[PATCH 5.4 096/142] RDMA/core: Fix double destruction of uobject

2020-06-01 Thread Greg Kroah-Hartman
From: Jason Gunthorpe [ Upstream commit c85f4abe66bea0b5db8d28d55da760c4fe0a0301 ] Fix use after free when user user space request uobject concurrently for the same object, within the RCU grace period. In that case, remove_handle_idr_uobject() is called twice and we will have an extra put on

[PATCH 5.4 093/142] ALSA: hda/realtek - Add new codec supported for ALC287

2020-06-01 Thread Greg Kroah-Hartman
From: Kailang Yang [ Upstream commit 630e36126e420e1756378b3427b42711ce0b9ddd ] Enable new codec supported for ALC287. Signed-off-by: Kailang Yang Cc: Link: https://lore.kernel.org/r/dcf5ce5507104d0589a917cbb71dc...@realtek.com Signed-off-by: Takashi Iwai Signed-off-by: Sasha Levin ---

[PATCH 5.4 088/142] ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround

2020-06-01 Thread Greg Kroah-Hartman
From: Takashi Iwai [ Upstream commit 399c01aa49e548c82d40f8161915a5941dd3c60e ] We fixed the regression of the speaker volume for some Thinkpad models (e.g. T570) by the commit 54947cd64c1b ("ALSA: hda/realtek - Fix speaker output regression on Thinkpad T570"). Essentially it fixes the DAC /

[PATCH 5.4 100/142] mm: remove VM_BUG_ON(PageSlab()) from page_mapcount()

2020-06-01 Thread Greg Kroah-Hartman
From: Konstantin Khlebnikov [ Upstream commit 6988f31d558aa8c744464a7f6d91d34ada48ad12 ] Replace superfluous VM_BUG_ON() with comment about correct usage. Technically reverts commit 1d148e218a0d ("mm: add VM_BUG_ON_PAGE() to page_mapcount()"), but context lines have changed. Function

[PATCH 5.4 065/142] Input: evdev - call input_flush_device() on release(), not flush()

2020-06-01 Thread Greg Kroah-Hartman
From: Brendan Shanks [ Upstream commit 09264098ff153f60866039d60b31d39b66f55a31 ] input_flush_device() should only be called once the struct file is being released and no open descriptors remain, but evdev_flush() was calling it whenever a file descriptor was closed. This caused uploaded

[PATCH 5.4 066/142] Input: xpad - add custom init packet for Xbox One S controllers

2020-06-01 Thread Greg Kroah-Hartman
From: Łukasz Patron [ Upstream commit 764f7f911bf72450c51eb74cbb262ad9933741d8 ] Sending [ 0x05, 0x20, 0x00, 0x0f, 0x06 ] packet for Xbox One S controllers fixes an issue where controller is stuck in Bluetooth mode and not sending any inputs. Signed-off-by: Łukasz Patron Reviewed-by: Cameron

[PATCH 5.4 059/142] cifs: Fix null pointer check in cifs_read

2020-06-01 Thread Greg Kroah-Hartman
From: Steve French [ Upstream commit 9bd21d4b1a767c3abebec203342f3820dcb84662 ] Coverity scan noted a redundant null check Coverity-id: 728517 Reported-by: Coverity Signed-off-by: Steve French Reviewed-by: Shyam Prasad N Signed-off-by: Sasha Levin --- fs/cifs/file.c | 2 +- 1 file

[PATCH 5.4 117/142] xfrm: fix a warning in xfrm_policy_insert_list

2020-06-01 Thread Greg Kroah-Hartman
From: Xin Long commit ed17b8d377eaf6b4a01d46942b4c647378a79bdd upstream. This waring can be triggered simply by: # ip xfrm policy update src 192.168.1.1/24 dst 192.168.1.2/24 dir in \ priority 1 mark 0 mask 0x10 #[1] # ip xfrm policy update src 192.168.1.1/24 dst 192.168.1.2/24 dir in

[PATCH 5.4 113/142] xfrm: do pskb_pull properly in __xfrm_transport_prep

2020-06-01 Thread Greg Kroah-Hartman
From: Xin Long commit 06a0afcfe2f551ff755849ea2549b0d8409fd9a0 upstream. For transport mode, when ipv6 nexthdr is set, the packet format might be like: || dest | | | | ESP| ESP | | IP6 hdr| opts.| ESP |

[PATCH 5.4 114/142] xfrm: remove the xfrm_state_put call becofe going to out_reset

2020-06-01 Thread Greg Kroah-Hartman
From: Xin Long commit db87668ad1e4917cfe04e217307ba6ed9390716e upstream. This xfrm_state_put call in esp4/6_gro_receive() will cause double put for state, as in out_reset path secpath_reset() will put all states set in skb sec_path. So fix it by simply remove the xfrm_state_put call. Fixes:

[PATCH 5.4 121/142] netfilter: nft_reject_bridge: enable reject with bridge vlan

2020-06-01 Thread Greg Kroah-Hartman
From: Michael Braun commit e9c284ec4b41c827f4369973d2792992849e4fa5 upstream. Currently, using the bridge reject target with tagged packets results in untagged packets being sent back. Fix this by mirroring the vlan id as well. Fixes: 85f5b3086a04 ("netfilter: bridge: add reject support")

[PATCH 5.4 120/142] ip_vti: receive ipip packet by calling ip_tunnel_rcv

2020-06-01 Thread Greg Kroah-Hartman
From: Xin Long commit 976eba8ab596bab94b9714cd46d38d5c6a2c660d upstream. In Commit dd9ee3444014 ("vti4: Fix a ipip packet processing bug in 'IPCOMP' virtual tunnel"), it tries to receive IPIP packets in vti by calling xfrm_input(). This case happens when a small packet or frag sent by peer is

