326 Commits

Author	SHA1	Message	Date
Wilson Sung	e3167a4609	Merge android-4.19-stable (4.19.294) into android-msm-pixel-4.19-lts ... Merge 4.19.294 into android-4.19-stable Linux 4.19.294 Revert "ARM: ep93xx: fix missing-prototype warnings" Revert "MIPS: Alchemy: fix dbdma2" Merge 4.19.293 into android-4.19-stable Linux 4.19.293 dma-buf/sw_sync: Avoid recursive lock during fence signal * clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' include/linux/clk.h * scsi: core: raid_class: Remove raid_component_add() include/linux/raid_class.h scsi: snic: Fix double free in snic_tgt_create() irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable * rtnetlink: Reject negative ifindexes in RTM_NEWLINK net/core/rtnetlink.c * netfilter: nf_queue: fix socket leak net/netfilter/nf_queue.c * sched/rt: pick_next_rt_entity(): check list_entry kernel/sched/rt.c * mmc: block: Fix in_flight[issue_type] value error drivers/mmc/core/block.c x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus media: vcodec: Fix potential array out-of-bounds in encoder queue_setup * lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels lib/clz_ctz.c batman-adv: Fix batadv_v_ogm_aggr_send memory leak batman-adv: Fix TT global entry leak when client roamed back batman-adv: Do not get eth header before batadv_check_management_packet batman-adv: Don't increase MTU when set by user batman-adv: Trigger events for auto adjusted MTU nfsd: Fix race to FREE_STATEID and cl_revoked ibmveth: Use dcbf rather than dcbfl ipvs: fix racy memcpy in proc_do_sync_threshold ipvs: Improve robustness to the ipvs sysctl * bonding: fix macvlan over alb bond support drivers/net/bonding/bond_alb.c include/net/bonding.h * net: remove bond_slave_has_mac_rcu() include/net/bonding.h * net/sched: fix a qdisc modification with ambiguous command request net/sched/sch_api.c igb: Avoid starting unnecessary workqueues dccp: annotate data-races in dccp_poll() * sock: annotate data-races around prot->memory_pressure include/net/sock.h net/sctp/socket.c * tracing: Fix memleak due to race between current_tracer and trace kernel/trace/trace.c drm/amd/display: check TG is non-null before checking if enabled drm/amd/display: do not wait for mpc idle if tg is disabled * regmap: Account for register length in SMBus I/O limits drivers/base/regmap/regmap-i2c.c dm integrity: reduce vmalloc space footprint on 32-bit architectures dm integrity: increase RECALC_SECTORS to improve recalculate speed powerpc: Fail build if using recordmcount with binutils v2.37 powerpc: remove leftover code of old GCC version checks powerpc/32: add stack protector support fbdev: fix potential OOB read in fast_imageblit() fbdev: Fix sys_imageblit() for arbitrary image widths fbdev: Improve performance of sys_imageblit() tty: serial: fsl_lpuart: add earlycon for imx8ulp platform Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP" MIPS: cpu-features: Use boot_cpu_type for CPU type based features MIPS: cpu-features: Enable octeon_cache by cpu_type fs: dlm: fix mismatch of plock results from userspace fs: dlm: use dlm_plock_info for do_unlock_close fs: dlm: change plock interrupted message to debug again fs: dlm: add pid to debug log dlm: replace usage of found with dedicated list iterator variable dlm: improve plock logging if interrupted PCI: acpiphp: Reassign resources on bridge if necessary net: phy: broadcom: stub c45 read/write for 54810 * net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure net/xfrm/xfrm_user.c * net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled net/ipv4/tcp_timer.c virtio-net: set queues after driver_ok * af_unix: Fix null-ptr-deref in unix_stream_sendpage(). net/unix/af_unix.c * netfilter: set default timeout to 3 secs for sctp shutdown send and recv state net/netfilter/nf_conntrack_proto_sctp.c test_firmware: prevent race conditions by a correct implementation of locking mmc: wbsd: fix double mmc_free_host() in wbsd_init() cifs: Release folio lock on fscache read hit. * ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. sound/usb/quirks-table.h serial: 8250: Fix oops for port->pm on uart_change_pm() ASoC: meson: axg-tdm-formatter: fix channel slot allocation ASoC: rt5665: add missed regulator_bulk_disable * net: do not allow gso_size to be set to GSO_BY_FRAGS include/linux/virtio_net.h * sock: Fix misuse of sk_under_memory_pressure() include/net/sock.h net/core/sock.c i40e: fix misleading debug logs team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves netfilter: nft_dynset: disallow object maps selftests: mirror_gre_changes: Tighten up the TTL test match * xfrm: add NULL check in xfrm_update_ae_params net/xfrm/xfrm_user.c * ip_vti: fix potential slab-use-after-free in decode_session6 net/ipv4/ip_vti.c * ip6_vti: fix slab-use-after-free in decode_session6 net/ipv6/ip6_vti.c * xfrm: fix slab-use-after-free in decode_session6 net/xfrm/xfrm_interface_core.c * xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c net/xfrm/Makefile * net: af_key: fix sadb_x_filter validation net/key/af_key.c * net: xfrm: Fix xfrm_address_filter OOB read net/xfrm/xfrm_user.c btrfs: fix BUG_ON condition in btrfs_cancel_balance powerpc/rtas_flash: allow user copy to flash block cache objects fbdev: mmp: fix value check in mmphw_probe() virtio-mmio: don't break lifecycle of vm_dev virtio-mmio: Use to_virtio_mmio_device() to simply code virtio-mmio: convert to devm_platform_ioremap_resource nfsd: Remove incorrect check in nfsd4_validate_stateid nfsd4: kill warnings on testing stateids with mismatched clientids block: fix signed int overflow in Amiga partition support mmc: sunxi: fix deferred probing mmc: bcm2835: fix deferred probing * mmc: Remove dev_err() usage after platform_get_irq() drivers/mmc/host/sdhci-msm.c mmc: tmio: move tmio_mmc_set_clock() to platform hook mmc: tmio: replace tmio_mmc_clk_stop() calls with tmio_mmc_set_clock() mmc: meson-gx: remove redundant mmc_request_done() call from irq context mmc: meson-gx: remove useless lock * USB: dwc3: qcom: fix NULL-deref on suspend drivers/usb/dwc3/dwc3-qcom.c * usb: dwc3: qcom: Add helper functions to enable,disable wake irqs drivers/usb/dwc3/dwc3-qcom.c irqchip/mips-gic: Use raw spinlock for gic_lock irqchip/mips-gic: Get rid of the reliance on irq_cpu_online() x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms powerpc/64s/radix: Fix soft dirty tracking powerpc: Move page table dump files in a dedicated subdirectory powerpc/mm: dump block address translation on book3s/32 powerpc/mm: dump segment registers on book3s/32 powerpc/mm: Move pgtable_t into platform headers powerpc/mm: move platform specific mmu-xxx.h in platform directories iio: addac: stx104: Fix race condition when converting analog-to-digital iio: addac: stx104: Fix race condition for stx104_write_raw() iio: adc: stx104: Implement and utilize register structures iio: adc: stx104: Utilize iomap interface * iio: add addac subdirectory drivers/iio/Kconfig drivers/iio/Makefile drivers/iio/addac/Kconfig drivers/iio/addac/Makefile * IMA: allow/fix UML builds security/integrity/ima/Kconfig drm/amdgpu: Fix potential fence use-after-free v2 * Bluetooth: L2CAP: Fix use-after-free net/bluetooth/l2cap_core.c pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() gfs2: Fix possible data races in gfs2_show_options() media: platform: mediatek: vpu: fix NULL ptr dereference * media: v4l2-mem2mem: add lock to protect parameter num_rdy include/media/v4l2-mem2mem.h FS: JFS: Check for read-only mounted filesystem in txBegin FS: JFS: Fix null-ptr-deref Read in txBegin MIPS: dec: prom: Address -Warray-bounds warning fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev udf: Fix uninitialized array access for some pathnames * HID: add quirk for 03f0:464a HP Elite Presenter Mouse drivers/hid/hid-ids.h drivers/hid/hid-quirks.c * quota: fix warning in dqgrab() fs/quota/dquot.c * quota: Properly disable quotas when add_dquot_ref() fails fs/quota/dquot.c ALSA: emu10k1: roll up loops in DSP setup code for Audigy drm/radeon: Fix integer overflow in radeon_cs_parser_init selftests: forwarding: tc_flower: Relax success criterion * lib/mpi: Eliminate unused umul_ppmm definitions for MIPS lib/mpi/longlong.h Merge 4.19.292 into android-4.19-stable * Revert "posix-timers: Ensure timer ID search-loop limit is valid" include/linux/sched/signal.h kernel/time/posix-timers.c Merge 4.19.291 into android-4.19-stable Merge 4.19.290 into android-4.19-stable UPSTREAM: media: usb: siano: Fix warning due to null work_func_t function pointer * UPSTREAM: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb net/bluetooth/l2cap_sock.c UPSTREAM: net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free * UPSTREAM: net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free net/sched/cls_u32.c Linux 4.19.292 * sch_netem: fix issues in netem_change() vs get_dist_table() net/sched/sch_netem.c alpha: remove __init annotation from exported page_is_ram() scsi: core: Fix possible memory leak if device_add() fails scsi: snic: Fix possible memory leak if device_add() fails scsi: 53c700: Check that command slot is not NULL scsi: storvsc: Fix handling of virtual Fibre Channel timeouts * scsi: core: Fix legacy /proc parsing buffer overflow drivers/scsi/scsi_proc.c * netfilter: nf_tables: report use refcount overflow include/net/netfilter/nf_tables.h * netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush include/net/netfilter/nf_tables.h btrfs: don't stop integrity writeback too early ibmvnic: Handle DMA unmapping of login buffs in release functions * wifi: cfg80211: fix sband iftype data lookup for AP_VLAN include/net/cfg80211.h IB/hfi1: Fix possible panic during hotplug remove * drivers: net: prevent tun_build_skb() to exceed the packet size limit drivers/net/tun.c dccp: fix data-race around dp->dccps_mss_cache * bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves drivers/net/bonding/bond_main.c * net/packet: annotate data-races around tp->status net/packet/af_packet.c mISDN: Update parameter type of dsp_cmx_send() drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes x86: Move gds_ucode_mitigated() declaration to header x86/mm: Fix VDSO and VVAR placement on 5-level paging machines x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 * usb: dwc3: Properly handle processing of pending events drivers/usb/dwc3/gadget.c usb-storage: alauda: Fix uninit-value in alauda_check_media() * binder: fix memory leak in binder_init() drivers/android/binder.c drivers/android/binder_alloc.c drivers/android/binder_alloc.h iio: cros_ec: Fix the allocation size for cros_ec_command nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput radix tree test suite: fix incorrect allocation size for pthreads drm/nouveau/gr: enable memory loads on helper invocation on all channels dmaengine: pl330: Return DMA_PAUSED when transaction is paused * ipv6: adjust ndisc_is_useropt() to also return true for PIO net/ipv6/ndisc.c mmc: moxart: read scr register without changing byte order sparc: fix up arch_cpu_finalize_init() build breakage. * UPSTREAM: net/sched: cls_fw: Fix improper refcount update leads to use-after-free net/sched/cls_fw.c Linux 4.19.291 * drm/edid: fix objtool warning in drm_cvt_modes() drivers/gpu/drm/drm_edid.c arm64: dts: stratix10: fix incorrect I2C property for SCL signal * drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...) functions drivers/base/arch_topology.c drivers/base/cacheinfo.c drivers/base/core.c drivers/base/cpu.c drivers/base/firmware_loader/fallback.c drivers/base/platform.c drivers/base/power/sysfs.c drivers/base/soc.c ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node ARM: dts: imx6sll: fixup of operating points ARM: dts: imx: add usb alias ARM: dts: imx6sll: Make ssi node name same as other platforms * PM: sleep: wakeirq: fix wake irq arming drivers/base/power/power.h drivers/base/power/wakeirq.c * PM / wakeirq: support enabling wake-up irq after runtime_suspend called drivers/base/power/power.h drivers/base/power/runtime.c drivers/base/power/wakeirq.c include/linux/pm_wakeirq.h powerpc/mm/altmap: Fix altmap boundary check mtd: rawnand: omap_elm: Fix incorrect type in assignment test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation test_firmware: fix a memory leak with reqs buffer ext2: Drop fragment support * net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb drivers/net/usb/usbnet.c * Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb net/bluetooth/l2cap_sock.c fs/sysv: Null check to prevent null-ptr-deref bug * USB: zaurus: Add ID for A-300/B-500/C-700 drivers/net/usb/cdc_ether.c drivers/net/usb/zaurus.c libceph: fix potential hang in ceph_osdc_notify() scsi: zfcp: Defer fc_rport blocking until after ADISC response * tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen net/ipv4/tcp_metrics.c * tcp_metrics: annotate data-races around tm->tcpm_net net/ipv4/tcp_metrics.c * tcp_metrics: annotate data-races around tm->tcpm_vals[] net/ipv4/tcp_metrics.c * tcp_metrics: annotate data-races around tm->tcpm_lock net/ipv4/tcp_metrics.c * tcp_metrics: annotate data-races around tm->tcpm_stamp net/ipv4/tcp_metrics.c * tcp_metrics: fix addr_same() helper net/ipv4/tcp_metrics.c ip6mr: Fix skb_under_panic in ip6mr_cache_report() net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free * net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free net/sched/cls_u32.c * net: add missing data-race annotation for sk_ll_usec net/core/sock.c * net: add missing data-race annotations around sk->sk_peek_off net/core/sock.c net/unix/af_unix.c * net: sched: cls_u32: Fix match key mis-addressing net/sched/cls_u32.c perf test uprobe_from_different_cu: Skip if there is no gcc net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() KVM: s390: fix sthyi error handling * word-at-a-time: use the same return type for has_zero regardless of endianness include/asm-generic/word-at-a-time.h * loop: Select I/O scheduler 'none' from inside add_disk() drivers/block/loop.c * perf: Fix function pointer case kernel/events/core.c * net/sched: cls_u32: Fix reference counter leak leading to overflow net/sched/cls_u32.c ASoC: cs42l51: fix driver to properly autoload with automatic module loading net/sched: sch_qfq: account for stab overhead in qfq_enqueue * net/sched: cls_fw: Fix improper refcount update leads to use-after-free net/sched/cls_fw.c drm/client: Fix memory leak in drm_client_target_cloned dm cache policy smq: ensure IO doesn't prevent cleaner policy progress ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register s390/dasd: fix hanging device after quiesce/resume virtio-net: fix race between set queues and probe serial: 8250_dw: Preserve original value of DLF register * serial: 8250_dw: split Synopsys DesignWare 8250 common functions drivers/tty/serial/8250/Kconfig irq-bcm6345-l1: Do not assume a fixed block to cpu mapping tpm_tis: Explicitly check for error code btrfs: check for commit error at btrfs_attach_transaction_barrier() hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() Documentation: security-bugs.rst: clarify CVE handling Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group usb: xhci-mtk: set the dma max_seg_size * USB: quirks: add quirk for Focusrite Scarlett drivers/usb/core/quirks.c usb: ohci-at91: Fix the unhandle interrupt when resume * usb: dwc3: don't reset device side if dwc3 was configured as host-only drivers/usb/dwc3/core.c usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy * Revert "usb: dwc3: core: Enable AutoRetry feature in the controller" drivers/usb/dwc3/core.c drivers/usb/dwc3/core.h can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED USB: serial: simple: sort driver entries USB: serial: simple: add Kaufmann RKS+CAN VCP USB: serial: option: add Quectel EC200A module support USB: serial: option: support Quectel EM060K_128 * tracing: Fix warning in trace_buffered_event_disable() kernel/trace/trace_events.c * ring-buffer: Fix wrong stat of cpu_buffer->read kernel/trace/ring_buffer.c ata: pata_ns87415: mark ns87560_tf_read static dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths * block: Fix a source code comment in include/uapi/linux/blkzoned.h include/uapi/linux/blkzoned.h ASoC: fsl_spdif: Silence output on stop drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() RDMA/mlx4: Make check for invalid flags stricter benet: fix return value check in be_lancer_xmit_workarounds() net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64 net/sched: mqprio: add extack to mqprio_parse_nlattr() net/sched: mqprio: refactor nlattr parsing to a separate function platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 team: reset team's flags when down link is P2P device * bonding: reset bond's flags when down link is P2P device drivers/net/bonding/bond_main.c * tcp: Reduce chance of collisions in inet6_hashfn(). include/net/ipv6.h * ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address net/ipv6/addrconf.c ethernet: atheros: fix return value check in atl1e_tso_csum() phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() * ext4: fix to check return value of freeze_bdev() in ext4_shutdown() fs/ext4/ioctl.c scsi: qla2xxx: Array index may go out of bound scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() ftrace: Store the order of pages allocated in ftrace_page ftrace: Check if pages were allocated before calling free_pages() * ftrace: Add information on number of page groups allocated kernel/trace/trace.c kernel/trace/trace.h fs: dlm: interrupt posix locks only when process is killed dlm: rearrange async condition return dlm: cleanup plock_op vs plock_xop PCI/ASPM: Avoid link retraining race PCI/ASPM: Factor out pcie_wait_for_retrain() PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() PCI: Rework pcie_retrain_link() wait loop * ext4: Fix reusing stale buffer heads from last failed mounting fs/ext4/super.c * ext4: rename journal_dev to s_journal_dev inside ext4_sb_info fs/ext4/ext4.h fs/ext4/fsmap.c fs/ext4/super.c btrfs: fix extent buffer leak after tree mod log failure at split_node() bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent bcache: remove 'int n' from parameter list of bch_bucket_alloc_set() bcache: use MAX_CACHES_PER_SET instead of magic number 8 in __bch_bucket_alloc_set gpio: tps68470: Make tps68470_gpio_output() always set the initial value tracing/histograms: Return an error if we fail to add histogram to hist_vars list * tcp: annotate data-races around fastopenq.max_qlen include/linux/tcp.h net/ipv4/tcp.c net/ipv4/tcp_fastopen.c * tcp: annotate data-races around tp->notsent_lowat include/net/tcp.h net/ipv4/tcp.c * tcp: annotate data-races around rskq_defer_accept net/ipv4/tcp.c * tcp: annotate data-races around tp->linger2 net/ipv4/tcp.c * net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX include/net/tcp.h net/ipv4/tcp.c netfilter: nf_tables: can't schedule in nft_chain_validate netfilter: nf_tables: fix spurious set element insertion failure * llc: Don't drop packet from non-root netns. net/llc/llc_input.c fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe * Revert "tcp: avoid the lookup process failing to get sk in ehash table" net/ipv4/inet_hashtables.c net/ipv4/inet_timewait_sock.c net:ipv6: check return value of pskb_trim() net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() pinctrl: amd: Use amd_pinconf_set() for all config options fbdev: imxfb: warn about invalid left/right margin spi: bcm63xx: fix max prepend length igb: Fix igb_down hung on surprise removal wifi: iwlwifi: mvm: avoid baid size integer overflow * wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() net/wireless/wext-core.c * bpf: Address KCSAN report on bpf_lru_list kernel/bpf/bpf_lru_list.c kernel/bpf/bpf_lru_list.h * sched/fair: Don't balance task to its current running CPU kernel/sched/fair.c * posix-timers: Ensure timer ID search-loop limit is valid include/linux/sched/signal.h kernel/time/posix-timers.c md/raid10: prevent soft lockup while flush writes md: fix data corruption for raid456 when reshape restart while grow up nbd: Add the maximum limit of allocated index in nbd_dev_add debugobjects: Recheck debug_objects_enabled before reporting * ext4: correct inline offset when handling xattrs in inode body fs/ext4/xattr.c can: bcm: Fix UAF in bcm_proc_show() * fuse: revalidate: don't invalidate if interrupted fs/fuse/dir.c perf probe: Add test for regression introduced by switch to die_get_decl_file() tracing/histograms: Add histograms to hist_vars if they have referenced variables * drm/atomic: Fix potential use-after-free in nonblocking commits drivers/gpu/drm/drm_atomic.c scsi: qla2xxx: Pointer may be dereferenced scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() scsi: qla2xxx: Fix potential NULL pointer dereference scsi: qla2xxx: Wait for io return on terminate rport xtensa: ISS: fix call to split_if_spec * ring-buffer: Fix deadloop issue on reading trace_pipe kernel/trace/ring_buffer.c tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error * Revert "8250: add support for ASIX devices with a FIFO bug" include/linux/serial_8250.h meson saradc: fix clock divider mask length ceph: don't let check_caps skip sending responses for revoke msgs hwrng: imx-rngc - fix the timeout for init and self check serial: atmel: don't enable IRQs prematurely fs: dlm: return positive pid value for F_GETLK md/raid0: add discard support for the 'original' layout misc: pci_endpoint_test: Re-init completion for every test misc: pci_endpoint_test: Free IRQs before removing the device PCI: rockchip: Use u32 variable to access 32-bit registers PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked PCI: rockchip: Write PCI Device ID to correct register PCI: rockchip: Assert PCI Configuration Enable bit after probe PCI: qcom: Disable write access to read only registers for IP v2.3.3 * PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 drivers/pci/quirks.c * PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold drivers/pci/pci.c jfs: jfs_dmap: Validate db_l2nbperpage while mounting * ext4: only update i_reserved_data_blocks on successful block allocation fs/ext4/indirect.c fs/ext4/inode.c * ext4: fix wrong