tx_time and estimated_retx is performed using a 32 bit multiplication and the result is stored in a u64 result. This has a potential u32 overflow issue, so avoid this by

Re: [PATCH v3] x86/fault: Send a SIGBUS to user process always for hwpoison page access.

2021-03-01 Thread Andy Lutomirski
> On Mar 1, 2021, at 11:02 AM, Luck, Tony wrote: > >  >> >> Some programs may use read(2), write(2), etc as ways to check if >> memory is valid without getting a signal. They might not want >> signals, which means that this feature might need to be configurable. > > That sounds like an

[PATCH 5.10 517/663] drm/amdgpu: Set reference clock to 100Mhz on Renoir (v2)

2021-03-01 Thread Greg Kroah-Hartman
From: Alex Deucher commit 6e80fb8ab04f6c4f377e2fd422bdd1855beb7371 upstream. Fixes the rlc reference clock used for GPU timestamps. Value is 100Mhz. Confirmed with hardware team. v2: reword commit message. Bug: https://gitlab.freedesktop.org/drm/amd/-/issues/1480 Acked-by: Christian König

[PATCH 5.10 173/663] crypto: bcm - Rename struct device_private to bcm_device_private

2021-03-01 Thread Greg Kroah-Hartman
From: Jiri Olsa [ Upstream commit f7f2b43eaf6b4cfe54c75100709be31d5c4b52c8 ] Renaming 'struct device_private' to 'struct bcm_device_private', because it clashes with 'struct device_private' from 'drivers/base/base.h'. While it's not a functional problem, it's causing two distinct type

[PATCH 5.10 503/663] ALSA: hda/realtek: modify EAPD in the ALC886

2021-03-01 Thread Greg Kroah-Hartman
From: PeiSen Hou commit 4841b8e6318a7f0ae57c4e5ec09032ea057c97a8 upstream. Modify 0x20 index 7 bit 5 to 1, make the 0x15 EAPD the same as 0x14. Signed-off-by: PeiSen Hou Cc: Link: https://lore.kernel.org/r/e62c5058957f48d8b8953e97135ff...@realtek.com Signed-off-by: Takashi Iwai

[PATCH 5.10 084/663] ath10k: Fix lockdep assertion warning in ath10k_sta_statistics

2021-03-01 Thread Greg Kroah-Hartman
From: Anand K Mistry [ Upstream commit 7df28718928d08034b36168200d67b558ce36f3d ] ath10k_debug_fw_stats_request just be called with conf_mutex held, otherwise the following warning is seen when lock debugging is enabled: WARNING: CPU: 0 PID: 793 at drivers/net/wireless/ath/ath10k/debug.c:357

[PATCH 5.11 081/775] ARM: s3c: fix fiq for clang IAS

2021-03-01 Thread Greg Kroah-Hartman
From: Arnd Bergmann [ Upstream commit 7f9942c61fa60eda7cc8e42f04bd25b7d175876e ] Building with the clang integrated assembler produces a couple of errors for the s3c24xx fiq support: arch/arm/mach-s3c/irq-s3c24xx-fiq.S:52:2: error: instruction 'subne' can not set flags, but 's' suffix

Re: [PATCH v6 1/6] uapi: Define the aux vector AT_MINSIGSTKSZ

2021-03-01 Thread Borislav Petkov
On Sat, Feb 27, 2021 at 08:59:06AM -0800, Chang S. Bae wrote: > Define the AT_MINSIGSTKSZ in generic Linux. It is already used as generic > ABI in glibc's generic elf.h, and this define will prevent future namespace > conflicts. In particular, x86 is also using this generic definition. > >

[PATCH 5.11 237/775] f2fs: compress: fix potential deadlock

2021-03-01 Thread Greg Kroah-Hartman
From: Chao Yu [ Upstream commit 3afae09ffea5e08f523823be99a784675995d6bb ] generic/269 reports a hangtask issue, the root cause is ABBA deadlock described as below: Thread AThread B - down_write(>gc_lock) -- A - f2fs_write_data_pages

[PATCH 5.10 053/663] ACPICA: Fix exception code class checks

2021-03-01 Thread Greg Kroah-Hartman
From: Maximilian Luz [ Upstream commit 3dfaea3811f8b6a89a347e8da9ab862cdf3e30fe ] ACPICA commit 1a3a549286ea9db07d7ec700e7a70dd8bcc4354e The macros to classify different AML exception codes are broken. For instance, ACPI_ENV_EXCEPTION(Status) will always evaluate to zero due to #define

[PATCH 5.10 275/663] RDMA/siw: Fix handling of zero-sized Read and Receive Queues.

