[PATCH AUTOSEL 4.14 36/99] mips: Make sure dt memory regions are valid

2019-06-01 Thread Sasha Levin
From: Serge Semin [ Upstream commit 93fa5b280761a4dbb14c5330f260380385ab2b49 ] There are situations when memory regions coming from dts may be too big for the platform physical address space. This especially concerns XPA-capable systems. Bootloader may determine more than 4GB memory available

[PATCH AUTOSEL 4.14 35/99] mmc: mmci: Prevent polling for busy detection in IRQ context

2019-06-01 Thread Sasha Levin
From: Ludovic Barre [ Upstream commit 8520ce1e17799b220ff421d4f39438c9c572ade3 ] The IRQ handler, mmci_irq(), loops until all status bits have been cleared. However, the status bit signaling busy in variant->busy_detect_flag, may be set even if busy detection isn't monitored for the current

[PATCH AUTOSEL 4.9 07/74] mem-hotplug: fix node spanned pages when we have a node with only ZONE_MOVABLE

2019-06-01 Thread Sasha Levin
From: Linxu Fang [ Upstream commit 299c83dce9ea3a79bb4b5511d2cb996b6b8e5111 ] 342332e6a925 ("mm/page_alloc.c: introduce kernelcore=mirror option") and later patches rewrote the calculation of node spanned pages. e506b99696a2 ("mem-hotplug: fix node spanned pages when we have a movable node"),

[PATCH AUTOSEL 4.9 12/74] drivers: thermal: tsens: Don't print error message on -EPROBE_DEFER

2019-06-01 Thread Sasha Levin
From: Amit Kucheria [ Upstream commit fc7d18cf6a923cde7f5e7ba2c1105bb106d3e29a ] We print a calibration failure message on -EPROBE_DEFER from nvmem/qfprom as follows: [3.003090] qcom-tsens 4a9000.thermal-sensor: version: 1.4 [3.005376] qcom-tsens 4a9000.thermal-sensor: tsens calibration

[PATCH AUTOSEL 4.9 20/74] pwm: meson: Use the spin-lock only to protect register modifications

2019-06-01 Thread Sasha Levin
From: Martin Blumenstingl [ Upstream commit f173747fffdf037c791405ab4f1ec0eb392fc48e ] Holding the spin-lock for all of the code in meson_pwm_apply() can result in a "BUG: scheduling while atomic". This can happen because clk_get_rate() (which is called from meson_pwm_calc()) may sleep. Only

[PATCH AUTOSEL 4.9 15/74] mfd: twl6040: Fix device init errors for ACCCTL register

2019-06-01 Thread Sasha Levin
From: Tony Lindgren [ Upstream commit 48171d0ea7caccf21c9ee3ae75eb370f2a756062 ] I noticed that we can get a -EREMOTEIO errors on at least omap4 duovero: twl6040 0-004b: Failed to write 2d = 19: -121 And then any following register access will produce errors. There 2d offset above is

[PATCH AUTOSEL 4.9 18/74] objtool: Don't use ignore flag for fake jumps

2019-06-01 Thread Sasha Levin
From: Josh Poimboeuf [ Upstream commit e6da9567959e164f82bc81967e0d5b10dee870b4 ] The ignore flag is set on fake jumps in order to keep add_jump_destinations() from setting their jump_dest, since it already got set when the fake jump was created. But using the ignore flag is a bit of a hack.

[PATCH AUTOSEL 4.9 11/74] kernel/sys.c: prctl: fix false positive in validate_prctl_map()

2019-06-01 Thread Sasha Levin
From: Cyrill Gorcunov [ Upstream commit a9e73998f9d705c94a8dca9687633adc0f24a19a ] While validating new map we require the @start_data to be strictly less than @end_data, which is fine for regular applications (this is why this nit didn't trigger for that long). These members are set from

[PATCH AUTOSEL 4.9 16/74] perf/x86/intel: Allow PEBS multi-entry in watermark mode

2019-06-01 Thread Sasha Levin
From: Stephane Eranian [ Upstream commit c7a286577d7592720c2f179aadfb325a1ff48c95 ] This patch fixes a restriction/bug introduced by: 583feb08e7f7 ("perf/x86/intel: Fix handling of wakeup_events for multi-entry PEBS") The original patch prevented using multi-entry PEBS when wakeup_events

[PATCH AUTOSEL 4.9 26/74] configfs: fix possible use-after-free in configfs_register_group

2019-06-01 Thread Sasha Levin
From: YueHaibing [ Upstream commit 35399f87e271f7cf3048eab00a421a6519ac8441 ] In configfs_register_group(), if create_default_group() failed, we forget to unlink the group. It will left a invalid item in the parent list, which may trigger the use-after-free issue seen below: BUG: KASAN:

[PATCH AUTOSEL 4.9 29/74] watchdog: Use depends instead of select for pretimeout governors

2019-06-01 Thread Sasha Levin
From: Guenter Roeck [ Upstream commit f627ac0e12cd2736e60b9f5782ecec1d97251f77 ] Watchdog pretimeout governors were enabled from the default governor selection using "select". As a result, the default governor was always built into the kernel, even if no watchdog driver was loaded. By using

[PATCH AUTOSEL 4.9 30/74] watchdog: imx2_wdt: Fix set_timeout for big timeout values

2019-06-01 Thread Sasha Levin
From: Georg Hofmann [ Upstream commit b07e228eee69601addba98b47b1a3850569e5013 ] The documentated behavior is: if max_hw_heartbeat_ms is implemented, the minimum of the set_timeout argument and max_hw_heartbeat_ms should be used. This patch implements this behavior. Previously only the first

[PATCH AUTOSEL 4.4 03/56] ipc: prevent lockup on alloc_msg and free_msg

2019-06-01 Thread Sasha Levin
From: Li Rongqing [ Upstream commit d6a2946a88f524a47cc9b79279667137899db807 ] msgctl10 of ltp triggers the following lockup When CONFIG_KASAN is enabled on large memory SMP systems, the pages initialization can take a long time, if msgctl10 requests a huge block memory, and it will block rcu