unit use in ext4_mb_clear_bb fs/ext4/mballoc.c perf intel-pt: Fix CYC timestamps after standalone CBR SUNRPC: Fix UAF in svc_tcp_listen_data_ready() net: bcmgenet: Ensure MDIO unregistration has clocks enabled tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation pinctrl: amd: Only use special debounce behavior for GPIO 0 pinctrl: amd: Detect internal GPIO0 debounce handling pinctrl: amd: Fix mistake in handling clearing pins at startup * net/sched: make psched_mtu() RTNL-less safe include/net/pkt_sched.h wifi: airo: avoid uninitialized warning in airo_get_rate() * ipv6/addrconf: fix a potential refcount underflow for idev net/ipv6/addrconf.c NTB: ntb_tool: Add check for devm_kcalloc NTB: ntb_transport: fix possible memory leak while device_register() fails ntb: intel: Fix error handling in intel_ntb_pci_driver_init() NTB: amd: Fix error handling in amd_ntb_pci_driver_init() ntb: idt: Fix error handling in idt_pci_driver_init() * udp6: fix udp6_ehashfn() typo net/ipv6/udp.c * icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). net/ipv6/icmp.c * vrf: Increment Icmp6InMsgs on the original netdev include/net/addrconf.h net/ipv6/icmp.c net/ipv6/reassembly.c net: mvneta: fix txq_map in case of txq_number==1 * workqueue: clean up WORK_* constant types, clarify masking include/linux/workqueue.h kernel/workqueue.c net: lan743x: Don't sleep in atomic context netfilter: nf_tables: prevent OOB access in nft_byteorder_eval * netfilter: conntrack: Avoid nf_ct_helper_hash uses after free net/netfilter/nf_conntrack_helper.c netfilter: nf_tables: fix scheduling-while-atomic splat netfilter: nf_tables: unbind non-anonymous set if rule construction fails * netfilter: nf_tables: reject unbound anonymous set before commit phase include/net/netfilter/nf_tables.h * netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain include/net/netfilter/nf_tables.h netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE * netfilter: nf_tables: use net_generic infra for transaction data include/net/netfilter/nf_tables.h include/net/netns/nftables.h * netfilter: add helper function to set up the nfnetlink header and use it include/linux/netfilter/nfnetlink.h net/netfilter/nf_conntrack_netlink.c net/netfilter/nfnetlink_log.c net/netfilter/nfnetlink_queue.c netfilter: nftables: add helper function to set the base sequence number netfilter: nf_tables: add rescheduling points during loop detection walks netfilter: nf_tables: fix nat hook table deletion spi: spi-fsl-spi: allow changing bits_per_word while CS is still active spi: spi-fsl-spi: relax message sanity checking a little spi: spi-fsl-spi: remove always-true conditional in fsl_spi_do_one_msg ARM: orion5x: fix d2net gpio initialization btrfs: fix race when deleting quota root from the dirty cow roots list jffs2: reduce stack usage in jffs2_build_xattr_subsystem() * integrity: Fix possible multiple allocation in integrity_inode_get() security/integrity/iint.c bcache: Remove unnecessary NULL point check in node allocations mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M mmc: core: disable TRIM on Kingston EMMC04G-M627 NFSD: add encoding of op_recall flag for write delegation * ALSA: jack: Fix mutex call in snd_jack_report() sound/core/jack.c i2c: xiic: Don't try to handle more interrupt events after error i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() sh: dma: Fix DMA channel offset calculation net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX * tcp: annotate data races in __tcp_oow_rate_limited() net/ipv4/tcp_input.c * net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode net/bridge/br_if.c powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y * f2fs: fix error path handling in truncate_dnode() fs/f2fs/node.c mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 spi: bcm-qspi: return error if neither hif_mspi nor mspi is available Add MODULE_FIRMWARE() for FIRMWARE_TG357766. * sctp: fix potential deadlock on &net->sctp.addr_wq_lock net/sctp/socket.c rtc: st-lpc: Release some resources in st_rtc_probe() in case of error mfd: stmpe: Only disable the regulators if they are enabled mfd: intel-lpss: Add missing check for platform_get_resource KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes mfd: rt5033: Drop rt5033-battery sub-device usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() * extcon: Fix kernel doc of property capability fields to avoid warnings drivers/extcon/extcon.c * extcon: Fix kernel doc of property fields to avoid warnings drivers/extcon/extcon.c media: usb: siano: Fix warning due to null work_func_t function pointer * media: videodev2.h: Fix struct v4l2_input tuner index comment include/uapi/linux/videodev2.h media: usb: Check az6007_read() return value sh: j2: Use ioremap() to translate device tree address into kernel memory w1: fix loop in w1_fini() * block: change all __u32 annotations to __be32 in affs_hardblocks.h include/uapi/linux/affs_hardblocks.h USB: serial: option: add LARA-R6 01B PIDs ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard ARCv2: entry: rewrite to enable use of double load/stores LDD/STD ARCv2: entry: avoid a branch ARCv2: entry: push out the Z flag unclobber from common EXCEPTION_PROLOGUE ARCv2: entry: comments about hardware auto-save on taken interrupts * modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} scripts/mod/modpost.c * modpost: fix section mismatch message for R_ARM_ABS32 scripts/mod/modpost.c crypto: nx - fix build warnings when DEBUG_FS is not enabled hwrng: virtio - Fix race on data_avail and actual data hwrng: virtio - always add a pending request hwrng: virtio - don't waste entropy hwrng: virtio - don't wait on cleanup hwrng: virtio - add an internal buffer pinctrl: at91-pio4: check return value of devm_kasprintf() perf dwarf-aux: Fix off-by-one in die_get_varname() pinctrl: cherryview: Return correct value if pin in push-pull mode * PCI: Add pci_clear_master() stub for non-CONFIG_PCI include/linux/pci.h scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer drm/radeon: fix possible division-by-zero errors fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors * soc/fsl/qe: fix usb.c build errors drivers/soc/fsl/qe/Kconfig ASoC: es8316: Increment max value for ALC Capture Target Volume control ARM: ep93xx: fix missing-prototype warnings drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H Input: adxl34x - do not hardcode interrupt trigger type ARM: dts: BCM5301X: Drop "clock-names" from the SPI node Input: drv260x - sleep between polling GO bit radeon: avoid double free in ci_dpm_init() * netlink: Add __sock_i_ino() for __netlink_diag_dump(). include/net/sock.h net/core/sock.c ipvlan: Fix return value of ipvlan_queue_xmit() netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. * lib/ts_bm: reset initial match offset for every block of text lib/ts_bm.c gtp: Fix use-after-free in __gtp_encap_destroy(). * netlink: do not hard code device address lenth in fdb dumps net/core/rtnetlink.c * netlink: fix potential deadlock in netlink_set_err() net/netlink/af_netlink.c wifi: ath9k: convert msecs to jiffies where needed wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() memstick r592: make memstick_debug_get_tpc_name() static kexec: fix a memory leak in crash_shrink_memory() watchdog/perf: more properly prevent false positives with turbo modes * watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config include/linux/nmi.h wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes wifi: ray_cs: Fix an error handling path in ray_probe() wifi: ray_cs: Drop useless status variable in parse_addr() wifi: ray_cs: Utilize strnlen() in parse_addr() wifi: wl3501_cs: Fix an error handling path in wl3501_probe() wl3501_cs: use eth_hw_addr_set() * net: create netdev->dev_addr assignment helpers include/linux/etherdevice.h include/linux/netdevice.h wl3501_cs: Fix misspelling and provide missing documentation wl3501_cs: Remove unnecessary NULL check wl3501_cs: Fix a bunch of formatting issues related to function docs wifi: atmel: Fix an error handling path in atmel_probe() wifi: orinoco: Fix an error handling path in orinoco_cs_probe() wifi: orinoco: Fix an error handling path in spectrum_cs_probe() nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() * nfc: constify several pointers to u8, char and sk_buff include/net/nfc/nfc.h wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() samples/bpf: Fix buffer overflow in tcp_basertt wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation evm: Complete description of evm_inode_setattr() ARM: 9303/1: kprobes: avoid missing-declaration warnings * PM: domains: fix integer overflow issues in genpd_parse_state() drivers/base/power/domain.c clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe clocksource/drivers/cadence-ttc: Use ttc driver as platform driver * clocksource/drivers: Unify the names to timer-* format drivers/clocksource/Makefile irqchip/jcore-aic: Fix missing allocation of IRQ descriptors irqchip/jcore-aic: Kill use of irq_create_strict_mappings() md/raid10: fix io loss while replacement replace rdev md/raid10: fix wrong setting of max_corr_read_errors md/raid10: fix overflow of md/safe_mode_delay md/raid10: check slab-out-of-bounds in md_bitmap_get_counter * treewide: Remove uninitialized_var() usage drivers/clk/clk-gate.c drivers/gpu/drm/drm_edid.c drivers/md/dm-io.c drivers/md/dm-ioctl.c drivers/md/dm-snap-persistent.c drivers/md/dm-table.c fs/fat/dir.c fs/fuse/control.c fs/fuse/file.c fs/overlayfs/copy_up.c kernel/async.c kernel/audit.c kernel/events/core.c kernel/events/uprobes.c kernel/exit.c kernel/futex.c kernel/trace/ring_buffer.c lib/radix-tree.c mm/memcontrol.c mm/percpu.c mm/slub.c mm/swap.c net/ipv4/netfilter/nf_socket_ipv4.c net/ipv6/ip6_flowlabel.c net/ipv6/netfilter/nf_socket_ipv6.c net/netfilter/nf_conntrack_ftp.c net/netfilter/nfnetlink_log.c net/netfilter/nfnetlink_queue.c net/sched/cls_flow.c sound/core/control_compat.c sound/usb/endpoint.c drm/amdgpu: Validate VM ioctl flags. scripts/tags.sh: Resolve gtags empty index generation * drm/edid: Fix uninitialized variable in drm_cvt_modes() drivers/gpu/drm/drm_edid.c fbdev: imsttfb: Fix use after free bug in imsttfb_probe video: imsttfb: check for ioremap() failures x86/smp: Use dedicated cache-line for mwait_play_dead() gfs2: Don't deref jdesc in evict Linux 4.19.290 x86: fix backwards merge of GDS/SRSO bit xen/netback: Fix buffer overrun triggered by unusual packet Documentation/x86: Fix backwards on/off logic about YMM support x86/xen: Fix secondary processors' FPU initialization KVM: Add GDS_NO support to KVM x86/speculation: Add Kconfig option for GDS x86/speculation: Add force option to GDS mitigation * x86/speculation: Add Gather Data Sampling mitigation drivers/base/cpu.c x86/fpu: Move FPU initialization into arch_cpu_finalize_init() x86/fpu: Mark init functions __init x86/fpu: Remove cpuinfo argument from init functions * init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() init/main.c * init: Invoke arch_cpu_finalize_init() earlier init/main.c * init: Remove check_bugs() leftovers init/main.c um/cpu: Switch to arch_cpu_finalize_init() sparc/cpu: Switch to arch_cpu_finalize_init() sh/cpu: Switch to arch_cpu_finalize_init() mips/cpu: Switch to arch_cpu_finalize_init() m68k/cpu: Switch to arch_cpu_finalize_init() ia64/cpu: Switch to arch_cpu_finalize_init() ARM: cpu: Switch to arch_cpu_finalize_init() x86/cpu: Switch to arch_cpu_finalize_init() * init: Provide arch_cpu_finalize_init() arch/Kconfig include/linux/cpu.h init/main.c Merge 4.19.289 into android-4.19-stable Linux 4.19.289 x86/cpu/amd: Add a Zenbleed fix x86/cpu/amd: Move the errata checking functionality up x86/microcode/AMD: Load late on both threads too Merge 4.19.288 into android-4.19-stable Linux 4.19.288 i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl drm/exynos: vidi: fix a wrong error return ASoC: nau8824: Add quirk to active-high jack-detect s390/cio: unregister device when the only path is gone usb: gadget: udc: fix NULL dereference in remove() nfcsim.c: Fix error checking for debugfs_create_dir media: cec: core: don't set last_initiator if tx in progress * arm64: Add missing Set/Way CMO encodings arch/arm64/include/asm/sysreg.h * HID: wacom: Add error check to wacom_parse_and_register() drivers/hid/wacom_sys.c scsi: target: iscsi: Prevent login threads from racing between each other * sch_netem: acquire qdisc lock in netem_change() net/sched/sch_netem.c netfilter: nfnetlink_osf: fix module autoload netfilter: nf_tables: disallow element updates of bound anonymous sets be2net: Extend xmit workaround to BE3 chip mmc: usdhi60rol0: fix deferred probing mmc: sdhci-acpi: fix deferred probing mmc: omap_hsmmc: fix deferred probing mmc: omap: fix deferred probing mmc: mvsdio: fix deferred probing mmc: mvsdio: convert to devm_platform_ioremap_resource mmc: mtk-sd: fix deferred probing net: qca_spi: Avoid high load if QCA7000 is not available xfrm: Linearize the skb after offloading if needed. ieee802154: hwsim: Fix possible memory leaks * rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer() include/linux/rcupdate.h nilfs2: prevent general protection fault in nilfs_clear_dirty_page() * cgroup: Do not corrupt task iteration when rebinding subsystem kernel/cgroup/cgroup.c PCI: hv: Fix a race condition bug in hv_pci_query_relations() Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs nilfs2: fix buffer corruption due to concurrent device reads ipmi: move message error checking to avoid deadlock * ipmi: Make the smi watcher be disabled immediately when not needed include/linux/ipmi_smi.h x86/purgatory: remove PGO flags nilfs2: reject devices with insufficient block count serial: lantiq: add missing interrupt ack serial: lantiq: Do not swap register read/writes serial: lantiq: Use readl/writel instead of ltq_r32/ltq_w32 serial: lantiq: Change ltq_w32_mask to asc_update_bits Merge 4.19.287 into android-4.19-stable Linux 4.19.287 * mmc: block: ensure error propagation for non-blk drivers/mmc/core/block.c powerpc: Fix defconfig choice logic when cross compiling drm/nouveau/kms: Fix NULL pointer dereference in nouveau_connector_detect_depth * neighbour: delete neigh_lookup_nodev as not used include/net/neighbour.h net/core/neighbour.c * net: Remove unused inline function dst_hold_and_use() include/net/dst.h * neighbour: Remove unused inline function neigh_key_eq16() include/net/neighbour.h selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET * net: tipc: resize nlattr array to correct size net/tipc/bearer.c net: lapbether: only support ethernet devices drm/nouveau: add nv_encoder pointer check for NULL drm/nouveau/kms: Don't change EDID when it hasn't actually changed drm/nouveau/dp: check for NULL nv_connector->native_mode igb: fix nvm.ops.read() error handling * sctp: fix an error code in sctp_sf_eat_auth() net/sctp/sm_statefuns.c IB/isert: Fix incorrect release of isert connection IB/isert: Fix possible list corruption in CMA handler IB/isert: Fix dead lock in ib_isert IB/uverbs: Fix to consider event queue closing also upon non-blocking mode RDMA/rxe: Fix the use-before-initialization error of resp_pkts RDMA/rxe: Removed unused name from rxe_task struct RDMA/rxe: Remove the unused variable obj * ping6: Fix send to link-local addresses with VRF. net/ipv6/ping.c * netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM net/netfilter/nfnetlink.c * usb: gadget: f_ncm: Fix NTP-32 support drivers/usb/gadget/function/f_ncm.c * usb: gadget: f_ncm: Add OS descriptor support drivers/usb/gadget/function/f_ncm.c drivers/usb/gadget/function/u_ncm.h * usb: dwc3: gadget: Reset num TRBs before giving back the request drivers/usb/dwc3/gadget.c USB: serial: option: add Quectel EM061KGL series * Remove DECnet support from kernel include/linux/netdevice.h include/linux/netfilter.h include/linux/netfilter_defs.h include/net/netns/netfilter.h include/uapi/linux/netlink.h net/Kconfig net/Makefile net/core/dev.c net/core/neighbour.c net/netfilter/core.c net: usb: qmi_wwan: add support for Compal RXM-G1 RDMA/uverbs: Restrict usage of privileged QKEYs nouveau: fix client work fence deletion race powerpc/purgatory: remove PGO flags kexec: support purgatories with .text.hot sections nilfs2: fix possible out-of-bounds segment allocation in resize ioctl nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() nios2: dts: Fix tse_mac "max-frame-size" property ocfs2: check new file size on fallocate call ocfs2: fix use-after-free when unmounting read-only filesystem xen/blkfront: Only check REQ_FUA for writes mips: Move initrd_start check after initrd address sanitisation. MIPS: Alchemy: fix dbdma2 parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu() * power: supply: Fix logic checking if system is running from battery drivers/power/supply/power_supply_core.c irqchip/meson-gpio: Mark OF related data as maybe unused * regulator: Fix error checking for debugfs_create_dir drivers/regulator/core.c * power: supply: Ratelimit no data debug output drivers/power/supply/power_supply_sysfs.c ARM: dts: vexpress: add missing cache properties power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() power: supply: ab8500: Fix external_power_changed race Merge "Merge 4.19.286 into android-4.19-stable" into android-4.19-stable * Revert "tcp: deny tcp_disconnect() when threads are waiting" include/net/sock.h net/ipv4/af_inet.c net/ipv4/inet_connection_sock.c net/ipv4/tcp.c Merge "Merge 4.19.285 into android-4.19-stable" into android-4.19-stable Merge 4.19.286 into android-4.19-stable * Revert "tcp: deny tcp_disconnect() when threads are waiting" include/net/sock.h net/ipv4/af_inet.c net/ipv4/inet_connection_sock.c net/ipv4/tcp.c * ANDROID: GKI: update ABI xml for incrementalfs.ko android/abi_gki_aarch64.xml Merge 4.19.285 into android-4.19-stable Linux 4.19.286 Revert "staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE" btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() btrfs: check return value of btrfs_commit_transaction in relocation * ext4: only check dquot_initialize_needed() when debugging fs/ext4/xattr.c i2c: sprd: Delete i2c adapter in .remove's error path pinctrl: meson-axg: add missing GPIOA_18 gpio group * Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk net/bluetooth/hci_core.c ceph: fix use-after-free bug for inodes when flushing capsnaps drm/amdgpu: fix xclk freq on CHIP_STONEY Input: psmouse - fix OOB access in Elantech protocol * Input: xpad - delete a Razer DeathAdder mouse VID/PID entry drivers/input/joystick/xpad.c batman-adv: Broken sync while rescheduling delayed work * lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() lib/cpu_rmap.c * net: sched: fix possible refcount leak in tc_chain_tmplt_add() net/sched/cls_api.c * net: sched: move rtm_tca_policy declaration to include file include/net/pkt_sched.h net/sched/cls_api.c * rfs: annotate lockless accesses to RFS sock flow table include/linux/netdevice.h net/core/dev.c * rfs: annotate lockless accesses to sk->sk_rxhash include/net/sock.h * Bluetooth: L2CAP: Add missing checks for invalid DCID net/bluetooth/l2cap_core.c * Bluetooth: Fix l2cap_disconnect_req deadlock net/bluetooth/l2cap_core.c net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods spi: qup: Request DMA before enabling clocks i40e: fix build warnings in i40e_alloc.h i40iw: fix build warning in i40iw_manage_apbvt() * UPSTREAM: net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize drivers/net/usb/cdc_ncm.c * UPSTREAM: cdc_ncm: Fix the build warning drivers/net/usb/cdc_ncm.c * UPSTREAM: cdc_ncm: Implement the 32-bit version of NCM Transfer Block drivers/net/usb/cdc_ncm.c include/linux/usb/cdc_ncm.h * Revert "tcp: reduce POLLOUT events caused by TCP_NOTSENT_LOWAT" include/net/sock.h include/net/tcp.h net/core/stream.c * Revert "tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit" net/ipv4/tcp.c * Revert "tcp: factor out __tcp_close() helper" include/net/tcp.h net/ipv4/tcp.c * Revert "tcp: add annotations around sk->sk_shutdown accesses" net/ipv4/af_inet.c net/ipv4/tcp.c net/ipv4/tcp_input.c * ANDROID: fix abi break in 4.19.284 for cpuhotplug.h include/linux/cpuhotplug.h Merge "Merge 4.19.284 into android-4.19-stable" into android-4.19-stable UPSTREAM: mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() UPSTREAM: mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() Linux 4.19.285 wifi: rtlwifi: 8192de: correct checking of IQK reload * scsi: dpt_i2o: Do not process completions with invalid addresses drivers/scsi/Kconfig scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD) * regmap: Account for register length when chunking drivers/base/regmap/regmap.c fbcon: Fix null-ptr-deref in soft_cursor * ext4: add lockdep annotations for i_data_sem for ea_inode's fs/ext4/ext4.h fs/ext4/xattr.c * selinux: don't use make's grouped targets feature yet security/selinux/Makefile tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK mmc: vub300: fix invalid response handling rsi: Remove unnecessary boolean condition regulator: da905{2,5}: Remove unnecessary array check hwmon: (scmi) Remove redundant pointer check wifi: rtlwifi: remove always-true condition pointed out by GCC 12 lib/dynamic_debug.c: use address-of operator on section symbols * kernel/extable.c: use address-of operator on section symbols kernel/extable.c eth: sun: cassini: remove dead code * gcc-12: disable '-Wdangling-pointer' warning for now Makefile ACPI: thermal: drop an always true check x86/boot: Wrap literal addresses in absolute_pointer() ata: libata-scsi: Use correct device no in ata_find_dev() scsi: stex: Fix gcc 13 warnings * usb: gadget: f_fs: Add unbind event before functionfs_unbind drivers/usb/gadget/function/f_fs.c net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 * iio: dac: build ad5758 driver when AD5758 is selected drivers/iio/dac/Makefile iio: dac: mcp4725: Fix i2c_master_send() return value handling * HID: wacom: avoid integer overflow in wacom_intuos_inout() drivers/hid/wacom_wac.c * HID: google: add jewel USB id drivers/hid/hid-ids.h iio: adc: mxs-lradc: fix the order of two cleanup operations mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() atm: hide