1. 13 Apr, 2017 2 commits
    • Linus Torvalds's avatar
      Merge tag 'drm-fixes-for-v4.11-rc7' of git://people.freedesktop.org/~airlied/linux · ee921c76
      Linus Torvalds authored
      Pull drm fixes from Dave Airlie:
       "i915, gvt, nouveau, udl and etnaviv fixes.
      
        I was away the end of last week, so some of these would have been in
        rc6, and it's Easter from tomorrow, so I decided I better dequeue what
        I have now.
      
        The nouveau changes, just add a hw enable for GP107 display (like a
        pci id addition really), and fix a couple of regressions. i915 has
        some more gvt fixes, along with a few run of the mill ones, the rcu
        one seems like a few people have hit it.
      
        Otherwise a small udl and small etnaviv fix"
      
      * tag 'drm-fixes-for-v4.11-rc7' of git://people.freedesktop.org/~airlied/linux: (22 commits)
        drm/etnaviv: fix missing unlock on error in etnaviv_gpu_submit()
        drm/udl: Fix unaligned memory access in udl_render_hline
        drm/i915: Don't call synchronize_rcu_expedited under struct_mutex
        drm/i915: Suspend GuC prior to GPU Reset during GEM suspend
        drm/nouveau: initial support (display-only) for GP107
        drm/nouveau/kms/nv50: fix double dma_fence_put() when destroying plane state
        drm/nouveau/kms/nv50: fix setting of HeadSetRasterVertBlankDmi method
        drm/nouveau/mmu/nv4a: use nv04 mmu rather than the nv44 one
        drm/nouveau/mpeg: mthd returns true on success now
        drm/i915/gvt: set the correct default value of CTX STATUS PTR
        drm/i915/gvt: Fix firmware loading interface for GVT-g golden HW state
        drm/i915: Use a dummy timeline name for a signaled fence
        drm/i915: Ironlake do_idle_maps w/a may be called w/o struct_mutex
        drm/i915/gvt: remove the redundant info NULL check
        drm/i915/gvt: adjust mem size for low resolution type
        drm/i915: Avoid lock dropping between rescheduling
        drm/i915/gvt: exclude cfg space from failsafe mode
        drm/i915/gvt: Activate/de-activate vGPU in mdev ops.
        drm/i915/execlists: Wrap tail pointer after reset tweaking
        drm/i915/perf: remove user triggerable warn
        ...
      ee921c76
    • Linus Torvalds's avatar
      Merge tag 'pwm/for-4.11-rc7' of... · 827c30a7
      Linus Torvalds authored
      Merge tag 'pwm/for-4.11-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/thierry.reding/linux-pwm
      
      Pull pwm fixes from Thierry Reding:
       "This contain a fix for the atomic update support recently added to
        the Rockchip driver where the clock reference count would become
        unbalanced and result in the clock feeding the PWM to always be
        disabled.
      
        Another fix to the Intel LPSS driver that adds an update bit quirk
        required for a specific configuration"
      
      * tag 'pwm/for-4.11-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/thierry.reding/linux-pwm:
        pwm: rockchip: State of PWM clock should synchronize with PWM enabled state
        pwm: lpss: Set enable-bit before waiting for update-bit to go low
        pwm: lpss: Split Tangier configuration
      827c30a7
  2. 12 Apr, 2017 10 commits
    • Dave Airlie's avatar
      Merge branch 'linux-4.11' of git://github.com/skeggsb/linux into drm-fixes · 2ca62d8a
      Dave Airlie authored
      GP107 modesetting support (just recognising the chipset, no other changes until 4.12)
      a couple of regression fixes, one of them a rather serious double-free issue that appeared in 4.10.
      * 'linux-4.11' of git://github.com/skeggsb/linux:
        drm/nouveau: initial support (display-only) for GP107
        drm/nouveau/kms/nv50: fix double dma_fence_put() when destroying plane state
        drm/nouveau/kms/nv50: fix setting of HeadSetRasterVertBlankDmi method
        drm/nouveau/mmu/nv4a: use nv04 mmu rather than the nv44 one
        drm/nouveau/mpeg: mthd returns true on success now
      2ca62d8a
    • Dave Airlie's avatar
      Merge tag 'drm-intel-fixes-2017-04-12' of... · 88b0b92b
      Dave Airlie authored
      Merge tag 'drm-intel-fixes-2017-04-12' of git://anongit.freedesktop.org/git/drm-intel into drm-fixes
      
      drm/i915 fixes for v4.11-rc7
      
      one rcu related fix, and a few GVT fixes.
      
