[PATCH 4.18 234/235] mei: bus: type promotion bug in mei_nfc_if_version()

2018-09-24 Thread Greg Kroah-Hartman
4.18-stable review patch. If anyone has any objections, please let me know. -- From: Dan Carpenter commit b40b3e9358fbafff6a4ba0f4b9658f6617146f9c upstream. We accidentally removed the check for negative returns without considering the issue of type promotion. The

[PATCH 4.18 232/235] pinctrl: qcom: spmi-gpio: Fix pmic_gpio_config_get() to be compliant

2018-09-24 Thread Greg Kroah-Hartman
4.18-stable review patch. If anyone has any objections, please let me know. -- From: Douglas Anderson [ Upstream commit 1cf86bc21257a330e3af51f2a4e885f1a705f6a5 ] If you do this on an sdm845 board: grep "" /sys/kernel/debug/pinctrl/*spmi:pmic*/pinconf-groups ...it looks

[PATCH 4.18 230/235] gpiolib: Respect error code of ->get_direction()

2018-09-24 Thread Greg Kroah-Hartman
4.18-stable review patch. If anyone has any objections, please let me know. -- From: Andy Shevchenko [ Upstream commit 36b312792b97933dc07abe074f50941199bd357c ] In case we try to lock GPIO pin as IRQ when something going wrong we print a misleading message. Correct this by

[PATCH 4.18 231/235] pinctrl: msm: Fix msm_config_group_get() to be compliant

2018-09-24 Thread Greg Kroah-Hartman
4.18-stable review patch. If anyone has any objections, please let me know. -- From: Douglas Anderson [ Upstream commit 05e0c828955c1cab58dd71a04539442e5375d917 ] If you do this on an sdm845 board: cat /sys/kernel/debug/pinctrl/340.pinctrl/pinconf-groups ...it looks

[PATCH 4.18 032/235] clk: core: Potentially free connection id

2018-09-24 Thread Greg Kroah-Hartman
4.18-stable review patch. If anyone has any objections, please let me know. -- From: Mikko Perttunen [ Upstream commit 365f7a89c881e84f1ebc925f65f899d5d7ce547e ] Patch "clk: core: Copy connection id" made it so that the connector id 'con_id' is kstrdup_const()ed to cater to

WARNING in request_end

2018-09-24 Thread syzbot
Hello, syzbot found the following crash on: HEAD commit:6bf4ca7fbc85 Linux 4.19-rc5 git tree: upstream console output: https://syzkaller.appspot.com/x/log.txt?x=159149c640 kernel config: https://syzkaller.appspot.com/x/.config?x=22a62640793a83c9 dashboard link:

Re: [PATCH v3 4/4] clk: pmc-atom: use devm_kstrdup_const()

2018-09-24 Thread Andy Shevchenko
On Mon, Sep 24, 2018 at 01:44:19PM +0200, Bartosz Golaszewski wrote: > pon., 24 wrz 2018 o 13:23 Andy Shevchenko > napisał(a): > > > > On Mon, Sep 24, 2018 at 12:11:50PM +0200, Bartosz Golaszewski wrote: > > > Use devm_kstrdup_const() in the pmc-atom driver. This mostly serves as > > > an example

[PATCH 4.9 111/111] MIPS: VDSO: Drop gic_get_usm_range() usage

2018-09-24 Thread Greg Kroah-Hartman
4.9-stable review patch. If anyone has any objections, please let me know. -- From: Paul Burton commit 00578cd864d45ae4b8fa3f684f8d6f783dd8d15d upstream. We don't really need gic_get_usm_range() to abstract discovery of the address of the GIC user-visible section now that we

[REVIEW][PATCH 4/4] signal/arm/kvm: Use send_sig_mceerr

2018-09-24 Thread Eric W. Biederman
This simplifies the code making it clearer what is going on, and making the siginfo generation easier to maintain. Signed-off-by: "Eric W. Biederman" --- virt/kvm/arm/mmu.c | 14 -- 1 file changed, 4 insertions(+), 10 deletions(-) diff --git a/virt/kvm/arm/mmu.c

[PATCH 4.14 010/173] erspan: return PACKET_REJECT when the appropriate tunnel is not found

2018-09-24 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Haishuang Yan [ Upstream commit 5a64506b5c2c3cdb29d817723205330378075448 ] If erspan tunnel hasn't been established, we'd better send icmp port unreachable message after receive erspan

[REVIEW][PATCH 3/4] signal/arm: Use send_sig_fault where appropriate

2018-09-24 Thread Eric W. Biederman
Signed-off-by: "Eric W. Biederman" --- arch/arm/vfp/vfpmodule.c | 11 +++ 1 file changed, 3 insertions(+), 8 deletions(-) diff --git a/arch/arm/vfp/vfpmodule.c b/arch/arm/vfp/vfpmodule.c index dc7e6b50ef67..aa96cc5c9fe9 100644 --- a/arch/arm/vfp/vfpmodule.c +++

[PATCH 4.14 014/173] iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register

2018-09-24 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Miao Zhong [ Upstream commit 0d535967ac658966c6ade8f82b5799092f7d5441 ] When PRI queue occurs overflow, driver should update the OVACKFLG to the PRIQ consumer register, otherwise subsequent

Re: [PATCH 4.18 177/235] gpiolib: dont allow userspace to set values of input lines

2018-09-24 Thread Bartosz Golaszewski
pon., 24 wrz 2018 o 14:41 Greg Kroah-Hartman napisał(a): > > 4.18-stable review patch. If anyone has any objections, please let me know. > > -- > > From: Bartosz Golaszewski > > [ Upstream commit e5332d5437764f775cf4e3b8ca3bf592af063a02 ] > > User space can currently both read

[PATCH 4.14 001/173] be2net: Fix memory leak in be_cmd_get_profile_config()

2018-09-24 Thread Greg Kroah-Hartman
4.14-stable review patch. If anyone has any objections, please let me know. -- From: Petr Oros [ Upstream commit 9d7f19dc4673fbafebfcbf30eb90e09fa7d1c037 ] DMA allocated memory is lost in be_cmd_get_profile_config() when we call it with non-NULL port_res parameter.

