[PATCH AUTOSEL 5.11 51/67] Drivers: hv: vmbus: Resolve race condition in vmbus_onoffer_rescind()

2021-02-24 Thread Sasha Levin
From: "Andrea Parri (Microsoft)" [ Upstream commit e4d221b42354b2e2ddb9187a806afb651eee2cda ] An erroneous or malicious host could send multiple rescind messages for a same channel. In vmbus_onoffer_rescind(), the guest maps the channel ID to obtain a pointer to the channel object and it

[PATCH AUTOSEL 5.11 54/67] btrfs: make btrfs_start_delalloc_root's nr argument a long

2021-02-24 Thread Sasha Levin
From: Nikolay Borisov [ Upstream commit 9db4dc241e87fccd8301357d5ef908f40b50f2e3 ] It's currently u64 which gets instantly translated either to LONG_MAX (if U64_MAX is passed) or cast to an unsigned long (which is in fact, wrong because writeback_control::nr_to_write is a signed, long type).

[PATCH AUTOSEL 5.10 14/56] Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data

2021-02-24 Thread Sasha Levin
From: Gopal Tiwari [ Upstream commit e8bd76ede155fd54d8c41d045dda43cd3174d506 ] kernel panic trace looks like: #5 [b9e08698fc80] do_page_fault at b666e0d7 #6 [b9e08698fcb0] page_fault at b70010fe [exception RIP: amp_read_loc_assoc_final_data+63] RIP:

[PATCH AUTOSEL 5.10 03/56] x86/reboot: Add Zotac ZBOX CI327 nano PCI reboot quirk

2021-02-24 Thread Sasha Levin
From: Heiner Kallweit [ Upstream commit 4b2d8ca9208be636b30e924b1cbcb267b0740c93 ] On this system the M.2 PCIe WiFi card isn't detected after reboot, only after cold boot. reboot=pci fixes this behavior. In [0] the same issue is described, although on another system and with another Intel WiFi

[PATCH AUTOSEL 5.10 13/56] Bluetooth: Add new HCI_QUIRK_NO_SUSPEND_NOTIFIER quirk

2021-02-24 Thread Sasha Levin
From: Hans de Goede [ Upstream commit 219991e6be7f4a31d471611e265b72f75b2d0538 ] Some devices, e.g. the RTL8723BS bluetooth part, some USB attached devices, completely drop from the bus on a system-suspend. These devices will have their driver unbound and rebound on resume (when the dropping of

[PATCH AUTOSEL 5.10 16/56] staging: bcm2835-audio: Replace unsafe strcpy() with strscpy()

2021-02-24 Thread Sasha Levin
From: Juerg Haefliger [ Upstream commit 4964a4300660d27907ceb655f219ac47e5941534 ] Replace strcpy() with strscpy() in bcm2835-audio/bcm2835.c to prevent the following when loading snd-bcm2835: [ 58.480634] [ cut here ] [ 58.485321] kernel BUG at lib/string.c:1149! [

[PATCH AUTOSEL 5.10 12/56] net: sfp: add mode quirk for GPON module Ubiquiti U-Fiber Instant

2021-02-24 Thread Sasha Levin
From: Pali Rohár [ Upstream commit f0b4f847673299577c29b71d3f3acd3c313d81b7 ] The Ubiquiti U-Fiber Instant SFP GPON module has nonsensical information stored in its EEPROM. It claims to support all transceiver types including 10G Ethernet. Clear all claimed modes and set only 1000baseX_Full,

[PATCH AUTOSEL 5.10 20/56] udlfb: Fix memory leak in dlfb_usb_probe

2021-02-24 Thread Sasha Levin
From: Zqiang [ Upstream commit 5c0e4110f751934e748a66887c61f8e73805f0f9 ] The dlfb_alloc_urb_list function is called in dlfb_usb_probe function, after that if an error occurs, the dlfb_free_urb_list function need to be called. BUG: memory leak unreferenced object 0x88810adde100 (size 32):

[PATCH AUTOSEL 5.10 15/56] staging: most: sound: add sanity check for function argument

2021-02-24 Thread Sasha Levin
From: Christian Gromm [ Upstream commit 45b754ae5b82949dca2b6e74fa680313cefdc813 ] This patch checks the function parameter 'bytes' before doing the subtraction to prevent memory corruption. Signed-off-by: Christian Gromm Reported-by: Dan Carpenter Link:

Re: RFC: oftree based setup of composite board devices

2021-02-24 Thread Enrico Weigelt, metux IT consult
On 15.02.21 02:12, Frank Rowand wrote: Why not compile in ACPI data (tables?) instead of devicetree description? The problem is a bit more complex than it might seem. Let's take the APU2/37/4 boards as an example. They've got some aux devices, eg. some gpio controller, and some things (leds,

[PATCH] Documentation: cgroup-v2: fix path to example BPF program

2021-02-24 Thread Antonio Terceiro
This file has been moved into the "progs" subdirectory in bd4aed0ee73ca873bef3cb3ec746dd796f03df28, together with all test BPF programs. Signed-off-by: Antonio Terceiro Cc: Tejun Heo Cc: Zefan Li Cc: Johannes Weiner Cc: Jonathan Corbet Cc: Jiong Wang ---

Re: [PATCH AUTOSEL 4.14 15/16] Drivers: hv: vmbus: Resolve race condition in vmbus_onoffer_rescind()

2021-02-24 Thread Andrea Parri
On Wed, Feb 24, 2021 at 07:55:12AM -0500, Sasha Levin wrote: > From: "Andrea Parri (Microsoft)" > > [ Upstream commit e4d221b42354b2e2ddb9187a806afb651eee2cda ] > > An erroneous or malicious host could send multiple rescind messages for > a same channel. In vmbus_onoffer_rescind(), the guest

Re: [PATCH v5 0/4] USB: misc: Add onboard_usb_hub driver

2021-02-24 Thread Michal Simek
Hi Matthias, On 2/10/21 6:10 PM, Matthias Kaehlcke wrote: > This series adds the onboard_usb_hub_driver, the corresponding > device tree bindings and creation of onboard_usb_hub platform in > the xhci-plat driver during probe(). > > The main issue the driver addresses is that a USB hub needs to

