[PATCH 2/2] ASoC: AMD: For capture have interrupts on I2S->ACP channel

2018-07-16 Thread Akshu Agrawal
Having interrupts enabled for ACP<->SYSMEM DMA transfer, we are in for an interrupt storm. For both playback and capture interrupts should be enabled for I2S<->ACP DMA. Signed-off-by: Akshu Agrawal --- sound/soc/amd/acp-pcm-dma.c | 14 ++ 1 file changed, 6 insertions(+), 8 deletions(

[PATCH 1/2] ASoC: AMD: Send correct channel for configuring DMA descriptors

2018-07-16 Thread Akshu Agrawal
Earlier, ch1 was used to define ACP-SYSMEM transfer and ch2 for ACP-I2S transfer. With recent patches ch1 is used to define channel order number 1 and ch2 as channel order number 2. Thus, Playback: ch1:SYSMEM->ACP ch2:ACP->I2S Capture: ch1:I2S->ACP ch1:ACP->SYSMEM Signed-off-by: Akshu Agrawal ---

Re: [patch -mm] mm, oom: remove oom_lock from exit_mmap

2018-07-16 Thread Tetsuo Handa
On 2018/07/16 15:13, Michal Hocko wrote: > On Sat 14-07-18 06:18:58, Tetsuo Handa wrote: >>> @@ -3073,9 +3073,7 @@ void exit_mmap(struct mm_struct *mm) >>> * which clears VM_LOCKED, otherwise the oom reaper cannot >>> * reliably test it. >>> */ >>> -

Re: [PATCH v2 05/12] dt-bindings: spi: Adjust the bindings for the FSL QSPI driver

2018-07-16 Thread Frieder Schrempf
Hi Rob, On 12.07.2018 17:20, Rob Herring wrote: On Thu, Jul 12, 2018 at 2:14 AM Frieder Schrempf wrote: Hi Rob, On 11.07.2018 18:05, Rob Herring wrote: On Thu, Jul 05, 2018 at 01:15:01PM +0200, Frieder Schrempf wrote: Adjust the documentation of the new SPI memory interface based driver to

[PATCH] dts/droid4: fix dts w.r.t. pwm

2018-07-16 Thread Pavel Machek
pwm node should not be under gpio6 node in the device tree. This fixes detection of the pwm on Droid 4. Signed-off-by: Pavel Machek diff --git a/arch/arm/boot/dts/omap4-droid4-xt894.dts b/arch/arm/boot/dts/omap4-droid4-xt894.dts index 45305e8..c27fc87 100644 --- a/arch/arm/boot/dts/oma

[PATCH] pwm-omap: handle timers not ready in probe

2018-07-16 Thread Pavel Machek
When all the drivers are built-in, timers are not ready and probing fails. Fix that with -EPROBE_DEFFER. Signed-off-by: Pavel Machek diff --git a/drivers/pwm/pwm-omap-dmtimer.c b/drivers/pwm/pwm-omap-dmtimer.c index 665da3c..debeb70 100644 --- a/drivers/pwm/pwm-omap-dmtimer.c +++ b/drivers/pwm/

Re: WARNING: kmalloc bug in krealloc

2018-07-16 Thread Tetsuo Handa
This looks like a v9fs bug. xattrwalk is returning bogus return value. [ 30.321571] v9fs_xattr_get(): name = security.capability buffer = (null) value_len = 0 [ 30.323819] >>> TXATTRWALK file_fid 1, attr_fid 2 name security.capability [ 30.326132] <<< RXATTRWALK fid 2 size 174411

[PATCH 4.17 00/67] 4.17.7-stable review

2018-07-16 Thread Greg Kroah-Hartman
This is the start of the stable review cycle for the 4.17.7 release. There are 67 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Jul 18 07:34:11 UTC 2018. Anything receive

[PATCH 4.17 10/67] mmc: dw_mmc: fix card threshold control configuration

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: x00270170 commit 7a6b9f4d601dfce8cb68f0dcfd834270280e31e6 upstream. Card write threshold control is supposed to be set since controller version 2.80a for data write in HS400 mode and data read