Re: [PATCH v10 13/26] s390: vfio-ap: zeroize the AP queues

2018-09-24 Thread Harald Freudenberger
On 24.09.2018 14:16, Halil Pasic wrote: > > On 09/24/2018 01:36 PM, Cornelia Huck wrote: >> On Wed, 12 Sep 2018 15:43:03 -0400 >> Tony Krowiak wrote: >> >>> From: Tony Krowiak >>> >>> Let's call PAPQ(ZAPQ) to zeroize a queue for each queue configured >>> for a mediated matrix device when it is

Re: [PATCH v4 09/20] memory: tegra: Adapt to Tegra20 device-tree binding changes

2018-09-24 Thread Dmitry Osipenko
On 9/24/18 1:02 PM, Thierry Reding wrote: On Mon, Sep 24, 2018 at 03:41:42AM +0300, Dmitry Osipenko wrote: The tegra20-mc device-tree binding has been changed, GART has been squashed into Memory Controller and now the clock property is mandatory for Tegra20, the DT compatible has been changed

Re: INFO: task hung in fsnotify_connector_destroy_workfn (2)

2018-09-24 Thread Dmitry Vyukov
On Mon, Sep 24, 2018 at 3:19 PM, Jiri Kosina wrote: > On Sun, 16 Sep 2018, Amir Goldstein wrote: > >> > > syzbot found the following crash on: >> > > >> > > HEAD commit:11da3a7f84f1 Linux 4.19-rc3 >> > > git tree: upstream >> > > console output:

Gratuitous licenses are revocable

2018-09-24 Thread gratuitouslicensesarerevocable
Gratuitous licenses are revocable by the grantor. Each of the gratis linux kernel contributors can revoke their license grant (to the project or anyone else who did not pay consideration) at their pleasure. If and when they are ejected from kernel work, when the gift horse is stared in the

Re: [BISECTED] Regression: Solidrun Clearfog Base won't boot since "PCI: mvebu: Only remap I/O space if configured"

2018-09-24 Thread Lorenzo Pieralisi
On Mon, Sep 24, 2018 at 03:10:40PM +0200, Thomas Petazzoni wrote: > Hello, > > On Mon, 24 Sep 2018 13:46:29 +0100, Lorenzo Pieralisi wrote: > > > What I think you can do short term, given that AFAICS MVEBU is not > > removable, instead of using pci_host_probe() you move part of its code > > into

[REVIEW][PATCH 1/3] signal/ia64: Use the generic force_sigsegv in setup_frame

2018-09-24 Thread Eric W. Biederman
The ia64 handling of failure to setup a signal frame has been trying to set overlapping fields in struct siginfo since 2.3.43. The si_pid and si_uid fields are stomped when the si_addr field is set. The si_code of SI_KERNEL indicates that si_pid and si_uid should be valid, and that si_addr does

[REVIEW][PATCH 2/3] signal/ia64: Use the force_sig(SIGSEGV,...) in ia64_rt_sigreturn

2018-09-24 Thread Eric W. Biederman
The ia64 handling of failure to return from a signal frame has been trying to set overlapping fields in struct siginfo since 2.3.43. The si_code corresponds to the fields that were stomped (not the field that is actually written), so I can not imagine a piece of userspace code making sense of the

[REVIEW][PATCH 3/3] signal/ia64: Use force_sig_fault where appropriate

2018-09-24 Thread Eric W. Biederman
Signed-off-by: "Eric W. Biederman" --- arch/ia64/kernel/brl_emu.c | 31 ++-- arch/ia64/kernel/traps.c | 144 ++- arch/ia64/kernel/unaligned.c | 12 +-- arch/ia64/mm/fault.c | 12 +-- 4 files changed, 49 insertions(+), 150 deletions(-) diff

Re: [PATCH] clk: qcom: Add Global Clock controller (GCC) driver for SDM660

2018-09-24 Thread Craig
On 24 September 2018 13:44:33 BST, Heiko Stuebner wrote: >Hi Craig, > >Am Montag, 13. August 2018, 09:45:09 CEST schrieb Craig Tatlor: >> On 13 August 2018 07:55:34 BST, Taniya Das >wrote: >> >Hello Craig, >> > >> >Could you please correct the authorship and also provide the >reference >>

[PATCH V5 05/30] csky: System Call

2018-09-24 Thread Guo Ren
This patch adds files related to syscall. Signed-off-by: Guo Ren --- arch/csky/include/asm/syscall.h | 69 + arch/csky/include/asm/syscalls.h| 15 arch/csky/include/uapi/asm/unistd.h | 10 ++ arch/csky/kernel/syscall.c | 42

[PATCH V5 04/30] csky: Exception handling and mm-fault

2018-09-24 Thread Guo Ren
This patch adds exception handling code, cpuinfo and mm-fault code. Signed-off-by: Guo Ren --- arch/csky/abiv1/alignment.c | 332 + arch/csky/abiv1/inc/abi/entry.h | 160 arch/csky/abiv2/inc/abi/entry.h | 157

[PATCH V5 06/30] csky: Cache and TLB routines

2018-09-24 Thread Guo Ren
This patch adds cache and tlb sync codes for abiv1 & abiv2. Signed-off-by: Guo Ren --- arch/csky/abiv1/cacheflush.c | 51 arch/csky/abiv1/inc/abi/cacheflush.h | 43 +++ arch/csky/abiv1/inc/abi/tlb.h | 12 ++ arch/csky/abiv2/cacheflush.c | 59

