November 2018 - Linux-stable-mirror

[PATCH AUTOSEL 4.14 01/35] media: omap3isp: Unregister media device as first

by Sasha Levin

From: Sakari Ailus <sakari.ailus(a)linux.intel.com> [ Upstream commit 30efae3d789cd0714ef795545a46749236e29558 ] While there are issues related to object lifetime management, unregister the media device first when the driver is being unbound. This is slightly safer. Signed-off-by: Sakari Ailus <sakari.ailus(a)linux.intel.com> Reviewed-by: Laurent Pinchart <laurent.pinchart(a)ideasonboard.com> Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- drivers/media/platform/omap3isp/isp.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/drivers/media/platform/omap3isp/isp.c b/drivers/media/platform/omap3isp/isp.c index 6e6e978263b0..c834fea5f9b0 100644 --- a/drivers/media/platform/omap3isp/isp.c +++ b/drivers/media/platform/omap3isp/isp.c @@ -1592,6 +1592,8 @@ static void isp_pm_complete(struct device *dev) static void isp_unregister_entities(struct isp_device *isp) { + media_device_unregister(&isp->media_dev); + omap3isp_csi2_unregister_entities(&isp->isp_csi2a); omap3isp_ccp2_unregister_entities(&isp->isp_ccp2); omap3isp_ccdc_unregister_entities(&isp->isp_ccdc); @@ -1602,7 +1604,6 @@ static void isp_unregister_entities(struct isp_device *isp) omap3isp_stat_unregister_entities(&isp->isp_hist); v4l2_device_unregister(&isp->v4l2_dev); - media_device_unregister(&isp->media_dev); media_device_cleanup(&isp->media_dev); } -- 2.17.1

5 years, 3 months

9
58
0 0

stable request: mm, page_alloc: actually ignore mempolicies for high priority allocations

by Mike Manning

Hello, Please consider backporting to 4.14.y the following commit from kernel-net-next by Vlastimil Babka [CC'ed]: d6a24df00638 ("mm, page_alloc: actually ignore mempolicies for high priority allocations") It cherry-picks cleanly and builds fine. The reason for the request is that the commit 1d26c112959f <http://stash.eng.vyatta.net:7990/projects/VC/repos/linux-vyatta/commits/1d2…> ("mm, page_alloc:do not break __GFP_THISNODE by zonelist reset") that was previously backported to 4.14.y broke some of our functionality after we upgraded from an earlier 4.14 kernel without the fix. The reason this is happening is not clear, with this commit only found by bisect. Fortunately the requested commit resolves the issue. Best Regards, Mike Manning

5 years, 3 months

4
9
0 0

[PATCH v2] powerpc/tm: Set MSR[TS] just prior to recheckpoint

by Breno Leitao

On a signal handler return, the user could set a context with MSR[TS] bits set, and these bits would be copied to task regs->msr. At restore_tm_sigcontexts(), after current task regs->msr[TS] bits are set, several __get_user() are called and then a recheckpoint is executed. This is a problem since a page fault (in kernel space) could happen when calling __get_user(). If it happens, the process MSR[TS] bits were already set, but recheckpoint was not executed, and SPRs are still invalid. The page fault can cause the current process to be de-scheduled, with MSR[TS] active and without tm_recheckpoint() being called. More importantly, without TEXASR[FS] bit set also. Since TEXASR might not have the FS bit set, and when the process is scheduled back, it will try to reclaim, which will be aborted because of the CPU is not in the suspended state, and, then, recheckpoint. This recheckpoint will restore thread->texasr into TEXASR SPR, which might be zero, hitting a BUG_ON(). kernel BUG at /build/linux-sf3Co9/linux-4.9.30/arch/powerpc/kernel/tm.S:434! cpu 0xb: Vector: 700 (Program Check) at [c00000041f1576d0] pc: c000000000054550: restore_gprs+0xb0/0x180 lr: 0000000000000000 sp: c00000041f157950 msr: 8000000100021033 current = 0xc00000041f143000 paca = 0xc00000000fb86300 softe: 0 irq_happened: 0x01 pid = 1021, comm = kworker/11:1 kernel BUG at /build/linux-sf3Co9/linux-4.9.30/arch/powerpc/kernel/tm.S:434! Linux version 4.9.0-3-powerpc64le (debian-kernel(a)lists.debian.org) (gcc version 6.3.0 20170516 (Debian 6.3.0-18) ) #1 SMP Debian 4.9.30-2+deb9u2 (2017-06-26) enter ? for help [c00000041f157b30] c00000000001bc3c tm_recheckpoint.part.11+0x6c/0xa0 [c00000041f157b70] c00000000001d184 __switch_to+0x1e4/0x4c0 [c00000041f157bd0] c00000000082eeb8 __schedule+0x2f8/0x990 [c00000041f157cb0] c00000000082f598 schedule+0x48/0xc0 [c00000041f157ce0] c0000000000f0d28 worker_thread+0x148/0x610 [c00000041f157d80] c0000000000f96b0 kthread+0x120/0x140 [c00000041f157e30] c00000000000c0e0 ret_from_kernel_thread+0x5c/0x7c This patch simply delays the MSR[TS] set, so, if there is any page fault in the __get_user() section, it does not have regs->msr[TS] set, since the TM structures are still invalid, thus avoiding doing TM operations for in-kernel exceptions and possible process reschedule. With this patch, the MSR[TS] will only be set just before recheckpointing and setting TEXASR[FS] = 1, thus avoiding an interrupt with TM registers in invalid state. Other than that, if CONFIG_PREEMPT is set, there might be a preemption just after setting MSR[TS] and before tm_recheckpoint(), thus, this block must be atomic from a preemption perspective, thus, calling preempt_disable/enable() on this code. It is not possible to move tm_recheckpoint to happen earlier, because it is required to get the checkpointed registers from userspace, with __get_user(), thus, the only way to avoid this undesired behavior is delaying the MSR[TS] set. The 32-bits signal handler seems to be safe this current issue, but, it might be exposed to the preemption issue, thus, disabling preemption in this chunk of code. Changes from v2: * Run the critical section with preempt_disable. Fixes: 87b4e5393af7 ("powerpc/tm: Fix return of active 64bit signals") Cc: stable(a)vger.kernel.org (v3.9+) Signed-off-by: Breno Leitao <leitao(a)debian.org> diff --git a/arch/powerpc/kernel/signal_32.c b/arch/powerpc/kernel/signal_32.c index e6474a45cef5..fd59fef9931b 100644 --- a/arch/powerpc/kernel/signal_32.c +++ b/arch/powerpc/kernel/signal_32.c @@ -848,7 +848,23 @@ static long restore_tm_user_regs(struct pt_regs *regs, /* If TM bits are set to the reserved value, it's an invalid context */ if (MSR_TM_RESV(msr_hi)) return 1; - /* Pull in the MSR TM bits from the user context */ + + /* + * Disabling preemption, since it is unsafe to be preempted + * with MSR[TS] set without recheckpointing. + */ + preempt_disable(); + + /* + * CAUTION: + * After regs->MSR[TS] being updated, make sure that get_user(), + * put_user() or similar functions are *not* called. These + * functions can generate page faults which will cause the process + * to be de-scheduled with MSR[TS] set but without calling + * tm_recheckpoint(). This can cause a bug. + * + * Pull in the MSR TM bits from the user context + */ regs->msr = (regs->msr & ~MSR_TS_MASK) | (msr_hi & MSR_TS_MASK); /* Now, recheckpoint. This loads up all of the checkpointed (older) * registers, including FP and V[S]Rs. After recheckpointing, the @@ -873,6 +889,8 @@ static long restore_tm_user_regs(struct pt_regs *regs, } #endif + preempt_enable(); + return 0; } #endif diff --git a/arch/powerpc/kernel/signal_64.c b/arch/powerpc/kernel/signal_64.c index 83d51bf586c7..bbd1c73243d7 100644 --- a/arch/powerpc/kernel/signal_64.c +++ b/arch/powerpc/kernel/signal_64.c @@ -467,20 +467,6 @@ static long restore_tm_sigcontexts(struct task_struct *tsk, if (MSR_TM_RESV(msr)) return -EINVAL; - /* pull in MSR TS bits from user context */ - regs->msr = (regs->msr & ~MSR_TS_MASK) | (msr & MSR_TS_MASK); - - /* - * Ensure that TM is enabled in regs->msr before we leave the signal - * handler. It could be the case that (a) user disabled the TM bit - * through the manipulation of the MSR bits in uc_mcontext or (b) the - * TM bit was disabled because a sufficient number of context switches - * happened whilst in the signal handler and load_tm overflowed, - * disabling the TM bit. In either case we can end up with an illegal - * TM state leading to a TM Bad Thing when we return to userspace. - */ - regs->msr |= MSR_TM; - /* pull in MSR LE from user context */ regs->msr = (regs->msr & ~MSR_LE) | (msr & MSR_LE); @@ -572,6 +558,34 @@ static long restore_tm_sigcontexts(struct task_struct *tsk, tm_enable(); /* Make sure the transaction is marked as failed */ tsk->thread.tm_texasr |= TEXASR_FS; + + /* + * Disabling preemption, since it is unsafe to be preempted + * with MSR[TS] set without recheckpointing. + */ + preempt_disable(); + + /* pull in MSR TS bits from user context */ + regs->msr = (regs->msr & ~MSR_TS_MASK) | (msr & MSR_TS_MASK); + + /* + * Ensure that TM is enabled in regs->msr before we leave the signal + * handler. It could be the case that (a) user disabled the TM bit + * through the manipulation of the MSR bits in uc_mcontext or (b) the + * TM bit was disabled because a sufficient number of context switches + * happened whilst in the signal handler and load_tm overflowed, + * disabling the TM bit. In either case we can end up with an illegal + * TM state leading to a TM Bad Thing when we return to userspace. + * + * CAUTION: + * After regs->MSR[TS] being updated, make sure that get_user(), + * put_user() or similar functions are *not* called. These + * functions can generate page faults which will cause the process + * to be de-scheduled with MSR[TS] set but without calling + * tm_recheckpoint(). This can cause a bug. + */ + regs->msr |= MSR_TM; + /* This loads the checkpointed FP/VEC state, if used */ tm_recheckpoint(&tsk->thread); @@ -585,6 +599,8 @@ static long restore_tm_sigcontexts(struct task_struct *tsk, regs->msr |= MSR_VEC; } + preempt_enable(); + return err; } #endif -- 2.19.0