      * tag 'drm-intel-fixes-2017-04-12' of git://anongit.freedesktop.org/git/drm-intel:
        drm/i915: Don't call synchronize_rcu_expedited under struct_mutex
        drm/i915: Suspend GuC prior to GPU Reset during GEM suspend
        drm/i915/gvt: set the correct default value of CTX STATUS PTR
        drm/i915/gvt: Fix firmware loading interface for GVT-g golden HW state
        drm/i915: Use a dummy timeline name for a signaled fence
        drm/i915: Ironlake do_idle_maps w/a may be called w/o struct_mutex
        drm/i915/gvt: remove the redundant info NULL check
        drm/i915/gvt: adjust mem size for low resolution type
        drm/i915: Avoid lock dropping between rescheduling
        drm/i915/gvt: exclude cfg space from failsafe mode
        drm/i915/gvt: Activate/de-activate vGPU in mdev ops.
        drm/i915/execlists: Wrap tail pointer after reset tweaking
        drm/i915/perf: remove user triggerable warn
        drm/i915/perf: destroy stream on sample_flags mismatch
        drm/i915: Align "unfenced" tiled access on gen2, early gen3
      88b0b92b
    • Dave Airlie's avatar
      Merge tag 'drm-misc-fixes-2017-04-11' of git://anongit.freedesktop.org/git/drm-misc into drm-fixes · 97d93f35
      Dave Airlie authored
      drm-misc-fixes for 2017-04-11
      
      Core changes:
       - None
      
      Driver changes
       - udl: Fix unaligned memory access on SPARC (Jonathan)
      
      * tag 'drm-misc-fixes-2017-04-11' of git://anongit.freedesktop.org/git/drm-misc:
        drm/udl: Fix unaligned memory access in udl_render_hline
      97d93f35
    • Dave Airlie's avatar
      Merge branch 'etnaviv/fixes' of https://git.pengutronix.de/git/lst/linux into drm-fixes · c7aae622
      Dave Airlie authored
      Single etnaviv error path fix.
      
      * 'etnaviv/fixes' of https://git.pengutronix.de/git/lst/linux:
        drm/etnaviv: fix missing unlock on error in etnaviv_gpu_submit()
      c7aae622
    • Wei Yongjun's avatar
      drm/etnaviv: fix missing unlock on error in etnaviv_gpu_submit() · 45abdf35
      Wei Yongjun authored
      Add the missing unlock before return from function etnaviv_gpu_submit()
      in the error handling case.
      
      lst: fixed label name.
      
      Fixes: f3cd1b06 ("drm/etnaviv: (re-)protect fence allocation with
      GPU mutex")
      CC: stable@vger.kernel.org #4.9+
      Signed-off-by: default avatarWei Yongjun <weiyongjun1@huawei.com>
      Signed-off-by: default avatarLucas Stach <l.stach@pengutronix.de>
      45abdf35
    • Linus Torvalds's avatar
      Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/audit · b9b3322f
      Linus Torvalds authored
      Pull audit fix from Paul Moore:
       "One more small audit fix, this should be the last for v4.11.
      
        Seth Forshee noticed a problem where the audit retry queue wasn't
        being flushed properly when audit was enabled and the audit daemon
        wasn't running; this patches fixes the problem (see the commit
        description for more details on the change).
      