[PATCH AUTOSEL 4.9 28/74] mips: Make sure dt memory regions are valid

2019-06-01 Thread Sasha Levin
From: Serge Semin [ Upstream commit 93fa5b280761a4dbb14c5330f260380385ab2b49 ] There are situations when memory regions coming from dts may be too big for the platform physical address space. This especially concerns XPA-capable systems. Bootloader may determine more than 4GB memory available

[PATCH AUTOSEL 4.9 23/74] f2fs: fix to clear dirty inode in error path of f2fs_iget()

2019-06-01 Thread Sasha Levin
From: Chao Yu [ Upstream commit 546d22f070d64a7b96f57c9772085d3a5e6d ] As Jungyeon reported in bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=203217 - Overview When mounting the attached crafted image and running program, I got this error. Additionally, it hangs on sync after

[PATCH AUTOSEL 4.4 01/56] fs/fat/file.c: issue flush after the writeback of FAT

2019-06-01 Thread Sasha Levin
From: Hou Tao [ Upstream commit bd8309de0d60838eef6fb575b0c4c7e95841cf73 ] fsync() needs to make sure the data & meta-data of file are persistent after the return of fsync(), even when a power-failure occurs later. In the case of fat-fs, the FAT belongs to the meta-data of file, so we need to

[PATCH AUTOSEL 4.9 24/74] f2fs: fix to do sanity check on valid block count of segment

2019-06-01 Thread Sasha Levin
From: Chao Yu [ Upstream commit e95bcdb2fefa129f37bd9035af1d234ca92ee4ef ] As Jungyeon reported in bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=203233 - Overview When mounting the attached crafted image and running program, following errors are reported. Additionally, it hangs on

[PATCH AUTOSEL 4.4 05/56] mm/cma.c: fix crash on CMA allocation if bitmap allocation fails

2019-06-01 Thread Sasha Levin
From: Yue Hu [ Upstream commit 1df3a339074e31db95c4790ea9236874b13ccd87 ] f022d8cb7ec7 ("mm: cma: Don't crash on allocation if CMA area can't be activated") fixes the crash issue when activation fails via setting cma->count as 0, same logic exists if bitmap allocation fails. Link:

[PATCH AUTOSEL 4.9 21/74] ntp: Allow TAI-UTC offset to be set to zero

2019-06-01 Thread Sasha Levin
From: Miroslav Lichvar [ Upstream commit fdc6bae940ee9eb869e493990540098b8c0fd6ab ] The ADJ_TAI adjtimex mode sets the TAI-UTC offset of the system clock. It is typically set by NTP/PTP implementations and it is automatically updated by the kernel on leap seconds. The initial value is zero

[PATCH AUTOSEL 4.9 27/74] uml: fix a boot splat wrt use of cpu_all_mask

2019-06-01 Thread Sasha Levin
From: Maciej Żenczykowski [ Upstream commit 689a58605b63173acb0a8cf954af6a8f60440c93 ] Memory: 509108K/542612K available (3835K kernel code, 919K rwdata, 1028K rodata, 129K init, 211K bss, 33504K reserved, 0K cma-reserved) NR_IRQS: 15 clocksource: timer: mask: 0x max_cycles:

[PATCH AUTOSEL 4.4 08/56] mfd: intel-lpss: Set the device in reset state when init

2019-06-01 Thread Sasha Levin
From: Binbin Wu [ Upstream commit dad06532292d77f37fbe831a02948a593500f682 ] In virtualized setup, when system reboots due to warm reset interrupt storm is seen. Call Trace: dump_stack+0x70/0xa5 __report_bad_irq+0x2e/0xc0 note_interrupt+0x248/0x290 ? add_interrupt_randomness+0x30/0x220

[PATCH AUTOSEL 4.4 06/56] mm/cma_debug.c: fix the break condition in cma_maxchunk_get()

2019-06-01 Thread Sasha Levin
From: Yue Hu [ Upstream commit f0fd50504a54f5548eb666dc16ddf8394e44e4b7 ] If not find zero bit in find_next_zero_bit(), it will return the size parameter passed in, so the start bit should be compared with bitmap_maxno rather than cma->count. Although getting maxchunk is working fine due to

[PATCH AUTOSEL 4.4 24/56] fuse: require /dev/fuse reads to have enough buffer capacity

2019-06-01 Thread Sasha Levin
From: Kirill Smelkov [ Upstream commit d4b13963f217dd947da5c0cabd1569e914d21699 ] A FUSE filesystem server queues /dev/fuse sys_read calls to get filesystem requests to handle. It does not know in advance what would be that request as it can be anything that client issues - LOOKUP, READ, WRITE,

[PATCH AUTOSEL 4.4 09/56] mfd: twl6040: Fix device init errors for ACCCTL register

2019-06-01 Thread Sasha Levin
From: Tony Lindgren [ Upstream commit 48171d0ea7caccf21c9ee3ae75eb370f2a756062 ] I noticed that we can get a -EREMOTEIO errors on at least omap4 duovero: twl6040 0-004b: Failed to write 2d = 19: -121 And then any following register access will produce errors. There 2d offset above is

[PATCH AUTOSEL 4.4 27/56] PCI: Mark Atheros AR9462 to avoid bus reset

2019-06-01 Thread Sasha Levin
From: James Prestwood [ Upstream commit 6afb7e26978da5e86e57e540fdce65c8b04f398a ] When using PCI passthrough with this device, the host machine locks up completely when starting the VM, requiring a hard reboot. Add a quirk to avoid bus resets on this device. Fixes: c3e59ee4e766 ("PCI: Mark