[PATCH 5.4 118/142] xfrm: fix a NULL-ptr deref in xfrm_local_error

2020-06-01 Thread Greg Kroah-Hartman
From: Xin Long commit f6a23d85d078c2ffde79c66ca81d0a1dde451649 upstream. This patch is to fix a crash: [ ] kasan: GPF could be caused by NULL-ptr deref or user memory access [ ] general protection fault: [#1] SMP KASAN PTI [ ] RIP: 0010:ipv6_local_error+0xac/0x7a0 [ ] Call Trace:

[PATCH 5.4 140/142] netfilter: conntrack: Pass value of ctinfo to __nf_conntrack_update

2020-06-01 Thread Greg Kroah-Hartman
From: Nathan Chancellor commit 46c1e0621a72e0469ec4edfdb6ed4d387ec34f8a upstream. Clang warns: net/netfilter/nf_conntrack_core.c:2068:21: warning: variable 'ctinfo' is uninitialized when used here [-Wuninitialized] nf_ct_set(skb, ct, ctinfo); ^~

[PATCH 5.6 018/177] nexthop: Fix attribute checking for groups

2020-06-01 Thread Greg Kroah-Hartman
From: David Ahern [ Upstream commit 84be69b869a5a496a6cfde9b3c29509207a1f1fa ] For nexthop groups, attributes after NHA_GROUP_TYPE are invalid, but nh_check_attr_group starts checking at NHA_GROUP. The group type defaults to multipath and the NHA_GROUP_TYPE is currently optional so this has

[PATCH 5.4 131/142] crypto: chelsio/chtls: properly set tp->lsndtime

2020-06-01 Thread Greg Kroah-Hartman
From: Eric Dumazet commit a4976a3ef844c510ae9120290b23e9f3f47d6bce upstream. TCP tp->lsndtime unit/base is tcp_jiffies32, not tcp_time_stamp() Fixes: 36bedb3f2e5b ("crypto: chtls - Inline TLS record Tx") Signed-off-by: Eric Dumazet Cc: Ayush Sawal Cc: Vinay Kumar Yadav Signed-off-by: David

[PATCH 5.4 130/142] qlcnic: fix missing release in qlcnic_83xx_interrupt_test.

2020-06-01 Thread Greg Kroah-Hartman
From: Qiushi Wu commit 15c973858903009e995b2037683de29dfe968621 upstream. In function qlcnic_83xx_interrupt_test(), function qlcnic_83xx_diag_alloc_res() is not handled by function qlcnic_83xx_diag_free_res() after a call of the function qlcnic_alloc_mbx_args() failed. Fix this issue by adding

[PATCH 5.4 123/142] netfilter: conntrack: make conntrack userspace helpers work again

2020-06-01 Thread Greg Kroah-Hartman
From: Pablo Neira Ayuso commit ee04805ff54a63ffd90bc6749ebfe73473734ddb upstream. Florian Westphal says: "Problem is that after the helper hook was merged back into the confirm one, the queueing itself occurs from the confirm hook, i.e. we queue from the last netfilter callback in the

[PATCH 5.4 105/142] iommu: Fix reference count leak in iommu_group_alloc.

2020-06-01 Thread Greg Kroah-Hartman
From: Qiushi Wu [ Upstream commit 7cc31613734c4870ae32f5265d576ef296621343 ] kobject_init_and_add() takes reference even when it fails. Thus, when kobject_init_and_add() returns an error, kobject_put() must be called to properly clean up the kobject. Fixes: d72e31c93746 ("iommu: IOMMU Groups")

[PATCH 5.4 127/142] bnxt_en: Fix accumulation of bp->net_stats_prev.

2020-06-01 Thread Greg Kroah-Hartman
From: Michael Chan commit b8056e8434b037fdab08158fea99ed7bc8ef3a74 upstream. We have logic to maintain network counters across resets by storing the counters in bp->net_stats_prev before reset. But not all resets will clear the counters. Certain resets that don't need to change the number of

[PATCH 5.4 108/142] x86/syscalls: Revert "x86/syscalls: Make __X32_SYSCALL_BIT be unsigned long"

2020-06-01 Thread Greg Kroah-Hartman
From: Andy Lutomirski commit 700d3a5a664df267f01ec8887fd2d8ff98f67e7f upstream. Revert 45e29d119e99 ("x86/syscalls: Make __X32_SYSCALL_BIT be unsigned long") and add a comment to discourage someone else from making the same mistake again. It turns out that some user code fails to compile

[PATCH 5.4 134/142] nexthop: Expand nexthop_is_multipath in a few places

2020-06-01 Thread Greg Kroah-Hartman
From: David Ahern commit 0b5e2e39739e861fa5fc84ab27a35dbe62a15330 upstream. I got too fancy consolidating checks on multipath type. The result is that path lookups can access 2 different nh_grp structs as exposed by Nik's torture tests. Expand nexthop_is_multipath within nexthop.h to avoid

[PATCH 5.4 106/142] parisc: Fix kernel panic in mem_init()

2020-06-01 Thread Greg Kroah-Hartman
From: Helge Deller [ Upstream commit bf71bc16e02162388808949b179d59d0b571b965 ] The Debian kernel v5.6 triggers this kernel panic: Kernel panic - not syncing: Bad Address (null pointer deref?) Bad Address (null pointer deref?): Code=26 (Data memory access rights trap) at addr

[PATCH 5.4 129/142] xsk: Add overflow check for u64 division, stored into u32

2020-06-01 Thread Greg Kroah-Hartman
From: Björn Töpel commit b16a87d0aef7a6be766f6618976dc5ff2c689291 upstream. The npgs member of struct xdp_umem is an u32 entity, and stores the number of pages the UMEM consumes. The calculation of npgs npgs = size / PAGE_SIZE can overflow. To avoid overflow scenarios, the division is now

[PATCH 5.6 016/177] net sched: fix reporting the first-time use timestamp

2020-06-01 Thread Greg Kroah-Hartman
From: Roman Mashak [ Upstream commit b15e62631c5f19fea9895f7632dae9c1b27fe0cd ] When a new action is installed, firstuse field of 'tcf_t' is explicitly set to 0. Value of zero means "new action, not yet used"; as a packet hits the action, 'firstuse' is stamped with the current jiffies value.