[PATCH 4.17 01/67] bpf: reject passing modified ctx to helper functions

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Daniel Borkmann commit 58990d1ff3f7896ee341030e9a7c2e4002570683 upstream. As commit 28e33f9d78ee ("bpf: disallow arithmetic operations on context pointer") already describes, f1174f77b50c ("bp

[PATCH 4.17 04/67] MIPS: Fix ioremap() RAM check

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Paul Burton commit 523402fa9101090c91d2033b7ebdfdcf65880488 upstream. We currently attempt to check whether a physical address range provided to __ioremap() may be in use by the page allocator

[PATCH 4.17 05/67] drm/etnaviv: Check for platform_device_register_simple() failure

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Fabio Estevam commit 45a0faaba9c8c5ba1e31a08a391aed0bad327167 upstream. platform_device_register_simple() may fail, so we should better check its return value and propagate it in the case of e

[PATCH 4.17 03/67] MIPS: Use async IPIs for arch_trigger_cpumask_backtrace()

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Paul Burton commit b63e132b6433a41cf311e8bc382d33fd2b73b505 upstream. The current MIPS implementation of arch_trigger_cpumask_backtrace() is broken because it attempts to use synchronous IPIs

[PATCH 4.17 07/67] drm/etnaviv: bring back progress check in job timeout handler

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Lucas Stach commit 2c83a726d6fbb5d130d8f2edd82a258adb675ac3 upstream. When the hangcheck handler was replaced by the DRM scheduler timeout handling we dropped the forward progress check, as th

[PATCH 4.17 06/67] drm/etnaviv: Fix driver unregistering

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Fabio Estevam commit bf6ba3aeb2962e5ee4a78e7535af579ecba630bb upstream. Russell King reported: "When removing and reloading the etnaviv module, the following splat occurs: sysfs: cannot crea

[PATCH 4.17 02/67] MIPS: Call dump_stack() from show_regs()

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Paul Burton commit 5a267832c2ec47b2dad0fdb291a96bb5b8869315 upstream. The generic nmi_cpu_backtrace() function calls show_regs() when a struct pt_regs is available, and dump_stack() otherwise.

[PATCH 4.17 12/67] ibmasm: dont write out of bounds in read handler

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Jann Horn commit a0341fc1981a950c1e902ab901e98f60e0e243f3 upstream. This read handler had a lot of custom logic and wrote outside the bounds of the provided buffer. This could lead to kernel a

[PATCH 4.17 09/67] mmc: sdhci-esdhc-imx: allow 1.8V modes without 100/200MHz pinctrl states

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Stefan Agner commit 92748beac07c471d995fbec642b63572dc01b3dc upstream. If pinctrl nodes for 100/200MHz are missing, the controller should not select any mode which need signal frequencies 100M

[PATCH 4.17 21/67] ahci: Add Intel Ice Lake LP PCI ID

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Mika Westerberg commit ba44579141f9e2c0229e6e7eeb00b5fa68f0f74a upstream. This should also be using the default LPM policy for mobile chipsets so add the PCI ID to the driver list of supported

[PATCH 4.17 24/67] USB: serial: ch341: fix type promotion bug in ch341_control_in()

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit e33eab9ded328ccc14308afa51b5be7cbe78d30b upstream. The "r" variable is an int and "bufsize" is an unsigned int so the comparison is type promoted to unsigned. If usb_cont

[PATCH 4.17 25/67] USB: serial: cp210x: add another USB ID for Qivicon ZigBee stick

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Olli Salonen commit 367b160fe4717c14a2a978b6f9ffb75a7762d3ed upstream. There are two versions of the Qivicon Zigbee stick in circulation. This adds the second USB ID to the cp210x driver. Sig

[PATCH 4.17 26/67] USB: serial: keyspan_pda: fix modem-status error handling

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 01b3cdfca263a17554f7b249d20a247b2a751521 upstream. Fix broken modem-status error handling which could lead to bits of slab data leaking to user space. Fixes: 3b36a8fd6777

[PATCH 4.17 22/67] ahci: Disable LPM on Lenovo 50 series laptops with a too old BIOS

