[PATCH 4.9 70/86] USB: serial: ch341: add new Product ID for CH340

2020-07-20 Thread Greg Kroah-Hartman
From: Igor Moura commit 5d0136f8e79f8287e6a36780601f0ce797cf11c2 upstream. Add PID for CH340 that's found on some ESP8266 dev boards made by LilyGO. The specific device that contains such serial converter can be seen here: https://github.com/LilyGO/LILYGO-T-OI. Apparently, it's a regular

[PATCH 4.9 69/86] USB: serial: cypress_m8: enable Simply Automated UPB PIM

2020-07-20 Thread Greg Kroah-Hartman
From: James Hilliard commit 5c45d04c5081c1830d674f4d22d4400ea2083afe upstream. This is a UPB (Universal Powerline Bus) PIM (Powerline Interface Module) which allows for controlling multiple UPB compatible devices from Linux using the standard serial interface. Based on vendor application

[PATCH 4.14 006/125] ARM: dts: omap4-droid4: Fix spi configuration and increase rate

2020-07-20 Thread Greg Kroah-Hartman
From: Tony Lindgren [ Upstream commit 0df12a01f4857495816b05f048c4c31439446e35 ] We can currently sometimes get "RXS timed out" errors and "EOT timed out" errors with spi transfers. These errors can be made easy to reproduce by reading the cpcap iio values in a loop while keeping the CPUs busy

[PATCH 4.14 016/125] x86/entry: Increase entry_stack size to a full page

2020-07-20 Thread Greg Kroah-Hartman
From: Peter Zijlstra [ Upstream commit c7aadc09321d8f9a1d3bd1e6d8a47222ecddf6c5 ] Marco crashed in bad_iret with a Clang11/KCSAN build due to overflowing the stack. Now that we run C code on it, expand it to a full page. Suggested-by: Andy Lutomirski Reported-by: Marco Elver Signed-off-by:

[PATCH 4.14 000/125] 4.14.189-rc1 review

2020-07-20 Thread Greg Kroah-Hartman
This is the start of the stable review cycle for the 4.14.189 release. There are 125 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 22 Jul 2020 15:27:31 +. Anything

[PATCH 4.14 036/125] drm/radeon: fix double free

2020-07-20 Thread Greg Kroah-Hartman
From: Tom Rix commit 41855a898650803e24b284173354cc3e44d07725 upstream. clang static analysis flags this error drivers/gpu/drm/radeon/ci_dpm.c:5652:9: warning: Use of memory after it is freed [unix.Malloc] kfree(rdev->pm.dpm.ps[i].ps_priv);

[PATCH 4.14 034/125] Revert "ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb"

2020-07-20 Thread Greg Kroah-Hartman
From: Greg Kroah-Hartman This reverts commit 97efdabe90f035d16d3f79218055e87c76ec02e6 which is commit 2bbcaaee1fcbd83272e29f31e2bb7e70d8c49e05 upstream. It is being reverted upstream, just hasn't made it there yet and is causing lots of problems. Reported-by: Hans de Goede Cc: Qiujun Huang

[PATCH 4.14 002/125] spi: spi-fsl-dspi: Adding shutdown hook

2020-07-20 Thread Greg Kroah-Hartman
From: Peng Ma [ Upstream commit dc234825997ec6ff05980ca9e2204f4ac3f8d695 ] We need to ensure dspi controller could be stopped in order for kexec to start the next kernel. So add the shutdown operation support. Signed-off-by: Peng Ma Link:

Re: linux-next: Tree for Jul 20 (scsi/ufs/exynos)

2020-07-20 Thread Randy Dunlap
On 7/20/20 2:42 AM, Stephen Rothwell wrote: > Hi all, > > Changes since 20200717: > on x86_64: WARNING: unmet direct dependencies detected for PHY_SAMSUNG_UFS Depends on [n]: OF [=n] && (ARCH_EXYNOS || COMPILE_TEST [=y]) Selected by [y]: - SCSI_UFS_EXYNOS [=y] && SCSI_LOWLEVEL [=y] &&

[PATCH 4.14 049/125] tcp: md5: allow changing MD5 keys in all socket states

2020-07-20 Thread Greg Kroah-Hartman
From: Eric Dumazet [ Upstream commit 1ca0fafd73c5268e8fc4b997094b8bb2bfe8deea ] This essentially reverts commit 721230326891 ("tcp: md5: reject TCP_MD5SIG or TCP_MD5SIG_EXT on established sockets") Mathieu reported that many vendors BGP implementations can actually switch TCP MD5 on

[PATCH 4.14 039/125] ARC: elf: use right ELF_ARCH

2020-07-20 Thread Greg Kroah-Hartman
From: Vineet Gupta commit b7faf971081a4e56147f082234bfff55135305cb upstream. Cc: Signed-off-by: Vineet Gupta Signed-off-by: Greg Kroah-Hartman --- arch/arc/include/asm/elf.h |2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/arch/arc/include/asm/elf.h +++

[PATCH 4.14 041/125] genetlink: remove genl_bind

2020-07-20 Thread Greg Kroah-Hartman
From: Sean Tranchetti [ Upstream commit 1e82a62fec613844da9e558f3493540a5b7a7b67 ] A potential deadlock can occur during registering or unregistering a new generic netlink family between the main nl_table_lock and the cb_lock where each thread wants the lock held by the other, as demonstrated

[PATCH 4.14 043/125] l2tp: remove skb_dst_set() from l2tp_xmit_skb()

2020-07-20 Thread Greg Kroah-Hartman
From: Xin Long [ Upstream commit 27d53323664c549b5bb2dfaaf6f7ad6e0376a64e ] In the tx path of l2tp, l2tp_xmit_skb() calls skb_dst_set() to set skb's dst. However, it will eventually call inet6_csk_xmit() or ip_queue_xmit() where skb's dst will be overwritten by: skb_dst_set_noref(skb, dst);

[PATCH 4.14 023/125] bnxt_en: fix NULL dereference in case SR-IOV configuration fails

2020-07-20 Thread Greg Kroah-Hartman
From: Davide Caratti [ Upstream commit c8b1d7436045d3599bae56aef1682813ecccaad7 ] we need to set 'active_vfs' back to 0, if something goes wrong during the allocation of SR-IOV resources: otherwise, further VF configurations will wrongly assume that bp->pf.vf[x] are valid memory locations, and

[PATCH 4.14 068/125] iio:health:afe4403 Fix timestamp alignment and prevent data leak.