[PATCH 5.4 139/142] netfilter: conntrack: comparison of unsigned in cthelper confirmation

2020-06-01 Thread Greg Kroah-Hartman
From: Pablo Neira Ayuso commit 94945ad2b330207cded0fd8d4abebde43a776dfb upstream. net/netfilter/nf_conntrack_core.c: In function nf_confirm_cthelper: net/netfilter/nf_conntrack_core.c:2117:15: warning: comparison of unsigned expression in < 0 is always false [-Wtype-limits] 2117 | if

[PATCH 5.4 102/142] include/asm-generic/topology.h: guard cpumask_of_node() macro argument

2020-06-01 Thread Greg Kroah-Hartman
From: Arnd Bergmann [ Upstream commit 4377748c7b5187c3342a60fa2ceb60c8a57a8488 ] drivers/hwmon/amd_energy.c:195:15: error: invalid operands to binary expression ('void' and 'int') (channel - data->nr_cpus));

[PATCH 5.6 014/177] net: qrtr: Fix passing invalid reference to qrtr_local_enqueue()

2020-06-01 Thread Greg Kroah-Hartman
From: Manivannan Sadhasivam [ Upstream commit d28ea1fbbf437054ef339afec241019f2c4e2bb6 ] Once the traversal of the list is completed with list_for_each_entry(), the iterator (node) will point to an invalid object. So passing this to qrtr_local_enqueue() which is outside of the iterator block is

[PATCH 5.4 107/142] cfg80211: fix debugfs rename crash

2020-06-01 Thread Greg Kroah-Hartman
From: Johannes Berg commit 0bbab5f0301587cad4e923ccc49bb910db86162c upstream. Removing the "if (IS_ERR(dir)) dir = NULL;" check only works if we adjust the remaining code to not rely on it being NULL. Check IS_ERR_OR_NULL() before attempting to dereference it. I'm not actually entirely sure

[PATCH 5.4 109/142] mac80211: mesh: fix discovery timer re-arming issue / crash

2020-06-01 Thread Greg Kroah-Hartman
From: Linus Lüssing commit e2d4a80f93fcfaf72e2e20daf6a28e39c3b90677 upstream. On a non-forwarding 802.11s link between two fairly busy neighboring nodes (iperf with -P 16 at ~850MBit/s TCP; 1733.3 MBit/s VHT-MCS 9 80MHz short GI VHT-NSS 4), so with frequent PREQ retries, usually after around

[PATCH 5.6 010/177] net: ipip: fix wrong address family in init error path

2020-06-01 Thread Greg Kroah-Hartman
From: Vadim Fedorenko [ Upstream commit 57ebc8f08504f176eb0f25b3e0fde517dec61a4f ] In case of error with MPLS support the code is misusing AF_INET instead of AF_MPLS. Fixes: 1b69e7e6c4da ("ipip: support MPLS over IPv4") Signed-off-by: Vadim Fedorenko Signed-off-by: David S. Miller

[PATCH 5.4 133/142] nexthops: dont modify published nexthop groups

2020-06-01 Thread Greg Kroah-Hartman
From: Nikolay Aleksandrov commit 90f33bffa382598a32cc82abfeb20adc92d041b6 upstream. We must avoid modifying published nexthop groups while they might be in use, otherwise we might see NULL ptr dereferences. In order to do that we allocate 2 nexthoup group structures upon nexthop creation and

[PATCH 5.4 136/142] net: dsa: declare lockless TX feature for slave ports

2020-06-01 Thread Greg Kroah-Hartman
From: Vladimir Oltean commit 2b86cb8299765688c5119fd18d5f436716c81010 upstream. Be there a platform with the following layout: Regular NIC | +> DSA master for switch port | +> DSA master for another switch port After changing DSA back

[PATCH 5.6 012/177] net: mvpp2: fix RX hashing for non-10G ports

2020-06-01 Thread Greg Kroah-Hartman
From: Russell King [ Upstream commit 3138a07ce219acde4c0d7ea0b6d54ba64153328b ] When rxhash is enabled on any ethernet port except the first in each CP block, traffic flow is prevented. The analysis is below: I've been investigating this afternoon, and what I've found, comparing a kernel

[PATCH 5.6 034/177] Revert "virtio-balloon: Revert "virtio-balloon: Switch back to OOM handler for VIRTIO_BALLOON_F_DEFLATE_ON_OOM""

2020-06-01 Thread Greg Kroah-Hartman
From: Greg Kroah-Hartman This reverts commit 37681282be8e89ae8baf26753bf489837d74e08e which is commit 835a6a649d0dd1b1f46759eb60fff2f63ed253a7 upstream. Jiri and David agree that it is not needed in the 5.6.y tree, so revert it. Reported-by: Jiri Slaby Reported-by: David Hildenbrand Cc:

[PATCH 5.6 033/177] net/mlx5: Fix cleaning unmanaged flow tables

2020-06-01 Thread Greg Kroah-Hartman
From: Roi Dayan [ Upstream commit aee37f3d940ca732df71c3df49347bccaafc0b24 ] Unmanaged flow tables doesn't have a parent and tree_put_node() assume there is always a parent if cleaning is needed. fix that. Fixes: 5281a0c90919 ("net/mlx5: fs_core: Introduce unmanaged flow tables")

[PATCH 5.6 002/177] dpaa_eth: fix usage as DSA master, try 3

2020-06-01 Thread Greg Kroah-Hartman
From: Vladimir Oltean [ Upstream commit 5d14c304bfc14b4fd052dc83d5224376b48f52f0 ] The dpaa-eth driver probes on compatible string for the MAC node, and the fman/mac.c driver allocates a dpaa-ethernet platform device that triggers the probing of the dpaa-eth net device driver. All of this is

[PATCH 5.6 029/177] wireguard: queueing: preserve flow hash across packet scrubbing

