[PATCH 5.4 034/168] net: lapbether: Remove netif_start_queue / netif_stop_queue

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Xie He commit f7d9d4854519fdf4d45c70a4d953438cd88e7e58 upstream. For the devices in this driver, the default qdisc is "noqueue", because their "tx_queue_len" is 0. In function "__dev_queue_xmit" in "net/core/dev.c", devices with the "noqueue" qdisc are specially

[PATCH 4.19 000/120] 4.19.181-rc1 review

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman This is the start of the stable review cycle for the 4.19.181 release. There are 120 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 17 Mar 2021

[PATCH 5.4 038/168] ixgbe: fail to create xfrm offload of IPsec tunnel mode SA

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Antony Antony commit d785e1fec60179f534fbe8d006c890e5ad186e51 upstream. Based on talks and indirect references ixgbe IPsec offlod do not support IPsec tunnel mode offload. It can only support IPsec transport mode offload. Now explicitly fail when creating non tra

[PATCH 5.11 051/306] net: enetc: force the RGMII speed and duplex instead of operating in inband mode

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Vladimir Oltean commit c76a97218dcbb2cb7cec1404ace43ef96c87d874 upstream. The ENETC port 0 MAC supports in-band status signaling coming from a PHY when operating in RGMII mode, and this feature is enabled by default. It has been reported that RGMII is broken in

[PATCH 5.11 049/306] net: enetc: fix incorrect TPID when receiving 802.1ad tagged packets

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Vladimir Oltean commit 827b6fd046516af605e190c872949f22208b5d41 upstream. When the enetc ports have rx-vlan-offload enabled, they report a TPID of ETH_P_8021Q regardless of what was actually in the packet. When rx-vlan-offload is disabled, packets have the proper

[PATCH 5.11 057/306] net: stmmac: fix incorrect DMA channel intr enable setting of EQoS v4.10

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Ong Boon Leong commit 879c348c35bb5fb758dd881d8a97409c1862dae8 upstream. We introduce dwmac410_dma_init_channel() here for both EQoS v4.10 and above which use different DMA_CH(n)_Interrupt_Enable bit definitions for NIE and AIE. Fixes: 48863ce5940f ("stmmac: add

[PATCH 5.4 033/168] cipso,calipso: resolve a number of problems with the DOI refcounts

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Paul Moore commit ad5d07f4a9cd671233ae20983848874731102c08 upstream. The current CIPSO and CALIPSO refcounting scheme for the DOI definitions is a bit flawed in that we: 1. Don't correctly match gets/puts in netlbl_cipsov4_list(). 2. Decrement the refcount on ea

[PATCH 5.10 049/290] net: mscc: ocelot: properly reject destination IP keys in VCAP IS1

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Vladimir Oltean commit f1becbed411c6fa29d7ce3def3a1dcd4f63f2d74 upstream. An attempt is made to warn the user about the fact that VCAP IS1 cannot offload keys matching on destination IP (at least given the current half key format), but sadly that warning fails mi

[PATCH 4.19 001/120] uapi: nfnetlink_cthelper.h: fix userspace compilation error

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Dmitry V. Levin commit c33cb0020ee6dd96cc9976d6085a7d8422f6dbed upstream. Apparently, and could not be included into the same compilation unit because of a cut-and-paste typo in the former header. Fixes: 12f7a505331e6 ("netfilter: add user-space connection tra

[PATCH 5.11 044/306] net: dsa: tag_rtl4_a: fix egress tags

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: DENG Qingfang commit 9eb8bc593a5eed167dac2029abef343854c5ba75 upstream. Commit 86dd9868b878 has several issues, but was accepted too soon before anyone could take a look. - Double free. dsa_slave_xmit() will free the skb if the xmit function returns NULL, but

[PATCH 5.10 050/290] net: dsa: sja1105: fix SGMII PCS being forced to SPEED_UNKNOWN instead of SPEED_10

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Vladimir Oltean commit 053d8ad10d585adf9891fcd049637536e2fe9ea7 upstream. When using MLO_AN_PHY or MLO_AN_FIXED, the MII_BMCR of the SGMII PCS is read before resetting the switch so it can be reprogrammed afterwards. This works for the speeds of 1Gbps and 100Mbps

[PATCH 5.10 043/290] net: enetc: keep RX ring consumer index in sync with hardware

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Vladimir Oltean commit 3a5d12c9be6f30080600c8bacaf310194e37d029 upstream. The RX rings have a producer index owned by hardware, where newly received frame buffers are placed, and a consumer index owned by software, where newly allocated buffers are placed, in exp

[PATCH 4.4 48/75] staging: rtl8192e: Fix possible buffer overflow in _rtl92e_wx_set_scan

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Lee Gibson commit 8687bf9ef9551bcf93897e33364d121667b1aadf upstream. Function _rtl92e_wx_set_scan calls memcpy without checking the length. A user could control that length and trigger a buffer overflow. Fix by checking the length is within the maximum allowed si