2021-03-01 Thread Greg Kroah-Hartman
From: Bernard Metzler [ Upstream commit 661f385961f06f36da24cf408d461f988d0c39ad ] During connection setup, the application may choose to zero-size inbound and outbound READ queues, as well as the Receive queue. This patch fixes handling of zero-sized queues, but not prevents it. Kamal Heib

[PATCH 5.10 139/663] drm/gma500: Fix error return code in psb_driver_load()

2021-03-01 Thread Greg Kroah-Hartman
From: Jialin Zhang [ Upstream commit 6926872ae24452d4f2176a3ba2dee659497de2c4 ] Fix to return a negative error code from the error handling case instead of 0, as done elsewhere in this function. Fixes: 5c49fd3aa0ab ("gma500: Add the core DRM files and headers") Reported-by: Hulk Robot

[PATCH 5.10 484/663] HID: logitech-dj: add support for keyboard events in eQUAD step 4 Gaming

2021-03-01 Thread Greg Kroah-Hartman
From: Filipe Laíns commit ef07c116d98772952807492bd32a61f5af172a94 upstream. In e400071a805d6229223a98899e9da8c6233704a1 I added support for the receiver that comes with the G602 device, but unfortunately I screwed up during testing and it seems the keyboard events were actually not being sent

[PATCH 5.11 267/775] ASoC: SOF: debug: Fix a potential issue on string buffer termination

2021-03-01 Thread Greg Kroah-Hartman
From: Hui Wang [ Upstream commit 9037c3bde65d339017ef41d81cb58069ffc321d4 ] The function simple_write_to_buffer() doesn't add string termination at the end of buf, we need to handle it on our own. This change refers to the function tokenize_input() in debug.c and the function

[PATCH 5.10 166/663] media: em28xx: Fix use-after-free in em28xx_alloc_urbs

2021-03-01 Thread Greg Kroah-Hartman
From: Dinghao Liu [ Upstream commit a26efd1961a18b91ae4cd2e433adbcf865b40fa3 ] When kzalloc() fails, em28xx_uninit_usb_xfer() will free usb_bufs->buf and set it to NULL. Thus the later access to usb_bufs->buf[i] will lead to null pointer dereference. Also the kfree(usb_bufs->buf) after that is

[PATCH 5.11 193/775] media: ipu3-cio2: Build only for x86

2021-03-01 Thread Greg Kroah-Hartman
From: Andy Shevchenko [ Upstream commit 3ef5e42d281ea108f4ccdca186de4ce20a346326 ] According to the original code in the driver it was never assumed to work with big page sizes: unsigned short type followed by PAGE_SHIFT and PAGE_MASK which may be different on non-x86 architectures. Recently

[PATCH 5.11 293/775] ASoC: simple-card-utils: Fix device module clock

2021-03-01 Thread Greg Kroah-Hartman
From: Sameer Pujar [ Upstream commit 1e30f642cf2939bbdac82ea0dd3071232670b5ab ] If "clocks = <>" is specified from the CPU or Codec component device node, the clock is not getting enabled. Thus audio playback or capture fails. Fix this by populating "simple_dai->clk" field when clocks property

[PATCH 5.11 088/775] soc: aspeed: snoop: Add clock control logic

2021-03-01 Thread Greg Kroah-Hartman
From: Jae Hyun Yoo [ Upstream commit 3f94cf15583be554df7aaa651b8ff8e1b68fbe51 ] If LPC SNOOP driver is registered ahead of lpc-ctrl module, LPC SNOOP block will be enabled without heart beating of LCLK until lpc-ctrl enables the LCLK. This issue causes improper handling on host interrupts when

[PATCH 5.10 009/663] PCI: qcom: Use PHY_REFCLK_USE_PAD only for ipq8064

2021-03-01 Thread Greg Kroah-Hartman
From: Ansuel Smith commit 2cfef1971aea6119ee27429181d6cb3383031ac2 upstream. The use of PHY_REFCLK_USE_PAD introduced a regression for apq8064 devices. It was tested that while apq doesn't require the padding, ipq SoC must use it or the kernel hangs on boot. Link:

[PATCH 5.10 334/663] i2c: qcom-geni: Store DMA mapping data in geni_i2c_dev struct