        Both Seth and I have tested this and everything looks good"
      
      * 'stable-4.11' of git://git.infradead.org/users/pcmoore/audit:
        audit: make sure we don't let the retry queue grow without bounds
      b9b3322f
    • Linus Torvalds's avatar
      Merge git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending · 025def92
      Linus Torvalds authored
      Pull SCSI target fixes from Nicholas Bellinger:
      
       "There has been work in a number of different areas over the last
        weeks, including:
      
         - Fix target-core-user (TCMU) back-end bi-directional handling (Xiubo
           Li + Mike Christie + Ilias Tsitsimpis)
      
         - Fix iscsi-target TMR reference leak during session shutdown (Rob
           Millner + Chu Yuan Lin)
      
         - Fix target_core_fabric_configfs.c race between LUN shutdown +
           mapped LUN creation (James Shen)
      
         - Fix target-core unknown fabric callback queue-full errors (Potnuri
           Bharat Teja)
      
         - Fix iscsi-target + iser-target queue-full handling in order to
           support iw_cxgb4 RNICs. (Potnuri Bharat Teja + Sagi Grimberg)
      
         - Fix ALUA transition state race between multiple initiator (Mike
           Christie)
      
         - Drop work-around for legacy GlobalSAN initiator, to allow QLogic
           57840S + 579xx offload HBAs to work out-of-the-box in MSFT
           environments. (Martin Svec + Arun Easi)
      
        Note that a number are CC'ed for stable, and although the queue-full
        bug-fixes required for iser-target to work with iw_cxgb4 aren't CC'ed
        here, they'll be posted to Greg-KH separately"
      
      * git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending:
        tcmu: Skip Data-Out blocks before gathering Data-In buffer for BIDI case
        iscsi-target: Drop work-around for legacy GlobalSAN initiator
        target: Fix ALUA transition state race between multiple initiators
        iser-target: avoid posting a recv buffer twice
        iser-target: Fix queue-full response handling
        iscsi-target: Propigate queue_data_in + queue_status errors
        target: Fix unknown fabric callback queue-full errors
        tcmu: Fix wrongly calculating of the base_command_size
        tcmu: Fix possible overwrite of t_data_sg's last iov[]
        target: Avoid mappedlun symlink creation during lun shutdown
        iscsi-target: Fix TMR reference leak during session shutdown
        usb: gadget: Correct usb EP argument for BOT status request
        tcmu: Allow cmd_time_out to be set to zero (disabled)
      025def92
    • Linus Torvalds's avatar
      Merge branch 'for-4.11-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup · 06ea4c38
      Linus Torvalds authored
      Pull cgroup fixes from Tejun Heo:
       "This contains fixes for two long standing subtle bugs:
      
         - kthread_bind() on a new kthread binds it to specific CPUs and
           prevents userland from messing with the affinity or cgroup
           membership. Unfortunately, for cgroup membership, there's a window
           between kthread creation and kthread_bind*() invocation where the
           kthread can be moved into a non-root cgroup by userland.
      
           Depending on what controllers are in effect, this can assign the
           kthread unexpected attributes. For example, in the reported case,
           workqueue workers ended up in a non-root cpuset cgroups and had
           their CPU affinities overridden. This broke workqueue invariants
           and led to workqueue stalls.
      
           Fixed by closing the window between kthread creation and
           kthread_bind() as suggested by Oleg.
      
         - There was a bug in cgroup mount path which could allow two
           competing mount attempts to attach the same cgroup_root to two
           different superblocks.
      
           This was caused by mishandling return value from kernfs_pin_sb().
      
           Fixed"
      
      * 'for-4.11-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup:
        cgroup: avoid attaching a cgroup root to two different superblocks
        cgroup, kthread: close race window where new kthreads can be migrated to non-root cgroups
      06ea4c38
    • Linus Torvalds's avatar
      Merge branch 'for-4.11-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/libata · af94bdfa
      Linus Torvalds authored
      Pull libata fixes from Tejun Heo:
       "Two libata fixes.
      
        One to disable hotplug on VT6420 which never worked properly. The
        other reverts an earlier patch which disabled the second port on
        SB600/700. There were some confusions due to earlier datasheets which
        incorrectly indicated that the second port is not implemented on both
        SB600 and 700"
      
      * 'for-4.11-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/libata:
        sata_via: Enable hotplug only on VT6421
        Revert "pata_atiixp: Don't use unconnected secondary port on SB600/SB700"
      af94bdfa
    • Linus Torvalds's avatar
      Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/hid · fe251c4b
      Linus Torvalds authored
      Pull HID fixes from Jiri Kosina:
      
       - revert of a commit that switched all Synaptics touchpads over to be
         driven by hid-rmi. It turns out that this caused several user-visible
         regressions, and therefore we revert back to the original state
         before all the reported issues have been fixed.
      