[PATCH 4.4 59/75] block: rsxx: fix error return code of rsxx_pci_probe()

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Jia-Ju Bai [ Upstream commit df66617bfe87487190a60783d26175b65d2502ce ] When create_singlethread_workqueue returns NULL to card->event_wq, no error return code of rsxx_pci_probe() is assigned. To fix this bug, st is assigned with -ENOMEM in this case. Fixes: 87

[PATCH 5.11 058/306] nexthop: Do not flush blackhole nexthops when loopback goes down

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Ido Schimmel commit 76c03bf8e2624076b88d93542d78e22d5345c88e upstream. As far as user space is concerned, blackhole nexthops do not have a nexthop device and therefore should not be affected by the administrative or carrier state of any netdev. However, when the

[PATCH 5.10 051/290] net: usb: qmi_wwan: allow qmimux add/del with master up

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Daniele Palmas commit 6c59cff38e66584ae3ac6c2f0cbd8d039c710ba7 upstream. There's no reason for preventing the creation and removal of qmimux network interfaces when the underlying interface is up. This makes qmi_wwan mux implementation more similar to the rmnet

[PATCH 4.19 002/120] ethernet: alx: fix order of calls on resume

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Jakub Kicinski commit a4dcfbc4ee2218abd567d81d795082d8d4afcdf6 upstream. netif_device_attach() will unpause the queues so we can't call it before __alx_open(). This went undetected until commit b0999223f224 ("alx: add ability to allocate and free alx_napi structu

[PATCH 5.4 039/168] net: stmmac: stop each tx channel independently

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Joakim Zhang commit a3e860a83397bf761ec1128a3f0ba186445992c6 upstream. If clear GMAC_CONFIG_TE bit, it would stop all tx channels, but users may only want to stop specific tx channel. Fixes: 48863ce5940f ("stmmac: add DMA support for GMAC 4.xx") Signed-off-by: J

[PATCH 5.11 064/306] cipso,calipso: resolve a number of problems with the DOI refcounts

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Paul Moore commit ad5d07f4a9cd671233ae20983848874731102c08 upstream. The current CIPSO and CALIPSO refcounting scheme for the DOI definitions is a bit flawed in that we: 1. Don't correctly match gets/puts in netlbl_cipsov4_list(). 2. Decrement the refcount on ea

[PATCH 5.4 036/168] net: davicom: Fix regulator not turned off on driver removal

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Paul Cercueil commit cf9e60aa69ae6c40d3e3e4c94dd6c8de31674e9b upstream. We must disable the regulator that was enabled in the probe function. Fixes: 7994fe55a4a2 ("dm9000: Add regulator and reset support to dm9000") Signed-off-by: Paul Cercueil Signed-off-by: D

[PATCH 4.19 006/120] can: skb: can_skb_set_owner(): fix ref counting if socket was closed before setting skb ownership

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Oleksij Rempel commit e940e0895a82c6fbaa259f2615eb52b57ee91a7e upstream. There are two ref count variables controlling the free()ing of a socket: - struct sock::sk_refcnt - which is changed by sock_hold()/sock_put() - struct sock::sk_wmem_alloc - which accounts t

[PATCH 5.11 060/306] net: mscc: ocelot: properly reject destination IP keys in VCAP IS1

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Vladimir Oltean commit f1becbed411c6fa29d7ce3def3a1dcd4f63f2d74 upstream. An attempt is made to warn the user about the fact that VCAP IS1 cannot offload keys matching on destination IP (at least given the current half key format), but sadly that warning fails mi

[PATCH 5.11 056/306] net/mlx4_en: update moderation when config reset

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Kevin(Yudong) Yang commit 00ff801bb8ce6711e919af4530b6ffa14a22390a upstream. This patch fixes a bug that the moderation config will not be applied when calling mlx4_en_reset_config. For example, when turning on rx timestamping, mlx4_en_reset_config() will be call

[PATCH 5.4 043/168] net: hns3: fix query vlan mask value error for flow director

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Jian Shen commit c75ec148a316e8cf52274d16b9b422703b96f5ce upstream. Currently, the driver returns VLAN_VID_MASK for vlan mask field, when get flow director rule information for rule doesn't use vlan. It may cause the vlan mask value display as 0xf000 in this case

[PATCH 4.19 003/120] ath9k: fix transmitting to stations in dynamic SMPS mode

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Felix Fietkau commit 3b9ea7206d7e1fdd7419cbd10badd3b2c80d04b4 upstream. When transmitting to a receiver in dynamic SMPS mode, all transmissions that use multiple spatial streams need to be sent using CTS-to-self or RTS/CTS to give the receiver's extra chains some

[PATCH 5.4 037/168] net: qrtr: fix error return code of qrtr_sendmsg()