Re: [PATCH AUTOSEL 4.19 21/26] Drivers: hv: vmbus: Resolve race condition in vmbus_onoffer_rescind()

2021-02-24 Thread Andrea Parri
On Wed, Feb 24, 2021 at 07:54:29AM -0500, Sasha Levin wrote: > From: "Andrea Parri (Microsoft)" > > [ Upstream commit e4d221b42354b2e2ddb9187a806afb651eee2cda ] > > An erroneous or malicious host could send multiple rescind messages for > a same channel. In vmbus_onoffer_rescind(), the guest

Re: [PATCH AUTOSEL 5.10 41/56] Drivers: hv: vmbus: Resolve race condition in vmbus_onoffer_rescind()

2021-02-24 Thread Andrea Parri
On Wed, Feb 24, 2021 at 07:51:57AM -0500, Sasha Levin wrote: > From: "Andrea Parri (Microsoft)" > > [ Upstream commit e4d221b42354b2e2ddb9187a806afb651eee2cda ] > > An erroneous or malicious host could send multiple rescind messages for > a same channel. In vmbus_onoffer_rescind(), the guest

Re: [PATCH AUTOSEL 5.4 30/40] Drivers: hv: vmbus: Resolve race condition in vmbus_onoffer_rescind()

2021-02-24 Thread Andrea Parri
On Wed, Feb 24, 2021 at 07:53:30AM -0500, Sasha Levin wrote: > From: "Andrea Parri (Microsoft)" > > [ Upstream commit e4d221b42354b2e2ddb9187a806afb651eee2cda ] > > An erroneous or malicious host could send multiple rescind messages for > a same channel. In vmbus_onoffer_rescind(), the guest

Re: [PATCH AUTOSEL 5.10 40/56] Drivers: hv: vmbus: Initialize memory to be sent to the host

2021-02-24 Thread Andrea Parri
On Wed, Feb 24, 2021 at 07:51:56AM -0500, Sasha Levin wrote: > From: "Andrea Parri (Microsoft)" > > [ Upstream commit e99c4afbee07e9323e9191a20b24d74dbf815bdf ] > > __vmbus_open() and vmbus_teardown_gpadl() do not inizialite the memory > for the vmbus_channel_open_channel and the

Re: [RFC PATCH 0/3] Introduce a bulk order-0 page allocator for sunrpc

2021-02-24 Thread Chuck Lever
> On Feb 24, 2021, at 5:26 AM, Mel Gorman wrote: > > This is a prototype series that introduces a bulk order-0 page allocator > with sunrpc being the first user. The implementation is not particularly > efficient and the intention is to iron out what the semantics of the API > should be. That

[PATCH AUTOSEL 4.9 05/12] pktgen: fix misuse of BUG_ON() in pktgen_thread_worker()

2021-02-24 Thread Sasha Levin
From: Di Zhu [ Upstream commit 275b1e88cabb34dbcbe99756b67e9939d34a99b6 ] pktgen create threads for all online cpus and bond these threads to relevant cpu repecivtily. when this thread firstly be woken up, it will compare cpu currently running with the cpu specified at the time of creation and

[PATCH] perf: fix ccache usage in $(CC) when generating arch errno table

2021-02-24 Thread Antonio Terceiro
This was introduced by commit e4ffd066ff440a57097e9140fa9e16ceef905de8. Assuming the first word of $(CC) is the actual compiler breaks usage like CC="ccache gcc": the script ends up calling ccache directly with gcc arguments, what fails. Instead of getting the first word, just remove from $(CC)

[PATCH AUTOSEL 4.9 09/12] staging: most: sound: add sanity check for function argument

2021-02-24 Thread Sasha Levin
From: Christian Gromm [ Upstream commit 45b754ae5b82949dca2b6e74fa680313cefdc813 ] This patch checks the function parameter 'bytes' before doing the subtraction to prevent memory corruption. Signed-off-by: Christian Gromm Reported-by: Dan Carpenter Link:

[PATCH] Documentation: kselftest: fix path to test module files

2021-02-24 Thread Antonio Terceiro
The top-level kselftest directory is not called kselftest, but selftests. Signed-off-by: Antonio Terceiro Cc: Shuah Khan Cc: Jonathan Corbet --- Documentation/dev-tools/kselftest.rst | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Documentation/dev-tools/kselftest.rst

Re: [PATCH v14 01/11] x86: kdump: replace the hard-coded alignment with macro CRASH_ALIGN

2021-02-24 Thread Catalin Marinas
On Sat, Jan 30, 2021 at 03:10:15PM +0800, Chen Zhou wrote: > Move CRASH_ALIGN to header asm/kexec.h for later use. Besides, the > alignment of crash kernel regions in x86 is 16M(CRASH_ALIGN), but > function reserve_crashkernel() also used 1M alignment. So just > replace hard-coded alignment 1M

Re: [PATCH v5 1/2] scsi: ufs: Enable power management for wlun

2021-02-24 Thread Adrian Hunter
On 24/02/21 7:13 am, Asutosh Das wrote: > During runtime-suspend of ufs host, the scsi devices are > already suspended and so are the queues associated with them. > But the ufs host sends SSU to wlun during its runtime-suspend. > During the process blk_queue_enter checks if the queue is not in >

[PATCH/RFC 1/2] init/initramfs.c: allow asynchronous unpacking

2021-02-24 Thread Rasmus Villemoes
This is primarily motivated by an embedded ppc target, where unpacking even the rather modest sized initramfs takes 0.6 seconds, which is long enough that the external watchdog becomes unhappy that it doesn't get enough attention soon enough. But normal desktops might benefit as well. On my

[PATCH v2 9/9] phy/drivers/stm32: Use HZ macros

2021-02-24 Thread Daniel Lezcano
HZ unit conversion macros are available in units.h, use them and remove the duplicate definition. Signed-off-by: Daniel Lezcano --- drivers/phy/st/phy-stm32-usbphyc.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/phy/st/phy-stm32-usbphyc.c