2021-03-01 Thread Greg Kroah-Hartman
From: Roja Rani Yarubandi [ Upstream commit 357ee8841d0b7bd822f25fc768afbc0c2ab7e47b ] Store DMA mapping data in geni_i2c_dev struct to enhance DMA mapping data scope. For example during shutdown callback to unmap DMA mapping, this stored DMA mapping data can be used to call

[PATCH 5.10 164/663] media: camss: missing error code in msm_video_register()

2021-03-01 Thread Greg Kroah-Hartman
From: Dan Carpenter [ Upstream commit 9c67ed2ab299123872be14a3dc2ea44ce7e4538b ] This error path returns success but it should return -EINVAL. Fixes: cba3819d1e93 ("media: camss: Format configuration per hardware version") Signed-off-by: Dan Carpenter Reviewed-by: Robert Foss Signed-off-by:

[PATCH 5.10 268/663] i2c: iproc: update slave isr mask (ISR_MASK_SLAVE)

2021-03-01 Thread Greg Kroah-Hartman
From: Rayagonda Kokatanur [ Upstream commit 603e77af7b0704bdb057de0368f1f2b04fc9552c ] Update slave isr mask (ISR_MASK_SLAVE) to include remaining two slave interrupts. Fixes: c245d94ed106 ("i2c: iproc: Add multi byte read-write support for slave mode") Signed-off-by: Rayagonda Kokatanur

[PATCH 5.10 025/663] arm64: dts: renesas: beacon kit: Fix choppy Bluetooth Audio

2021-03-01 Thread Greg Kroah-Hartman
From: Adam Ford [ Upstream commit db030c5a9658846a42fbed4d43a8b5f28a2d7ab7 ] The Bluetooth chip is capable of operating at 4Mbps, but the max-speed setting was on the UART node instead of the Bluetooth node, so the chip didn't operate at the correct speed resulting in choppy audio. Fix this by

[PATCH 5.11 044/775] bpf: Avoid warning when re-casting __bpf_call_base into __bpf_call_base_args

2021-03-01 Thread Greg Kroah-Hartman
From: Andrii Nakryiko [ Upstream commit 6943c2b05bf09fd5c5729f7d7d803bf3f126cb9a ] BPF interpreter uses extra input argument, so re-casts __bpf_call_base into __bpf_call_base_args. Avoid compiler warning about incompatible function prototypes by casting to void * first. Fixes: 1ea47e01ad6e

[PATCH 5.10 450/663] net/mlx4_core: Add missed mlx4_free_cmd_mailbox()

2021-03-01 Thread Greg Kroah-Hartman
From: Chuhong Yuan [ Upstream commit 8eb65fda4a6dbd59cd5de24b106a10b6ee0d2176 ] mlx4_do_mirror_rule() forgets to call mlx4_free_cmd_mailbox() to free the memory region allocated by mlx4_alloc_cmd_mailbox() before an exit. Add the missed call to fix it. Fixes: 78efed275117 ("net/mlx4_core:

[PATCH 5.11 084/775] ARM: at91: use proper asm syntax in pm_suspend

2021-03-01 Thread Greg Kroah-Hartman
From: Arnd Bergmann [ Upstream commit d30337da8677cd73cb1936b311c13e57356f ] Compiling with the clang integrated assembler warns about a recently added instruction: :14:13: error: unknown token in expression ldr tmp1, =#0x00020010UL arch/arm/mach-at91/pm_suspend.S:542:2: note: while in

[PATCH 5.11 192/775] drm/fourcc: fix Amlogic format modifier masks

2021-03-01 Thread Greg Kroah-Hartman
From: Simon Ser [ Upstream commit cc3283f8f41f741fbaef63d0503d8fb4a7919100 ] The comment says the layout and options use 8 bits, and the shift uses 8 bits. However the mask is 0xf, ie. 0b (4 bits). This could be surprising when introducing new layouts or options that take more than 4

[PATCH 5.4 340/340] net: qrtr: Fix memory leak in qrtr_tun_open

2021-03-01 Thread Greg Kroah-Hartman
From: Takeshi Misawa commit fc0494ead6398609c49afa37bc949b61c5c16b91 upstream. If qrtr_endpoint_register() failed, tun is leaked. Fix this, by freeing tun in error path. syzbot report: BUG: memory leak unreferenced object 0x88811848d680 (size 64): comm "syz-executor684", pid 10171,

[PATCH 5.11 276/775] drm/vc4: hdmi: Restore cec physical address on reconnect

2021-03-01 Thread Greg Kroah-Hartman
From: Dom Cobley [ Upstream commit 4d8602b8ec16f5721a4d1339c610a81f95df1856 ] Currently we call cec_phys_addr_invalidate on a hotplug deassert. That may be due to a TV power cycling, or an AVR being switched on (and switching edid). This makes CEC unusable since our controller wouldn't have a