5 years, 4 months

2
1
0 0

FAILED: patch "[PATCH] ASoC: sta32x: set ->component pointer in private struct" failed to apply to 4.14-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 4.14-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. thanks, greg k-h ------------------ original commit in Linus's tree ------------------ >From 747df19747bc9752cd40b9cce761e17a033aa5c2 Mon Sep 17 00:00:00 2001 From: Daniel Mack <daniel(a)zonque.org> Date: Thu, 11 Oct 2018 20:32:05 +0200 Subject: [PATCH] ASoC: sta32x: set ->component pointer in private struct The ESD watchdog code in sta32x_watchdog() dereferences the pointer which is never assigned. This is a regression from a1be4cead9b950 ("ASoC: sta32x: Convert to direct regmap API usage.") which went unnoticed since nobody seems to use that ESD workaround. Fixes: a1be4cead9b950 ("ASoC: sta32x: Convert to direct regmap API usage.") Signed-off-by: Daniel Mack <daniel(a)zonque.org> Signed-off-by: Mark Brown <broonie(a)kernel.org> Cc: stable(a)vger.kernel.org diff --git a/sound/soc/codecs/sta32x.c b/sound/soc/codecs/sta32x.c index d5035f2f2b2b..ce508b4cc85c 100644 --- a/sound/soc/codecs/sta32x.c +++ b/sound/soc/codecs/sta32x.c @@ -879,6 +879,9 @@ static int sta32x_probe(struct snd_soc_component *component) struct sta32x_priv *sta32x = snd_soc_component_get_drvdata(component); struct sta32x_platform_data *pdata = sta32x->pdata; int i, ret = 0, thermal = 0; + + sta32x->component = component; + ret = regulator_bulk_enable(ARRAY_SIZE(sta32x->supplies), sta32x->supplies); if (ret != 0) {

5 years, 4 months

6
5
0 0

FAILED: patch "[PATCH] cifs: integer overflow in in SMB2_ioctl()" failed to apply to 4.14-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 4.14-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. thanks, greg k-h ------------------ original commit in Linus's tree ------------------ >From 2d204ee9d671327915260071c19350d84344e096 Mon Sep 17 00:00:00 2001 From: Dan Carpenter <dan.carpenter(a)oracle.com> Date: Mon, 10 Sep 2018 14:12:07 +0300 Subject: [PATCH] cifs: integer overflow in in SMB2_ioctl() The "le32_to_cpu(rsp->OutputOffset) + *plen" addition can overflow and wrap around to a smaller value which looks like it would lead to an information leak. Fixes: 4a72dafa19ba ("SMB2 FSCTL and IOCTL worker function") Signed-off-by: Dan Carpenter <dan.carpenter(a)oracle.com> Signed-off-by: Steve French <stfrench(a)microsoft.com> Reviewed-by: Aurelien Aptel <aaptel(a)suse.com> CC: Stable <stable(a)vger.kernel.org> diff --git a/fs/cifs/smb2pdu.c b/fs/cifs/smb2pdu.c index 6f0e6b42599c..f54d07bda067 100644 --- a/fs/cifs/smb2pdu.c +++ b/fs/cifs/smb2pdu.c @@ -2459,14 +2459,14 @@ SMB2_ioctl(const unsigned int xid, struct cifs_tcon *tcon, u64 persistent_fid, /* We check for obvious errors in the output buffer length and offset */ if (*plen == 0) goto ioctl_exit; /* server returned no data */ - else if (*plen > 0xFF00) { + else if (*plen > rsp_iov.iov_len || *plen > 0xFF00) { cifs_dbg(VFS, "srv returned invalid ioctl length: %d\n", *plen); *plen = 0; rc = -EIO; goto ioctl_exit; } - if (rsp_iov.iov_len < le32_to_cpu(rsp->OutputOffset) + *plen) { + if (rsp_iov.iov_len - *plen < le32_to_cpu(rsp->OutputOffset)) { cifs_dbg(VFS, "Malformed ioctl resp: len %d offset %d\n", *plen, le32_to_cpu(rsp->OutputOffset)); *plen = 0;

5 years, 4 months

4
3
0 0

FAILED: patch "[PATCH] ib_srpt: Fix a use-after-free in __srpt_close_all_ch()" failed to apply to 4.14-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 4.14-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. thanks, greg k-h ------------------ original commit in Linus's tree ------------------ >From 14d15c2b278011056482eb015dff89f9cbf2b841 Mon Sep 17 00:00:00 2001 From: Bart Van Assche <bart.vanassche(a)wdc.com> Date: Mon, 2 Jul 2018 14:08:45 -0700 Subject: [PATCH] ib_srpt: Fix a use-after-free in __srpt_close_all_ch() BUG: KASAN: use-after-free in srpt_set_enabled+0x1a9/0x1e0 [ib_srpt] Read of size 4 at addr ffff8801269d23f8 by task check/29726 CPU: 4 PID: 29726 Comm: check Not tainted 4.18.0-rc2-dbg+ #4 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.0.0-prebuilt.qemu-project.org 04/01/2014 Call Trace: dump_stack+0xa4/0xf5 print_address_description+0x6f/0x270 kasan_report+0x241/0x360 __asan_load4+0x78/0x80 srpt_set_enabled+0x1a9/0x1e0 [ib_srpt] srpt_tpg_enable_store+0xb8/0x120 [ib_srpt] configfs_write_file+0x14e/0x1d0 [configfs] __vfs_write+0xd2/0x3b0 vfs_write+0x101/0x270 ksys_write+0xab/0x120 __x64_sys_write+0x43/0x50 do_syscall_64+0x77/0x230 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f235cfe6154 Fixes: aaf45bd83eba ("IB/srpt: Detect session shutdown reliably") Signed-off-by: Bart Van Assche <bart.vanassche(a)wdc.com> Cc: <stable(a)vger.kernel.org> Signed-off-by: Jason Gunthorpe <jgg(a)mellanox.com> diff --git a/drivers/infiniband/ulp/srpt/ib_srpt.c b/drivers/infiniband/ulp/srpt/ib_srpt.c index 754da8d30952..e42eec20c631 100644 --- a/drivers/infiniband/ulp/srpt/ib_srpt.c +++ b/drivers/infiniband/ulp/srpt/ib_srpt.c @@ -1940,8 +1940,8 @@ static void __srpt_close_all_ch(struct srpt_port *sport) list_for_each_entry(nexus, &sport->nexus_list, entry) { list_for_each_entry(ch, &nexus->ch_list, list) { if (srpt_disconnect_ch(ch) >= 0) - pr_info("Closing channel %s-%d because target %s_%d has been disabled\n", - ch->sess_name, ch->qp->qp_num, + pr_info("Closing channel %s because target %s_%d has been disabled\n", + ch->sess_name, sport->sdev->device->name, sport->port); srpt_close_ch(ch); }

5 years, 4 months

3
2
0 0

FAILED: patch "[PATCH] ubifs: Fix directory size calculation for symlinks" failed to apply to 4.14-stable tree

by gregkh＠linuxfoundation.org

The patch below does not apply to the 4.14-stable tree. If someone wants it applied there, or to any other stable or longterm tree, then please email the backport, including the original git commit id to <stable(a)vger.kernel.org>. thanks, greg k-h ------------------ original commit in Linus's tree ------------------ >From 00ee8b60102862f4daf0814d12a2ea2744fc0b9b Mon Sep 17 00:00:00 2001 From: Richard Weinberger <richard(a)nod.at> Date: Mon, 11 Jun 2018 23:41:09 +0200 Subject: [PATCH] ubifs: Fix directory size calculation for symlinks We have to account the name of the symlink and not the target length. Fixes: ca7f85be8d6c ("ubifs: Add support for encrypted symlinks") Cc: <stable(a)vger.kernel.org> Signed-off-by: Richard Weinberger <richard(a)nod.at> diff --git a/fs/ubifs/dir.c b/fs/ubifs/dir.c index 9da224d4f2da..e8616040bffc 100644 --- a/fs/ubifs/dir.c +++ b/fs/ubifs/dir.c @@ -1123,8 +1123,7 @@ static int ubifs_symlink(struct inode *dir, struct dentry *dentry, struct ubifs_inode *ui; struct ubifs_inode *dir_ui = ubifs_inode(dir); struct ubifs_info *c = dir->i_sb->s_fs_info; - int err, len = strlen(symname); - int sz_change = CALC_DENT_SIZE(len); + int err, sz_change, len = strlen(symname); struct fscrypt_str disk_link; struct ubifs_budget_req req = { .new_ino = 1, .new_dent = 1, .new_ino_d = ALIGN(len, 8), @@ -1151,6 +1150,8 @@ static int ubifs_symlink(struct inode *dir, struct dentry *dentry, if (err) goto out_budg; + sz_change = CALC_DENT_SIZE(fname_len(&nm)); + inode = ubifs_new_inode(c, dir, S_IFLNK | S_IRWXUGO); if (IS_ERR(inode)) { err = PTR_ERR(inode);