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Jia-Ju Bai commit 179d0ba0c454057a65929c46af0d6ad986754781 upstream. When sock_alloc_send_skb() returns NULL to skb, no error return code of qrtr_sendmsg() is assigned. To fix this bug, rc is assigned with -ENOMEM in this case. Fixes: 194ccc88297a ("net: qrtr: S

[PATCH 5.10 057/290] net: davicom: Fix regulator not turned off on failed probe

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Paul Cercueil commit ac88c531a5b38877eba2365a3f28f0c8b513dc33 upstream. When the probe fails or requests to be defered, we must disable the regulator that was previously enabled. Fixes: 7994fe55a4a2 ("dm9000: Add regulator and reset support to dm9000") Signed-of

[PATCH 4.19 005/120] net: Introduce parse_protocol header_ops callback

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Maxim Mikityanskiy commit e78b2915517e8fcadb1bc130ad6aeac7099e510c upstream. Introduce a new optional header_ops callback called parse_protocol and a wrapper function dev_parse_header_protocol, similar to dev_parse_header. The new callback's purpose is to extrac

[PATCH 5.4 048/168] drm/shmem-helper: Check for purged buffers in fault handler

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Neil Roberts commit d611b4a0907cece060699f2fd347c492451cd2aa upstream. When a buffer is madvised as not needed and then purged, any attempts to access the buffer from user-space should cause a bus fault. This patch adds a check for that. Cc: sta...@vger.kernel.o

[PATCH 5.10 056/290] net: lapbether: Remove netif_start_queue / netif_stop_queue

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Xie He commit f7d9d4854519fdf4d45c70a4d953438cd88e7e58 upstream. For the devices in this driver, the default qdisc is "noqueue", because their "tx_queue_len" is 0. In function "__dev_queue_xmit" in "net/core/dev.c", devices with the "noqueue" qdisc are specially

[PATCH 5.4 053/168] qxl: Fix uninitialised struct field head.surface_id

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Colin Ian King commit 738acd49eb018feb873e0fac8f9517493f6ce2c7 upstream. The surface_id struct field in head is not being initialized and static analysis warns that this is being passed through to dev->monitors_config->heads[i] on an assignment. Clear up this war

[PATCH 5.10 062/290] r8169: fix r8168fp_adjust_ocp_cmd function

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Hayes Wang commit abbf9a0ef8848dca58c5b97750c1c59bbee45637 upstream. The (0xBAF7 & 0x00FFF000) << 6 should be (0xf70 << 18). Fixes: 561535b0f239 ("r8169: fix OCP access on RTL8117") Signed-off-by: Hayes Wang Acked-by: Heiner Kallweit Signed-off-by: David S

[PATCH 4.14 05/95] net: Introduce parse_protocol header_ops callback

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Maxim Mikityanskiy commit e78b2915517e8fcadb1bc130ad6aeac7099e510c upstream. Introduce a new optional header_ops callback called parse_protocol and a wrapper function dev_parse_header_protocol, similar to dev_parse_header. The new callback's purpose is to extrac

[PATCH 4.19 008/120] can: flexcan: enable RX FIFO after FRZ/HALT valid

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Joakim Zhang commit ec15e27cc8904605846a354bb1f808ea1432f853 upstream. RX FIFO enable failed could happen when do system reboot stress test: [0.303958] flexcan 5a8d.can: 5a8d.can supply xceiver not found, using dummy regulator [0.304281] flexcan

[PATCH 5.10 063/290] ixgbe: fail to create xfrm offload of IPsec tunnel mode SA

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Antony Antony commit d785e1fec60179f534fbe8d006c890e5ad186e51 upstream. Based on talks and indirect references ixgbe IPsec offlod do not support IPsec tunnel mode offload. It can only support IPsec transport mode offload. Now explicitly fail when creating non tra

[PATCH 5.11 070/306] net: enetc: allow hardware timestamping on TX queues with tc-etf enabled

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Vladimir Oltean commit 29d98f54a4fe1b6a9089bec8715a1b89ff9ad59c upstream. The txtime is passed to the driver in skb->skb_mstamp_ns, which is actually in a union with skb->tstamp (the place where software timestamps are kept). Since commit b50a5c70ffa4 ("net: all

[PATCH 5.4 054/168] sh_eth: fix TRSCER mask for R7S9210

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Sergey Shtylyov commit 165bc5a4f30eee4735845aa7dbd6b738643f2603 upstream. According to the RZ/A2M Group User's Manual: Hardware, Rev. 2.00, the TRSCER register has bit 9 reserved, hence we can't use the driver's default TRSCER mask. Add the explicit initializer

[PATCH 4.19 007/120] can: flexcan: assert FRZ bit in flexcan_chip_freeze()

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Joakim Zhang commit 449052cfebf624b670faa040245d3feed770d22f upstream. Assert HALT bit to enter freeze mode, there is a premise that FRZ bit is asserted. This patch asserts FRZ bit in flexcan_chip_freeze, although the reset value is 1b'1. This is a prepare patch,