[PATCH 5.10 148/663] media: allegro: Fix use after free on error

2021-03-01 Thread Greg Kroah-Hartman
From: Dan Carpenter [ Upstream commit ce814ad4bb52bfc7c0472e6da0aa742ab88f4361 ] The "channel" is added to the "dev->channels" but then if v4l2_m2m_ctx_init() fails then we free "channel" but it's still on the list so it could lead to a use after free. Let's not add it to the list until after

[PATCH 5.11 184/775] drm: rcar-du: Fix PM reference leak in rcar_cmm_enable()

2021-03-01 Thread Greg Kroah-Hartman
From: Qinglang Miao [ Upstream commit 136ce7684bc1ff4a088812f600c63daca50b32c2 ] pm_runtime_get_sync will increment pm usage counter even it failed. Forgetting to putting operation will result in a reference leak here. A new function pm_runtime_resume_and_get is introduced in [0] to keep usage

[PATCH 5.10 608/663] powerpc/kexec_file: fix FDT size estimation for kdump kernel

2021-03-01 Thread Greg Kroah-Hartman
From: Hari Bathini commit 2377c92e37fe97bc5b365f55cf60f56dfc4849f5 upstream. On systems with large amount of memory, loading kdump kernel through kexec_file_load syscall may fail with the below error: "Failed to update fdt with linux,drconf-usable-memory property" This happens because the

Re: [PATCH v2 0/3] Add some perf support for mips

2021-03-01 Thread Arnaldo Carvalho de Melo
Em Fri, Feb 26, 2021 at 08:49:29PM -0300, Arnaldo Carvalho de Melo escreveu: > Em Fri, Feb 26, 2021 at 09:11:17AM +0800, Tiezhu Yang escreveu: > > Sorry for the late reply. I asked for a leave yesterday. > > asm/perf_regs.h is a new added file in the patch #1, > > the patch link is: > >

[PATCH 5.10 358/663] RDMA/hns: Fix type of sq_signal_bits

2021-03-01 Thread Greg Kroah-Hartman
From: Weihang Li [ Upstream commit ea4092f3b56b236d08890ea589506ebd76248c53 ] This bit should be in type of enum ib_sig_type, or there will be a sparse warning. Fixes: bfe860351e31 ("RDMA/hns: Fix cast from or to restricted __le32 for driver") Link:

[PATCH 5.11 205/775] ASoC: cs42l56: fix up error handling in probe

2021-03-01 Thread Greg Kroah-Hartman
From: Dan Carpenter [ Upstream commit 856fe64da84c95a1d415564b981ae3908eea2a76 ] There are two issues with this code. The first error path forgot to set the error code and instead returns success. The second error path doesn't clean up. Fixes: 272b5edd3b8f ("ASoC: Add support for CS42L56

[PATCH 5.11 177/775] crypto: sun4i-ss - linearize buffers content must be kept

2021-03-01 Thread Greg Kroah-Hartman
From: Corentin Labbe [ Upstream commit 583513510a7acd2306787865bcd19ebb2f629d42 ] When running the non-optimized cipher function, SS produce partial random output. This is due to linearize buffers being reseted after each loop. For preserving stack, instead of moving them back to start of

[PATCH 5.10 065/663] usb: dwc2: Make "trimming xfer length" a debug message

2021-03-01 Thread Greg Kroah-Hartman
From: Guenter Roeck [ Upstream commit 1a9e38cabd80356ffb98c2c88fec528ea9644fd5 ] With some USB network adapters, such as DM96xx, the following message is seen for each maximum size receive packet. dwc2 ff54.usb: dwc2_update_urb_state(): trimming xfer length This happens because the packet

[PATCH 5.11 106/775] net/mlx5e: Dont change interrupt moderation params when DIM is enabled

2021-03-01 Thread Greg Kroah-Hartman
From: Maxim Mikityanskiy [ Upstream commit 019f93bc4ba3a0dcb77f448ee77fc4c9c1b89565 ] When mlx5e_ethtool_set_coalesce doesn't change DIM state (enabled/disabled), it calls mlx5e_set_priv_channels_coalesce unconditionally, which in turn invokes a firmware command to set interrupt moderation

Re: memory leak in bpf

2021-03-01 Thread Dmitry Vyukov
On Mon, Mar 1, 2021 at 5:21 PM Rustam Kovhaev wrote: > > On Wed, Dec 09, 2020 at 10:58:10PM -0800, syzbot wrote: > > syzbot has found a reproducer for the following issue on: > > > > HEAD commit:a68a0262 mm/madvise: remove racy mm ownership check > > git tree: upstream > > console

[PATCH 5.11 323/775] RDMA/siw: Fix handling of zero-sized Read and Receive Queues.