5 years, 4 months

4
3
0 0

[PATCH 4.19 000/361] 4.19.2-stable review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 4.19.2 release. There are 361 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Tue Nov 13 22:14:55 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.19.2-rc1… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 4.19.2-rc1 Takashi Iwai <tiwai(a)suse.de> vga_switcheroo: Fix missing gpu_bound call at audio client registration Daniel Colascione <dancol(a)google.com> bpf: wait for running BPF programs when updating map-in-map Jann Horn <jannh(a)google.com> userns: also map extents in the reverse map to kernel IDs Mikulas Patocka <mpatocka(a)redhat.com> vt: fix broken display when running aptitude David Ahern <dsahern(a)gmail.com> net: sched: Remove TCA_OPTIONS from policy Filipe Manana <fdmanana(a)suse.com> Btrfs: fix use-after-free when dumping free space Filipe Manana <fdmanana(a)suse.com> Btrfs: fix use-after-free during inode eviction Josef Bacik <josef(a)toxicpanda.com> btrfs: move the dio_sem higher up the callchain Josef Bacik <josef(a)toxicpanda.com> btrfs: don't run delayed_iputs in commit Josef Bacik <josef(a)toxicpanda.com> btrfs: fix insert_reserved error handling Josef Bacik <josef(a)toxicpanda.com> btrfs: only free reserved extent if we didn't insert it Josef Bacik <jbacik(a)fb.com> btrfs: don't use ctl->free_space for max_extent_size Josef Bacik <jbacik(a)fb.com> btrfs: set max_extent_size properly Josef Bacik <josef(a)toxicpanda.com> btrfs: reset max_extent_size properly Filipe Manana <fdmanana(a)suse.com> Btrfs: fix deadlock when writing out free space caches Filipe Manana <fdmanana(a)suse.com> Btrfs: fix assertion on fsync of regular file when using no-holes feature Filipe Manana <fdmanana(a)suse.com> Btrfs: fix null pointer dereference on compressed write path error Qu Wenruo <wqu(a)suse.com> btrfs: qgroup: Dirty all qgroups before rescan Filipe Manana <fdmanana(a)suse.com> Btrfs: fix wrong dentries after fsync of file that got its parent replaced Filipe Manana <fdmanana(a)suse.com> Btrfs: fix warning when replaying log after fsync of a tmpfile Josef Bacik <josef(a)toxicpanda.com> btrfs: make sure we create all new block groups Josef Bacik <jbacik(a)fb.com> btrfs: reset max_extent_size on clear in a bitmap Josef Bacik <josef(a)toxicpanda.com> btrfs: protect space cache inode alloc with GFP_NOFS Josef Bacik <josef(a)toxicpanda.com> btrfs: release metadata before running delayed refs Chris Mason <clm(a)fb.com> Btrfs: don't clean dirty pages during buffered writes Josef Bacik <josef(a)toxicpanda.com> btrfs: wait on caching when putting the bg cache Jeff Mahoney <jeffm(a)suse.com> btrfs: keep trim from interfering with transaction commits Jeff Mahoney <jeffm(a)suse.com> btrfs: don't attempt to trim devices that don't support it Jeff Mahoney <jeffm(a)suse.com> btrfs: iterate all devices during trim, instead of fs_devices::alloc_list Qu Wenruo <wqu(a)suse.com> btrfs: Ensure btrfs_trim_fs can trim the whole filesystem Qu Wenruo <wqu(a)suse.com> btrfs: Enhance btrfs_trim_fs function to handle error better Jeff Mahoney <jeffm(a)suse.com> btrfs: fix error handling in btrfs_dev_replace_start Jeff Mahoney <jeffm(a)suse.com> btrfs: fix error handling in free_log_tree Qu Wenruo <wqu(a)suse.com> btrfs: locking: Add extra check in btrfs_init_new_buffer() to avoid deadlock Qu Wenruo <wqu(a)suse.com> btrfs: Handle owner mismatch gracefully when walking up tree Qu Wenruo <wqu(a)suse.com> btrfs: qgroup: Avoid calling qgroup functions if qgroup is not enabled Masami Hiramatsu <mhiramat(a)kernel.org> tracing: Return -ENOENT if there is no target synthetic event Breno Leitao <leitao(a)debian.org> selftests/powerpc: Fix ptrace tm failure Masami Hiramatsu <mhiramat(a)kernel.org> selftests/ftrace: Fix synthetic event test to delete event correctly Johan Hovold <johan(a)kernel.org> soc/tegra: pmc: Fix child-node lookup Bjorn Andersson <bjorn.andersson(a)linaro.org> soc: qcom: rmtfs-mem: Validate that scm is available Thor Thayer <thor.thayer(a)linux.intel.com> arm64: dts: stratix10: Correct System Manager register size Thor Thayer <thor.thayer(a)linux.intel.com> ARM: dts: socfpga: Fix SDRAM node address for Arria10 Nicolas Pitre <nicolas.pitre(a)linaro.org> Cramfs: fix abad comparison when wrap-arounds occur Colin Ian King <colin.king(a)canonical.com> rpmsg: smd: fix memory leak on channel create Tri Vo <trong(a)android.com> arm64: lse: remove -fcall-used-x0 flag Hans Verkuil <hansverk(a)cisco.com> media: hdmi.h: rename ADOBE_RGB to OPRGB and ADOBE_YCC to OPYCC Hans Verkuil <hverkuil(a)xs4all.nl> media: replace ADOBERGB by OPRGB Hans Verkuil <hansverk(a)cisco.com> media: media colorspaces*.rst: rename AdobeRGB to opRGB Johan Hovold <johan(a)kernel.org> drm/mediatek: fix OF sibling-node lookup Hans Verkuil <hans.verkuil(a)cisco.com> media: adv7842: when the EDID is cleared, unconfigure CEC as well Hans Verkuil <hans.verkuil(a)cisco.com> media: adv7604: when the EDID is cleared, unconfigure CEC as well Mauro Carvalho Chehab <mchehab+samsung(a)kernel.org> media: em28xx: fix handler for vidioc_s_input() Mauro Carvalho Chehab <mchehab+samsung(a)kernel.org> media: em28xx: make v4l2-compliance happier by starting sequence on zero Mauro Carvalho Chehab <mchehab+samsung(a)kernel.org> media: em28xx: fix input name for Terratec AV 350 Mauro Carvalho Chehab <mchehab+samsung(a)kernel.org> media: tvp5150: avoid going past array on v4l2_querymenu() Mauro Carvalho Chehab <mchehab+samsung(a)kernel.org> media: em28xx: use a default format if TRY_FMT fails Hans Verkuil <hverkuil(a)xs4all.nl> media: cec: forgot to cancel delayed work Hans Verkuil <hans.verkuil(a)cisco.com> media: cec: fix the Signal Free Time calculation Hans Verkuil <hans.verkuil(a)cisco.com> media: cec: add new tx/rx status bits to detect aborts/timeouts Manjunath Patil <manjunath.b.patil(a)oracle.com> xen-blkfront: fix kernel panic with negotiate_mq error path Juergen Gross <jgross(a)suse.com> xen: remove size limit of privcmd-buf mapping interface Juergen Gross <jgross(a)suse.com> xen: fix xen_qlock_wait() Hans Verkuil <hans.verkuil(a)cisco.com> media: cec: integrate cec_validate_phys_addr() in cec-api.c Hans Verkuil <hans.verkuil(a)cisco.com> media: cec: make cec_get_edid_spa_location() an inline function Bjorn Andersson <bjorn.andersson(a)linaro.org> remoteproc: qcom: q6v5: Propagate EPROBE_DEFER He Zhe <zhe.he(a)windriver.com> kgdboc: Passing ekgdboc to command line causes panic Mauro Carvalho Chehab <mchehab+samsung(a)kernel.org> Revert "media: dvbsky: use just one mutex for serializing device R/W ops" Hans Verkuil <hverkuil(a)xs4all.nl> media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD Johan Hovold <johan(a)kernel.org> net: bcmgenet: fix OF child-node lookup Maciej W. Rozycki <macro(a)linux-mips.org> TC: Set DMA masks for devices Will Deacon <will.deacon(a)arm.com> iommu/arm-smmu: Ensure that page-table updates are visible before TLBI Christophe Lombard <clombard(a)linux.vnet.ibm.com> ocxl: Fix access to the AFU Descriptor Data Johan Hovold <johan(a)kernel.org> power: supply: twl4030-charger: fix OF sibling-node lookup Maciej W. Rozycki <macro(a)linux-mips.org> rtc: cmos: Remove the `use_acpi_alarm' module parameter for !ACPI Maciej W. Rozycki <macro(a)linux-mips.org> rtc: cmos: Fix non-ACPI undefined reference to `hpet_rtc_interrupt' Soeren Moch <smoch(a)web.de> rtc: ds1307: fix ds1339 wakealarm support Aaro Koskinen <aaro.koskinen(a)iki.fi> MIPS: OCTEON: fix out of bounds array access on CN68XX Nicholas Piggin <npiggin(a)gmail.com> powerpc/64s/hash: Do not use PPC_INVALIDATE_ERAT on CPUs before POWER9 Michael Neuling <mikey(a)neuling.org> powerpc/tm: Fix HFSCR bit for no suspend case Christophe Leroy <christophe.leroy(a)c-s.fr> powerpc/msi: Fix compile error on mpc83xx Naveen N. Rao <naveen.n.rao(a)linux.vnet.ibm.com> powerpc64/module elfv1: Set opd addresses after module relocation Jan Kara <jack(a)suse.cz> fsnotify: Fix busy inodes during unmount Lubomir Rintel <lkundrak(a)v3.sk> media: ov7670: make "xclk" clock optional Damien Le Moal <damien.lemoal(a)wdc.com> dm zoned: fix various dmz_get_mblock() issues Damien Le Moal <damien.lemoal(a)wdc.com> dm zoned: fix metadata block ref counting Wenwen Wang <wang6495(a)umn.edu> dm ioctl: harden copy_params()'s copy_from_user() from malicious users Amir Goldstein <amir73il(a)gmail.com> lockd: fix access beyond unterminated strings in prints Trond Myklebust <trondmy(a)gmail.com> nfsd: Fix an Oops in free_session() Andrew Elble <aweits(a)rit.edu> nfsd: correctly decrement odstate refcount in error path Benjamin Coddington <bcodding(a)redhat.com> nfs: Fix a missed page unlock after pg_doio() Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4.1: Fix the r/wsize checking Johan Hovold <johan(a)kernel.org> NFC: nfcmrvl_uart: fix OF child-node lookup Jarkko Sakkinen <jarkko.sakkinen(a)linux.intel.com> tpm: fix response size validation in tpm_get_random() Lukas Wunner <lukas(a)wunner.de> genirq: Fix race on spurious interrupt detection He Zhe <zhe.he(a)windriver.com> printk: Fix panic caused by passing log_buf_len to command line Steve French <stfrench(a)microsoft.com> smb3: on kerberos mount if server doesn't specify auth type use krb5 Steve French <stfrench(a)microsoft.com> smb3: do not attempt cifs operation in smb3 query info error path Steve French <stfrench(a)microsoft.com> smb3: allow stats which track session and share reconnects to be reset Andreas Kemnade <andreas(a)kemnade.info> w1: omap-hdq: fix missing bus unregister at removal Eugen Hristev <eugen.hristev(a)microchip.com> iio: adc: at91: fix wrong channel number in triggered buffer mode Eugen Hristev <eugen.hristev(a)microchip.com> iio: adc: at91: fix acking DRDY irq on simple conversions Alexey Khoroshilov <khoroshilov(a)ispras.ru> iio: adc: imx25-gcq: Fix leak of device_node in mx25_gcq_setup_cfgs() Lars-Peter Clausen <lars(a)metafoo.de> iio: ad5064: Fix regulator handling Arnd Bergmann <arnd(a)arndb.de> kbuild: fix kernel/bounds.c 'W=1' warning Mark Rutland <mark.rutland(a)arm.com> KVM: arm64: Fix caching of host MDCR_EL2 value Punit Agrawal <punit.agrawal(a)arm.com> KVM: arm/arm64: Ensure only THP is candidate for adjustment Ralph Campbell <rcampbell(a)nvidia.com> mm/hmm: fix race between hmm_mirror_unregister() and mmu_notifier callback Ralph Campbell <rcampbell(a)nvidia.com> mm/rmap: map_pte() was not handling private ZONE_DEVICE page properly Mike Kravetz <mike.kravetz(a)oracle.com> hugetlbfs: dirty pages as they are added to pagecache Goldwyn Rodrigues <rgoldwyn(a)suse.de> ima: open a new file instance if no read permissions Eric Biggers <ebiggers(a)google.com> ima: fix showing large 'violations' or 'runtime_measurements_count' Christoph Hellwig <hch(a)lst.de> userfaultfd: disable irqs when taking the waitqueue lock Vlastimil Babka <vbabka(a)suse.cz> mm: /proc/pid/smaps_rollup: fix NULL pointer deref in smaps_pte_range() Jason A. Donenfeld <Jason(a)zx2c4.com> crypto: speck - remove Speck Ard Biesheuvel <ard.biesheuvel(a)linaro.org> crypto: aegis/generic - fix for big endian systems Ard Biesheuvel <ard.biesheuvel(a)linaro.org> crypto: morus/generic - fix for big endian systems Mikulas Patocka <mpatocka(a)redhat.com> crypto: aesni - don't use GFP_ATOMIC allocation if the request doesn't cross a page in gcm Horia Geantă <horia.geanta(a)nxp.com> crypto: tcrypt - fix ghash-generic speed test Ondrej Mosnacek <omosnace(a)redhat.com> crypto: lrw - Fix out-of bounds access on counter overflow Eric W. Biederman <ebiederm(a)xmission.com> signal: Guard against negative signal numbers in copy_siginfo_from_user32 Eric W. Biederman <ebiederm(a)xmission.com> signal/GenWQE: Fix sending of SIGKILL Bin Meng <bmeng.cn(a)gmail.com> PCI: Add Device IDs for Intel GPU "spurious interrupt" quirk Lukas Wunner <lukas(a)wunner.de> PCI/ASPM: Fix link_state teardown on device removal Vignesh R <vigneshr(a)ti.com> ARM: dts: dra7: Fix up unaligned access setting for PCIe EP Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC, skx_edac: Fix logical channel intermediate decoding Tony Luck <tony.luck(a)intel.com> EDAC, {i7core,sb,skx}_edac: Fix uncorrected error counting Michael Jin <mikhail.jin(a)gmail.com> EDAC, amd64: Add Family 17h, models 10h-2fh support Breno Leitao <leitao(a)debian.org> HID: hiddev: fix potential Spectre v1 Jason Gerecke <killertofu(a)gmail.com> HID: wacom: Work around HID descriptor bug in DTK-2451 and DTH-2452 Stephen Smalley <sds(a)tycho.nsa.gov> selinux: fix mounting of cgroup2 under older policies Theodore Ts'o <tytso(a)mit.edu> ext4: fix use-after-free race in ext4_remount()'s error path Wang Shilong <wshilong(a)ddn.com> ext4: propagate error from dquot_initialize() in EXT4_IOC_FSSETXATTR Wang Shilong <wangshilong1991(a)gmail.com> ext4: fix setattr project check in fssetxattr ioctl Lukas Czerner <lczerner(a)redhat.com> ext4: initialize retries variable in ext4_da_write_inline_data_begin() Theodore Ts'o <tytso(a)mit.edu> ext4: fix EXT4_IOC_SWAP_BOOT Al Viro <viro(a)zeniv.linux.org.uk> gfs2_meta: ->mount() can get NULL dev_name Jan Kara <jack(a)suse.cz> jbd2: fix use after free in jbd2_log_do_checkpoint() Jason Gunthorpe <jgg(a)ziepe.ca> IB/rxe: Revise the ib_wr_opcode enum Artemy Kovalyov <artemyko(a)mellanox.com> IB/mlx5: Fix MR cache initialization Daniel Mack <daniel(a)zonque.org> ASoC: sta32x: set ->component pointer in private struct Takashi Iwai <tiwai(a)suse.de> ASoC: intel: skylake: Add missing break in skl_tplg_get_token() Dan Williams <dan.j.williams(a)intel.com> libnvdimm, pmem: Fix badblocks population for 'raw' namespaces Dan Williams <dan.j.williams(a)intel.com> libnvdimm, region: Fail badblocks listing for inactive regions Alexander Duyck <alexander.h.duyck(a)linux.intel.com> libnvdimm: Hold reference on parent while scheduling async init Nicholas Bellinger <nab(a)linux-iscsi.org> scsi: target: Fix target_wait_for_sess_cmds breakage with active signals Nicholas Bellinger <nab(a)linux-iscsi.org> scsi: sched/wait: Add wait_event_lock_irq_timeout for TASK_UNINTERRUPTIBLE usage Christian Lamparter <chunkeey(a)gmail.com> dmaengine: ppc4xx: fix off-by-one build failure Stefan Nuernberger <snu(a)amazon.com> net/ipv4: defensive cipso option parsing Luca Coelho <luciano.coelho(a)intel.com> iwlwifi: mvm: check return value of rs_rate_from_ucode_rate() Felix Fietkau <nbd(a)nbd.name> mt76: mt76x2: fix multi-interface beacon configuration Yoshihiro Shimoda <yoshihiro.shimoda.uh(a)renesas.com> usb: gadget: udc: renesas_usb3: Fix b-device mode for "workaround" Adam Thomson <Adam.Thomson.Opensource(a)diasemi.com> usb: typec: tcpm: Fix APDO PPS order checking to be based on voltage Shuah Khan (Samsung OSG) <shuah(a)kernel.org> usbip:vudc: BUG kmalloc-2048 (Not tainted): Poison overwritten Lubomir Rintel <lkundrak(a)v3.sk> libertas: don't set URB_ZERO_PACKET on IN USB transfer Juergen Gross <jgross(a)suse.com> xen/pvh: don't try to unplug emulated devices Roger Pau Monne <roger.pau(a)citrix.com> xen/pvh: increase early stack size Juergen Gross <jgross(a)suse.com> xen: make xen_qlock_wait() nestable Juergen Gross <jgross(a)suse.com> xen: fix race in xen_qlock_wait() Boris Ostrovsky <boris.ostrovsky(a)oracle.com> xen/balloon: Support xend-based toolstack Vasilis Liaskovitis <vliaskovitis(a)suse.com> xen/blkfront: avoid NULL blkfront_info dereference on device removal Dr. Greg Wettstein <greg(a)wind.enjellic.com> tpm: Restore functionality to xen vtpm driver. Joe Jin <joe.jin(a)oracle.com> xen-swiotlb: use actually allocated size on check physical continuous Marek Szyprowski <m.szyprowski(a)samsung.com> ARM: dts: exynos: Mark 1 GHz CPU OPP as suspend OPP on Exynos5250 Marek Szyprowski <m.szyprowski(a)samsung.com> ARM: dts: exynos: Convert exynos5250.dtsi to opp-v2 bindings Viresh Kumar <viresh.kumar(a)linaro.org> OPP: Free OPP table properly on performance state irregularities Chao Yu <yuchao0(a)huawei.com> f2fs: fix to account IO correctly Chao Yu <yuchao0(a)huawei.com> f2fs: fix to recover cold bit of inode block during POR Jaegeuk Kim <jaegeuk(a)kernel.org> f2fs: fix missing up_read Jaegeuk Kim <jaegeuk(a)kernel.org> Revert "f2fs: fix to clear PG_checked flag in set_page_dirty()" Prarit Bhargava <prarit(a)redhat.com> cpupower: Fix AMD Family 0x17 msr_pstate size Takashi Iwai <tiwai(a)suse.de> ALSA: hda: Check the non-cached stream buffers more explicitly Vijay Immanuel <vijayi(a)attalasystems.com> IB/rxe: fix for duplicate request processing and ack psns Paul Cercueil <paul(a)crapouillou.net> dmaengine: dma-jz4780: Return error if not probed from DT Alexandre Belloni <alexandre.belloni(a)bootlin.com> mfd: menelaus: Fix possible race condition and leak Chao Yu <yuchao0(a)huawei.com> f2fs: fix to flush all dirty inodes recovered in readonly fs Eric W. Biederman <ebiederm(a)xmission.com> signal: Always deliver the kernel's SIGKILL and SIGSTOP to a pid namespace init Yunlei He <heyunlei(a)huawei.com> f2fs: report error if quota off error during umount Zhikang Zhang <zhangzhikang1(a)huawei.com> f2fs: avoid sleeping under spin_lock James Smart <jsmart2021(a)gmail.com> scsi: lpfc: Correct race with abort on completion path James Smart <jsmart2021(a)gmail.com> scsi: lpfc: Correct soft lockup when running mds diagnostics Alexandre Belloni <alexandre.belloni(a)bootlin.com> uio: ensure class is registered before devices Moni Shoua <monis(a)mellanox.com> IB/mlx5: Allow transition of DCI QP to reset Arseny Maslennikov <ar(a)cs.msu.ru> IB/ipoib: Use dev_port to expose network interface port numbers Stephen Boyd <swboyd(a)chromium.org> firmware: coreboot: Unmap ioregion after device population Akshu Agrawal <akshu.agrawal(a)amd.com> ASoC: AMD: Fix capture unstable in beginning for some runs Waiman Long <longman(a)redhat.com> driver/dma/ioat: Call del_timer_sync() without holding prep_lock Casey Schaufler <casey.schaufler(a)intel.com> Smack: ptrace capability use fixes Loic Poulain <loic.poulain(a)linaro.org> usb: chipidea: Prevent unbalanced IRQ disable Horia Geantă <horia.geanta(a)nxp.com> crypto: caam - fix implicit casts in endianness helpers Vignesh R <vigneshr(a)ti.com> PCI: dwc: pci-dra7xx: Enable errata i870 for both EP and RC mode Suzuki K Poulose <suzuki.poulose(a)arm.com> coresight: etb10: Fix handling of perf mode Tonghao Zhang <xiangxia.m.yue(a)gmail.com> PCI/MSI: Warn and return error if driver enables MSI/MSI-X twice Chao Yu <yuchao0(a)huawei.com> f2fs: fix to recover inode's i_flags during POR Chao Yu <yuchao0(a)huawei.com> f2fs: fix to recover inode's crtime during POR Quinn Tran <quinn.tran(a)cavium.com> scsi: qla2xxx: Fix recursive mailbox timeout Anshuman Gupta <anshuman.gupta(a)intel.com> xhci: Avoid USB autosuspend when resuming USB2 ports. Bartosz Golaszewski <bgolaszewski(a)baylibre.com> nvmem: check the return value of nvmem_add_cells() Alan Douglas <adouglas(a)cadence.com> PCI: cadence: Correct probe behaviour when failing to get PHY Shaohua Li <shli(a)fb.com> MD: fix invalid stored role for a disk Theodore Ts'o <tytso(a)mit.edu> ext4: fix argument checking in EXT4_IOC_MOVE_EXT Alexandre Belloni <alexandre.belloni(a)bootlin.com> usb: gadget: udc: atmel: handle at91sam9rl PMC Fabrice Gasnier <fabrice.gasnier(a)st.com> usb: dwc2: fix a race with external vbus supply Fabrice Gasnier <fabrice.gasnier(a)st.com> usb: dwc2: fix call to vbus supply exit routine, call it unlocked Lina Iyer <ilina(a)codeaurora.org> irqchip/pdc: Setup all edge interrupts as rising