September 2020 - Linux-stable-mirror

[PATCH] iscsi-target: fix hang in iscsit_access_np() when getting tpg->np_login_sem

by Hou Pu

The iscsi target login thread might stuck in following stack: cat /proc/`pidof iscsi_np`/stack [<0>] down_interruptible+0x42/0x50 [<0>] iscsit_access_np+0xe3/0x167 [<0>] iscsi_target_locate_portal+0x695/0x8ac [<0>] __iscsi_target_login_thread+0x855/0xb82 [<0>] iscsi_target_login_thread+0x2f/0x5a [<0>] kthread+0xfa/0x130 [<0>] ret_from_fork+0x1f/0x30 This could be reproduced by following steps: 1. Initiator A try to login iqn1-tpg1 on port 3260. After finishing PDU exchange in the login thread and before the negotiation is finished, at this time the network link is down. In a production environment, this could happen. I could emulated it by bring the network card down in the initiator node by ifconfig eth0 down. (Now A could never finish this login. And tpg->np_login_sem is hold by it). 2. Initiator B try to login iqn2-tpg1 on port 3260. After finishing PDU exchange in the login thread. The target expect to process remaining login PDUs in workqueue context. 3. Initiator A' try to re-login to iqn1-tpg1 on port 3260 from a new socket. It will wait for tpg->np_login_sem with np->np_login_timer loaded to wait for at most 15 second. (Because the lock is held by A. A never gets a change to release tpg->np_login_sem. so A' should finally get timeout). 4. Before A' got timeout. Initiator B gets negotiation failed and calls iscsi_target_login_drop()->iscsi_target_login_sess_out(). The np->np_login_timer is canceled. And initiator A' will hang there forever. Because A' is now in the login thread. All other login requests could not be serviced. Fix this by moving iscsi_stop_login_thread_timer() out of iscsi_target_login_sess_out(). Also remove iscsi_np parameter from iscsi_target_login_sess_out(). Cc: stable(a)vger.kernel.org Signed-off-by: Hou Pu <houpu(a)bytedance.com> --- drivers/target/iscsi/iscsi_target_login.c | 6 +++--- drivers/target/iscsi/iscsi_target_login.h | 3 +-- drivers/target/iscsi/iscsi_target_nego.c | 3 +-- 3 files changed, 5 insertions(+), 7 deletions(-) diff --git a/drivers/target/iscsi/iscsi_target_login.c b/drivers/target/iscsi/iscsi_target_login.c index 85748e338858..893d1b406c29 100644 --- a/drivers/target/iscsi/iscsi_target_login.c +++ b/drivers/target/iscsi/iscsi_target_login.c @@ -1149,7 +1149,7 @@ void iscsit_free_conn(struct iscsi_conn *conn) } void iscsi_target_login_sess_out(struct iscsi_conn *conn, - struct iscsi_np *np, bool zero_tsih, bool new_sess) + bool zero_tsih, bool new_sess) { if (!new_sess) goto old_sess_out; @@ -1167,7 +1167,6 @@ void iscsi_target_login_sess_out(struct iscsi_conn *conn, conn->sess = NULL; old_sess_out: - iscsi_stop_login_thread_timer(np); /* * If login negotiation fails check if the Time2Retain timer * needs to be restarted. @@ -1407,8 +1406,9 @@ static int __iscsi_target_login_thread(struct iscsi_np *np) new_sess_out: new_sess = true; old_sess_out: + iscsi_stop_login_thread_timer(np); tpg_np = conn->tpg_np; - iscsi_target_login_sess_out(conn, np, zero_tsih, new_sess); + iscsi_target_login_sess_out(conn, zero_tsih, new_sess); new_sess = false; if (tpg) { diff --git a/drivers/target/iscsi/iscsi_target_login.h b/drivers/target/iscsi/iscsi_target_login.h index 3b8e3639ff5d..fc95e6150253 100644 --- a/drivers/target/iscsi/iscsi_target_login.h +++ b/drivers/target/iscsi/iscsi_target_login.h @@ -22,8 +22,7 @@ extern int iscsit_put_login_tx(struct iscsi_conn *, struct iscsi_login *, u32); extern void iscsit_free_conn(struct iscsi_conn *); extern int iscsit_start_kthreads(struct iscsi_conn *); extern void iscsi_post_login_handler(struct iscsi_np *, struct iscsi_conn *, u8); -extern void iscsi_target_login_sess_out(struct iscsi_conn *, struct iscsi_np *, - bool, bool); +extern void iscsi_target_login_sess_out(struct iscsi_conn *, bool, bool); extern int iscsi_target_login_thread(void *); extern void iscsi_handle_login_thread_timeout(struct timer_list *t); diff --git a/drivers/target/iscsi/iscsi_target_nego.c b/drivers/target/iscsi/iscsi_target_nego.c index 685d771b51d4..e32d93b92742 100644 --- a/drivers/target/iscsi/iscsi_target_nego.c +++ b/drivers/target/iscsi/iscsi_target_nego.c @@ -535,12 +535,11 @@ static bool iscsi_target_sk_check_and_clear(struct iscsi_conn *conn, unsigned in static void iscsi_target_login_drop(struct iscsi_conn *conn, struct iscsi_login *login) { - struct iscsi_np *np = login->np; bool zero_tsih = login->zero_tsih; iscsi_remove_failed_auth_entry(conn); iscsi_target_nego_release(conn); - iscsi_target_login_sess_out(conn, np, zero_tsih, true); + iscsi_target_login_sess_out(conn, zero_tsih, true); } struct conn_timeout { -- 2.11.0

3 years, 8 months

4
5
0 0

[PATCH] Makefile: add -fuse-ld=lld to KBUILD_HOSTLDFLAGS when LLVM=1

by Nick Desaulniers

While moving Android kernels over to use LLVM=1, we observe the failure when building in a hermetic docker image: HOSTCC scripts/basic/fixdep clang: error: unable to execute command: Executable "ld" doesn't exist! The is because the build of the host utility fixdep builds the fixdep executable in one step by invoking the compiler as the driver, rather than individual compile then link steps. Clang when configured from source defaults to use the system's linker, and not LLVM's own LLD, unless the CMake config -DCLANG_DEFAULT_LINKER='lld' is set when configuring a build of clang itself. Don't rely on the compiler's implicit default linker; be explicit. Cc: stable(a)vger.kernel.org Fixes: commit a0d1c951ef08 ("kbuild: support LLVM=1 to switch the default tools to Clang/LLVM") Reported-by: Matthias Maennich <maennich(a)google.com> Signed-off-by: Nick Desaulniers <ndesaulniers(a)google.com> --- Makefile | 1 + 1 file changed, 1 insertion(+) diff --git a/Makefile b/Makefile index def590b743a9..b4e93b228a26 100644 --- a/Makefile +++ b/Makefile @@ -436,6 +436,7 @@ OBJDUMP = llvm-objdump READELF = llvm-readelf OBJSIZE = llvm-size STRIP = llvm-strip +KBUILD_HOSTLDFLAGS += -fuse-ld=lld else CC = $(CROSS_COMPILE)gcc LD = $(CROSS_COMPILE)ld -- 2.28.0.297.g1956fa8f8d-goog

3 years, 8 months

3
4
0 0

Re: [PATCH v2 1/7] mm/thp: fix __split_huge_pmd_locked() for migration PMD

by Zi Yan

On 2 Sep 2020, at 12:58, Ralph Campbell wrote: > A migrating transparent huge page has to already be unmapped. Otherwise, > the page could be modified while it is being copied to a new page and > data could be lost. The function __split_huge_pmd() checks for a PMD > migration entry before calling __split_huge_pmd_locked() leading one to > think that __split_huge_pmd_locked() can handle splitting a migrating PMD. > However, the code always increments the page->_mapcount and adjusts the > memory control group accounting assuming the page is mapped. > Also, if the PMD entry is a migration PMD entry, the call to > is_huge_zero_pmd(*pmd) is incorrect because it calls pmd_pfn(pmd) instead > of migration_entry_to_pfn(pmd_to_swp_entry(pmd)). > Fix these problems by checking for a PMD migration entry. > > Signed-off-by: Ralph Campbell <rcampbell(a)nvidia.com> Thanks for the fix. You can add Reviewed-by: Zi Yan <ziy(a)nvidia.com> I think you also want to add the Fixes tag and cc stable. Fixes 84c3fc4e9c56 (“mm: thp: check pmd migration entry in common path”) cc: stable(a)vger.kernel.org # 4.14+ > --- > mm/huge_memory.c | 42 +++++++++++++++++++++++------------------- > 1 file changed, 23 insertions(+), 19 deletions(-) > > diff --git a/mm/huge_memory.c b/mm/huge_memory.c > index 2a468a4acb0a..606d712d9505 100644 > --- a/mm/huge_memory.c > +++ b/mm/huge_memory.c > @@ -2023,7 +2023,7 @@ static void __split_huge_pmd_locked(struct vm_area_struct *vma, pmd_t *pmd, > put_page(page); > add_mm_counter(mm, mm_counter_file(page), -HPAGE_PMD_NR); > return; > - } else if (is_huge_zero_pmd(*pmd)) { > + } else if (pmd_trans_huge(*pmd) && is_huge_zero_pmd(*pmd)) { > /* > * FIXME: Do we want to invalidate secondary mmu by calling > * mmu_notifier_invalidate_range() see comments below inside > @@ -2117,30 +2117,34 @@ static void __split_huge_pmd_locked(struct vm_area_struct *vma, pmd_t *pmd, > pte = pte_offset_map(&_pmd, addr); > BUG_ON(!pte_none(*pte)); > set_pte_at(mm, addr, pte, entry); > - atomic_inc(&page[i]._mapcount); > - pte_unmap(pte); > - } > - > - /* > - * Set PG_double_map before dropping compound_mapcount to avoid > - * false-negative page_mapped(). > - */ > - if (compound_mapcount(page) > 1 && !TestSetPageDoubleMap(page)) { > - for (i = 0; i < HPAGE_PMD_NR; i++) > + if (!pmd_migration) > atomic_inc(&page[i]._mapcount); > + pte_unmap(pte); > } > > - lock_page_memcg(page); > - if (atomic_add_negative(-1, compound_mapcount_ptr(page))) { > - /* Last compound_mapcount is gone. */ > - __dec_lruvec_page_state(page, NR_ANON_THPS); > - if (TestClearPageDoubleMap(page)) { > - /* No need in mapcount reference anymore */ > + if (!pmd_migration) { > + /* > + * Set PG_double_map before dropping compound_mapcount to avoid > + * false-negative page_mapped(). > + */ > + if (compound_mapcount(page) > 1 && > + !TestSetPageDoubleMap(page)) { > for (i = 0; i < HPAGE_PMD_NR; i++) > - atomic_dec(&page[i]._mapcount); > + atomic_inc(&page[i]._mapcount); > + } > + > + lock_page_memcg(page); > + if (atomic_add_negative(-1, compound_mapcount_ptr(page))) { > + /* Last compound_mapcount is gone. */ > + __dec_lruvec_page_state(page, NR_ANON_THPS); > + if (TestClearPageDoubleMap(page)) { > + /* No need in mapcount reference anymore */ > + for (i = 0; i < HPAGE_PMD_NR; i++) > + atomic_dec(&page[i]._mapcount); > + } > } > + unlock_page_memcg(page); > } > - unlock_page_memcg(page); > > smp_wmb(); /* make pte visible before pmd */ > pmd_populate(mm, pmd, pgtable); > -- > 2.20.1 — Best Regards, Yan Zi