[PATCH 4.14 03/95] ath9k: fix transmitting to stations in dynamic SMPS mode

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Felix Fietkau commit 3b9ea7206d7e1fdd7419cbd10badd3b2c80d04b4 upstream. When transmitting to a receiver in dynamic SMPS mode, all transmissions that use multiple spatial streams need to be sent using CTS-to-self or RTS/CTS to give the receiver's extra chains some

[PATCH 5.11 063/306] netdevsim: init u64 stats for 32bit hardware

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Hillf Danton commit 863a42b289c22df63db62b10fc2c2ffc237e2125 upstream. Init the u64 stats in order to avoid the lockdep prints on the 32bit hardware like INFO: trying to register non-static key. the code is fine but needs lockdep annotation. turning off the l

[PATCH 5.4 047/168] drm/compat: Clear bounce structures

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Daniel Vetter commit de066e116306baf3a6a62691ac63cfc0b1dabddb upstream. Some of them have gaps, or fields we don't clear. Native ioctl code does full copies plus zero-extends on size mismatch, so nothing can leak. But compat is more hand-rolled so need to be care

[PATCH 5.4 049/168] drm/shmem-helper: Dont remove the offset in vm_area_struct pgoff

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Neil Roberts commit 11d5a4745e00e73745774671dbf2fb07bd6e2363 upstream. When mmapping the shmem, it would previously adjust the pgoff in the vm_area_struct to remove the fake offset that is added to be able to identify the buffer. This patch removes the adjustment

[PATCH 5.10 055/290] stmmac: intel: Fixes clock registration error seen for multiple interfaces

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Wong Vee Khee commit 8eb37ab7cc045ec6305a6a1a9c32374695a1a977 upstream. Issue seen when enumerating multiple Intel mGbE interfaces in EHL. [6.898141] intel-eth-pci :00:1d.2: enabling device ( -> 0002) [6.900971] intel-eth-pci :00:1d.2: Fail t

[PATCH 4.19 013/120] tcp: add sanity tests to TCP_QUEUE_SEQ

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Eric Dumazet [ Upstream commit 8811f4a9836e31c14ecdf79d9f3cb7c5d463265d ] Qingyu Li reported a syzkaller bug where the repro changes RCV SEQ _after_ restoring data in the receive queue. mprotect(0x4aa000, 12288, PROT_READ)= 0 mmap(0x1000, 4096, PROT_NONE

[PATCH 5.10 048/290] net: sched: avoid duplicates in classes dump

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Maximilian Heyne commit bfc2560563586372212b0a8aeca7428975fa91fe upstream. This is a follow up of commit ea3274695353 ("net: sched: avoid duplicates in qdisc dump") which has fixed the issue only for the qdisc dump. The duplicate printing also occurs when dumpin

[PATCH 4.14 01/95] uapi: nfnetlink_cthelper.h: fix userspace compilation error

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Dmitry V. Levin commit c33cb0020ee6dd96cc9976d6085a7d8422f6dbed upstream. Apparently, and could not be included into the same compilation unit because of a cut-and-paste typo in the former header. Fixes: 12f7a505331e6 ("netfilter: add user-space connection tra

[PATCH 5.11 067/306] net: lapbether: Remove netif_start_queue / netif_stop_queue

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Xie He commit f7d9d4854519fdf4d45c70a4d953438cd88e7e58 upstream. For the devices in this driver, the default qdisc is "noqueue", because their "tx_queue_len" is 0. In function "__dev_queue_xmit" in "net/core/dev.c", devices with the "noqueue" qdisc are specially

[PATCH 5.11 072/306] s390/qeth: fix memory leak after failed TX Buffer allocation

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Julian Wiedmann commit e7a36d27f6b9f389e41d8189a8a08919c6835732 upstream. When qeth_alloc_qdio_queues() fails to allocate one of the buffers that back an Output Queue, the 'out_freeoutqbufs' path will free all previously allocated buffers for this queue. But it m

[PATCH 5.11 071/306] net: qrtr: fix error return code of qrtr_sendmsg()

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Jia-Ju Bai commit 179d0ba0c454057a65929c46af0d6ad986754781 upstream. When sock_alloc_send_skb() returns NULL to skb, no error return code of qrtr_sendmsg() is assigned. To fix this bug, rc is assigned with -ENOMEM in this case. Fixes: 194ccc88297a ("net: qrtr: S

[PATCH 4.19 010/120] mt76: dma: do not report truncated frames to mac80211

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Lorenzo Bianconi commit d0bd52c591a1070c54dc428e926660eb4f981099 upstream. Commit b102f0c522cf6 ("mt76: fix array overflow on receiving too many fragments for a packet") fixes a possible OOB access but it introduces a memory leak since the pending frame is not re

[PATCH 5.10 058/290] net: davicom: Fix regulator not turned off on driver removal