edge at GIC Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Reset credit grant properly after a disconnect Mika Westerberg <mika.westerberg(a)linux.intel.com> PCI / ACPI: Enable wake automatically for power managed bridges Jorgen Hansen <jhansen(a)vmware.com> VMCI: Resource wildcard match fixed Dexuan Cui <decui(a)microsoft.com> Drivers: hv: vmbus: Use cpumask_var_t for on-stack cpu mask Jaegeuk Kim <jaegeuk(a)kernel.org> f2fs: clear PageError on the read path Javier Martinez Canillas <javierm(a)redhat.com> tpm: suppress transmit cmd error logs when TPM 1.2 is disabled/deactivated Adam Thomson <Adam.Thomson.Opensource(a)diasemi.com> usb: typec: tcpm: Report back negotiated PPS voltage and current Alan Douglas <adouglas(a)cadence.com> PCI: cadence: Use AXI region 0 to signal interrupts from EP Honghui Zhang <honghui.zhang(a)mediatek.com> PCI: mediatek: Fix mtk_pcie_find_port() endpoint/port matching logic Tudor.Ambarus(a)microchip.com <Tudor.Ambarus(a)microchip.com> usb: host: ohci-at91: fix request of irq for optional gpio Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Fix recursive lock warning in debug kernel Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Avoid accessing nq->bar_reg_iomem in failure case Denis Drozdov <denisd(a)mellanox.com> IB/ipoib: Clear IPCB before icmp_send Leon Romanovsky <leon(a)kernel.org> RDMA/cm: Respect returned status of cm_init_av_by_path Parav Pandit <parav(a)mellanox.com> RDMA/core: Do not expose unsupported counters Wenwen Wang <wang6495(a)umn.edu> scsi: megaraid_sas: fix a missing-check bug Jim Mattson <jmattson(a)google.com> KVM: nVMX: Clear reserved bits of #DB exit qualification David Howells <dhowells(a)redhat.com> UAPI: ndctl: Fix g++-unsupported initialisation in headers Evan Green <evgreen(a)chromium.org> scsi: ufs: Schedule clk gating work on correct queue Finn Thain <fthain(a)telegraphics.com.au> scsi: esp_scsi: Track residual for PIO transfers Rob Herring <robh(a)kernel.org> of: Add missing exports of node name compare functions Jack Wang <jinpu.wang(a)profitbricks.com> md: fix memleak for mempool Xiao Ni <xni(a)redhat.com> MD: Memory leak when flush bio size is zero Chao Yu <yuchao0(a)huawei.com> f2fs: fix to account IO correctly for cgroup writeback Johan Hovold <johan(a)kernel.org> net: stmmac: dwmac-sun8i: fix OF child-node lookup Michal Hocko <mhocko(a)suse.com> cgroup, netclassid: add a preemption point to write_classid Ronnie Sahlberg <lsahlber(a)redhat.com> cifs: fix a credits leak for compund commands Geert Uytterhoeven <geert+renesas(a)glider.be> thermal: da9062/61: Prevent hardware access during system suspend Geert Uytterhoeven <geert+renesas(a)glider.be> thermal: rcar_thermal: Prevent doing work after unbind Diego Viola <diego.viola(a)gmail.com> libata: Apply NOLPM quirk for SAMSUNG MZ7TD256HAFV-000L9 Martin Willi <martin(a)strongswan.org> ath10k: schedule hardware restart if WMI command times out Maya Erez <merez(a)codeaurora.org> wil6210: fix RX buffers release and unmap Sebastian Basierski <sebastianx.basierski(a)intel.com> ixgbevf: VF2VF TCP RSS Shannon Nelson <shannon.nelson(a)oracle.com> ixgbe: disallow IPsec Tx offload when in SR-IOV mode Justin Chen <justinpopo6(a)gmail.com> gpio: brcmstb: allow 0 width GPIO banks Sara Sharon <sara.sharon(a)intel.com> iwlwifi: mvm: fix BAR seq ctrl reporting Dan Carpenter <dan.carpenter(a)oracle.com> libertas_tf: prevent underflow in process_cmdrequest() Siva Rebbagondla <siva.rebbagondla(a)redpinesignals.com> rsi: fix memory alignment issue in ARM32 platforms Lorenzo Bianconi <lorenzo.bianconi(a)redhat.com> mt76x2u: run device cleanup routine if resume fails Andrew Lunn <andrew(a)lunn.ch> net: dsa: mv88e6xxx: Fix writing to a PHY page. Yunsheng Lin <linyunsheng(a)huawei.com> net: hns3: Fix for vf vlan delete failed problem Yunsheng Lin <linyunsheng(a)huawei.com> net: hns3: Fix ping exited problem when doing lp selftest Yunsheng Lin <linyunsheng(a)huawei.com> net: hns3: Preserve vlan 0 in hardware table Douglas Anderson <dianders(a)chromium.org> pinctrl: ssbi-gpio: Fix pm8xxx_pin_config_get() to be compliant Douglas Anderson <dianders(a)chromium.org> pinctrl: spmi-mpp: Fix pmic_mpp_config_get() to be compliant Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tests: Fix record+probe_libc_inet_pton.sh without ping's debuginfo YueHaibing <yuehaibing(a)huawei.com> failover: Add missing check to validate 'slave_dev' in net_failover_slave_unregister Alexei Starovoitov <ast(a)kernel.org> bpf/verifier: fix verifier instability Stephen Boyd <swboyd(a)chromium.org> pinctrl: qcom: spmi-mpp: Fix drive strength setting Hans de Goede <hdegoede(a)redhat.com> ACPI / LPSS: Add alternative ACPI HIDs for Cherry Trail DMA controllers Linus Walleij <linus.walleij(a)linaro.org> spi: gpio: No MISO does not imply no RX Masami Hiramatsu <mhiramat(a)kernel.org> kprobes: Return error if we fail to reuse kprobe instead of BUG_ON() Will Deacon <will.deacon(a)arm.com> arm64: entry: Allow handling of undefined instructions from EL1 Paolo Valente <paolo.valente(a)linaro.org> block, bfq: correctly charge and reset entity service in all cases Antoine Tenart <antoine.tenart(a)bootlin.com> net: phy: phylink: ensure the carrier is off when starting phylink Fuyun Liang <liangfuyun1(a)huawei.com> net: hns3: Set STATE_DOWN bit of hdev state when stopping net Peng Li <lipeng321(a)huawei.com> net: hns3: Check hdev state when getting link status Arend van Spriel <arend.vanspriel(a)broadcom.com> brcmfmac: fix for proper support of 160MHz bandwidth YueHaibing <yuehaibing(a)huawei.com> pinctrl: qcom: spmi-mpp: Fix err handling of pmic_mpp_set_mux YueHaibing <yuehaibing(a)huawei.com> pinctrl: sunxi: fix 'pctrl->functions' allocation in sunxi_pinctrl_build_state Jian Shen <shenjian15(a)huawei.com> net: hns3: Fix ets validate issue Jian Shen <shenjian15(a)huawei.com> net: hns3: Add nic state check before calling netif_tx_wake_queue Ben Hutchings <ben(a)decadent.org.uk> x86: boot: Fix EFI stub alignment Hans de Goede <hdegoede(a)redhat.com> efi/x86: Call efi_parse_options() from efi_main() Balakrishna Godavarthi <bgodavar(a)codeaurora.org> Bluetooth: hci_qca: Remove hdev dereference in qca_close(). Christian Hewitt <christianshewitt(a)gmail.com> Bluetooth: btbcm: Add entry for BCM4335C0 UART bluetooth Yunsheng Lin <linyunsheng(a)huawei.com> net: hns3: Fix for packet buffer setting bug Jacob Keller <jacob.e.keller(a)intel.com> ice: update fw version check logic Bruce Allan <bruce.w.allan(a)intel.com> ice: fix changing of ring descriptor size (ethtool -G) Will Deacon <will.deacon(a)arm.com> signal: Introduce COMPAT_SIGMINSTKSZ for use in compat_sys_sigaltstack Rakesh Pillai <pillair(a)codeaurora.org> ath10k: fix tx status flag setting for management frames James Smart <jsmart2021(a)gmail.com> nvme: call nvme_complete_rq when nvmf_check_ready fails for mpath I/O Gustavo A. R. Silva <gustavo(a)embeddedor.com> mtd: rawnand: atmel: Fix potential NULL pointer dereference Xiaochen Shen <xiaochen.shen(a)intel.com> x86/intel_rdt: Show missing resctrl mount options Viresh Kumar <viresh.kumar(a)linaro.org> cpufreq: dt: Try freeing static OPPs only if we have added them Dou Liyang <douly.fnst(a)cn.fujitsu.com> ACPI / processor: Fix the return value of acpi_processor_ids_walk() Rajneesh Bhardwaj <rajneesh.bhardwaj(a)linux.intel.com> ACPI / PM: LPIT: Register sysfs attributes based on FADT Jeffrey Hugo <jhugo(a)codeaurora.org> ACPI/PPTT: Handle architecturally unknown cache types Sagi Grimberg <sagi(a)grimberg.me> nvmet-rdma: use a private workqueue for delete Tony Lindgren <tony(a)atomide.com> wlcore: Fix BUG with clear completion on timeout Lubomir Rintel <lkundrak(a)v3.sk> x86/olpc: Indicate that legacy PC XO-1 platform should not register RTC Luca Coelho <luciano.coelho(a)intel.com> iwlwifi: mvm: check for n_profiles validity in EWRD ACPI Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> iwlwifi: mvm: clear HW_RESTART_REQUESTED when stopping the interface Shaul Triebitz <shaul.triebitz(a)intel.com> iwlwifi: pcie: avoid empty free RB queue Masahiro Yamada <yamada.masahiro(a)socionext.com> mtd: rawnand: denali: set SPARE_AREA_SKIP_BYTES register to 8 if unset Wang Dongsheng <dongsheng.wang(a)hxt-semitech.com> sdhci: acpi: add free_slot callback Yu Zhao <yuzhao(a)google.com> mmc: sdhci-pci-o2micro: Add quirk for O2 Micro dev 0x8620 rev 0x01 Ben Peddell <klightspeed(a)killerwolves.net> bcache: Populate writeback_rate_minimum attribute Prarit Bhargava <prarit(a)redhat.com> cpupower: Fix coredump on VMWare Sanskriti Sharma <sansharm(a)redhat.com> perf strbuf: Match va_{add,copy} with va_end Sanskriti Sharma <sansharm(a)redhat.com> perf tools: Free 'printk' string in parse_ftrace_printk() Sanskriti Sharma <sansharm(a)redhat.com> perf tools: Cleanup trace-event-info 'tdata' leak Sanskriti Sharma <sansharm(a)redhat.com> perf tools: Free temporary 'sys' string in read_event_files() Nathan Chancellor <natechancellor(a)gmail.com> spi: spi-ep93xx: Use dma_data_direction for ep93xx_spi_dma_{finish,prepare} Javier González <javier(a)cnexlabs.com> lightnvm: pblk: fix race condition on metadata I/O Jia-Ju Bai <baijiaju1990(a)gmail.com> lightnvm: pblk: fix two sleep-in-atomic-context bugs Javier González <javier(a)cnexlabs.com> lightnvm: pblk: fix race on sysfs line state Thierry Reding <treding(a)nvidia.com> hwmon: (pwm-fan) Set fan speed to 0 on suspend Janosch Frank <frankja(a)linux.ibm.com> s390/sthyi: Fix machine name validity indication Serhey Popovych <serhe.popovych(a)gmail.com> tun: Consistently configure generic netdev params via rtnetlink Ryan C Goodfellow <rgoodfel(a)isi.edu> nfp: devlink port split support for 1x100G CXP NIC Haiyang Zhang <haiyangz(a)microsoft.com> hv_netvsc: fix vf serial matching with pci slot info Suzuki K Poulose <suzuki.poulose(a)arm.com> arm64: cpufeature: ctr: Fix cpu capability check for late CPUs Omar Sandoval <osandov(a)fb.com> swim: fix cleanup on setup error Omar Sandoval <osandov(a)fb.com> ataflop: fix error handling during setup Paolo Abeni <pabeni(a)redhat.com> netfilter: xt_nat: fix DNAT target for shifted portmap ranges Waiman Long <longman(a)redhat.com> locking/lockdep: Fix debug_locks off performance problem Eric Dumazet <edumazet(a)google.com> net: loopback: clear skb->tstamp before netif_rx() Masahisa Kojima <masahisa.kojima(a)linaro.org> net: socionext: Reset tx queue in ndo_stop Marek Szyprowski <m.szyprowski(a)samsung.com> ARM: dts: exynos: Disable pull control for MAX8997 interrupts on Origen Dave Jiang <dave.jiang(a)intel.com> x86/numa_emulation: Fix uniform-split numa emulation Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> x86/mm/pat: Disable preemption around __flush_tlb_all() Vitaly Kuznetsov <vkuznets(a)redhat.com> x86/kvm/nVMX: allow bare VMXON state migration He Zhe <zhe.he(a)windriver.com> x86/corruption-check: Fix panic in memory_corruption_check() when boot option without value is provided Juergen Gross <jgross(a)suse.com> x86/xen: Fix boot loader version reported for PVH guests Jiri Kosina <jkosina(a)suse.cz> x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation Takashi Iwai <tiwai(a)suse.de> ALSA: hda - Fix incorrect clearance of thinkpad_acpi hooks Alex Stanoev <alex(a)astanoev.com> ALSA: ca0106: Disable IZD on SB0570 DAC to fix audio pops Hans de Goede <hdegoede(a)redhat.com> ALSA: hda: Add 2 more models to the power_save blacklist Jeremy Cline <jcline(a)redhat.com> ALSA: hda - Add mic quirk for the Lenovo G50-30 (17aa:3905) Hui Wang <hui.wang(a)canonical.com> ALSA: hda/realtek - Fix the problem of the front MIC on the Lenovo M715 Takashi Iwai <tiwai(a)suse.de> ALSA: hda - Fix headphone pin config for ASUS G751 Takashi Iwai <tiwai(a)suse.de> ALSA: hda - Add quirk for ASUS G751 laptop Helge Deller <deller(a)gmx.de> parisc: Fix exported address of os_hpmc handler Helge Deller <deller(a)gmx.de> parisc: Fix map_pages() to not overwrite existing pte entries John David Anglin <dave.anglin(a)bell.net> parisc: Fix address in HPMC IVA David Arcari <darcari(a)redhat.com> mailbox: PCC: handle parse error Jan Glauber <jglauber(a)cavium.com> ipmi: Fix timer race with module unload Masami Hiramatsu <mhiramat(a)kernel.org> kprobes/x86: Use preempt_enable() in optimized_callback() Dan Williams <dan.j.williams(a)intel.com> acpi, nfit: Fix Address Range Scrub completion tracking Erik Schmauss <erik.schmauss(a)intel.com> ACPICA: AML Parser: fix parse loop to correctly skip erroneous extended opcodes Erik Schmauss <erik.schmauss(a)intel.com> ACPICA: AML interpreter: add region addresses in global list during initialization Bart Van Assche <bvanassche(a)acm.org> ACPI / OSL: Use 'jiffies' as the time bassis for acpi_os_get_timer() Maciej S. Szmigiero <mail(a)maciej.szmigiero.name> pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges He Zhe <zhe.he(a)windriver.com> dma-mapping: fix panic caused by passing empty cma command line argument Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpufreq: conservative: Take limits changes into account properly Ming Lei <ming.lei(a)redhat.com> block: make sure writesame bio is aligned with logical block size Ming Lei <ming.lei(a)redhat.com> block: make sure discard bio is aligned with logical block size Jens Axboe <axboe(a)kernel.dk> block: setup bounce bio_sets properly Hou Tao <houtao1(a)huawei.com> jffs2: free jffs2_sb_info through jffs2_kill_sb() Dmitry Bazhenov <bazhenov.dn(a)gmail.com> hwmon: (pmbus) Fix page count auto-detection. Tang Junhui <tang.junhui.linux(a)gmail.com> bcache: fix miss key refill->end in writeback Tang Junhui <tang.junhui.linux(a)gmail.com> bcache: correct dirty data statistics Tang Junhui <tang.junhui.linux(a)gmail.com> bcache: fix ioctl in flash device Tang Junhui <tang.junhui.linux(a)gmail.com> bcache: trace missed reading by cache_missed Rafał Miłecki <rafal(a)milecki.pl> spi: bcm-qspi: fix calculation of address length Rafał Miłecki <rafal(a)milecki.pl> spi: bcm-qspi: switch back to reading flash using smaller chunks Chuanhua Han <chuanhua.han(a)nxp.com> spi: spi-mem: Adjust op len based on message/transfer size limitations Ahmad Fatoum <a.fatoum(a)pengutronix.de> mtd: spi-nor: fsl-quadspi: Don't let -EINVAL on the bus Mika Westerberg <mika.westerberg(a)linux.intel.com> mtd: spi-nor: intel-spi: Add support for Intel Ice Lake SPI serial flash Liu Xiang <liu.xiang6(a)zte.com.cn> mtd: spi-nor: fsl-quadspi: fix read error for flash size larger than 16MB Ricardo Ribalda Delgado <ricardo.ribalda(a)gmail.com> mtd: maps: gpio-addr-flash: Fix ioremapped size Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: rawnand: marvell: fix the IRQ handler complete() condition Linus Walleij <linus.walleij(a)linaro.org> gpio: mxs: Get rid of external API call Huacai Chen <chenhc(a)lemote.com> MIPS: VDSO: Reduce VDSO_RANDOMIZE_SIZE to 64MB for 64bit Daniel Borkmann <daniel(a)iogearbox.net> bpf: fix partial copy of map_ptr when dst is scalar ------------- Diffstat: Documentation/filesystems/fscrypt.rst | 10 - Documentation/media/uapi/cec/cec-ioc-receive.rst | 25 +- Documentation/media/uapi/v4l/biblio.rst | 10 - Documentation/media/uapi/v4l/colorspaces-defs.rst | 8 +- .../media/uapi/v4l/colorspaces-details.rst | 13 +- Documentation/media/videodev2.h.rst.exceptions | 6 +- Makefile | 4 +- arch/arm/boot/dts/dra7.dtsi | 2 +- arch/arm/boot/dts/exynos4210-origen.dts | 9 + arch/arm/boot/dts/exynos5250.dtsi | 131 ++-- arch/arm/boot/dts/socfpga_arria10.dtsi | 2 +- arch/arm/crypto/Kconfig | 6 - arch/arm/crypto/Makefile | 2 - arch/arm/crypto/speck-neon-core.S | 434 ------------ arch/arm/crypto/speck-neon-glue.c | 288 -------- arch/arm64/boot/dts/altera/socfpga_stratix10.dtsi | 2 +- arch/arm64/crypto/Kconfig | 6 - arch/arm64/crypto/Makefile | 3 - arch/arm64/crypto/speck-neon-core.S | 352 ---------- arch/arm64/crypto/speck-neon-glue.c | 282 -------- arch/arm64/kernel/cpufeature.c | 22 +- arch/arm64/kernel/entry.S | 2 +- arch/arm64/kernel/traps.c | 11 +- arch/arm64/lib/Makefile | 2 +- arch/m68k/configs/amiga_defconfig | 1 - arch/m68k/configs/apollo_defconfig | 1 - arch/m68k/configs/atari_defconfig | 1 - arch/m68k/configs/bvme6000_defconfig | 1 - arch/m68k/configs/hp300_defconfig | 1 - arch/m68k/configs/mac_defconfig | 1 - arch/m68k/configs/multi_defconfig | 1 - arch/m68k/configs/mvme147_defconfig | 1 - arch/m68k/configs/mvme16x_defconfig | 1 - arch/m68k/configs/q40_defconfig | 1 - arch/m68k/configs/sun3_defconfig | 1 - arch/m68k/configs/sun3x_defconfig | 1 - arch/mips/cavium-octeon/executive/cvmx-helper.c | 2 +- arch/mips/include/asm/processor.h | 2 +- arch/parisc/kernel/entry.S | 2 +- arch/parisc/kernel/hpmc.S | 3 +- arch/parisc/kernel/traps.c | 3 +- arch/parisc/mm/init.c | 8 +- arch/powerpc/include/asm/mpic.h | 7 + arch/powerpc/kernel/mce_power.c | 7 + arch/powerpc/kernel/module.c | 8 + arch/powerpc/kernel/module_64.c | 5 - arch/powerpc/kernel/setup_64.c | 18 +- arch/powerpc/mm/hash_native_64.c | 4 +- arch/s390/defconfig | 1 - arch/s390/kernel/sthyi.c | 8 +- arch/x86/boot/compressed/eboot.c | 10 + arch/x86/boot/tools/build.c | 7 + arch/x86/crypto/aesni-intel_glue.c | 2 +- arch/x86/include/asm/kvm_host.h | 1 + arch/x86/include/asm/tlbflush.h | 6 + arch/x86/kernel/check.c | 15 + arch/x86/kernel/cpu/bugs.c | 57 +- arch/x86/kernel/cpu/intel_rdt_rdtgroup.c | 7 + arch/x86/kernel/kprobes/opt.c | 2 +- arch/x86/kvm/vmx.c | 22 +- arch/x86/mm/numa_emulation.c | 12 +- arch/x86/mm/pageattr.c | 6 +- arch/x86/platform/olpc/olpc-xo1-rtc.c | 3 + arch/x86/xen/enlighten_pvh.c | 2 +- arch/x86/xen/platform-pci-unplug.c | 4 + arch/x86/xen/spinlock.c | 35 +- arch/x86/xen/xen-pvh.S | 2 +- block/bfq-wf2q.c | 13 +- block/blk-lib.c | 5 +- block/blk-merge.c | 3 +- block/blk.h | 10 + block/bounce.c | 37 +- crypto/Kconfig | 14 - crypto/Makefile | 1 - crypto/aegis.h | 20 +- crypto/lrw.c | 7 +- crypto/morus1280.c | 7 +- crypto/morus640.c | 16 +- crypto/speck.c | 307 --------- crypto/tcrypt.c | 3 + crypto/testmgr.c | 24 - crypto/testmgr.h | 738 --------------------- drivers/acpi/acpi_lpit.c | 6 + drivers/acpi/acpi_lpss.c | 2 + drivers/acpi/acpi_processor.c | 7 +- drivers/acpi/acpica/dsopcode.c | 4 + drivers/acpi/acpica/psloop.c | 14 +- drivers/acpi/nfit/core.c | 169 +++-- drivers/acpi/nfit/nfit.h | 10 +- drivers/acpi/osl.c | 15 +- drivers/acpi/pptt.c | 33 +- drivers/ata/libata-core.c | 1 + drivers/block/ataflop.c | 25 +- drivers/block/swim.c | 13 +- drivers/block/xen-blkfront.c | 4 + drivers/bluetooth/btbcm.c | 1 + drivers/bluetooth/hci_qca.c | 15 +- drivers/char/ipmi/ipmi_ssif.c | 10 +- drivers/char/tpm/tpm-interface.c | 6 +- drivers/char/tpm/tpm2-cmd.c | 4 +- drivers/char/tpm/xen-tpmfront.c | 2 +- drivers/cpufreq/cpufreq-dt.c | 34 +- drivers/cpufreq/cpufreq_conservative.c | 6 +- drivers/crypto/caam/regs.h | 28 +- drivers/dma/dma-jz4780.c | 5 + drivers/dma/ioat/init.c | 9 +- drivers/dma/ppc4xx/adma.c | 2 +- drivers/edac/amd64_edac.c | 14 + drivers/edac/amd64_edac.h | 3 + drivers/edac/i7core_edac.c | 1 + drivers/edac/sb_edac.c | 1 + drivers/edac/skx_edac.c | 3 +- drivers/firmware/google/coreboot_table.c | 7 +- drivers/gpio/gpio-brcmstb.c | 15 +- drivers/gpio/gpio-mxs.c | 4 +- drivers/gpu/drm/mediatek/mtk_hdmi.c | 5 +- drivers/gpu/vga/vga_switcheroo.c | 3 + drivers/hid/usbhid/hiddev.c | 18 +- drivers/hid/wacom_wac.c | 19 + drivers/hv/channel_mgmt.c | 14 +- drivers/hwmon/pmbus/pmbus.c | 2 + drivers/hwmon/pmbus/pmbus_core.c | 5 +- drivers/hwmon/pwm-fan.c | 12 +- drivers/hwtracing/coresight/coresight-etb10.c | 4 + drivers/iio/adc/at91_adc.c | 