2020-07-20 Thread Greg Kroah-Hartman
From: Jonathan Cameron commit 3f9c6d38797e9903937b007a341dad0c251765d6 upstream. One of a class of bugs pointed out by Lars in a recent review. iio_push_to_buffers_with_timestamp assumes the buffer used is aligned to the size of the timestamp (8 bytes). This is not guaranteed in this driver

[PATCH 4.14 051/125] tcp: make sure listeners dont initialize congestion-control state

2020-07-20 Thread Greg Kroah-Hartman
From: Christoph Paasch [ Upstream commit ce69e563b325f620863830c246a8698ccea52048 ] syzkaller found its way into setsockopt with TCP_CONGESTION "cdg". tcp_cdg_init() does a kcalloc to store the gradients. As sk_clone_lock just copies all the memory, the allocated pointer will be copied as well,

[PATCH v2] dt-bindings: ingenic,pinctrl: Support pinmux/pinconf nodes

2020-07-20 Thread Paul Cercueil
Add YAML to describe the pinmux/pinconf sub-nodes of the pinctrl IP on Ingenic SoCs. Signed-off-by: Paul Cercueil --- Notes: v2: Rebased on top of pinctrl/devel .../bindings/pinctrl/ingenic,pinctrl.yaml | 40 +++ 1 file changed, 40 insertions(+) diff --git

[PATCH 4.14 024/125] net: macb: mark device wake capable when "magic-packet" property present

2020-07-20 Thread Greg Kroah-Hartman
From: Nicolas Ferre [ Upstream commit ced4799d06375929e013eea04ba6908207afabbe ] Change the way the "magic-packet" DT property is handled in the macb_probe() function, matching DT binding documentation. Now we mark the device as "wakeup capable" instead of calling the device_init_wakeup()

[PATCH 4.14 029/125] KVM: arm64: Fix definition of PAGE_HYP_DEVICE

2020-07-20 Thread Greg Kroah-Hartman
From: Will Deacon commit 68cf617309b5f6f3a651165f49f20af1494753ae upstream. PAGE_HYP_DEVICE is intended to encode attribute bits for an EL2 stage-1 pte mapping a device. Unfortunately, it includes PROT_DEVICE_nGnRE which encodes attributes for EL1 stage-1 mappings such as UXN and nG, which are

[PATCH 4.14 097/125] USB: c67x00: fix use after free in c67x00_giveback_urb

2020-07-20 Thread Greg Kroah-Hartman
From: Tom Rix commit 211f08347355cba1f769bbf3355816a12b3ddd55 upstream. clang static analysis flags this error c67x00-sched.c:489:55: warning: Use of memory after it is freed [unix.Malloc] usb_hcd_giveback_urb(c67x00_hcd_to_hcd(c67x00), urb, urbp->status);

[PATCH 4.14 096/125] ALSA: usb-audio: Fix race against the error recovery URB submission

2020-07-20 Thread Greg Kroah-Hartman
From: Takashi Iwai commit 9b7e5208a941e2e491a83eb5fa83d889e888fa2f upstream. USB MIDI driver has an error recovery mechanism to resubmit the URB in the delayed timer handler, and this may race with the standard start / stop operations. Although both start and stop operations themselves don't

[PATCH 4.14 062/125] iio:magnetometer:ak8974: Fix alignment and data leak issues

2020-07-20 Thread Greg Kroah-Hartman
From: Jonathan Cameron commit 838e00b13bfd4cac8b24df25bfc58e2eb99bcc70 upstream. One of a class of bugs pointed out by Lars in a recent review. iio_push_to_buffers_with_timestamp assumes the buffer used is aligned to the size of the timestamp (8 bytes). This is not guaranteed in this driver

[PATCH 4.14 083/125] spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate

2020-07-20 Thread Greg Kroah-Hartman
From: Marc Kleine-Budde [ Upstream commit ed7815db70d17b1741883f2da8e1d80bc2efe517 ] A SPI transfer defines the _maximum_ speed of the SPI transfer. However the driver doesn't take into account that the clock divider is always rounded down (due to integer arithmetics). This results in a too

[PATCH 4.14 060/125] arm64: alternative: Use true and false for boolean values

2020-07-20 Thread Greg Kroah-Hartman
From: Gustavo A. R. Silva [ Upstream commit 3c4d9137eefecf273a520d392071ffc9df0a9a7a ] Return statements in functions returning bool should use true or false instead of an integer value. This code was detected with the help of Coccinelle. Signed-off-by: Gustavo A. R. Silva Signed-off-by: Will

[PATCH 4.14 072/125] of: of_mdio: Correct loop scanning logic

2020-07-20 Thread Greg Kroah-Hartman
From: Florian Fainelli [ Upstream commit 5a8d7f126c97d04d893f5e5be2b286437a0d01b0 ] Commit 209c65b61d94 ("drivers/of/of_mdio.c:fix of_mdiobus_register()") introduced a break of the loop on the premise that a successful registration should exit the loop. The premise is correct but not to code,