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Hans de Goede commit 240630e61870e62e39a97225048f9945848fa5f5 upstream. There have been several reports of LPM related hard freezes about once a day on multiple Lenovo 50 series models. Strang

[PATCH 4.17 23/67] thunderbolt: Notify userspace when boot_acl is changed

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Mika Westerberg commit 007a74907deeceefef9dc3ec4679fbd7921eaa51 upstream. The commit 9aaa3b8b4c56 ("thunderbolt: Add support for preboot ACL") introduced boot_acl attribute but missed the fact

[PATCH 4.17 27/67] USB: yurex: fix out-of-bounds uaccess in read handler

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Jann Horn commit f1e255d60ae66a9f672ff9a207ee6cd8e33d2679 upstream. In general, accessing userspace memory beyond the length of the supplied buffer in VFS read/write handlers can lead to both

[PATCH 4.17 41/67] kbuild: delete INSTALL_FW_PATH from kbuild documentation

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Randy Dunlap commit 3f9cdee5929b7d035e86302dcf08fbf3e80b0739 upstream. Removed Kbuild documentation for INSTALL_FW_PATH. The kbuild symbol INSTALL_FW_PATH was removed from Kbuild tools in Sep

[PATCH 4.17 28/67] USB: serial: mos7840: fix status-register error handling

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 794744abfffef8b1f3c0c8a4896177d6d13d653d upstream. Add missing transfer-length sanity check to the status-register completion handler to avoid leaking bits of uninitialised

[PATCH 4.17 44/67] tools build: fix # escaping in .cmd files for future Make

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Paul Menzel commit 9feeb638cde083c737e295c0547f1b4f28e99583 upstream. In 2016 GNU Make made a backwards incompatible change to the way '#' characters were handled in Makefiles when used inside

[PATCH 4.17 19/67] tracing/kprobe: Release kprobe print_fmt properly

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Jiri Olsa commit 0fc8c3581dd42bc8f530314ca86db2d861485731 upstream. We don't release tk->tp.call.print_fmt when destroying local uprobe. Also there's missing print_fmt kfree in create_local_tr

[PATCH 4.17 18/67] mtd: spi-nor: cadence-quadspi: Fix direct mode write timeouts

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Vignesh R commit aa7eee8a143a7e8b530eb1e75fb86cae793d1e21 upstream. Sometimes when writing large size files to flash in direct/memory mapped mode, it is seen that flash write enable command ti

[PATCH 4.17 30/67] xhci: xhci-mem: off by one in xhci_stream_id_to_ring()

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit 313db3d6488bb03b61b99de9dbca061f1fd838e1 upstream. The > should be >= here so that we don't read one element beyond the end of the ep->stream_info->stream_rings[] array.

[PATCH 4.17 14/67] staging: r8822be: Fix RTL8822be cant find any wireless AP

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Ping-Ke Shih commit d59d2f9995d28974877750f429e821324bd603c7 upstream. RTL8822be can't bring up properly on ASUS X530UN, and dmesg says: [ 8.591333] r8822be: module is from the staging directo

[PATCH 4.17 33/67] ALSA: hda/realtek - two more lenovo models need fixup of MIC_LOCATION

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Hui Wang commit c6b17f1020d956f4113d478cae6171b9093817ba upstream. We have two new lenovo desktop models which need to apply the fixup of ALC294_FIXUP_LENOVO_MIC_LOCATION, and they have the sa

[PATCH 4.17 13/67] staging: rtl8723bs: Prevent an underflow in rtw_check_beacon_data().