[PATCH AUTOSEL 4.4 21/56] nvmem: core: fix read buffer in place

2019-06-01 Thread Sasha Levin
From: Jorge Ramirez-Ortiz [ Upstream commit 2fe518fecb3a4727393be286db9804cd82ee2d91 ] When the bit_offset in the cell is zero, the pointer to the msb will not be properly initialized (ie, will still be pointing to the first byte in the buffer). This being the case, if there are bits to clear

[PATCH AUTOSEL 4.4 16/56] tracing: Fix partial reading of trace event's id file

2019-06-01 Thread Sasha Levin
From: Elazar Leibovich [ Upstream commit cbe08bcbbe787315c425dde284dcb715cfbf3f39 ] When reading only part of the id file, the ppos isn't tracked correctly. This is taken care by simple_read_from_buffer. Reading a single byte, and then the next byte would result EOF. While this seems like not

[PATCH AUTOSEL 4.4 13/56] ntp: Allow TAI-UTC offset to be set to zero

2019-06-01 Thread Sasha Levin
From: Miroslav Lichvar [ Upstream commit fdc6bae940ee9eb869e493990540098b8c0fd6ab ] The ADJ_TAI adjtimex mode sets the TAI-UTC offset of the system clock. It is typically set by NTP/PTP implementations and it is automatically updated by the kernel on leap seconds. The initial value is zero

[PATCH AUTOSEL 4.4 25/56] fuse: retrieve: cap requested size to negotiated max_write

2019-06-01 Thread Sasha Levin
From: Kirill Smelkov [ Upstream commit 7640682e67b33cab8628729afec8ca92b851394f ] FUSE filesystem server and kernel client negotiate during initialization phase, what should be the maximum write size the client will ever issue. Correspondingly the filesystem server then queues sys_read calls to

[PATCH AUTOSEL 4.4 26/56] nfsd: allow fh_want_write to be called twice

2019-06-01 Thread Sasha Levin
From: "J. Bruce Fields" [ Upstream commit 0b8f62625dc309651d0efcb6a6247c933acd8b45 ] A fuzzer recently triggered lockdep warnings about potential sb_writers deadlocks caused by fh_want_write(). Looks like we aren't careful to pair each fh_want_write() with an fh_drop_write(). It's not

[PATCH AUTOSEL 4.4 29/56] x86/PCI: Fix PCI IRQ routing table memory leak

2019-06-01 Thread Sasha Levin
From: Wenwen Wang [ Upstream commit ea094d53580f40c2124cef3d072b73b2425e7bfd ] In pcibios_irq_init(), the PCI IRQ routing table 'pirq_table' is first found through pirq_find_routing_table(). If the table is not found and CONFIG_PCI_BIOS is defined, the table is then allocated in

[PATCH AUTOSEL 4.4 30/56] platform/chrome: cros_ec_proto: check for NULL transfer function

2019-06-01 Thread Sasha Levin
From: Enrico Granata [ Upstream commit 94d4e7af14a1170e34cf082d92e4c02de9e9fb88 ] As new transfer mechanisms are added to the EC codebase, they may not support v2 of the EC protocol. If the v3 initial handshake transfer fails, the kernel will try and call cmd_xfer as a fallback. If v2 is not

[PATCH AUTOSEL 4.4 32/56] clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288

2019-06-01 Thread Sasha Levin
From: Douglas Anderson [ Upstream commit 57a20248ef3e429dc822f0774bc4e00136c46c83 ] Experimentally it can be seen that going into deep sleep (specifically setting PMU_CLR_DMA and PMU_CLR_BUS in RK3288_PMU_PWRMODE_CON1) appears to fail unless "aclk_dmac1" is on. The failure is that the system

[PATCH AUTOSEL 4.4 41/56] fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting

2019-06-01 Thread Sasha Levin
From: Yifeng Li [ Upstream commit f627caf55b8e735dcec8fa6538e9668632b55276 ] On a Thinkpad s30 (Pentium III / i440MX, Lynx3DM), blanking the display or starting the X server will crash and freeze the system, or garble the display. Experiments showed this problem can mostly be solved by

[PATCH AUTOSEL 4.4 34/56] iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114

2019-06-01 Thread Sasha Levin
From: Dmitry Osipenko [ Upstream commit 43a0541e312f7136e081e6bf58f6c8a2e9672688 ] Both Tegra30 and Tegra114 have 4 ASID's and the corresponding bitfield of the TLB_FLUSH register differs from later Tegra generations that have 128 ASID's. In a result the PTE's are now flushed correctly from

[PATCH AUTOSEL 4.4 35/56] ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA

2019-06-01 Thread Sasha Levin
From: Andrey Smirnov [ Upstream commit cc839d0f8c284fcb7591780b568f13415bbb737c ] Since 25aaa75df1e6 SDMA driver uses clock rates of "ipg" and "ahb" clock to determine if it needs to configure the IP block as operating at 1:1 or 1:2 clock ratio (ACR bit in SDMAARM_CONFIG). Specifying both

[PATCH AUTOSEL 4.4 36/56] ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA

2019-06-01 Thread Sasha Levin
From: Andrey Smirnov [ Upstream commit 8979117765c19edc3b01cc0ef853537bf93eea4b ] Since 25aaa75df1e6 SDMA driver uses clock rates of "ipg" and "ahb" clock to determine if it needs to configure the IP block as operating at 1:1 or 1:2 clock ratio (ACR bit in SDMAARM_CONFIG). Specifying both

[PATCH AUTOSEL 4.4 22/56] stm class: Fix channel free in stm output free path

2019-06-01 Thread Sasha Levin
From: Tingwei Zhang [ Upstream commit ee496da4c3915de3232b5f5cd20e21ae3e46fe8d ] Number of free masters is not set correctly in stm free path. Fix this by properly adding the number of output channels before setting them to 0 in stm_output_disclaim(). Currently it is equivalent to doing