2020-06-01 Thread Greg Kroah-Hartman
From: "Jason A. Donenfeld" [ Upstream commit c78a0b4a78839d572d8a80f6a62221c0d7843135 ] It's important that we clear most header fields during encapsulation and decapsulation, because the packet is substantially changed, and we don't want any info leak or logic bug due to an accidental

[PATCH 5.6 027/177] net/mlx5: Fix error flow in case of function_setup failure

2020-06-01 Thread Greg Kroah-Hartman
From: Shay Drory [ Upstream commit 4f7400d5cbaef676e00cdffb0565bf731c6bb09e ] Currently, if an error occurred during mlx5_function_setup(), we keep dev->state as DEVICE_STATE_UP. Fixing it by adding a goto label. Fixes: e161105e58da ("net/mlx5: Function setup/teardown procedures")

[PATCH 5.6 035/177] net/mlx5: Avoid processing commands before cmdif is ready

2020-06-01 Thread Greg Kroah-Hartman
From: Eran Ben Elisha commit f7936ddd35d8b849daf0372770c7c9dbe7910fca upstream. When driver is reloading during recovery flow, it can't get new commands till command interface is up again. Otherwise we may get to null pointer trying to access non initialized command structures. Add cmdif state

[PATCH 5.6 026/177] net/mlx5e: Update netdev txq on completions during closure

2020-06-01 Thread Greg Kroah-Hartman
From: Moshe Shemesh [ Upstream commit 5e911e2c06bd8c17df29147a5e2d4b17fafda024 ] On sq closure when we free its descriptors, we should also update netdev txq on completions which would not arrive. Otherwise if we reopen sqs and attach them back, for example on fw fatal recovery flow, we may get

[PATCH 5.6 021/177] sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed

2020-06-01 Thread Greg Kroah-Hartman
From: "Jere Lepp�nen" [ Upstream commit d3e8e4c11870413789f029a71e72ae6e971fe678 ] Commit bdf6fa52f01b ("sctp: handle association restarts when the socket is closed.") starts shutdown when an association is restarted, if in SHUTDOWN-PENDING state and the socket is closed. However, the rationale

[PATCH 5.6 022/177] tipc: block BH before using dst_cache

2020-06-01 Thread Greg Kroah-Hartman
From: Eric Dumazet [ Upstream commit 1378817486d6860f6a927f573491afe65287abf1 ] dst_cache_get() documents it must be used with BH disabled. sysbot reported : BUG: using smp_processor_id() in preemptible [] code: /21697 caller is dst_cache_get+0x3a/0xb0 net/core/dst_cache.c:68 CPU: 0

[PATCH 5.6 032/177] net/mlx5: Fix a race when moving command interface to events mode

2020-06-01 Thread Greg Kroah-Hartman
From: Eran Ben Elisha [ Upstream commit d43b7007dbd1195a5b6b83213e49b1516aaf6f5e ] After driver creates (via FW command) an EQ for commands, the driver will be informed on new commands completion by EQE. However, due to a race in driver's internal command mode metadata update, some new commands

[PATCH 5.6 031/177] r8169: fix OCP access on RTL8117

2020-06-01 Thread Greg Kroah-Hartman
From: Heiner Kallweit [ Upstream commit 561535b0f23961ced071b82575d5e83e6351a814 ] According to r8168 vendor driver DASHv3 chips like RTL8168fp/RTL8117 need a special addressing for OCP access. Fix is compile-tested only due to missing test hardware. Fixes: 1287723aa139 ("r8169: add support

[PATCH 5.6 052/177] ALSA: usb-audio: add mapping for ASRock TRX40 Creator

2020-06-01 Thread Greg Kroah-Hartman
From: Andrew Oakley [ Upstream commit da7a8f1a8fc3e14c6dcc52b4098bddb8f20390be ] This is another TRX40 based motherboard with ALC1220-VB USB-audio that requires a static mapping table. This motherboard also has a PCI device which advertises no codecs. The PCI ID is 1022:1487 and PCI SSID is

[PATCH 5.6 059/177] gfs2: Grab glock reference sooner in gfs2_add_revoke

2020-06-01 Thread Greg Kroah-Hartman
From: Andreas Gruenbacher [ Upstream commit f4e2f5e1a527ce58fc9f85145b03704779a3123e ] This patch rearranges gfs2_add_revoke so that the extra glock reference is added earlier on in the function to avoid races in which the glock is freed before the new reference is taken. Signed-off-by:

[PATCH 5.6 060/177] drm/amdgpu: drop unnecessary cancel_delayed_work_sync on PG ungate

2020-06-01 Thread Greg Kroah-Hartman
From: Evan Quan [ Upstream commit 1fe48ec08d9f2e26d893a6c05bd6c99a3490f9ef ] As this is already properly handled in amdgpu_gfx_off_ctrl(). In fact, this unnecessary cancel_delayed_work_sync may leave a small time window for race condition and is dangerous. Signed-off-by: Evan Quan

[PATCH 5.6 057/177] gfs2: move privileged user check to gfs2_quota_lock_check

2020-06-01 Thread Greg Kroah-Hartman
From: Bob Peterson [ Upstream commit 4ed0c30811cb4d30ef89850b787a53a84d5d2bcb ] Before this patch, function gfs2_quota_lock checked if it was called from a privileged user, and if so, it bypassed the quota check: superuser can operate outside the quotas. That's the wrong place for the check

[PATCH 5.6 065/177] usb: phy: twl6030-usb: Fix a resource leak in an error handling path in twl6030_usb_probe()

2020-06-01 Thread Greg Kroah-Hartman
From: Christophe JAILLET [ Upstream commit f058764d19000d98aef72010468db1f69faf9fa0 ] A call to 'regulator_get()' is hidden in 'twl6030_usb_ldo_init()'. A corresponding put must be performed in the error handling path, as already done in the remove function. While at it, also move a