       - a new uclogic device ID addition, from Xiaolei Yu.
      
      * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/hid:
        Revert "HID: rmi: Handle all Synaptics touchpads using hid-rmi"
        HID: uclogic: add support for Ugee Tablet EX07S
      fe251c4b
  3. 11 Apr, 2017 7 commits
  4. 10 Apr, 2017 2 commits
    • Linus Torvalds's avatar
      Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6 · c08e611b
      Linus Torvalds authored
      Pull crypto fixes from Herbert Xu:
       "This fixes a number of bugs in the caam driver:
      
         - device creation fails after release
      
         - error-path NULL-pointer dereference
      
         - spurious hardware error in RNG deinstantiation"
      
      * 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:
        crypto: caam - fix RNG deinstantiation error checking
        crypto: caam - fix invalid dereference in caam_rsa_init_tfm()
        crypto: caam - fix JR platform device subsequent (re)creations
      c08e611b
    • Paul Moore's avatar
      audit: make sure we don't let the retry queue grow without bounds · 264d5096
      Paul Moore authored
      The retry queue is intended to provide a temporary buffer in the case
      of transient errors when communicating with auditd, it is not meant
      as a long life queue, that functionality is provided by the hold
      queue.
      
      This patch fixes a problem identified by Seth where the retry queue
      could grow uncontrollably if an auditd instance did not connect to
      the kernel to drain the queues.  This commit fixes this by doing the
      following:
      
      * Make sure we always call auditd_reset() if we decide the connection
      with audit is really dead.  There were some cases in
      kauditd_hold_skb() where we did not reset the connection, this patch
      relocates the reset calls to kauditd_thread() so all the error
      conditions are caught and the connection reset.  As a side effect,
      this means we could move auditd_reset() and get rid of the forward
      definition at the top of kernel/audit.c.
      
      * We never checked the status of the auditd connection when
      processing the main audit queue which meant that the retry queue
      could grow unchecked.  This patch adds a call to auditd_reset()
      after the main queue has been processed if auditd is not connected,
      the auditd_reset() call will make sure the retry and hold queues are
      correctly managed/flushed so that the retry queue remains reasonable.
      
      Cc: <stable@vger.kernel.org> # 4.10.x-: 5b52330bReported-by: default avatarSeth Forshee <seth.forshee@canonical.com>
      Signed-off-by: default avatarPaul Moore <paul@paul-moore.com>
      264d5096
  5. 09 Apr, 2017 6 commits
    • Linus Torvalds's avatar
      Linux 4.11-rc6 · 39da7c50
      Linus Torvalds authored
      39da7c50
    • Linus Torvalds's avatar
      Merge branch 'for-next' of git://git.samba.org/sfrench/cifs-2.6 · 84ced7fd
      Linus Torvalds authored
      Pull CIFS fixes from Steve French:
       "This is a set of CIFS/SMB3 fixes for stable.
      
        There is another set of four SMB3 reconnect fixes for stable in
        progress but they are still being reviewed/tested, so didn't want to
        wait any longer to send these five below"
      
      * 'for-next' of git://git.samba.org/sfrench/cifs-2.6:
        Reset TreeId to zero on SMB2 TREE_CONNECT
        CIFS: Fix build failure with smb2
        Introduce cifs_copy_file_range()
        SMB3: Rename clone_range to copychunk_range
        Handle mismatched open calls
      84ced7fd
    • Linus Torvalds's avatar
      Merge branch 'fixes' of git://git.armlinux.org.uk/~rmk/linux-arm · 462e9a35
      Linus Torvalds authored
      Pull ARM fixes from Russell King:
       "A number of ARM fixes:
      
         - prevent oopses caused by dma_get_sgtable() and declared DMA
           coherent memory
      
         - fix boot failure on nommu caused by ID_PFR1 access
      
         - a number of kprobes fixes from Jon Medhurst and Masami Hiramatsu"
      
      * 'fixes' of git://git.armlinux.org.uk/~rmk/linux-arm:
        ARM: 8665/1: nommu: access ID_PFR1 only if CPUID scheme
        ARM: dma-mapping: disallow dma_get_sgtable() for non-kernel managed memory
        arm: kprobes: Align stack to 8-bytes in test code
        arm: kprobes: Fix the return address of multiple kretprobes
        arm: kprobes: Skip single-stepping in recursing path if possible
        arm: kprobes: Allow to handle reentered kprobe on single-stepping
      462e9a35
    • Linus Torvalds's avatar
      Merge tag 'driver-core-4.11-rc6' of... · 5b50be74
      Linus Torvalds authored
      Merge tag 'driver-core-4.11-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core
      
      Pull driver core fixes from Greg KH:
       "Here are 3 small fixes for 4.11-rc6.
      