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Murray McAllister commit 920c92448839bd4f8eb87a92b08cad56d449caff upstream. Dan Carpenter reported an integer underflow issue in the rtl8188eu driver. This is also needed for the length (signe

[PATCH 4.17 35/67] mm: do not drop unused pages when userfaultd is running

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Christian Borntraeger commit bce73e4842390f7b7309c8e253e139db71288ac3 upstream. KVM guests on s390 can notify the host of unused pages. This can result in pte_unused callbacks to be true for

[PATCH 4.17 45/67] IB/hfi1: Fix incorrect mixing of ERR_PTR and NULL return values

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Michael J. Ruhl commit b697d7d8c741f27b728a878fc55852b06d0f6f5e upstream. The __get_txreq() function can return a pointer, ERR_PTR(-EBUSY), or NULL. All of the relevant call sites look for IS_

[PATCH 4.17 34/67] ALSA: hda - Handle pm failure during hotplug

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Chris Wilson commit aaa23f86001bdb82d2f937c5c7bce0a1e11a6c5b upstream. Obtaining the runtime pm wakeref can fail, especially in a hotplug scenario where i915.ko has been unloaded. If we do not

[PATCH 4.17 40/67] tracing: Reorder display of TGID to be after PID

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Joel Fernandes (Google) commit f8494fa3dd10b52eab47a9666a8bc34719a129aa upstream. Currently ftrace displays data in trace output like so: _-=> irqs-

[PATCH 4.17 36/67] fs/proc/task_mmu.c: fix Locked field in /proc/pid/smaps*

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Vlastimil Babka commit e70cc2bd579e8a9d6d153762f0fe294d0e652ff0 upstream. Thomas reports: "While looking around in /proc on my v4.14.52 system I noticed that all processes got a lot of "Loc

[PATCH 4.17 20/67] vmw_balloon: fix inflation with batching

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Nadav Amit commit 90d72ce079791399ac255c75728f3c9e747b093d upstream. Embarrassingly, the recent fix introduced worse problem than it solved, causing the balloon not to inflate. The VM informed

[PATCH 4.17 11/67] mmc: renesas_sdhi_internal_dmac: Cannot clear the RX_IN_USE in abort

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Yoshihiro Shimoda commit 25a98edd5795719c5187e16ea271e8de86e02809 upstream. This patch is fixes an issue that the SDHI_INTERNAL_DMAC_RX_IN_USE flag cannot be cleared because tmio_mmc_core sets

[PATCH 4.17 16/67] ata: Fix ZBC_OUT all bit handling

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Damien Le Moal commit 6edf1d4cb0acde3a0a5dac849f33031bd7abb7b1 upstream. If the ALL bit is set in the ZBC_OUT command, the command zone ID field (block) should be ignored. Reported-by: David

[PATCH 4.17 39/67] mm: do not bug_on on incorrect length in __mm_populate()

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Michal Hocko commit bb177a732c4369bb58a1fe1df8f552b6f0f7db5f upstream. syzbot has noticed that a specially crafted library can easily hit VM_BUG_ON in __mm_populate kernel BUG at mm/gup.c:1

[PATCH 4.17 32/67] mm: zero unavailable pages before memmap init

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Pavel Tatashin commit e181ae0c5db9544de9c53239eb22bc012ce75033 upstream. We must zero struct pages for memory that is not backed by physical memory, or kernel does not have access to. Recentl

[PATCH 4.17 15/67] ata: Fix ZBC_OUT command block check

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Damien Le Moal commit b320a0a9f23c98f21631eb27bcbbca91c79b1c6e upstream. The block (LBA) specified must not exceed the last addressable LBA, which is dev->nr_sectors - 1. So fix the correct ch

[PATCH 4.17 17/67] mei: discard messages from not connected client during power down.

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Alexander Usyskin commit b7a020bff31318fc8785e6f96b1d38c1625cf1fb upstream. This fixes regression introduced by commit 8d52af6795c0 ("mei: speed up the power down flow") In power down or susp

[PATCH 4.17 31/67] Fix up non-directory creation in SGID directories

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Linus Torvalds commit 0fa3ecd87848c9c93c2c828ef4c3a8ca36ce46c7 upstream. sgid directories have special semantics, making newly created files in the directory belong to the group of the directo

[PATCH 4.17 42/67] acpi, nfit: Fix scrub idle detection

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Dan Williams commit 33cc2c9667561b224215e6dfb5bf98e8fa17914e upstream. The notification of scrub completion happens within the scrub workqueue. That can clearly race someone running scrub_show