unused procfs functions ALSA: oss: avoid missing-prototype warnings * netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT net/netfilter/nf_conntrack_netlink.c wifi: b43: fix incorrect __packed annotation * scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed drivers/scsi/scsi_lib.c * arm64/mm: mark private VM_FAULT_X defines as vm_fault_t arch/arm64/mm/fault.c ARM: dts: stm32: add pin map for CAN controller on stm32f7 wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() * media: dvb-core: Fix use-after-free due on race condition at dvb_net include/media/dvb_net.h media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() media: dvb_ca_en50221: fix a size write bug media: netup_unidvb: fix irq init by register it at the end of probe media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() * media: dvb_demux: fix a bug for the continuity counter drivers/media/dvb-core/dvb_demux.c ASoC: ssm2602: Add workaround for playback distortions * xfrm: Check if_id in inbound policy/secpath match net/xfrm/xfrm_policy.c ASoC: dwc: limit the number of overrun messages nbd: Fix debugfs_create_dir error checking fbdev: stifb: Fix info entry in sti_struct on error path fbdev: modedb: Add 1920x1080 at 60 Hz video mode media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE ARM: 9295/1: unwind:fix unwind abort for uleb128 case mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() watchdog: menz069_wdt: fix watchdog initialisation net: dsa: mv88e6xxx: Increase wait after reset deactivation net/sched: flower: fix possible OOB write in fl_set_geneve_opt() * udp6: Fix race condition in udp6_sendmsg & connect net/core/sock.c * net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report net/netlink/af_netlink.c * ocfs2/dlm: move BITS_TO_BYTES() to bitops.h for wider use include/linux/bitops.h * net: sched: fix NULL pointer dereference in mq_attach net/sched/sch_api.c * net/sched: Prohibit regrafting ingress or clsact Qdiscs net/sched/sch_api.c * net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs net/sched/sch_api.c net/sched/sch_ingress.c * net/sched: sch_clsact: Only create under TC_H_CLSACT net/sched/sch_ingress.c * net/sched: sch_ingress: Only create under TC_H_INGRESS net/sched/sch_ingress.c * tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set net/ipv4/tcp.c * tcp: deny tcp_disconnect() when threads are waiting include/net/sock.h net/ipv4/af_inet.c net/ipv4/inet_connection_sock.c net/ipv4/tcp.c * af_packet: do not use READ_ONCE() in packet_bind() net/packet/af_packet.c amd-xgbe: fix the false linkup in xgbe_phy_status * af_packet: Fix data-races of pkt_sk(sk)->num. net/packet/af_packet.c netrom: fix info-leak in nr_write_internal() net/mlx5: fw_tracer, Fix event handling dmaengine: pl330: rename _start to prevent build error * netfilter: ctnetlink: Support offloaded conntrack entry deletion net/netfilter/nf_conntrack_netlink.c * ipv{4,6}/raw: fix output xfrm lookup wrt protocol include/net/ip.h include/uapi/linux/in.h net/ipv4/ip_sockglue.c net/ipv4/raw.c net/ipv6/raw.c * bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() net/bluetooth/hci_sock.c * cdc_ncm: Fix the build warning drivers/net/usb/cdc_ncm.c power: supply: bq24190: Call power_supply_changed() after updating input current * power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier() drivers/power/supply/power_supply_core.c include/linux/power_supply.h power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize * net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize drivers/net/usb/cdc_ncm.c * cdc_ncm: Implement the 32-bit version of NCM Transfer Block drivers/net/usb/cdc_ncm.c include/linux/usb/cdc_ncm.h Merge 4.19.284 into android-4.19-stable UPSTREAM: efi: rt-wrapper: Add missing include * BACKPORT: arm64: efi: Execute runtime services from a dedicated stack arch/arm64/include/asm/efi.h * Revert "uapi/linux/const.h: prefer ISO-friendly __typeof__" include/uapi/linux/const.h Merge "Merge 4.19.283 into android-4.19-stable" into android-4.19-stable Linux 4.19.284 * drivers: depend on HAS_IOMEM for devm_platform_ioremap_resource() drivers/base/platform.c 3c589_cs: Fix an error handling path in tc589_probe() forcedeth: Fix an error handling path in nv_probe() * ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg include/uapi/sound/skl-tplg-interface.h x86/show_trace_log_lvl: Ensure stack pointer is aligned, again xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() * coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() drivers/hwtracing/coresight/coresight-tmc-etr.c power: supply: sbs-charger: Fix INHIBITED bit for Status reg * power: supply: bq27xxx: Fix poll_interval handling and races on remove include/linux/power/bq27xxx_battery.h power: supply: bq27xxx: Fix I2C IRQ race on remove power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition * power: supply: leds: Fix blink to LED on transition drivers/power/supply/power_supply_leds.c * ipv6: Fix out-of-bounds access in ipv6_find_tlv() net/ipv6/exthdrs_core.c * bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields kernel/bpf/verifier.c * net: fix skb leak in __skb_tstamp_tx() net/core/skbuff.c media: radio-shark: Add endpoint checks USB: sisusbvga: Add endpoint checks * USB: core: Add routines for endpoint checks in old drivers drivers/usb/core/usb.c include/linux/usb.h * udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). net/ipv4/udplite.c net/ipv6/udplite.c ALSA: hda/realtek - Fix inverted bass GPIO pin on Acer 8951G ALSA: hda/realtek - Fixed one of HP ALC671 platform Headset Mic supported parisc: Fix flush_dcache_page() for usage from irq context selftests/memfd: Fix unknown type name build failure x86/mm: Avoid incomplete Global INVLPG flushes btrfs: use nofs when cleaning up aborted transactions parisc: Allow to reboot machine after system halt m68k: Move signal frame following exception on 68020/030 ALSA: hda/ca0132: add quirk for EVGA X299 DARK spi: fsl-cpm: Use 16 bit mode for large transfers with even size spi: fsl-spi: Re-organise transfer bits_per_word adaptation spi: spi-fsl-spi: automatically adapt bits-per-word in cpu mode s390/qdio: fix do_sqbs() inline assembly constraint s390/qdio: get rid of register asm vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF vc_screen: rewrite vcs_size to accept vc, not inode * usb: gadget: u_ether: Fix host MAC address case drivers/usb/gadget/function/u_ether.c * usb: gadget: u_ether: Convert prints to device prints drivers/usb/gadget/function/u_ether.c * lib/string_helpers: Introduce string_upper() and string_lower() helpers include/linux/string_helpers.h ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 ALSA: hda/realtek - ALC897 headset MIC no sound ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW ALSA: hda/realtek - The front Mic on a HP machine doesn't work ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 ALSA: hda/realtek - Add Headset Mic supported for HP cPC ALSA: hda/realtek - More constifications Add Acer Aspire Ethos 8951G model quirk * HID: wacom: Force pen out of prox if no events have been received in a while drivers/hid/wacom.h drivers/hid/wacom_sys.c drivers/hid/wacom_wac.c netfilter: nf_tables: do not allow RULE_ID to refer to another chain netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag netfilter: nf_tables: stricter validation of element data * netfilter: nf_tables: allow up to 64 bytes in the set element data area include/net/netfilter/nf_tables.h netfilter: nf_tables: add nft_setelem_parse_key() netfilter: nf_tables: validate registers coming from userspace. * netfilter: nftables: statify nft_parse_register() include/net/netfilter/nf_tables.h * netfilter: nftables: add nft_parse_register_store() and use it include/net/netfilter/nf_tables.h include/net/netfilter/nf_tables_core.h include/net/netfilter/nft_fib.h * netfilter: nftables: add nft_parse_register_load() and use it include/net/netfilter/nf_tables.h include/net/netfilter/nf_tables_core.h include/net/netfilter/nft_masq.h include/net/netfilter/nft_redir.h nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() tpm/tpm_tis: Disable interrupts for more Lenovo devices ceph: force updating the msg pointer in non-split case serial: Add support for Advantech PCI-1611U card * statfs: enforce statfs[64] structure initialization fs/statfs.c ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table ALSA: hda: Fix Oops by 9.1 surround channel names usb: typec: altmodes/displayport: fix pin_assignment_show * usb-storage: fix deadlock when a scsi command timeouts more than once drivers/usb/storage/scsiglue.c vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() igb: fix bit_shift to be in [1..8] range cassini: Fix a memory leak in the error handling path of cas_init_one() net: bcmgenet: Restore phy_stop() depending upon suspend/close net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() drm/exynos: fix g2d_open/close helper function definitions media: netup_unidvb: fix use-after-free at del_timer() erspan: get the proto with the md version for collect_md * ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode include/net/ip6_tunnel.h include/net/ip_tunnels.h ip6_gre: Make o_seqno start from 0 in native mode ip6_gre: Fix skb_under_panic in __gre6_xmit() serial: arc_uart: fix of_iomap leak in `arc_serial_probe` * drivers: provide devm_platform_ioremap_resource() drivers/base/platform.c include/linux/platform_device.h vsock: avoid to close connected socket after the timeout net: fec: Better handle pm_runtime_get() failing in .remove() * af_key: Reject optional tunnel/BEET mode templates in outbound policies net/key/af_key.c cpupower: Make TSC read per CPU for Mperf monitor btrfs: fix space cache inconsistency after error loading it from disk btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid mfd: dln2: Fix memory leak in dln2_probe() phy: st: miphy28lp: use _poll_timeout functions for waits * Input: xpad - add constants for GIP interface numbers drivers/input/joystick/xpad.c clk: tegra20: fix gcc-7 constant overflow warning recordmcount: Fix memory leaks in the uwrite function * sched: Fix KCSAN noinstr violation include/linux/sched/task_stack.h mcb-pci: Reallocate memory region to avoid memory overlapping serial: 8250: Reinit port->pm on port specific driver unbind usb: typec: tcpm: fix multiple times discover svids error * HID: wacom: generic: Set battery quirk only when we see battery data drivers/hid/wacom_wac.c spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 HID: logitech-hidpp: Reconcile USB and Unifying serials HID: logitech-hidpp: Don't use the USB serial for USB devices staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE * Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp net/bluetooth/l2cap_core.c wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace * f2fs: fix to drop all dirty pages during umount() if cp_error is set fs/f2fs/checkpoint.c fs/f2fs/data.c * ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() fs/ext4/mballoc.c * ext4: set goal start correctly in ext4_mb_normalize_request fs/ext4/mballoc.c gfs2: Fix inode height consistency check scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition * lib: cpu_rmap: Avoid use after free on rmap->obj array entries lib/cpu_rmap.c * net: Catch invalid index in XPS mapping net/core/dev.c net: pasemi: Fix return type of pasemi_mac_start_tx() ext2: Check block size validity during mount wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects ACPICA: Avoid undefined behavior: applying zero offset to null pointer drm/tegra: Avoid potential 32-bit integer overflow ACPI: EC: Fix oops when removing custom query handlers * firmware: arm_sdei: Fix sleep from invalid context BUG include/linux/cpuhotplug.h memstick: r592: Fix UAF bug in r592_remove due to race condition * regmap: cache: Return error in cache sync operations for REGCACHE_NONE drivers/base/regmap/regcache.c drm/amd/display: Use DC_LOG_DC in the trasform pixel function fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() * af_unix: Fix data races around sk->sk_shutdown. net/unix/af_unix.c * af_unix: Fix a data race of sk->sk_receive_queue->qlen. net/unix/af_unix.c * net: datagram: fix data-races in datagram_poll() net/core/datagram.c ipvlan:Fix out-of-bounds caused by unclear skb->cb * tcp: add annotations around sk->sk_shutdown accesses net/ipv4/af_inet.c net/ipv4/tcp.c net/ipv4/tcp_input.c * tcp: factor out __tcp_close() helper include/net/tcp.h net/ipv4/tcp.c * tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit net/ipv4/tcp.c * tcp: reduce POLLOUT events caused by TCP_NOTSENT_LOWAT include/net/sock.h include/net/tcp.h net/core/stream.c * net: annotate sk->sk_err write from do_recvmmsg() net/socket.c * netlink: annotate accesses to nlk->cb_running net/netlink/af_netlink.c * net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). include/net/sock.h * UPSTREAM: ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum fs/ext4/super.c Merge 4.19.283 into android-4.19-stable * UPSTREAM: ext4: fix invalid free tracking in ext4_xattr_move_to_block() fs/ext4/xattr.c Linux 4.19.283 * mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock mm/page_alloc.c * printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h include/linux/printk.h PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors drbd: correctly submit flush bio on barrier serial: 8250: Fix serial8250_tx_empty() race with DMA Tx * tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH drivers/tty/tty_io.c drivers/tty/tty_ioctl.c include/linux/tty.h * ext4: fix invalid free tracking in ext4_xattr_move_to_block() fs/ext4/xattr.c * ext4: remove a BUG_ON in ext4_mb_release_group_pa() fs/ext4/mballoc.c * ext4: bail out of ext4_xattr_ibody_get() fails for any reason fs/ext4/inline.c * ext4: add bounds checking in get_max_inline_xattr_value_size() fs/ext4/inline.c * ext4: improve error recovery code paths in __ext4_remount() fs/ext4/super.c * ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum fs/ext4/super.c * ext4: fix WARNING in mb_find_extent fs/ext4/balloc.c * HID: wacom: Set a default resolution for older tablets drivers/hid/wacom_wac.c drm/panel: otm8009a: Set backlight parent to panel device ARM: dts: s5pv210: correct MIPI CSIS clock name ARM: dts: exynos: fix WM8960 clock name in Itop Elite sh: nmi_debug: fix return value of __setup handler sh: init: use OF_EARLY_FLATTREE for early init sh: math-emu: fix macro redefined warning platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i cifs: fix pcchunk length type in smb2_copychunk_range btrfs: print-tree: parent bytenr must be aligned to sector size btrfs: fix btrfs_prev_leaf() to not return the same key twice perf symbols: Fix return incorrect build_id size in elf_read_build_id() perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() perf vendor events power9: Remove UTF-8 characters from JSON files virtio_net: suppress cpu stall when free_unused_bufs virtio_net: split free_unused_bufs() ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` drm/amdgpu: add a missing lock for AMDGPU_SCHED * drm/amdgpu: Add command to override the context priority. include/uapi/drm/amdgpu_drm.h drm/amdgpu: Put enable gfx off feature to a delay thread drm/amdgpu: Add amdgpu_gfx_off_ctrl function * af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). net/packet/af_packet.c rxrpc: Fix hard call timeout units * net/sched: act_mirred: Add carrier check net/sched/act_mirred.c * writeback: fix call of incorrect macro fs/fs-writeback.c net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu net: dsa: mv88e6xxx: Add missing watchdog ops for 6320 family * sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() net/ipv6/sit.c relayfs: fix out-of-bounds access in relay_file_read kernel/relay.c: fix read_pos error when multiple readers * dm verity: fix error handling for check_at_most_once on FEC drivers/md/dm-verity-target.c * dm verity: skip redundant verity_handle_err() on I/O errors drivers/md/dm-verity-target.c ipmi: fix SSIF not responding under certain cond. ipmi_ssif: Rename idle state and check * ipmi: Fix how the lower layers are told to watch for messages include/linux/ipmi_smi.h ipmi: Fix SSIF flag requests * tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem drivers/base/cpu.c include/linux/tick.h kernel/time/tick-sched.c * nohz: Add TICK_DEP_BIT_RCU include/linux/tick.h include/trace/events/timer.h kernel/time/tick-sched.c * netfilter: nf_tables: deactivate anonymous set from preparation phase include/net/netfilter/nf_tables.h debugobject: Ensure pool refill (again) perf auxtrace: Fix address filter entire kernel size * dm ioctl: fix nested locking in table_clear() to remove deadlock concern drivers/md/dm-ioctl.c dm flakey: fix a crash with invalid table line dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path s390/dasd: fix hanging blockdevice after request requeue * btrfs: scrub: reject unsupported scrub flags include/uapi/linux/btrfs.h clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent wifi: rtl8xxxu: RTL8192EU always needs full init md/raid10: fix null-ptr-deref in raid10_sync_request nilfs2: fix infinite loop in nilfs_mdt_get_block() nilfs2: do not write dirty data after degenerating to read-only parisc: Fix argument pointer in real64_call_asm() dmaengine: at_xdmac: do not enable all cyclic channels phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port pwm: mtk-disp: Disable shadow registers before setting backlight values pwm: mtk-disp: Adjust the clocks to avoid them mismatch pwm: mtk-disp: Don't check the return code of pwmchip_remove() openrisc: Properly store r31 to pt_regs on unhandled exceptions RDMA/mlx5: Use correct device num_ports when modify DC * SUNRPC: remove the maximum number of retries in call_bind_status include/linux/sunrpc/sched.h NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order * clk: add missing of_node_put() in "assigned-clocks" property parsing drivers/clk/clk-conf.c power: supply: generic-adc-battery: fix unit scaling RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() RDMA/rdmavt: Delete unnecessary NULL check * perf/core: Fix hardlockup failure caused by perf throttle kernel/events/core.c powerpc/rtas: use memmove for potentially overlapping buffer copy * macintosh: via-pmu-led: requires ATA to be set drivers/macintosh/Kconfig powerpc/sysdev/tsi108: fix resource printk format warnings powerpc/wii: fix resource printk format warnings powerpc/mpc512x: fix resource printk format warning macintosh/windfarm_smu_sat: Add missing of_node_put() * spmi: Add a check for remove callback when removing a SPMI driver drivers/spmi/spmi.c staging: rtl8192e: Fix W_DISABLE# does not work after stop/start serial: 8250: Add missing wakeup event reporting tty: serial: fsl_lpuart: adjust buffer length to the intended size usb: chipidea: fix missing goto in `ci_hdrc_probe` sh: sq: Fix incorrect element size for allocating bitmap buffer * uapi/linux/const.h: prefer ISO-friendly __typeof__ include/uapi/linux/const.h spi: cadence-quadspi: fix suspend-resume implementations mtd: spi-nor: cadence-quadspi: Handle probe deferral while requesting DMA channel mtd: spi-nor: cadence-quadspi: Don't initialize rx_dma_complete on failure mtd: spi-nor: cadence-quadspi: Make driver independent of flash geometry ia64: salinfo: placate defined-but-not-used warning ia64: mm/contig: fix section mismatch warning/error * of: Fix modalias string generation drivers/of/device.c vmci_host: fix a race condition in vmci_host_poll() causing GPF spi: fsl-spi: Fix CPM/QE mode Litte Endian spi: qup: Don't skip cleanup in remove's error path spi: qup: fix PM reference leak in spi_qup_remove() * linux/vt_buffer.h: allow either builtin or modular for macros include/linux/vt_buffer.h usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition fpga: bridge: fix kernel-doc parameter description usb: host: xhci-rcar: remove leftover quirk handling * pstore: Revert pmsg_lock back to a normal mutex fs/pstore/pmsg.c * tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. net/core/skbuff.c net: amd: Fix link leak when verifying config failed * netlink: Use copy_to_user() for optval in netlink_getsockopt(). net/netlink/af_netlink.c Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" * ipv4: Fix potential uninit variable access bug in __ip_make_skb() net/ipv4/ip_output.c * netfilter: nf_tables: don't write table validation state without mutex include/linux/netfilter/nfnetlink.h net/netfilter/nfnetlink.c ixgbe: Enable setting RSS table to default values ixgbe: Allow flow hash to be set via ethtool wifi: iwlwifi: mvm: check firmware response size wifi: iwlwifi: make the loop for card preparation effective md/raid10: fix memleak of md thread md: update the optimal I/O size on reshape md/raid10: fix memleak for 'conf->bio_split' md/raid10: fix leak of 'r10bio->remaining' for recovery * crypto: drbg - Only fail when jent is unavailable in FIPS mode crypto/drbg.c * crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors crypto/drbg.c bpftool: Fix bug for long instructions in program CFG dumps wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() rtlwifi: Replace RT_TRACE with rtl_dbg rtlwifi: Start changing RT_TRACE into rtl_dbg rtlwifi: rtl_pci: Fix memory leak when hardware init fails scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS scsi: target: iscsit: Fix TAS handling during conn cleanup * net/packet: convert po->auxdata to an atomic flag net/packet/af_packet.c net/packet/internal.h * net/packet: convert po->origdev to an atomic flag net/packet/af_packet.c net/packet/internal.h vlan: partially enable SIOCSHWTSTAMP in container * scm: fix MSG_CTRUNC setting condition for SO_PASSSEC include/net/scm.h tools: bpftool: Remove invalid \' json escape wifi: ath6kl: reduce WARN to dev_dbg() in callback wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() wifi: ath9k: hif_usb: fix memory leak of remain_skbs wifi: ath6kl: minor fix for allocation size debugobject: Prevent init race with static objects debugobjects: Move printk out of db->lock critical sections debugobjects: Add percpu free pools * arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step arch/arm64/include/asm/debug-monitors.h arch/arm64/kernel/debug-monitors.c x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() media: rc: gpio-ir-recv: Fix support for wake-up media: rcar_fdp1: Fix refcount leak in probe and remove function media: rcar_fdp1: Fix the correct variable assignments media: saa7134: fix use after free bug in saa7134_finidev due to race condition media: dm1105: Fix use after free bug in dm1105_remove due to race condition x86/apic: Fix atomic update of offset in reserve_eilvt_offset() drm/msm/adreno: drop bogus pm_runtime_set_active() drm/msm/adreno: Defer enabling runpm until hw_init() * firmware: qcom_scm: Clear download bit during reboot drivers/firmware/qcom_scm.c media: av7110: prevent underflow in write_ts_to_decoder() * media: uapi: add MEDIA_BUS_FMT_METADATA_FIXED media bus format. include/uapi/linux/media-bus-format.h media: bdisp: Add missing check for create_workqueue ARM: dts: qcom: ipq4019: Fix the PCI I/O port range EDAC/skx: Fix overflows on the DRAM row address mapping arrays EDAC, skx: Move debugfs node under EDAC's hierarchy * drm/probe-helper: Cancel previous job before starting new one drivers/gpu/drm/drm_probe_helper.c drm/vgem: add missing mutex_destroy drm/rockchip: Drop unbalanced obj unref * selinux: ensure av_permissions.h is built when needed security/selinux/Makefile * selinux: fix Makefile dependencies of flask.h security/selinux/Makefile ubifs: Free memory for tmpfile name ubi: Fix return value overwrite issue in try_write_vid_and_data() ubifs: Fix memleak when insert_old_idx() failed Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path" i2c: omap: Fix standard mode false ACK readings KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted reiserfs: Add security prefix to xattr name in reiserfs_security_write() * ring-buffer: Sync IRQ works before buffer destruction kernel/trace/ring_buffer.c pwm: meson: Fix axg ao mux parents MIPS: fw: Allow firmware to pass a empty env * xhci: fix debugfs register accesses while suspended drivers/usb/host/xhci-debugfs.c * debugfs: regset32: Add Runtime PM support fs/debugfs/file.c include/linux/debugfs.h staging: iio: resolver: ads1210: fix config mode perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE) * USB: dwc3: fix runtime pm imbalance on unbind drivers/usb/dwc3/core.c stmmac: debugfs entry name is not be changed when udev rename device name. ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 iio: adc: palmas_gpadc: fix NULL dereference on rmmod USB: serial: option: add UNISOC vendor and TOZED LT70C product * bluetooth: Perform careful capability checks in hci_sock_ioctl() net/bluetooth/hci_sock.c wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() * ANDROID: incremental fs: Evict inodes before freeing mount data fs/incfs/main.c fs/incfs/vfs.c * Revert "Revert "mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse"" android/abi_gki_aarch64.xml include/linux/rmap.h mm/rmap.c Bug: 299241959 Change-Id: Ib8c4ff87b1b0b720abce0f5fcdf1a51f01a472a9 Signed-off-by: Wilson Sung <wilsonsung@google.com> Signed-off-by: ChangYan Lee <changyan@google.com>	2023-10-17 05:00:19 +00:00