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Paul Cercueil commit cf9e60aa69ae6c40d3e3e4c94dd6c8de31674e9b upstream. We must disable the regulator that was enabled in the probe function. Fixes: 7994fe55a4a2 ("dm9000: Add regulator and reset support to dm9000") Signed-off-by: Paul Cercueil Signed-off-by: D

[PATCH 5.4 050/168] drm: meson_drv add shutdown function

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Artem Lapkin commit fa0c16caf3d73ab4d2e5d6fa2ef2394dbec91791 upstream. Problem: random stucks on reboot stage about 1/20 stuck/reboots // debug kernel log [4.496660] reboot: kernel restart prepare CMD:(null) [4.498114] meson_ee_pwrc c883c000.system-contro

[PATCH 5.11 066/306] stmmac: intel: Fixes clock registration error seen for multiple interfaces

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Wong Vee Khee commit 8eb37ab7cc045ec6305a6a1a9c32374695a1a977 upstream. Issue seen when enumerating multiple Intel mGbE interfaces in EHL. [6.898141] intel-eth-pci :00:1d.2: enabling device ( -> 0002) [6.900971] intel-eth-pci :00:1d.2: Fail t

[PATCH 5.10 052/290] netdevsim: init u64 stats for 32bit hardware

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Hillf Danton commit 863a42b289c22df63db62b10fc2c2ffc237e2125 upstream. Init the u64 stats in order to avoid the lockdep prints on the 32bit hardware like INFO: trying to register non-static key. the code is fine but needs lockdep annotation. turning off the l

[PATCH 5.4 044/168] net: hns3: fix bug when calculating the TCAM table info

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Jian Shen commit b36fc875bcdee56865c444a2cdae17d354a6d5f5 upstream. The function hclge_fd_convert_tuple() is used to convert tuples and tuples mask to TCAM x and y. But it misuses the source mac as source mac mask when convert INNER_SRC_MAC, which may cause the

[PATCH 5.11 061/306] net: dsa: sja1105: fix SGMII PCS being forced to SPEED_UNKNOWN instead of SPEED_10

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Vladimir Oltean commit 053d8ad10d585adf9891fcd049637536e2fe9ea7 upstream. When using MLO_AN_PHY or MLO_AN_FIXED, the MII_BMCR of the SGMII PCS is read before resetting the switch so it can be reprogrammed afterwards. This works for the speeds of 1Gbps and 100Mbps

[PATCH 5.11 059/306] net: sched: avoid duplicates in classes dump

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Maximilian Heyne commit bfc2560563586372212b0a8aeca7428975fa91fe upstream. This is a follow up of commit ea3274695353 ("net: sched: avoid duplicates in qdisc dump") which has fixed the issue only for the qdisc dump. The duplicate printing also occurs when dumpin

[PATCH 5.4 040/168] net: stmmac: fix watchdog timeout during suspend/resume stress test

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Joakim Zhang commit c511819d138de38e1637eedb645c207e09680d0f upstream. stmmac_xmit() call stmmac_tx_timer_arm() at the end to modify tx timer to do the transmission cleanup work. Imagine such a situation, stmmac enters suspend immediately after tx timer modified,

[PATCH 4.19 009/120] netfilter: x_tables: gpf inside xt_find_revision()

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Vasily Averin commit 8e24edddad152b998b37a7f583175137ed2e04a5 upstream. nested target/match_revfn() calls work with xt[NFPROTO_UNSPEC] lists without taking xt[NFPROTO_UNSPEC].mutex. This can race with module unload and cause host to crash: general protection fau

[PATCH 5.4 042/168] perf traceevent: Ensure read cmdlines are null terminated.

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Ian Rogers commit 137a5258939aca56558f3a23eb229b9c4b293917 upstream. Issue detected by address sanitizer. Fixes: cd4ceb63438e9e28 ("perf util: Save pid-cmdline mapping into tracing header") Signed-off-by: Ian Rogers Acked-by: Namhyung Kim Cc: Alexander Shishk

[PATCH 5.10 047/290] nexthop: Do not flush blackhole nexthops when loopback goes down

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Ido Schimmel commit 76c03bf8e2624076b88d93542d78e22d5345c88e upstream. As far as user space is concerned, blackhole nexthops do not have a nexthop device and therefore should not be affected by the administrative or carrier state of any netdev. However, when the

[PATCH 5.10 061/290] s390/qeth: fix memory leak after failed TX Buffer allocation

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Julian Wiedmann commit e7a36d27f6b9f389e41d8189a8a08919c6835732 upstream. When qeth_alloc_qdio_queues() fails to allocate one of the buffers that back an Output Queue, the 'out_freeoutqbufs' path will free all previously allocated buffers for this queue. But it m

[PATCH 4.19 004/120] net: Fix gro aggregation for udp encaps with zero csum

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Daniel Borkmann commit 89e5c58fc1e2857ccdaae506fb8bc5fed57ee063 upstream. We noticed a GRO issue for UDP-based encaps such as vxlan/geneve when the csum for the UDP header itself is 0. In that case, GRO aggregation does not take place on the phys dev, but instead