[PATCH V5 03/30] csky: Kernel booting

2018-09-24 Thread Guo Ren
This patch add boot code. Thx boot params is all in dtb and it's the only way to let kernel get bootloader param information. Signed-off-by: Guo Ren --- arch/csky/kernel/head.S| 78 + arch/csky/kernel/setup.c | 151 +

[PATCH V5 01/30] csky: Build infrastructure

2018-09-24 Thread Guo Ren
This patch adds Makefile, Kconfig for build infrastructure. Signed-off-by: Guo Ren --- arch/csky/Kconfig | 204 + arch/csky/Kconfig.debug| 8 ++ arch/csky/Makefile | 92 +++

[PATCH V5 12/30] csky: ELF and module probe

2018-09-24 Thread Guo Ren
This patch adds ELF definition and module relocate codes. Signed-off-by: Guo Ren --- arch/csky/include/asm/elf.h | 150 arch/csky/kernel/module.c | 83 2 files changed, 233 insertions(+) create mode 100644

Re: [PATCH] iio: magnetometer: Add support for PNI RM3100 9-axis magnetometer

2018-09-24 Thread Song Qiang
On Sat, Sep 22, 2018 at 11:14:09AM +0100, Jonathan Cameron wrote: > On Thu, 20 Sep 2018 21:13:40 +0800 > Song Qiang wrote: > > > PNI RM3100 magnetometer is a high resolution, large signal immunity > > magnetometer, composed of 3 single sensors and a processing chip. > > PNI is currently not in

[PATCH] platform/x86: intel_int0002_vgpio: Implement irq_set_wake

2018-09-24 Thread Hans de Goede
We were relying on the interrupt being shared with the ACPI SCI and the ACPI core calling irq_set_wake. But that does not always happen on Bay Trail devices, so we should do it ourselves. This fixes wake from USB not working on various Bay Trail devices. Signed-off-by: Hans de Goede ---

[PATCH V5 02/30] csky: defconfig

2018-09-24 Thread Guo Ren
This patch adds csky defconfig. Signed-off-by: Guo Ren --- arch/csky/configs/defconfig | 61 + 1 file changed, 61 insertions(+) create mode 100644 arch/csky/configs/defconfig diff --git a/arch/csky/configs/defconfig b/arch/csky/configs/defconfig new

[PATCH AUTOSEL 4.18 35/76] tc-testing: add test-cases for numeric and invalid control action

2018-09-24 Thread Sasha Levin
From: Paolo Abeni [ Upstream commit 25a8238f4cc8425d4aade4f9041be468d0e8aa2e ] Only the police action allows us to specify an arbitrary numeric value for the control action. This change introduces an explicit test case for the above feature and then leverage it for testing the kernel behavior

[PATCH AUTOSEL 4.18 14/76] mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X

2018-09-24 Thread Sasha Levin
From: Danek Duvall [ Upstream commit 67d1ba8a6dc83d90cd58b89fa6cbf9ae35a0cf7f ] The mod mask for VHT capabilities intends to say that you can override the number of STBC receive streams, and it does, but only by accident. The IEEE80211_VHT_CAP_RXSTBC_X aren't bits to be set, but values (albeit

[PATCH AUTOSEL 4.18 03/76] Btrfs: fix unexpected failure of nocow buffered writes after snapshotting when low on space

2018-09-24 Thread Sasha Levin
From: Robbie Ko [ Upstream commit 8ecebf4d767e2307a946c8905278d6358eda35c3 ] Commit e9894fd3e3b3 ("Btrfs: fix snapshot vs nocow writting") forced nocow writes to fallback to COW, during writeback, when a snapshot is created. This resulted in writes made before creating the snapshot to

[PATCH AUTOSEL 4.18 54/76] i2c: uniphier-f: issue STOP only for last message or I2C_M_STOP

2018-09-24 Thread Sasha Levin
From: Masahiro Yamada [ Upstream commit 4c85609b08c4761eca0a40fd7beb06bc650f252d ] This driver currently emits a STOP if the next message is not I2C_MD_RD. It should not do it because it disturbs the I2C_RDWR ioctl, where read/write transactions are combined without STOP between. Issue STOP

[PATCH 2/3] rtc: ab8500: let the core handle range

2018-09-24 Thread Alexandre Belloni
Let the core handle offsetting and windowing the RTC range. The RTC has a 24 bit counter for minutes plus a seconds counter. Keep the epoch at the beginning of 2000. Signed-off-by: Alexandre Belloni --- drivers/rtc/rtc-ab8500.c | 53 +++- 1 file changed, 4

[PATCH AUTOSEL 4.18 33/76] sh_eth: Add R7S9210 support

2018-09-24 Thread Sasha Levin
From: Chris Brandt [ Upstream commit 6e0bb04d0e4f597d8d8f4f21401a9636f2809fd1 ] Add support for the R7S9210 which is part of the RZ/A2 series. Signed-off-by: Chris Brandt Acked-by: Rob Herring Signed-off-by: David S. Miller Signed-off-by: Sasha Levin ---

[PATCH 3/3] rtc: ab8500: remove useless check

2018-09-24 Thread Alexandre Belloni
rtc_time_to_tm always rturns a valid tm, there is no need to validate it. Signed-off-by: Alexandre Belloni --- drivers/rtc/rtc-ab8500.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/rtc/rtc-ab8500.c b/drivers/rtc/rtc-ab8500.c index 2e2671b84ab0..1f0cbd51ba06 100644

[PATCH AUTOSEL 4.18 64/76] fsnotify: fix ignore mask logic in fsnotify()