[PATCH 4.14 081/125] phy: sun4i-usb: fix dereference of pointer phy0 before it is null checked

2020-07-20 Thread Greg Kroah-Hartman
From: Colin Ian King [ Upstream commit 38b1927e5bf9bcad4a2e33189ef1c5569f9599ba ] Currently pointer phy0 is being dereferenced via the assignment of phy on the call to phy_get_drvdata before phy0 is null checked, this can lead to a null pointer dereference. Fix this by performing the null check

[PATCH 4.14 085/125] staging: comedi: verify array index is correct before using it

2020-07-20 Thread Greg Kroah-Hartman
From: Dan Carpenter [ Upstream commit ef75e14a6c935eec82abac07ab68e388514e39bc ] This code reads from the array before verifying that "trig" is a valid index. If the index is wildly out of bounds then reading from an invalid address could lead to an Oops. Fixes: a8c66b684efa ("staging:

[PATCH 4.14 058/125] gfs2: read-only mounts should grab the sd_freeze_gl glock

2020-07-20 Thread Greg Kroah-Hartman
From: Bob Peterson [ Upstream commit b780cc615ba4795a7ef0e93b19424828a5ad456a ] Before this patch, only read-write mounts would grab the freeze glock in read-only mode, as part of gfs2_make_fs_rw. So the freeze glock was never initialized. That meant requests to freeze, which request the glock

[PATCH 4.14 071/125] net: dsa: bcm_sf2: Fix node reference count

2020-07-20 Thread Greg Kroah-Hartman
From: Florian Fainelli [ Upstream commit 8dbe4c5d5e40fe140221024f7b16bec9f310bf70 ] of_find_node_by_name() will do an of_node_put() on the "from" argument. With CONFIG_OF_DYNAMIC enabled which checks for device_node reference counts, we would be getting a warning like this: [6.347230]

[PATCH 4.14 056/125] arm64/alternatives: use subsections for replacement sequences

2020-07-20 Thread Greg Kroah-Hartman
From: Ard Biesheuvel [ Upstream commit f7b93d42945cc71e1346dd5ae07c59061d56745e ] When building very large kernels, the logic that emits replacement sequences for alternatives fails when relative branches are present in the code that is emitted into the .altinstr_replacement section and patched

Re: [PATCH 0/2] task_put batching

2020-07-20 Thread Jens Axboe
On 7/20/20 9:22 AM, Pavel Begunkov wrote: > On 18/07/2020 17:37, Jens Axboe wrote: >> On 7/18/20 2:32 AM, Pavel Begunkov wrote: >>> For my a bit exaggerated test case perf continues to show high CPU >>> cosumption by io_dismantle(), and so calling it io_iopoll_complete(). >>> Even though the patch

[PATCH 4.14 102/125] USB: serial: cypress_m8: enable Simply Automated UPB PIM

2020-07-20 Thread Greg Kroah-Hartman
From: James Hilliard commit 5c45d04c5081c1830d674f4d22d4400ea2083afe upstream. This is a UPB (Universal Powerline Bus) PIM (Powerline Interface Module) which allows for controlling multiple UPB compatible devices from Linux using the standard serial interface. Based on vendor application

[PATCH 4.19 001/133] perf: Make perf able to build with latest libbfd

2020-07-20 Thread Greg Kroah-Hartman
From: Changbin Du commit 0ada120c883d4f1f6aafd01cf0fbb10d8bbba015 upstream. libbfd has changed the bfd_section_* macros to inline functions bfd_section_ since 2019-09-18. See below two commits: o http://www.sourceware.org/ml/gdb-cvs/2019-09/msg00064.html o

[PATCH 4.14 092/125] mtd: rawnand: oxnas: Unregister all devices on error

2020-07-20 Thread Greg Kroah-Hartman
From: Miquel Raynal commit b60391eb17b2956ff2fc4c348e5a464da21ff9cb upstream. On error, the oxnas probe path just frees the device which failed and aborts the probe, leaving unreleased resources. Fix this situation by calling mtd_device_unregister()/nand_cleanup() on these. Fixes:

[PATCH 4.14 120/125] thermal/drivers/cpufreq_cooling: Fix wrong frequency converted from power

2020-07-20 Thread Greg Kroah-Hartman
From: Finley Xiao commit 371a3bc79c11b707d7a1b7a2c938dc3cc042fffb upstream. The function cpu_power_to_freq is used to find a frequency and set the cooling device to consume at most the power to be converted. For example, if the power to be converted is 80mW, and the em table is as follow.

[PATCH 4.14 106/125] virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial

2020-07-20 Thread Greg Kroah-Hartman
From: Alexander Lobakin commit 897c44f0bae574c5fb318c759b060bebf9dd6013 upstream. rproc_serial_id_table lacks an exposure to module devicetable, so when remoteproc firmware requests VIRTIO_ID_RPROC_SERIAL, no uevent is generated and no module autoloading occurs. Add missing

[PATCH 4.19 016/133] cgroup: fix cgroup_sk_alloc() for sk_clone_lock()

2020-07-20 Thread Greg Kroah-Hartman
From: Cong Wang [ Upstream commit ad0f75e5f57ccbceec13274e1e242f2b5a6397ed ] When we clone a socket in sk_clone_lock(), its sk_cgrp_data is copied, so the cgroup refcnt must be taken too. And, unlike the sk_alloc() path, sock_update_netprioidx() is not called here. Therefore, it is safe and

[PATCH 4.14 123/125] x86/cpu: Move x86_cache_bits settings

2020-07-20 Thread Greg Kroah-Hartman
From: Suraj Jitindar Singh This patch is to fix the backport of the upstream patch: cc51e5428ea5 x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+ When this was backported to the 4.9 and 4.14 stable branches the line + c->x86_cache_bits = c->x86_phys_bits; was applied in the