[PATCH AUTOSEL 4.4 19/56] iommu/vt-d: Set intel_iommu_gfx_mapped correctly

2019-06-01 Thread Sasha Levin
From: Lu Baolu [ Upstream commit cf1ec4539a50bdfe688caad4615ca47646884316 ] The intel_iommu_gfx_mapped flag is exported by the Intel IOMMU driver to indicate whether an IOMMU is used for the graphic device. In a virtualized IOMMU environment (e.g. QEMU), an include-all IOMMU is used for graphic

[PATCH AUTOSEL 4.4 23/56] fuse: honor RLIMIT_FSIZE in fuse_file_fallocate

2019-06-01 Thread Sasha Levin
From: Liu Bo [ Upstream commit 0cbade024ba501313da3b7e5dd2a188a6bc491b5 ] fstests generic/228 reported this failure that fuse fallocate does not honor what 'ulimit -f' has set. This adds the necessary inode_newsize_ok() check. Signed-off-by: Liu Bo Fixes: 05ba1f082300 ("fuse: add FALLOCATE

[PATCH AUTOSEL 4.4 46/56] fbdev: fix divide error in fb_var_to_videomode

2019-06-01 Thread Sasha Levin
From: Shile Zhang [ Upstream commit cf84807f6dd0be5214378e66460cfc9187f532f9 ] To fix following divide-by-zero error found by Syzkaller: divide error: [#1] SMP PTI CPU: 7 PID: 8447 Comm: test Kdump: loaded Not tainted 4.19.24-8.al7.x86_64 #1 Hardware name: Alibaba Cloud Alibaba

[PATCH AUTOSEL 4.4 48/56] fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping VRAM

2019-06-01 Thread Sasha Levin
From: Yifeng Li [ Upstream commit 9e0e59993df0601cddb95c4f6c61aa3d5e753c00 ] On a Thinkpad s30 (Pentium III / i440MX, Lynx3DM), running fbtest or X will crash the machine instantly, because the VRAM/framebuffer is not mapped correctly. On SM712, the framebuffer starts at the beginning of

[PATCH AUTOSEL 4.4 39/56] PCI: rpadlpar: Fix leaked device_node references in add/remove paths

2019-06-01 Thread Sasha Levin
From: Tyrel Datwyler [ Upstream commit fb26228bfc4ce3951544848555c0278e2832e618 ] The find_dlpar_node() helper returns a device node with its reference incremented. Both the add and remove paths use this helper for find the appropriate node, but fail to release the reference when done.

[PATCH AUTOSEL 4.4 49/56] PCI: xilinx: Check for __get_free_pages() failure

2019-06-01 Thread Sasha Levin
From: Kangjie Lu [ Upstream commit 699ca30162686bf305cdf94861be02eb0cf9bda2 ] If __get_free_pages() fails, return -ENOMEM to avoid a NULL pointer dereference. Signed-off-by: Kangjie Lu Signed-off-by: Lorenzo Pieralisi Reviewed-by: Steven Price Reviewed-by: Mukesh Ojha Signed-off-by: Sasha

[PATCH AUTOSEL 4.4 51/56] gpio: gpio-omap: add check for off wake capable gpios

2019-06-01 Thread Sasha Levin
From: Tony Lindgren [ Upstream commit da38ef3ed10a09248e13ae16530c2c6d448dc47d ] We are currently assuming all GPIOs are non-wakeup capable GPIOs as we not configuring the bank->non_wakeup_gpios like we used to earlier with platform_data. Let's add omap_gpio_is_off_wakeup_capable() to make the

[PATCH AUTOSEL 4.4 50/56] tty: pty: Fix race condition between release_one_tty and pty_write

2019-06-01 Thread Sasha Levin
From: Sahara [ Upstream commit b9ca5f8560af244489b4a1bc1ae88b341f24bc95 ] Especially when a linked tty is used such as pty, the linked tty port's buf works have not been cancelled while master tty port's buf work has been cancelled. Since release_one_tty and flush_to_ldisc run in workqueue

[PATCH AUTOSEL 4.4 55/56] pwm: Fix deadlock warning when removing PWM device

2019-06-01 Thread Sasha Levin
From: Phong Hoang [ Upstream commit 347ab9480313737c0f1aaa08e8f2e1a791235535 ] This patch fixes deadlock warning if removing PWM device when CONFIG_PROVE_LOCKING is enabled. This issue can be reproceduced by the following steps on the R-Car H3 Salvator-X board if the backlight is disabled: #

[PATCH AUTOSEL 4.4 53/56] pwm: tiehrpwm: Update shadow register for disabling PWMs

2019-06-01 Thread Sasha Levin
From: Christoph Vogtländer [ Upstream commit b00ef53053191d3025c15e8041699f8c9d132daf ] It must be made sure that immediate mode is not already set, when modifying shadow register value in ehrpwm_pwm_disable(). Otherwise modifications to the action-qualifier continuous S/W force

[PATCH AUTOSEL 4.4 56/56] ARM: exynos: Fix undefined instruction during Exynos5422 resume

2019-06-01 Thread Sasha Levin
From: Marek Szyprowski [ Upstream commit 4d8e3e951a85620272ce27f2c738a3eeef8c ] During early system resume on Exynos5422 with performance counters enabled the following kernel oops happens: Internal error: Oops - undefined instruction: 0 [#1] PREEMPT SMP ARM Modules linked in:

[PATCH AUTOSEL 4.4 54/56] ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa

2019-06-01 Thread Sasha Levin
From: Krzysztof Kozlowski [ Upstream commit 5ab99cf7d5e96e3b727c30e7a8524c976bd3723d ] The PVDD_APIO_1V8 (LDO2) and PVDD_ABB_1V8 (LDO8) regulators were turned off by Linux kernel as unused. However they supply critical parts of SoC so they should be always on: 1. PVDD_APIO_1V8 supplies SYS