2018-09-24 Thread Sasha Levin
From: Amir Goldstein [ Upstream commit 9bdda4e9cf2dcecb60a0683b10ffb8cd7e5f2f45 ] Commit 92183a42898d ("fsnotify: fix ignore mask logic in send_to_group()") acknoledges the use case of ignoring an event on an inode mark, because of an ignore mask on a mount mark of the same group (i.e. I want

[PATCH AUTOSEL 4.18 49/76] ibmvnic: Include missing return code checks in reset function

2018-09-24 Thread Sasha Levin
From: Thomas Falcon [ Upstream commit f611a5b4a51fa36a0aa792be474f5d6aacaef7e3 ] Check the return codes of these functions and halt reset in case of failure. The driver will remain in a dormant state until the next reset event, when device initialization will be re-attempted. Signed-off-by:

[PATCH AUTOSEL 4.18 63/76] mac80211: shorten the IBSS debug messages

2018-09-24 Thread Sasha Levin
From: Emmanuel Grumbach [ Upstream commit c6e57b3896fc76299913b8cfd82d853bee8a2c84 ] When tracing is enabled, all the debug messages are recorded and must not exceed MAX_MSG_LEN (100) columns. Longer debug messages grant the user with: WARNING: CPU: 3 PID: 32642 at

[PATCH 1/3] rtc: ab8500: use rtc_add_group

2018-09-24 Thread Alexandre Belloni
Use rtc_add_group to add the sysfs group in a race free manner. Signed-off-by: Alexandre Belloni --- drivers/rtc/rtc-ab8500.c | 41 +--- 1 file changed, 17 insertions(+), 24 deletions(-) diff --git a/drivers/rtc/rtc-ab8500.c b/drivers/rtc/rtc-ab8500.c index

[PATCH AUTOSEL 4.14 06/36] mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X

2018-09-24 Thread Sasha Levin
From: Danek Duvall [ Upstream commit 67d1ba8a6dc83d90cd58b89fa6cbf9ae35a0cf7f ] The mod mask for VHT capabilities intends to say that you can override the number of STBC receive streams, and it does, but only by accident. The IEEE80211_VHT_CAP_RXSTBC_X aren't bits to be set, but values (albeit

[PATCH AUTOSEL 4.18 74/76] ceph: avoid a use-after-free in ceph_destroy_options()

2018-09-24 Thread Sasha Levin
From: Ilya Dryomov [ Upstream commit 8aaff15168cfbc7c8980fdb0e8a585f1afe56ec0 ] syzbot reported a use-after-free in ceph_destroy_options(), called from ceph_mount(). The problem was that create_fs_client() consumed the opt pointer on some errors, but not on all of them. Make sure it always

[PATCH AUTOSEL 4.14 03/36] KVM: PPC: Book3S HV: Don't truncate HPTE index in xlate function

2018-09-24 Thread Sasha Levin
From: Paul Mackerras [ Upstream commit 46dec40fb741f00f1864580130779aeeaf24fb3d ] This fixes a bug which causes guest virtual addresses to get translated to guest real addresses incorrectly when the guest is using the HPT MMU and has more than 256GB of RAM, or more specifically has a HPT larger

[PATCH AUTOSEL 4.14 16/36] mac80211: do not convert to A-MSDU if frag/subframe limited

2018-09-24 Thread Sasha Levin
From: Lorenzo Bianconi [ Upstream commit 1eb507903665442360a959136dfa3234c43db085 ] Do not start to aggregate packets in a A-MSDU frame (converting the first subframe to A-MSDU, adding the header) if max_tx_fragments or max_amsdu_subframes limits are already exceeded by it. In particular, this

Re: [PATCH v10 10/26] KVM: s390: interfaces to clear CRYCB masks

2018-09-24 Thread Tony Krowiak
On 09/24/2018 07:01 AM, Cornelia Huck wrote: On Wed, 12 Sep 2018 15:43:00 -0400 Tony Krowiak wrote: From: Tony Krowiak Introduces two new KVM interface to clear the APM, AQM and ADM masks in the guest's CRYCB. The VCPUs are taken out of SIE to ensure the VCPUs do not get out of sync. Hm,

[PATCH AUTOSEL 4.14 19/36] tools/kvm_stat: fix handling of invalid paths in debugfs provider

2018-09-24 Thread Sasha Levin
From: Stefan Raspl [ Upstream commit 617c66b9f236d20f11cecbb3f45e6d5675b2fae1 ] When filtering by guest, kvm_stat displays garbage when the guest is destroyed - see sample output below. We add code to remove the invalid paths from the providers, so at least no more garbage is displayed. Here's

[PATCH AUTOSEL 4.9 09/23] gpio: Fix crash due to registration race

2018-09-24 Thread Sasha Levin
From: Vincent Whitchurch [ Upstream commit d49b48f088c323dbacae44dfbe56d9c985c8a2a1 ] gpiochip_add_data_with_key() adds the gpiochip to the gpio_devices list before of_gpiochip_add() is called, but it's only the latter which sets the ->of_xlate function pointer. gpiochip_find() can be called

[PATCH AUTOSEL 4.14 35/36] tools/vm/slabinfo.c: fix sign-compare warning

2018-09-24 Thread Sasha Levin
From: Naoya Horiguchi [ Upstream commit 904506562e0856f2535d876407d087c9459d345b ] Currently we get the following compiler warning: slabinfo.c:854:22: warning: comparison between signed and unsigned integer expressions [-Wsign-compare] if (s->object_size < min_objsize)

[PATCH AUTOSEL 4.9 06/23] mac80211: mesh: fix HWMP sequence numbering to follow standard

2018-09-24 Thread Sasha Levin
From: Yuan-Chi Pang [ Upstream commit 1f631c3201fe5491808df143d8fcba81b3197ffd ] IEEE 802.11-2016 14.10.8.3 HWMP sequence numbering says: If it is a target mesh STA, it shall update its own HWMP SN to maximum (current HWMP SN, target HWMP SN in the PREQ element) + 1 immediately before it