[PATCH 5.6 051/177] gpio: tegra: mask GPIO IRQs during IRQ shutdown

2020-06-01 Thread Greg Kroah-Hartman
From: Stephen Warren [ Upstream commit 0cf253eed5d2bdf7bb3152457b38f39b012955f7 ] The driver currently leaves GPIO IRQs unmasked even when the GPIO IRQ client has released the GPIO IRQ. This allows the HW to raise IRQs, and SW to process them, after shutdown. Fix this by masking the IRQ when

[PATCH 5.6 061/177] drm/amd/powerplay: perform PG ungate prior to CG ungate

2020-06-01 Thread Greg Kroah-Hartman
From: Evan Quan [ Upstream commit f4fcfa4282c1a1bf51475ebb0ffda623eebf1191 ] Since gfxoff should be disabled first before trying to access those GC registers. Signed-off-by: Evan Quan Reviewed-by: Alex Deucher Signed-off-by: Alex Deucher Signed-off-by: Sasha Levin ---

[PATCH 5.6 062/177] drm/amdgpu: Use GEM obj reference for KFD BOs

2020-06-01 Thread Greg Kroah-Hartman
From: Felix Kuehling [ Upstream commit 39b3128d7ffd44e400e581e6f49e88cb42bef9a1 ] Releasing the AMDGPU BO ref directly leads to problems when BOs were exported as DMA bufs. Releasing the GEM reference makes sure that the AMDGPU/TTM BO is not freed too early. Also take a GEM reference when

[PATCH 5.6 050/177] ARM: dts: rockchip: fix pinctrl sub nodename for spi in rk322x.dtsi

2020-06-01 Thread Greg Kroah-Hartman
From: Johan Jonker [ Upstream commit 855bdca1781c79eb661f89c8944c4a719ce720e8 ] A test with the command below gives these errors: arch/arm/boot/dts/rk3229-evb.dt.yaml: spi-0: '#address-cells' is a required property arch/arm/boot/dts/rk3229-evb.dt.yaml: spi-1: '#address-cells' is a required

[PATCH 5.6 069/177] IB/i40iw: Remove bogus call to netdev_master_upper_dev_get()

2020-06-01 Thread Greg Kroah-Hartman
From: Denis V. Lunev [ Upstream commit 856ec7f64688387b100b7083cdf480ce3ac41227 ] Local variable netdev is not used in these calls. It should be noted, that this change is required to work in bonded mode. Otherwise we would get the following assert: "RTNL: assertion failed at net/core/dev.c

[PATCH 5.6 068/177] drm/amd/amdgpu: Update update_config() logic

2020-06-01 Thread Greg Kroah-Hartman
From: Leo (Hanghong) Ma [ Upstream commit 650e723cecf2738dee828564396f3239829aba83 ] [Why] For MST case: when update_config is called to disable a stream, this clears the settings for all the streams on that link. We should only clear the settings for the stream that was disabled. [How] Clear

[PATCH 5.6 055/177] net: microchip: encx24j600: add missed kthread_stop

2020-06-01 Thread Greg Kroah-Hartman
From: Chuhong Yuan [ Upstream commit ff8ce319e9c25e920d994cc35236f0bb32dfc8f3 ] This driver calls kthread_run() in probe, but forgets to call kthread_stop() in probe failure and remove. Add the missed kthread_stop() to fix it. Signed-off-by: Chuhong Yuan Signed-off-by: David S. Miller

[PATCH 5.6 056/177] kselftests: dmabuf-heaps: Fix confused return value on expected error testing

2020-06-01 Thread Greg Kroah-Hartman
From: John Stultz [ Upstream commit 4bb9d46d47b105a774f9dca642f5271375bca4b2 ] When I added the expected error testing, I forgot I need to set the return to zero when we successfully see an error. Without this change we only end up testing a single heap before the test quits. Cc: Shuah Khan

[PATCH 5.6 007/177] net: ethernet: ti: cpsw: fix ASSERT_RTNL() warning during suspend

2020-06-01 Thread Greg Kroah-Hartman
From: Grygorii Strashko [ Upstream commit 4c64b83d03f4aafcdf710caad994cbc855802e74 ] vlan_for_each() are required to be called with rtnl_lock taken, otherwise ASSERT_RTNL() warning will be triggered - which happens now during System resume from suspend: cpsw_suspend() |- cpsw_ndo_stop()

[PATCH 5.6 049/177] ARM: dts: rockchip: swap clock-names of gpu nodes

2020-06-01 Thread Greg Kroah-Hartman
From: Johan Jonker [ Upstream commit b14f3898d2c25a9b47a61fb879d0b1f3af92c59b ] Dts files with Rockchip 'gpu' nodes were manually verified. In order to automate this process arm,mali-utgard.txt has been converted to yaml. In the new setup dtbs_check with arm,mali-utgard.yaml expects clock-names

[PATCH 5.6 066/177] usb: gadget: legacy: fix redundant initialization warnings

2020-06-01 Thread Greg Kroah-Hartman
From: Masahiro Yamada [ Upstream commit d13cce757954fa663c69845611957396843ed87a ] Fix the following cppcheck warnings: drivers/usb/gadget/legacy/inode.c:1364:8: style: Redundant initialization for 'value'. The initialized value is overwritten$ value = -EOPNOTSUPP; ^

[PATCH 5.6 041/177] net: sgi: ioc3-eth: Fix return value check in ioc3eth_probe()

2020-06-01 Thread Greg Kroah-Hartman
From: Tang Bin commit a7654211d0ffeaa8eb0545ea00f8445242cbce05 upstream. In the function devm_platform_ioremap_resource(), if get resource failed, the return value is ERR_PTR() not NULL. Thus it must be replaced by IS_ERR(), or else it may result in crashes if a critical error path is

[PATCH 5.6 067/177] net: freescale: select CONFIG_FIXED_PHY where needed

2020-06-01 Thread Greg Kroah-Hartman
From: Arnd Bergmann [ Upstream commit 99352c79af3e5f2e4724abf37fa5a2a3299b1c81 ] I ran into a randconfig build failure with CONFIG_FIXED_PHY=m and CONFIG_GIANFAR=y: x86_64-linux-ld: drivers/net/ethernet/freescale/gianfar.o:(.rodata+0x418): undefined reference to `fixed_phy_change_carrier' It