Re: [PATCH v2 02/24] fs/locks: print full locks information

2021-02-24 Thread J. Bruce Fields
On Wed, Feb 24, 2021 at 03:35:44AM -0500, Luo Longjun wrote: > @@ -2912,17 +2922,66 @@ static int locks_show(struct seq_file *f, void *v) > struct file_lock *fl, *bfl; > struct pid_namespace *proc_pidns = > proc_pid_ns(file_inode(f->file)->i_sb); > > + struct list_head root; > +

Announce loop-AES-v3.7t file/swap crypto package

2021-02-24 Thread Jari Ruusu
loop-AES changes since previous release: - Worked around kernel interface changes on 5.11 kernels bzip2 compressed tarball is here: http://loop-aes.sourceforge.net/loop-AES/loop-AES-v3.7t.tar.bz2 md5sum 974a0705207d97772b8c1388c43aee58

Re: watchdog: pcf2127: systemd fails on 5.11

2021-02-24 Thread Alexandre Belloni
Hi, On 24/02/2021 15:55:00+0100, Bruno Thomsen wrote: > You could be right about that, I don't think the watchdog feature should > be available for use if the alarm feature is enabled due to how CTRL2 > register behaves. > > The hardware I am testing on is a custom board, but it's actually >

Re: [GIT PULL] Modules updates for v5.12

2021-02-24 Thread Masahiro Yamada
On Wed, Feb 24, 2021 at 11:46 PM Masahiro Yamada wrote: > > On Wed, Feb 24, 2021 at 11:13 PM Jessica Yu wrote: > > > > +++ Christoph Hellwig [24/02/21 08:52 +0100]: > > >On Tue, Feb 23, 2021 at 12:07:39PM -0800, Linus Torvalds wrote: > > >> On Tue, Feb 23, 2021 at 12:03 PM Linus Torvalds > > >>

[PATCH AUTOSEL 5.11 30/67] sched/core: Allow try_invoke_on_locked_down_task() with irqs disabled

2021-02-24 Thread Sasha Levin
From: Peter Zijlstra [ Upstream commit 1b7af295541d75535374325fd617944534853919 ] The try_invoke_on_locked_down_task() function currently requires that interrupts be enabled, but it is called with interrupts disabled from rcu_print_task_stall(), resulting in an "IRQs not enabled as expected"

[PATCH AUTOSEL 5.11 66/67] ASoC: Intel: bytcr_rt5651: Add quirk for the Jumper EZpad 7 tablet

2021-02-24 Thread Sasha Levin
From: Hans de Goede [ Upstream commit df8359c512fa770ffa6b0b0309807d9b9825a47f ] Add a DMI quirk for the Jumper EZpad 7 tablet, this tablet has a jack-detect switch which reads 1/high when a jack is inserted, rather then using the standard active-low setup which most jack-detect switches use.

[PATCH AUTOSEL 5.10 07/56] Bluetooth: btusb: fix memory leak on suspend and resume

2021-02-24 Thread Sasha Levin
From: Vamshi K Sthambamkadi [ Upstream commit 5ff20cbe6752a5bc06ff58fee8aa11a0d5075819 ] kmemleak report: unreferenced object 0x9b1127f00500 (size 208): comm "kworker/u17:2", pid 500, jiffies 4294937470 (age 580.136s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00

[PATCH AUTOSEL 5.4 02/40] x86/reboot: Add Zotac ZBOX CI327 nano PCI reboot quirk

2021-02-24 Thread Sasha Levin
From: Heiner Kallweit [ Upstream commit 4b2d8ca9208be636b30e924b1cbcb267b0740c93 ] On this system the M.2 PCIe WiFi card isn't detected after reboot, only after cold boot. reboot=pci fixes this behavior. In [0] the same issue is described, although on another system and with another Intel WiFi

[PATCH AUTOSEL 5.4 06/40] pktgen: fix misuse of BUG_ON() in pktgen_thread_worker()

2021-02-24 Thread Sasha Levin
From: Di Zhu [ Upstream commit 275b1e88cabb34dbcbe99756b67e9939d34a99b6 ] pktgen create threads for all online cpus and bond these threads to relevant cpu repecivtily. when this thread firstly be woken up, it will compare cpu currently running with the cpu specified at the time of creation and

[PATCH AUTOSEL 5.4 05/40] Bluetooth: hci_h5: Set HCI_QUIRK_SIMULTANEOUS_DISCOVERY for btrtl

2021-02-24 Thread Sasha Levin
From: Claire Chang [ Upstream commit 7f9f2c3f7d99b8ae773459c74ac5e99a0dd46db9 ] Realtek Bluetooth controllers can do both LE scan and BR/EDR inquiry at once, need to set HCI_QUIRK_SIMULTANEOUS_DISCOVERY quirk. Signed-off-by: Claire Chang Signed-off-by: Marcel Holtmann Signed-off-by: Sasha

[PATCH AUTOSEL 5.4 04/40] wlcore: Fix command execute failure 19 for wl12xx

2021-02-24 Thread Sasha Levin
From: Tony Lindgren [ Upstream commit cb88d01b67383a095e3f7caeb4cdade5a6cf0417 ] We can currently get a "command execute failure 19" error on beacon loss if the signal is weak: wlcore: Beacon loss detected. roles:0xff wlcore: Connection loss work (role_id: 0). ... wlcore: ERROR command execute

[PATCH AUTOSEL 5.4 09/40] Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data

2021-02-24 Thread Sasha Levin
From: Gopal Tiwari [ Upstream commit e8bd76ede155fd54d8c41d045dda43cd3174d506 ] kernel panic trace looks like: #5 [b9e08698fc80] do_page_fault at b666e0d7 #6 [b9e08698fcb0] page_fault at b70010fe [exception RIP: amp_read_loc_assoc_final_data+63] RIP:

[PATCH AUTOSEL 5.4 08/40] x86/build: Treat R_386_PLT32 relocation as R_386_PC32

2021-02-24 Thread Sasha Levin
From: Fangrui Song [ Upstream commit bb73d07148c405c293e576b40af37737faf23a6a ] This is similar to commit b21ebf2fb4cd ("x86: Treat R_X86_64_PLT32 as R_X86_64_PC32") but for i386. As far as the kernel is concerned, R_386_PLT32 can be treated the same as R_386_PC32.