[PATCH 4.14 090/125] mtd: rawnand: brcmnand: fix CS0 layout

2020-07-20 Thread Greg Kroah-Hartman
From: Álvaro Fernández Rojas commit 3d3fb3c5be9ce07fa85d8f67fb3922e4613b955b upstream. Only v3.3-v5.0 have a different CS0 layout. Controllers before v3.3 use the same layout for every CS. Fixes: 27c5b17cd1b1 ("mtd: nand: add NAND driver "library" for Broadcom STB NAND controller")

[PATCH 4.14 112/125] timer: Fix wheel index calculation on last level

2020-07-20 Thread Greg Kroah-Hartman
From: Frederic Weisbecker commit e2a71bdea81690b6ef11f4368261ec6f5b6891aa upstream. When an expiration delta falls into the last level of the wheel, that delta has be compared against the maximum possible delay and reduced to fit in if necessary. However instead of comparing the delta against

[PATCH 4.14 124/125] libceph: dont omit recovery_deletes in target_copy()

2020-07-20 Thread Greg Kroah-Hartman
From: Ilya Dryomov commit 2f3fead62144002557f322c2a7c15e1255df0653 upstream. Currently target_copy() is used only for sending linger pings, so this doesn't come up, but generally omitting recovery_deletes can result in unneeded resends (force_resend in calc_target()). Fixes: ae78dd8139ce

Re: get rid of the address_space override in setsockopt

2020-07-20 Thread Eric Biggers
On Mon, Jul 20, 2020 at 02:47:13PM +0200, Christoph Hellwig wrote: > Hi Dave, > > setsockopt is the last place in architecture-independ code that still > uses set_fs to force the uaccess routines to operate on kernel pointers. > > This series adds a new sockptr_t type that can contained either a

[PATCH 4.19 023/133] m68k: mm: fix node memblock init

2020-07-20 Thread Greg Kroah-Hartman
From: Angelo Dureghello [ Upstream commit c43e55796dd4d13f4855971a4d7970ce2cd94db4 ] After pulling 5.7.0 (linux-next merge), mcf5441x mmu boot was hanging silently. memblock_add() seems not appropriate, since using MAX_NUMNODES as node id, while memblock_add_node() sets up memory for node id

[PATCH 4.19 007/133] net: Added pointer check for dst->ops->neigh_lookup in dst_neigh_lookup_skb

2020-07-20 Thread Greg Kroah-Hartman
From: Martin Varghese [ Upstream commit 394de110a73395de2ca4516b0de435e91b11b604 ] The packets from tunnel devices (eg bareudp) may have only metadata in the dst pointer of skb. Hence a pointer check of neigh_lookup is needed in dst_neigh_lookup_skb Kernel crashes when packets from bareudp

[PATCH][next] media: allegro: fix potential null dereference on header

2020-07-20 Thread Colin King
From: Colin Ian King The pointer header is an alias to msg and msg is being null checked. However, if msg is null then header is also null and this can lead to a null pointer dereference on the assignment type = header->type. Fix this by only dereferencing header after the null check on msg.

Re: [PATCH v10 07/17] mtd: spi-nor: sfdp: parse xSPI Profile 1.0 table

2020-07-20 Thread Pratyush Yadav
Hi Tudor, On 08/07/20 04:01PM, tudor.amba...@microchip.com wrote: > On 6/23/20 9:30 PM, Pratyush Yadav wrote: > > EXTERNAL EMAIL: Do not click links or open attachments unless you know the > > content is safe > > > > This table is indication that the flash is xSPI compliant and hence > >

[PATCH 4.19 028/133] arm64/alternatives: dont patch up internal branches

2020-07-20 Thread Greg Kroah-Hartman
From: Ard Biesheuvel [ Upstream commit 5679b28142193a62f6af93249c0477be9f0c669b ] Commit f7b93d42945c ("arm64/alternatives: use subsections for replacement sequences") moved the alternatives replacement sequences into subsections, in order to keep the as close as possible to the code that they

[PATCH 4.19 027/133] i2c: eg20t: Load module automatically if ID matches

2020-07-20 Thread Greg Kroah-Hartman
From: Andy Shevchenko [ Upstream commit 5f90786b31fb7d1e199a8999d46c4e3aea672e11 ] The driver can't be loaded automatically because it misses module alias to be provided. Add corresponding MODULE_DEVICE_TABLE() call to the driver. Signed-off-by: Andy Shevchenko Signed-off-by: Wolfram Sang

Re: [PATCH 03/24] net: add a new sockptr_t type

2020-07-20 Thread Eric Biggers
On Mon, Jul 20, 2020 at 02:47:16PM +0200, Christoph Hellwig wrote: > Add a uptr_t type that can hold a pointer to either a user or kernel > memory region, and simply helpers to copy to and from it. For > architectures like x86 that have non-overlapping user and kernel > address space it just is a

Re: KASAN: use-after-free Read in userfaultfd_release (2)

2020-07-20 Thread Qian Cai
On Fri, Jul 17, 2020 at 11:05:41AM -0400, Qian Cai wrote: > On Mon, Jul 13, 2020 at 08:34:06AM -0700, syzbot wrote: > > syzbot has bisected this bug to: > > > > commit d08ac70b1e0dc71ac2315007bcc3efb283b2eae4 > > Author: Daniel Colascione > > Date: Wed Apr 1 21:39:03 2020 + > > > >

[PATCH 4.19 058/133] iio:health:afe4404 Fix timestamp alignment and prevent data leak.