[PATCH 5.6 000/177] 5.6.16-rc1 review

2020-06-01 Thread Greg Kroah-Hartman
This is the start of the stable review cycle for the 5.6.16 release. There are 177 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 03 Jun 2020 17:38:19 +. Anything

[PATCH 5.6 094/177] ARM: uaccess: consolidate uaccess asm to asm/uaccess-asm.h

2020-06-01 Thread Greg Kroah-Hartman
From: Russell King [ Upstream commit 747ffc2fcf969eff9309d7f2d1d61cb8b9e1bb40 ] Consolidate the user access assembly code to asm/uaccess-asm.h. This moves the csdb, check_uaccess, uaccess_mask_range_ptr, uaccess_enable, uaccess_disable, uaccess_save, uaccess_restore macros, and creates two new

[PATCH 5.6 099/177] soc: mediatek: cmdq: return send msg error code

2020-06-01 Thread Greg Kroah-Hartman
From: Dennis YC Hsieh [ Upstream commit 34c4e4072603ff5c174df73b973896abb76cbb51 ] Return error code to client if send message fail, so that client has chance to error handling. Fixes: 576f1b4bc802 ("soc: mediatek: Add Mediatek CMDQ helper") Signed-off-by: Dennis YC Hsieh Reviewed-by: CK Hu

[PATCH 5.6 046/177] ARM: dts: rockchip: fix phy nodename for rk3229-xms6

2020-06-01 Thread Greg Kroah-Hartman
From: Johan Jonker [ Upstream commit 621c8d0c233e260232278a4cfd3380caa3c1da29 ] A test with the command below gives for example this error: arch/arm/boot/dts/rk3229-xms6.dt.yaml: phy@0: '#phy-cells' is a required property The phy nodename is normally used by a phy-handle. This node is however

[PATCH 5.6 043/177] net: mscc: ocelot: fix address ageing time (again)

2020-06-01 Thread Greg Kroah-Hartman
From: Vladimir Oltean commit bf655ba212dfd10d1c86afeee3f3372dbd731d46 upstream. ocelot_set_ageing_time has 2 callers: - felix_set_ageing_time: from drivers/net/dsa/ocelot/felix.c - ocelot_port_attr_ageing_set: from drivers/net/ethernet/mscc/ocelot.c The issue described in the fixed commit

[PATCH 5.6 047/177] arm64: dts: rockchip: fix status for in rk3328-evb.dts

2020-06-01 Thread Greg Kroah-Hartman
From: Johan Jonker [ Upstream commit c617ed88502d0b05149e7f32f3b3fd8a0663f7e2 ] The status was removed of the '' node with the apply of a patch long time ago, so fix status for '' in 'rk3328-evb.dts'. Signed-off-by: Johan Jonker Link:

[PATCH 5.6 076/177] csky: Fixup remove duplicate irq_disable

2020-06-01 Thread Greg Kroah-Hartman
From: Liu Yibin [ Upstream commit 6633a5aa8eb6bda70eb3a9837efd28a67ccc6e0a ] Interrupt has been disabled in __schedule() with local_irq_disable() and enabled in finish_task_switch->finish_lock_switch() with local_irq_enabled(), So needn't to disable irq here. Signed-off-by: Liu Yibin

[PATCH 5.6 075/177] csky: Fixup perf callchain unwind

2020-06-01 Thread Greg Kroah-Hartman
From: Mao Han [ Upstream commit 229a0ddee1108a3f82a873e6cbbe35c92c540444 ] [ 5221.974084] Unable to handle kernel paging request at virtual address 0xf000, pc: 0x8002c18e [ 5221.985929] Oops: [ 5221.989488] [ 5221.989488] CURRENT PROCESS: [ 5221.989488] [ 5221.992877]

[PATCH 5.6 070/177] riscv: Fix unmet direct dependencies built based on SOC_VIRT

2020-06-01 Thread Greg Kroah-Hartman
From: Kefeng Wang [ Upstream commit ab7fbad0c7d7a4f9b320a059a171a92a34b6d409 ] Fix unmet direct dependencies Warning and fix Kconfig indent. WARNING: unmet direct dependencies detected for POWER_RESET_SYSCON Depends on [n]: POWER_RESET [=n] && OF [=y] && HAS_IOMEM [=y] Selected by [y]: -

[PATCH 5.6 077/177] drm/meson: pm resume add return errno branch

2020-06-01 Thread Greg Kroah-Hartman
From: Bernard Zhao [ Upstream commit c54a8f1f329197d83d941ad84c4aa38bf282cbbd ] pm_resump api did not handle drm_mode_config_helper_resume error. This change add handle to return drm_mode_config_helper_resume`s error number. This code logic is aligned with api pm_suspend. After this change, the

[PATCH 5.6 100/177] gpu/drm: ingenic: Fix bogus crtc_atomic_check callback

2020-06-01 Thread Greg Kroah-Hartman
From: Paul Cercueil [ Upstream commit a53bcc19876498bdd3b4ef796c787295dcc498b4 ] The code was comparing the SoC's maximum height with the mode's width, and vice-versa. D'oh. Cc: sta...@vger.kernel.org # v5.6 Fixes: a7c909b7c037 ("gpu/drm: ingenic: Check for display size in CRTC atomic check")

[PATCH 5.6 045/177] ARM: dts: rockchip: fix phy nodename for rk3228-evb

2020-06-01 Thread Greg Kroah-Hartman
From: Johan Jonker [ Upstream commit 287e0d538fcec2f6e8eb1e565bf0749f3b90186d ] A test with the command below gives for example this error: arch/arm/boot/dts/rk3228-evb.dt.yaml: phy@0: '#phy-cells' is a required property The phy nodename is normally used by a phy-handle. This node is however