[PATCH 4.19 015/120] scripts/recordmcount.{c,pl}: support -ffunction-sections .text.* section names

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Joe Lawrence commit 9c8e2f6d3d361439cc6744a094f1c15681b55269 upstream. When building with -ffunction-sections, the compiler will place each function into its own ELF section, prefixed with ".text". For example, a simple test module with functions test_module_do_

[PATCH 5.4 041/168] selftests: forwarding: Fix race condition in mirror installation

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Danielle Ratson commit edcbf5137f093b5502f5f6b97cce3cbadbde27aa upstream. When mirroring to a gretap in hardware the device expects to be programmed with the egress port and all the encapsulating headers. This requires the driver to resolve the path the packet wi

[PATCH 4.19 012/120] tcp: annotate tp->write_seq lockless reads

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Eric Dumazet [ Upstream commit 0f31746452e6793ad6271337438af8f4defb8940 ] There are few places where we fetch tp->write_seq while this field can change from IRQ or other cpu. We need to add READ_ONCE() annotations, and also make sure write sides use correspondin

[PATCH 5.4 055/168] media: usbtv: Fix deadlock on suspend

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Maxim Mikityanskiy commit 8a7e27fd5cd696ba564a3f62cedef7269cfd0723 upstream. usbtv doesn't support power management, so on system suspend the .disconnect callback of the driver is called. The teardown sequence includes a call to snd_card_free. Its implementation

[PATCH 5.10 045/290] net/mlx4_en: update moderation when config reset

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Kevin(Yudong) Yang commit 00ff801bb8ce6711e919af4530b6ffa14a22390a upstream. This patch fixes a bug that the moderation config will not be applied when calling mlx4_en_reset_config. For example, when turning on rx timestamping, mlx4_en_reset_config() will be call

[PATCH 5.10 064/290] tools/resolve_btfids: Fix build error with older host toolchains

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Kun-Chuan Hsieh commit 41462c6e730ca0e63f5fed5a517052385d980c54 upstream. Older libelf.h and glibc elf.h might not yet define the ELF compression types. Checking and defining SHF_COMPRESSED fix the build error when compiling with older toolchains. Also, the tool

[PATCH 5.10 060/290] net: qrtr: fix error return code of qrtr_sendmsg()

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Jia-Ju Bai commit 179d0ba0c454057a65929c46af0d6ad986754781 upstream. When sock_alloc_send_skb() returns NULL to skb, no error return code of qrtr_sendmsg() is assigned. To fix this bug, rc is assigned with -ENOMEM in this case. Fixes: 194ccc88297a ("net: qrtr: S

[PATCH 4.14 06/95] net: check if protocol extracted by virtio_net_hdr_set_proto is correct

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Balazs Nemeth commit 924a9bc362a5223cd448ca08c3dde21235adc310 upstream. For gso packets, virtio_net_hdr_set_proto sets the protocol (if it isn't set) based on the type in the virtio net hdr, but the skb could contain anything since it could come from packet_snd t

[PATCH 5.11 068/306] net: davicom: Fix regulator not turned off on failed probe

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Paul Cercueil commit ac88c531a5b38877eba2365a3f28f0c8b513dc33 upstream. When the probe fails or requests to be defered, we must disable the regulator that was previously enabled. Fixes: 7994fe55a4a2 ("dm9000: Add regulator and reset support to dm9000") Signed-of

[PATCH 5.10 053/290] cipso,calipso: resolve a number of problems with the DOI refcounts

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Paul Moore commit ad5d07f4a9cd671233ae20983848874731102c08 upstream. The current CIPSO and CALIPSO refcounting scheme for the DOI definitions is a bit flawed in that we: 1. Don't correctly match gets/puts in netlbl_cipsov4_list(). 2. Decrement the refcount on ea

[PATCH 5.11 069/306] net: davicom: Fix regulator not turned off on driver removal

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Paul Cercueil commit cf9e60aa69ae6c40d3e3e4c94dd6c8de31674e9b upstream. We must disable the regulator that was enabled in the probe function. Fixes: 7994fe55a4a2 ("dm9000: Add regulator and reset support to dm9000") Signed-off-by: Paul Cercueil Signed-off-by: D

[PATCH 5.4 051/168] s390/cio: return -EFAULT if copy_to_user() fails

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Eric Farman commit d9c48a948d29bcb22f4fe61a81b718ef6de561a0 upstream. Fixes: 120e214e504f ("vfio: ccw: realize VFIO_DEVICE_G(S)ET_IRQ_INFO ioctls") Signed-off-by: Eric Farman Signed-off-by: Heiko Carstens Signed-off-by: Greg Kroah-Hartman --- drivers/s390/cio

[PATCH 5.11 062/306] net: usb: qmi_wwan: allow qmimux add/del with master up

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Daniele Palmas commit 6c59cff38e66584ae3ac6c2f0cbd8d039c710ba7 upstream. There's no reason for preventing the creation and removal of qmimux network interfaces when the underlying interface is up. This makes qmi_wwan mux implementation more similar to the rmnet