        One resolves a reported issue with sysfs files that NeilBrown found,
        one is a documenatation fix for the stable kernel rules, and the last
        is a small MAINTAINERS file update for kernfs"
      
      * tag 'driver-core-4.11-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core:
        MAINTAINERS: separate out kernfs maintainership
        sysfs: be careful of error returns from ops->show()
        Documentation: stable-kernel-rules: fix stable-tag format
      5b50be74
    • Linus Torvalds's avatar
      Merge tag 'staging-4.11-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging · 62e1fd08
      Linus Torvalds authored
      Pull staging/IIO driver rfixes from Greg KH:
       "Here are a number of small IIO and staging driver fixes for 4.11-rc6.
        Nothing big here, just iio fixes for reported issues, and an ashmem
        fix for a very old bug that has been reported by a number of Android
        vendors"
      
      * tag 'staging-4.11-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging:
        staging: android: ashmem: lseek failed due to no FMODE_LSEEK.
        iio: hid-sensor-attributes: Fix sensor property setting failure.
        iio: accel: hid-sensor-accel-3d: Fix duplicate scan index error
        iio: core: Fix IIO_VAL_FRACTIONAL_LOG2 for negative values
        iio: st_pressure: initialize lps22hb bootime
        iio: bmg160: reset chip when probing
        iio: cros_ec_sensors: Fix return value to get raw and calibbias data.
      62e1fd08
    • Linus Torvalds's avatar
      Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs · 2a610b8a
      Linus Torvalds authored
      Pull VFS fixes from Al Viro:
       "statx followup fixes and a fix for stack-smashing on alpha"
      
      * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs:
        alpha: fix stack smashing in old_adjtimex(2)
        statx: Include a mask for stx_attributes in struct statx
        statx: Reserve the top bit of the mask for future struct expansion
        xfs: report crtime and attribute flags to statx
        ext4: Add statx support
        statx: optimize copy of struct statx to userspace
        statx: remove incorrect part of vfs_statx() comment
        statx: reject unknown flags when using NULL path
        Documentation/filesystems: fix documentation for ->getattr()
      2a610b8a
  6. 08 Apr, 2017 13 commits
    • Linus Torvalds's avatar
      Merge branch 'for-linus' of git://git.kernel.dk/linux-block · 78d91a75
      Linus Torvalds authored
      Pull block fixes from Jens Axboe:
       "Here's a pull request for 4.11-rc, fixing a set of issues mostly
        centered around the new scheduling framework. These have been brewing
        for a while, but split up into what we absolutely need in 4.11, and
        what we can defer until 4.12. These are well tested, on both single
        queue and multiqueue setups, and with and without shared tags. They
        fix several hangs that have happened in testing.
      
        This is obviously larger than I would have preferred at this point in
        time, but I don't think we can shave much off this and still get the
        desired results.
      
        In detail, this pull request contains:
      
         - a set of five fixes for NVMe, mostly from Christoph and one from
           Roland.
      
         - a series from Bart, fixing issues with dm-mq and SCSI shared tags
           and scheduling. Note that one of those patches commit messages may
           read like an optimization, but it is in fact an important fix for
           queue restarts in particular.
      
         - a series from Omar, most importantly fixing a hang with multiple
           hardware queues when we fail to get a driver tag. Another important
           fix in there is for resizing hardware queues, which nbd does when
           handling multiple sockets for one connection.
      