[PATCH 5.6 044/177] arm64: dts: qcom: db820c: fix audio configuration

2020-06-01 Thread Greg Kroah-Hartman
From: Srinivas Kandagatla [ Upstream commit 7710f80ecd9c74544a22557ab581cf603e713f51 ] After patch f864edff110d ("ASoC: qdsp6: q6routing: remove default routing") and 9b60441692d9 ("ASoC: qdsp6: q6asm-dai: only enable dais from device tree") asm dais and routing needs to be properly specified

[PATCH 5.6 079/177] riscv: pgtable: Fix __kernel_map_pages build error if NOMMU

2020-06-01 Thread Greg Kroah-Hartman
From: Kefeng Wang [ Upstream commit 9a6630aef93394ac54494c7e273e9bc026509375 ] riscv64-none-linux-gnu-ld: mm/page_alloc.o: in function `.L0 ': page_alloc.c:(.text+0xd34): undefined reference to `__kernel_map_pages' riscv64-none-linux-gnu-ld: page_alloc.c:(.text+0x104a): undefined reference to

[PATCH 5.6 072/177] riscv: Add pgprot_writecombine/device and PAGE_SHARED defination if NOMMU

2020-06-01 Thread Greg Kroah-Hartman
From: Kefeng Wang [ Upstream commit fa8174aa225fe3d53b37552e5066e6f0301dbabd ] Some drivers use PAGE_SHARED, pgprot_writecombine()/pgprot_device(), add the defination to fix build error if NOMMU. Reported-by: Hulk Robot Signed-off-by: Kefeng Wang Signed-off-by: Palmer Dabbelt Signed-off-by:

[PATCH 5.6 097/177] gpio: exar: Fix bad handling for ida_simple_get error path

2020-06-01 Thread Greg Kroah-Hartman
From: Takashi Iwai [ Upstream commit 333830aa149a87cabeb5d30fbcf12eecc8040d2c ] The commit 7ecced0934e5 ("gpio: exar: add a check for the return value of ida_simple_get fails") added a goto jump to the common error handler for ida_simple_get() error, but this is wrong in two ways: it doesn't

[PATCH 5.6 071/177] riscv: stacktrace: Fix undefined reference to `walk_stackframe

2020-06-01 Thread Greg Kroah-Hartman
From: Kefeng Wang [ Upstream commit 0502bee37cdef755d63eee60236562e5605e2480 ] Drop static declaration to fix following build error if FRAME_POINTER disabled, riscv64-linux-ld: arch/riscv/kernel/perf_callchain.o: in function `.L0': perf_callchain.c:(.text+0x2b8): undefined reference to

[PATCH 5.6 074/177] csky: Fixup msa highest 3 bits mask

2020-06-01 Thread Greg Kroah-Hartman
From: Liu Yibin [ Upstream commit 165f2d2858013253042809df082b8df7e34e86d7 ] Just as comment mentioned, the msa format: cr<30/31, 15> MSA register format: 31 - 29 | 28 - 9 | 8 | 7 | 6 | 5 | 4 | 3 | 2 | 1 | 0 BA Reserved SH WA B SO SEC C D V So we should shift 29 bits not 28

[PATCH 5.6 105/177] ARM: dts: bcm: HR2: Fix PPI interrupt types

2020-06-01 Thread Greg Kroah-Hartman
From: Hamish Martin [ Upstream commit be0ec060b54f0481fb95d59086c1484a949c903c ] These error messages are output when booting on a BCM HR2 system: GIC: PPI11 is secure or misconfigured GIC: PPI13 is secure or misconfigured Per ARM documentation these interrupts are triggered on a

[PATCH 5.6 108/177] ARM: dts: mmp3: Drop usb-nop-xceiv from HSIC phy

2020-06-01 Thread Greg Kroah-Hartman
From: Lubomir Rintel [ Upstream commit 24cf6eef79a7e85cfd2ef9dea52f769c9192fc6e ] "usb-nop-xceiv" is good enough if we don't lose the configuration done by the firmware, but we'd really prefer a real driver. Unfortunately, the PHY core is odd in that when the node is compatible with

[PATCH 5.6 120/177] ALSA: hda/realtek - Add new codec supported for ALC287

2020-06-01 Thread Greg Kroah-Hartman
From: Kailang Yang [ Upstream commit 630e36126e420e1756378b3427b42711ce0b9ddd ] Enable new codec supported for ALC287. Signed-off-by: Kailang Yang Cc: Link: https://lore.kernel.org/r/dcf5ce5507104d0589a917cbb71dc...@realtek.com Signed-off-by: Takashi Iwai Signed-off-by: Sasha Levin ---

[PATCH 5.6 115/177] ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround

2020-06-01 Thread Greg Kroah-Hartman
From: Takashi Iwai [ Upstream commit 399c01aa49e548c82d40f8161915a5941dd3c60e ] We fixed the regression of the speaker volume for some Thinkpad models (e.g. T570) by the commit 54947cd64c1b ("ALSA: hda/realtek - Fix speaker output regression on Thinkpad T570"). Essentially it fixes the DAC /

[PATCH 5.6 106/177] ARM: dts: mmp3: Use the MMP3 compatible string for /clocks

2020-06-01 Thread Greg Kroah-Hartman
From: Lubomir Rintel [ Upstream commit ec7d12faf81de983efce8ff23f41c5d1bff14c41 ] Clocks are in fact slightly different on MMP3. In particular, PLL2 is fixed to a different frequency, there's an extra PLL3, and the GPU clocks are configured differently. Link:

[PATCH 5.6 111/177] gpio: pxa: Fix return value of pxa_gpio_probe()

2020-06-01 Thread Greg Kroah-Hartman
From: Tiezhu Yang [ Upstream commit 558ab2e8155e5f42ca0a6407957cd4173dc166cc ] When call function devm_platform_ioremap_resource(), we should use IS_ERR() to check the return value and return PTR_ERR() if failed. Fixes: 542c25b7a209 ("drivers: gpio: pxa: use devm_platform_ioremap_resource()")

[PATCH 5.6 107/177] ARM: dts: mmp3-dell-ariel: Fix the SPI devices

2020-06-01 Thread Greg Kroah-Hartman
From: Lubomir Rintel [ Upstream commit 233cbffaa0b9ca874731efee67a11f005da1f87c ] I've managed to get about everything wrong while digging these out of OEM's board file. Correct the bus numbers, the exact model of the NOR flash, polarity of the chip selects and align the SPI frequency with the

[PATCH 5.6 121/177] libceph: ignore pool overlay and cache logic on redirects

2020-06-01 Thread Greg Kroah-Hartman
From: Jerry Lee [ Upstream commit 890bd0f8997ae6ac0a367dd5146154a3963306dd ] OSD client should ignore cache/overlay flag if got redirect reply. Otherwise, the client hangs when the cache tier is in forward mode. [ idryomov: Redirects are effectively deprecated and no longer used or tested.