Greg Kroah-Hartman	4e2cad2c2a	Merge 4.19.284 into android-4.19-stable ... Changes in 4.19.284 net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). netlink: annotate accesses to nlk->cb_running net: annotate sk->sk_err write from do_recvmmsg() tcp: reduce POLLOUT events caused by TCP_NOTSENT_LOWAT tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit tcp: factor out __tcp_close() helper tcp: add annotations around sk->sk_shutdown accesses ipvlan:Fix out-of-bounds caused by unclear skb->cb net: datagram: fix data-races in datagram_poll() af_unix: Fix a data race of sk->sk_receive_queue->qlen. af_unix: Fix data races around sk->sk_shutdown. fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() drm/amd/display: Use DC_LOG_DC in the trasform pixel function regmap: cache: Return error in cache sync operations for REGCACHE_NONE memstick: r592: Fix UAF bug in r592_remove due to race condition firmware: arm_sdei: Fix sleep from invalid context BUG ACPI: EC: Fix oops when removing custom query handlers drm/tegra: Avoid potential 32-bit integer overflow ACPICA: Avoid undefined behavior: applying zero offset to null pointer ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex ext2: Check block size validity during mount net: pasemi: Fix return type of pasemi_mac_start_tx() net: Catch invalid index in XPS mapping lib: cpu_rmap: Avoid use after free on rmap->obj array entries scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition gfs2: Fix inode height consistency check ext4: set goal start correctly in ext4_mb_normalize_request ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() f2fs: fix to drop all dirty pages during umount() if cp_error is set wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE HID: logitech-hidpp: Don't use the USB serial for USB devices HID: logitech-hidpp: Reconcile USB and Unifying serials spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 HID: wacom: generic: Set battery quirk only when we see battery data usb: typec: tcpm: fix multiple times discover svids error serial: 8250: Reinit port->pm on port specific driver unbind mcb-pci: Reallocate memory region to avoid memory overlapping sched: Fix KCSAN noinstr violation recordmcount: Fix memory leaks in the uwrite function clk: tegra20: fix gcc-7 constant overflow warning Input: xpad - add constants for GIP interface numbers phy: st: miphy28lp: use _poll_timeout functions for waits mfd: dln2: Fix memory leak in dln2_probe() btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid btrfs: fix space cache inconsistency after error loading it from disk cpupower: Make TSC read per CPU for Mperf monitor af_key: Reject optional tunnel/BEET mode templates in outbound policies net: fec: Better handle pm_runtime_get() failing in .remove() vsock: avoid to close connected socket after the timeout drivers: provide devm_platform_ioremap_resource() serial: arc_uart: fix of_iomap leak in `arc_serial_probe` ip6_gre: Fix skb_under_panic in __gre6_xmit() ip6_gre: Make o_seqno start from 0 in native mode ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode erspan: get the proto with the md version for collect_md media: netup_unidvb: fix use-after-free at del_timer() drm/exynos: fix g2d_open/close helper function definitions net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() net: bcmgenet: Restore phy_stop() depending upon suspend/close cassini: Fix a memory leak in the error handling path of cas_init_one() igb: fix bit_shift to be in [1..8] range vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() usb-storage: fix deadlock when a scsi command timeouts more than once usb: typec: altmodes/displayport: fix pin_assignment_show ALSA: hda: Fix Oops by 9.1 surround channel names ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table statfs: enforce statfs[64] structure initialization serial: Add support for Advantech PCI-1611U card ceph: force updating the msg pointer in non-split case tpm/tpm_tis: Disable interrupts for more Lenovo devices nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() netfilter: nftables: add nft_parse_register_load() and use it netfilter: nftables: add nft_parse_register_store() and use it netfilter: nftables: statify nft_parse_register() netfilter: nf_tables: validate registers coming from userspace. netfilter: nf_tables: add nft_setelem_parse_key() netfilter: nf_tables: allow up to 64 bytes in the set element data area netfilter: nf_tables: stricter validation of element data netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag netfilter: nf_tables: do not allow RULE_ID to refer to another chain HID: wacom: Force pen out of prox if no events have been received in a while Add Acer Aspire Ethos 8951G model quirk ALSA: hda/realtek - More constifications ALSA: hda/realtek - Add Headset Mic supported for HP cPC ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 ALSA: hda/realtek - The front Mic on a HP machine doesn't work ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform ALSA: hda/realtek - ALC897 headset MIC no sound ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 lib/string_helpers: Introduce string_upper() and string_lower() helpers usb: gadget: u_ether: Convert prints to device prints usb: gadget: u_ether: Fix host MAC address case vc_screen: rewrite vcs_size to accept vc, not inode vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF s390/qdio: get rid of register asm s390/qdio: fix do_sqbs() inline assembly constraint spi: spi-fsl-spi: automatically adapt bits-per-word in cpu mode spi: fsl-spi: Re-organise transfer bits_per_word adaptation spi: fsl-cpm: Use 16 bit mode for large transfers with even size ALSA: hda/ca0132: add quirk for EVGA X299 DARK m68k: Move signal frame following exception on 68020/030 parisc: Allow to reboot machine after system halt btrfs: use nofs when cleaning up aborted transactions x86/mm: Avoid incomplete Global INVLPG flushes selftests/memfd: Fix unknown type name build failure parisc: Fix flush_dcache_page() for usage from irq context ALSA: hda/realtek - Fixed one of HP ALC671 platform Headset Mic supported ALSA: hda/realtek - Fix inverted bass GPIO pin on Acer 8951G udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). USB: core: Add routines for endpoint checks in old drivers USB: sisusbvga: Add endpoint checks media: radio-shark: Add endpoint checks net: fix skb leak in __skb_tstamp_tx() bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields ipv6: Fix out-of-bounds access in ipv6_find_tlv() power: supply: leds: Fix blink to LED on transition power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition power: supply: bq27xxx: Fix I2C IRQ race on remove power: supply: bq27xxx: Fix poll_interval handling and races on remove power: supply: sbs-charger: Fix INHIBITED bit for Status reg coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() x86/show_trace_log_lvl: Ensure stack pointer is aligned, again ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg forcedeth: Fix an error handling path in nv_probe() 3c589_cs: Fix an error handling path in tc589_probe() drivers: depend on HAS_IOMEM for devm_platform_ioremap_resource() Linux 4.19.284 Change-Id: I88843be551e748e295ea608158a2db7ab4486a65 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-08 11:16:01 +00:00
Alan Stern	26c7373213	USB: core: Add routines for endpoint checks in old drivers ... commit 13890626501ffda22b18213ddaf7930473da5792 upstream. Many of the older USB drivers in the Linux USB stack were written based simply on a vendor's device specification. They use the endpoint information in the spec and assume these endpoints will always be present, with the properties listed, in any device matching the given vendor and product IDs. While that may have been true back then, with spoofing and fuzzing it is not true any more. More and more we are finding that those old drivers need to perform at least a minimum of checking before they try to use any endpoint other than ep0. To make this checking as simple as possible, we now add a couple of utility routines to the USB core. usb_check_bulk_endpoints() and usb_check_int_endpoints() take an interface pointer together with a list of endpoint addresses (numbers and directions). They check that the interface's current alternate setting includes endpoints with those addresses and that each of these endpoints has the right type: bulk or interrupt, respectively. Although we already have usb_find_common_endpoints() and related routines meant for a similar purpose, they are not well suited for this kind of checking. Those routines find endpoints of various kinds, but only one (either the first or the last) of each kind, and they don't verify that the endpoints' addresses agree with what the caller expects. In theory the new routines could be more general: They could take a particular altsetting as their argument instead of always using the interface's current altsetting. In practice I think this won't matter too much; multiple altsettings tend to be used for transferring media (audio or visual) over isochronous endpoints, not bulk or interrupt. Drivers for such devices will generally require more sophisticated checking than these simplistic routines provide. Signed-off-by: Alan Stern <stern@rowland.harvard.edu> Link: https://lore.kernel.org/r/dd2c8e8c-2c87-44ea-ba17-c64b97e201c9@rowland.harvard.edu Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-05-30 12:42:14 +01:00
Greg Kroah-Hartman	e0659ad4b9	Revert "USB: core: Prevent nested device-reset calls" ... This reverts commit cc9a12e128 which is commit 9c6d778800b921bde3bff3cff5003d1650f942d1 upstream. It breaks the Android kernel ABI and shouldn't be needed for any normal Android devices. If this is needed in the future, it can be brought back in an ABI-stable manner. Bug: 161946584 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: If15008828936f3675e8109f1b13b6b065aed4c46	2022-09-21 11:35:38 +02:00
Greg Kroah-Hartman	f88ff9a291	Merge 4.19.258 into android-4.19-stable ... Changes in 4.19.258 driver core: Don't probe devices after bus_type.match() probe deferral efi: capsule-loader: Fix use-after-free in efi_capsule_write wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() fs: only do a memory barrier for the first set_buffer_uptodate() Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" net: dp83822: disable false carrier interrupt drm/msm/dsi: fix the inconsistent indenting drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask ieee802154/adf7242: defer destroy_workqueue call wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() Revert "xhci: turn off port power in shutdown" ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler kcm: fix strp_init() order and cleanup sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb tcp: annotate data-race around challenge_timestamp Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb" net/smc: Remove redundant refcount increase serial: fsl_lpuart: RS485 RTS polariy is inverse staging: rtl8712: fix use after free bugs vt: Clear selection before changing the font USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id binder: fix UAF of ref->proc caused by race condition drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops" clk: core: Fix runtime PM sequence in clk_core_unprepare() Input: rk805-pwrkey - fix module autoloading hwmon: (gpio-fan) Fix array out of bounds access thunderbolt: Use the actual buffer in tb_async_error() xhci: Add grace period after xHC start to prevent premature runtime suspend. USB: serial: cp210x: add Decagon UCA device id USB: serial: option: add support for OPPO R11 diag port USB: serial: option: add Quectel EM060K modem USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles usb: dwc2: fix wrong order of phy_power_on and phy_init USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) usb-storage: Add ignore-residue quirk for NXP PN7462AU s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages s390: fix nospec table alignments USB: core: Prevent nested device-reset calls usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected net: mac802154: Fix a condition in the receive path ALSA: seq: oss: Fix data-race for max_midi_devs access ALSA: seq: Fix data-race at module auto-loading drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. drm/radeon: add a force flush to delay work when radeon parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() ALSA: aloop: Fix random zeros in capture data when using jiffies timer ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() kprobes: Prohibit probes in gate area debugfs: add debugfs_lookup_and_remove() scsi: mpt3sas: Fix use-after-free warning soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs netfilter: br_netfilter: Drop dst references before setting. netfilter: nf_conntrack_irc: Fix forged IP logic sch_sfb: Don't assume the skb is still around after enqueueing to child tipc: fix shift wrapping bug in map_get() i40e: Fix kernel crash during module removal ipv6: sr: fix out-of-bounds read when setting HMAC data. RDMA/mlx5: Set local port to one when accessing counters tcp: fix early ETIMEDOUT after spurious non-SACK RTO sch_sfb: Also store skb len before calling child enqueue usb: dwc3: fix PHY disable sequence USB: serial: ch341: fix lost character on LCR updates USB: serial: ch341: fix disabled rx timer on older devices usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup x86/nospec: Fix i386 RSB stuffing MIPS: loongson32: ls1c: Fix hang during startup SUNRPC: use _bh spinlocking on ->transport_lock Linux 4.19.258 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: I5fbfbfd1f16ccbac20b17300ef0369cb65fa862e	2022-09-21 11:26:39 +02:00
Alan Stern	cc9a12e128	USB: core: Prevent nested device-reset calls ... commit 9c6d778800b921bde3bff3cff5003d1650f942d1 upstream. Automatic kernel fuzzing revealed a recursive locking violation in usb-storage: ============================================ WARNING: possible recursive locking detected 5.18.0 #3 Not tainted -------------------------------------------- kworker/1:3/1205 is trying to acquire lock: ffff888018638db8 (&us_interface_key[i]){+.+.}-{3:3}, at: usb_stor_pre_reset+0x35/0x40 drivers/usb/storage/usb.c:230 but task is already holding lock: ffff888018638db8 (&us_interface_key[i]){+.+.}-{3:3}, at: usb_stor_pre_reset+0x35/0x40 drivers/usb/storage/usb.c:230 ... stack backtrace: CPU: 1 PID: 1205 Comm: kworker/1:3 Not tainted 5.18.0 #3 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014 Workqueue: usb_hub_wq hub_event Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 print_deadlock_bug kernel/locking/lockdep.c:2988 [inline] check_deadlock kernel/locking/lockdep.c:3031 [inline] validate_chain kernel/locking/lockdep.c:3816 [inline] __lock_acquire.cold+0x152/0x3ca kernel/locking/lockdep.c:5053 lock_acquire kernel/locking/lockdep.c:5665 [inline] lock_acquire+0x1ab/0x520 kernel/locking/lockdep.c:5630 __mutex_lock_common kernel/locking/mutex.c:603 [inline] __mutex_lock+0x14f/0x1610 kernel/locking/mutex.c:747 usb_stor_pre_reset+0x35/0x40 drivers/usb/storage/usb.c:230 usb_reset_device+0x37d/0x9a0 drivers/usb/core/hub.c:6109 r871xu_dev_remove+0x21a/0x270 drivers/staging/rtl8712/usb_intf.c:622 usb_unbind_interface+0x1bd/0x890 drivers/usb/core/driver.c:458 device_remove drivers/base/dd.c:545 [inline] device_remove+0x11f/0x170 drivers/base/dd.c:537 __device_release_driver drivers/base/dd.c:1222 [inline] device_release_driver_internal+0x1a7/0x2f0 drivers/base/dd.c:1248 usb_driver_release_interface+0x102/0x180 drivers/usb/core/driver.c:627 usb_forced_unbind_intf+0x4d/0xa0 drivers/usb/core/driver.c:1118 usb_reset_device+0x39b/0x9a0 drivers/usb/core/hub.c:6114 This turned out not to be an error in usb-storage but rather a nested device reset attempt. That is, as the rtl8712 driver was being unbound from a composite device in preparation for an unrelated USB reset (that driver does not have pre_reset or post_reset callbacks), its ->remove routine called usb_reset_device() -- thus nesting one reset call within another. Performing a reset as part of disconnect processing is a questionable practice at best. However, the bug report points out that the USB core does not have any protection against nested resets. Adding a reset_in_progress flag and testing it will prevent such errors in the future. Link: https://lore.kernel.org/all/CAB7eexKUpvX-JNiLzhXBDWgfg2T9e9_0Tw4HQ6keN==voRbP0g@mail.gmail.com/ Cc: stable@vger.kernel.org Reported-and-tested-by: Rondreis <linhaoguo86@gmail.com> Signed-off-by: Alan Stern <stern@rowland.harvard.edu> Link: https://lore.kernel.org/r/YwkflDxvg0KWqyZK@rowland.harvard.edu Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2022-09-15 12:17:04 +02:00
lucaswei	3f63796df0	Revert "Reverting below patches from android-4.19-stable.125" ... This reverts commit d6bbbe0157 ("Reverting below patches from android-4.19-stable.125") Bug: 172988823 Bug: 176525217 Change-Id: I2f907c951c5368caac5fc767d2f52fe9d7528d76 Signed-off-by: lucaswei <lucaswei@google.com> Signed-off-by: Will McVicker <willmcvicker@google.com>	2021-03-17 10:55:07 +08:00