6 +- drivers/iio/adc/fsl-imx25-gcq.c | 6 + drivers/iio/dac/ad5064.c | 53 +- drivers/infiniband/core/cm.c | 7 +- drivers/infiniband/core/sysfs.c | 19 +- drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3 +- drivers/infiniband/hw/bnxt_re/qplib_rcfw.c | 13 +- drivers/infiniband/hw/mlx5/mr.c | 2 +- drivers/infiniband/hw/mlx5/qp.c | 4 +- drivers/infiniband/sw/rxe/rxe_resp.c | 8 +- drivers/infiniband/sw/rxe/rxe_verbs.h | 2 + drivers/infiniband/ulp/ipoib/ipoib_cm.c | 8 +- drivers/infiniband/ulp/ipoib/ipoib_main.c | 2 + drivers/iommu/arm-smmu.c | 6 + drivers/irqchip/qcom-pdc.c | 1 + drivers/lightnvm/pblk-core.c | 5 +- drivers/lightnvm/pblk-recovery.c | 6 +- drivers/lightnvm/pblk-sysfs.c | 8 +- drivers/lightnvm/pblk-write.c | 14 +- drivers/mailbox/pcc.c | 7 +- drivers/md/bcache/btree.c | 2 +- drivers/md/bcache/request.c | 5 +- drivers/md/bcache/super.c | 7 +- drivers/md/bcache/sysfs.c | 2 + drivers/md/dm-ioctl.c | 18 +- drivers/md/dm-zoned-metadata.c | 80 ++- drivers/md/md.c | 30 +- drivers/media/cec/cec-adap.c | 94 +-- drivers/media/cec/cec-api.c | 19 +- drivers/media/cec/cec-edid.c | 60 -- drivers/media/common/v4l2-tpg/v4l2-tpg-colors.c | 262 ++++---- drivers/media/common/v4l2-tpg/v4l2-tpg-core.c | 2 +- drivers/media/i2c/adv7511.c | 6 +- drivers/media/i2c/adv7604.c | 6 +- drivers/media/i2c/adv7842.c | 4 +- drivers/media/i2c/ov7670.c | 27 +- drivers/media/i2c/tc358743.c | 4 +- drivers/media/i2c/tvp5150.c | 2 +- drivers/media/platform/vivid/vivid-core.h | 2 +- drivers/media/platform/vivid/vivid-ctrls.c | 6 +- drivers/media/platform/vivid/vivid-vid-out.c | 2 +- drivers/media/usb/dvb-usb-v2/dvbsky.c | 16 +- drivers/media/usb/em28xx/em28xx-cards.c | 33 +- drivers/media/usb/em28xx/em28xx-video.c | 92 ++- drivers/media/usb/em28xx/em28xx.h | 8 +- drivers/media/v4l2-core/v4l2-dv-timings.c | 12 +- drivers/mfd/menelaus.c | 13 +- drivers/misc/genwqe/card_base.h | 2 +- drivers/misc/genwqe/card_dev.c | 9 +- drivers/misc/ocxl/config.c | 4 +- drivers/misc/vmw_vmci/vmci_driver.c | 2 +- drivers/misc/vmw_vmci/vmci_resource.c | 3 +- drivers/mmc/host/sdhci-acpi.c | 8 + drivers/mmc/host/sdhci-pci-o2micro.c | 3 + drivers/mtd/maps/gpio-addr-flash.c | 2 +- drivers/mtd/nand/raw/atmel/nand-controller.c | 4 + drivers/mtd/nand/raw/denali.c | 14 +- drivers/mtd/nand/raw/marvell_nand.c | 2 +- drivers/mtd/spi-nor/fsl-quadspi.c | 15 +- drivers/mtd/spi-nor/intel-spi-pci.c | 1 + drivers/net/dsa/mv88e6xxx/phy.c | 3 + drivers/net/ethernet/broadcom/genet/bcmmii.c | 2 +- drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 4 +- drivers/net/ethernet/hisilicon/hns3/hns3_ethtool.c | 4 +- .../net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c | 6 +- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 30 +- .../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 5 + drivers/net/ethernet/intel/ice/ice.h | 4 +- drivers/net/ethernet/intel/ice/ice_controlq.c | 30 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 17 +- drivers/net/ethernet/intel/ixgbe/ixgbe_ipsec.c | 3 + drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 4 + drivers/net/ethernet/netronome/nfp/nfp_devlink.c | 17 +- drivers/net/ethernet/socionext/netsec.c | 3 + drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c | 12 +- drivers/net/hyperv/netvsc_drv.c | 15 +- drivers/net/loopback.c | 4 + drivers/net/net_failover.c | 3 + drivers/net/phy/phylink.c | 3 + drivers/net/tun.c | 2 + drivers/net/wireless/ath/ath10k/wmi.c | 13 +- drivers/net/wireless/ath/wil6210/txrx_edma.c | 15 +- .../net/wireless/broadcom/brcm80211/brcmutil/d11.c | 34 +- .../broadcom/brcm80211/include/brcmu_wifi.h | 2 + drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 8 +- drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 9 +- drivers/net/wireless/intel/iwlwifi/mvm/rs.c | 24 +- drivers/net/wireless/intel/iwlwifi/mvm/tx.c | 9 +- drivers/net/wireless/intel/iwlwifi/pcie/rx.c | 32 +- drivers/net/wireless/marvell/libertas/if_usb.c | 2 - drivers/net/wireless/marvell/libertas_tf/if_usb.c | 5 +- drivers/net/wireless/mediatek/mt76/mt76x2_mac.c | 3 +- drivers/net/wireless/mediatek/mt76/mt76x2_usb.c | 14 +- drivers/net/wireless/rsi/rsi_91x_usb.c | 11 +- drivers/net/wireless/ti/wlcore/main.c | 18 +- drivers/nfc/nfcmrvl/uart.c | 5 +- drivers/nvdimm/bus.c | 4 + drivers/nvdimm/pmem.c | 4 +- drivers/nvdimm/region_devs.c | 11 +- drivers/nvme/host/fabrics.c | 7 +- drivers/nvme/host/multipath.c | 7 + drivers/nvme/target/rdma.c | 19 +- drivers/nvmem/core.c | 10 +- drivers/of/base.c | 2 + drivers/opp/of.c | 1 + drivers/pci/controller/dwc/pci-dra7xx.c | 11 +- drivers/pci/controller/pcie-cadence-ep.c | 11 +- drivers/pci/controller/pcie-cadence.c | 20 +- drivers/pci/controller/pcie-mediatek.c | 11 + drivers/pci/msi.c | 9 +- drivers/pci/pci-acpi.c | 16 +- drivers/pci/pcie/aspm.c | 2 +- drivers/pci/quirks.c | 4 + drivers/pci/remove.c | 4 +- drivers/pcmcia/ricoh.h | 35 + drivers/pcmcia/yenta_socket.c | 3 +- drivers/pinctrl/qcom/pinctrl-spmi-mpp.c | 27 +- drivers/pinctrl/qcom/pinctrl-ssbi-gpio.c | 28 +- drivers/pinctrl/sunxi/pinctrl-sunxi.c | 15 +- drivers/power/supply/twl4030_charger.c | 5 +- drivers/remoteproc/qcom_q6v5.c | 12 + drivers/rpmsg/qcom_smd.c | 7 +- drivers/rtc/rtc-cmos.c | 29 +- drivers/rtc/rtc-ds1307.c | 1 - drivers/scsi/esp_scsi.c | 1 + drivers/scsi/esp_scsi.h | 2 + drivers/scsi/lpfc/lpfc_scsi.c | 14 +- drivers/scsi/lpfc/lpfc_sli.c | 7 + drivers/scsi/mac_esp.c | 2 + drivers/scsi/megaraid/megaraid_sas_base.c | 3 + drivers/scsi/qla2xxx/qla_mbx.c | 2 +- drivers/scsi/ufs/ufshcd.c | 5 +- drivers/soc/qcom/rmtfs_mem.c | 5 + drivers/soc/tegra/pmc.c | 2 +- drivers/spi/spi-bcm-qspi.c | 4 +- drivers/spi/spi-ep93xx.c | 36 +- drivers/spi/spi-gpio.c | 10 +- drivers/spi/spi-mem.c | 15 + drivers/target/target_core_transport.c | 4 +- drivers/tc/tc.c | 8 +- drivers/thermal/da9062-thermal.c | 4 +- drivers/thermal/rcar_thermal.c | 1 + drivers/tty/serial/kgdboc.c | 5 + drivers/tty/vt/vt.c | 2 +- drivers/uio/uio.c | 9 + drivers/usb/chipidea/otg.h | 3 +- drivers/usb/dwc2/hcd.c | 12 +- drivers/usb/gadget/udc/atmel_usba_udc.c | 2 + drivers/usb/gadget/udc/renesas_usb3.c | 3 + drivers/usb/host/ohci-at91.c | 2 + drivers/usb/host/xhci-hub.c | 5 + drivers/usb/host/xhci-ring.c | 1 + drivers/usb/typec/tcpm.c | 10 +- drivers/usb/usbip/vudc_main.c | 10 +- drivers/video/hdmi.c | 8 +- drivers/w1/masters/omap_hdq.c | 2 + drivers/xen/privcmd-buf.c | 22 +- drivers/xen/swiotlb-xen.c | 6 + drivers/xen/xen-balloon.c | 13 +- fs/btrfs/ctree.c | 17 + fs/btrfs/dev-replace.c | 7 +- fs/btrfs/extent-tree.c | 168 +++-- fs/btrfs/file.c | 41 +- fs/btrfs/free-space-cache.c | 42 +- fs/btrfs/inode.c | 15 +- fs/btrfs/ioctl.c | 11 +- fs/btrfs/qgroup.c | 5 + fs/btrfs/qgroup.h | 2 + fs/btrfs/relocation.c | 2 +- fs/btrfs/transaction.c | 15 +- fs/btrfs/tree-log.c | 86 ++- fs/cifs/cifs_debug.c | 3 + fs/cifs/cifs_spnego.c | 6 +- fs/cifs/inode.c | 10 +- fs/cifs/transport.c | 57 +- fs/cramfs/inode.c | 3 +- fs/crypto/fscrypt_private.h | 4 - fs/crypto/keyinfo.c | 10 - fs/ext4/ext4.h | 3 +- fs/ext4/inline.c | 2 +- fs/ext4/ioctl.c | 97 ++- fs/ext4/move_extent.c | 8 +- fs/ext4/super.c | 73 +- fs/f2fs/checkpoint.c | 2 + fs/f2fs/data.c | 17 +- fs/f2fs/extent_cache.c | 51 +- fs/f2fs/f2fs.h | 8 +- fs/f2fs/inode.c | 6 + fs/f2fs/node.c | 13 +- fs/f2fs/recovery.c | 15 +- fs/f2fs/super.c | 22 +- fs/gfs2/ops_fstype.c | 3 + fs/jbd2/checkpoint.c | 4 +- fs/jffs2/super.c | 4 +- fs/lockd/host.c | 2 +- fs/nfs/nfs4client.c | 16 +- fs/nfs/pagelist.c | 40 +- fs/nfsd/nfs4state.c | 3 +- fs/notify/fsnotify.c | 3 + fs/notify/mark.c | 39 +- fs/proc/task_mmu.c | 4 +- fs/userfaultfd.c | 8 +- include/crypto/speck.h | 62 -- include/linux/bpf_verifier.h | 3 + include/linux/compat.h | 3 + include/linux/fs.h | 3 + include/linux/hdmi.h | 4 +- include/linux/nvme.h | 1 + include/linux/signal.h | 2 +- include/linux/tc.h | 1 + include/linux/wait.h | 20 +- include/media/cec.h | 72 +- include/rdma/ib_verbs.h | 34 +- include/uapi/linux/cec.h | 3 + include/uapi/linux/fs.h | 4 +- include/uapi/linux/ndctl.h | 48 +- include/uapi/linux/videodev2.h | 23 +- include/uapi/rdma/ib_user_verbs.h | 20 +- kernel/bounds.c | 4 +- kernel/bpf/syscall.c | 13 + kernel/bpf/verifier.c | 26 +- kernel/cpu.c | 11 +- kernel/dma/contiguous.c | 6 +- kernel/irq/manage.c | 8 +- kernel/kprobes.c | 27 +- kernel/locking/lockdep.c | 4 +- kernel/printk/printk.c | 7 +- kernel/signal.c | 18 +- kernel/trace/trace_events_hist.c | 4 +- kernel/user_namespace.c | 12 +- lib/debug_locks.c | 2 +- mm/hmm.c | 36 +- mm/hugetlb.c | 6 + mm/page_vma_mapped.c | 24 +- net/core/netclassid_cgroup.c | 1 + net/ipv4/cipso_ipv4.c | 11 +- net/netfilter/xt_nat.c | 2 + net/sched/sch_api.c | 1 - net/sunrpc/svc_xprt.c | 2 +- net/sunrpc/xprtrdma/svc_rdma_backchannel.c | 1 + net/sunrpc/xprtrdma/transport.c | 6 + security/integrity/ima/ima_crypto.c | 54 +- security/integrity/ima/ima_fs.c | 6 +- security/selinux/hooks.c | 5 + security/smack/smack_lsm.c | 13 +- sound/pci/ca0106/ca0106.h | 2 +- sound/pci/hda/hda_controller.h | 1 + sound/pci/hda/hda_intel.c | 15 +- sound/pci/hda/patch_conexant.c | 1 + sound/pci/hda/patch_realtek.c | 26 + sound/pci/hda/thinkpad_helper.c | 4 +- sound/soc/amd/acp-pcm-dma.c | 22 +- sound/soc/codecs/sta32x.c | 3 + sound/soc/intel/skylake/skl-topology.c | 1 + .../tests/shell/record+probe_libc_inet_pton.sh | 2 +- tools/perf/util/strbuf.c | 10 +- tools/perf/util/trace-event-info.c | 2 + tools/perf/util/trace-event-parse.c | 1 + tools/perf/util/trace-event-read.c | 5 +- tools/power/cpupower/utils/cpufreq-info.c | 2 + tools/power/cpupower/utils/helpers/amd.c | 7 +- .../trigger-synthetic-event-createremove.tc | 12 +- .../selftests/powerpc/ptrace/ptrace-tm-spd-gpr.c | 4 +- virt/kvm/arm/arm.c | 4 +- virt/kvm/arm/mmu.c | 8 +- 389 files changed, 3294 insertions(+), 4066 deletions(-)