[PATCH AUTOSEL 4.9 05/23] gpio: adp5588: Fix sleep-in-atomic-context bug

2018-09-24 Thread Sasha Levin
From: Michael Hennerich [ Upstream commit 6537886cdc9a637711fd6da980dbb87c2c87c9aa ] This fixes: [BUG] gpio: gpio-adp5588: A possible sleep-in-atomic-context bug in adp5588_gpio_write() [BUG] gpio: gpio-adp5588: A possible sleep-in-atomic-context bug

[PATCH AUTOSEL 4.18 76/76] afs: Fix cell specification to permit an empty address list

2018-09-24 Thread Sasha Levin
From: David Howells [ Upstream commit ecfe951f0c1b169ea4b7dd6f3a404dfedd795bc2 ] Fix the cell specification mechanism to allow cells to be pre-created without having to specify at least one address (the addresses will be upcalled for). This allows the cell information preload service to avoid

[PATCH AUTOSEL 4.14 31/36] mac80211: fix a race between restart and CSA flows

2018-09-24 Thread Sasha Levin
From: Emmanuel Grumbach [ Upstream commit f3ffb6c3a28963657eb8b02a795d75f2ebbd5ef4 ] We hit a problem with iwlwifi that was caused by a bug in mac80211. A bug in iwlwifi caused the firwmare to crash in certain cases in channel switch. Because of that bug, drv_pre_channel_switch would fail and

[PATCH AUTOSEL 4.18 13/76] bpf: sockmap, decrement copied count correctly in redirect error case

2018-09-24 Thread Sasha Levin
From: John Fastabend [ Upstream commit 501ca81760c204ec59b73e4a00bee5971fc0f1b1 ] Currently, when a redirect occurs in sockmap and an error occurs in the redirect call we unwind the scatterlist once in the error path of bpf_tcp_sendmsg_do_redirect() and then again in sendmsg(). Then in the

[PATCH AUTOSEL 4.14 30/36] cfg80211: fix a type issue in ieee80211_chandef_to_operating_class()

2018-09-24 Thread Sasha Levin
From: Dan Carpenter [ Upstream commit 8442938c3a2177ba16043b3a935f2c78266ad399 ] The "chandef->center_freq1" variable is a u32 but "freq" is a u16 so we are truncating away the high bits. I noticed this bug because in commit 9cf0a0b4b64a ("cfg80211: Add support for 60GHz band channels 5 and

[PATCH AUTOSEL 4.14 24/36] net: ethernet: cpsw-phy-sel: prefer phandle for phy sel

2018-09-24 Thread Sasha Levin
From: Tony Lindgren [ Upstream commit 18eb8aea7fb2fb4490e578b1b8a1096c34b2fc48 ] The cpsw-phy-sel device is not a child of the cpsw interconnect target module. It lives in the system control module. Let's fix this issue by trying to use cpsw-phy-sel phandle first if it exists and if not fall

[PATCH AUTOSEL 4.14 21/36] ARC: atomics: unbork atomic_fetch_##op()

2018-09-24 Thread Sasha Levin
From: Will Deacon [ Upstream commit 3fcbb8260a87efb691d837e8cd24e81f65b3eb70 ] In 4.19-rc1, Eugeniy reported weird boot and IO errors on ARC HSDK | INFO: task syslogd:77 blocked for more than 10 seconds. | Not tainted 4.19.0-rc1-7-gf213acea4e88 #40 | "echo 0 >

[PATCH AUTOSEL 4.14 23/36] RAID10 BUG_ON in raise_barrier when force is true and conf->barrier is 0

2018-09-24 Thread Sasha Levin
From: Xiao Ni [ Upstream commit 1d0ffd264204eba1861865560f1f7f7a92919384 ] In raid10 reshape_request it gets max_sectors in read_balance. If the underlayer disks have bad blocks, the max_sectors is less than last. It will call goto read_more many times. It calls raise_barrier(conf,

[PATCH AUTOSEL 4.14 14/36] net: hns: add netif_carrier_off before change speed and duplex

2018-09-24 Thread Sasha Levin
From: Peng Li [ Upstream commit 455c4401fe7a538facaffb35b906ce19f1ece474 ] If there are packets in hardware when changing the speed or duplex, it may cause hardware hang up. This patch adds netif_carrier_off before change speed and duplex in ethtool_ops.set_link_ksettings, and adds

[PATCH AUTOSEL 4.14 04/36] btrfs: btrfs_shrink_device should call commit transaction at the end

2018-09-24 Thread Sasha Levin
From: Anand Jain [ Upstream commit 801660b040d132f67fac6a95910ad307c5929b49 ] Test case btrfs/164 reports use-after-free: [ 6712.084324] general protection fault: [#1] PREEMPT SMP .. [ 6712.195423] btrfs_update_commit_device_size+0x75/0xf0 [btrfs] [ 6712.201424]

[PATCH AUTOSEL 4.14 18/36] tools/kvm_stat: fix python3 issues

2018-09-24 Thread Sasha Levin
From: Stefan Raspl [ Upstream commit 58f33cfe73076b6497bada4f7b5bda961ed68083 ] Python3 returns a float for a regular division - switch to a division operator that returns an integer. Furthermore, filters return a generator object instead of the actual list - wrap result in yet another list,

[PATCH AUTOSEL 4.14 17/36] mac80211: always account for A-MSDU header changes

2018-09-24 Thread Sasha Levin
From: Johannes Berg [ Upstream commit aa58acf325b4aadeecae2bfc90658273b47dbace ] In the error path of changing the SKB headroom of the second A-MSDU subframe, we would not account for the already-changed length of the first frame that just got converted to be in A-MSDU format and thus is a bit