[PATCH 4.17 60/67] RDMA/ucm: Mark UCM interface as BROKEN

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Leon Romanovsky commit 7a8690ed6f5346f6738971892205e91d39b6b901 upstream. In commit 357d23c811a7 ("Remove the obsolete libibcm library") in rdma-core [1], we removed obsolete library which use

[PATCH 4.14 01/54] media: rc: mce_kbd decoder: fix stuck keys

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Sean Young commit 63039c29f7a4ce8a8bd165173840543c0098d7b0 upstream. The MCE Remote sends a 0 scancode when keys are released. If this is not received or decoded, then keys can get "stuck"; th

[PATCH 4.17 38/67] fs, elf: make sure to page align bss in load_elf_library

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Oscar Salvador commit 24962af7e1041b7e50c1bc71d8d10dc678c556b5 upstream. The current code does not make sure to page align bss before calling vm_brk(), and this can lead to a VM_BUG_ON() in __

[PATCH 4.17 52/67] crypto: x86/salsa20 - remove x86 salsa20 implementations

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Eric Biggers commit b7b73cd5d74694ed59abcdb4974dacb4ff8b2a2a upstream. The x86 assembly implementations of Salsa20 use the frame base pointer register (%ebp or %rbp), which breaks frame pointe

[PATCH 4.17 54/67] netfilter: nf_queue: augment nfqa_cfg_policy

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Eric Dumazet commit ba062ebb2cd561d404e0fba8ee4b3f5ebce7cbfc upstream. Three attributes are currently not verified, thus can trigger KMSAN warnings such as : BUG: KMSAN: uninit-value in __arc

[PATCH 4.17 58/67] xfs: fix inobt magic number check

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Darrick J. Wong commit 2e050e648ad6c74a2f0a28f645155128be0626ca upstream. In commit a6a781a58befcbd467c ("xfs: have buffer verifier functions report failing address") the bad magic number retu

[PATCH 4.17 66/67] f2fs: sanity check for total valid node blocks

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Jaegeuk Kim commit 8a29c1260e24e7c9c6ab138aa0017558d8b28208 upstream. This patch enhances sanity check for SIT entries. syzbot hit the following crash on upstream commit 83beed7b2b26f232d7821

[PATCH 4.17 37/67] x86/purgatory: add missing FORCE to Makefile target

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Philipp Rudo commit fa8cbda88db12e632a8987c94b66f5caf25bcec4 upstream. - Build the kernel without the fix - Add some flag to the purgatories KBUILD_CFLAGS,I used -fno-asynchronous-unwind-tab

[PATCH 4.17 64/67] f2fs: avoid bug_on on corrupted inode

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Jaegeuk Kim commit 5d64600d4f337dc2bb89cd59da99f452f5e4f3c3 upstream. syzbot has tested the proposed patch but the reproducer still triggered crash: kernel BUG at fs/f2fs/inode.c:LINE! F2FS-f

[PATCH 4.17 61/67] loop: remember whether sysfs_create_group() was done

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Tetsuo Handa commit d3349b6b3c373ac1fbfb040b810fcee5e2adc7e0 upstream. syzbot is hitting WARN() triggered by memory allocation fault injection [1] because loop module is calling sysfs_remove_g

[PATCH 4.17 48/67] iw_cxgb4: correctly enforce the max reg_mr depth

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Steve Wise commit 7b72717a20bba8bdd01b14c0460be7d15061cd6b upstream. The code was mistakenly using the length of the page array memory instead of the depth of the page array. This would cause

[PATCH 4.17 29/67] usb: quirks: add delay quirks for Corsair Strafe

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Nico Sneck commit bba57eddadda936c94b5dccf73787cb9e159d0a5 upstream. Corsair Strafe appears to suffer from the same issues as the Corsair Strafe RGB. Apply the same quirks (control message del

[PATCH 4.17 56/67] netfilter: x_tables: initialise match/target check parameter struct

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Florian Westphal commit c568503ef02030f169c9e19204def610a3510918 upstream. syzbot reports following splat: BUG: KMSAN: uninit-value in ebt_stp_mt_check+0x24b/0x450 net/bridge/netfilter/ebt_s