[PATCH 5.6 116/177] ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC

2020-06-01 Thread Greg Kroah-Hartman
From: Chris Chiu [ Upstream commit 4020d1ccbe55bdf67b31d718d2400506eaf4b43f ] The Asus USB DAC is a USB type-C audio dongle for connecting to the headset and headphone. The volume minimum value -23040 which is 0xa600 in hexadecimal with the resolution value 1 indicates this should be endianness

[PATCH 5.6 110/177] mmc: block: Fix use-after-free issue for rpmb

2020-06-01 Thread Greg Kroah-Hartman
From: Peng Hao [ Upstream commit 202500d21654874aa03243e91f96de153ec61860 ] The data structure member “rpmb->md” was passed to a call of the function “mmc_blk_put” after a call of the function “put_device”. Reorder these function calls to keep the data accesses consistent. Fixes: 1c87f7357849

[PATCH 5.6 114/177] ALSA: hwdep: fix a left shifting 1 by 31 UB bug

2020-06-01 Thread Greg Kroah-Hartman
From: Changming Liu [ Upstream commit fb8cd6481ffd126f35e9e146a0dcf0c4e8899f2e ] The "info.index" variable can be 31 in "1 << info.index". This might trigger an undefined behavior since 1 is signed. Fix this by casting 1 to 1u just to be sure "1u << 31" is defined. Signed-off-by: Changming

[PATCH 5.6 091/177] Input: synaptics-rmi4 - really fix attn_data use-after-free

2020-06-01 Thread Greg Kroah-Hartman
From: Evan Green [ Upstream commit d5a5e5b5fa7b86c05bf073acc0ba98fa280174ec ] Fix a use-after-free noticed by running with KASAN enabled. If rmi_irq_fn() is run twice in a row, then rmi_f11_attention() (among others) will end up reading from drvdata->attn_data.data, which was freed and left

[PATCH 5.6 125/177] drm/amd/display: Split program front end part that occur outside lock

2020-06-01 Thread Greg Kroah-Hartman
From: Anthony Koo [ Upstream commit bbf5f6c3f83bedd71006473849138a446ad4d9a3 ] [Why] Eventually want to lock at a higher level in stack. To do this, we need to be able to isolate the parts that need to be done after pipe unlock. [How] Split out programming that is done post unlock.

[PATCH 5.6 087/177] Input: xpad - add custom init packet for Xbox One S controllers

2020-06-01 Thread Greg Kroah-Hartman
From: Łukasz Patron [ Upstream commit 764f7f911bf72450c51eb74cbb262ad9933741d8 ] Sending [ 0x05, 0x20, 0x00, 0x0f, 0x06 ] packet for Xbox One S controllers fixes an issue where controller is stuck in Bluetooth mode and not sending any inputs. Signed-off-by: Łukasz Patron Reviewed-by: Cameron

[PATCH 5.6 088/177] Input: dlink-dir685-touchkeys - fix a typo in driver name

2020-06-01 Thread Greg Kroah-Hartman
From: Christophe JAILLET [ Upstream commit 38347374ae3f1ec4df56dd688bd603a64e79a0ed ] According to the file name and Kconfig, a 'k' is missing in this driver name. It should be "dlink-dir685-touchkeys". Fixes: 131b3de7016b ("Input: add D-Link DIR-685 touchkeys driver") Signed-off-by:

[PATCH 5.6 124/177] drm/amd/display: drop cursor position check in atomic test

2020-06-01 Thread Greg Kroah-Hartman
From: Simon Ser [ Upstream commit f7d5991b92ff824798693ddf231cf814c9d5a88b ] get_cursor_position already handles the case where the cursor has negative off-screen coordinates by not setting dc_cursor_position.enabled. Signed-off-by: Simon Ser Fixes: 626bf90fe03f ("drm/amd/display: add basic

[PATCH 5.6 137/177] gpio: fix locking open drain IRQ lines

2020-06-01 Thread Greg Kroah-Hartman
From: Linus Walleij [ Upstream commit e9bdf7e655b9ee81ee912fae1d59df48ce7311b6 ] We provided the right semantics on open drain lines being by definition output but incidentally the irq set up function would only allow IRQs on lines that were "not output". Fix the semantics to allow output open

[PATCH 5.6 083/177] drivers: net: hamradio: Fix suspicious RCU usage warning in bpqether.c

2020-06-01 Thread Greg Kroah-Hartman
From: Madhuparna Bhowmik [ Upstream commit 95f59bf88bb75281cc626e283ecefdd5d5641427 ] This patch fixes the following warning: = WARNING: suspicious RCU usage 5.7.0-rc5-next-20200514-syzkaller #0 Not tainted -

[PATCH 5.6 147/177] xfrm: espintcp: save and call old ->sk_destruct

2020-06-01 Thread Greg Kroah-Hartman
From: Sabrina Dubroca commit 9f0cadc32d738f0f0c8e30be83be7087c7b85ee5 upstream. When ESP encapsulation is enabled on a TCP socket, I'm replacing the existing ->sk_destruct callback with espintcp_destruct. We still need to call the old callback to perform the other cleanups when the socket is

<    5   6   7   8   9   10   11   12   13   14   >