[PATCH 5.10 039/290] net: enetc: fix incorrect TPID when receiving 802.1ad tagged packets

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Vladimir Oltean commit 827b6fd046516af605e190c872949f22208b5d41 upstream. When the enetc ports have rx-vlan-offload enabled, they report a TPID of ETH_P_8021Q regardless of what was actually in the packet. When rx-vlan-offload is disabled, packets have the proper

[PATCH 5.11 054/306] net: dsa: tag_mtk: fix 802.1ad VLAN egress

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: DENG Qingfang commit 9200f515c41f4cbaeffd8fdd1d8b6373a18b1b67 upstream. A different TPID bit is used for 802.1ad VLAN frames. Reported-by: Ilario Gelmetti Fixes: f0af34317f4b ("net: dsa: mediatek: combine MediaTek tag with VLAN tag") Signed-off-by: DENG Qingfan

[PATCH 5.4 056/168] media: v4l: vsp1: Fix uif null pointer access

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Biju Das commit 6732f313938027a910e1f7351951ff52c0329e70 upstream. RZ/G2L SoC has no UIF. This patch fixes null pointer access, when UIF module is not used. Fixes: 5e824f989e6e8("media: v4l: vsp1: Integrate DISCOM in display pipeline") Signed-off-by: Biju Das S

[PATCH 5.11 053/306] net: enetc: keep RX ring consumer index in sync with hardware

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Vladimir Oltean commit 3a5d12c9be6f30080600c8bacaf310194e37d029 upstream. The RX rings have a producer index owned by hardware, where newly received frame buffers are placed, and a consumer index owned by software, where newly allocated buffers are placed, in exp

[PATCH 5.11 055/306] net: ethernet: mtk-star-emac: fix wrong unmap in RX handling

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Biao Huang commit 95b39f07a17faef3a9b225248ba449b976e529c8 upstream. mtk_star_dma_unmap_rx() should unmap the dma_addr of old skb rather than that of new skb. Assign new_dma_addr to desc_data.dma_addr after all handling of old skb ends to avoid unexpected receive

[PATCH 5.10 044/290] net: ethernet: mtk-star-emac: fix wrong unmap in RX handling

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Biao Huang commit 95b39f07a17faef3a9b225248ba449b976e529c8 upstream. mtk_star_dma_unmap_rx() should unmap the dma_addr of old skb rather than that of new skb. Assign new_dma_addr to desc_data.dma_addr after all handling of old skb ends to avoid unexpected receive

[PATCH 5.10 041/290] net: enetc: force the RGMII speed and duplex instead of operating in inband mode

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Vladimir Oltean commit c76a97218dcbb2cb7cec1404ace43ef96c87d874 upstream. The ENETC port 0 MAC supports in-band status signaling coming from a PHY when operating in RGMII mode, and this feature is enabled by default. It has been reported that RGMII is broken in

[PATCH 5.11 050/306] net: enetc: dont disable VLAN filtering in IFF_PROMISC mode

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Vladimir Oltean commit a74dbce9d4541888fe0d39afe69a3a95004669b4 upstream. Quoting from the blamed commit: In promiscuous mode, it is more intuitive that all traffic is received, including VLAN tagged traffic. It appears that it is necessary to set th

[PATCH 5.10 059/290] net: enetc: allow hardware timestamping on TX queues with tc-etf enabled

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Vladimir Oltean commit 29d98f54a4fe1b6a9089bec8715a1b89ff9ad59c upstream. The txtime is passed to the driver in skb->skb_mstamp_ns, which is actually in a union with skb->tstamp (the place where software timestamps are kept). Since commit b50a5c70ffa4 ("net: all

[PATCH 5.11 052/306] net: enetc: remove bogus write to SIRXIDR from enetc_setup_rxbdr

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Vladimir Oltean commit 96a5223b918c8b79270fc0fec235a7ebad459098 upstream. The Station Interface Receive Interrupt Detect Register (SIRXIDR) contains a 16-bit wide mask of 'interrupt detected' events for each ring associated with a port. Bit i is write-1-to-clean

[PATCH 5.10 065/290] perf build: Fix ccache usage in $(CC) when generating arch errno table

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Antonio Terceiro commit dacfc08dcafa7d443ab339592999e37bbb8a3ef0 upstream. This was introduced by commit e4ffd066ff440a57 ("perf: Normalize gcc parameter when generating arch errno table"). Assuming the first word of $(CC) is the actual compiler breaks usage lik

[PATCH 5.11 074/306] s390/qeth: schedule TX NAPI on QAOB completion

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Julian Wiedmann commit 3e83d467a08e25b27c44c885f511624a71c84f7c upstream. When a QAOB notifies us that a pending TX buffer has been delivered, the actual TX completion processing by qeth_tx_complete_pending_bufs() is done within the context of a TX NAPI instance.