2020-07-20 Thread Greg Kroah-Hartman
From: Jonathan Cameron [ Upstream commit f88ecccac4be348bbcc6d056bdbc622a8955c04d ] One of a class of bugs pointed out by Lars in a recent review. iio_push_to_buffers_with_timestamp assumes the buffer used is aligned to the size of the timestamp (8 bytes). This is not guaranteed in this driver

[PATCH 4.19 000/133] 4.19.134-rc1 review

2020-07-20 Thread Greg Kroah-Hartman
This is the start of the stable review cycle for the 4.19.134 release. There are 133 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 22 Jul 2020 15:27:31 +. Anything

[PATCH 4.19 048/133] scsi: sr: remove references to BLK_DEV_SR_VENDOR, leave it enabled

2020-07-20 Thread Greg Kroah-Hartman
From: Diego Elio Pettenò [ Upstream commit 679b2ec8e060ca7a90441aff5e7d384720a41b76 ] This kernel configuration is basically enabling/disabling sr driver quirks detection. While these quirks are for fairly rare devices (very old CD burners, and a glucometer), the additional detection of these

[PATCH 4.19 042/133] Revert "usb/xhci-plat: Set PM runtime as active on resume"

2020-07-20 Thread Greg Kroah-Hartman
This reverts commit 661f5686a1c805e9b1bff65c312c38ef97faa91d. Eugeniu Rosca writes: On Thu, Jul 09, 2020 at 09:00:23AM +0200, Eugeniu Rosca wrote: >After integrating v4.14.186 commit 5410d158ca2a50 ("usb/ehci-platform: >Set PM runtime as active on resume") into downstream v4.14.x, we started >to

[PATCH 4.19 054/133] ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Alpha S

2020-07-20 Thread Greg Kroah-Hartman
From: Emmanuel Pescosta [ Upstream commit fd60e0683e8e9107e09cd2e4798f3e27e85d2705 ] Similar to the Kingston HyperX AMP, the Kingston HyperX Cloud Alpha S (0951:16d8) uses two interfaces, but only the second interface contains the capture stream. This patch delays the registration until the

[PATCH 4.19 053/133] ACPI: video: Use native backlight on Acer Aspire 5783z

2020-07-20 Thread Greg Kroah-Hartman
From: Hans de Goede [ Upstream commit 1c8fbc1f9bfb804ef2f0d4ee9397ab800e33f23a ] The Acer Aspire 5783z shipped with Windows 7 and as such does not trigger our "win8 ready" heuristic for prefering the native backlight interface. Still ACPI backlight control doesn't work on this model, where as

[PATCH 4.19 034/133] iio:humidity:hts221 Fix alignment and data leak issues

2020-07-20 Thread Greg Kroah-Hartman
From: Jonathan Cameron commit 5c49056ad9f3c786f7716da2dd47e4488fc6bd25 upstream. One of a class of bugs pointed out by Lars in a recent review. iio_push_to_buffers_with_timestamp assumes the buffer used is aligned to the size of the timestamp (8 bytes). This is not guaranteed in this driver

[PATCH 4.19 050/133] doc: dt: bindings: usb: dwc3: Update entries for disabling SS instances in park mode

2020-07-20 Thread Greg Kroah-Hartman
From: Neil Armstrong [ Upstream commit 3d157c28d2289edf0439e8308e8de3a06acaaf0e ] This patch updates the documentation with the information related to the quirks that needs to be added for disabling all SuperSpeed XHCI instances in park mode. Cc: Dongjin Kim Cc: Jianxin Pan Cc: Thinh Nguyen

[PATCH 4.19 056/133] ACPI: video: Use native backlight on Acer TravelMate 5735Z

2020-07-20 Thread Greg Kroah-Hartman
From: Paul Menzel [ Upstream commit c41c36e900a337b4132b12ccabc97f5578248b44 ] Currently, changing the brightness of the internal display of the Acer TravelMate 5735Z does not work. Pressing the function keys or changing the slider, GNOME Shell 3.36.2 displays the OSD (five steps), but the

[PATCH 4.19 086/133] ALSA: line6: Sync the pending work cancel at disconnection

2020-07-20 Thread Greg Kroah-Hartman
From: Takashi Iwai commit 68359a1ad8447c99732ebeab8c169bfed543667a upstream. Recently syzkaller reported a UAF in LINE6 driver, and it's likely because we call cancel_delayed_work() at the disconnect callback instead of cancel_delayed_work_sync(). Let's use the correct one instead.

[PATCH 4.19 089/133] ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534

2020-07-20 Thread Greg Kroah-Hartman
From: Kailang Yang commit 473fbe13fd6f9082e413aea37e624ecbce5463cc upstream. ASUS UX533 and UX534 speaker still can't output. End User feedback speaker didn't have output. Add this COEF value will enable it. Fixes: 4e051106730d ("ALSA: hda/realtek: Enable audio jacks of ASUS UX533FD with

[PATCH 4.19 074/133] mtd: rawnand: marvell: Use nand_cleanup() when the device is not yet registered

2020-07-20 Thread Greg Kroah-Hartman
From: Miquel Raynal commit 7a0c18fb5c71c6ac7d4662a145e4227dcd4a36a3 upstream. Do not call nand_release() while the MTD device has not been registered, use nand_cleanup() instead. Fixes: 02f26ecf8c77 ("mtd: nand: add reworked Marvell NAND controller driver") Signed-off-by: Miquel Raynal

[PATCH 4.19 040/133] of: of_mdio: Correct loop scanning logic

2020-07-20 Thread Greg Kroah-Hartman
From: Florian Fainelli [ Upstream commit 5a8d7f126c97d04d893f5e5be2b286437a0d01b0 ] Commit 209c65b61d94 ("drivers/of/of_mdio.c:fix of_mdiobus_register()") introduced a break of the loop on the premise that a successful registration should exit the loop. The premise is correct but not to code,