[PATCH AUTOSEL 5.4 13/40] brcmfmac: Add DMI nvram filename quirk for Voyo winpad A15 tablet

2021-02-24 Thread Sasha Levin
From: Hans de Goede [ Upstream commit a338c874d3d9d2463f031e89ae14942929b93db6 ] The Voyo winpad A15 tablet contains quite generic names in the sys_vendor and product_name DMI strings, without this patch brcmfmac will try to load: rcmfmac4330-sdio.To be filled by O.E.M.-To be filled by

[PATCH AUTOSEL 5.4 12/40] brcmfmac: Add DMI nvram filename quirk for Predia Basic tablet

2021-02-24 Thread Sasha Levin
From: Hans de Goede [ Upstream commit af4b3a6f36d6c2fc5fca026bccf45e0fdcabddd9 ] The Predia Basic tablet contains quite generic names in the sys_vendor and product_name DMI strings, without this patch brcmfmac will try to load: brcmfmac43340-sdio.Insyde-CherryTrail.txt as nvram file which is a

[PATCH AUTOSEL 5.4 11/40] staging: bcm2835-audio: Replace unsafe strcpy() with strscpy()

2021-02-24 Thread Sasha Levin
From: Juerg Haefliger [ Upstream commit 4964a4300660d27907ceb655f219ac47e5941534 ] Replace strcpy() with strscpy() in bcm2835-audio/bcm2835.c to prevent the following when loading snd-bcm2835: [ 58.480634] [ cut here ] [ 58.485321] kernel BUG at lib/string.c:1149! [

[PATCH AUTOSEL 5.4 07/40] ath10k: fix wmi mgmt tx queue full due to race condition

2021-02-24 Thread Sasha Levin
From: Miaoqing Pan [ Upstream commit b55379e343a3472c35f4a1245906db5158cab453 ] Failed to transmit wmi management frames: [84977.840894] ath10k_snoc a00.wifi: wmi mgmt tx queue is full [84977.840913] ath10k_snoc a00.wifi: failed to transmit packet, dropping: -28 [84977.840924]

[PATCH AUTOSEL 5.10 56/56] ASoC: Intel: bytcr_rt5640: Add quirk for the Acer One S1002 tablet

2021-02-24 Thread Sasha Levin
From: Hans de Goede [ Upstream commit c58947af08aedbdee0fce5ea6e6bf3e488ae0e2c ] The Acer One S1002 tablet is using an analog mic on IN1 and has its jack-detect connected to JD2_IN4N, instead of using the default IN3 for its internal mic and JD1_IN4P for jack-detect. Note it is also using AIF2

[PATCH AUTOSEL 5.4 01/40] staging: fwserial: Fix error handling in fwserial_create

2021-02-24 Thread Sasha Levin
From: Dinghao Liu [ Upstream commit f31559af97a0eabd467e4719253675b7dccb8a46 ] When fw_core_add_address_handler() fails, we need to destroy the port by tty_port_destroy(). Also we need to unregister the address handler by fw_core_remove_address_handler() on failure. Signed-off-by: Dinghao Liu

[PATCH AUTOSEL 5.4 14/40] drm/hisilicon: Fix use-after-free

2021-02-24 Thread Sasha Levin
From: Tian Tao [ Upstream commit c855af2f9c5c60760fd1bed7889a81bc37d2591d ] Fix the problem of dev being released twice. [ cut here ] refcount_t: underflow; use-after-free. WARNING: CPU: 75 PID: 15700 at lib/refcount.c:28 refcount_warn_saturate+0xd4/0x150 CPU: 75 PID:

[PATCH AUTOSEL 5.4 19/40] drm/amd/display: Guard against NULL pointer deref when get_i2c_info fails

2021-02-24 Thread Sasha Levin
From: Nicholas Kazlauskas [ Upstream commit 44a09e3d95bd2b7b0c224100f78f335859c4e193 ] [Why] If the BIOS table is invalid or corrupt then get_i2c_info can fail and we dereference a NULL pointer. [How] Check that ddc_pin is not NULL before using it and log an error if it is because this is

[PATCH AUTOSEL 5.4 10/40] staging: most: sound: add sanity check for function argument

2021-02-24 Thread Sasha Levin
From: Christian Gromm [ Upstream commit 45b754ae5b82949dca2b6e74fa680313cefdc813 ] This patch checks the function parameter 'bytes' before doing the subtraction to prevent memory corruption. Signed-off-by: Christian Gromm Reported-by: Dan Carpenter Link:

[PATCH AUTOSEL 5.4 16/40] crypto: tcrypt - avoid signed overflow in byte count

2021-02-24 Thread Sasha Levin
From: Ard Biesheuvel [ Upstream commit 303fd3e1c771077e32e96e5788817f025f0067e2 ] The signed long type used for printing the number of bytes processed in tcrypt benchmarks limits the range to -/+ 2 GiB, which is not sufficient to cover the performance of common accelerated ciphers such as

[PATCH RFC] MIPS: Remove detect_memory_region()

2021-02-24 Thread Jinyang He
detect_memory_region() was committed by Commit 4d9f77d25268 ("MIPS: add detect_memory_region()"). Then it was equipped by Commit dd63b00804a5 ("MIPS: ralink: make use of the new memory detection code") and Commit 9b75733b7b5e ("MIPS: ath79: make use of the new memory detection code"). Its code is

[PATCH AUTOSEL 5.4 03/40] vt/consolemap: do font sum unsigned

2021-02-24 Thread Sasha Levin
From: Jiri Slaby [ Upstream commit 9777f8e60e718f7b022a94f2524f967d8def1931 ] The constant 20 makes the font sum computation signed which can lead to sign extensions and signed wraps. It's not much of a problem as we build with -fno-strict-overflow. But if we ever decide not to, be ready, so