[PATCH AUTOSEL 4.14 22/36] md/raid5-cache: disable reshape completely

2018-09-24 Thread Sasha Levin
From: Shaohua Li [ Upstream commit e254de6bcf3f5b6e78a92ac95fb91acef8adfe1a ] We don't support reshape yet if an array supports log device. Previously we determine the fact by checking ->log. However, ->log could be NULL after a log device is removed, but the array is still marked to support

[PATCH AUTOSEL 4.14 20/36] gpio: Fix crash due to registration race

2018-09-24 Thread Sasha Levin
From: Vincent Whitchurch [ Upstream commit d49b48f088c323dbacae44dfbe56d9c985c8a2a1 ] gpiochip_add_data_with_key() adds the gpiochip to the gpio_devices list before of_gpiochip_add() is called, but it's only the latter which sets the ->of_xlate function pointer. gpiochip_find() can be called

[PATCH 15/27] tools lib traceevent: Add prefix tep_ to struct filter_{arg,value_type}

2018-09-24 Thread Arnaldo Carvalho de Melo
From: "Tzvetomir Stoyanov (VMware)" In order to make libtraceevent into a proper library, variables, data structures and functions require a unique prefix to prevent name space conflicts. That prefix will be "tep_". This adds prefix tep_ to struct filter_arg, enum filter_value_type and all

Re: [PATCH 0/3] fuse: Solve request_find() bottleneck

2018-09-24 Thread Miklos Szeredi
On Mon, Sep 24, 2018 at 2:08 PM, Kirill Tkhai wrote: > 2 weeks passed, so ping. > > Miklos, any reaction on this? > > Thanks, > Kirill > > On 11.09.2018 13:11, Kirill Tkhai wrote: >> Hi, >> >> We noticed the performance bottle neck in FUSE running our >> Virtuozzo storage over rdma. On some types

[tip:x86/pti] x86/speculation: Add RETPOLINE_AMD support to the inline asm CALL_NOSPEC variant

2018-09-24 Thread tip-bot for Zhenzhong Duan
Commit-ID: 0cbb76d6285794f30953bfa3ab831714b59dd700 Gitweb: https://git.kernel.org/tip/0cbb76d6285794f30953bfa3ab831714b59dd700 Author: Zhenzhong Duan AuthorDate: Tue, 18 Sep 2018 07:45:00 -0700 Committer: Borislav Petkov CommitDate: Sun, 23 Sep 2018 15:25:28 +0200 x86/speculation:

[PATCH AUTOSEL 4.18 10/76] scsi: aacraid: fix a signedness bug

2018-09-24 Thread Sasha Levin
From: Dan Carpenter [ Upstream commit b9eb3b14f1dbf16bf27b6c1ffe6b8c00ec945c9b ] The problem is that ->reset_state is a u8 but it can be set to -1 or -2 in aac_tmf_callback() and the error handling in aac_eh_target_reset() relies on it to be signed. [mkp: fixed typo] Fixes: 0d643ff3c353

[PATCH AUTOSEL 4.18 11/76] bpf, sockmap: fix potential use after free in bpf_tcp_close

2018-09-24 Thread Sasha Levin
From: Daniel Borkmann [ Upstream commit e06fa9c16ce4b740996189fa5610eabcee734e6c ] bpf_tcp_close() we pop the psock linkage to a map via psock_map_pop(). A parallel update on the sock hash map can happen between psock_map_pop() and lookup_elem_raw() where we override the element under

[PATCH AUTOSEL 4.18 18/76] nl80211: Fix nla_put_u8 to u16 for NL80211_WMMR_TXOP

2018-09-24 Thread Sasha Levin
From: Haim Dreyfuss [ Upstream commit d3c89bbc7491d5e288ca2993e999d24ba9ff52ad ] TXOP (also known as Channel Occupancy Time) is u16 and should be added using nla_put_u16 instead of u8, fix that. Fixes: 50f32718e125 ("nl80211: Add wmm rule attribute to NL80211_CMD_GET_WIPHY dump command")

[PATCH AUTOSEL 4.18 09/76] scsi: libata: Add missing newline at end of file

2018-09-24 Thread Sasha Levin
From: Geert Uytterhoeven [ Upstream commit 4e8065aa6c6f50765290be27ab8a64a4e44cb009 ] With gcc 4.1.2: drivers/ata/libata-core.c:7396:33: warning: no newline at end of file Fixes: 2fa4a32613c9182b ("scsi: libsas: dynamically allocate and free ata host") Signed-off-by: Geert Uytterhoeven

[PATCH AUTOSEL 4.18 16/76] cfg80211: make wmm_rule part of the reg_rule structure

2018-09-24 Thread Sasha Levin
From: Stanislaw Gruszka [ Upstream commit 38cb87ee47fb825f6c9d645c019f75b3905c0ab2 ] Make wmm_rule be part of the reg_rule structure. This simplifies the code a lot at the cost of having bigger memory usage. However in most cases we have only few reg_rule's and when we do have many like in

[PATCH AUTOSEL 4.18 06/76] btrfs: btrfs_shrink_device should call commit transaction at the end

2018-09-24 Thread Sasha Levin
From: Anand Jain [ Upstream commit 801660b040d132f67fac6a95910ad307c5929b49 ] Test case btrfs/164 reports use-after-free: [ 6712.084324] general protection fault: [#1] PREEMPT SMP .. [ 6712.195423] btrfs_update_commit_device_size+0x75/0xf0 [btrfs] [ 6712.201424]

[PATCH AUTOSEL 4.18 07/76] scsi: csiostor: add a check for NULL pointer after kmalloc()