Lucas Wei	e7e6a26ceb	Merge LA.UM.9.12.R2.10.00.00.685.039 via branch 'qcom-msm-4.19-7250' into android-msm-pixel-4.19 ... Conflicts: modified: arch/arm64/configs/redbull_defconfig modified: arch/arm64/configs/vendor/kona_defconfig modified: arch/arm64/configs/vendor/lito_defconfig modified: arch/arm64/include/asm/traps.h modified: arch/arm64/kernel/smp.c modified: arch/arm64/mm/dma-mapping.c modified: arch/arm64/mm/fault.c modified: drivers/android/binder.c modified: drivers/base/power/wakeup.c modified: drivers/bus/mhi/core/mhi_main.c modified: drivers/clk/clk.c modified: drivers/clocksource/arm_arch_timer.c modified: drivers/cpuidle/lpm-levels.c modified: drivers/crypto/msm/qcedev.c modified: drivers/devfreq/governor_memlat_trace.h modified: drivers/dma-buf/dma-buf.c modified: drivers/gpu/Makefile modified: drivers/gpu/drm/drm_dp_mst_topology.c modified: drivers/gpu/drm/drm_edid.c modified: drivers/gpu/msm/Kconfig modified: drivers/gpu/msm/kgsl.c modified: drivers/gpu/msm/kgsl_sharedmem.c modified: drivers/hwtracing/coresight/coresight-etm-perf.c modified: drivers/hwtracing/coresight/coresight-tmc-etr.c modified: drivers/iommu/arm-smmu.c modified: drivers/iommu/io-pgtable-arm.c modified: drivers/iommu/io-pgtable-fast.c modified: drivers/iommu/io-pgtable.c modified: drivers/iommu/iommu.c modified: drivers/leds/leds-qpnp-flash-v2.c modified: drivers/misc/Kconfig modified: drivers/misc/qseecom.c modified: drivers/mmc/core/Kconfig modified: drivers/mmc/core/block.c modified: drivers/mmc/host/cqhci-crypto-qti.c modified: drivers/mmc/host/cqhci-crypto.c modified: drivers/mmc/host/cqhci.c modified: drivers/mmc/host/sdhci-msm.c modified: drivers/net/ethernet/qualcomm/rmnet/rmnet_handlers.c modified: drivers/net/wireless/ath/wil6210/interrupt.c modified: drivers/net/wireless/ath/wil6210/wmi.c modified: drivers/platform/msm/ipa/ipa_v3/ipa_qmi_service.c modified: drivers/power/supply/power_supply_sysfs.c modified: drivers/power/supply/qcom/Kconfig modified: drivers/power/supply/qcom/Makefile modified: drivers/power/supply/qcom/qg-core.h modified: drivers/power/supply/qcom/qpnp-qg.c modified: drivers/power/supply/qcom/qpnp-smb5.c modified: drivers/power/supply/qcom/smb5-lib.c modified: drivers/power/supply/qcom/smb5-lib.h modified: drivers/regulator/core.c modified: drivers/regulator/proxy-consumer.c modified: drivers/scsi/ufs/ufs_quirks.h modified: drivers/scsi/ufs/ufshcd.c modified: drivers/soc/qcom/icnss.c modified: drivers/soc/qcom/minidump_log.c modified: drivers/soc/qcom/watchdog_v2.c modified: drivers/spi/spi-geni-qcom.c modified: drivers/staging/android/ion/Makefile modified: drivers/staging/android/ion/ion.c modified: drivers/thermal/cpu_cooling.c modified: drivers/thermal/of-thermal.c modified: drivers/thermal/thermal_core.c modified: drivers/tty/serial/Kconfig modified: drivers/tty/serial/Makefile modified: drivers/tty/serial/msm_geni_serial.c modified: drivers/usb/core/usb.c modified: drivers/usb/dwc3/gadget.c modified: drivers/usb/dwc3/gadget.h modified: drivers/usb/gadget/composite.c modified: drivers/usb/gadget/epautoconf.c modified: drivers/usb/gadget/udc/core.c modified: drivers/usb/host/xhci.c modified: fs/crypto/crypto.c modified: fs/crypto/keysetup.c modified: fs/crypto/keysetup_v1.c modified: fs/f2fs/checkpoint.c modified: fs/f2fs/data.c modified: fs/f2fs/f2fs.h modified: fs/f2fs/node.c modified: fs/incfs/Kconfig modified: fs/incfs/data_mgmt.c modified: fs/incfs/data_mgmt.h modified: fs/incfs/vfs.c modified: fs/proc/task_mmu.c modified: include/drm/drm_connector.h modified: include/drm/drm_dp_mst_helper.h modified: include/linux/clk-provider.h modified: include/linux/dma-buf.h modified: include/linux/dma-mapping.h modified: include/linux/fs.h modified: include/linux/io-pgtable.h modified: include/linux/iommu.h modified: include/linux/mm.h modified: include/linux/mm_types.h modified: include/linux/mmc/host.h modified: include/linux/mmzone.h modified: include/linux/perf_event.h modified: include/linux/power_supply.h modified: include/linux/pwm.h modified: include/linux/regulator/driver.h modified: include/linux/rwsem.h modified: include/linux/sched.h modified: include/linux/sched/signal.h modified: include/linux/sched/sysctl.h modified: include/linux/sched/topology.h modified: include/linux/sched/user.h modified: include/linux/thermal.h modified: include/linux/usb.h modified: include/linux/usb/gadget.h modified: include/linux/usb/hcd.h modified: include/linux/vm_event_item.h modified: include/net/cfg80211.h modified: include/scsi/scsi_device.h modified: include/soc/qcom/minidump.h modified: include/soc/qcom/qmi_rmnet.h modified: include/soc/qcom/socinfo.h modified: include/trace/events/power.h modified: include/uapi/drm/drm_mode.h modified: include/uapi/linux/coresight-stm.h modified: include/uapi/linux/ip.h modified: include/uapi/linux/nl80211.h modified: include/uapi/linux/videodev2.h modified: kernel/dma/mapping.c modified: kernel/dma/removed.c modified: kernel/panic.c modified: kernel/sched/cpupri.c modified: kernel/sched/cpupri.h modified: kernel/sched/fair.c modified: kernel/sched/rt.c modified: kernel/sched/sched.h modified: kernel/sched/walt.h modified: kernel/sysctl.c modified: mm/Kconfig modified: mm/compaction.c modified: mm/oom_kill.c modified: mm/page_alloc.c modified: mm/vmalloc.c modified: mm/vmscan.c modified: net/qrtr/qrtr.c modified: net/wireless/nl80211.c modified: net/wireless/scan.c modified: sound/core/init.c modified: sound/soc/soc-core.c modified: sound/usb/card.c modified: sound/usb/pcm.c modified: sound/usb/pcm.h modified: sound/usb/usbaudio.h Bug: 172988823 Bug: 173092548 Signed-off-by: Lucas Wei <lucaswei@google.com> Change-Id: I9c86e3a0309b7078e7640788c00172c6e9b4cf67	2021-03-17 10:53:52 +08:00
Greg Kroah-Hartman	5e29528d9e	ANDROID: GKI: USB: add Android ABI padding to some structures ... To try to mitigate potential future USB api changes, add some padding to the following structures: struct usb_interface struct usb_host_bos struct usb_bus struct usb_device struct usb_driver struct urb struct usb_hcd struct hc_driver struct usb_tt struct usbnet struct driver_info (for usbnet driver) Based on a patch from Oliver Neukum <oneukum@suse.de> from the SLES kernel. Bug: 151154716 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ie9e246d9333ac70fc9cc2b0bf7cb466a8ffdb6de (cherry picked from commit ca46612871)	2020-05-30 02:28:39 +08:00
Greg Kroah-Hartman	ca46612871	ANDROID: GKI: USB: add Android ABI padding to some structures ... To try to mitigate potential future USB api changes, add some padding to the following structures: struct usb_interface struct usb_host_bos struct usb_bus struct usb_device struct usb_driver struct urb struct usb_hcd struct hc_driver struct usb_tt struct usbnet struct driver_info (for usbnet driver) Based on a patch from Oliver Neukum <oneukum@suse.de> from the SLES kernel. Bug: 151154716 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ie9e246d9333ac70fc9cc2b0bf7cb466a8ffdb6de	2020-05-01 15:18:12 +02:00
Hemant Kumar	a10905b7c0	ANDROID: GKI: usb: core: Add support to parse config summary capability descriptors ... USB 3.2 Specification updated configuration summary descriptor different from drafted version. This descriptor is needed per function. Descriptor provides list of configuration indices that include that function. Use bcdVersion to handle spec compliant descriptor and select device preferred config supporting UAC3 or lower revision. Change-Id: I7cf28eaf61ca91496be84d90ad00704fe4acb149 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> Bug: 153666697 (cherry picked from commit 1f64d4e3b5) Signed-off-by: Palmer Dabbelt <palmerdabbelt@google.com> Signed-off-by: Saravana Kannan <saravanak@google.com>	2020-04-24 23:47:06 +00:00
Hemant Kumar	27ac6136bc	ANDROID: GKI: usb: Add support to handle USB SMMU S1 address ... Update helper APIs to return physical address as well as USB SMMU stage 1 address. Physical address is used to map it to iova for remote processor. S1 address is used by xHC. Get sg table containing one or mode page sized physical address corresponding to S1 address for event ring, xfer ring and xfer buffers using dma_get_sgtable(). Accordingly update QMI response buffer for XHCI event ring, xfer ring memory info and xfer buffer. Change-Id: I6c9ea39d8a87a5bdc5a760d2a1ca85ab3024d985 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> Signed-off-by: Mayank Rana <mrana@codeaurora.org> (cherry picked from commit 3e3d0ab182) Signed-off-by: Mark Salyzyn <salyzyn@google.com> Bug: 154042109	2020-04-18 00:27:45 +00:00
Hemant Kumar	52b86b23cc	ANDROID: GKI: usb: Add helper APIs to return xhci phys addresses ... This is a merge of two cherry picks for simplicity and reduction of churn. Cherry picked from commit 787b74a487 ("usb: xhci: Add helper APIs to return xhci dma addresses") Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> Cherry picked from commit b8360b2a98 ("usb: core: Remove helper APIs returning dcba dma address") Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> dma address of secondary event ring and transfer ring are required to pass to remote entity. Remote entity uses these addresses to program xhci controller registers. Change to EXPORT_SYMBOL_GPL usage instead. (cherry picked from commit 787b74a487) (cherry picked from commit b8360b2a98) Signed-off-by: Mark Salyzyn <salyzyn@google.com> Bug: 154042109 Change-Id: I9fd1e95b00f2185b01374a46d7dff3182c3b3d78	2020-04-18 00:27:36 +00:00
Manu Gautam	639d56b96d	ANDROID: GKI: usb: hcd: Add USB atomic notifier callback for HC died error ... Add support for USB atomic notifier callbacks when host controller drivers reports death of controller on some fatal error. Current implementation doesn't help to recover from this condition. Controller platform drivers can register for this callback and take necessary steps to reset and add hcd again. Bug: 152001148 Test: Builds Signed-off-by: Manu Gautam <mgautam@codeaurora.org> (cherry picked from commit b31fc5d204) Signed-off-by: Sandeep Patil <sspatil@google.com> Change-Id: Ie9064e669424096fee8c35cddccab29faf60cc6b Signed-off-by: Will McVicker <willmcvicker@google.com>	2020-04-16 16:53:39 -07:00
Hemant Kumar	5b6a5354d0	ANDROID: GKI: USB: Fix ABI diff for struct usb_bus ... Adds new member skip_resume to struct usb_bus to resolve ABI diff. This patch also adds the capability to skip device resume during system resume. It allows xHC to remain in low power mode and not resume the bus when system wide resume happens. Instead, the controller comes out of low power mode only when usb device issues a remote wakeup or if there is host initiated bus resume. Test: build Bug: 153445212 Change-Id: I96cdcb9e3642906b4afa08d9bde07e123d9b3977 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> (cherry picked from commit 567a7ba0cc) [hridya: partial cherry-pick] Signed-off-by: Hridya Valsaraju <hridya@google.com>	2020-04-13 22:13:50 +00:00
Hemant Kumar	f7fbc946c2	ANDROID: GKI: usb: Add helper API to issue stop endpoint command ... This API is used to issue stop endpoint command on requested endpoint in order to retire all active TRBs in the transfer ring. Test: build Bug: 153446435 Change-Id: I312772367a2cd293982a66ea8b75e04a8b1f2fd0 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> (cherry picked from commit 106c645a79) [hridya: resolved minor conflicts, EXPORT_SYMBOL -> EXPORT_SYMBOL_GPL, added some null pointer checks] Signed-off-by: Hridya Valsaraju <hridya@google.com>	2020-04-09 12:47:53 -07:00
Hemant Kumar	5dfdaa15ca	ANDROID: GKI: usb: xhci: Add support for secondary interrupters ... Implement APIs to dynamically allocate and free secondary event rings based upon interrupter number. Also add exported APIs in usb core layer which allows secondary event ring management via remote processor entity. Change-Id: I5ee7d44d6cad8e35e22d3c1a027a1eec5d208585 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> Signed-off-by: Jack Pham <jackp@codeaurora.org> Signed-off-by: Mayank Rana <mrana@codeaurora.org> (cherry picked from commit 8d48fb820f) [connoro: squashed the following commits: a44f0d73af usb: xhci: Clear event handler busy flag upon event ring cleanup a1504b40da usb: xhci: Acknowledge pending events in secondary event ring a7e7dd8a34 usb: host: xhci: Fix bound check for interrupter number c4d9817a3c usb: core: Allow secondary event ring clean upon disconnect 576c1e1fe6 usb: host: xhci: Fix secondary event ring setup] Bug: 151258428 Signed-off-by: Connor O'Brien <connoro@google.com>	2020-04-06 16:26:54 -07:00
Hemant Kumar	7ff8c34945	ANDROID: GKI: usb: core: Add helper function to return controller id ... Function provides controller id used by a remote entity to identify which usb controller to program to initiate data transfer. Test: build Bug: 151977651 Change-Id: Ied396f34496104c139a7910ee86844c124e6803f Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> (cherry picked from commit f906c280ee) [hridya: EXPORT_SYMBOL -> EXPORT_SYMBOL_GPL] Signed-off-by: Hridya Valsaraju <hridya@google.com>	2020-03-26 14:45:12 -07:00
Hemant Kumar	63c8ae772f	usb: core: Add usb_set_interface_timeout API ... Currently control transfer timeout is a fixed value of 5 sec. Introduce generic api for customized timeout value which any class driver can use. Change-Id: I76730ad3d021f36ba9f97d91669a5c2f24c67942 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> Signed-off-by: Elson Roy Serrao <eserrao@codeaurora.org>	2019-09-22 15:39:09 -07:00
Ivaylo Georgiev	91e9b4e0bc	Merge android-4.19.41 (44c5f03) into msm-4.19 ... * refs/heads/tmp-44c5f03: Linux 4.19.41 mm/kmemleak.c: fix unused-function warning ASoC: wm_adsp: Check for buffer in trigger stop media: v4l2: i2c: ov7670: Fix PLL bypass register values i2c: i2c-stm32f7: Fix SDADEL minimum formula x86/mm/tlb: Revert "x86/mm: Align TLB invalidation info" x86/mm: Fix a crash with kmemleak_scan() x86/mm/KASLR: Fix the size of the direct mapping section clk: x86: Add system specific quirk to mark clocks as critical x86/mce: Improve error message when kernel cannot recover, p2 powerpc/mm/hash: Handle mmap_min_addr correctly in get_unmapped_area topdown search mac80211: Honor SW_CRYPTO_CONTROL for unicast keys in AP VLAN mode selinux: never allow relabeling on context mounts selinux: avoid silent denials in permissive mode under RCU walk gpio: mxc: add check to return defer probe if clock tree NOT ready Input: stmfts - acknowledge that setting brightness is a blocking call Input: snvs_pwrkey - initialize necessary driver data before enabling IRQ IB/core: Destroy QP if XRC QP fails IB/core: Fix potential memory leak while creating MAD agents IB/core: Unregister notifier before freeing MAD security platform/x86: intel_pmc_core: Handle CFL regmap properly platform/x86: intel_pmc_core: Fix PCH IP name ASoC: stm32: fix sai driver name initialisation ASoC: wm_adsp: Correct handling of compressed streams that restart ASoC: Intel: bytcr_rt5651: Revert "Fix DMIC map headsetmic mapping" scsi: RDMA/srpt: Fix a credit leak for aborted commands staging: iio: adt7316: fix the dac write calculation staging: iio: adt7316: fix the dac read calculation staging: iio: adt7316: allow adt751x to use internal vref for all dacs clk: qcom: Add missing freq for usb30_master_clk on 8998 Bluetooth: mediatek: fix up an error path to restore bdev->tx_state Bluetooth: btusb: request wake pin with NOAUTOEN perf/x86/amd: Update generic hardware cache events for Family 17h block: pass no-op callback to INIT_WORK(). ARM: iop: don't use using 64-bit DMA masks ARM: orion: don't use using 64-bit DMA masks fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock xsysace: Fix error handling in ace_setup sh: fix multiple function definition build errors hugetlbfs: fix memory leak for resv_map kmemleak: powerpc: skip scanning holes in the .bss section KVM: SVM: prevent DBG_DECRYPT and DBG_ENCRYPT overflow libcxgb: fix incorrect ppmax calculation net: hns: Fix WARNING when remove HNS driver with SMMU enabled net: hns: fix ICMP6 neighbor solicitation messages discard problem net: hns: Fix probabilistic memory overwrite when HNS driver initialized net: hns: Use NAPI_POLL_WEIGHT for hns driver net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw() arm64: fix wrong check of on_sdei_stack in nmi context arm/mach-at91/pm : fix possible object reference leak scsi: storvsc: Fix calculation of sub-channel count scsi: core: add new RDAC LENOVO/DE_Series device vfio/pci: use correct format characters HID: input: add mapping for Assistant key rtc: da9063: set uie_unsupported when relevant block: use blk_free_flush_queue() to free hctx->fq in blk_mq_init_hctx mfd: twl-core: Disable IRQ while suspended debugfs: fix use-after-free on symlink traversal jffs2: fix use-after-free on symlink traversal net: stmmac: don't log oversized frames net: stmmac: fix dropping of multi-descriptor RX frames net: stmmac: don't overwrite discard_frame status net: stmmac: don't stop NAPI processing when dropping a packet net: stmmac: ratelimit RX error logs net: stmmac: use correct DMA buffer size in the RX descriptor bonding: show full hw address in sysfs for slave entries net/mlx5: E-Switch, Fix esw manager vport indication for more vport commands net: hns3: fix compile error HID: quirks: Fix keyboard + touchpad on Lenovo Miix 630 riscv: fix accessing 8-byte variable from RV32 igb: Fix WARN_ONCE on runtime suspend reset: meson-audio-arb: Fix missing .owner setting of reset_controller_dev ARM: dts: rockchip: Fix gpu opp node names for rk3288 batman-adv: fix warning in function batadv_v_elp_get_throughput batman-adv: Reduce tt_global hash refcnt only for removed entry batman-adv: Reduce tt_local hash refcnt only for removed entry batman-adv: Reduce claim hash refcnt only for removed entry rtc: sh: Fix invalid alarm warning for non-enabled alarm rtc: cros-ec: Fail suspend/resume if wake IRQ can't be configured HID: debug: fix race condition with between rdesc_show() and device removal HID: logitech: check the return value of create_singlethread_workqueue arm64: dts: rockchip: fix rk3328-roc-cc gmac2io tx/rx_delay efi: Fix debugobjects warning on 'efi_rts_work' nvme-loop: init nvmet_ctrl fatal_err_work when allocate USB: core: Fix bug caused by duplicate interface PM usage counter USB: core: Fix unterminated string returned by usb_string() usb: usbip: fix isoc packet num validation in get_pipe USB: dummy-hcd: Fix failure to give back unlinked URBs USB: w1 ds2490: Fix bug caused by improper use of altsetting array USB: yurex: Fix protection fault after device removal ALSA: hda/realtek - Apply the fixup for ASUS Q325UAR ALSA: hda/realtek - Fixed Dell AIO speaker noise ALSA: hda/realtek - Add new Dell platform for headset mode i2c: Prevent runtime suspend of adapter when Host Notify is required i2c: Allow recovery of the initial IRQ by an I2C client device. i2c: Clear client->irq in i2c_device_remove i2c: Remove unnecessary call to irq_find_mapping i2c: imx: correct the method of getting private data in notifier_call i2c: synquacer: fix enumeration of slave devices mac80211: don't attempt to rename ERR_PTR() debugfs dirs mwifiex: Make resume actually do something useful again on SDIO cards iwlwifi: fix driver operation for 5350 ANDROID: cuttlefish 4.19: enable CONFIG_CRYPTO_AES_NI_INTEL=y Change-Id: I855e323ab82278f40f6d48305c7e4d21027637fd Signed-off-by: Ivaylo Georgiev <irgeorgiev@codeaurora.org>	2019-05-31 06:03:57 -07:00
Alan Stern	83c6688d67	USB: core: Fix bug caused by duplicate interface PM usage counter ... commit c2b71462d294cf517a0bc6e4fd6424d7cee5596f upstream. The syzkaller fuzzer reported a bug in the USB hub driver which turned out to be caused by a negative runtime-PM usage counter. This allowed a hub to be runtime suspended at a time when the driver did not expect it. The symptom is a WARNING issued because the hub's status URB is submitted while it is already active: URB 0000000031fb463e submitted while active WARNING: CPU: 0 PID: 2917 at drivers/usb/core/urb.c:363 The negative runtime-PM usage count was caused by an unfortunate design decision made when runtime PM was first implemented for USB. At that time, USB class drivers were allowed to unbind from their interfaces without balancing the usage counter (i.e., leaving it with a positive count). The core code would take care of setting the counter back to 0 before allowing another driver to bind to the interface. Later on when runtime PM was implemented for the entire kernel, the opposite decision was made: Drivers were required to balance their runtime-PM get and put calls. In order to maintain backward compatibility, however, the USB subsystem adapted to the new implementation by keeping an independent usage counter for each interface and using it to automatically adjust the normal usage counter back to 0 whenever a driver was unbound. This approach involves duplicating information, but what is worse, it doesn't work properly in cases where a USB class driver delays decrementing the usage counter until after the driver's disconnect() routine has returned and the counter has been adjusted back to 0. Doing so would cause the usage counter to become negative. There's even a warning about this in the USB power management documentation! As it happens, this is exactly what the hub driver does. The kick_hub_wq() routine increments the runtime-PM usage counter, and the corresponding decrement is carried out by hub_event() in the context of the hub_wq work-queue thread. This work routine may sometimes run after the driver has been unbound from its interface, and when it does it causes the usage counter to go negative. It is not possible for hub_disconnect() to wait for a pending hub_event() call to finish, because hub_disconnect() is called with the device lock held and hub_event() acquires that lock. The only feasible fix is to reverse the original design decision: remove the duplicate interface-specific usage counter and require USB drivers to balance their runtime PM gets and puts. As far as I know, all existing drivers currently do this. Signed-off-by: Alan Stern <stern@rowland.harvard.edu> Reported-and-tested-by: syzbot+7634edaea4d0b341c625@syzkaller.appspotmail.com CC: <stable@vger.kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2019-05-08 07:21:44 +02:00
Hemant Kumar	567a7ba0cc	USB: Allow skipping device resume during system resume ... This allows xHC to remain in low power mode and not resume the bus when system wide resume happens. Controller comes out of low power mode only when usb device issues a remote wakeup or if there is a host initiated bus resume. Change-Id: I96cdcb9e3642906b4afa08d9bde07e123d9b3977 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org>	2019-04-01 11:34:44 -07:00