[PATCH 5.10 046/290] net: stmmac: fix incorrect DMA channel intr enable setting of EQoS v4.10

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Ong Boon Leong commit 879c348c35bb5fb758dd881d8a97409c1862dae8 upstream. We introduce dwmac410_dma_init_channel() here for both EQoS v4.10 and above which use different DMA_CH(n)_Interrupt_Enable bit definitions for NIE and AIE. Fixes: 48863ce5940f ("stmmac: add

[PATCH 5.4 030/168] net: sched: avoid duplicates in classes dump

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Maximilian Heyne commit bfc2560563586372212b0a8aeca7428975fa91fe upstream. This is a follow up of commit ea3274695353 ("net: sched: avoid duplicates in qdisc dump") which has fixed the issue only for the qdisc dump. The duplicate printing also occurs when dumpin

[PATCH 4.14 08/95] can: skb: can_skb_set_owner(): fix ref counting if socket was closed before setting skb ownership

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Oleksij Rempel commit e940e0895a82c6fbaa259f2615eb52b57ee91a7e upstream. There are two ref count variables controlling the free()ing of a socket: - struct sock::sk_refcnt - which is changed by sock_hold()/sock_put() - struct sock::sk_wmem_alloc - which accounts t

[PATCH 5.10 040/290] net: enetc: dont disable VLAN filtering in IFF_PROMISC mode

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Vladimir Oltean commit a74dbce9d4541888fe0d39afe69a3a95004669b4 upstream. Quoting from the blamed commit: In promiscuous mode, it is more intuitive that all traffic is received, including VLAN tagged traffic. It appears that it is necessary to set th

[PATCH 5.4 052/168] s390/crypto: return -EFAULT if copy_to_user() fails

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Wang Qing commit 942df4be7ab40195e2a839e9de81951a5862bc5b upstream. The copy_to_user() function returns the number of bytes remaining to be copied, but we want to return -EFAULT if the copy doesn't complete. Fixes: e06670c5fe3b ("s390: vfio-ap: implement VFIO_DE

[PATCH 5.11 075/306] s390/qeth: fix notification for pending buffers during teardown

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Julian Wiedmann commit 7eefda7f353ef86ad82a2dc8329e8a3538c08ab6 upstream. The cited commit reworked the state machine for pending TX buffers. In qeth_iqd_tx_complete() it turned PENDING into a transient state, and uses NEED_QAOB for buffers that get parked while

[PATCH 5.4 045/168] s390/cio: return -EFAULT if copy_to_user() fails again

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Wang Qing commit 51c44babdc19aaf882e1213325a0ba291573308f upstream. The copy_to_user() function returns the number of bytes remaining to be copied, but we want to return -EFAULT if the copy doesn't complete. Fixes: e01bcdd61320 ("vfio: ccw: realize VFIO_DEVICE_G

[PATCH 4.19 011/120] tcp: annotate tp->copied_seq lockless reads

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Eric Dumazet [ Upstream commit 7db48e983930285b765743ebd665aecf9850582b ] There are few places where we fetch tp->copied_seq while this field can change from IRQ or other cpu. We need to add READ_ONCE() annotations, and also make sure write sides use correspondi

[PATCH 5.10 067/290] net: stmmac: fix watchdog timeout during suspend/resume stress test

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Joakim Zhang commit c511819d138de38e1637eedb645c207e09680d0f upstream. stmmac_xmit() call stmmac_tx_timer_arm() at the end to modify tx timer to do the transmission cleanup work. Imagine such a situation, stmmac enters suspend immediately after tx timer modified,

[PATCH 5.4 035/168] net: davicom: Fix regulator not turned off on failed probe

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Paul Cercueil commit ac88c531a5b38877eba2365a3f28f0c8b513dc33 upstream. When the probe fails or requests to be defered, we must disable the regulator that was previously enabled. Fixes: 7994fe55a4a2 ("dm9000: Add regulator and reset support to dm9000") Signed-of

[PATCH 4.14 09/95] can: flexcan: assert FRZ bit in flexcan_chip_freeze()

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Joakim Zhang commit 449052cfebf624b670faa040245d3feed770d22f upstream. Assert HALT bit to enter freeze mode, there is a premise that FRZ bit is asserted. This patch asserts FRZ bit in flexcan_chip_freeze, although the reset value is 1b'1. This is a prepare patch,

[PATCH 5.10 042/290] net: enetc: remove bogus write to SIRXIDR from enetc_setup_rxbdr

2021-03-15 Thread gregkh
From: Greg Kroah-Hartman From: Vladimir Oltean commit 96a5223b918c8b79270fc0fec235a7ebad459098 upstream. The Station Interface Receive Interrupt Detect Register (SIRXIDR) contains a 16-bit wide mask of 'interrupt detected' events for each ring associated with a port. Bit i is write-1-to-clean

<    1   2   3   4   5   6   7   8   9   10   >