2018-09-24 Thread Sasha Levin
From: Varun Prakash [ Upstream commit 89809b028b6f54187b7d81a0c69b35d394c52e62 ] Reported-by: Colin Ian King Signed-off-by: Varun Prakash Signed-off-by: Martin K. Petersen Signed-off-by: Sasha Levin --- drivers/scsi/csiostor/csio_hw.c | 16 +--- 1 file changed, 9 insertions(+),

[PATCH AUTOSEL 4.18 17/76] mac80211_hwsim: Fix possible Spectre-v1 for hwsim_world_regdom_custom

2018-09-24 Thread Sasha Levin
From: Jinbum Park [ Upstream commit 3a2af7cccbbaf2362db9053a946a6084e12bfa73 ] User controls @idx which to be used as index of hwsim_world_regdom_custom. So, It can be exploited via Spectre-like attack. (speculative execution) This kind of attack leaks address of hwsim_world_regdom_custom, It

[PATCH AUTOSEL 4.18 19/76] nl80211: Pass center frequency in kHz instead of MHz

2018-09-24 Thread Sasha Levin
From: Haim Dreyfuss [ Upstream commit b88d26d97c41680f7327e5fb8061ad0037877f40 ] freq_reg_info expects to get the frequency in kHz. Instead we accidently pass it in MHz. Thus, currently the function always return ERR rule. Fix that. Fixes: 50f32718e125 ("nl80211: Add wmm rule attribute to

Re: [PATCH v8 07/16] x86/pci: Add Hygon Dhyana support to PCI and north bridge

2018-09-24 Thread Borislav Petkov
On Sun, Sep 23, 2018 at 05:35:13PM +0800, Pu Wen wrote: > As Hygon registered its PCI Vendor ID as a new one 0x1d94, and there > are PCI Devices 0x1450/0x1463/0x1464 for Host bridge on Hygon Dhyana > platform, so add Hygon Dhyana support to the PCI and north bridge > subsystem by using the code

[PATCH] KVM: x86: never trap MSR_KERNEL_GS_BASE

2018-09-24 Thread Paolo Bonzini
KVM has an old optimization whereby accesses to the kernel GS base MSR are trapped when the guest is in 32-bit and not when it is in 64-bit mode. The idea is that swapgs is not available in 32-bit mode and thus the guest has no reason to access the MSR unless in 64-bit mode. Therefore 32-bit

Re: [PATCH] iio: adc: Fix potential integer overflow

2018-09-24 Thread Himanshu Jha
Hi Gustavo, On Tue, Sep 18, 2018 at 07:53:14AM -0500, Gustavo A. R. Silva wrote: > Cast factor to s64 in order to give the compiler complete information > about the proper arithmetic to use and avoid a potential integer > overflow. Notice that such variable is being used in a context > that

[RFC PATCH v1 4/9] powerpc: Prepare for moving thread_info into task_struct

2018-09-24 Thread Christophe Leroy
This patch cleans the powerpc kernel before activating CONFIG_THREAD_INFO_IN_TASK: - The purpose of the pointer given to call_do_softirq() and call_do_irq() is to point the new stack ==> change it to void* - current_pt_regs() is in the stack, not in thread_info. - Don't use CURRENT_THREAD_INFO()

Re: WARNING: kmalloc bug in input_mt_init_slots

2018-09-24 Thread Christopher Lameter
On Mon, 24 Sep 2018, Dmitry Vyukov wrote: > On Mon, Sep 24, 2018 at 5:08 PM, Christopher Lameter wrote: > > On Sun, 23 Sep 2018, Dmitry Vyukov wrote: > > > >> What was the motivation behind that WARNING about large allocations in > >> kmalloc? Why do we want to know about them? Is the general

[RFC PATCH v1 8/9] powerpc/32: Remove CURRENT_THREAD_INFO and rename TI_CPU

2018-09-24 Thread Christophe Leroy
Now that thread_info is similar to task_struct, it's address is in r2 so CURRENT_THREAD_INFO() macro is useless. This patch removes it. At the same time, as the 'cpu' field is not anymore in thread_info, this patch renames it to TASK_CPU. Signed-off-by: Christophe Leroy ---

Re: INFO: task hung in fsnotify_connector_destroy_workfn (2)

2018-09-24 Thread Tetsuo Handa
On 2018/09/24 22:31, Dmitry Vyukov wrote: > On Mon, Sep 24, 2018 at 3:19 PM, Jiri Kosina wrote: >> On Sun, 16 Sep 2018, Amir Goldstein wrote: >> > syzbot found the following crash on: > > HEAD commit:11da3a7f84f1 Linux 4.19-rc3 > git tree: upstream > console output:

Re: [PATCH v5 1/6] arm64/mm: Introduce the init_pg_dir.

2018-09-24 Thread Mark Rutland
On Mon, Sep 24, 2018 at 02:01:37PM +0100, Mark Rutland wrote: > On Mon, Sep 17, 2018 at 12:43:28PM +0800, Jun Yao wrote: > > To make the swapper_pg_dir read only, we will move it to the rodata > > section. And force the kernel to set up the initial page table in > > the init_pg_dir. After

[REVIEW][PATCH 0/3] signal/ia64: siginfo fixes and cleanups

2018-09-24 Thread Eric W. Biederman
I have been slowly cleaning up the architectues ever since I discovered that the pattern of passing in struct siginfo is error prone, and occassionally results in borken siginfo being sent to userspace. It turns out that ia64 is one of the noticable offenders. Ever since ia64 was merged in

[PATCH 2/3] rtc: armada38x: add range

2018-09-24 Thread Alexandre Belloni
The RTC is a 32bit seconds counter. Signed-off-by: Alexandre Belloni --- drivers/rtc/rtc-armada38x.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/drivers/rtc/rtc-armada38x.c b/drivers/rtc/rtc-armada38x.c index b74338d6dde6..d0278ad0a7f9 100644 --- a/drivers/rtc/rtc-armada38x.c +++