[PATCH 4.19 077/133] mtd: rawnand: brcmnand: fix CS0 layout

2020-07-20 Thread Greg Kroah-Hartman
From: Álvaro Fernández Rojas commit 3d3fb3c5be9ce07fa85d8f67fb3922e4613b955b upstream. Only v3.3-v5.0 have a different CS0 layout. Controllers before v3.3 use the same layout for every CS. Fixes: 27c5b17cd1b1 ("mtd: nand: add NAND driver "library" for Broadcom STB NAND controller")

[PATCH 4.19 038/133] spi: spi-fsl-dspi: Fix lockup if device is shutdown during SPI transfer

2020-07-20 Thread Greg Kroah-Hartman
From: Krzysztof Kozlowski [ Upstream commit 3c525b69e8c1a9a6944e976603c7a1a713e728f9 ] During shutdown, the driver should unregister the SPI controller and stop the hardware. Otherwise the dspi_transfer_one_message() could wait on completion infinitely. Additionally, calling

[PATCH 4.19 064/133] Revert "thermal: mediatek: fix register index error"

2020-07-20 Thread Greg Kroah-Hartman
From: Enric Balletbo i Serra [ Upstream commit a8f62f183021be389561570ab5f8c701a5e70298 ] This reverts commit eb9aecd90d1a39601e91cd08b90d5fee51d321a6 The above patch is supposed to fix a register index error on mt2701. It is not clear if the problem solved is a hang or just an invalid value

[PATCH 4.19 085/133] ALSA: line6: Perform sanity check for each URB creation

2020-07-20 Thread Greg Kroah-Hartman
From: Takashi Iwai commit 6e8a914ad619042c5f25a4feb663357c4170fd8d upstream. LINE6 drivers create stream URBs with a fixed pipe without checking its validity, and this may lead to a kernel WARNING at the submission when a malformed USB descriptor is passed. For avoiding the kernel warning,

[PATCH 4.19 075/133] mtd: rawnand: marvell: Fix probe error path

2020-07-20 Thread Greg Kroah-Hartman
From: Miquel Raynal commit c525b7af96714f72e316c70781570a4a3e1c2856 upstream. Ensure all chips are deregistered and cleaned in case of error during the probe. Fixes: 02f26ecf8c77 ("mtd: nand: add reworked Marvell NAND controller driver") Signed-off-by: Miquel Raynal Reviewed-by: Boris

Re: io_uring vs in_compat_syscall()

2020-07-20 Thread Jens Axboe
On 7/20/20 12:10 AM, Christoph Hellwig wrote: > Hi Jens, > > I just found a (so far theoretical) issue with the io_uring submission > offloading to workqueues or threads. We have lots of places using > in_compat_syscall() to check if a syscall needs compat treatmenet. > While the biggest users

[PATCH 4.19 079/133] mtd: rawnand: oxnas: Unregister all devices on error

2020-07-20 Thread Greg Kroah-Hartman
From: Miquel Raynal commit b60391eb17b2956ff2fc4c348e5a464da21ff9cb upstream. On error, the oxnas probe path just frees the device which failed and aborts the probe, leaving unreleased resources. Fix this situation by calling mtd_device_unregister()/nand_cleanup() on these. Fixes:

[PATCH 4.19 092/133] usb: chipidea: core: add wakeup support for extcon

2020-07-20 Thread Greg Kroah-Hartman
From: Peter Chen commit 876d4e1e8298ad1f94d9e9392fc90486755437b4 upstream. If wakeup event occurred by extcon event, it needs to call ci_irq again since the first ci_irq calling at extcon notifier only wakes up controller, but do noop for event handling, it causes the extcon use case can't work

[PATCH 4.19 108/133] mei: bus: dont clean driver pointer

2020-07-20 Thread Greg Kroah-Hartman
From: Alexander Usyskin commit e852c2c251ed9c23ae6e3efebc5ec49adb504207 upstream. It's not needed to set driver to NULL in mei_cl_device_remove() which is bus_type remove() handler as this is done anyway in __device_release_driver(). Actually this is causing an endless loop in driver_detach()

[PATCH 4.19 112/133] timer: Fix wheel index calculation on last level

2020-07-20 Thread Greg Kroah-Hartman
From: Frederic Weisbecker commit e2a71bdea81690b6ef11f4368261ec6f5b6891aa upstream. When an expiration delta falls into the last level of the wheel, that delta has be compared against the maximum possible delay and reduced to fit in if necessary. However instead of comparing the delta against

[PATCH 4.19 116/133] powerpc/book3s64/pkeys: Fix pkey_access_permitted() for execute disable pkey

2020-07-20 Thread Greg Kroah-Hartman
From: Aneesh Kumar K.V commit 192b6a780598976feb7321ff007754f8511a4129 upstream. Even if the IAMR value denies execute access, the current code returns true from pkey_access_permitted() for an execute permission check, if the AMR read pkey bit is cleared. This results in repeated page fault

[PATCH 4.19 120/133] intel_th: Fix a NULL dereference when hub driver is not loaded

2020-07-20 Thread Greg Kroah-Hartman
From: Alexander Shishkin commit e78e1fdb282726beaf88aa75943682217e6ded0e upstream. Connecting master to an output port when GTH driver module is not loaded triggers a NULL dereference: > RIP: 0010:intel_th_set_output+0x35/0x70 [intel_th] > Call Trace: > ? sth_stm_link+0x12/0x20 [intel_th_sth]

[PATCH 4.19 067/133] copy_xstate_to_kernel: Fix typo which caused GDB regression

2020-07-20 Thread Greg Kroah-Hartman
From: Kevin Buettner commit 5714ee50bb4375bd586858ad800b1d9772847452 upstream. This fixes a regression encountered while running the gdb.base/corefile.exp test in GDB's test suite. In my testing, the typo prevented the sw_reserved field of struct fxregs_state from being output to the kernel