2021-03-01 Thread Greg Kroah-Hartman
From: Bernard Metzler [ Upstream commit 661f385961f06f36da24cf408d461f988d0c39ad ] During connection setup, the application may choose to zero-size inbound and outbound READ queues, as well as the Receive queue. This patch fixes handling of zero-sized queues, but not prevents it. Kamal Heib

[PATCH 5.11 320/775] clk: renesas: r8a779a0: Remove non-existent S2 clock

2021-03-01 Thread Greg Kroah-Hartman
From: Geert Uytterhoeven [ Upstream commit 5b30be15ca262d9cb2c36b173bb488e8d1952ea0 ] The S2 internal core clock does not exist on R-Car V3U. Remove it. Fixes: 17bcc8035d2d19fc ("clk: renesas: cpg-mssr: Add support for R-Car V3U") Signed-off-by: Geert Uytterhoeven Reviewed-by: Yoshihiro

[PATCH 5.11 050/775] arm64: dts: allwinner: A64: Limit MMC2 bus frequency to 150 MHz

2021-03-01 Thread Greg Kroah-Hartman
From: Andre Przywara [ Upstream commit 948c657cc45e8ce48cb533d4e2106145fa765759 ] In contrast to the H6 (and later) manuals, the A64 datasheet does not specify any limitations in the maximum possible frequency for eMMC controllers. However experimentation has found that a 150 MHz limit similar

[PATCH 5.10 371/663] printk: avoid prb_first_valid_seq() where possible

2021-03-01 Thread Greg Kroah-Hartman
From: John Ogness [ Upstream commit 13791c80b0cdf54d92fc54221cdf490683b109de ] If message sizes average larger than expected (more than 32 characters), the data_ring will wrap before the desc_ring. Once the data_ring wraps, it will start invalidating descriptors. These invalid descriptors hang

[PATCH 5.11 182/775] ASoC: fsl_aud2htx: select SND_SOC_IMX_PCM_DMA

2021-03-01 Thread Greg Kroah-Hartman
From: Arnd Bergmann [ Upstream commit a1f31cc4e98e1833f53fd2c6e9a218d6b86f5388 ] The newly added driver requires DMA support and fails to build when that is disabled: aarch64-linux-ld: sound/soc/fsl/fsl_aud2htx.o: in function `fsl_aud2htx_probe': fsl_aud2htx.c:(.text+0x3e0): undefined

[PATCH 5.10 003/663] debugfs: be more robust at handling improper input in debugfs_lookup()

2021-03-01 Thread Greg Kroah-Hartman
From: Greg Kroah-Hartman commit bc6de804d36b3709d54fa22bd128cbac91c11526 upstream. debugfs_lookup() doesn't like it if it is passed an illegal name pointer, or if the filesystem isn't even initialized yet. If either of these happen, it will crash the system, so fix it up by properly testing

[PATCH 5.11 218/775] drm/amdgpu: toggle on DF Cstate after finishing xgmi injection

2021-03-01 Thread Greg Kroah-Hartman
From: Guchun Chen [ Upstream commit fe2d9f5abf19f2b3688b3b8da4e42f8d07886847 ] Fixes: 5c23e9e05e42 ("drm/amdgpu: Update RAS XGMI error inject sequence") Signed-off-by: Guchun Chen Reviewed-by: Hawking Zhang Signed-off-by: Alex Deucher Signed-off-by: Sasha Levin ---

[PATCH 5.11 171/775] gma500: clean up error handling in init

2021-03-01 Thread Greg Kroah-Hartman
From: Dan Carpenter [ Upstream commit 15ccc39b3aab667c6fa131206f01f31bfbccdf6a ] The main problem with this error handling was that it didn't clean up if i2c_add_numbered_adapter() failed. This code is pretty old, and doesn't match with today's checkpatch.pl standards so I took the opportunity

[PATCH 5.10 154/663] drm/amdgpu: Fix macro name _AMDGPU_TRACE_H_ in preprocessor if condition