3 years, 8 months

2
1
0 0

[PATCH] net: bcmgenet: fix mask check in bcmgenet_validate_flow()

by Denis Efremov

VALIDATE_MASK(eth_mask->h_source) is checked twice in a row in bcmgenet_validate_flow(). Add VALIDATE_MASK(eth_mask->h_dest) instead. Fixes: 3e370952287c ("net: bcmgenet: add support for ethtool rxnfc flows") Cc: stable(a)vger.kernel.org Signed-off-by: Denis Efremov <efremov(a)linux.com> --- I'm not sure that h_dest check is required here, it's only my guess. Compile tested only. drivers/net/ethernet/broadcom/genet/bcmgenet.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/net/ethernet/broadcom/genet/bcmgenet.c b/drivers/net/ethernet/broadcom/genet/bcmgenet.c index 0ca8436d2e9d..be85dad2e3bc 100644 --- a/drivers/net/ethernet/broadcom/genet/bcmgenet.c +++ b/drivers/net/ethernet/broadcom/genet/bcmgenet.c @@ -1364,7 +1364,7 @@ static int bcmgenet_validate_flow(struct net_device *dev, case ETHER_FLOW: eth_mask = &cmd->fs.m_u.ether_spec; /* don't allow mask which isn't valid */ - if (VALIDATE_MASK(eth_mask->h_source) || + if (VALIDATE_MASK(eth_mask->h_dest) || VALIDATE_MASK(eth_mask->h_source) || VALIDATE_MASK(eth_mask->h_proto)) { netdev_err(dev, "rxnfc: Unsupported mask\n"); -- 2.26.2

3 years, 8 months

4
3
0 0

[PATCH V2] block: allow for_each_bvec to support zero len bvec

by Ming Lei

Block layer usually doesn't support or allow zero-length bvec. Since commit 1bdc76aea115 ("iov_iter: use bvec iterator to implement iterate_bvec()"), iterate_bvec() switches to bvec iterator. However, Al mentioned that 'Zero-length segments are not disallowed' in iov_iter. Fixes for_each_bvec() so that it can move on after seeing one zero length bvec. Signed-off-by: Ming Lei <ming.lei(a)redhat.com> Link: https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg2262077.html Fixes: 1bdc76aea115 ("iov_iter: use bvec iterator to implement iterate_bvec()") Reported-by: syzbot <syzbot+61acc40a49a3e46e25ea(a)syzkaller.appspotmail.com> Tested-by: Tetsuo Handa <penguin-kernel(a)i-love.sakura.ne.jp> Cc: Al Viro <viro(a)zeniv.linux.org.uk> Cc: Matthew Wilcox <willy(a)infradead.org> Cc: <stable(a)vger.kernel.org> --- V2: - fix reported-by tag include/linux/bvec.h | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/include/linux/bvec.h b/include/linux/bvec.h index ac0c7299d5b8..9c4fab5f22a7 100644 --- a/include/linux/bvec.h +++ b/include/linux/bvec.h @@ -117,11 +117,18 @@ static inline bool bvec_iter_advance(const struct bio_vec *bv, return true; } +static inline void bvec_iter_skip_zero_bvec(struct bvec_iter *iter) +{ + iter->bi_bvec_done = 0; + iter->bi_idx++; +} + #define for_each_bvec(bvl, bio_vec, iter, start) \ for (iter = (start); \ (iter).bi_size && \ ((bvl = bvec_iter_bvec((bio_vec), (iter))), 1); \ - bvec_iter_advance((bio_vec), &(iter), (bvl).bv_len)) + (bvl).bv_len ? bvec_iter_advance((bio_vec), &(iter), \ + (bvl).bv_len) : bvec_iter_skip_zero_bvec(&(iter))) /* for iterating one bio from start to end */ #define BVEC_ITER_ALL_INIT (struct bvec_iter) \ -- 2.25.2

3 years, 8 months

2
2
0 0

[PATCH] x86/special_insn: reverse __force_order logic

by Nadav Amit

From: Nadav Amit <namit(a)vmware.com> The __force_order logic seems to be inverted. __force_order is supposedly used to manipulate the compiler to use its memory dependencies analysis to enforce orders between CR writes and reads. Therefore, the memory should behave as a "CR": when the CR is read, the memory should be "read" by the inline assembly, and __force_order should be an output. When the CR is written, the memory should be "written". This change should allow to remove the "volatile" qualifier from CR reads at a later patch. While at it, remove the extra new-line from the inline assembly, as it only confuses GCC when it estimates the cost of the inline assembly. Cc: Thomas Gleixner <tglx(a)linutronix.de> Cc: Ingo Molnar <mingo(a)redhat.com> Cc: Borislav Petkov <bp(a)alien8.de> Cc: x86(a)kernel.org Cc: "H. Peter Anvin" <hpa(a)zytor.com> Cc: Peter Zijlstra <peterz(a)infradead.org> Cc: Andy Lutomirski <luto(a)kernel.org> Cc: Kees Cook <keescook(a)chromium.org> Cc: stable(a)vger.kernel.org Signed-off-by: Nadav Amit <namit(a)vmware.com> --- Unless I misunderstand the logic, __force_order should also be used by rdpkru() and wrpkru() which do not have dependency on __force_order. I also did not understand why native_write_cr0() has R/W dependency on __force_order, and why native_write_cr4() no longer has any dependency on __force_order. --- arch/x86/include/asm/special_insns.h | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/arch/x86/include/asm/special_insns.h b/arch/x86/include/asm/special_insns.h index 5999b0b3dd4a..dff5e5b01a3c 100644 --- a/arch/x86/include/asm/special_insns.h +++ b/arch/x86/include/asm/special_insns.h @@ -24,32 +24,32 @@ void native_write_cr0(unsigned long val); static inline unsigned long native_read_cr0(void) { unsigned long val; - asm volatile("mov %%cr0,%0\n\t" : "=r" (val), "=m" (__force_order)); + asm volatile("mov %%cr0,%0" : "=r" (val) : "m" (__force_order)); return val; } static __always_inline unsigned long native_read_cr2(void) { unsigned long val; - asm volatile("mov %%cr2,%0\n\t" : "=r" (val), "=m" (__force_order)); + asm volatile("mov %%cr2,%0" : "=r" (val) : "m" (__force_order)); return val; } static __always_inline void native_write_cr2(unsigned long val) { - asm volatile("mov %0,%%cr2": : "r" (val), "m" (__force_order)); + asm volatile("mov %1,%%cr2" : "=m" (__force_order) : "r" (val)); } static inline unsigned long __native_read_cr3(void) { unsigned long val; - asm volatile("mov %%cr3,%0\n\t" : "=r" (val), "=m" (__force_order)); + asm volatile("mov %%cr3,%0" : "=r" (val) : "m" (__force_order)); return val; } static inline void native_write_cr3(unsigned long val) { - asm volatile("mov %0,%%cr3": : "r" (val), "m" (__force_order)); + asm volatile("mov %1,%%cr3" : "=m" (__force_order) : "r" (val)); } static inline unsigned long native_read_cr4(void) @@ -64,10 +64,10 @@ static inline unsigned long native_read_cr4(void) asm volatile("1: mov %%cr4, %0\n" "2:\n" _ASM_EXTABLE(1b, 2b) - : "=r" (val), "=m" (__force_order) : "0" (0)); + : "=r" (val) : "m" (__force_order), "0" (0)); #else /* CR4 always exists on x86_64. */ - asm volatile("mov %%cr4,%0\n\t" : "=r" (val), "=m" (__force_order)); + asm volatile("mov %%cr4,%0" : "=r" (val) : "m" (__force_order)); #endif return val; } -- 2.25.1