         - fixing an imbalance in putting the ctx for hctx request allocations
           from Minchan"
      
      * 'for-linus' of git://git.kernel.dk/linux-block:
        blk-mq: Restart a single queue if tag sets are shared
        dm rq: Avoid that request processing stalls sporadically
        scsi: Avoid that SCSI queues get stuck
        blk-mq: Introduce blk_mq_delay_run_hw_queue()
        blk-mq: remap queues when adding/removing hardware queues
        blk-mq-sched: fix crash in switch error path
        blk-mq-sched: set up scheduler tags when bringing up new queues
        blk-mq-sched: refactor scheduler initialization
        blk-mq: use the right hctx when getting a driver tag fails
        nvmet: fix byte swap in nvmet_parse_io_cmd
        nvmet: fix byte swap in nvmet_execute_write_zeroes
        nvmet: add missing byte swap in nvmet_get_smart_log
        nvme: add missing byte swap in nvme_setup_discard
        nvme: Correct NVMF enum values to match NVMe-oF rev 1.0
        block: do not put mq context in blk_mq_alloc_request_hctx
      78d91a75
    • Linus Torvalds's avatar
      Merge tag 'pinctrl-v4.11-4' of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl · c3df1c7c
      Linus Torvalds authored
      Pull pin control fix from Linus Walleij:
       "This late fix for pin control is hopefully the last I send this cycle.
      
        The problem was detected early in the v4.11 release cycle and there
        has been some back and forth on how to solve it. Sadly the proper fix
        arrives late, but at least not too late.
      
        An issue was detected with pin control on the Freescale i.MX after the
        refactorings for more general group and function handling.
      
        We now have the proper fix for this"
      
      * tag 'pinctrl-v4.11-4' of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl:
        pinctrl: core: Fix pinctrl_register_and_init() with pinctrl_enable()
      c3df1c7c
    • Linus Torvalds's avatar
      Merge tag 'powerpc-4.11-7' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux · 894ca30c
      Linus Torvalds authored
      Pull powerpc fixes from Michael Ellerman:
       "Some more powerpc fixes for 4.11:
      
        Headed to stable:
      
         - disable HFSCR[TM] if TM is not supported, fixes a potential host
           kernel crash triggered by a hostile guest, but only in
           configurations that no one uses
      
         - don't try to fix up misaligned load-with-reservation instructions
      
         - fix flush_(d|i)cache_range() called from modules on little endian
           kernels
      
         - add missing global TLB invalidate if cxl is active
      
         - fix missing preempt_disable() in crc32c-vpmsum
      
        And a fix for selftests build changes that went in this release:
      
         - selftests/powerpc: Fix standalone powerpc build
      
        Thanks to: Benjamin Herrenschmidt, Frederic Barrat, Oliver O'Halloran,
        Paul Mackerras"
      
      * tag 'powerpc-4.11-7' of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:
        powerpc/crypto/crc32c-vpmsum: Fix missing preempt_disable()
        powerpc/mm: Add missing global TLB invalidate if cxl is active
        powerpc/64: Fix flush_(d|i)cache_range() called from modules
        powerpc: Don't try to fix up misaligned load-with-reservation instructions
        powerpc: Disable HFSCR[TM] if TM is not supported
        selftests/powerpc: Fix standalone powerpc build
      894ca30c
    • Chris Salls's avatar
      mm/mempolicy.c: fix error handling in set_mempolicy and mbind. · cf01fb99
      Chris Salls authored
      In the case that compat_get_bitmap fails we do not want to copy the
      bitmap to the user as it will contain uninitialized stack data and leak
      sensitive data.
      Signed-off-by: default avatarChris Salls <salls@cs.ucsb.edu>
      Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
      cf01fb99
    • Liping Zhang's avatar
      sysctl: report EINVAL if value is larger than UINT_MAX for proc_douintvec · 425fffd8
      Liping Zhang authored
      Currently, inputting the following command will succeed but actually the
      value will be truncated:
      
        # echo 0x12ffffffff > /proc/sys/net/ipv4/tcp_notsent_lowat
      
      This is not friendly to the user, so instead, we should report error
      when the value is larger than UINT_MAX.
      