[PATCH 4.19 096/133] USB: serial: ch341: add new Product ID for CH340

2020-07-20 Thread Greg Kroah-Hartman
From: Igor Moura commit 5d0136f8e79f8287e6a36780601f0ce797cf11c2 upstream. Add PID for CH340 that's found on some ESP8266 dev boards made by LilyGO. The specific device that contains such serial converter can be seen here: https://github.com/LilyGO/LILYGO-T-OI. Apparently, it's a regular

[PATCH 4.19 124/133] arm64: ptrace: Override SPSR.SS when single-stepping is enabled

2020-07-20 Thread Greg Kroah-Hartman
From: Will Deacon commit 3a5a4366cecc25daa300b9a9174f7fdd352b9068 upstream. Luis reports that, when reverse debugging with GDB, single-step does not function as expected on arm64: | I've noticed, under very specific conditions, that a PTRACE_SINGLESTEP | request by GDB won't execute the

Re: [PATCH] mt7601u: add missing release on skb in mt7601u_mcu_msg_send

2020-07-20 Thread Jakub Kicinski
On Sat, 18 Jul 2020 00:26:29 -0500 Navid Emamdoost wrote: > In the implementation of mt7601u_mcu_msg_send(), skb is supposed to be > consumed on all execution paths. Release skb before returning if > test_bit() fails. > > Signed-off-by: Navid Emamdoost Acked-by: Jakub Kicinski

[PATCH 4.19 123/133] thermal/drivers/cpufreq_cooling: Fix wrong frequency converted from power

2020-07-20 Thread Greg Kroah-Hartman
From: Finley Xiao commit 371a3bc79c11b707d7a1b7a2c938dc3cc042fffb upstream. The function cpu_power_to_freq is used to find a frequency and set the cooling device to consume at most the power to be converted. For example, if the power to be converted is 80mW, and the em table is as follow.

Re: kworker/0:3+pm hogging CPU

2020-07-20 Thread Michal Hocko
On Mon 20-07-20 11:12:55, Alan Stern wrote: [...] > sudo echo 'module usbcore =p' >/debug/dynamic_debug/control > > Then wait long enough for some interesting messages to appear in the > kernel log (it should only take a few seconds if the worker thread is as > busy as you say) and

Re: [PATCH v3 02/19] compiler.h: Split {READ,WRITE}_ONCE definitions out into rwonce.h

2020-07-20 Thread Will Deacon
On Mon, Jul 13, 2020 at 08:23:22PM +0800, boqun.f...@gmail.com wrote: > On Fri, Jul 10, 2020 at 05:51:46PM +0100, Will Deacon wrote: > > diff --git a/include/asm-generic/rwonce.h b/include/asm-generic/rwonce.h > > new file mode 100644 > > index ..92cc2f223cb3 > > --- /dev/null > > +++

[PATCH 4.19 101/133] virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial

2020-07-20 Thread Greg Kroah-Hartman
From: Alexander Lobakin commit 897c44f0bae574c5fb318c759b060bebf9dd6013 upstream. rproc_serial_id_table lacks an exposure to module devicetable, so when remoteproc firmware requests VIRTIO_ID_RPROC_SERIAL, no uevent is generated and no module autoloading occurs. Add missing

[PATCH 4.19 128/133] sched/fair: handle case of task_h_load() returning 0

2020-07-20 Thread Greg Kroah-Hartman
From: Vincent Guittot commit 01cfcde9c26d8555f0e6e9aea9d6049f87683998 upstream. task_h_load() can return 0 in some situations like running stress-ng mmapfork, which forks thousands of threads, in a sched group on a 224 cores system. The load balance doesn't handle this correctly because

[PATCH 4.19 102/133] serial: mxs-auart: add missed iounmap() in probe failure and remove

2020-07-20 Thread Greg Kroah-Hartman
From: Chuhong Yuan commit d8edf8eb5f6e921fe6389f96d2cd05862730a6ff upstream. This driver calls ioremap() in probe, but it misses calling iounmap() in probe's error handler and remove. Add the missed calls to fix it. Fixes: 47d37d6f94cc ("serial: Add auart driver for i.MX23/28") Signed-off-by:

Re: [PATCH v9 1/2] dt-bindings: timer: Add Ingenic X1000 OST bindings.

2020-07-20 Thread Rob Herring
On Mon, 20 Jul 2020 23:11:05 +0800, 周琰杰 (Zhou Yanjie) wrote: > Add the OST bindings for the X1 SoC from Ingenic. > > Tested-by: 周正 (Zhou Zheng) > Signed-off-by: 周琰杰 (Zhou Yanjie) > Reviewed-by: Paul Cercueil > Reviewed-by: Rob Herring > --- > > Notes: > v1->v2: > No change. > >

[PATCH 4.19 097/133] USB: serial: option: add GosunCn GM500 series

2020-07-20 Thread Greg Kroah-Hartman
From: Jörgen Storvist commit 08d4ef5cc9203a113702f24725f6cf4db476c958 upstream. Add USB IDs for GosunCn GM500 series cellular modules. RNDIS config: usb-devices T: Bus=01 Lev=01 Prnt=01 Port=00 Cnt=01 Dev#= 12 Spd=480 MxCh= 0 D: Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs= 1 P:

[PATCH 4.19 132/133] rxrpc: Fix trace string

2020-07-20 Thread Greg Kroah-Hartman
From: David Howells commit aadf9dcef9d4cd68c73a4ab934f93319c4becc47 upstream. The trace symbol printer (__print_symbolic()) ignores symbols that map to an empty string and prints the hex value instead. Fix the symbol for rxrpc_cong_no_change to " -" instead of "" to avoid this. Fixes:

[PATCH 4.19 133/133] spi: sprd: switch the sequence of setting WDG_LOAD_LOW and _HIGH

2020-07-20 Thread Greg Kroah-Hartman
From: Lingling Xu commit 8bdd79dae1ff5397351b95e249abcae126572617 upstream. The watchdog counter consists of WDG_LOAD_LOW and WDG_LOAD_HIGH, which would be loaded to watchdog counter once writing WDG_LOAD_LOW. Fixes: ac1775012058 ("spi: sprd: Add the support of restarting the system")

[PATCH 4.19 127/133] sched: Fix unreliable rseq cpu_id for new tasks

2020-07-20 Thread Greg Kroah-Hartman
From: Mathieu Desnoyers commit ce3614daabea8a2d01c1dd17ae41d1ec5e5ae7db upstream. While integrating rseq into glibc and replacing glibc's sched_getcpu implementation with rseq, glibc's tests discovered an issue with incorrect __rseq_abi.cpu_id field value right after the first time a newly

[PATCH v4 01/24] Documentation: locking: Describe seqlock design and usage

2020-07-20 Thread Ahmed S. Darwish
Proper documentation for the design and usage of sequence counters and sequential locks does not exist. Complete the seqlock.h documentation as follows: - Divide all documentation on a seqcount_t vs. seqlock_t basis. The description for both mechanisms was intermingled, which is incorrect

[PATCH 4.19 105/133] ovl: fix unneeded call to ovl_change_flags()

2020-07-20 Thread Greg Kroah-Hartman
From: Amir Goldstein commit 81a33c1ee941c3bb9ffc6bac8f676be13351344e upstream. The check if user has changed the overlay file was wrong, causing unneeded call to ovl_change_flags() including taking f_lock on every file access. Fixes: d989903058a8 ("ovl: do not generate duplicate fsnotify

Re: [PATCH] bfq: fix blkio cgroup leakage

2020-07-20 Thread Jens Axboe
On 7/20/20 6:19 AM, Dmitry Monakhov wrote: > Ok you right, we should drop the group reference inside > __bfq_bfqd_reset_in_service() as we do for queue's entities. Please > see updated patch version. Can you please send that out as a proper v2? -- Jens Axboe

[PATCH 5.4 013/215] net: dsa: microchip: set the correct number of ports

2020-07-20 Thread Greg Kroah-Hartman
From: Codrin Ciubotariu [ Upstream commit af199a1a9cb02ec0194804bd46c174b6db262075 ] The number of ports is incorrectly set to the maximum available for a DSA switch. Even if the extra ports are not used, this causes some functions to be called later, like port_disable() and

[PATCH 5.4 021/215] vlan: consolidate VLAN parsing code and limit max parsing depth

2020-07-20 Thread Greg Kroah-Hartman
From: "Toke H�iland-J�rgensen" [ Upstream commit 469aceddfa3ed16e17ee30533fae45e90f62efd8 ] Toshiaki pointed out that we now have two very similar functions to extract the L3 protocol number in the presence of VLAN tags. And Daniel pointed out that the unbounded parsing loop makes it possible

[PATCH 5.4 014/215] net_sched: fix a memory leak in atm_tc_init()

2020-07-20 Thread Greg Kroah-Hartman
From: Cong Wang [ Upstream commit 306381aec7c2b5a658eebca008c8a1b666536cba ] When tcf_block_get() fails inside atm_tc_init(), atm_tc_put() is called to release the qdisc p->link.q. But the flow->ref prevents it to do so, as the flow->ref is still zero. Fix this by moving the p->link.ref

Re: [PATCH v8 1/2] dt-bindings: input: Add docs for ADC driven joystick.

2020-07-20 Thread Rob Herring
On Mon, 20 Jul 2020 00:11:02 +0200, Artur Rojek wrote: > Add documentation for the adc-joystick driver, used to provide support > for joysticks connected over ADC. > > Signed-off-by: Artur Rojek > Tested-by: Paul Cercueil > Reviewed-by: Rob Herring > --- > > Changes: > > v2: - Add `reg`

[PATCH 5.4 023/215] tcp: md5: allow changing MD5 keys in all socket states

2020-07-20 Thread Greg Kroah-Hartman
From: Eric Dumazet [ Upstream commit 1ca0fafd73c5268e8fc4b997094b8bb2bfe8deea ] This essentially reverts commit 721230326891 ("tcp: md5: reject TCP_MD5SIG or TCP_MD5SIG_EXT on established sockets") Mathieu reported that many vendors BGP implementations can actually switch TCP MD5 on

[PATCH 5.4 019/215] tcp: md5: add missing memory barriers in tcp_md5_do_add()/tcp_md5_hash_key()

2020-07-20 Thread Greg Kroah-Hartman
From: Eric Dumazet [ Upstream commit 6a2febec338df7e7699a52d00b2e1207dcf65b28 ] MD5 keys are read with RCU protection, and tcp_md5_do_add() might update in-place a prior key. Normally, typical RCU updates would allocate a new piece of memory. In this case only key->key and key->keylen might be

[PATCH 4.19 130/133] printk: queue wake_up_klogd irq_work only if per-CPU areas are ready

2020-07-20 Thread Greg Kroah-Hartman
From: Sergey Senozhatsky commit ab6f762f0f53162d41497708b33c9a3236d3609e upstream. printk_deferred(), similarly to printk_safe/printk_nmi, does not immediately attempt to print a new message on the consoles, avoiding calls into non-reentrant kernel paths, e.g. scheduler or timekeeping, which

<    4   5   6   7   8   9   10   11   12   13   >