3 years, 8 months

4
5
0 0

[PATCH 5.4 000/213] 5.4.62-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.4.62 release. There are 213 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 04 Sep 2020 07:47:53 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.62-rc2… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.4.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.4.62-rc2 Xin Yin <yinxin_1989(a)aliyun.com> io_uring: Fix NULL pointer dereference in io_sq_wq_submit_work() Hector Martin <marcan(a)marcan.st> ALSA: usb-audio: Update documentation comment for MS2109 quirk Peilin Ye <yepeilin.cs(a)gmail.com> HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage() Denis Efremov <efremov(a)linux.com> kbuild: fix broken builds because of GZIP,BZIP2,LZOP variables Denis Efremov <efremov(a)linux.com> kbuild: add variables for compression tools Masahiro Yamada <yamada.masahiro(a)socionext.com> kheaders: explain why include/config/autoconf.h is excluded from md5sum Masahiro Yamada <yamada.masahiro(a)socionext.com> kheaders: remove the last bashism to allow sh to run it Masahiro Yamada <yamada.masahiro(a)socionext.com> kheaders: optimize header copy for in-tree builds Masahiro Yamada <yamada.masahiro(a)socionext.com> kheaders: optimize md5sum calculation for in-tree builds Masahiro Yamada <yamada.masahiro(a)socionext.com> kheaders: remove unneeded 'cat' command piped to 'head' / 'tail' Tetsuo Handa <penguin-kernel(a)i-love.sakura.ne.jp> fbmem: pull fbcon_update_vcs() out of fb_set_var() Thinh Nguyen <Thinh.Nguyen(a)synopsys.com> usb: dwc3: gadget: Handle ZLP for sg requests Thinh Nguyen <Thinh.Nguyen(a)synopsys.com> usb: dwc3: gadget: Fix handling ZLP Thinh Nguyen <Thinh.Nguyen(a)synopsys.com> usb: dwc3: gadget: Don't setup more than requested Mika Kuoppala <mika.kuoppala(a)linux.intel.com> drm/i915: Fix cmd parser desc matching with masks Alan Stern <stern(a)rowland.harvard.edu> usb: storage: Add unusual_uas entry for Sony PSZ drives Tom Rix <trix(a)redhat.com> USB: cdc-acm: rework notification_buffer resizing Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> USB: gadget: u_f: Unbreak offset calculation in VLAs Brooke Basile <brookebasile(a)gmail.com> USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb() Brooke Basile <brookebasile(a)gmail.com> USB: gadget: u_f: add overflow checks to VLA macros Tang Bin <tangbin(a)cmss.chinamobile.com> usb: host: ohci-exynos: Fix error handling in exynos_ohci_probe() Cyril Roelandt <tipecaml(a)gmail.com> USB: Ignore UAS for JMicron JMS567 ATA/ATAPI Bridge Alan Stern <stern(a)rowland.harvard.edu> USB: quirks: Ignore duplicate endpoint on Sound Devices MixPre-D Kai-Heng Feng <kai.heng.feng(a)canonical.com> USB: quirks: Add no-lpm quirk for another Raydium touchscreen Thinh Nguyen <Thinh.Nguyen(a)synopsys.com> usb: uas: Add quirk for PNY Pro Elite Alan Stern <stern(a)rowland.harvard.edu> USB: yurex: Fix bad gfp argument Evan Quan <evan.quan(a)amd.com> drm/amd/pm: correct the thermal alert temperature limit settings Evan Quan <evan.quan(a)amd.com> drm/amd/pm: correct Vega20 swctf limit setting Evan Quan <evan.quan(a)amd.com> drm/amd/pm: correct Vega12 swctf limit setting Evan Quan <evan.quan(a)amd.com> drm/amd/pm: correct Vega10 swctf limit setting Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> drm/amd/powerplay: Fix hardmins not being sent to SMU for RV Jiansong Chen <Jiansong.Chen(a)amd.com> drm/amdgpu/gfx10: refine mgcg setting Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: Fix buffer overflow in INFO ioctl Ashok Raj <ashok.raj(a)intel.com> x86/hotplug: Silence APIC only after all interrupts are migrated qiuguorui1 <qiuguorui1(a)huawei.com> irqchip/stm32-exti: Avoid losing interrupts due to clearing pending bits by mistake Thomas Gleixner <tglx(a)linutronix.de> genirq/matrix: Deal with the sillyness of for_each_cpu() on UP Herbert Xu <herbert(a)gondor.apana.org.au> crypto: af_alg - Work around empty control messages without MSG_MORE Heikki Krogerus <heikki.krogerus(a)linux.intel.com> device property: Fix the secondary firmware node handling in set_primary_fwnode() Alexey Kardashevskiy <aik(a)ozlabs.ru> powerpc/perf: Fix crashes with generic_compat_pmu & BHRB Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> PM: sleep: core: Fix the handling of pending runtime resume requests Frank van der Linden <fllinden(a)amazon.com> arm64: vdso32: make vdso32 install conditional Ding Hui <dinghui(a)sangfor.com.cn> xhci: Always restore EP_SOFT_CLEAR_TOGGLE even if ep reset failed Kai-Heng Feng <kai.heng.feng(a)canonical.com> xhci: Do warm-reset when both CAS and XDEV_RESUME are set Li Jun <jun.li(a)nxp.com> usb: host: xhci: fix ep context print mismatch in debugfs Thomas Gleixner <tglx(a)linutronix.de> XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information. Jan Kara <jack(a)suse.cz> writeback: Fix sync livelock due to b_dirty_time processing Jan Kara <jack(a)suse.cz> writeback: Avoid skipping inode writeback Jan Kara <jack(a)suse.cz> writeback: Protect inode->i_io_list with inode->i_lock Sergey Senozhatsky <sergey.senozhatsky(a)gmail.com> serial: 8250: change lock order in serial8250_do_startup() Valmer Huhn <valmer.huhn(a)concurrent-rt.com> serial: 8250_exar: Fix number of ports for Commtech PCIe cards Holger Assmann <h.assmann(a)pengutronix.de> serial: stm32: avoid kernel warning on absence of optional IRQ Lukas Wunner <lukas(a)wunner.de> serial: pl011: Don't leak amba_ports entry on driver register error Lukas Wunner <lukas(a)wunner.de> serial: pl011: Fix oops on -EPROBE_DEFER Tamseel Shams <m.shams(a)samsung.com> serial: samsung: Removes the IRQ not found warning George Kennedy <george.kennedy(a)oracle.com> vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize() Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> vt: defer kfree() of vc_screenbuf in vc_do_resize() Evgeny Novikov <novikov(a)ispras.ru> USB: lvtest: return proper error code in probe George Kennedy <george.kennedy(a)oracle.com> fbcon: prevent user font height or width change from causing potential out-of-bounds access Boris Burkov <boris(a)bur.io> btrfs: detect nocow for swap after snapshot delete Filipe Manana <fdmanana(a)suse.com> btrfs: fix space cache memory leak after transaction abort Josef Bacik <josef(a)toxicpanda.com> btrfs: check the right error variable in btrfs_del_dir_entries_in_log Marcos Paulo de Souza <mpdesouza(a)suse.com> btrfs: reset compression level for lzo on remount Ming Lei <ming.lei(a)redhat.com> blk-mq: order adding requests to hctx->dispatch and checking SCHED_RESTART Hans de Goede <hdegoede(a)redhat.com> HID: i2c-hid: Always sleep 60ms after I2C_HID_PWR_ON commands Ming Lei <ming.lei(a)redhat.com> block: loop: set discard granularity and alignment for block device backed loop Keith Busch <kbusch(a)kernel.org> block: fix get_max_io_size() Marc Zyngier <maz(a)kernel.org> arm64: Allow booting of late CPUs affected by erratum 1418040 Marc Zyngier <maz(a)kernel.org> arm64: Move handling of erratum 1418040 into C code Athira Rajeev <atrajeev(a)linux.vnet.ibm.com> powerpc/perf: Fix soft lockups due to missed interrupt accounting Sumera Priyadarsini <sylphrenadin(a)gmail.com> net: gianfar: Add of_node_put() before goto statement Alvin Šipraga <alsi(a)bang-olufsen.dk> macvlan: validate setting of multiple remote source MAC addresses Saurav Kashyap <skashyap(a)marvell.com> Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" Quinn Tran <qutran(a)marvell.com> scsi: qla2xxx: Fix null pointer access during disconnect from subsystem Saurav Kashyap <skashyap(a)marvell.com> scsi: qla2xxx: Check if FW supports MQ before enabling Quinn Tran <qutran(a)marvell.com> scsi: qla2xxx: Fix login timeout Stanley Chu <stanley.chu(a)mediatek.com> scsi: ufs: Clean up completed request without interrupt notification Adrian Hunter <adrian.hunter(a)intel.com> scsi: ufs: Improve interrupt handling for shared interrupts Stanley Chu <stanley.chu(a)mediatek.com> scsi: ufs: Fix possible infinite loop in ufshcd_hold Mike Christie <michael.christie(a)oracle.com> scsi: fcoe: Fix I/O path allocation David Ahern <dsahern(a)kernel.org> selftests: disable rp_filter for icmp_redirect.sh Sylwester Nawrocki <s.nawrocki(a)samsung.com> ASoC: wm8994: Avoid attempts to read unreadable registers Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: add cond_resched() in the slow_eval_known_fn() loop Mike Pozulp <pozulp.kernel(a)gmail.com> ALSA: hda/realtek: Add model alc298-samsung-headphone Oleksij Rempel <linux(a)rempel-privat.de> can: j1939: transport: j1939_xtp_rx_dat_one(): compare own packets to detect corruptions Florian Westphal <fw(a)strlen.de> netfilter: avoid ipv6 -> nf_defrag_ipv6 module dependency Anthony Koo <Anthony.Koo(a)amd.com> drm/amd/display: Switch to immediate mode for updating infopackets Evan Quan <evan.quan(a)amd.com> drm/amd/powerplay: correct UVD/VCE PG state on custom pptable uploading Evan Quan <evan.quan(a)amd.com> drm/amd/powerplay: correct Vega20 cached smu feature state Alain Volmat <alain.volmat(a)st.com> spi: stm32: always perform registers configuration prior to transfer Amelie Delaunay <amelie.delaunay(a)st.com> spi: stm32: fix stm32_spi_prepare_mbr in case of odd clk_rate Amelie Delaunay <amelie.delaunay(a)st.com> spi: stm32: fix fifo threshold level in case of short transfer Antonio Borneo <antonio.borneo(a)st.com> spi: stm32h7: fix race condition at end of transfer Xianting Tian <xianting_tian(a)126.com> fs: prevent BUG_ON in submit_bh_wbc() Jan Kara <jack(a)suse.cz> ext4: correctly restore system zone info when remount fails Jan Kara <jack(a)suse.cz> ext4: handle error of ext4_setup_system_zone() on remount Lukas Czerner <lczerner(a)redhat.com> ext4: handle option set by mount flags correctly zhangyi (F) <yi.zhang(a)huawei.com> jbd2: abort journal if