2021-03-01 Thread Greg Kroah-Hartman
From: Chenyang Li [ Upstream commit 956e20eb0fbb206e5e795539db5469db099715c8 ] Add an underscore in amdgpu_trace.h line 24 "_AMDGPU_TRACE_H". Fixes: d38ceaf99ed0 ("drm/amdgpu: add core driver (v4)") Reviewed-by: Guchun Chen Reviewed-by: Paul Menzel Signed-off-by: Chenyang Li Signed-off-by:

[PATCH 5.10 555/663] pstore: Fix typo in compression option name

2021-03-01 Thread Greg Kroah-Hartman
From: Jiri Bohac commit 19d8e9149c27b689c6224f5c84b96a159342195a upstream. Both pstore_compress() and decompress_record() use a mistyped config option name ("PSTORE_COMPRESSION" instead of "PSTORE_COMPRESS"). As a result compression and decompression of pstore records was always disabled. Use

[PATCH 5.11 295/775] jffs2: fix use after free in jffs2_sum_write_data()

2021-03-01 Thread Greg Kroah-Hartman
From: Tom Rix [ Upstream commit 19646447ad3a680d2ab08c097585b7d96a66126b ] clang static analysis reports this problem fs/jffs2/summary.c:794:31: warning: Use of memory after it is freed c->summary->sum_list_head = temp->u.next;

[PATCH 5.10 048/663] arm64: dts: allwinner: A64: Limit MMC2 bus frequency to 150 MHz

2021-03-01 Thread Greg Kroah-Hartman
From: Andre Przywara [ Upstream commit 948c657cc45e8ce48cb533d4e2106145fa765759 ] In contrast to the H6 (and later) manuals, the A64 datasheet does not specify any limitations in the maximum possible frequency for eMMC controllers. However experimentation has found that a 150 MHz limit similar

[PATCHv2 2/4] perf evsel: Print warning for excluding kernel mode instruction tracing

2021-03-01 Thread Sai Prakash Ranjan
Add a warning message to check CONFIG_EXCLUDE_KERNEL_HW_ITRACE kernel config which excludes kernel mode instruction tracing to help perf tool users identify the perf event open failure when they attempt kernel mode tracing with this config enabled. Tested-by: Denis Nikitin Signed-off-by: Sai

[PATCHv2 1/4] perf/core: Add support to exclude kernel mode PMU tracing

2021-03-01 Thread Sai Prakash Ranjan
Hardware assisted tracing families such as ARM Coresight, Intel PT provides rich tracing capabilities including instruction level tracing and accurate timestamps which are very useful for profiling and also pose a significant security risk. One such example of security risk is when kernel mode

[PATCHv2 3/4] coresight: etm4x: Add support to exclude kernel mode tracing

2021-03-01 Thread Sai Prakash Ranjan
On production systems with ETMs enabled, it is preferred to exclude kernel mode(NS EL1) tracing for security concerns and support only userspace(NS EL0) tracing. Perf subsystem interface uses the newly introduced kernel config CONFIG_EXCLUDE_KERNEL_PMU_TRACE to exclude kernel mode tracing, but

[PATCH 5.11 180/775] hwrng: ingenic - Fix a resource leak in an error handling path

2021-03-01 Thread Greg Kroah-Hartman
From: Christophe JAILLET [ Upstream commit c4ff41b93d1f10d1b8be258c31a0436c5769fc00 ] In case of error, we should call 'clk_disable_unprepare()' to undo a previous 'clk_prepare_enable()' call, as already done in the remove function. Fixes: 406346d22278 ("hwrng: ingenic - Add hardware TRNG for

[PATCH 5.10 508/663] Revert "MIPS: Octeon: Remove special handling of CONFIG_MIPS_ELF_APPENDED_DTB=y"

2021-03-01 Thread Greg Kroah-Hartman
From: Kevin Hao commit fe82de91af83a9212b6c704b1ce6cf6d129a108b upstream. This reverts commit d9df9fb901d25b941ab2cfb5b570d91fb2abf7a3. For the OCTEON boards, it need to patch the built-in DTB before using it. Previously it judges if it is a built-in DTB by checking fw_passed_dtb. But after

[PATCHv2 0/4] perf/core: Add support to exclude kernel mode PMU tracing

2021-03-01 Thread Sai Prakash Ranjan
Hardware assisted tracing families such as ARM Coresight, Intel PT provides rich tracing capabilities including instruction level tracing and accurate timestamps which are very useful for profiling and also pose a significant security risk. One such example of security risk is when kernel mode

<    7   8   9   10   11   12   13   14   15   16   >