      Fixes: e7d316a0 ("sysctl: handle error writing UINT_MAX to u32 fields")
      Signed-off-by: default avatarLiping Zhang <zlpnobody@gmail.com>
      Cc: Subash Abhinov Kasiviswanathan <subashab@codeaurora.org>
      Cc: Andrew Morton <akpm@linux-foundation.org>
      Cc: Eric W. Biederman <ebiederm@xmission.com>
      Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
      425fffd8
    • Tejun Heo's avatar
      MAINTAINERS: separate out kernfs maintainership · 27f395b8
      Tejun Heo authored
      Separate out kernfs from driver core and add myself as a
      co-maintainer.
      Signed-off-by: default avatarTejun Heo <tj@kernel.org>
      Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
      27f395b8
    • NeilBrown's avatar
      sysfs: be careful of error returns from ops->show() · c8a139d0
      NeilBrown authored
      ops->show() can return a negative error code.
      Commit 65da3484 ("sysfs: correctly handle short reads on PREALLOC attrs.")
      (in v4.4) caused this to be stored in an unsigned 'size_t' variable, so errors
      would look like large numbers.
      As a result, if an error is returned, sysfs_kf_read() will return the
      value of 'count', typically 4096.
      
      Commit 17d0774f ("sysfs: correctly handle read offset on PREALLOC attrs")
      (in v4.8) extended this error to use the unsigned large 'len' as a size for
      memmove().
      Consequently, if ->show returns an error, then the first read() on the
      sysfs file will return 4096 and could return uninitialized memory to
      user-space.
      If the application performs a subsequent read, this will trigger a memmove()
      with extremely large count, and is likely to crash the machine is bizarre ways.
      
      This bug can currently only be triggered by reading from an md
      sysfs attribute declared with __ATTR_PREALLOC() during the
      brief period between when mddev_put() deletes an mddev from
      the ->all_mddevs list, and when mddev_delayed_delete() - which is
      scheduled on a workqueue - completes.
      Before this, an error won't be returned by the ->show()
      After this, the ->show() won't be called.
      
      I can reproduce it reliably only by putting delay like
      	usleep_range(500000,700000);
      early in mddev_delayed_delete(). Then after creating an
      md device md0 run
        echo clear > /sys/block/md0/md/array_state; cat /sys/block/md0/md/array_state
      
      The bug can be triggered without the usleep.
      
      Fixes: 65da3484 ("sysfs: correctly handle short reads on PREALLOC attrs.")
      Fixes: 17d0774f ("sysfs: correctly handle read offset on PREALLOC attrs")
      Cc: stable@vger.kernel.org
      Signed-off-by: default avatarNeilBrown <neilb@suse.com>
      Acked-by: default avatarTejun Heo <tj@kernel.org>
      Reported-and-tested-by: default avatarMiroslav Benes <mbenes@suse.cz>
      Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
      c8a139d0
    • Johan Hovold's avatar
      Documentation: stable-kernel-rules: fix stable-tag format · cf903e9d
      Johan Hovold authored
      A patch documenting how to specify which kernels a particular fix should
      be backported to (seemingly) inadvertently added a minus sign after the
      kernel version. This particular stable-tag format had never been used
      prior to this patch, and was neither present when the patch in question
      was first submitted (it was added in v2 without any comment).
      
      Drop the minus sign to avoid any confusion.
      
      Fixes: fdc81b79 ("stable_kernel_rules: Add clause about specification of kernel versions to patch.")
      Signed-off-by: default avatarJohan Hovold <johan@kernel.org>
      Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
      cf903e9d
    • Shuxiao Zhang's avatar
      staging: android: ashmem: lseek failed due to no FMODE_LSEEK. · 97fbfef6
      Shuxiao Zhang authored
      vfs_llseek will check whether the file mode has
      FMODE_LSEEK, no return failure. But ashmem can be
      lseek, so add FMODE_LSEEK to ashmem file.
      
      Comment From Greg Hackmann:
      	ashmem_llseek() passes the llseek() call through to the backing
      	shmem file.  91360b02 ("ashmem: use vfs_llseek()") changed
      	this from directly calling the file's llseek() op into a VFS
      	layer call.  This also adds a check for the FMODE_LSEEK bit, so
      	without that bit ashmem_llseek() now always fails with -ESPIPE.
      