[PATCH 4.17 46/67] i2c: tegra: Fix NACK error handling

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Jon Hunter commit 54836e2d03e76d80aec3399368ffaf5b7caadd1b upstream. On Tegra30 Cardhu the PCA9546 I2C mux is not ACK'ing I2C commands on resume from suspend (which is caused by the reset sign

[PATCH 4.14 02/54] ASoC: mediatek: preallocate pages use platform device

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Kai Chieh Chuang commit 5845e6155d8f4a4a9bae2d4c1d1bb4a4d9a925c2 upstream. preallocate pages should use platform device, since we set dma mask for platform device. Signed-off-by: KaiChieh Chu

[PATCH 4.17 50/67] xen: setup pv irq ops vector earlier

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Juergen Gross commit 0ce0bba4e5e0eb9b753bb821785de5d23c494392 upstream. Setting pv_irq_ops for Xen PV domains should be done as early as possible in order to support e.g. very early printk() u

[PATCH 4.17 57/67] loop: add recursion validation to LOOP_CHANGE_FD

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Theodore Ts'o commit d2ac838e4cd7e5e9891ecc094d626734b0245c99 upstream. Refactor the validation code used in LOOP_SET_FD so it is also used in LOOP_CHANGE_FD. Otherwise it is possible to cons

[PATCH 4.17 63/67] f2fs: give message and set need_fsck given broken node id

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Jaegeuk Kim commit a4f843bd004d775cbb360cd375969b8a479568a9 upstream. syzbot hit the following crash on upstream commit 83beed7b2b26f232d782127792dd0cd4362fdc41 (Fri Apr 20 17:56:32 2018 +

[PATCH 4.17 67/67] ARM: dts: armada-38x: use the new thermal binding

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Baruch Siach commit 568cc2f07c8ea5f71a0486464bd9703e4671045f upstream. Commit 2f28e4c24b10e (thermal: armada: Clarify control registers accesses) introduced the new thermal binding. The new bi

[PATCH 4.17 49/67] xen: remove global bit from __default_kernel_pte_mask for pv guests

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Juergen Gross commit e69b5d308da72cbf4e7911c3979f9a46d28532af upstream. When removing the global bit from __supported_pte_mask do the same for __default_kernel_pte_mask in order to avoid the W

[PATCH 4.17 53/67] uprobes/x86: Remove incorrect WARN_ON() in uprobe_init_insn()

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Oleg Nesterov commit 90718e32e1dcc2479acfa208ccfc6442850b594c upstream. insn_get_length() has the side-effect of processing the entire instruction but only if it was decoded successfully, othe

[PATCH 4.17 51/67] bsg: fix bogus EINVAL on non-data commands

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Tony Battersby commit 70dbcc2254fa2a9add74a122b9dac954c4736e01 upstream. Fix a regression introduced in Linux kernel 4.17 where sending a SCSI command that does not transfer data (such as TEST

[PATCH 4.17 59/67] PM / hibernate: Fix oops at snapshot_write()

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Tetsuo Handa commit fc14eebfc20854a38fd9f1d93a42b1783dad4d17 upstream. syzbot is reporting NULL pointer dereference at snapshot_write() [1]. This is because data->handle is zero-cleared by ioc

[PATCH 4.17 47/67] i2c: recovery: if possible send STOP with recovery pulses

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Wolfram Sang commit abe41184abac487264a4904bfcff2d5500dccce6 upstream. I2C clients may misunderstand recovery pulses if they can't read SDA to bail out early. In the worst case, as a write ope

[PATCH 4.17 65/67] f2fs: sanity check on sit entry

2018-07-16 Thread Greg Kroah-Hartman
4.17-stable review patch. If anyone has any objections, please let me know. -- From: Jaegeuk Kim commit b2ca374f33bd33fd822eb871876e4888cf79dc97 upstream. syzbot hit the following crash on upstream commit 87ef12027b9b1dd0e0b12cf311fbcb19f9d92539 (Wed Apr 18 19:48:17 2018 +