Re: KASAN: use-after-free Read in fuse_dev_do_read

2018-09-24 Thread Miklos Szeredi
On Mon, Sep 24, 2018 at 2:06 PM, Kirill Tkhai wrote: > Fix from my previous message makes the use-after-free does not reproduce > with the reproducer in my setup. Excellent. > > I can prepare the patch, but before this some comments from Miklos would > be welcome. > > Miklos, what you think

Re: [PATCH] bug fix for making cache device failed

2018-09-24 Thread Coly Li
On 9/21/18 2:14 PM, Dongbo Cao wrote: 1)when the nbuckets of cache device is smaller than 1024, make cache device will trigger BUG_ON in kernel, add a condition to avoid this. 2)split original if condition code into separate ones to make it clearly to debug. Signed-off-by: Dongbo Cao Hi

Re: [BISECTED] Regression: Solidrun Clearfog Base won't boot since "PCI: mvebu: Only remap I/O space if configured"

2018-09-24 Thread Thomas Petazzoni
Hello, On Mon, 24 Sep 2018 15:15:12 +0100, Lorenzo Pieralisi wrote: > I understand that, I wanted to make sure we come up with a fix asap > and what I put forward would cover everything discussed in this thread, > at least temporarily, giving us time to check ISA related issues while > unmapping

[PATCH AUTOSEL 3.18 13/13] tools/vm/page-types.c: fix "defined but not used" warning

2018-09-24 Thread Sasha Levin
From: Naoya Horiguchi [ Upstream commit 7ab660f8baecfe26c1c267fa8e64d2073feae2bb ] debugfs_known_mountpoints[] is not used any more, so let's remove it. Link: http://lkml.kernel.org/r/1535102651-19418-1-git-send-email-n-horigu...@ah.jp.nec.com Signed-off-by: Naoya Horiguchi Reviewed-by:

[PATCH AUTOSEL 3.18 05/13] RAID10 BUG_ON in raise_barrier when force is true and conf->barrier is 0

2018-09-24 Thread Sasha Levin
From: Xiao Ni [ Upstream commit 1d0ffd264204eba1861865560f1f7f7a92919384 ] In raid10 reshape_request it gets max_sectors in read_balance. If the underlayer disks have bad blocks, the max_sectors is less than last. It will call goto read_more many times. It calls raise_barrier(conf,

[PATCH AUTOSEL 3.18 09/13] mac80211: fix a race between restart and CSA flows

2018-09-24 Thread Sasha Levin
From: Emmanuel Grumbach [ Upstream commit f3ffb6c3a28963657eb8b02a795d75f2ebbd5ef4 ] We hit a problem with iwlwifi that was caused by a bug in mac80211. A bug in iwlwifi caused the firwmare to crash in certain cases in channel switch. Because of that bug, drv_pre_channel_switch would fail and

[PATCH AUTOSEL 3.18 04/13] cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE

2018-09-24 Thread Sasha Levin
From: Arunk Khandavalli [ Upstream commit 4f0223bfe9c3e62d8f45a85f1ef1b18a8a263ef9 ] nl80211_update_ft_ies() tried to validate NL80211_ATTR_IE with is_valid_ie_attr() before dereferencing it, but that helper function returns true in case of NULL pointer (i.e., attribute not included). This can

[PATCH AUTOSEL 4.4 17/18] tools/vm/slabinfo.c: fix sign-compare warning

2018-09-24 Thread Sasha Levin
From: Naoya Horiguchi [ Upstream commit 904506562e0856f2535d876407d087c9459d345b ] Currently we get the following compiler warning: slabinfo.c:854:22: warning: comparison between signed and unsigned integer expressions [-Wsign-compare] if (s->object_size < min_objsize)

[PATCH AUTOSEL 3.18 03/13] gpio: adp5588: Fix sleep-in-atomic-context bug

2018-09-24 Thread Sasha Levin
From: Michael Hennerich [ Upstream commit 6537886cdc9a637711fd6da980dbb87c2c87c9aa ] This fixes: [BUG] gpio: gpio-adp5588: A possible sleep-in-atomic-context bug in adp5588_gpio_write() [BUG] gpio: gpio-adp5588: A possible sleep-in-atomic-context bug

[PATCH AUTOSEL 3.18 01/13] KVM: PPC: Book3S HV: Don't truncate HPTE index in xlate function

2018-09-24 Thread Sasha Levin
From: Paul Mackerras [ Upstream commit 46dec40fb741f00f1864580130779aeeaf24fb3d ] This fixes a bug which causes guest virtual addresses to get translated to guest real addresses incorrectly when the guest is using the HPT MMU and has more than 256GB of RAM, or more specifically has a HPT larger

[PATCH AUTOSEL 3.18 06/13] net: ethernet: cpsw-phy-sel: prefer phandle for phy sel

2018-09-24 Thread Sasha Levin
From: Tony Lindgren [ Upstream commit 18eb8aea7fb2fb4490e578b1b8a1096c34b2fc48 ] The cpsw-phy-sel device is not a child of the cpsw interconnect target module. It lives in the system control module. Let's fix this issue by trying to use cpsw-phy-sel phandle first if it exists and if not fall

[PATCH AUTOSEL 3.18 07/13] net: cadence: Fix a sleep-in-atomic-context bug in macb_halt_tx()

2018-09-24 Thread Sasha Levin
From: Jia-Ju Bai [ Upstream commit 16fe10cf92783ed9ceb182d6ea2b8adf5e8ec1b8 ] The kernel module may sleep with holding a spinlock. The function call paths (from bottom to top) in Linux-4.16 are: [FUNC] usleep_range drivers/net/ethernet/cadence/macb_main.c, 648: usleep_range in

<    5   6   7   8   9   10   11   12   13   14   >