[PATCH AUTOSEL 5.4 17/40] drm/amdgpu: Add check to prevent IH overflow

2021-02-24 Thread Sasha Levin
From: Defang Bo [ Upstream commit e4180c4253f3f2da09047f5139959227f5cf1173 ] Similar to commit ("drm/amdgpu: fix IH overflow on Vega10 v2"). When an ring buffer overflow happens the appropriate bit is set in the WPTR register which is also written back to memory. But clearing the bit in the

[PATCH AUTOSEL 5.4 15/40] udlfb: Fix memory leak in dlfb_usb_probe

2021-02-24 Thread Sasha Levin
From: Zqiang [ Upstream commit 5c0e4110f751934e748a66887c61f8e73805f0f9 ] The dlfb_alloc_urb_list function is called in dlfb_usb_probe function, after that if an error occurs, the dlfb_free_urb_list function need to be called. BUG: memory leak unreferenced object 0x88810adde100 (size 32):

[PATCH AUTOSEL 5.4 18/40] PCI: Add a REBAR size quirk for Sapphire RX 5600 XT Pulse

2021-02-24 Thread Sasha Levin
From: Nirmoy Das [ Upstream commit 907830b0fc9e374d00f3c83de5e426157b482c01 ] RX 5600 XT Pulse advertises support for BAR 0 being 256MB, 512MB, or 1GB, but it also supports 2GB, 4GB, and 8GB. Add a rebar size quirk so that the BAR 0 is big enough to cover complete VARM. Signed-off-by:

[PATCH AUTOSEL 4.19 20/26] smackfs: restrict bytes count in smackfs write functions

2021-02-24 Thread Sasha Levin
From: Sabyrzhan Tasbolatov [ Upstream commit 7ef4c19d245f3dc233fd4be5acea436edd1d83d8 ] syzbot found WARNINGs in several smackfs write operations where bytes count is passed to memdup_user_nul which exceeds GFP MAX_ORDER. Check count size if bigger than PAGE_SIZE. Per smackfs doc,

[PATCH AUTOSEL 4.19 11/26] udlfb: Fix memory leak in dlfb_usb_probe

2021-02-24 Thread Sasha Levin
From: Zqiang [ Upstream commit 5c0e4110f751934e748a66887c61f8e73805f0f9 ] The dlfb_alloc_urb_list function is called in dlfb_usb_probe function, after that if an error occurs, the dlfb_free_urb_list function need to be called. BUG: memory leak unreferenced object 0x88810adde100 (size 32):

[PATCH AUTOSEL 4.19 13/26] PCI: Add a REBAR size quirk for Sapphire RX 5600 XT Pulse

2021-02-24 Thread Sasha Levin
From: Nirmoy Das [ Upstream commit 907830b0fc9e374d00f3c83de5e426157b482c01 ] RX 5600 XT Pulse advertises support for BAR 0 being 256MB, 512MB, or 1GB, but it also supports 2GB, 4GB, and 8GB. Add a rebar size quirk so that the BAR 0 is big enough to cover complete VARM. Signed-off-by:

[PATCH AUTOSEL 4.19 15/26] media: mceusb: sanity check for prescaler value

2021-02-24 Thread Sasha Levin
From: Sean Young [ Upstream commit 9dec0f48a75e0dadca498002d25ef4e143e60194 ] prescaler larger than 8 would mean the carrier is at most 152Hz, which does not make sense for IR carriers. Reported-by: syzbot+6d31bf169a8265204...@syzkaller.appspotmail.com Signed-off-by: Sean Young Signed-off-by:

[PATCH AUTOSEL 4.19 23/26] parisc: Bump 64-bit IRQ stack size to 64 KB

2021-02-24 Thread Sasha Levin
From: John David Anglin [ Upstream commit 31680c1d1595a59e17c14ec036b192a95f8e5f4a ] Bump 64-bit IRQ stack size to 64 KB. I had a kernel IRQ stack overflow on the mx3210 debian buildd machine. This patch increases the 64-bit IRQ stack size to 64 KB. The 64-bit stack size needs to be larger

[PATCH AUTOSEL 4.19 12/26] crypto: tcrypt - avoid signed overflow in byte count

2021-02-24 Thread Sasha Levin
From: Ard Biesheuvel [ Upstream commit 303fd3e1c771077e32e96e5788817f025f0067e2 ] The signed long type used for printing the number of bytes processed in tcrypt benchmarks limits the range to -/+ 2 GiB, which is not sufficient to cover the performance of common accelerated ciphers such as

[PATCH AUTOSEL 4.19 18/26] f2fs: fix to set/clear I_LINKABLE under i_lock

2021-02-24 Thread Sasha Levin
From: Chao Yu [ Upstream commit 46085f37fc9e12d5c3539fb768b5ad7951e72acf ] fsstress + fault injection test case reports a warning message as below: WARNING: CPU: 13 PID: 6226 at fs/inode.c:361 inc_nlink+0x32/0x40 Call Trace: f2fs_init_inode_metadata+0x25c/0x4a0 [f2fs]

[PATCH AUTOSEL 4.19 21/26] Drivers: hv: vmbus: Resolve race condition in vmbus_onoffer_rescind()

2021-02-24 Thread Sasha Levin
From: "Andrea Parri (Microsoft)" [ Upstream commit e4d221b42354b2e2ddb9187a806afb651eee2cda ] An erroneous or malicious host could send multiple rescind messages for a same channel. In vmbus_onoffer_rescind(), the guest maps the channel ID to obtain a pointer to the channel object and it

[PATCH AUTOSEL 4.19 22/26] btrfs: fix error handling in commit_fs_roots

2021-02-24 Thread Sasha Levin
From: Josef Bacik [ Upstream commit 4f4317c13a40194940acf4a71670179c4faca2b5 ] While doing error injection I would sometimes get a corrupt file system. This is because I was injecting errors at btrfs_search_slot, but would only do it one time per stack. This uncovered a problem in