Rishabh Bhatnagar	4ac13bd161	Merge remote-tracking branch 'origin_4.19/tmp-0567d2f' into msm-4.19 ... * origin_4.19/tmp-0567d2f: Linux 4.19.9 HID: quirks: fix RetroUSB.com devices mac80211: ignore NullFunc frames in the duplicate detection mac80211: fix reordering of buffered broadcast packets mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext mac80211: Clear beacon_int in ieee80211_do_stop mac80211: fix GFP_KERNEL under tasklet context mac80211_hwsim: Timer should be initialized before device registered cfg80211: Fix busy loop regression in ieee80211_ie_split_ric() libnvdimm, pfn: Pad pfn namespaces relative to other regions kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var() gnss: sirf: fix activation retry handling tty: do not set TTY_IO_ERROR flag if console port tty: serial: 8250_mtk: always resume the device in probe. Drivers: hv: vmbus: Offload the handling of channels to two workqueues x86/efi: Allocate e820 buffer before calling efi_exit_boot_service kprobes/x86: Fix instruction patching corruption when copying more than one RIP-relative instruction drm/i915: Downgrade Gen9 Plane WM latency error drm/amdgpu/gmc8: always load MC firmware in the driver drm/amdgpu/gmc8: update MC firmware for polaris drm/msm: Move fence put to where failure occurs drm/lease: Send a distinct uevent drm/amdgpu: update mc firmware image for polaris12 variants crypto: do not free algorithm before using Revert commit ef9209b642 "staging: rtl8723bs: Fix indenting errors and an off-by-one mistake in core/rtw_mlme_ext.c" staging: rtl8712: Fix possible buffer overrun cifs: Fix separator when building path from dentry Revert "x86/e820: put !E820_TYPE_RAM regions into memblock.reserved" arm64: dts: rockchip: remove vdd_log from rock960 to fix a stability issues xhci: Prevent U1/U2 link pm states if exit latency is too long xhci: workaround CSS timeout on AMD SNPS 3.0 xHC ARM: 8806/1: kprobes: Fix false positive with FORTIFY_SOURCE dmaengine: cppi41: delete channel from pending list when stop channel dmaengine: imx-sdma: use GFP_NOWAIT for dma descriptor allocations dmaengine: imx-sdma: implement channel termination via worker Revert "dmaengine: imx-sdma: alloclate bd memory from dma pool" Revert "dmaengine: imx-sdma: Use GFP_NOWAIT for dma allocations" dmaengine: dw: Fix FIFO size for Intel Merrifield SUNRPC: Fix leak of krb5p encode pages arm64: hibernate: Avoid sending cross-calling with interrupts disabled vhost/vsock: fix use-after-free in network stack callers virtio/s390: fix race in ccw_io_helper() virtio/s390: avoid race on vcdev->config parisc: Enable -ffunction-sections for modules on 32-bit kernel Revert "mfd: cros_ec: Use devm_kzalloc for private data" media: dvb-pll: don't re-validate tuner frequencies media: dvb-pll: fix tuner frequency ranges media: vicodec: fix memchr() kernel oops media: gspca: fix frame overflow error ALSA: hda/realtek: Fix mic issue on Acer AIO Veriton Z4860G/Z6860G ALSA: hda/realtek: Fix mic issue on Acer AIO Veriton Z4660G ALSA: hda/realtek - Add support for Acer Aspire C24-860 headset mic ALSA: hda/realtek: ALC286 mic and headset-mode fixups for Acer Aspire U27-880 ALSA: hda/realtek - Fix speaker output regression on Thinkpad T570 ALSA: pcm: Fix interval evaluation with openmin/max ALSA: pcm: Call snd_pcm_unlink() conditionally at closing ALSA: pcm: Fix starvation on down_write_nonblock() ALSA: hda: Add support for AMD Stoney Ridge ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c ALSA: usb-audio: Add SMSL D1 to quirks for native DSD support USB: serial: console: fix reported terminal settings USB: check usb_get_extra_descriptor for proper size usb: appledisplay: Add 27" Apple Cinema Display usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device net: amd: add missing of_node_put() team: no need to do team_notify_peers or team_mcast_rejoin when disabling port ibmvnic: Update driver queues after change in ring size support ibmvnic: Fix RX queue buffer cleanup flexfiles: use per-mirror specified stateid for IO NFSv4.2 copy do not allocate memory under the lock iommu/vt-d: Use memunmap to free memremap net: faraday: ftmac100: remove netif_running(netdev) check before disabling interrupts riscv: fix warning in arch/riscv/include/asm/module.h net/ibmnvic: Fix deadlock problem in reset qed: Fix QM getters to always return a valid pq qed: Fix bitmap_weight() check NFSv4: Fix a NFSv4 state manager deadlock net: ena: fix crash during failed resume from hibernation mtd: spi-nor: Fix Cadence QSPI page fault kernel panic HID: multitouch: Add pointstick support for Cirque Touchpad Revert "HID: uhid: use strlcpy() instead of strncpy()" cpufreq: ti-cpufreq: Only register platform_device when supported mtd: rawnand: qcom: Namespace prefix some commands tc-testing: tdc.py: Guard against lack of returncode in executed command tc-testing: tdc.py: ignore errors when decoding stdout/stderr gpio: mockup: fix indicated direction gpio: pxa: fix legacy non pinctrl aware builds again drivers/net/ethernet/qlogic/qed/qed_rdma.h: fix typo net/mlx4: Fix UBSAN warning of signed integer overflow net/mlx4_core: Fix uninitialized variable compilation warning net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command drm/amd/display: Support amdgpu "max bpc" connector property (v2) drm/amdgpu: Add amdgpu "max bpc" connector property (v2) bnxt_en: Fix filling time in bnxt_fill_coredump_record() nvme-fc: resolve io failures during connect s390/ism: clear dmbe_mask bit before SMC IRQ handling Revert "usb: gadget: ffs: Fix BUG when userland exits with submitted AIO transfers" usb: dwc2: pci: Fix an error code in probe qed: Fix reading wrong value in loop condition qed: Fix rdma_info structure allocation qed: Fix overriding offload_tc by protocols without APP TLV qed: Fix PTT leak in qed_drain() bnx2x: Assign unique DMAE channel number for FW DMAE transactions. amd/iommu: Fix Guest Virtual APIC Log Tail Address Register batman-adv: Expand merged fragment buffer for full packet batman-adv: Use explicit tvlv padding for ELP packets HID: input: Ignore battery reported by Symbol DS4308 test_firmware: fix error return getting clobbered can: rcar_can: Fix erroneous registration can: ucan: remove set but not used variable 'udev' scsi: ufs: Fix hynix ufs bug with quirk on hi36xx SoC iommu/ipmmu-vmsa: Fix crash on early domain free mt76: fix building without CONFIG_LEDS_CLASS brcmutil: really fix decoding channel info for 160 MHz bandwidth iommu/vt-d: Fix NULL pointer dereference in prq_event_thread() media: ipu3-cio2: Unregister device nodes first, then release resources media: omap3isp: Unregister media device as first media: cec: check for non-OK/NACK conditions while claiming a LA media: vicodec: lower minimum height to 360 ANDROID: cuttlefish_defconfig: Enable VIRT_WIFI FROMGIT: mac80211-next: rtnetlink wifi simulation device Linux 4.19.8 blk-mq: punt failed direct issue to dispatch list tipc: use destination length for copy string arc: [devboards] Add support of NFSv3 ACL ARC: change defconfig defaults to ARCv2 btrfs: tree-checker: Don't check max block group size as current max chunk size limit is unreliable Input: elan_i2c - add support for ELAN0621 touchpad Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR Input: elan_i2c - add ELAN0620 to the ACPI table Input: cros_ec_keyb - fix button/switch capability reports Input: matrix_keypad - check for errors from of_get_named_gpio() Input: synaptics - add PNP ID for ThinkPad P50 to SMBus Input: xpad - quirk all PDP Xbox One gamepads scsi: lpfc: fix block guard enablement on SLI3 adapters i40e: Fix deletion of MAC filters selinux: add support for RTM_NEWCHAIN, RTM_DELCHAIN, and RTM_GETCHAIN svm: Add mutex_lock to protect apic_access_page_done on AMD systems kgdboc: Fix warning with module build kgdboc: Fix restrict error userfaultfd: shmem: UFFDIO_COPY: set the page dirty if VM_WRITE is not set userfaultfd: shmem: add i_size checks userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails drm/meson: Fix OOB memory accesses in meson_viu_set_osd_lut() drm/meson: Enable fast_io in meson_dw_hdmi_regmap_config drm/meson: Fixes for drm_crtc_vblank_on/off support drm: set is_master to 0 upon drm_new_set_master() failure drm/amd/dm: Don't forget to attach MST encoders drm/ast: Fix incorrect free on ioregs tracing/fgraph: Fix set_graph_function from showing interrupts IB/mlx5: Avoid load failure due to unknown link width mips: fix mips_get_syscall_arg o32 check MIPS: ralink: Fix mt7620 nd_sd pinmux tracepoint: Use __idx instead of idx in DO_TRACE macro to make it unique sched, trace: Fix prev_state output in sched_switch tracepoint arm64: ftrace: Fix to enable syscall events on arm64 mtd: nand: Fix memory allocation in nanddev_bbt_init() uprobes: Fix handle_swbp() vs. unregister() + register() race once more iser: set sector for ambiguous mr status errors unifdef: use memcpy instead of strncpy test_hexdump: use memcpy instead of strncpy blk-mq: fix corruption with direct issue ANDROID: cuttlefish_defconfig: Enable CONFIG_ARM64_LSE_ATOMICS ANDROID: Move from clang r328903 to r346389b. Linux 4.19.7 misc: mic/scif: fix copy-paste error in scif_create_remote_lookup Drivers: hv: vmbus: check the creation_status in vmbus_establish_gpadl() mm: use swp_offset as key in shmem_replace_page() mm: cleancache: fix corruption on missed inode invalidation lib/test_kmod.c: fix rmmod double free iio:st_magn: Fix enable device after trigger iio/hid-sensors: Fix IIO_CHAN_INFO_RAW returning wrong values for signed numbers Revert "usb: dwc3: gadget: skip Set/Clear Halt when invalid" usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series USB: usb-storage: Add new IDs to ums-realtek staging: rtl8723bs: Add missing return for cfg80211_rtw_get_station staging: rtl8723bs: Fix incorrect sense of ether_addr_equal staging: mt7621-pinctrl: fix uninitialized variable ngroups staging: mt7621-dma: fix potentially dereferencing uninitialized 'tx_desc' staging: vchiq_arm: fix compat VCHIQ_IOC_AWAIT_COMPLETION staging: most: use format specifier "%s" in snprintf dmaengine: at_hdmac: fix module unloading dmaengine: at_hdmac: fix memory leak in at_dma_xlate() ARM: dts: rockchip: Remove @0 from the veyron memory node ASoC: pcm186x: Fix device reset-registers trigger value ASoC: intel: cht_bsw_max98090_ti: Add quirk for boards using pmc_plt_clk_0 ext2: fix potential use after free ext2: initialize opts.s_mount_opt as zero before using it binder: fix race that allows malicious free of live buffer function_graph: Reverse the order of pushing the ret_stack and the callback function_graph: Move return callback before update of curr_ret_stack function_graph: Have profiler use curr_ret_stack and not depth function_graph: Use new curr_ret_depth to manage depth instead of curr_ret_stack function_graph: Make ftrace_push_return_trace() static MIPS: function_graph: Simplify with function_graph_enter() arm64: function_graph: Simplify with function_graph_enter() s390/function_graph: Simplify with function_graph_enter() riscv/function_graph: Simplify with function_graph_enter() parisc: function_graph: Simplify with function_graph_enter() sparc/function_graph: Simplify with function_graph_enter() sh/function_graph: Simplify with function_graph_enter() powerpc/function_graph: Simplify with function_graph_enter() nds32: function_graph: Simplify with function_graph_enter() x86/function_graph: Simplify with function_graph_enter() microblaze: function_graph: Simplify with function_graph_enter() ARM: function_graph: Simplify with function_graph_enter() function_graph: Create function_graph_enter() to consolidate architecture code ALSA: hda/realtek - Add auto-mute quirk for HP Spectre x360 laptop ALSA: hda/realtek - fix the pop noise on headphone for lenovo laptops ALSA: hda/realtek - fix headset mic detection for MSI MS-B171 ALSA: hda/realtek - Support ALC300 ALSA: hda: Add ASRock N68C-S UCC the power_save blacklist ALSA: sparc: Fix invalid snd_free_pages() at error path ALSA: control: Fix race between adding and removing a user element ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write ALSA: wss: Fix invalid snd_free_pages() at error path fs: fix lost error code in dio_complete perf/x86/intel: Disallow precise_ip on BTS events perf/x86/intel: Add generic branch tracing check to intel_pmu_has_bts() perf/x86/intel: Move branch tracing setup to the Intel-specific source file x86/fpu: Disable bottom halves while loading FPU registers x86/MCE/AMD: Fix the thresholding machinery initialization order arm64: dts: rockchip: Fix PCIe reset polarity for rk3399-puma-haikou. PCI: Fix incorrect value returned from pcie_get_speed_cap() PCI: dwc: Fix MSI-X EP framework address calculation bug PCI: layerscape: Fix wrong invocation of outbound window disable accessor btrfs: relocation: set trans to be NULL after ending transaction Btrfs: fix race between enabling quotas and subvolume creation Btrfs: fix rare chances for data loss when doing a fast fsync Btrfs: ensure path name is null terminated at btrfs_control_ioctl btrfs: Always try all copies when reading extent buffers udf: Allow mounting volumes with incorrect identification strings xtensa: fix coprocessor part of ptrace_{get,set}xregs xtensa: fix coprocessor context offset definitions xtensa: enable coprocessors that are being flushed KVM: VMX: re-add ple_gap module parameter KVM: X86: Fix scan ioapic use-before-initialization KVM: LAPIC: Fix pv ipis use-before-initialization KVM: x86: Fix kernel info-leak in KVM_HC_CLOCK_PAIRING hypercall KVM: nVMX/nSVM: Fix bug which sets vcpu->arch.tsc_offset to L1 tsc_offset kvm: svm: Ensure an IBPB on all affected CPUs when freeing a vmcb kvm: mmu: Fix race in emulated page table writes userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas x86/speculation: Provide IBPB always command line options x86/speculation: Add seccomp Spectre v2 user space protection mode x86/speculation: Enable prctl mode for spectre_v2_user x86/speculation: Add prctl() control for indirect branch speculation x86/speculation: Prepare arch_smt_update() for PRCTL mode x86/speculation: Prevent stale SPEC_CTRL msr content x86/speculation: Split out TIF update ptrace: Remove unused ptrace_may_access_sched() and MODE_IBRS x86/speculation: Prepare for conditional IBPB in switch_mm() x86/speculation: Avoid __switch_to_xtra() calls x86/process: Consolidate and simplify switch_to_xtra() code x86/speculation: Prepare for per task indirect branch speculation control x86/speculation: Add command line control for indirect branch speculation x86/speculation: Unify conditional spectre v2 print functions x86/speculataion: Mark command line parser data __initdata x86/speculation: Mark string arrays const correctly x86/speculation: Reorder the spec_v2 code x86/l1tf: Show actual SMT state x86/speculation: Rework SMT state change sched/smt: Expose sched_smt_present static key x86/Kconfig: Select SCHED_SMT if SMP enabled sched/smt: Make sched_smt_present track topology x86/speculation: Reorganize speculation control MSRs update x86/speculation: Rename SSBD update functions x86/speculation: Disable STIBP when enhanced IBRS is in use x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() x86/speculation: Remove unnecessary ret variable in cpu_show_common() x86/speculation: Clean up spectre_v2_parse_cmdline() x86/speculation: Update the TIF_SSBD comment x86/retpoline: Remove minimal retpoline support x86/retpoline: Make CONFIG_RETPOLINE depend on compiler support x86/speculation: Add RETPOLINE_AMD support to the inline asm CALL_NOSPEC variant x86/speculation: Propagate information about RSB filling mitigation to sysfs x86/speculation: Apply IBPB more strictly to avoid cross-process data leak x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation tipc: fix lockdep warning during node delete net: phy: add workaround for issue where PHY driver doesn't bind to the device tcp: defer SACK compression after DupThresh net/dim: Update DIM start sample after each DIM iteration virtio-net: fail XDP set if guest csum is negotiated virtio-net: disable guest csum during XDP set net: skb_scrub_packet(): Scrub offload_fwd_mark net: thunderx: set xdp_prog to NULL if bpf_prog_add fails usbnet: ipheth: fix potential recvmsg bug and recvmsg bug 2 s390/qeth: fix length check in SNMP processing rapidio/rionet: do not free skb before reading its length packet: copy user buffers before orphan or clone net: thunderx: set tso_hdrs pointer to NULL in nicvf_free_snd_queue net: gemini: Fix copy/paste error net: don't keep lonely packets forever in the gro hash lan743x: fix return value for lan743x_tx_napi_poll lan743x: Enable driver to work with LAN7431 mm/khugepaged: collapse_shmem() do not crash on Compound mm/khugepaged: collapse_shmem() without freezing new_page mm/khugepaged: minor reorderings in collapse_shmem() mm/khugepaged: collapse_shmem() remember to clear holes mm/khugepaged: fix crashes due to misaccounted holes mm/khugepaged: collapse_shmem() stop if punched or truncated mm/huge_memory: fix lockdep complaint on 32-bit i_size_read() mm/huge_memory: splitting set mapping+index before unfreeze mm/huge_memory: rename freeze_page() to unmap_page() ANDROID: cuttlefish_defconfig: Enable CONFIG_CRYPTO_ADIANTUM FROMGIT: fscrypt: add Adiantum support BACKPORT, FROMGIT: crypto: adiantum - add Adiantum support FROMGIT: crypto: arm/nhpoly1305 - add NEON-accelerated NHPoly1305 FROMGIT: crypto: nhpoly1305 - add NHPoly1305 support FROMGIT: crypto: poly1305 - add Poly1305 core API FROMGIT: crypto: poly1305 - use structures for key and accumulator FROMGIT: crypto: arm/chacha - add XChaCha12 support FROMGIT: crypto: arm/chacha20 - refactor to allow varying number of rounds FROMGIT: crypto: arm/chacha20 - add XChaCha20 support FROMGIT: crypto: arm/chacha20 - limit the preemption-disabled section FROMGIT: crypto: chacha - add XChaCha12 support BACKPORT, FROMGIT: crypto: chacha20-generic - refactor to allow varying number of rounds FROMGIT: crypto: chacha20-generic - add XChaCha20 support FROMGIT: crypto: chacha20-generic - don't unnecessarily use atomic walk FROMGIT: crypto: chacha20-generic - add HChaCha20 library function FROMGIT: crypto: arm/aes - add some hardening against cache-timing attacks UPSTREAM: crypto: arm/chacha20 - faster 8-bit rotations and other optimizations UPSTREAM: crypto: chacha20 - Fix chacha20_block() keystream alignment (again) ANDROID: cuttlefish_defconfig: Enable CONFIG_SDCARD_FS ANDROID: sdcardfs: Add sdcardfs filesystem ANDROID: sdcardfs: Define magic value ANDROID: fs: Restore vfs_path_lookup() export ANDROID: vfs: add d_canonical_path for stacked filesystem support ANDROID: vfs: Add permission2 for filesystems with per mount permissions ANDROID: vfs: Add setattr2 for filesystems with per mount permissions ANDROID: vfs: Allow filesystems to access their private mount data ANDROID: mnt: Add filesystem private data to mount points ANDROID: sdcardfs: Enable modular sdcardfs Revert "proc: Convert proc_mount to use mount_ns." ANDROID: binder: add support for RT prio inheritance. UPSTREAM: binder: Add BINDER_GET_NODE_INFO_FOR_REF ioctl. ANDROID: net: ipv6: autoconf routes into per-device tables ANDROID: cuttlefish_defconfig: Enable SECURITY_PERF_EVENTS_RESTRICT ANDROID: security,perf: Allow further restriction of perf_event_open ANDROID: netfilter: xt_IDLETIMER: Add new netlink msg type ANDROID: cuttlefish_defconfig: Enable CONFIG_NETFILTER_XT_MATCH_QUOTA2 ANDROID: netfilter: xt_quota2: adding the original quota2 from xtables-addons ANDROID: power: wakeup_reason: add an API to log wakeup reasons ANDROID: trace: sched: add sched blocked tracepoint which dumps out context of sleep. ANDROID: add extra free kbytes tunable CHROMIUM: cgroups: relax permissions on moving tasks between cgroups ANDROID: cpu: send KOBJ_ONLINE event when enabling cpus ANDROID: fs: FS tracepoints to track IO. ANDROID: cuttlefish_defconfig: Enable CONFIG_DM_VERITY_AVB ANDROID: AVB error handler to invalidate vbmeta partition. ANDROID: cuttlefish_defconfig: Enable CONFIG_CPUSETS ANDROID: cpuset: Make cpusets restore on hotplug ANDROID: taskstats: track fsync syscalls ANDROID: uid_cputime: add per-uid IO usage accounting ANDROID: cuttlefish_defconfig: Enable CONFIG_UID_SYS_STATS ANDROID: uid_cputime: Adds accounting for the cputimes per uid. ANDROID: cuttlefish_defconfig: Enable CONFIG_MMC ANDROID: mmc: core: Add "ignore mmc pm notify" functionality ANDROID: cuttlefish_defconfig: Enable CONFIG_USB_CONFIGFS_F_AUDIO_SRC ANDROID: usb: gadget: f_audio_source: New gadget driver for audio output ANDROID: usb: gadget: f_midi: set fi->f to NULL when free f_midi function ANDROID: usb: gadget: f_midi: create F_midi device ANDROID: cuttlefish_defconfig: Enable CONFIG_USB_CONFIGFS_F_ACC ANDROID: usb: gadget: f_accessory: Add Android Accessory function ANDROID: usb: gadget: configfs: Add device attribute to determine gadget state ANDROID: usb: gadget: configfs: Add "state" attribute to android_device ANDROID: cuttlefish_defconfig: Enable CONFIG_USB_CONFIGFS_UEVENT ANDROID: usb: gadget: configfs: Add function devices to the parent ANDROID: usb: gadget: configfs: Add Uevent to notify userspace ANDROID: usb: gadget: configfs: Add usb_function ptr to fi struct ANDROID: mm: add a field to store names for private anonymous memory ANDROID: fs: epoll: use freezable blocking call ANDROID: cuttlefish_defconfig: Enable CONFIG_CMDLINE_EXTEND ANDROID: of: Support CONFIG_CMDLINE_EXTEND config option ANDROID: arm64: copy CONFIG_CMDLINE_EXTEND from ARM UPSTREAM: tcp: start receiver buffer autotuning sooner UPSTREAM: tcp: up initial rmem to 128KB and SYN rwin to around 64KB ANDROID: net: xfrm: make PF_KEY SHA256 use RFC-compliant truncation. ANDROID: cuttlefish_defconfig: Enable EAS related defines BACKPORT: sched/fair: Fix cpu_util_wake() for 'execl' type workloads ANDROID: defconfig / build config for cuttlefish ANDROID: Kbuild, LLVMLinux: allow overriding clang target triple ANDROID: x86: Remove a useless warning message Revert "x86: Force asm-goto" Revert "x86: Allow generating user-space headers without a compiler" Linux 4.19.6 media: ov5640: fix auto controls values when switching to manual mode media: ov5640: fix wrong binning value in exposure calculation media: ov5640: fix auto gain & exposure when changing mode media: ov5640: fix exposure regression media: ov5640: Fix timings setup code media: ov5640: Re-work MIPI startup sequence rcu: Make need_resched() respond to urgent RCU-QS needs gfs2: Fix iomap buffer head reference counting bug tty: wipe buffer if not echoing data tty: wipe buffer. include/linux/pfn_t.h: force '~' to be parsed as an unary operator dax: Avoid losing wakeup in dax_lock_mapping_entry mm, page_alloc: check for max order in hot path tmpfs: make lseek(SEEK_DATA/SEK_HOLE) return ENXIO with a negative offset mm, memory_hotplug: check zone_movable in has_unmovable_pages z3fold: fix possible reclaim races efi/arm: Revert deferred unmap of early memmap mapping powerpc/numa: Suppress "VPHN is not supported" messages NFSv4: Fix an Oops during delegation callbacks kdb: Use strscpy with destination buffer size drm/amdgpu: fix bug with IH ring setup RISC-V: Silence some module warnings on 32-bit riscv: add missing vdso_install target SUNRPC: Fix a bogus get/put in generic_key_to_expire() block: copy ioprio in __bio_clone_fast() and bounce perf/x86/intel/uncore: Add more IMC PCI IDs for KabyLake and CoffeeLake CPUs sched/fair: Fix cpu_util_wake() for 'execl' type workloads powerpc/io: Fix the