free a async write error metadata buffer Lukas Czerner <lczerner(a)redhat.com> ext4: handle read only external journal device Jan Kara <jack(a)suse.cz> ext4: don't BUG on inconsistent journal feature Lukas Czerner <lczerner(a)redhat.com> jbd2: make sure jh have b_transaction set in refile/unfile_buffer Tobias Schramm <t.schramm(a)manjaro.org> spi: stm32: clear only asserted irq flags on interrupt Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> usb: gadget: f_tcm: Fix some resource leaks in some error paths Wolfram Sang <wsa+renesas(a)sang-engineering.com> i2c: rcar: in slave mode, clear NACK earlier Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> i2c: core: Don't fail PRP0001 enumeration when no ID table exist Hou Pu <houpu(a)bytedance.com> null_blk: fix passing of REQ_FUA flag in null_handle_rq Martin Wilck <mwilck(a)suse.com> nvme: multipath: round-robin: fix single non-optimized path case Tianjia Zhang <tianjia.zhang(a)linux.alibaba.com> nvme-fc: Fix wrong return value in __nvme_fc_init_request() Yufen Yu <yuyufen(a)huawei.com> blkcg: fix memleak for iolatency Ming Lei <ming.lei(a)redhat.com> blk-mq: insert request not through ->queue_rq into sw/scheduler queue Jason Baron <jbaron(a)akamai.com> hwmon: (nct7904) Correct divide by 0 Dmitry Monakhov <dmtrmonakhov(a)yandex-team.ru> bfq: fix blkio cgroup leakage v4 Matthew Wilcox (Oracle) <willy(a)infradead.org> block: Fix page_is_mergeable() for compound pages Rob Clark <robdclark(a)chromium.org> drm/msm/adreno: fix updating ring fence Ming Lei <ming.lei(a)redhat.com> block: virtio_blk: fix handling single range discard request Ming Lei <ming.lei(a)redhat.com> block: respect queue limit of max discard segment Sean Young <sean(a)mess.org> media: gpio-ir-tx: improve precision of transmitted signal due to scheduling Alexander Tsoy <alexander(a)tsoy.me> ALSA: usb-audio: Add capture support for Saffire 6 (USB 1.1) Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpufreq: intel_pstate: Fix EPP setting via sysfs in active mode Ansuel Smith <ansuelsmth(a)gmail.com> PCI: qcom: Add missing reset for ipq806x Abhishek Sahu <absahu(a)codeaurora.org> PCI: qcom: Change duplicate PCI reset to phy reset Ansuel Smith <ansuelsmth(a)gmail.com> PCI: qcom: Add missing ipq806x clocks in PCIe driver Tony Luck <tony.luck(a)intel.com> EDAC/{i7core,sb,pnd2,skx}: Fix error event severity Mauro Carvalho Chehab <mchehab+samsung(a)kernel.org> EDAC: skx_common: get rid of unused type var Mauro Carvalho Chehab <mchehab+samsung(a)kernel.org> EDAC: sb_edac: get rid of unused vars Sasha Levin <sashal(a)kernel.org> mm/vunmap: add cond_resched() in vunmap_pmd_range Stylon Wang <stylon.wang(a)amd.com> drm/amd/display: Fix dmesg warning from setting abm level Aurabindo Pillai <aurabindo.pillai(a)amd.com> drm/amd/display: Add additional config guards for DCN Mikita Lipski <mikita.lipski(a)amd.com> drm/amd/display: Trigger modesets on MST DSC connectors Paul Cercueil <paul(a)crapouillou.net> drm/ingenic: Fix incorrect assumption about plane->index Paul Cercueil <paul(a)crapouillou.net> gpu/drm: ingenic: Use the plane's src_[x,y] to configure DMA length Mike Kravetz <mike.kravetz(a)oracle.com> cma: don't quit at first error when activating reserved areas Yunfeng Ye <yeyunfeng(a)huawei.com> mm/cma.c: switch to bitmap_zalloc() for cma bitmap allocation Peter Zijlstra <peterz(a)infradead.org> mm: fix kthread_use_mm() vs TLB invalidate David Hildenbrand <david(a)redhat.com> mm/shuffle: don't move pages between zones and don't read garbage memmaps Filipe Manana <fdmanana(a)suse.com> btrfs: only commit delayed items at fsync if we are logging a directory Filipe Manana <fdmanana(a)suse.com> btrfs: only commit the delayed inode when doing a full fsync Filipe Manana <fdmanana(a)suse.com> btrfs: factor out inode items copy loop from btrfs_log_inode() Sasha Levin <sashal(a)kernel.org> s390/numa: set node distance to LOCAL_DISTANCE Oleksandr Andrushchenko <oleksandr_andrushchenko(a)epam.com> drm/xen-front: Fix misused IS_ERR_OR_NULL checks Ding Xiang <dingxiang(a)cmss.chinamobile.com> drm/xen: fix passing zero to 'PTR_ERR' warning Marc Zyngier <maz(a)kernel.org> PM / devfreq: rk3399_dmc: Fix kernel oops when rockchip,pmu is absent Yangtao Li <tiny.windzz(a)gmail.com> PM / devfreq: rk3399_dmc: Disable devfreq-event device when fails Yangtao Li <tiny.windzz(a)gmail.com> PM / devfreq: rk3399_dmc: Add missing of_node_put() Sasha Levin <sashal(a)kernel.org> usb: cdns3: gadget: always zeroed TRB buffer when enable endpoint Qais Yousef <qais.yousef(a)arm.com> sched/uclamp: Fix a deadlock when enabling uclamp static key Qais Yousef <qais.yousef(a)arm.com> sched/uclamp: Protect uclamp fast path code with static key Zhi Chen <zhichen(a)codeaurora.org> Revert "ath10k: fix DMA related firmware crashes on multiple devices" Kefeng Wang <wangkefeng.wang(a)huawei.com> arm64: Fix __cpu_logical_map undefined issue Andrey Konovalov <andreyknvl(a)google.com> efi: provide empty efi_enter_virtual_mode implementation Nicolas Saenz Julienne <nsaenzjulienne(a)suse.de> brcmfmac: Set timeout value when configuring power save Changming Liu <charley.ashbringer(a)gmail.com> USB: sisusbvga: Fix a potential UB casued by left shifting a negative value Arnd Bergmann <arnd(a)arndb.de> powerpc/spufs: add CONFIG_COREDUMP dependency David Brazdil <dbrazdil(a)google.com> KVM: arm64: Fix symbol dependency in __hyp_call_panic_nvhe Evgeny Novikov <novikov(a)ispras.ru> media: davinci: vpif_capture: fix potential double free Mike Kravetz <mike.kravetz(a)oracle.com> hugetlbfs: prevent filesystem stacking of hugetlbfs Jason Baron <jbaron(a)akamai.com> EDAC/ie31200: Fallback if host bridge device is already initialized Javed Hasan <jhasan(a)marvell.com> scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del() Xiubo Li <xiubli(a)redhat.com> ceph: do not access the kiocb after aio requests Xiubo Li <xiubli(a)redhat.com> ceph: fix potential mdsc use-after-free crash Jing Xiangfeng <jingxiangfeng(a)huawei.com> scsi: iscsi: Do not put host in iscsi_set_flashnode_param() Nikolay Borisov <nborisov(a)suse.com> btrfs: make btrfs_qgroup_check_reserved_leak take btrfs_inode Qu Wenruo <wqu(a)suse.com> btrfs: file: reserve qgroup space after the hole punch range is locked Chris Wilson <chris(a)chris-wilson.co.uk> locking/lockdep: Fix overflow in presentation of average lock-time Aditya Pakki <pakki001(a)umn.edu> drm/nouveau: Fix reference count leak in nouveau_connector_detect Aditya Pakki <pakki001(a)umn.edu> drm/nouveau: fix reference count leak in nv50_disp_atomic_commit Aditya Pakki <pakki001(a)umn.edu> drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open Li Guifu <bluce.liguifu(a)huawei.com> f2fs: fix use-after-free issue Ikjoon Jang <ikjn(a)chromium.org> HID: quirks: add NOGET quirk for Logitech GROUP Hans Verkuil <hverkuil-cisco(a)xs4all.nl> cec-api: prevent leaking memory through hole in structure Kaige Li <likaige(a)loongson.cn> ALSA: hda: Add support for Loongson 7A1000 controller Peng Fan <fanpeng(a)loongson.cn> mips/vdso: Fix resource leaks in genvdso.c Reto Schneider <code(a)reto-schneider.ch> rtlwifi: rtl8192cu: Prevent leaking urb Yangbo Lu <yangbo.lu(a)nxp.com> ARM: dts: ls1021a: output PPS signal on FIPER2 Qiushi Wu <wu000273(a)umn.edu> PCI: Fix pci_create_slot() reference count leak Aditya Pakki <pakki001(a)umn.edu> omapfb: fix multiple reference count leaks due to pm_runtime_get_sync Chao Yu <chao(a)kernel.org> f2fs: fix error path in do_recover_data() Desnes A. Nunes do Rosario <desnesn(a)linux.ibm.com> selftests/powerpc: Purge extra count_pmc() calls of ebb selftests Mike Christie <michael.christie(a)oracle.com> scsi: target: Fix xcopy sess release leak Dave Chinner <dchinner(a)redhat.com> xfs: Don't allow logging of XFS_ISTALE inodes Dick Kennedy <dick.kennedy(a)broadcom.com> scsi: lpfc: Fix shost refcount mismatch when deleting vport Navid Emamdoost <navid.emamdoost(a)gmail.com> drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails Navid Emamdoost <navid.emamdoost(a)gmail.com> drm/amdgpu: fix ref count leak in amdgpu_display_crtc_set_config Navid Emamdoost <navid.emamdoost(a)gmail.com> drm/amd/display: fix ref count leak in amdgpu_drm_ioctl Navid Emamdoost <navid.emamdoost(a)gmail.com> drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms Aditya Pakki <pakki001(a)umn.edu> drm/radeon: fix multiple reference count leak Qiushi Wu <wu000273(a)umn.edu> drm/amdkfd: Fix reference count leaks. Robin Murphy <robin.murphy(a)arm.com> iommu/iova: Don't BUG on invalid PFNs Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> mfd: intel-lpss: Add Intel Tiger Lake PCH-H PCI IDs Bodo Stroesser <bstroesser(a)ts.fujitsu.com> scsi: target: tcmu: Fix crash on ARM during cmd completion Luis Chamberlain <mcgrof(a)kernel.org> blktrace: ensure our debugfs dir exists Jia-Ju Bai <baijiaju(a)tsinghua.edu.cn> media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA value in debiirq() Alexey Kardashevskiy <aik(a)ozlabs.ru> powerpc/xive: Ignore kmemleak false positives Stephan Gerhold <stephan(a)gerhold.net> arm64: dts: qcom: msm8916: Pull down PDM GPIOs during sleep Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> mfd: intel-lpss: Add Intel Emmitsburg PCH PCI IDs Qiushi Wu <wu000273(a)umn.edu> ASoC: tegra: Fix reference count leaks. Qiushi Wu <wu000273(a)umn.edu> ASoC: img-parallel-out: Fix a reference count leak Qiushi Wu <wu000273(a)umn.edu> ASoC: img: Fix a reference count leak in img_i2s_in_set_fmt Kai-Heng Feng <kai.heng.feng(a)canonical.com> ALSA: hda/hdmi: Use force connectivity quirk on another HP desktop Kai-Heng Feng <kai.heng.feng(a)canonical.com> ALSA: hda/realtek: Fix pin default on Intel NUC 8 Rugged Randy Dunlap <rdunlap(a)infradead.org> ALSA: pci: delete repeated words in comments Kai-Heng Feng <kai.heng.feng(a)canonical.com> ALSA: hda/hdmi: Add quirk to force connectivity Mahesh Bandewar <maheshb(a)google.com> ipvlan: fix device features Alaa Hleihel <alaa(a)mellanox.com> net/sched: act_ct: Fix skb double-free in tcf_ct_handle_fragments() error flow Shay Agroskin <shayagr(a)amazon.com> net: ena: Make missed_tx stat incremental Cong Wang <xiyou.wangcong(a)gmail.com> tipc: fix uninit skb->data in tipc_nl_compat_dumpit() Peilin Ye <yepeilin.cs(a)gmail.com> net/smc: Prevent kernel-infoleak in __smc_diag_dump() David Laight <David.Laight(a)ACULAB.COM> net: sctp: Fix negotiation of the number of data streams. Necip Fazil Yildiran <necip(a)google.com> net: qrtr: fix usage of idr in port assignment to socket Nikolay Aleksandrov <nikolay(a)cumulusnetworks.com> net: nexthop: don't allow empty NHA_GROUP Miaohe Lin <linmiaohe(a)huawei.com> net: Fix potential wrong skb->protocol in skb_vlan_untag() Mark Tomlinson <mark.tomlinson(a)alliedtelesis.co.nz> gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY Max Filippov <jcmvbkbc(a)gmail.com> binfmt_flat: revert "binfmt_flat: don't offset the data start" Michael Ellerman <mpe(a)ellerman.id.au> powerpc/64s: Don't init FSCR_DSCR in __init_FSCR() ------------- Diffstat: Makefile | 15 +- arch/arm/boot/deflate_xip_data.sh | 2 +- arch/arm/boot/dts/ls1021a.dtsi | 2 +- arch/arm64/Makefile | 3 +- arch/arm64/boot/dts/qcom/msm8916-pins.dtsi | 2 +- arch/arm64/include/asm/smp.h | 7 +- arch/arm64/kernel/cpu_errata.c | 2 + arch/arm64/kernel/process.c | 34 +++ arch/arm64/kernel/setup.c | 8 +- arch/arm64/kernel/smp.c | 6 +- arch/arm64/kvm/hyp/switch.c | 2 +- arch/ia64/Makefile | 2 +- arch/m68k/Makefile | 8 +- arch/mips/vdso/genvdso.c | 10 + arch/parisc/Makefile | 2 +- arch/powerpc/kernel/cpu_setup_power.S | 2 +- arch/powerpc/perf/core-book3s.c | 23 +- arch/powerpc/platforms/cell/Kconfig | 1 + arch/powerpc/sysdev/xive/native.c | 2 + arch/s390/include/asm/numa.h | 1 - arch/s390/include/asm/topology.h | 2 - arch/s390/numa/numa.c | 6 - arch/x86/kernel/smpboot.c | 26 +- block/bfq-cgroup.c | 2 +- block/bfq-iosched.h | 1 - block/bfq-wf2q.c | 12 +- block/bio.c | 10 +- block/blk-cgroup.c | 8 +- block/blk-merge.c | 13 +- block/blk-mq-sched.c | 9 + block/blk-mq.c | 12 +- crypto/af_alg.c | 13 +- drivers/base/core.c | 12 +- drivers/base/power/main.c | 16 +- drivers/block/loop.c | 33 ++- drivers/block/null_blk_main.c | 2 +- drivers/block/virtio_blk.c | 31 ++- drivers/cpufreq/intel_pstate.c | 18 +- drivers/devfreq/rk3399_dmc.c | 51 ++-- drivers/edac/i7core_edac.c | 4 +- drivers/edac/ie31200_edac.c | 50 +++- drivers/edac/pnd2_edac.c | 2 +- drivers/edac/sb_edac.c | 25 +- drivers/edac/skx_common.c | 9 +- drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 16 +- drivers/gpu/drm/amd/amdgpu/amdgpu_display.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 7 +- drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 6 +- drivers/gpu/drm/amd/amdkfd/kfd_topology.c | 20 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 58 ++++ .../amd/display/dc/dcn10/dcn10_stream_encoder.c | 16 +- .../amd/display/dc/dcn10/dcn10_stream_encoder.h | 14 + drivers/gpu/drm/amd/powerplay/hwmgr/smu10_hwmgr.c | 9 +- .../gpu/drm/amd/powerplay/hwmgr/vega10_thermal.c | 22 +- .../gpu/drm/amd/powerplay/hwmgr/vega12_thermal.c | 21 +- drivers/gpu/drm/amd/powerplay/hwmgr/vega20_hwmgr.c | 44 ++- .../gpu/drm/amd/powerplay/hwmgr/vega20_thermal.c | 21 +- drivers/gpu/drm/i915/i915_cmd_parser.c | 14 +- drivers/gpu/drm/ingenic/ingenic-drm.c | 6 +- drivers/gpu/drm/msm/adreno/adreno_gpu.c | 2 +- drivers/gpu/drm/nouveau/dispnv50/disp.c | 4 +- drivers/gpu/drm/nouveau/nouveau_connector.c | 4 +- drivers/gpu/drm/nouveau/nouveau_fbcon.c | 4 +- drivers/gpu/drm/radeon/radeon_connectors.c | 20 +- drivers/gpu/drm/xen/xen_drm_front.c | 2 +- drivers/gpu/drm/xen/xen_drm_front_gem.c | 8 +- drivers/gpu/drm/xen/xen_drm_front_kms.c | 2 +- drivers/hid/hid-ids.h | 1 + drivers/hid/hid-quirks.c | 1 + drivers/hid/i2c-hid/i2c-hid-core.c | 22 +- drivers/hid/usbhid/hiddev.c | 4 + drivers/hwmon/nct7904.c | 4 +- drivers/i2c/busses/i2c-rcar.c | 1 + drivers/i2c/i2c-core-base.c | 2 +- drivers/iommu/iova.c | 4 +- drivers/irqchip/irq-stm32-exti.c | 14 +- drivers/media/cec/cec-api.c | 8 +- drivers/media/pci/ttpci/av7110.c | 5 +- drivers/media/platform/davinci/vpif_capture.c | 2 - drivers/media/rc/gpio-ir-tx.c | 7 +- drivers/mfd/intel-lpss-pci.c | 19 ++ drivers/net/ethernet/amazon/ena/ena_netdev.c | 5 +- drivers/net/ethernet/freescale/gianfar.c | 4 +- drivers/net/ethernet/intel/ixgbe/ixgbe_fcoe.c | 2 +- drivers/net/ipvlan/ipvlan_main.c | 27 +- drivers/net/macvlan.c | 21 +- drivers/net/wireless/ath/ath10k/hw.h | 2 +- .../broadcom/brcm80211/brcmfmac/cfg80211.c | 8 + drivers/net/wireless/realtek/rtlwifi/usb.c | 5 +- drivers/nvme/host/fc.c | 4 +- drivers/nvme/host/multipath.c | 15 +- drivers/pci/controller/dwc/pcie-qcom.c | 58 +++- drivers/pci/slot.c | 6 +- drivers/s390/cio/css.c | 5 + drivers/scsi/fcoe/fcoe_ctlr.c | 2 +- drivers/scsi/lpfc/lpfc_vport.c | 26 +- drivers/scsi/qla2xxx/qla_gs.c | 18 +- drivers/scsi/qla2xxx/qla_mbx.c | 8 - drivers/scsi/qla2xxx/qla_nvme.c | 5 + drivers/scsi/qla2xxx/qla_os.c | 5 + drivers/scsi/qla2xxx/qla_target.c | 2 +- drivers/scsi/scsi_transport_iscsi.c | 2 +- drivers/scsi/ufs/ufshcd.c | 14 +- drivers/spi/spi-stm32.c | 73 ++--- drivers/target/target_core_internal.h | 1 + drivers/target/target_core_transport.c | 7 +- drivers/target/target_core_user.c | 9 +- drivers/target/target_core_xcopy.c | 11 +- drivers/tty/serial/8250/8250_exar.c | 24 +- drivers/tty/serial/8250/8250_port.c | 9 +- drivers/tty/serial/amba-pl011.c | 16 +- drivers/tty/serial/samsung.c | 8 +- drivers/tty/serial/stm32-usart.c | 2 +- drivers/tty/vt/vt.c | 5 +- drivers/tty/vt/vt_ioctl.c | 12 +- drivers/usb/cdns3/gadget.c | 4 +- drivers/usb/class/cdc-acm.c | 22 +- drivers/usb/core/quirks.c | 7 + drivers/usb/dwc3/gadget.c | 104 +++++-- drivers/usb/gadget/function/f_ncm.c | 81 +++++- drivers/usb/gadget/function/f_tcm.c | 7 +- drivers/usb/gadget/u_f.h | 38 ++- drivers/usb/host/ohci-exynos.c | 5 +- drivers/usb/host/xhci-debugfs.c | 8 +- drivers/usb/host/xhci-hub.c | 19 +- drivers/usb/host/xhci.c | 3 +- drivers/usb/misc/lvstest.c | 2 +- drivers/usb/misc/sisusbvga/sisusb.c | 2 +- drivers/usb/misc/yurex.c | 2 +- drivers/usb/storage/unusual_devs.h | 2 +- drivers/usb/storage/unusual_uas.h | 14 + drivers/video/fbdev/core/fbcon.c | 25 +- drivers/video/fbdev/core/fbmem.c | 8 +- drivers/video/fbdev/core/fbsysfs.c | 4 +- drivers/video/fbdev/omap2/omapfb/dss/dispc.c | 7 +- drivers/video/fbdev/omap2/omapfb/dss/dsi.c | 7 +- drivers/video/fbdev/omap2/omapfb/dss/dss.c | 7 +- drivers/video/fbdev/omap2/omapfb/dss/hdmi4.c | 5 +- drivers/video/fbdev/omap2/omapfb/dss/hdmi5.c | 5 +- drivers/video/fbdev/omap2/omapfb/dss/venc.c | 7 +- drivers/video/fbdev/ps3fb.c | 5 +- drivers/xen/events/events_base.c | 16 +- fs/binfmt_flat.c | 20 +- fs/btrfs/ctree.h | 4 +- fs/btrfs/disk-io.c | 1 + fs/btrfs/extent-tree.c | 17 +- fs/btrfs/file.c | 10 +- fs/btrfs/free-space-cache.c | 2 +- fs/btrfs/inode.c | 18 +- fs/btrfs/qgroup.c | 14 +- fs/btrfs/qgroup.h | 2 +- fs/btrfs/super.c | 1 + fs/btrfs/tree-log.c | 305 +++++++++++---------- fs/buffer.c | 9 + fs/ceph/file.c | 5 +- fs/ceph/mds_client.c | 14 +- fs/ext4/block_validity.c | 8 - fs/ext4/super.c | 175 ++++++++---- fs/f2fs/f2fs.h | 4 +- fs/f2fs/inline.c | 19 +- fs/f2fs/node.c | 6 +- fs/f2fs/recovery.c | 10 +- fs/f2fs/super.c | 5 +- fs/fs-writeback.c | 83 +++--- fs/hugetlbfs/inode.c | 6 + fs/io_uring.c | 9 + fs/jbd2/transaction.c | 26 ++ fs/xfs/libxfs/xfs_trans_inode.c | 2 + fs/xfs/xfs_icache.c | 3 +- fs/xfs/xfs_inode.c | 25 +- include/linux/efi.h | 4 + include/linux/fb.h | 2 - include/linux/fs.h | 8 +- include/linux/netfilter_ipv6.h | 18 -- include/trace/events/writeback.h | 13 +- kernel/Makefile | 2 +- kernel/gen_kheaders.sh | 66 +++-- kernel/irq/matrix.c | 7 + kernel/locking/lockdep_proc.c | 2 +- kernel/sched/core.c | 81 +++++- kernel/sched/cpufreq_schedutil.c | 2 +- kernel/sched/sched.h | 47 +++- kernel/trace/blktrace.c | 12 + mm/cma.c | 29 +- mm/mmu_context.c | 7 +- mm/shuffle.c | 18 +- mm/vmalloc.c | 2 + net/bridge/netfilter/nf_conntrack_bridge.c | 8 +- net/can/j1939/transport.c | 15 +- net/core/skbuff.c | 4 +- net/ipv4/nexthop.c | 5 +- net/ipv6/ip6_tunnel.c | 10 +- net/ipv6/netfilter.c | 3 - net/qrtr/qrtr.c | 20 +- net/sched/act_ct.c | 2 +- net/sctp/stream.c | 6 +- net/smc/smc_diag.c | 16 +- net/tipc/netlink_compat.c | 12 +- scripts/Makefile.lib | 12 +- scripts/Makefile.package | 8 +- scripts/package/buildtar | 6 +- scripts/xz_wrap.sh | 2 +- sound/pci/cs46xx/cs46xx_lib.c | 2 +- sound/pci/cs46xx/dsp_spos_scb_lib.c | 2 +- sound/pci/hda/hda_codec.c | 2 +- sound/pci/hda/hda_generic.c | 2 +- sound/pci/hda/hda_intel.c | 2 + sound/pci/hda/patch_hdmi.c | 17 +- sound/pci/hda/patch_realtek.c | 12 + sound/pci/hda/patch_sigmatel.c | 2 +- sound/pci/ice1712/prodigy192.c | 2 +- sound/pci/oxygen/xonar_dg.c | 2 +- sound/soc/codecs/wm8958-dsp2.c | 4 + sound/soc/img/img-i2s-in.c | 4 +- sound/soc/img/img-parallel-out.c | 4 +- sound/soc/tegra/tegra30_ahub.c | 4 +- sound/soc/tegra/tegra30_i2s.c | 4 +- sound/usb/quirks-table.h | 34 ++- tools/testing/selftests/net/icmp_redirect.sh | 2 + .../powerpc/pmu/ebb/back_to_back_ebbs_test.c | 2 - .../selftests/powerpc/pmu/ebb/cycles_test.c | 2 - .../powerpc/pmu/ebb/cycles_with_freeze_test.c | 2 - .../powerpc/pmu/ebb/cycles_with_mmcr2_test.c | 2 - tools/testing/selftests/powerpc/pmu/ebb/ebb.c | 2 - .../powerpc/pmu/ebb/ebb_on_willing_child_test.c | 2 - .../powerpc/pmu/ebb/lost_exception_test.c | 1 - .../selftests/powerpc/pmu/ebb/multi_counter_test.c | 7 - .../powerpc/pmu/ebb/multi_ebb_procs_test.c | 2 - .../selftests/powerpc/pmu/ebb/pmae_handling_test.c | 2 - .../powerpc/pmu/ebb/pmc56_overflow_test.c | 2 - 231 files changed, 2125 insertions(+), 1014 deletions(-)