[PATCH AUTOSEL 4.4 52/56] dmaengine: idma64: Use actual device for DMA transfers

2019-06-01 Thread Sasha Levin
From: Andy Shevchenko [ Upstream commit 5ba846b1ee0792f5a596b9b0b86d6e8cdebfab06 ] Intel IOMMU, when enabled, tries to find the domain of the device, assuming it's a PCI one, during DMA operations, such as mapping or unmapping. Since we are splitting the actual PCI device to couple of children

[PATCH AUTOSEL 4.4 40/56] PCI: rcar: Fix a potential NULL pointer dereference

2019-06-01 Thread Sasha Levin
From: Kangjie Lu [ Upstream commit f0d14edd2ba43b995bef4dd5da5ffe0ae19321a1 ] In case __get_free_pages() fails and returns NULL, fix the return value to -ENOMEM and release resources to avoid dereferencing a NULL pointer. Signed-off-by: Kangjie Lu Signed-off-by: Lorenzo Pieralisi

[PATCH AUTOSEL 4.4 37/56] ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA

2019-06-01 Thread Sasha Levin
From: Andrey Smirnov [ Upstream commit b14c872eebc501b9640b04f4a152df51d6eaf2fc ] Since 25aaa75df1e6 SDMA driver uses clock rates of "ipg" and "ahb" clock to determine if it needs to configure the IP block as operating at 1:1 or 1:2 clock ratio (ACR bit in SDMAARM_CONFIG). Specifying both

[PATCH AUTOSEL 4.4 44/56] video: imsttfb: fix potential NULL pointer dereferences

2019-06-01 Thread Sasha Levin
From: Kangjie Lu [ Upstream commit 1d84353d205a953e2381044953b7fa31c8c9702d ] In case ioremap fails, the fix releases resources and returns -ENOMEM to avoid NULL pointer dereferences. Signed-off-by: Kangjie Lu Cc: Aditya Pakki Cc: Finn Thain Cc: Rob Herring Cc: Greg Kroah-Hartman

[PATCH AUTOSEL 4.4 20/56] ALSA: hda - Register irq handler after the chip initialization

2019-06-01 Thread Sasha Levin
From: Takashi Iwai [ Upstream commit f495222e28275222ab6fd93813bd3d462e16d340 ] Currently the IRQ handler in HD-audio controller driver is registered before the chip initialization. That is, we have some window opened between the azx_acquire_irq() call and the CORB/RIRB setup. If an interrupt

[PATCH AUTOSEL 4.4 31/56] soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher

2019-06-01 Thread Sasha Levin
From: Nathan Chancellor [ Upstream commit 89e28da82836530f1ac7a3a32fecc31f22d79b3e ] When building with -Wsometimes-uninitialized, Clang warns: drivers/soc/mediatek/mtk-pmic-wrap.c:1358:6: error: variable 'rdata' is used uninitialized whenever '||' condition is true

[PATCH AUTOSEL 4.4 38/56] md: add mddev->pers to avoid potential NULL pointer dereference

2019-06-01 Thread Sasha Levin
From: Yufen Yu [ Upstream commit ee37e62191a59d253fc916b9fc763deb777211e2 ] When doing re-add, we need to ensure rdev->mddev->pers is not NULL, which can avoid potential NULL pointer derefence in fallowing add_bound_rdev(). Fixes: a6da4ef85cef ("md: re-add a failed disk") Cc: Xiao Ni Cc:

[PATCH AUTOSEL 4.4 28/56] media: ov6650: Fix sensor possibly not detected on probe

2019-06-01 Thread Sasha Levin
From: Janusz Krzysztofik [ Upstream commit 933c1320847f5ed6b61a7d10f0a948aa98ccd7b0 ] After removal of clock_start() from before soc_camera_init_i2c() in soc_camera_probe() by commit 9aea470b399d ("[media] soc-camera: switch I2C subdevice drivers to use v4l2-clk") introduced in v3.11, the

[PATCH AUTOSEL 4.4 17/56] uml: fix a boot splat wrt use of cpu_all_mask

2019-06-01 Thread Sasha Levin
From: Maciej Żenczykowski [ Upstream commit 689a58605b63173acb0a8cf954af6a8f60440c93 ] Memory: 509108K/542612K available (3835K kernel code, 919K rwdata, 1028K rodata, 129K init, 211K bss, 33504K reserved, 0K cma-reserved) NR_IRQS: 15 clocksource: timer: mask: 0x max_cycles:

[PATCH AUTOSEL 4.4 18/56] mips: Make sure dt memory regions are valid

2019-06-01 Thread Sasha Levin
From: Serge Semin [ Upstream commit 93fa5b280761a4dbb14c5330f260380385ab2b49 ] There are situations when memory regions coming from dts may be too big for the platform physical address space. This especially concerns XPA-capable systems. Bootloader may determine more than 4GB memory available

[PATCH AUTOSEL 4.4 10/56] perf/x86/intel: Allow PEBS multi-entry in watermark mode

2019-06-01 Thread Sasha Levin
From: Stephane Eranian [ Upstream commit c7a286577d7592720c2f179aadfb325a1ff48c95 ] This patch fixes a restriction/bug introduced by: 583feb08e7f7 ("perf/x86/intel: Fix handling of wakeup_events for multi-entry PEBS") The original patch prevented using multi-entry PEBS when wakeup_events

[PATCH AUTOSEL 4.4 12/56] NFS4: Fix v4.0 client state corruption when mount

2019-06-01 Thread Sasha Levin
From: ZhangXiaoxu [ Upstream commit f02f3755dbd14fb935d24b14650fff9ba92243b8 ] stat command with soft mount never return after server is stopped. When alloc a new client, the state of the client will be set to NFS4CLNT_LEASE_EXPIRED. When the server is stopped, the state manager will work,

[PATCH AUTOSEL 4.4 04/56] hugetlbfs: on restore reserve error path retain subpool reservation