IO workarounds code to work with Radix floppy: fix race condition in __floppy_read_block_0() crypto: simd - correctly take reqsize of wrapped skcipher into account rtc: pcf2127: fix a kmemleak caused in pcf2127_i2c_gather_write rtc: cmos: Do not export alarm rtc_ops when we do not support alarms cpufreq: imx6q: add return value check for voltage scale KVM: PPC: Move and undef TRACE_INCLUDE_PATH/FILE scsi: hisi_sas: Remove set but not used variable 'dq_list' scsi: lpfc: fix remoteport access tools/testing/nvdimm: Fix the array size for dimm devices. pinctrl: meson: fix meson8b ao pull register bits pinctrl: meson: fix meson8 ao pull register bits pinctrl: meson: fix gxl ao pull register bits pinctrl: meson: fix gxbb ao pull register bits pinctrl: meson: fix pinconf bias disable fanotify: fix handling of events on child sub-directory fsnotify: generalize handling of extra event flags IB/hfi1: Eliminate races in the SDMA send error path ACPICA: AML interpreter: add region addresses in global list during initialization can: flexcan: remove not needed struct flexcan_priv::tx_mb and struct flexcan_priv::tx_mb_idx can: flexcan: Always use last mailbox for TX can: hi311x: Use level-triggered interrupt can: raw: check for CAN FD capable netdev in raw_sendmsg() can: flexcan: handle tx-complete CAN frames via rx-offload infrastructure can: flexcan: use can_rx_offload_queue_sorted() for flexcan_irq_bus_*() can: rx-offload: rename can_rx_offload_irq_queue_err_skb() to can_rx_offload_queue_tail() can: rx-offload: introduce can_rx_offload_get_echo_skb() and can_rx_offload_queue_sorted() functions can: dev: __can_get_echo_skb(): print error message, if trying to echo non existing skb can: dev: __can_get_echo_skb(): Don't crash the kernel if can_priv::echo_skb is accessed out of bounds can: dev: __can_get_echo_skb(): replace struct can_frame by canfd_frame to access frame length can: dev: can_get_echo_skb(): factor out non sending code to __can_get_echo_skb() can: flexcan: Unlock the MB unconditionally drm/ast: Remove existing framebuffers before loading driver drm/ast: fixed cursor may disappear sometimes drm/ast: change resolution may cause screen blurred drm/i915: Disable LP3 watermarks on all SNB machines drm/amdgpu: Fix oops when pp_funcs->switch_power_profile is unset drm/vc4: Set ->legacy_cursor_update to false when doing non-async updates drm/amdgpu: Add missing firmware entry for HAINAN drm/fb-helper: Blacklist writeback when adding connectors to fbdev tcp: do not release socket ownership in tcp_close() mm/memory.c: recheck page table entry with page table lock held mm: don't warn about large allocations for slab llc: do not use sk_eat_skb() gfs2: Don't leave s_fs_info pointing to freed memory in init_sbd sctp: clear the transport of some out_chunk_list chunks in sctp_assoc_rm_peer bfs: add sanity check at bfs_fill_super() Input: synaptics - avoid using uninitialized variable when probing selinux: Add __GFP_NOWARN to allocation at str_read() v9fs_dir_readdir: fix double-free on p9stat_read error tools/power/cpupower: fix compilation with STATIC=true opp: ti-opp-supply: Correct the supply in _get_optimal_vdd_voltage call opp: ti-opp-supply: Dynamically update u_volt_min brcmfmac: fix reporting support for 160 MHz channels iwlwifi: mvm: don't use SAR Geo if basic SAR is not used iwlwifi: mvm: fix regulatory domain update when the firmware starts iwlwifi: mvm: support sta_statistics() even on older firmware iwlwifi: fix wrong WGDS_WIFI_DATA_SIZE gpio: don't free unallocated ida on gpiochip_add_data_with_key() error path mmc: sdhci-pci: Workaround GLK firmware failing to restore the tuning value mmc: sdhci-pci: Try "cd" for card-detect lookup before using NULL Documentation/security-bugs: Postpone fix publication in exceptional cases Documentation/security-bugs: Clarify treatment of embargoed information MAINTAINERS: Add Sasha as a stable branch maintainer ALSA: oss: Use kvzalloc() for local buffer allocations usb: xhci: Prevent bus suspend if a port connect change or polling state is detected xhci: Add quirk to workaround the errata seen on Cavium Thunder-X2 Soc usb: xhci: fix timeout for transition from RExit to U0 usb: xhci: fix uninitialized completion when USB3 port got wrong status xhci: Add check for invalid byte size error when UAS devices are connected. xhci: handle port status events for removed USB3 hcd xhci: Fix leaking USB3 shared_hcd at xhci removal usb: dwc3: Fix NULL pointer exception in dwc3_pci_remove() usb: dwc3: core: Clean up ULPI device usb: dwc3: gadget: Properly check last unaligned/zero chain TRB usb: dwc3: gadget: fix ISOC TRB type on unaligned transfers usb: core: Fix hub port connection events lost efi/libstub: arm: support building with clang HID: steam: remove input device when a hid client is running. Linux 4.19.5 mt76x0: run vco calibration for each channel configuration libceph: fall back to sendmsg for slab pages HID: Add quirk for Microsoft PIXART OEM mouse HID: Add quirk for Primax PIXART OEM mice HID: uhid: forbid UHID_CREATE under KERNEL_DS or elevated privileges ACPI / platform: Add SMB0001 HID to forbidden_id_list drivers/misc/sgi-gru: fix Spectre v1 vulnerability mtd: rawnand: atmel: fix OF child-node lookup gnss: sirf: fix synchronous write timeout gnss: serial: fix synchronous write timeout USB: misc: appledisplay: add 20" Apple Cinema Display misc: atmel-ssc: Fix section annotation on atmel_ssc_get_driver_data usb: quirks: Add delay-init quirk for Corsair K70 LUX RGB USB: Wait for extra delay time after USB_PORT_FEAT_RESET for quirky hub USB: quirks: Add no-lpm quirk for Raydium touchscreens usb: cdc-acm: add entry for Hiro (Conexant) modem can: kvaser_usb: Fix potential uninitialized variable use can: kvaser_usb: Fix accessing freed memory in kvaser_usb_start_xmit() ALSA: hda/ca0132 - Call pci_iounmap() instead of iounmap() ALSA: hda/realtek - Add quirk entry for HP Pavilion 15 uio: Fix an Oops on load RISC-V: Fix raw_copy_{to,from}_user() MIPS: OCTEON: cavium_octeon_defconfig: re-enable OCTEON USB driver media: v4l: event: Add subscription to list before calling "add" operation x86/ldt: Remove unused variable in map_ldt_struct() x86/ldt: Unmap PTEs for the slot before freeing LDT pages x86/mm: Move LDT remap out of KASLR region on 5-level paging SUNRPC: drop pointless static qualifier in xdr_get_next_encode_buffer() Revert "scripts/setlocalversion: git: Make -dirty check more robust" kbuild: deb-pkg: fix too low build version number net: aquantia: invalid checksumm offload implementation net: aquantia: fixed enable unicast on 32 macvlan net: aquantia: fix potential IOMMU fault after driver unbind net: stmmac: Fix RX packet size > 8191 qed: Fix potential memory corruption qed: Fix SPQ entries not returned to pool in error flows qed: Fix blocking/unlimited SPQ entries leak qed: Fix memory/entry leak in qed_init_sp_request() i40e: restore NETIF_F_GSO_IPXIP[46] to netdev features ice: Change req_speeds to be u16 ice: Fix the bytecount sent to netdev_tx_sent_queue ice: Fix dead device link issue with flow control perf tools: Do not zero sample_id_all for group members perf tools: Fix undefined symbol scnprintf in libperf-jvmti.so sched/core: Take the hotplug lock in sched_init_smp() i2c: qcom-geni: Fix runtime PM mismatch with child devices i2c: omap: Enable for ARCH_K3 nvme: make sure ns head inherits underlying device limits of/device: Really only set bus DMA mask when appropriate ceph: quota: fix null pointer dereference in quota check s390/perf: Change CPUM_CF return code in event init function drm/amd/amdgpu/dm: Fix dm_dp_create_fake_mst_encoder() drm/amd/display: Drop reusing drm connector for MST block: Clear kernel memory before copying to user drm/amd/display: Stop leaking planes lib/raid6: Fix arm64 test build mtd: nand: Fix nanddev_pos_next_page() kernel-doc header clk: fixed-factor: fix of_node_get-put imbalance xen/grant-table: Fix incorrect gnttab_dma_free_pages() pr_debug message arm64: dts: renesas: condor: switch from EtherAVB to GEther arm64: dts: renesas: r8a7795: add missing dma-names on hscif2 Revert "drm/exynos/decon5433: implement frame counter" ARM: dts: fsl: Fix improperly quoted stdout-path values ARM: dts: imx6sll: fix typo for fsl,imx6sll-i2c node hwmon: (ibmpowernv) Remove bogus __init annotations net: hns3: Fix for out-of-bounds access when setting pfc back pressure s390/qeth: unregister netdevice only when registered s390/qeth: fix HiperSockets sniffer netfilter: nft_compat: ebtables 'nat' table is normal chain type netfilter: ipset: Fix calling ip_set() macro at dumping netfilter: xt_IDLETIMER: add sysfs filename checking routine netfilter: ipset: Correct rcu_dereference() call in ip_set_put_comment() bpf: fix bpf_prog_get_info_by_fd to return 0 func_lens for unpriv s390/mm: Fix ERROR: "__node_distance" undefined! s390/mm: fix mis-accounting of pgtable_bytes netfilter: ipset: fix ip_set_list allocation failure netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,net netfilter: ipset: list:set: Decrease refcount synchronously on deletion and replace Revert "netfilter: nft_numgen: add map lookups for numgen random operations" HID: alps: allow incoming reports when only the trackstick is opened Revert "HID: add NOGET quirk for Eaton Ellipse MAX UPS" HID: i2c-hid: Add a small delay after sleep command for Raydium touchpanel s390/vdso: add missing FORCE to build targets s390/decompressor: add missing FORCE to build targets netfilter: bridge: define INT_MIN & INT_MAX in userspace netfilter: ipv6: fix oops when defragmenting locally generated fragments serial: sh-sci: Fix receive on SCIFA/SCIFB variants with DMA clk: ti: fix OF child-node lookup clk: renesas: r9a06g032: Fix UART34567 clock rate clk: meson: clk-pll: drop CLK_GET_RATE_NOCACHE where unnecessary arm64: percpu: Initialize ret in the default case clk: meson-axg: pcie: drop the mpll3 clock parent platform/x86: acerhdf: Add BIOS entry for Gateway LT31 v1.3307 x86/earlyprintk: Add a force option for pciserial device apparmor: Fix uninitialized value in aa_split_fqname clk: samsung: exynos5420: Enable PERIS clocks for suspend fs/exofs: fix potential memory leak in mount option parsing perf symbols: Set PLT entry/header sizes properly on Sparc clk: fixed-rate: fix of_node_get-put imbalance platform/x86: intel_telemetry: report debugfs failure afs: Handle EIO from delivery function drm/edid: Add 6 bpc quirk for BOE panel. um: Give start_idle_thread() a return code perf unwind: Take pgoff into account when reporting elf to libdwfl hfsplus: prevent btree data loss on root split hfs: prevent btree data loss on root split reiserfs: propagate errors from fill_with_dentries() properly ixgbe: fix MAC anti-spoofing filter after VFLR net: hns3: bugfix for the initialization of command queue's spin lock net: hns3: bugfix for handling mailbox while the command queue reinitialized net: hns3: bugfix for rtnl_lock's range in the hclge_reset() net: hns3: bugfix for rtnl_lock's range in the hclgevf_reset() block: brd: associate with queue until adding disk arm64: kprobe: make page to RO mode when allocate it cifs: fix return value for cifs_listxattr cifs: don't dereference smb_file_target before null check drm/i915: Replace some PAGE_SIZE with I915_GTT_PAGE_SIZE f2fs: fix to keep project quota consistent f2fs: guarantee journalled quota data by checkpoint f2fs: cleanup dirty pages if recover failed f2fs: fix data corruption issue with hardware encryption f2fs: fix to recover inode->i_flags of inode block during POR f2fs: spread f2fs_set_inode_flags() f2fs: fix to spread clear_cold_data() Revert "f2fs: fix to clear PG_checked flag in set_page_dirty()" f2fs: account read IOs and use IO counts for is_idle f2fs: fix to account IO correctly for cgroup writeback f2fs: fix to account IO correctly f2fs: remove request_list check in is_idle() f2fs: allow to mount, if quota is failed f2fs: update REQ_TIME in f2fs_cross_rename() f2fs: do not update REQ_TIME in case of error conditions f2fs: remove unneeded disable_nat_bits() f2fs: remove unused sbi->trigger_ssr_threshold f2fs: shrink sbi->sb_lock coverage in set_file_temperature() f2fs: use rb_*_cached friends f2fs: fix to recover cold bit of inode block during POR f2fs: submit cached bio to avoid endless PageWriteback f2fs: checkpoint disabling f2fs: clear PageError on the read path f2fs: allow out-place-update for direct IO in LFS mode f2fs: refactor ->page_mkwrite() flow Revert: "f2fs: check last page index in cached bio to decide submission" f2fs: support superblock checksum f2fs: add to account skip count of background GC f2fs: add to account meta IO f2fs: keep lazytime on remount f2fs: fix missing up_read f2fs: return correct errno in f2fs_gc f2fs: avoid f2fs_bug_on if f2fs_get_meta_page_nofail got EIO f2fs: mark inode dirty explicitly in recover_inode() f2fs: fix to recover inode's crtime during POR f2fs: fix to recover inode's i_gc_failures during POR f2fs: fix to recover inode's i_flags during POR f2fs: fix to recover inode's project id during POR f2fs: update i_size after DIO completion f2fs: report ENOENT correctly in f2fs_rename f2fs: fix remount problem of option io_bits f2fs: fix to recover inode's uid/gid during POR f2fs: avoid infinite loop in f2fs_alloc_nid f2fs: add new idle interval timing for discard and gc paths f2fs: split IO error injection according to RW f2fs: add SPDX license identifiers f2fs: surround fault_injection related option parsing using CONFIG_F2FS_FAULT_INJECTION f2fs: fix setattr project check upon fssetxattr ioctl f2fs: avoid sleeping under spin_lock f2fs: plug readahead IO in readdir() f2fs: fix to do sanity check with current segment number f2fs: fix memory leak of percpu counter in fill_super() f2fs: fix memory leak of write_io in fill_super() f2fs: cache NULL when both default_acl and acl are NULL f2fs: fix to flush all dirty inodes recovered in readonly fs f2fs: report error if quota off error during umount f2fs: submit bio after shutdown f2fs: avoid wrong decrypted data from disk Revert "f2fs: use printk_ratelimited for f2fs_msg" f2fs: fix unnecessary periodic wakeup of discard thread when dev is busy f2fs: fix to avoid NULL pointer dereference on se->discard_map f2fs: add additional sanity check in f2fs_acl_from_disk() ANDROID: arm64: defconfig: Enable CONFIG_SCHED_TUNE ANDROID: thermal: cpu_cooling: Migrate to using the EM framework ANDROID: Add hold functionality to schedtune CPU boost ANDROID: sched/rt: Add schedtune accounting to rt task enqueue/dequeue ANDROID: sched: Make the cpu_util* accessors available without sugov ANDROID: sched/events: Introduce overutilized trace event ANDROID: sched/events: Introduce rt_rq load tracking trace event ANDROID: sched/events: Introduce schedtune trace events ANDROID: sched/events: Introduce find_best_target trace event ANDROID: sched/events: Introduce util_est trace events ANDROID: sched/events: Introduce task_group load tracking trace event ANDROID: sched/events: Introduce sched_entity load tracking trace event ANDROID: sched/events: Introduce cfs_rq load tracking trace event ANDROID: sched/autogroup: Define autogroup_path() for !CONFIG_SCHED_DEBUG ANDROID: sched/fair: Also do misfit in overloaded groups ANDROID: sched/fair: Don't balance misfits if it would overload local group ANDROID: sched/fair: Attempt to improve throughput for asym cap systems ANDROID: cpufreq/schedutil: add up/down frequency transition rate limits ANDROID: cpufreq/schedutil: Select frequency using util_avg for RT ANDROID: sched: Update max cpu capacity in case of max frequency constraints ANDROID: arm: enable max frequency capping ANDROID: arm64: enable max frequency capping ANDROID: implement max frequency capping ANDROID: sched/fair: add arch scaling function for max frequency capping ANDROID: sched/fair: Bypass energy computation for prefer_idle tasks ANDROID: sched: fair: Bypass energy-aware wakeup for prefer-idle tasks FROMLIST: sched/fair: Use wake_q length as a hint for wake_wide ANDROID: sched: Unconditionally honor sync flag for energy-aware wakeups ANDROID: Add find_best_target to minimise energy calculation overhead ANDROID: sched/fair: Factor out CPU selection from find_energy_efficient_cpu ANDROID: sched: Introduce sysctl_sched_cstate_aware ANDROID: sched, cpuidle: Track cpuidle state index in the scheduler ANDROID: sched: fair/tune: Add schedtune with cgroups interface ANDROID: drivers: Introduce a legacy Energy Model loading driver ANDROID: cpufreq: scmi: Register an Energy Model UPSTREAM: firmware: arm_scmi: add a getter for power of performance states ANDROID: cpufreq: arm_big_little: Register an Energy Model ANDROID: cpufreq: scpi: Register an Energy Model ANDROID: PM / OPP: cpufreq-dt: Move power estimation function FROMLIST: cpufreq: dt: Register an Energy Model ANDROID: arm: dts: vexpress-v2p-ca15_a7: Add dynamic-power-coefficient properties ANDROID: arm64: dts: juno-r2: Add dynamic-power-coefficient properties ANDROID: arm64: dts: juno: Add dynamic-power-coefficient properties ANDROID: arm, arm64: Enable kernel config options required for EAS ANDROID: sched: Enable idle balance to pull single task towards cpu with higher capacity ANDROID: sched: Prevent unnecessary active balance of single task in sched group FROMLIST: sched/fair: Select an energy-efficient CPU on task wake-up FROMLIST: sched/fair: Introduce an energy estimation helper function FROMLIST: sched: Add over-utilization/tipping point indicator FROMLIST: sched/fair: Clean-up update_sg_lb_stats parameters FROMLIST: sched: Introduce a sysctl for Energy Aware Scheduling FROMLIST: sched: Introduce sched_energy_present static key FROMLIST: sched/topology: Make Energy Aware Scheduling depend on schedutil FROMLIST: sched/topology: Disable EAS on inappropriate platforms FROMLIST: sched/topology: Lowest CPU asymmetry sched_domain level pointer FROMLIST: sched/topology: Reference the Energy Model of CPUs when available FROMLIST: PM / EM: Expose the Energy Model in sysfs FROMLIST: PM: Introduce an Energy Model management framework FROMLIST: sched/cpufreq: Prepare schedutil for Energy Aware Scheduling FROMLIST: sched: Relocate arch_scale_cpu_capacity UPSTREAM: sched/core: Disable SD_PREFER_SIBLING on asymmetric CPU capacity domains UPSTREAM: sched/fair: Don't move tasks to lower capacity CPUs unless necessary UPSTREAM: sched/fair: Set rq->rd->overload when misfit UPSTREAM: sched/fair: Wrap rq->rd->overload accesses with READ/WRITE_ONCE() UPSTREAM: sched/core: Change root_domain->overload type to int UPSTREAM: sched/fair: Change 'prefer_sibling' type to bool UPSTREAM: sched/fair: Kick nohz balance if rq->misfit_task_load UPSTREAM: sched/fair: Consider misfit tasks when load-balancing UPSTREAM: sched/fair: Add sched_group per-CPU max capacity UPSTREAM: sched/fair: Add 'group_misfit_task' load-balance type UPSTREAM: sched/topology: Add static_key for asymmetric CPU capacity optimizations UPSTREAM: sched/topology, arch/arm: Rebuild sched_domain hierarchy when CPU capacity changes UPSTREAM: sched/topology, arch/arm64: Rebuild the sched_domain hierarchy when the CPU capacity changes UPSTREAM: sched/topology, drivers/base/arch_topology: Rebuild the sched_domain hierarchy when capacities change UPSTREAM: sched/topology: Add SD_ASYM_CPUCAPACITY flag detection Change-Id: I19fafa34b3fd39c4125708cb5c9c5a7634c40ec4 Signed-off-by: Rishabh Bhatnagar <rishabhb@codeaurora.org>	2018-12-20 17:43:16 -08:00
Mathias Payer	1b2e742bf7	USB: check usb_get_extra_descriptor for proper size ... commit 704620afc70cf47abb9d6a1a57f3825d2bca49cf upstream. When reading an extra descriptor, we need to properly check the minimum and maximum size allowed, to prevent from invalid data being sent by a device. Reported-by: Hui Peng <benquike@gmail.com> Reported-by: Mathias Payer <mathias.payer@nebelwelt.net> Co-developed-by: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Hui Peng <benquike@gmail.com> Signed-off-by: Mathias Payer <mathias.payer@nebelwelt.net> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> Cc: stable <stable@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2018-12-13 09:16:15 +01:00
Hemant Kumar	1f64d4e3b5	usb: core: Add support to parse config summary capability descriptors ... USB 3.2 Specification updated configuration summary descriptor different from drafted version. This descriptor is needed per function. Descriptor provides list of configuration indices that include that function. Use bcdVersion to handle spec compliant descriptor and select device preferred config supporting UAC3 or lower revision. Change-Id: I7cf28eaf61ca91496be84d90ad00704fe4acb149 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org>	2018-11-20 12:30:32 -08:00
Hemant Kumar	106c645a79	usb: Add helper API to issue stop endpoint command ... This API is used to issue stop endpoint command on requested endpoint in order to retire all active TRBs in the transfer ring. Change-Id: I312772367a2cd293982a66ea8b75e04a8b1f2fd0 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org>	2018-11-13 14:17:32 -08:00
Hemant Kumar	e97aab2199	usb: core: Drive resume for 20ms for devices behind external hub ... skip_extended_resume_delay module parameter is completely skipping delay required to drive bus resume for devices behind the external hub(s). This is causing resume failure for the device. Fix the issue by driving resume for 20ms. Change-Id: I13ba8094c7eab119f1d41ebc9e15c9aa91096201 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org>	2018-11-12 16:41:43 -08:00
Hemant Kumar	3e3d0ab182	usb: Add support to handle USB SMMU S1 address ... Update helper APIs to return physical address as well as USB SMMU stage 1 address. Physical address is used to map it to iova for remote processor. S1 address is used by xHC. Get sg table containing one or mode page sized physical address corresponding to S1 address for event ring, xfer ring and xfer buffers using dma_get_sgtable(). Accordingly update QMI response buffer for XHCI event ring, xfer ring memory info and xfer buffer. Change-Id: I6c9ea39d8a87a5bdc5a760d2a1ca85ab3024d985 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> Signed-off-by: Mayank Rana <mrana@codeaurora.org>	2018-11-12 16:41:40 -08:00