[PATCH AUTOSEL 4.19 16/26] media: uvcvideo: Allow entities with no pads

2021-02-24 Thread Sasha Levin
From: Ricardo Ribalda [ Upstream commit 7532dad6634031d083df7af606fac655b8d08b5c ] Avoid an underflow while calculating the number of inputs for entities with zero pads. Signed-off-by: Ricardo Ribalda Signed-off-by: Laurent Pinchart Signed-off-by: Mauro Carvalho Chehab Signed-off-by: Sasha

[PATCH AUTOSEL 4.19 17/26] f2fs: handle unallocated section and zone on pinned/atgc

2021-02-24 Thread Sasha Levin
From: Jaegeuk Kim [ Upstream commit 632faca72938f9f63049e48a8c438913828ac7a9 ] If we have large section/zone, unallocated segment makes them corrupted. E.g., - Pinned file: -1 119304647 119304647 - ATGC data: -1 119304647 119304647 Reviewed-by: Chao Yu Signed-off-by:

[PATCH AUTOSEL 4.19 09/26] Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data

2021-02-24 Thread Sasha Levin
From: Gopal Tiwari [ Upstream commit e8bd76ede155fd54d8c41d045dda43cd3174d506 ] kernel panic trace looks like: #5 [b9e08698fc80] do_page_fault at b666e0d7 #6 [b9e08698fcb0] page_fault at b70010fe [exception RIP: amp_read_loc_assoc_final_data+63] RIP:

[PATCH AUTOSEL 4.19 04/26] wlcore: Fix command execute failure 19 for wl12xx

2021-02-24 Thread Sasha Levin
From: Tony Lindgren [ Upstream commit cb88d01b67383a095e3f7caeb4cdade5a6cf0417 ] We can currently get a "command execute failure 19" error on beacon loss if the signal is weak: wlcore: Beacon loss detected. roles:0xff wlcore: Connection loss work (role_id: 0). ... wlcore: ERROR command execute

[PATCH AUTOSEL 4.19 08/26] x86/build: Treat R_386_PLT32 relocation as R_386_PC32

2021-02-24 Thread Sasha Levin
From: Fangrui Song [ Upstream commit bb73d07148c405c293e576b40af37737faf23a6a ] This is similar to commit b21ebf2fb4cd ("x86: Treat R_X86_64_PLT32 as R_X86_64_PC32") but for i386. As far as the kernel is concerned, R_386_PLT32 can be treated the same as R_386_PC32.

[PATCH AUTOSEL 4.14 15/16] Drivers: hv: vmbus: Resolve race condition in vmbus_onoffer_rescind()

2021-02-24 Thread Sasha Levin
From: "Andrea Parri (Microsoft)" [ Upstream commit e4d221b42354b2e2ddb9187a806afb651eee2cda ] An erroneous or malicious host could send multiple rescind messages for a same channel. In vmbus_onoffer_rescind(), the guest maps the channel ID to obtain a pointer to the channel object and it

[PATCH AUTOSEL 4.9 02/12] x86/reboot: Add Zotac ZBOX CI327 nano PCI reboot quirk

2021-02-24 Thread Sasha Levin
From: Heiner Kallweit [ Upstream commit 4b2d8ca9208be636b30e924b1cbcb267b0740c93 ] On this system the M.2 PCIe WiFi card isn't detected after reboot, only after cold boot. reboot=pci fixes this behavior. In [0] the same issue is described, although on another system and with another Intel WiFi

[PATCH AUTOSEL 4.9 03/12] vt/consolemap: do font sum unsigned

2021-02-24 Thread Sasha Levin
From: Jiri Slaby [ Upstream commit 9777f8e60e718f7b022a94f2524f967d8def1931 ] The constant 20 makes the font sum computation signed which can lead to sign extensions and signed wraps. It's not much of a problem as we build with -fno-strict-overflow. But if we ever decide not to, be ready, so

[PATCH AUTOSEL 4.19 05/26] Bluetooth: hci_h5: Set HCI_QUIRK_SIMULTANEOUS_DISCOVERY for btrtl

2021-02-24 Thread Sasha Levin
From: Claire Chang [ Upstream commit 7f9f2c3f7d99b8ae773459c74ac5e99a0dd46db9 ] Realtek Bluetooth controllers can do both LE scan and BR/EDR inquiry at once, need to set HCI_QUIRK_SIMULTANEOUS_DISCOVERY quirk. Signed-off-by: Claire Chang Signed-off-by: Marcel Holtmann Signed-off-by: Sasha

[PATCH AUTOSEL 4.19 06/26] pktgen: fix misuse of BUG_ON() in pktgen_thread_worker()

2021-02-24 Thread Sasha Levin
From: Di Zhu [ Upstream commit 275b1e88cabb34dbcbe99756b67e9939d34a99b6 ] pktgen create threads for all online cpus and bond these threads to relevant cpu repecivtily. when this thread firstly be woken up, it will compare cpu currently running with the cpu specified at the time of creation and

Re: [GIT PULL] Modules updates for v5.12

2021-02-24 Thread Masahiro Yamada
On Wed, Feb 24, 2021 at 5:33 PM Jessica Yu wrote: > > +++ Linus Torvalds [23/02/21 12:03 -0800]: > >On Tue, Feb 23, 2021 at 12:01 PM Christoph Hellwig wrote: > >> > >> Does your build now enable TRIM_UNUSED_KSYMS but previously didn't by > >> chance? > > > >Crossed emails. > > > >This is plain

[PATCH AUTOSEL 5.11 25/67] drm/hisilicon: Fix use-after-free

2021-02-24 Thread Sasha Levin
From: Tian Tao [ Upstream commit c855af2f9c5c60760fd1bed7889a81bc37d2591d ] Fix the problem of dev being released twice. [ cut here ] refcount_t: underflow; use-after-free. WARNING: CPU: 75 PID: 15700 at lib/refcount.c:28 refcount_warn_saturate+0xd4/0x150 CPU: 75 PID:

[PATCH AUTOSEL 5.11 23/67] brcmfmac: Add DMI nvram filename quirk for Voyo winpad A15 tablet

2021-02-24 Thread Sasha Levin
From: Hans de Goede [ Upstream commit a338c874d3d9d2463f031e89ae14942929b93db6 ] The Voyo winpad A15 tablet contains quite generic names in the sys_vendor and product_name DMI strings, without this patch brcmfmac will try to load: rcmfmac4330-sdio.To be filled by O.E.M.-To be filled by

[PATCH AUTOSEL 5.11 45/67] nvme-rdma: add clean action for failed reconnection

2021-02-24 Thread Sasha Levin
From: Chao Leng [ Upstream commit 958dc1d32c80566f58d18f05ef1f05bd32d172c1 ] A crash happens when inject failed reconnection. If reconnect failed after start io queues, the queues will be unquiesced and new requests continue to be delivered. Reconnection error handling process directly free

[PATCH AUTOSEL 5.11 46/67] nvme-tcp: add clean action for failed reconnection

2021-02-24 Thread Sasha Levin
From: Chao Leng [ Upstream commit 70a99574a79f1cd4dc7ad56ea37be40844bfb97b ] If reconnect failed after start io queues, the queues will be unquiesced and new requests continue to be delivered. Reconnection error handling process directly free queues without cancel suspend requests. The suppend

[PATCH AUTOSEL 5.11 62/67] xen-blkback: fix error handling in xen_blkbk_map()

2021-02-24 Thread Sasha Levin
From: Jan Beulich [ Upstream commit 871997bc9e423f05c7da7c9178e62dde5df2a7f8 ] The function uses a goto-based loop, which may lead to an earlier error getting discarded by a later iteration. Exit this ad-hoc loop when an error was encountered. The out-of-memory error path additionally fails to

[PATCH AUTOSEL 5.11 64/67] ASoC: Intel: bytcr_rt5640: Add quirk for the Estar Beauty HD MID 7316R tablet

2021-02-24 Thread Sasha Levin
From: Hans de Goede [ Upstream commit bdea43fc0436c9e98fdfe151c2ed8a3fc7277404 ] The Estar Beauty HD MID 7316R tablet almost fully works with out default settings. The only problem is that it has only 1 speaker so any sounds only playing on the right channel get lost. Add a quirk for this

[PATCH AUTOSEL 5.11 63/67] sched/features: Fix hrtick reprogramming

2021-02-24 Thread Sasha Levin
From: Juri Lelli [ Upstream commit 156ec6f42b8d300dbbf382738ff35c8bad8f4c3a ] Hung tasks and RCU stall cases were reported on systems which were not 100% busy. Investigation of such unexpected cases (no sign of potential starvation caused by tasks hogging the system) pointed out that the

[PATCH AUTOSEL 5.11 65/67] ASoC: Intel: bytcr_rt5640: Add quirk for the Voyo Winpad A15 tablet

2021-02-24 Thread Sasha Levin
From: Hans de Goede [ Upstream commit e1317cc9ca4ac20262895fddb065ffda4fc29cfb ] The Voyo Winpad A15 tablet uses a Bay Trail (non CR) SoC, so it is using SSP2 (AIF1) and it mostly works with the defaults. But instead of using DMIC1 it is using an analog mic on IN1, add a quirk for this.

[PATCH AUTOSEL 5.11 60/67] erofs: fix shift-out-of-bounds of blkszbits

2021-02-24 Thread Sasha Levin
From: Gao Xiang [ Upstream commit bde545295b710bdd13a0fcd4b9fddd2383eeeb3a ] syzbot generated a crafted bitszbits which can be shifted out-of-bounds[1]. So directly print unsupported blkszbits instead of blksize. [1] https://lore.kernel.org/r/c72ddd05b9444...@google.com Link:

[PATCH AUTOSEL 5.11 59/67] ASoC: Intel: sof_sdw: detect DMIC number based on mach params

2021-02-24 Thread Sasha Levin
From: Rander Wang [ Upstream commit f88dcb9b98d3f86ead04d2453475267910448bb8 ] Current driver create DMIC dai based on quirk for each platforms, so we need to add quirk for new platforms. Now driver reports DMIC number to machine driver and machine driver can create DMIC dai based on this

[PATCH AUTOSEL 5.11 55/67] btrfs: only let one thread pre-flush delayed refs in commit

2021-02-24 Thread Sasha Levin
From: Josef Bacik [ Upstream commit e19eb11f4f3d3b0463cd897016064a79cb6d8c6d ] I've been running a stress test that runs 20 workers in their own subvolume, which are running an fsstress instance with 4 threads per worker, which is 80 total fsstress threads. In addition to this I'm running

[PATCH AUTOSEL 5.11 48/67] ALSA: usb-audio: Add DJM-450 to the quirks table

2021-02-24 Thread Sasha Levin
From: Olivia Mackintosh [ Upstream commit 9119e5661eab2c56a96b936cde49c6740dc49ff9 ] As with most Pioneer devices, the device descriptor is vendor specific and as such, the number of channels, the PCM format, endpoints and sample rate need to be specified. This device has 8 inputs and 8 outputs

[PATCH AUTOSEL 5.11 52/67] ASoC: Intel: Add DMI quirk table to soc_intel_is_byt_cr()

2021-02-24 Thread Sasha Levin
From: Hans de Goede [ Upstream commit 8ade6d8b02b1ead741bd4f6c42921035caab6560 ] Some Bay Trail systems: 1. Use a non CR version of the Bay Trail SoC 2. Contain at least 6 interrupt resources so that the platform_get_resource(pdev, IORESOURCE_IRQ, 5) check to workaround non CR systems

[PATCH AUTOSEL 5.11 61/67] parisc: Bump 64-bit IRQ stack size to 64 KB

2021-02-24 Thread Sasha Levin
From: John David Anglin [ Upstream commit 31680c1d1595a59e17c14ec036b192a95f8e5f4a ] Bump 64-bit IRQ stack size to 64 KB. I had a kernel IRQ stack overflow on the mx3210 debian buildd machine. This patch increases the 64-bit IRQ stack size to 64 KB. The 64-bit stack size needs to be larger