5 years, 4 months

10
383
0 0

[PATCH 4.4 00/18] V4.4 backport of 32-bit arm spectre patches

by David Long

From: "David A. Long" <dave.long(a)linaro.org> V4.4 backport of spectre patches from Russell M. King's spectre branch. Most KVM patches are excluded. Patches not yet in upstream are excluded. Russell King (18): ARM: add more CPU part numbers for Cortex and Brahma B15 CPUs ARM: bugs: prepare processor bug infrastructure ARM: bugs: hook processor bug checking into SMP and suspend paths ARM: bugs: add support for per-processor bug checking ARM: spectre: add Kconfig symbol for CPUs vulnerable to Spectre ARM: spectre-v2: harden branch predictor on context switches ARM: spectre-v2: add Cortex A8 and A15 validation of the IBE bit ARM: spectre-v2: harden user aborts in kernel space ARM: spectre-v2: warn about incorrect context switching functions ARM: spectre-v1: add speculation barrier (csdb) macros ARM: spectre-v1: add array_index_mask_nospec() implementation ARM: spectre-v1: fix syscall entry ARM: signal: copy registers using __copy_from_user() ARM: vfp: use __copy_from_user() when restoring VFP state ARM: oabi-compat: copy semops using __copy_from_user() ARM: use __inttype() in get_user() ARM: spectre-v1: use get_user() for __get_user() ARM: spectre-v1: mitigate user accesses arch/arm/include/asm/assembler.h | 12 +++ arch/arm/include/asm/barrier.h | 32 +++++++ arch/arm/include/asm/bugs.h | 6 +- arch/arm/include/asm/cp15.h | 18 ++++ arch/arm/include/asm/cputype.h | 8 ++ arch/arm/include/asm/proc-fns.h | 4 + arch/arm/include/asm/system_misc.h | 15 ++++ arch/arm/include/asm/thread_info.h | 4 +- arch/arm/include/asm/uaccess.h | 25 ++++-- arch/arm/kernel/Makefile | 1 + arch/arm/kernel/bugs.c | 18 ++++ arch/arm/kernel/entry-common.S | 18 ++-- arch/arm/kernel/entry-header.S | 25 ++++++ arch/arm/kernel/signal.c | 56 ++++++------ arch/arm/kernel/smp.c | 4 + arch/arm/kernel/suspend.c | 2 + arch/arm/kernel/sys_oabi-compat.c | 8 +- arch/arm/lib/copy_from_user.S | 9 ++ arch/arm/mm/Kconfig | 23 +++++ arch/arm/mm/Makefile | 2 +- arch/arm/mm/fault.c | 3 + arch/arm/mm/proc-macros.S | 3 +- arch/arm/mm/proc-v7-2level.S | 6 -- arch/arm/mm/proc-v7-bugs.c | 112 ++++++++++++++++++++++++ arch/arm/mm/proc-v7.S | 133 ++++++++++++++++++++++------- arch/arm/vfp/vfpmodule.c | 17 ++-- 26 files changed, 462 insertions(+), 102 deletions(-) create mode 100644 arch/arm/kernel/bugs.c create mode 100644 arch/arm/mm/proc-v7-bugs.c -- 2.17.1

5 years, 4 months

4
28
0 0

[PATCH] jffs2: ensure wbuf_verify is valid before using it.

by Hou Tao

Now MTD emulated by UBI volumn doesn't allocate wbuf_verify in jffs2_ubivol_setup(), because UBI can do the verifcation itself, so when CONFIG_JFFS2_FS_WBUF_VERIFY is enabled and a MTD device emulated by UBI volumn is used, a Oops will occur as show in the following trace: general protection fault: 0000 [#1] SMP KASAN PTI CPU: 6 PID: 404 Comm: kworker/6:1 Not tainted 4.19.0-rc8 Workqueue: events_long delayed_wbuf_sync RIP: 0010:ubi_io_read+0x156/0x650 Call Trace: ubi_eba_read_leb+0x57d/0xba0 ubi_leb_read+0xe5/0x1b0 gluebi_read+0x10c/0x1a0 mtd_read+0x112/0x340 jffs2_verify_write+0xef/0x440 __jffs2_flush_wbuf+0x3fa/0x3540 jffs2_flush_wbuf_gc+0x1b1/0x2e0 process_one_work+0x58b/0x11e0 worker_thread+0x8f/0xfe0 kthread+0x2ae/0x3a0 ret_from_fork+0x35/0x40 Fix the problem by checking the validity of wbuf_verify before using it in jffs2_verify_write(). Cc: stable(a)vger.kernel.org Fixes: 0029da3bf430 ("JFFS2: add UBI support") Signed-off-by: Hou Tao <houtao1(a)huawei.com> --- fs/jffs2/wbuf.c | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/fs/jffs2/wbuf.c b/fs/jffs2/wbuf.c index c6821a509481..3de45f4559d1 100644 --- a/fs/jffs2/wbuf.c +++ b/fs/jffs2/wbuf.c @@ -234,6 +234,13 @@ static int jffs2_verify_write(struct jffs2_sb_info *c, unsigned char *buf, size_t retlen; char *eccstr; + /* + * MTD emulated by UBI volume doesn't allocate wbuf_verify, + * because it can do the verification itself. + */ + if (!c->wbuf_verify) + return 0; + ret = mtd_read(c->mtd, ofs, c->wbuf_pagesize, &retlen, c->wbuf_verify); if (ret && ret != -EUCLEAN && ret != -EBADMSG) { pr_warn("%s(): Read back of page at %08x failed: %d\n", -- 2.16.2.dirty

5 years, 4 months

2
3
0 0

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror November 2018