2019-06-01 Thread Sasha Levin
From: Mike Kravetz [ Upstream commit 0919e1b69ab459e06df45d3ba6658d281962db80 ] When a huge page is allocated, PagePrivate() is set if the allocation consumed a reservation. When freeing a huge page, PagePrivate is checked. If set, it indicates the reservation should be restored. PagePrivate

[PATCH AUTOSEL 4.4 07/56] kernel/sys.c: prctl: fix false positive in validate_prctl_map()

2019-06-01 Thread Sasha Levin
From: Cyrill Gorcunov [ Upstream commit a9e73998f9d705c94a8dca9687633adc0f24a19a ] While validating new map we require the @start_data to be strictly less than @end_data, which is fine for regular applications (this is why this nit didn't trigger for that long). These members are set from

[PATCH AUTOSEL 4.9 09/74] mm/cma_debug.c: fix the break condition in cma_maxchunk_get()

2019-06-01 Thread Sasha Levin
From: Yue Hu [ Upstream commit f0fd50504a54f5548eb666dc16ddf8394e44e4b7 ] If not find zero bit in find_next_zero_bit(), it will return the size parameter passed in, so the start bit should be compared with bitmap_maxno rather than cma->count. Although getting maxchunk is working fine due to

[PATCH AUTOSEL 4.9 03/74] sysctl: return -EINVAL if val violates minmax

2019-06-01 Thread Sasha Levin
From: Christian Brauner [ Upstream commit e260ad01f0aa9e96b5386d5cd7184afd949dc457 ] Currently when userspace gives us a values that overflow e.g. file-max and other callers of __do_proc_doulongvec_minmax() we simply ignore the new value and leave the current value untouched. This can be

[PATCH AUTOSEL 4.9 08/74] mm/cma.c: fix crash on CMA allocation if bitmap allocation fails

2019-06-01 Thread Sasha Levin
From: Yue Hu [ Upstream commit 1df3a339074e31db95c4790ea9236874b13ccd87 ] f022d8cb7ec7 ("mm: cma: Don't crash on allocation if CMA area can't be activated") fixes the crash issue when activation fails via setting cma->count as 0, same logic exists if bitmap allocation fails. Link:

[PATCH AUTOSEL 4.9 10/74] mm/slab.c: fix an infinite loop in leaks_show()

2019-06-01 Thread Sasha Levin
From: Qian Cai [ Upstream commit 745e10146c31b1c6ed3326286704ae251b17f663 ] "cat /proc/slab_allocators" could hang forever on SMP machines with kmemleak or object debugging enabled due to other CPUs running do_drain() will keep making kmemleak_object or debug_objects_cache dirty and unable to

[PATCH AUTOSEL 4.4 02/56] sysctl: return -EINVAL if val violates minmax

2019-06-01 Thread Sasha Levin
From: Christian Brauner [ Upstream commit e260ad01f0aa9e96b5386d5cd7184afd949dc457 ] Currently when userspace gives us a values that overflow e.g. file-max and other callers of __do_proc_doulongvec_minmax() we simply ignore the new value and leave the current value untouched. This can be

[PATCH AUTOSEL 4.9 04/74] ipc: prevent lockup on alloc_msg and free_msg

2019-06-01 Thread Sasha Levin
From: Li Rongqing [ Upstream commit d6a2946a88f524a47cc9b79279667137899db807 ] msgctl10 of ltp triggers the following lockup When CONFIG_KASAN is enabled on large memory SMP systems, the pages initialization can take a long time, if msgctl10 requests a huge block memory, and it will block rcu

[PATCH AUTOSEL 4.14 37/99] watchdog: Use depends instead of select for pretimeout governors

2019-06-01 Thread Sasha Levin
From: Guenter Roeck [ Upstream commit f627ac0e12cd2736e60b9f5782ecec1d97251f77 ] Watchdog pretimeout governors were enabled from the default governor selection using "select". As a result, the default governor was always built into the kernel, even if no watchdog driver was loaded. By using

[PATCH AUTOSEL 4.9 25/74] tracing: Fix partial reading of trace event's id file

2019-06-01 Thread Sasha Levin
From: Elazar Leibovich [ Upstream commit cbe08bcbbe787315c425dde284dcb715cfbf3f39 ] When reading only part of the id file, the ppos isn't tracked correctly. This is taken care by simple_read_from_buffer. Reading a single byte, and then the next byte would result EOF. While this seems like not

[PATCH AUTOSEL 4.9 06/74] hugetlbfs: on restore reserve error path retain subpool reservation

2019-06-01 Thread Sasha Levin
From: Mike Kravetz [ Upstream commit 0919e1b69ab459e06df45d3ba6658d281962db80 ] When a huge page is allocated, PagePrivate() is set if the allocation consumed a reservation. When freeing a huge page, PagePrivate is checked. If set, it indicates the reservation should be restored. PagePrivate

[PATCH AUTOSEL 4.14 38/99] watchdog: imx2_wdt: Fix set_timeout for big timeout values

2019-06-01 Thread Sasha Levin
From: Georg Hofmann [ Upstream commit b07e228eee69601addba98b47b1a3850569e5013 ] The documentated behavior is: if max_hw_heartbeat_ms is implemented, the minimum of the set_timeout argument and max_hw_heartbeat_ms should be used. This patch implements this behavior. Previously only the first

[PATCH AUTOSEL 4.9 02/74] fs/fat/file.c: issue flush after the writeback of FAT

2019-06-01 Thread Sasha Levin
From: Hou Tao [ Upstream commit bd8309de0d60838eef6fb575b0c4c7e95841cf73 ] fsync() needs to make sure the data & meta-data of file are persistent after the return of fsync(), even when a power-failure occurs later. In the case of fat-fs, the FAT belongs to the meta-data of file, so we need to