      Fixes: 91360b02 ("ashmem: use vfs_llseek()")
      Signed-off-by: default avatarShuxiao Zhang <zhangshuxiao@xiaomi.com>
      Tested-by: default avatarGreg Hackmann <ghackmann@google.com>
      Cc: stable <stable@vger.kernel.org> # 3.18+
      Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
      97fbfef6
    • Linus Torvalds's avatar
      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/sparc · 8b65bb57
      Linus Torvalds authored
      Pull sparc fixes from David Miller:
       "Several fixes here, mostly having to due with either build errors or
        memory corruptions depending upon whether you have THP enabled or not"
      
      * git://git.kernel.org/pub/scm/linux/kernel/git/davem/sparc:
        sparc: remove unused wp_works_ok macro
        sparc32: Export vac_cache_size to fix build error
        sparc64: Fix memory corruption when THP is enabled
        sparc64: Fix kernel panic due to erroneous #ifdef surrounding pmd_write()
        arch/sparc: Avoid DCTI Couples
        sparc64: kern_addr_valid regression
        sparc64: Add support for 2G hugepages
        sparc64: Fix size check in huge_pte_alloc
      8b65bb57
    • Linus Torvalds's avatar
      Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm · 542380a2
      Linus Torvalds authored
      Pull KVM fixes from Radim Krčmář:
       "ARM:
         - Fix a problem with GICv3 userspace save/restore
         - Clarify GICv2 userspace save/restore ABI
         - Be more careful in clearing GIC LRs
         - Add missing synchronization primitive to our MMU handling code
      
        PPC:
         - Check for a NULL return from kzalloc
      
        s390:
         - Prevent translation exception errors on valid page tables for the
           instruction-exection-protection support
      
        x86:
         - Fix Page-Modification Logging when running a nested guest"
      
      * tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm:
        KVM: PPC: Book3S HV: Check for kmalloc errors in ioctl
        KVM: nVMX: initialize PML fields in vmcs02
        KVM: nVMX: do not leak PML full vmexit to L1
        KVM: arm/arm64: vgic: Fix GICC_PMR uaccess on GICv3 and clarify ABI
        KVM: arm64: Ensure LRs are clear when they should be
        kvm: arm/arm64: Fix locking for kvm_free_stage2_pgd
        KVM: s390: remove change-recording override support
        arm/arm64: KVM: Take mmap_sem in kvm_arch_prepare_memory_region
        arm/arm64: KVM: Take mmap_sem in stage2_unmap_vm
      542380a2
    • Linus Torvalds's avatar
      Merge branch 'stable-4.11' of git://git.infradead.org/users/pcmoore/audit · 62fedca5
      Linus Torvalds authored
      Pull audit cleanup from Paul Moore:
       "A week later than I had hoped, but as promised, here is the audit
        uninline-fix we talked about during the last audit pull request.
      
        The patch is slightly different than what we originally discussed as
        it made more sense to keep the audit_signal_info() function in
        auditsc.c rather than move it and bunch of other related
        variables/definitions into audit.c/audit.h.
      
        At some point in the future I need to look at how the audit code is
        organized across kernel/audit*, I suspect we could do things a bit
        better, but it doesn't seem like a -rc release is a good place for
        that ;)
      
        Regardless, this patch passes our tests without problem and looks good
        for v4.11"
      
      * 'stable-4.11' of git://git.infradead.org/users/pcmoore/audit:
        audit: move audit_signal_info() into kernel/auditsc.c
      62fedca5
    • Linus Torvalds's avatar
      Merge branch 'akpm' (patches from Andrew) · 56c29979
      Linus Torvalds authored
      Merge misc fixes from Andrew Morton:
       "10 fixes"
      
      * emailed patches from Andrew Morton <akpm@linux-foundation.org>:
        mm: move pcp and lru-pcp draining into single wq
        mailmap: update Yakir Yang email address
        mm, swap_cgroup: reschedule when neeed in swap_cgroup_swapoff()
        dax: fix radix tree insertion race
        mm, thp: fix setting of defer+madvise thp defrag mode
        ptrace: fix PTRACE_LISTEN race corrupting task->state
        vmlinux.lds: add missing VMLINUX_SYMBOL macros
        mm/page_alloc.c: fix print order in show_free_areas()
        userfaultfd: report actual registered features in fdinfo
        mm: fix page_vma_mapped_walk() for ksm pages
      56c29979