[PATCH 4.14 17/54] USB: serial: keyspan_pda: fix modem-status error handling

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 01b3cdfca263a17554f7b249d20a247b2a751521 upstream. Fix broken modem-status error handling which could lead to bits of slab data leaking to user space. Fixes: 3b36a8fd6777

[PATCH 4.14 08/54] ibmasm: dont write out of bounds in read handler

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Jann Horn commit a0341fc1981a950c1e902ab901e98f60e0e243f3 upstream. This read handler had a lot of custom logic and wrote outside the bounds of the provided buffer. This could lead to kernel a

[PATCH 4.14 00/54] 4.14.56-stable review

2018-07-16 Thread Greg Kroah-Hartman
This is the start of the stable review cycle for the 4.14.56 release. There are 54 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Jul 18 07:34:24 UTC 2018. Anything receiv

[PATCH 4.14 05/54] MIPS: Fix ioremap() RAM check

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Paul Burton commit 523402fa9101090c91d2033b7ebdfdcf65880488 upstream. We currently attempt to check whether a physical address range provided to __ioremap() may be in use by the page allocator

[PATCH 4.14 04/54] MIPS: Use async IPIs for arch_trigger_cpumask_backtrace()

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Paul Burton commit b63e132b6433a41cf311e8bc382d33fd2b73b505 upstream. The current MIPS implementation of arch_trigger_cpumask_backtrace() is broken because it attempts to use synchronous IPIs

[PATCH 4.14 03/54] MIPS: Call dump_stack() from show_regs()

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Paul Burton commit 5a267832c2ec47b2dad0fdb291a96bb5b8869315 upstream. The generic nmi_cpu_backtrace() function calls show_regs() when a struct pt_regs is available, and dump_stack() otherwise.

[PATCH 4.14 19/54] USB: serial: mos7840: fix status-register error handling

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Johan Hovold commit 794744abfffef8b1f3c0c8a4896177d6d13d653d upstream. Add missing transfer-length sanity check to the status-register completion handler to avoid leaking bits of uninitialised

[PATCH 4.14 06/54] mmc: sdhci-esdhc-imx: allow 1.8V modes without 100/200MHz pinctrl states

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Stefan Agner commit 92748beac07c471d995fbec642b63572dc01b3dc upstream. If pinctrl nodes for 100/200MHz are missing, the controller should not select any mode which need signal frequencies 100M

[PATCH 4.14 16/54] USB: serial: cp210x: add another USB ID for Qivicon ZigBee stick

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Olli Salonen commit 367b160fe4717c14a2a978b6f9ffb75a7762d3ed upstream. There are two versions of the Qivicon Zigbee stick in circulation. This adds the second USB ID to the cp210x driver. Sig

[PATCH 4.14 37/54] tracing: Reorder display of TGID to be after PID

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Joel Fernandes (Google) commit f8494fa3dd10b52eab47a9666a8bc34719a129aa upstream. Currently ftrace displays data in trace output like so: _-=> irqs-

[PATCH 4.14 25/54] genirq/affinity: assign vectors to all possible CPUs

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Christoph Hellwig commit 84676c1f21e8ff54befe985f4f14dc1edc10046b upstream. Currently we assign managed interrupt vectors to all present CPUs. This works fine for systems were we only online/

[PATCH 4.14 12/54] ata: Fix ZBC_OUT all bit handling

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Damien Le Moal commit 6edf1d4cb0acde3a0a5dac849f33031bd7abb7b1 upstream. If the ALL bit is set in the ZBC_OUT command, the command zone ID field (block) should be ignored. Reported-by: David

[PATCH 4.14 18/54] USB: yurex: fix out-of-bounds uaccess in read handler

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Jann Horn commit f1e255d60ae66a9f672ff9a207ee6cd8e33d2679 upstream. In general, accessing userspace memory beyond the length of the supplied buffer in VFS read/write handlers can lead to both

[PATCH 4.14 11/54] ata: Fix ZBC_OUT command block check

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Damien Le Moal commit b320a0a9f23c98f21631eb27bcbbca91c79b1c6e upstream. The block (LBA) specified must not exceed the last addressable LBA, which is dev->nr_sectors - 1. So fix the correct ch