[PATCH AUTOSEL 4.9 05/74] ARM: prevent tracing IPI_CPU_BACKTRACE

2019-06-01 Thread Sasha Levin
From: Arnd Bergmann [ Upstream commit be167862ae7dd85c56d385209a4890678e1b0488 ] Patch series "compiler: allow all arches to enable CONFIG_OPTIMIZE_INLINING", v3. This patch (of 11): When function tracing for IPIs is enabled, we get a warning for an overflow of the ipi_types array with the

[PATCH AUTOSEL 4.9 19/74] NFS4: Fix v4.0 client state corruption when mount

2019-06-01 Thread Sasha Levin
From: ZhangXiaoxu [ Upstream commit f02f3755dbd14fb935d24b14650fff9ba92243b8 ] stat command with soft mount never return after server is stopped. When alloc a new client, the state of the client will be set to NFS4CLNT_LEASE_EXPIRED. When the server is stopped, the state manager will work,

[PATCH AUTOSEL 4.9 14/74] mfd: intel-lpss: Set the device in reset state when init

2019-06-01 Thread Sasha Levin
From: Binbin Wu [ Upstream commit dad06532292d77f37fbe831a02948a593500f682 ] In virtualized setup, when system reboots due to warm reset interrupt storm is seen. Call Trace: dump_stack+0x70/0xa5 __report_bad_irq+0x2e/0xc0 note_interrupt+0x248/0x290 ? add_interrupt_randomness+0x30/0x220

[PATCH AUTOSEL 4.9 17/74] drm/bridge: adv7511: Fix low refresh rate selection

2019-06-01 Thread Sasha Levin
From: Matt Redfearn [ Upstream commit 67793bd3b3948dc8c8384b6430e036a30a0ecb43 ] The driver currently sets register 0xfb (Low Refresh Rate) based on the value of mode->vrefresh. Firstly, this field is specified to be in Hz, but the magic numbers used by the code are Hz * 1000. This essentially

[PATCH AUTOSEL 4.14 22/99] objtool: Don't use ignore flag for fake jumps

2019-06-01 Thread Sasha Levin
From: Josh Poimboeuf [ Upstream commit e6da9567959e164f82bc81967e0d5b10dee870b4 ] The ignore flag is set on fake jumps in order to keep add_jump_destinations() from setting their jump_dest, since it already got set when the fake jump was created. But using the ignore flag is a bit of a hack.

[PATCH AUTOSEL 4.14 12/99] mm/slab.c: fix an infinite loop in leaks_show()

2019-06-01 Thread Sasha Levin
From: Qian Cai [ Upstream commit 745e10146c31b1c6ed3326286704ae251b17f663 ] "cat /proc/slab_allocators" could hang forever on SMP machines with kmemleak or object debugging enabled due to other CPUs running do_drain() will keep making kmemleak_object or debug_objects_cache dirty and unable to

[PATCH AUTOSEL 4.14 25/99] pwm: meson: Use the spin-lock only to protect register modifications

2019-06-01 Thread Sasha Levin
From: Martin Blumenstingl [ Upstream commit f173747fffdf037c791405ab4f1ec0eb392fc48e ] Holding the spin-lock for all of the code in meson_pwm_apply() can result in a "BUG: scheduling while atomic". This can happen because clk_get_rate() (which is called from meson_pwm_calc()) may sleep. Only

[PATCH AUTOSEL 4.14 31/99] percpu: remove spurious lock dependency between percpu and sched

2019-06-01 Thread Sasha Levin
From: John Sperbeck [ Upstream commit 198790d9a3aeaef5792d33a560020861126edc22 ] In free_percpu() we sometimes call pcpu_schedule_balance_work() to queue a work item (which does a wakeup) while holding pcpu_lock. This creates an unnecessary lock dependency between pcpu_lock and the scheduler's

[PATCH AUTOSEL 4.19 055/141] watchdog: Use depends instead of select for pretimeout governors

2019-06-01 Thread Sasha Levin
From: Guenter Roeck [ Upstream commit f627ac0e12cd2736e60b9f5782ecec1d97251f77 ] Watchdog pretimeout governors were enabled from the default governor selection using "select". As a result, the default governor was always built into the kernel, even if no watchdog driver was loaded. By using

[PATCH AUTOSEL 4.19 052/141] netfilter: nf_conntrack_h323: restore boundary check correctness

2019-06-01 Thread Sasha Levin
From: Jakub Jankowski [ Upstream commit f5e85ce8e733c2547827f6268136b70b802eabdb ] Since commit bc7d811ace4a ("netfilter: nf_ct_h323: Convert CHECK_BOUND macro to function"), NAT traversal for H.323 doesn't work, failing to parse H323-UserInformation. nf_h323_error_boundary() compares contents

[PATCH AUTOSEL 4.19 054/141] netfilter: nf_tables: fix base chain stat rcu_dereference usage

2019-06-01 Thread Sasha Levin
From: Florian Westphal [ Upstream commit edbd82c5fba009f68d20b5db585be1e667c605f6 ] Following splat gets triggered when nfnetlink monitor is running while xtables-nft selftests are running: net/netfilter/nf_tables_api.c:1272 suspicious rcu_dereference_check() usage! other info that might help

[PATCH AUTOSEL 4.14 01/99] rapidio: fix a NULL pointer dereference when create_workqueue() fails

2019-06-01 Thread Sasha Levin
From: Kangjie Lu [ Upstream commit 23015b22e47c5409620b1726a677d69e5cd032ba ] In case create_workqueue fails, the fix releases resources and returns -ENOMEM to avoid NULL pointer dereference. Signed-off-by: Kangjie Lu Acked-by: Alexandre Bounine Cc: Matt Porter Signed-off-by: Andrew Morton

[PATCH AUTOSEL 4.19 047/141] PCI: dwc: Free MSI in dw_pcie_host_init() error path

2019-06-01 Thread Sasha Levin
From: Jisheng Zhang [ Upstream commit 9e2b5de5604a6ff2626c51e77014d92c9299722c ] If we ever did MSI-related initializations, we need to call dw_pcie_free_msi() in the error code path. Remove the IS_ENABLED(CONFIG_PCI_MSI) check for MSI init because pci_msi_enabled() already has a stub for