Hemant Kumar	b8360b2a98	usb: core: Remove helper APIs returning dcba dma address ... Since dcba dma address is not required by class driver therefore remove the API definitions. Change-Id: I2623cf3bf406ca0d47ea2549b5163d9e9b7351a1 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> Signed-off-by: Mayank Rana <mrana@codeaurora.org>	2018-11-12 16:41:14 -08:00
Hemant Kumar	f906c280ee	usb: core: Add helper function to return controller id ... Function provides controller id used by a remote entity to identify which usb controller to program to initiate data transfer. Change-Id: Ied396f34496104c139a7910ee86844c124e6803f Signed-off-by: Hemant Kumar <hemantk@codeaurora.org>	2018-11-12 14:54:27 -08:00
Hemant Kumar	787b74a487	usb: xhci: Add helper APIs to return xhci dma addresses ... dma address of secondary event ring, transfer ring and device context base address are required to pass to remote entity. Remote entity uses these addresses to program xhci controller registers. Change-Id: Ie0756d646a396a11b41b93e886bca9aff636ee5d Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> Signed-off-by: Jack Pham <jackp@codeaurora.org>	2018-11-12 14:41:17 -08:00
Hemant Kumar	8d48fb820f	usb: xhci: Add support for secondary interrupters ... Implement APIs to dynamically allocate and free secondary event rings based upon interrupter number. Also add exported APIs in usb core layer which allows secondary event ring management via remote processor entity. Change-Id: I5ee7d44d6cad8e35e22d3c1a027a1eec5d208585 Signed-off-by: Hemant Kumar <hemantk@codeaurora.org> Signed-off-by: Jack Pham <jackp@codeaurora.org> Signed-off-by: Mayank Rana <mrana@codeaurora.org>	2018-11-12 14:39:54 -08:00
Manu Gautam	b31fc5d204	usb: hcd: Add USB atomic notifier callback for HC died error ... Add support for USB atomic notifier callbacks when host controller drivers reports death of controller on some fatal error. Current implementation doesn't help to recover from this condition. Controller platform drivers can register for this callback and take necessary steps to reset and add hcd again. CRs-fixed: 1048766 Change-Id: Ie9064e669424096fee8c35cddccab29faf60cc6b Signed-off-by: Manu Gautam <mgautam@codeaurora.org>	2018-08-09 15:57:54 -07:00
Nicolas Boichat	aa071a92bb	usb: hub: Per-port setting to reduce TRSTRCY to 10 ms ... Currently, the USB hub core waits for 50 ms after enumerating the device. This was added to help "some high speed devices" to enumerate (b789696af8 "[PATCH] USB: relax usbcore reset timings"). On some devices, the time-to-active is important, so we provide a per-port option to reduce the time to what the USB specification requires: 10 ms. Signed-off-by: Nicolas Boichat <drinkcat@chromium.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2018-05-31 12:48:17 +02:00
Nicolas Boichat	2524422715	usb: hub: Per-port setting to use old enumeration scheme ... The "old" enumeration scheme is considerably faster (it takes ~244ms instead of ~356ms to get the descriptor). It is currently only possible to use the old scheme globally (/sys/module/usbcore/parameters/old_scheme_first), which is not desirable as the new scheme was introduced to increase compatibility with more devices. However, in our case, we care about time-to-active for a specific USB device (which we make the firmware for), on a specific port (that is pogo-pin based: not a standard USB port). This new sysfs option makes it possible to use the old scheme on a single port only. Signed-off-by: Nicolas Boichat <drinkcat@chromium.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2018-05-31 12:48:17 +02:00
Mathias Nyman	013eedb8c5	USB: Add support to store lane count used by USB 3.2 ... USB 3.2 specification adds Dual-lane support, doubling the maximum SuperSpeedPlus data rate from 10Gbps to 20Gbps. Dual-lane takes into use a second set of rx and tx wires/pins in the Type-C cable and connector. Add "rx_lanes" and "tx_lanes" variables to struct usb_device to store the numer of lanes in use. Number of lanes can be read using the extended port status hub request that was introduced in USB 3.1. Extended port status rx and tx lane count are zero based, maximum lanes supported by non inter-chip (SSIC) USB 3.2 is 2 (dual lane) with rx and tx lane count symmetric. SSIC devices support asymmetric lanes up to 4 lanes per direction. If extended port status is not available then default to one lane. Signed-off-by: Mathias Nyman <mathias.nyman@linux.intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2018-04-22 16:11:19 +02:00
Felipe Balbi	886ee36e72	usb: core: add support for USB_REQ_SET_ISOCH_DELAY ... USB SS and SSP hubs provide wHubDelay values on their hub descriptor which we should inform the USB Device about. The USB Specification 3.0 explains, on section 9.4.11, how to calculate the value and how to issue the request. Note that a USB_REQ_SET_ISOCH_DELAY is valid on all device states (Default, Address, Configured), we just *chose* to issue it from Address state right after successfully fetching the USB Device Descriptor. Signed-off-by: Felipe Balbi <felipe.balbi@linux.intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2017-12-15 20:45:43 +01:00
Alan Stern	aa15d3d257	USB: remove the URB_NO_FSBR flag ... The URB_NO_FSBR flag has never really been used. It was introduced as a potential way for UHCI to minimize PCI bus usage (by not attempting full-speed bulk and control transfers more than once per frame), but the flag was not set by any drivers. There's no point in keeping it around. This patch simplifies the API by removing it. Unfortunately, it does have to be kept as part of the usbfs ABI, but at least we can document in include/uapi/linux/usbdevice_fs.h that it doesn't do anything. Signed-off-by: Alan Stern <stern@rowland.harvard.edu> Acked-by: Shuah Khan <shuahkh@osg.samsung.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2017-12-12 13:16:07 +01:00
Linus Torvalds	4e4510fec4	Merge tag 'sound-4.15-rc1' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/tiwai/sound ... Pull sound updates from Takashi Iwai: "There are no big surprising changes in this cycle, yet not too boring, either. The biggest change from diffstat POV is the removal of the legacy OSS driver codes that have been already disabled for a long time. This will bring a few trivial merge conflicts. As new features in ASoC side, there are two things: a new AC97 bus implementation and AMD Stony platform support. Both include the relevant changes shared with other subsystems, e.g. AC97 MFD changes and DRM AMD changes. Some other highlighted topics are: - A bunch of USB-audio drivers got the hardening against the malicious device accesses with a new helper code for endpoint sanity check - Lots of cleanups for ASoC Intel platform code, including support for their open source audio firmware - Continued ASoC core componentization works - Support for scaling MCLK with sample rate in ASoC simple-card - Stabler PCM hot-unplug capability, especially for ASoC usages" * tag 'sound-4.15-rc1' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/tiwai/sound: (302 commits) Documentation: sound: hd-audio: notes.rst ASoC: bcm2835: Support left/right justified and DSP modes ASoC: bcm2835: Enforce full symmetry ASoC: bcm2835: Support additional samplerates up to 384kHz ASoC: bcm2835: Add support for TDM modes ASoC: add mclk-fs support to audio graph card ASoC: add mclk-fs to audio graph card binding ASoC: rt5514: work around link error ASoC: rt5514: mark PM functions as __maybe_unused ASoC: rt5663: Check the JD status in the button pushing ASoC: amd: Modified DMA transfer Mechanism for Playback ASoC: rt5645: Wait for 400msec before concluding on value of RT5645_VENDOR_ID2 ASoC: sun4i-codec: fixed 32bit audio capture support for H3/H2+ ASoC: da7213: add support for DSP modes ASoC: sun8i-codec: Add a comment on the LRCK inversion ASoC: sun8i-codec: Set the BCLK divider ASoC: rt5663: Delay and retry reading rt5663 ID register ASoC: amd: use do_div rather than 64 bit division to fix 32 bit builds ASoC: cs42l56: Fix reset GPIO name in example DT binding ASoC: rt5514-spi: check irq status to schedule data copy in resume function ...	2017-11-14 18:01:46 -08:00
Linus Torvalds	894025f24b	Merge tag 'usb-4.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb ... Pull USB/PHY updates from Greg KH: "Here is the big set of USB and PHY driver updates for 4.15-rc1. There is the usual amount of gadget and xhci driver updates, along with phy and chipidea enhancements. There's also a lot of SPDX tags and license boilerplate cleanups as well, which provide some churn in the diffstat. Other major thing is the typec code that moved out of staging and into the "real" part of the drivers/usb/ tree, which was nice to see happen. All of these have been in linux-next with no reported issues for a while" * tag 'usb-4.15-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb: (263 commits) usb: gadget: f_fs: Fix use-after-free in ffs_free_inst USB: usbfs: compute urb->actual_length for isochronous usb: core: message: remember to reset 'ret' to 0 when necessary USB: typec: Remove remaining redundant license text USB: typec: add SPDX identifiers to some files USB: renesas_usbhs: rcar?.h: add SPDX tags USB: chipidea: ci_hdrc_tegra.c: add SPDX line USB: host: xhci-debugfs: add SPDX lines USB: add SPDX identifiers to all remaining Makefiles usb: host: isp1362-hcd: remove a couple of redundant assignments USB: adutux: remove redundant variable minor usb: core: add a new usb_get_ptm_status() helper usb: core: add a 'type' parameter to usb_get_status() usb: core: introduce a new usb_get_std_status() helper usb: core: rename usb_get_status() 'type' argument to 'recip' usb: core: add Status Type definitions USB: gadget: Remove redundant license text USB: gadget: function: Remove redundant license text USB: gadget: udc: Remove redundant license text USB: gadget: legacy: Remove redundant license text ...	2017-11-13 21:14:07 -08:00
Takashi Iwai	76727c2c3b	Merge tag 'asoc-v4.15' of https://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linus ... ASoC: Updates for v4.15 The biggest thing this release has been the conversion of the AC98 bus to the driver model, that's been a long time coming so thanks to Robert Jarzmik for his dedication there. Due to there being some AC97 MFD there's a few fairly large changes in input and the MFD layer, mainly to the wm97xx driver. There's also some drivers/drm changes to support the new AMD Stoney platform, these are shared with the DRM subsystem and should be being merged via both. Within the subsystem the overwhelming bulk of the changes is in the Intel drivers which continue to need lots of cleanups and fixes, this release they've also gained support for their open source firmware. There's also some large changs in the core as Morimoto-san continues to mirror operations into the component level in preparation for conversion of drivers to that. - The AC97 bus has finally caught up with the driver model thanks to some dedicated and persistent work from Robert Jarzmik. - Continued work from Morimoto-san on moving us towards being able to use components for everything. - Lots of cleanups for the Intel platform code, including support for their open source audio firmware. - Support for scaling MCLK with sample rate in simple-card. - Support for AMD Stoney platform.	2017-11-13 15:45:57 +01:00
Felipe Balbi	f8f3e4acbd	usb: core: add a new usb_get_ptm_status() helper ... Drivers who are interested in the PTM status stype, should use this new helper to make sure they issue the correct GetStatus message. Signed-off-by: Felipe Balbi <felipe.balbi@linux.intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2017-11-07 15:47:20 +01:00
Felipe Balbi	2e43f0fe37	usb: core: add a 'type' parameter to usb_get_status() ... This new 'type' parameter will allows interested drivers to request for PTM status or Standard status. Signed-off-by: Felipe Balbi <felipe.balbi@linux.intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2017-11-07 15:47:20 +01:00
Felipe Balbi	d9e1e1484a	usb: core: introduce a new usb_get_std_status() helper ... This new helper is a simple wrapper around usb_get_status(). This patch is in preparation to adding support for fetching PTM_STATUS types. No functional changes. Signed-off-by: Felipe Balbi <felipe.balbi@linux.intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2017-11-07 15:47:19 +01:00
Felipe Balbi	3c377ef100	usb: core: rename usb_get_status() 'type' argument to 'recip' ... This makes it a lot clearer that we're expecting a recipient as the argument. A follow-up patch will use the argument 'type' as the status type selector (standard or ptm). Signed-off-by: Felipe Balbi <felipe.balbi@linux.intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2017-11-07 15:47:19 +01:00
Greg Kroah-Hartman	b24413180f	License cleanup: add SPDX GPL-2.0 license identifier to files with no license ... Many source files in the tree are missing licensing information, which makes it harder for compliance tools to determine the correct license. By default all files without license information are under the default license of the kernel, which is GPL version 2. Update the files which contain no license information with the 'GPL-2.0' SPDX license identifier. The SPDX identifier is a legally binding shorthand, which can be used instead of the full boiler plate text. This patch is based on work done by Thomas Gleixner and Kate Stewart and Philippe Ombredanne. How this work was done: Patches were generated and checked against linux-4.14-rc6 for a subset of the use cases: - file had no licensing information it it. - file was a */uapi/* one with no licensing information in it, - file was a */uapi/* one with existing licensing information, Further patches will be generated in subsequent months to fix up cases where non-standard license headers were used, and references to license had to be inferred by heuristics based on keywords. The analysis to determine which SPDX License Identifier to be applied to a file was done in a spreadsheet of side by side results from of the output of two independent scanners (ScanCode & Windriver) producing SPDX tag:value files created by Philippe Ombredanne. Philippe prepared the base worksheet, and did an initial spot review of a few 1000 files. The 4.13 kernel was the starting point of the analysis with 60,537 files assessed. Kate Stewart did a file by file comparison of the scanner results in the spreadsheet to determine which SPDX license identifier(s) to be applied to the file. She confirmed any determination that was not immediately clear with lawyers working with the Linux Foundation. Criteria used to select files for SPDX license identifier tagging was: - Files considered eligible had to be source code files. - Make and config files were included as candidates if they contained >5 lines of source - File already had some variant of a license header in it (even if <5 lines). All documentation files were explicitly excluded. The following heuristics were used to determine which SPDX license identifiers to apply. - when both scanners couldn't find any license traces, file was considered to have no license information in it, and the top level COPYING file license applied. For non */uapi/* files that summary was: SPDX license identifier # files ---------------------------------------------------|------- GPL-2.0 11139 and resulted in the first patch in this series. If that file was a */uapi/* path one, it was "GPL-2.0 WITH Linux-syscall-note" otherwise it was "GPL-2.0". Results of that was: SPDX license identifier # files ---------------------------------------------------|------- GPL-2.0 WITH Linux-syscall-note 930 and resulted in the second patch in this series. - if a file had some form of licensing information in it, and was one of the */uapi/* ones, it was denoted with the Linux-syscall-note if any GPL family license was found in the file or had no licensing in it (per prior point). Results summary: SPDX license identifier # files ---------------------------------------------------|------ GPL-2.0 WITH Linux-syscall-note 270 GPL-2.0+ WITH Linux-syscall-note 169 ((GPL-2.0 WITH Linux-syscall-note) OR BSD-2-Clause) 21 ((GPL-2.0 WITH Linux-syscall-note) OR BSD-3-Clause) 17 LGPL-2.1+ WITH Linux-syscall-note 15 GPL-1.0+ WITH Linux-syscall-note 14 ((GPL-2.0+ WITH Linux-syscall-note) OR BSD-3-Clause) 5 LGPL-2.0+ WITH Linux-syscall-note 4 LGPL-2.1 WITH Linux-syscall-note 3 ((GPL-2.0 WITH Linux-syscall-note) OR MIT) 3 ((GPL-2.0 WITH Linux-syscall-note) AND MIT) 1 and that resulted in the third patch in this series. - when the two scanners agreed on the detected license(s), that became the concluded license(s). - when there was disagreement between the two scanners (one detected a license but the other didn't, or they both detected different licenses) a manual inspection of the file occurred. - In most cases a manual inspection of the information in the file resulted in a clear resolution of the license that should apply (and which scanner probably needed to revisit its heuristics). - When it was not immediately clear, the license identifier was confirmed with lawyers working with the Linux Foundation. - If there was any question as to the appropriate license identifier, the file was flagged for further research and to be revisited later in time. In total, over 70 hours of logged manual review was done on the spreadsheet to determine the SPDX license identifiers to apply to the source files by Kate, Philippe, Thomas and, in some cases, confirmation by lawyers working with the Linux Foundation. Kate also obtained a third independent scan of the 4.13 code base from FOSSology, and compared selected files where the other two scanners disagreed against that SPDX file, to see if there was new insights. The Windriver scanner is based on an older version of FOSSology in part, so they are related. Thomas did random spot checks in about 500 files from the spreadsheets for the uapi headers and agreed with SPDX license identifier in the files he inspected. For the non-uapi files Thomas did random spot checks in about 15000 files. In initial set of patches against 4.14-rc6, 3 files were found to have copy/paste license identifier errors, and have been fixed to reflect the correct identifier. Additionally Philippe spent 10 hours this week doing a detailed manual inspection and review of the 12,461 patched files from the initial patch version early this week with: - a full scancode scan run, collecting the matched texts, detected license ids and scores - reviewing anything where there was a license detected (about 500+ files) to ensure that the applied SPDX license was correct - reviewing anything where there was no detection but the patch license was not GPL-2.0 WITH Linux-syscall-note to ensure that the applied SPDX license was correct This produced a worksheet with 20 files needing minor correction. This worksheet was then exported into 3 different .csv files for the different types of files to be modified. These .csv files were then reviewed by Greg. Thomas wrote a script to parse the csv files and add the proper SPDX tag to the file, in the format that the file expected. This script was further refined by Greg based on the output to detect more types of files automatically and to distinguish between header and source .c files (which need different comment types.) Finally Greg ran the script using the .csv files to generate the patches. Reviewed-by: Kate Stewart <kstewart@linuxfoundation.org> Reviewed-by: Philippe Ombredanne <pombredanne@nexb.com> Reviewed-by: Thomas Gleixner <tglx@linutronix.de> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2017-11-02 11:10:55 +01:00
Takashi Iwai	e901b98738	usb: core: Add a helper function to check the validity of EP type in URB ... This patch adds a new helper function to perform a sanity check of the given URB to see whether it contains a valid endpoint. It's a light- weight version of what usb_submit_urb() does, but without the kernel warning followed by the stack trace, just returns an error code. Especially for a driver that doesn't parse the descriptor but fills the URB with the fixed endpoint (e.g. some quirks for non-compliant devices), this kind of check is preferable at the probe phase before actually submitting the urb. Tested-by: Andrey Konovalov <andreyknvl@google.com> Acked-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by: Takashi Iwai <tiwai@suse.de>	2017-10-11 15:14:32 +02:00
Mauro Carvalho Chehab	21470e32ca	usb: fix some references for /proc/bus/usb ... Since when we got rid of usbfs, the /proc/bus/usb is now elsewhere. Fix references for it. Signed-off-by: Mauro Carvalho Chehab <mchehab@s-opensource.com> Acked-by: Serge Hallyn <serge@hallyn.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2017-04-18 16:54:19 +02:00
Johan Hovold	279daf4e05	USB: core: add helpers to retrieve endpoints in reverse order ... Several drivers have implemented their endpoint look-up loops in such a way that they have picked the last endpoint descriptor of the specified type should more than one such descriptor exist. To avoid any regressions, add corresponding helpers to lookup endpoints by searching the endpoint descriptors in reverse order. Signed-off-by: Johan Hovold <johan@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2017-03-23 13:53:16 +01:00
Johan Hovold	66a359390e	USB: core: add helpers to retrieve endpoints ... Many USB drivers iterate over the available endpoints to find required endpoints of a specific type and direction. Typically the endpoints are required for proper function and a missing endpoint should abort probe. To facilitate code reuse, add a helper to retrieve common endpoints (bulk or interrupt, in or out) and four wrappers to find a single endpoint. Note that the helpers are marked as __must_check to serve as a reminder to always verify that all expected endpoints are indeed present. This also means that any optional endpoints, typically need to be looked up through separate calls. Signed-off-by: Johan Hovold <johan@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2017-03-23 13:53:16 +01:00