3 years, 8 months

3
2
0 0

[PATCH 4.14 00/91] 4.14.196-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 4.14.196 release. There are 91 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 03 Sep 2020 15:09:01 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.196-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 4.14.196-rc1 Hector Martin <marcan(a)marcan.st> ALSA: usb-audio: Update documentation comment for MS2109 quirk Peilin Ye <yepeilin.cs(a)gmail.com> HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage() Jarkko Sakkinen <jarkko.sakkinen(a)linux.intel.com> tpm: Unify the mismatching TPM space buffer sizes Josef Bacik <josef(a)toxicpanda.com> btrfs: check the right error variable in btrfs_del_dir_entries_in_log Alan Stern <stern(a)rowland.harvard.edu> usb: storage: Add unusual_uas entry for Sony PSZ drives Tom Rix <trix(a)redhat.com> USB: cdc-acm: rework notification_buffer resizing Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> USB: gadget: u_f: Unbreak offset calculation in VLAs Brooke Basile <brookebasile(a)gmail.com> USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb() Brooke Basile <brookebasile(a)gmail.com> USB: gadget: u_f: add overflow checks to VLA macros Kees Cook <keescook(a)chromium.org> overflow.h: Add allocation size calculation helpers Tang Bin <tangbin(a)cmss.chinamobile.com> usb: host: ohci-exynos: Fix error handling in exynos_ohci_probe() Cyril Roelandt <tipecaml(a)gmail.com> USB: Ignore UAS for JMicron JMS567 ATA/ATAPI Bridge Kai-Heng Feng <kai.heng.feng(a)canonical.com> USB: quirks: Add no-lpm quirk for another Raydium touchscreen Thinh Nguyen <Thinh.Nguyen(a)synopsys.com> usb: uas: Add quirk for PNY Pro Elite Alan Stern <stern(a)rowland.harvard.edu> USB: yurex: Fix bad gfp argument Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: Fix buffer overflow in INFO ioctl Heikki Krogerus <heikki.krogerus(a)linux.intel.com> device property: Fix the secondary firmware node handling in set_primary_fwnode() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> PM: sleep: core: Fix the handling of pending runtime resume requests Kai-Heng Feng <kai.heng.feng(a)canonical.com> xhci: Do warm-reset when both CAS and XDEV_RESUME are set Thomas Gleixner <tglx(a)linutronix.de> XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information. Jan Kara <jack(a)suse.cz> writeback: Fix sync livelock due to b_dirty_time processing Jan Kara <jack(a)suse.cz> writeback: Avoid skipping inode writeback Jan Kara <jack(a)suse.cz> writeback: Protect inode->i_io_list with inode->i_lock Sergey Senozhatsky <sergey.senozhatsky(a)gmail.com> serial: 8250: change lock order in serial8250_do_startup() Valmer Huhn <valmer.huhn(a)concurrent-rt.com> serial: 8250_exar: Fix number of ports for Commtech PCIe cards Lukas Wunner <lukas(a)wunner.de> serial: pl011: Don't leak amba_ports entry on driver register error Lukas Wunner <lukas(a)wunner.de> serial: pl011: Fix oops on -EPROBE_DEFER Tamseel Shams <m.shams(a)samsung.com> serial: samsung: Removes the IRQ not found warning George Kennedy <george.kennedy(a)oracle.com> vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize() Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> vt: defer kfree() of vc_screenbuf in vc_do_resize() Evgeny Novikov <novikov(a)ispras.ru> USB: lvtest: return proper error code in probe George Kennedy <george.kennedy(a)oracle.com> fbcon: prevent user font height or width change from causing potential out-of-bounds access Filipe Manana <fdmanana(a)suse.com> btrfs: fix space cache memory leak after transaction abort Hans de Goede <hdegoede(a)redhat.com> HID: i2c-hid: Always sleep 60ms after I2C_HID_PWR_ON commands Athira Rajeev <atrajeev(a)linux.vnet.ibm.com> powerpc/perf: Fix soft lockups due to missed interrupt accounting Sumera Priyadarsini <sylphrenadin(a)gmail.com> net: gianfar: Add of_node_put() before goto statement Stanley Chu <stanley.chu(a)mediatek.com> scsi: ufs: Clean up completed request without interrupt notification Adrian Hunter <adrian.hunter(a)intel.com> scsi: ufs: Improve interrupt handling for shared interrupts Stanley Chu <stanley.chu(a)mediatek.com> scsi: ufs: Fix possible infinite loop in ufshcd_hold Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: add cond_resched() in the slow_eval_known_fn() loop Amelie Delaunay <amelie.delaunay(a)st.com> spi: stm32: fix stm32_spi_prepare_mbr in case of odd clk_rate Xianting Tian <xianting_tian(a)126.com> fs: prevent BUG_ON in submit_bh_wbc() zhangyi (F) <yi.zhang(a)huawei.com> jbd2: abort journal if free a async write error metadata buffer Jan Kara <jack(a)suse.cz> ext4: don't BUG on inconsistent journal feature Lukas Czerner <lczerner(a)redhat.com> jbd2: make sure jh have b_transaction set in refile/unfile_buffer Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> usb: gadget: f_tcm: Fix some resource leaks in some error paths Wolfram Sang <wsa+renesas(a)sang-engineering.com> i2c: rcar: in slave mode, clear NACK earlier Hou Pu <houpu(a)bytedance.com> null_blk: fix passing of REQ_FUA flag in null_handle_rq Tianjia Zhang <tianjia.zhang(a)linux.alibaba.com> nvme-fc: Fix wrong return value in __nvme_fc_init_request() Sean Young <sean(a)mess.org> media: gpio-ir-tx: improve precision of transmitted signal due to scheduling Zhi Chen <zhichen(a)codeaurora.org> Revert "ath10k: fix DMA related firmware crashes on multiple devices" Andrey Konovalov <andreyknvl(a)google.com> efi: provide empty efi_enter_virtual_mode implementation Changming Liu <charley.ashbringer(a)gmail.com> USB: sisusbvga: Fix a potential UB casued by left shifting a negative value Arnd Bergmann <arnd(a)arndb.de> powerpc/spufs: add CONFIG_COREDUMP dependency David Brazdil <dbrazdil(a)google.com> KVM: arm64: Fix symbol dependency in __hyp_call_panic_nvhe Evgeny Novikov <novikov(a)ispras.ru> media: davinci: vpif_capture: fix potential double free Jason Baron <jbaron(a)akamai.com> EDAC/ie31200: Fallback if host bridge device is already initialized Javed Hasan <jhasan(a)marvell.com> scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del() Xiubo Li <xiubli(a)redhat.com> ceph: fix potential mdsc use-after-free crash Jing Xiangfeng <jingxiangfeng(a)huawei.com> scsi: iscsi: Do not put host in iscsi_set_flashnode_param() Chris Wilson <chris(a)chris-wilson.co.uk> locking/lockdep: Fix overflow in presentation of average lock-time Aditya Pakki <pakki001(a)umn.edu> drm/nouveau: Fix reference count leak in nouveau_connector_detect Aditya Pakki <pakki001(a)umn.edu> drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open Li Guifu <bluce.liguifu(a)huawei.com> f2fs: fix use-after-free issue Hans Verkuil <hverkuil-cisco(a)xs4all.nl> cec-api: prevent leaking memory through hole in structure Peng Fan <fanpeng(a)loongson.cn> mips/vdso: Fix resource leaks in genvdso.c Reto Schneider <code(a)reto-schneider.ch> rtlwifi: rtl8192cu: Prevent leaking urb Qiushi Wu <wu000273(a)umn.edu> PCI: Fix pci_create_slot() reference count leak Aditya Pakki <pakki001(a)umn.edu> omapfb: fix multiple reference count leaks due to pm_runtime_get_sync Desnes A. Nunes do Rosario <desnesn(a)linux.ibm.com> selftests/powerpc: Purge extra count_pmc() calls of ebb selftests Dick Kennedy <dick.kennedy(a)broadcom.com> scsi: lpfc: Fix shost refcount mismatch when deleting vport Navid Emamdoost <navid.emamdoost(a)gmail.com> drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails Navid Emamdoost <navid.emamdoost(a)gmail.com> drm/amdgpu: fix ref count leak in amdgpu_display_crtc_set_config Navid Emamdoost <navid.emamdoost(a)gmail.com> drm/amd/display: fix ref count leak in amdgpu_drm_ioctl Navid Emamdoost <navid.emamdoost(a)gmail.com> drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms Aditya Pakki <pakki001(a)umn.edu> drm/radeon: fix multiple reference count leak Qiushi Wu <wu000273(a)umn.edu> drm/amdkfd: Fix reference count leaks. Robin Murphy <robin.murphy(a)arm.com> iommu/iova: Don't BUG on invalid PFNs Bodo Stroesser <bstroesser(a)ts.fujitsu.com> scsi: target: tcmu: Fix crash on ARM during cmd completion Luis Chamberlain <mcgrof(a)kernel.org> blktrace: ensure our debugfs dir exists Jia-Ju Bai <baijiaju(a)tsinghua.edu.cn> media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA value in debiirq() Alexey Kardashevskiy <aik(a)ozlabs.ru> powerpc/xive: Ignore kmemleak false positives Stephan Gerhold <stephan(a)gerhold.net> arm64: dts: qcom: msm8916: Pull down PDM GPIOs during sleep Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> mfd: intel-lpss: Add Intel Emmitsburg PCH PCI IDs Qiushi Wu <wu000273(a)umn.edu> ASoC: tegra: Fix reference count leaks. Randy Dunlap <rdunlap(a)infradead.org> ALSA: pci: delete repeated words in comments Mark Tomlinson <mark.tomlinson(a)alliedtelesis.co.nz> gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY Mahesh Bandewar <maheshb(a)google.com> ipvlan: fix device features Cong Wang <xiyou.wangcong(a)gmail.com> tipc: fix uninit skb->data in tipc_nl_compat_dumpit() Miaohe Lin <linmiaohe(a)huawei.com> net: Fix potential wrong skb->protocol in skb_vlan_untag() Michael Ellerman <mpe(a)ellerman.id.au> powerpc/64s: Don't init FSCR_DSCR in __init_FSCR() ------------- Diffstat: Makefile | 4 +- arch/arm64/boot/dts/qcom/msm8916-pins.dtsi | 2 +- arch/arm64/kvm/hyp/switch.c | 2 +- arch/mips/vdso/genvdso.c | 10 +++ arch/powerpc/kernel/cpu_setup_power.S | 2 +- arch/powerpc/perf/core-book3s.c | 4 ++ arch/powerpc/platforms/cell/Kconfig | 1 + arch/powerpc/sysdev/xive/native.c | 2 + drivers/base/core.c | 12 ++-- drivers/base/power/main.c | 16 +++-- drivers/block/null_blk.c | 2 +- drivers/char/tpm/tpm-chip.c | 9 +-- drivers/char/tpm/tpm.h | 6 +- drivers/char/tpm/tpm2-space.c | 26 ++++--- drivers/char/tpm/tpmrm-dev.c | 2 +- drivers/edac/ie31200_edac.c | 50 ++++++++++++- drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 16 +++-- drivers/gpu/drm/amd/amdgpu/amdgpu_display.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 7 +- drivers/gpu/drm/amd/amdkfd/kfd_topology.c | 20 ++++-- drivers/gpu/drm/nouveau/nouveau_connector.c | 4 +- drivers/gpu/drm/nouveau/nouveau_fbcon.c | 4 +- drivers/gpu/drm/radeon/radeon_connectors.c | 20 ++++-- drivers/hid/i2c-hid/i2c-hid-core.c | 22 +++--- drivers/hid/usbhid/hiddev.c | 4 ++ drivers/i2c/busses/i2c-rcar.c | 1 + drivers/iommu/iova.c | 4 +- drivers/md/dm-table.c | 10 +-- drivers/media/cec/cec-api.c | 8 ++- drivers/media/pci/ttpci/av7110.c | 5 +- drivers/media/platform/davinci/vpif_capture.c | 2 - drivers/media/rc/gpio-ir-tx.c | 7 +- drivers/mfd/intel-lpss-pci.c | 3 + drivers/net/ethernet/freescale/gianfar.c | 4 +- drivers/net/ipvlan/ipvlan_main.c | 27 +++++-- drivers/net/wireless/ath/ath10k/hw.h | 2 +- drivers/net/wireless/realtek/rtlwifi/usb.c | 5 +- drivers/nvme/host/fc.c | 4 +- drivers/pci/slot.c | 6 +- drivers/s390/cio/css.c | 5 ++ drivers/scsi/fcoe/fcoe_ctlr.c | 2 +- drivers/scsi/lpfc/lpfc_vport.c | 26 +++---- drivers/scsi/scsi_transport_iscsi.c | 2 +- drivers/scsi/ufs/ufshcd.c | 14 ++-- drivers/spi/spi-stm32.c | 3 +- drivers/target/target_core_user.c | 9 ++- drivers/tty/serial/8250/8250_exar.c | 24 ++++++- drivers/tty/serial/8250/8250_port.c | 9 ++- drivers/tty/serial/amba-pl011.c | 16 +++-- drivers/tty/serial/samsung.c | 8 ++- drivers/tty/vt/vt.c | 5 +- drivers/tty/vt/vt_ioctl.c | 12 +++- drivers/usb/class/cdc-acm.c | 22 +++--- drivers/usb/core/quirks.c | 2 + drivers/usb/gadget/function/f_ncm.c | 81 +++++++++++++++++---- drivers/usb/gadget/function/f_tcm.c | 7 +- drivers/usb/gadget/u_f.h | 38 +++++++--- drivers/usb/host/ohci-exynos.c | 5 +- drivers/usb/host/xhci-hub.c | 19 ++--- drivers/usb/misc/lvstest.c | 2 +- drivers/usb/misc/sisusbvga/sisusb.c | 2 +- drivers/usb/misc/yurex.c | 2 +- drivers/usb/storage/unusual_devs.h | 2 +- drivers/usb/storage/unusual_uas.h | 14 ++++ drivers/video/fbdev/core/fbcon.c | 25 ++++++- drivers/video/fbdev/omap2/omapfb/dss/dispc.c | 7 +- drivers/video/fbdev/omap2/omapfb/dss/dsi.c | 7 +- drivers/video/fbdev/omap2/omapfb/dss/dss.c | 7 +- drivers/video/fbdev/omap2/omapfb/dss/hdmi4.c | 5 +- drivers/video/fbdev/omap2/omapfb/dss/hdmi5.c | 5 +- drivers/video/fbdev/omap2/omapfb/dss/venc.c | 7 +- drivers/xen/events/events_base.c | 16 ++--- fs/btrfs/disk-io.c | 1 + fs/btrfs/free-space-cache.c | 2 +- fs/btrfs/tree-log.c | 10 +-- fs/buffer.c | 9 +++ fs/ceph/mds_client.c | 14 +++- fs/ext4/super.c | 75 +++++++++++-------- fs/f2fs/super.c | 5 +- fs/fs-writeback.c | 83 ++++++++++++---------- fs/jbd2/transaction.c | 26 +++++++ include/linux/efi.h | 4 ++ include/linux/fs.h | 8 ++- include/linux/overflow.h | 73 +++++++++++++++++++ include/trace/events/writeback.h | 13 ++-- kernel/locking/lockdep_proc.c | 2 +- kernel/trace/blktrace.c | 12 ++++ net/core/skbuff.c | 4 +- net/ipv6/ip6_tunnel.c | 10 ++- net/tipc/netlink_compat.c | 12 +++- sound/pci/cs46xx/cs46xx_lib.c | 2 +- sound/pci/cs46xx/dsp_spos_scb_lib.c | 2 +- sound/pci/hda/hda_codec.c | 2 +- sound/pci/hda/hda_generic.c | 2 +- sound/pci/hda/patch_sigmatel.c | 2 +- sound/pci/ice1712/prodigy192.c | 2 +- sound/pci/oxygen/xonar_dg.c | 2 +- sound/soc/tegra/tegra30_ahub.c | 4 +- sound/soc/tegra/tegra30_i2s.c | 4 +- sound/usb/quirks-table.h | 4 +- .../powerpc/pmu/ebb/back_to_back_ebbs_test.c | 2 - .../selftests/powerpc/pmu/ebb/cycles_test.c | 2 - .../powerpc/pmu/ebb/cycles_with_freeze_test.c | 2 - .../powerpc/pmu/ebb/cycles_with_mmcr2_test.c | 2 - tools/testing/selftests/powerpc/pmu/ebb/ebb.c | 2 - .../powerpc/pmu/ebb/ebb_on_willing_child_test.c | 2 - .../powerpc/pmu/ebb/lost_exception_test.c | 1 - .../selftests/powerpc/pmu/ebb/multi_counter_test.c | 7 -- .../powerpc/pmu/ebb/multi_ebb_procs_test.c | 2 - .../selftests/powerpc/pmu/ebb/pmae_handling_test.c | 2 - .../powerpc/pmu/ebb/pmc56_overflow_test.c | 2 - 112 files changed, 826 insertions(+), 342 deletions(-)