[PATCH AUTOSEL 4.14 05/99] ARM: prevent tracing IPI_CPU_BACKTRACE

2019-06-01 Thread Sasha Levin
From: Arnd Bergmann [ Upstream commit be167862ae7dd85c56d385209a4890678e1b0488 ] Patch series "compiler: allow all arches to enable CONFIG_OPTIMIZE_INLINING", v3. This patch (of 11): When function tracing for IPIs is enabled, we get a warning for an overflow of the ipi_types array with the

[PATCH AUTOSEL 4.19 050/141] mmc: mmci: Prevent polling for busy detection in IRQ context

2019-06-01 Thread Sasha Levin
From: Ludovic Barre [ Upstream commit 8520ce1e17799b220ff421d4f39438c9c572ade3 ] The IRQ handler, mmci_irq(), loops until all status bits have been cleared. However, the status bit signaling busy in variant->busy_detect_flag, may be set even if busy detection isn't monitored for the current

[PATCH AUTOSEL 4.14 19/99] mfd: twl6040: Fix device init errors for ACCCTL register

2019-06-01 Thread Sasha Levin
From: Tony Lindgren [ Upstream commit 48171d0ea7caccf21c9ee3ae75eb370f2a756062 ] I noticed that we can get a -EREMOTEIO errors on at least omap4 duovero: twl6040 0-004b: Failed to write 2d = 19: -121 And then any following register access will produce errors. There 2d offset above is

[PATCH AUTOSEL 4.19 046/141] uml: fix a boot splat wrt use of cpu_all_mask

2019-06-01 Thread Sasha Levin
From: Maciej Żenczykowski [ Upstream commit 689a58605b63173acb0a8cf954af6a8f60440c93 ] Memory: 509108K/542612K available (3835K kernel code, 919K rwdata, 1028K rodata, 129K init, 211K bss, 33504K reserved, 0K cma-reserved) NR_IRQS: 15 clocksource: timer: mask: 0x max_cycles:

[PATCH AUTOSEL 4.14 08/99] mem-hotplug: fix node spanned pages when we have a node with only ZONE_MOVABLE

2019-06-01 Thread Sasha Levin
From: Linxu Fang [ Upstream commit 299c83dce9ea3a79bb4b5511d2cb996b6b8e5111 ] 342332e6a925 ("mm/page_alloc.c: introduce kernelcore=mirror option") and later patches rewrote the calculation of node spanned pages. e506b99696a2 ("mem-hotplug: fix node spanned pages when we have a movable node"),

[PATCH AUTOSEL 4.14 04/99] ipc: prevent lockup on alloc_msg and free_msg

2019-06-01 Thread Sasha Levin
From: Li Rongqing [ Upstream commit d6a2946a88f524a47cc9b79279667137899db807 ] msgctl10 of ltp triggers the following lockup When CONFIG_KASAN is enabled on large memory SMP systems, the pages initialization can take a long time, if msgctl10 requests a huge block memory, and it will block rcu

[PATCH AUTOSEL 4.14 10/99] mm/cma.c: fix the bitmap status to show failed allocation reason

2019-06-01 Thread Sasha Levin
From: Yue Hu [ Upstream commit 2b59e01a3aa665f751d1410b99fae9336bd424e1 ] Currently one bit in cma bitmap represents number of pages rather than one page, cma->count means cma size in pages. So to find available pages via find_next_zero_bit()/find_next_bit() we should use cma size not in pages

[PATCH AUTOSEL 4.14 06/99] mm/hmm: select mmu notifier when selecting HMM

2019-06-01 Thread Sasha Levin
From: Jérôme Glisse [ Upstream commit 734fb89968900b5c5f8edd5038bd4cdeab8c61d2 ] To avoid random config build issue, select mmu notifier when HMM is selected. In any cases when HMM get selected it will be by users that will also wants the mmu notifier. Link:

[PATCH AUTOSEL 4.14 14/99] thermal: rcar_gen3_thermal: disable interrupt in .remove

2019-06-01 Thread Sasha Levin
From: Jiada Wang [ Upstream commit 63f55fcea50c25ae5ad45af92d08dae3b84534c2 ] Currently IRQ remains enabled after .remove, later if device is probed, IRQ is requested before .thermal_init, this may cause IRQ function be called before device is initialized. this patch disables interrupt in

[PATCH AUTOSEL 4.14 11/99] mm/cma_debug.c: fix the break condition in cma_maxchunk_get()

2019-06-01 Thread Sasha Levin
From: Yue Hu [ Upstream commit f0fd50504a54f5548eb666dc16ddf8394e44e4b7 ] If not find zero bit in find_next_zero_bit(), it will return the size parameter passed in, so the start bit should be compared with bitmap_maxno rather than cma->count. Although getting maxchunk is working fine due to

[PATCH AUTOSEL 4.19 026/141] objtool: Don't use ignore flag for fake jumps

2019-06-01 Thread Sasha Levin
From: Josh Poimboeuf [ Upstream commit e6da9567959e164f82bc81967e0d5b10dee870b4 ] The ignore flag is set on fake jumps in order to keep add_jump_destinations() from setting their jump_dest, since it already got set when the fake jump was created. But using the ignore flag is a bit of a hack.

[PATCH AUTOSEL 4.19 024/141] drm/nouveau/kms/gf119-gp10x: push HeadSetControlOutputResource() mthd when encoders change

2019-06-01 Thread Sasha Levin
From: Ben Skeggs [ Upstream commit a0b694d0af21c9993d1a39a75fd814bd48bf7eb4 ] HW has error checks in place which check that pixel depth is explicitly provided on DP, while HDMI has a "default" setting that we use. In multi-display configurations with identical modelines, but different

<    1   2   3   4   5   >