[PATCH 4.14 14/54] ahci: Disable LPM on Lenovo 50 series laptops with a too old BIOS

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Hans de Goede commit 240630e61870e62e39a97225048f9945848fa5f5 upstream. There have been several reports of LPM related hard freezes about once a day on multiple Lenovo 50 series models. Strang

[PATCH 4.14 13/54] vmw_balloon: fix inflation with batching

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Nadav Amit commit 90d72ce079791399ac255c75728f3c9e747b093d upstream. Embarrassingly, the recent fix introduced worse problem than it solved, causing the balloon not to inflate. The VM informed

[PATCH 4.14 15/54] USB: serial: ch341: fix type promotion bug in ch341_control_in()

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit e33eab9ded328ccc14308afa51b5be7cbe78d30b upstream. The "r" variable is an int and "bufsize" is an unsigned int so the comparison is type promoted to unsigned. If usb_cont

[PATCH 4.14 07/54] mmc: dw_mmc: fix card threshold control configuration

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: x00270170 commit 7a6b9f4d601dfce8cb68f0dcfd834270280e31e6 upstream. Card write threshold control is supposed to be set since controller version 2.80a for data write in HS400 mode and data read

[PATCH 4.14 34/54] fs/proc/task_mmu.c: fix Locked field in /proc/pid/smaps*

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Vlastimil Babka commit e70cc2bd579e8a9d6d153762f0fe294d0e652ff0 upstream. Thomas reports: "While looking around in /proc on my v4.14.52 system I noticed that all processes got a lot of "Loc

[PATCH 4.14 35/54] fs, elf: make sure to page align bss in load_elf_library

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Oscar Salvador commit 24962af7e1041b7e50c1bc71d8d10dc678c556b5 upstream. The current code does not make sure to page align bss before calling vm_brk(), and this can lead to a VM_BUG_ON() in __

[PATCH 4.14 21/54] xhci: xhci-mem: off by one in xhci_stream_id_to_ring()

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit 313db3d6488bb03b61b99de9dbca061f1fd838e1 upstream. The > should be >= here so that we don't read one element beyond the end of the ep->stream_info->stream_rings[] array.

[PATCH 4.14 23/54] devpts: resolve devpts bind-mounts

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Christian Brauner commit a319b01d9095da6f6c54bd20c1f1300762506255 upstream. Most libcs will still look at /dev/ptmx when opening the master fd of a pty device. When /dev/ptmx is a bind-mount o

[PATCH 4.14 10/54] staging: r8822be: Fix RTL8822be cant find any wireless AP

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Ping-Ke Shih commit d59d2f9995d28974877750f429e821324bd603c7 upstream. RTL8822be can't bring up properly on ASUS X530UN, and dmesg says: [ 8.591333] r8822be: module is from the staging directo

[PATCH 4.14 36/54] mm: do not bug_on on incorrect length in __mm_populate()

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Michal Hocko commit bb177a732c4369bb58a1fe1df8f552b6f0f7db5f upstream. syzbot has noticed that a specially crafted library can easily hit VM_BUG_ON in __mm_populate kernel BUG at mm/gup.c:1

[PATCH 4.14 22/54] devpts: hoist out check for DEVPTS_SUPER_MAGIC

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Christian Brauner commit 7d71109df186d630a41280670c8d71d0cf9b0da9 upstream. Hoist the check whether we have already found a suitable devpts filesystem out of devpts_ptmx_path() in preparation

[PATCH 4.14 09/54] staging: rtl8723bs: Prevent an underflow in rtw_check_beacon_data().

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Murray McAllister commit 920c92448839bd4f8eb87a92b08cad56d449caff upstream. Dan Carpenter reported an integer underflow issue in the rtl8188eu driver. This is also needed for the length (signe

[PATCH 4.14 43/54] iw_cxgb4: correctly enforce the max reg_mr depth

2018-07-16 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Steve Wise commit 7b72717a20bba8bdd01b14c0460be7d15061cd6b upstream. The code was mistakenly using the length of the page array memory instead of the depth of the page array. This would cause

  1   2   3   4   5   6   7   8   9   10   >