[PATCH AUTOSEL 5.11 58/67] ASoC: Intel: sof-sdw: indent and add quirks consistently

2021-02-24 Thread Sasha Levin
From: Pierre-Louis Bossart [ Upstream commit 8caf37e2be761688c396c609880936a807af490f ] Use the same style for all quirks to avoid misses and errors Signed-off-by: Pierre-Louis Bossart Reviewed-by: Guennadi Liakhovetski Reviewed-by: Kai Vehmanen Link:

[PATCH AUTOSEL 5.11 57/67] perf/x86/kvm: Add Cascade Lake Xeon steppings to isolation_ucodes[]

2021-02-24 Thread Sasha Levin
From: Jim Mattson [ Upstream commit b3c3361fe325074d4144c29d46daae4fc5a268d5 ] Cascade Lake Xeon parts have the same model number as Skylake Xeon parts, so they are tagged with the intel_pebs_isolation quirk. However, as with Skylake Xeon H0 stepping parts, the PEBS isolation issue is fixed in

[PATCH AUTOSEL 5.11 56/67] drm/amdgpu: enable only one high prio compute queue

2021-02-24 Thread Sasha Levin
From: Nirmoy Das [ Upstream commit 8c0225d79273968a65e73a4204fba023ae02714d ] For high priority compute to work properly we need to enable wave limiting on gfx pipe. Wave limiting is done through writing into mmSPI_WCL_PIPE_PERCENT_GFX register. Enable only one high priority compute queue to

[PATCH AUTOSEL 5.10 10/56] ath10k: fix wmi mgmt tx queue full due to race condition

2021-02-24 Thread Sasha Levin
From: Miaoqing Pan [ Upstream commit b55379e343a3472c35f4a1245906db5158cab453 ] Failed to transmit wmi management frames: [84977.840894] ath10k_snoc a00.wifi: wmi mgmt tx queue is full [84977.840913] ath10k_snoc a00.wifi: failed to transmit packet, dropping: -28 [84977.840924]

[PATCH AUTOSEL 5.10 35/56] tomoyo: ignore data race while checking quota

2021-02-24 Thread Sasha Levin
From: Tetsuo Handa [ Upstream commit 5797e861e402fff2bedce4ec8b7c89f4248b6073 ] syzbot is reporting that tomoyo's quota check is racy [1]. But this check is tolerant of some degree of inaccuracy. Thus, teach KCSAN to ignore this data race. [1]

[PATCH AUTOSEL 5.10 31/56] media: v4l2-ctrls.c: fix shift-out-of-bounds in std_validate

2021-02-24 Thread Sasha Levin
From: Hans Verkuil [ Upstream commit 048c96e28674f15c0403deba2104ffba64544a06 ] If a menu has more than 64 items, then don't check menu_skip_mask for items 65 and up. Signed-off-by: Hans Verkuil Reported-by: syzbot+42d8c7c3d3e594b34...@syzkaller.appspotmail.com Signed-off-by: Mauro Carvalho

[PATCH AUTOSEL 5.10 23/56] fs: make unlazy_walk() error handling consistent

2021-02-24 Thread Sasha Levin
From: Jens Axboe [ Upstream commit e36cffed20a324e116f329a94061ae30dd26fb51 ] Most callers check for non-zero return, and assume it's -ECHILD (which it always will be). One caller uses the actual error return. Clean this up and make it fully consistent, by having unlazy_walk() return a bool

[PATCH AUTOSEL 5.10 37/56] nvme-rdma: add clean action for failed reconnection

2021-02-24 Thread Sasha Levin
From: Chao Leng [ Upstream commit 958dc1d32c80566f58d18f05ef1f05bd32d172c1 ] A crash happens when inject failed reconnection. If reconnect failed after start io queues, the queues will be unquiesced and new requests continue to be delivered. Reconnection error handling process directly free

[PATCH AUTOSEL 5.10 24/56] sched/core: Allow try_invoke_on_locked_down_task() with irqs disabled

2021-02-24 Thread Sasha Levin
From: Peter Zijlstra [ Upstream commit 1b7af295541d75535374325fd617944534853919 ] The try_invoke_on_locked_down_task() function currently requires that interrupts be enabled, but it is called with interrupts disabled from rcu_print_task_stall(), resulting in an "IRQs not enabled as expected"

Re: BUG: unable to handle kernel NULL pointer dereference in call_rcu

2021-02-24 Thread syzbot
syzbot has bisected this issue to: commit 97593cad003c668e2532cb2939a24a031f8de52d Author: Andrey Konovalov Date: Tue Dec 22 20:03:28 2020 + kasan: sanitize objects when metadata doesn't fit bisection log: https://syzkaller.appspot.com/x/bisect.txt?x=106689b6d0 start commit:

[PATCH AUTOSEL 5.10 33/56] f2fs: handle unallocated section and zone on pinned/atgc

2021-02-24 Thread Sasha Levin
From: Jaegeuk Kim [ Upstream commit 632faca72938f9f63049e48a8c438913828ac7a9 ] If we have large section/zone, unallocated segment makes them corrupted. E.g., - Pinned file: -1 119304647 119304647 - ATGC data: -1 119304647 119304647 Reviewed-by: Chao Yu Signed-off-by:

[PATCH AUTOSEL 5.10 32/56] media: uvcvideo: Allow entities with no pads

2021-02-24 Thread Sasha Levin
From: Ricardo Ribalda [ Upstream commit 7532dad6634031d083df7af606fac655b8d08b5c ] Avoid an underflow while calculating the number of inputs for entities with zero pads. Signed-off-by: Ricardo Ribalda Signed-off-by: Laurent Pinchart Signed-off-by: Mauro Carvalho Chehab Signed-off-by: Sasha

  1   2   3   4   5   6   7   8   9   10   >