3 years, 8 months

4
94
0 0

[PATCH 4.9 00/78] 4.9.235-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 4.9.235 release. There are 78 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 03 Sep 2020 15:09:01 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.9.235-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.9.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 4.9.235-rc1 Hector Martin <marcan(a)marcan.st> ALSA: usb-audio: Update documentation comment for MS2109 quirk Peilin Ye <yepeilin.cs(a)gmail.com> HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage() Josef Bacik <josef(a)toxicpanda.com> btrfs: check the right error variable in btrfs_del_dir_entries_in_log Alan Stern <stern(a)rowland.harvard.edu> usb: storage: Add unusual_uas entry for Sony PSZ drives Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> USB: gadget: u_f: Unbreak offset calculation in VLAs Brooke Basile <brookebasile(a)gmail.com> USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb() Brooke Basile <brookebasile(a)gmail.com> USB: gadget: u_f: add overflow checks to VLA macros Kees Cook <keescook(a)chromium.org> overflow.h: Add allocation size calculation helpers Tang Bin <tangbin(a)cmss.chinamobile.com> usb: host: ohci-exynos: Fix error handling in exynos_ohci_probe() Cyril Roelandt <tipecaml(a)gmail.com> USB: Ignore UAS for JMicron JMS567 ATA/ATAPI Bridge Kai-Heng Feng <kai.heng.feng(a)canonical.com> USB: quirks: Add no-lpm quirk for another Raydium touchscreen Thinh Nguyen <Thinh.Nguyen(a)synopsys.com> usb: uas: Add quirk for PNY Pro Elite Alan Stern <stern(a)rowland.harvard.edu> USB: yurex: Fix bad gfp argument Heikki Krogerus <heikki.krogerus(a)linux.intel.com> device property: Fix the secondary firmware node handling in set_primary_fwnode() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> PM: sleep: core: Fix the handling of pending runtime resume requests Kai-Heng Feng <kai.heng.feng(a)canonical.com> xhci: Do warm-reset when both CAS and XDEV_RESUME are set Thomas Gleixner <tglx(a)linutronix.de> XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information. Jan Kara <jack(a)suse.cz> writeback: Fix sync livelock due to b_dirty_time processing Jan Kara <jack(a)suse.cz> writeback: Avoid skipping inode writeback Jan Kara <jack(a)suse.cz> writeback: Protect inode->i_io_list with inode->i_lock Sergey Senozhatsky <sergey.senozhatsky(a)gmail.com> serial: 8250: change lock order in serial8250_do_startup() Lukas Wunner <lukas(a)wunner.de> serial: pl011: Don't leak amba_ports entry on driver register error Lukas Wunner <lukas(a)wunner.de> serial: pl011: Fix oops on -EPROBE_DEFER Tamseel Shams <m.shams(a)samsung.com> serial: samsung: Removes the IRQ not found warning George Kennedy <george.kennedy(a)oracle.com> vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize() Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> vt: defer kfree() of vc_screenbuf in vc_do_resize() Evgeny Novikov <novikov(a)ispras.ru> USB: lvtest: return proper error code in probe George Kennedy <george.kennedy(a)oracle.com> fbcon: prevent user font height or width change from causing potential out-of-bounds access Filipe Manana <fdmanana(a)suse.com> btrfs: fix space cache memory leak after transaction abort Hans de Goede <hdegoede(a)redhat.com> HID: i2c-hid: Always sleep 60ms after I2C_HID_PWR_ON commands Athira Rajeev <atrajeev(a)linux.vnet.ibm.com> powerpc/perf: Fix soft lockups due to missed interrupt accounting Sumera Priyadarsini <sylphrenadin(a)gmail.com> net: gianfar: Add of_node_put() before goto statement Adrian Hunter <adrian.hunter(a)intel.com> scsi: ufs: Improve interrupt handling for shared interrupts Stanley Chu <stanley.chu(a)mediatek.com> scsi: ufs: Fix possible infinite loop in ufshcd_hold Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: add cond_resched() in the slow_eval_known_fn() loop Xianting Tian <xianting_tian(a)126.com> fs: prevent BUG_ON in submit_bh_wbc() zhangyi (F) <yi.zhang(a)huawei.com> jbd2: abort journal if free a async write error metadata buffer Lukas Czerner <lczerner(a)redhat.com> jbd2: make sure jh have b_transaction set in refile/unfile_buffer Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> usb: gadget: f_tcm: Fix some resource leaks in some error paths Wolfram Sang <wsa+renesas(a)sang-engineering.com> i2c: rcar: in slave mode, clear NACK earlier Zhi Chen <zhichen(a)codeaurora.org> Revert "ath10k: fix DMA related firmware crashes on multiple devices" Andrey Konovalov <andreyknvl(a)google.com> efi: provide empty efi_enter_virtual_mode implementation Changming Liu <charley.ashbringer(a)gmail.com> USB: sisusbvga: Fix a potential UB casued by left shifting a negative value Arnd Bergmann <arnd(a)arndb.de> powerpc/spufs: add CONFIG_COREDUMP dependency David Brazdil <dbrazdil(a)google.com> KVM: arm64: Fix symbol dependency in __hyp_call_panic_nvhe Evgeny Novikov <novikov(a)ispras.ru> media: davinci: vpif_capture: fix potential double free Jason Baron <jbaron(a)akamai.com> EDAC/ie31200: Fallback if host bridge device is already initialized Javed Hasan <jhasan(a)marvell.com> scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del() Xiubo Li <xiubli(a)redhat.com> ceph: fix potential mdsc use-after-free crash Jing Xiangfeng <jingxiangfeng(a)huawei.com> scsi: iscsi: Do not put host in iscsi_set_flashnode_param() Chris Wilson <chris(a)chris-wilson.co.uk> locking/lockdep: Fix overflow in presentation of average lock-time Aditya Pakki <pakki001(a)umn.edu> drm/nouveau: Fix reference count leak in nouveau_connector_detect Aditya Pakki <pakki001(a)umn.edu> drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open Hans Verkuil <hverkuil-cisco(a)xs4all.nl> cec-api: prevent leaking memory through hole in structure Peng Fan <fanpeng(a)loongson.cn> mips/vdso: Fix resource leaks in genvdso.c Reto Schneider <code(a)reto-schneider.ch> rtlwifi: rtl8192cu: Prevent leaking urb Qiushi Wu <wu000273(a)umn.edu> PCI: Fix pci_create_slot() reference count leak Aditya Pakki <pakki001(a)umn.edu> omapfb: fix multiple reference count leaks due to pm_runtime_get_sync Desnes A. Nunes do Rosario <desnesn(a)linux.ibm.com> selftests/powerpc: Purge extra count_pmc() calls of ebb selftests Dick Kennedy <dick.kennedy(a)broadcom.com> scsi: lpfc: Fix shost refcount mismatch when deleting vport Navid Emamdoost <navid.emamdoost(a)gmail.com> drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails Navid Emamdoost <navid.emamdoost(a)gmail.com> drm/amdgpu: fix ref count leak in amdgpu_display_crtc_set_config Navid Emamdoost <navid.emamdoost(a)gmail.com> drm/amd/display: fix ref count leak in amdgpu_drm_ioctl Navid Emamdoost <navid.emamdoost(a)gmail.com> drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms Aditya Pakki <pakki001(a)umn.edu> drm/radeon: fix multiple reference count leak Qiushi Wu <wu000273(a)umn.edu> drm/amdkfd: Fix reference count leaks. Robin Murphy <robin.murphy(a)arm.com> iommu/iova: Don't BUG on invalid PFNs Bodo Stroesser <bstroesser(a)ts.fujitsu.com> scsi: target: tcmu: Fix crash on ARM during cmd completion Jia-Ju Bai <baijiaju(a)tsinghua.edu.cn> media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA value in debiirq() Stephan Gerhold <stephan(a)gerhold.net> arm64: dts: qcom: msm8916: Pull down PDM GPIOs during sleep Qiushi Wu <wu000273(a)umn.edu> ASoC: tegra: Fix reference count leaks. Randy Dunlap <rdunlap(a)infradead.org> ALSA: pci: delete repeated words in comments Mark Tomlinson <mark.tomlinson(a)alliedtelesis.co.nz> gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY Mahesh Bandewar <maheshb(a)google.com> ipvlan: fix device features Cong Wang <xiyou.wangcong(a)gmail.com> tipc: fix uninit skb->data in tipc_nl_compat_dumpit() Miaohe Lin <linmiaohe(a)huawei.com> net: Fix potential wrong skb->protocol in skb_vlan_untag() Jarod Wilson <jarod(a)redhat.com> bonding: show saner speed for broadcast mode Cong Wang <xiyou.wangcong(a)gmail.com> bonding: fix a potential double-unregister ------------- Diffstat: Makefile | 4 +- arch/arm64/boot/dts/qcom/msm8916-pins.dtsi | 2 +- arch/arm64/kvm/hyp/switch.c | 2 +- arch/mips/vdso/genvdso.c | 10 +++ arch/powerpc/perf/core-book3s.c | 4 ++ arch/powerpc/platforms/cell/Kconfig | 1 + drivers/base/core.c | 12 ++-- drivers/base/power/main.c | 16 +++-- drivers/edac/ie31200_edac.c | 50 ++++++++++++- drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 16 +++-- drivers/gpu/drm/amd/amdgpu/amdgpu_display.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 3 +- drivers/gpu/drm/amd/amdkfd/kfd_topology.c | 20 ++++-- drivers/gpu/drm/nouveau/nouveau_connector.c | 4 +- drivers/gpu/drm/nouveau/nouveau_fbcon.c | 4 +- drivers/gpu/drm/radeon/radeon_connectors.c | 20 ++++-- drivers/hid/i2c-hid/i2c-hid-core.c | 22 +++--- drivers/hid/usbhid/hiddev.c | 4 ++ drivers/i2c/busses/i2c-rcar.c | 1 + drivers/iommu/iova.c | 4 +- drivers/md/dm-table.c | 10 +-- drivers/media/pci/ttpci/av7110.c | 5 +- drivers/media/platform/davinci/vpif_capture.c | 2 - drivers/net/bonding/bond_main.c | 24 +++++-- drivers/net/ethernet/freescale/gianfar.c | 4 +- drivers/net/ipvlan/ipvlan_main.c | 25 +++++-- drivers/net/wireless/ath/ath10k/hw.h | 2 +- drivers/net/wireless/realtek/rtlwifi/usb.c | 5 +- drivers/pci/slot.c | 6 +- drivers/s390/cio/css.c | 5 ++ drivers/scsi/fcoe/fcoe_ctlr.c | 2 +- drivers/scsi/lpfc/lpfc_vport.c | 26 +++---- drivers/scsi/scsi_transport_iscsi.c | 2 +- drivers/scsi/ufs/ufshcd.c | 11 +-- drivers/staging/media/cec/cec-api.c | 8 ++- drivers/target/target_core_user.c | 9 ++- drivers/tty/serial/8250/8250_port.c | 9 ++- drivers/tty/serial/amba-pl011.c | 16 +++-- drivers/tty/serial/samsung.c | 8 ++- drivers/tty/vt/vt.c | 5 +- drivers/tty/vt/vt_ioctl.c | 12 +++- drivers/usb/core/quirks.c | 2 + drivers/usb/gadget/function/f_ncm.c | 81 +++++++++++++++++---- drivers/usb/gadget/function/f_tcm.c | 7 +- drivers/usb/gadget/u_f.h | 38 +++++++--- drivers/usb/host/ohci-exynos.c | 5 +- drivers/usb/host/xhci-hub.c | 19 ++--- drivers/usb/misc/lvstest.c | 2 +- drivers/usb/misc/sisusbvga/sisusb.c | 2 +- drivers/usb/misc/yurex.c | 2 +- drivers/usb/storage/unusual_devs.h | 2 +- drivers/usb/storage/unusual_uas.h | 14 ++++ drivers/video/console/fbcon.c | 25 ++++++- drivers/video/fbdev/omap2/omapfb/dss/dispc.c | 7 +- drivers/video/fbdev/omap2/omapfb/dss/dsi.c | 7 +- drivers/video/fbdev/omap2/omapfb/dss/dss.c | 7 +- drivers/video/fbdev/omap2/omapfb/dss/hdmi4.c | 5 +- drivers/video/fbdev/omap2/omapfb/dss/hdmi5.c | 5 +- drivers/video/fbdev/omap2/omapfb/dss/venc.c | 7 +- drivers/xen/events/events_base.c | 16 ++--- fs/btrfs/disk-io.c | 1 + fs/btrfs/free-space-cache.c | 2 +- fs/btrfs/tree-log.c | 10 +-- fs/buffer.c | 9 +++ fs/ceph/mds_client.c | 14 +++- fs/ext4/super.c | 7 -- fs/fs-writeback.c | 83 ++++++++++++---------- fs/jbd2/transaction.c | 26 +++++++ include/linux/efi.h | 4 ++ include/linux/fs.h | 8 ++- include/linux/overflow.h | 73 +++++++++++++++++++ include/trace/events/writeback.h | 13 ++-- kernel/locking/lockdep_proc.c | 2 +- net/core/skbuff.c | 4 +- net/ipv6/ip6_tunnel.c | 10 ++- net/tipc/netlink_compat.c | 12 +++- sound/pci/cs46xx/cs46xx_lib.c | 2 +- sound/pci/cs46xx/dsp_spos_scb_lib.c | 2 +- sound/pci/hda/hda_codec.c | 2 +- sound/pci/hda/hda_generic.c | 2 +- sound/pci/hda/patch_sigmatel.c | 2 +- sound/pci/ice1712/prodigy192.c | 2 +- sound/pci/oxygen/xonar_dg.c | 2 +- sound/soc/tegra/tegra30_ahub.c | 4 +- sound/soc/tegra/tegra30_i2s.c | 4 +- sound/usb/quirks-table.h | 4 +- .../powerpc/pmu/ebb/back_to_back_ebbs_test.c | 2 - .../selftests/powerpc/pmu/ebb/cycles_test.c | 2 - .../powerpc/pmu/ebb/cycles_with_freeze_test.c | 2 - .../powerpc/pmu/ebb/cycles_with_mmcr2_test.c | 2 - tools/testing/selftests/powerpc/pmu/ebb/ebb.c | 2 - .../powerpc/pmu/ebb/ebb_on_willing_child_test.c | 2 - .../powerpc/pmu/ebb/lost_exception_test.c | 1 - .../selftests/powerpc/pmu/ebb/multi_counter_test.c | 7 -- .../powerpc/pmu/ebb/multi_ebb_procs_test.c | 2 - .../selftests/powerpc/pmu/ebb/pmae_handling_test.c | 2 - .../powerpc/pmu/ebb/pmc56_overflow_test.c | 2 - 98 files changed, 710 insertions(+), 276 deletions(-)

3 years, 8 months

4
81
0 0

missing backport markings on security fix [was: [PATCH] io_uring: set table->files[i] to NULL when io_sqe_file_register failed]

by Jann Horn

On Wed, Sep 2, 2020 at 4:49 PM Jens Axboe <axboe(a)kernel.dk> wrote: > On 9/2/20 3:59 AM, Jiufei Xue wrote: > > While io_sqe_file_register() failed in __io_sqe_files_update(), > > table->files[i] still point to the original file which may freed > > soon, and that will trigger use-after-free problems. > > Applied, thanks. Shouldn't this have a CC stable tag and a fixes tag on it? AFAICS this is a fix for a UAF that exists since f3bd9dae3708a0ff6b067e766073ffeb853301f9 ("io_uring: fix memleak in __io_sqe_files_update()"), and that commit was marked for stable backporting back to when c3a31e605620 landed, and that commit was introduced in Linux 5.5. You can see at <https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tree/fs/io…> that this security vulnerability currently exists in the stable 5.8 branch.

3 years, 8 months

2
1
0 0

2024

2023

2022

2021

2020

2019

2018

2017

Linux-stable-mirror September 2020