1117 Commits

Author SHA1 Message Date
Michael Bestas
d8f10da896 Merge tag 'v4.4.276' into android-msm-wahoo-4.4
This is the 4.4.276 stable release

# gpg: Signature made Tue Jul 20 17:23:10 2021 EEST
# gpg:                using RSA key 647F28654894E3BD457199BE38DBBDC86092693E
# gpg: Good signature from "Greg Kroah-Hartman <gregkh@kernel.org>" [full]
# gpg: gregkh@kernel.org: Verified 26 signatures in the past 2 hours.  Encrypted
#      0 messages.

# By Zhen Lei (10) and others
# Via Greg Kroah-Hartman
* tag 'v4.4.276':
  Linux 4.4.276
  seq_file: disallow extremely large seq buffer allocations
  MIPS: vdso: Invalid GIC access through VDSO
  mips: disable branch profiling in boot/decompress.o
  scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe()
  memory: fsl_ifc: fix leak of private memory on probe failure
  memory: fsl_ifc: fix leak of IO mapping on probe failure
  rtc: fix snprintf() checking in is_rtc_hctosys()
  ARM: dts: exynos: fix PWM LED max brightness on Odroid XU4
  hexagon: use common DISCARDS macro
  ALSA: isa: Fix error return code in snd_cmi8330_probe()
  nfs: fix acl memory leak of posix_acl_create()
  um: fix error return code in winch_tramp()
  um: fix error return code in slip_open()
  PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun
  virtio_console: Assure used length from device is limited
  virtio-blk: Fix memory leak among suspend/resume procedure
  power: supply: ab8500: add missing MODULE_DEVICE_TABLE
  power: supply: charger-manager: add missing MODULE_DEVICE_TABLE
  ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty
  watchdog: Fix possible use-after-free by calling del_timer_sync()
  watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff()
  watchdog: Fix possible use-after-free in wdt_startup()
  ARM: 9087/1: kprobes: test-thumb: fix for LLVM_IAS=1
  power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE
  power: supply: ab8500: Avoid NULL pointers
  pwm: spear: Don't modify HW state in .remove callback
  lib/decompress_unlz4.c: correctly handle zero-padding around initrds.
  ALSA: hda: Add IRQ check for platform_get_irq()
  backlight: lm3630a: Fix return code of .update_status() callback
  powerpc/boot: Fixup device-tree on little endian
  usb: gadget: hid: fix error return code in hid_bind()
  usb: gadget: f_hid: fix endianness issue with descriptors
  ALSA: bebob: add support for ToneWeal FW66
  ASoC: soc-core: Fix the error return code in snd_soc_of_parse_audio_routing()
  selftests/powerpc: Fix "no_handler" EBB selftest
  ALSA: ppc: fix error return code in snd_pmac_probe()
  gpio: zynq: Check return value of pm_runtime_get_sync
  powerpc/ps3: Add dma_mask to ps3_dma_region
  ALSA: sb: Fix potential double-free of CSP mixer elements
  mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE
  scsi: iscsi: Add iscsi_cls_conn refcount helpers
  fs/jfs: Fix missing error code in lmLogInit()
  tty: serial: 8250: serial_cs: Fix a memory leak in error handling path
  scsi: lpfc: Fix "Unexpected timeout" error in direct attach topology
  Revert "ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro"
  misc/libmasm/module: Fix two use after free in ibmasm_init_one
  tty: serial: fsl_lpuart: fix the potential risk of division or modulo by zero
  KVM: X86: Disable hardware breakpoints unconditionally before kvm_x86->run()
  KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is enabled
  jfs: fix GPF in diFree
  media: uvcvideo: Fix pixel format change for Elgato Cam Link 4K
  media: gspca/sunplus: fix zero-length control requests
  media: gspca/sq905: fix control-request direction
  media: zr364xx: fix memory leak in zr364xx_start_readpipe
  dm btree remove: assign new_root only when removal succeeds
  ipack/carriers/tpci200: Fix a double free in tpci200_pci_probe
  seq_buf: Fix overflow in seq_buf_putmem_hex()
  power: supply: ab8500: Fix an old bug
  ipmi/watchdog: Stop watchdog timer when the current action is 'none'
  ASoC: tegra: Set driver_name=tegra for all machine drivers
  ata: ahci_sunxi: Disable DIPM
  mmc: sdhci: Fix warning message when accessing RPMB in HS400 mode
  powerpc/barrier: Avoid collision with clang's __lwsync macro
  mac80211: fix memory corruption in EAPOL handling
  can: bcm: delay release of struct bcm_op after synchronize_rcu()
  can: gw: synchronize rcu operations before removing gw job entry
  fuse: reject internal errno
  sctp: add size validation when walking chunks
  Bluetooth: btusb: fix bt fiwmare downloading failure issue for qca btsoc.
  Bluetooth: Shutdown controller after workqueues are flushed or cancelled
  Bluetooth: Fix the HCI to MGMT status conversion table
  RDMA/cma: Fix rdma_resolve_route() memory leak
  wireless: wext-spy: Fix out-of-bounds warning
  sfc: error code if SRIOV cannot be disabled
  sfc: avoid double pci_remove of VFs
  atm: nicstar: register the interrupt handler in the right place
  atm: nicstar: use 'dma_free_coherent' instead of 'kfree'
  cw1200: add missing MODULE_DEVICE_TABLE
  wl1251: Fix possible buffer overflow in wl1251_cmd_scan
  wlcore/wl12xx: Fix wl12xx get_mac error if device is in ELP
  xfrm: Fix error reporting in xfrm_state_construct.
  selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC
  net: micrel: check return value after calling platform_get_resource()
  dm space maps: don't reset space map allocation cursor when committing
  RDMA/cxgb4: Fix missing error code in create_qp()
  ipv6: use prandom_u32() for ID generation
  e100: handle eeprom as little endian
  udf: Fix NULL pointer dereference in udf_symlink function
  drm/virtio: Fix double free on probe failure
  reiserfs: add check for invalid 1st journal block
  net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT
  atm: nicstar: Fix possible use-after-free in nicstar_cleanup()
  mISDN: fix possible use-after-free in HFC_cleanup()
  atm: iphase: fix possible use-after-free in ia_module_exit()
  hugetlb: clear huge pte during flush function on mips platform
  net: pch_gbe: Use proper accessors to BE data in pch_ptp_match()
  scsi: core: Retry I/O for Notify (Enable Spinup) Required error
  mmc: vub3000: fix control-request direction
  extcon: max8997: Add missing modalias string
  extcon: sm5502: Drop invalid register write in sm5502_reg_data
  phy: ti: dm816x: Fix the error handling path in 'dm816x_usb_phy_probe()
  scsi: mpt3sas: Fix error return value in _scsih_expander_add()
  staging: gdm724x: check for overflow in gdm_lte_netif_rx()
  staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt()
  s390: appldata depends on PROC_SYSCTL
  scsi: FlashPoint: Rename si_flags field
  tty: nozomi: Fix the error handling path of 'nozomi_card_init()'
  char: pcmcia: error out if 'num_bytes_read' is greater than 4 in set_protocol()
  Input: hil_kbd - fix error return code in hil_dev_connect()
  iio: accel: stk8ba50: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
  iio: accel: stk8312: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
  iio: accel: bma180: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
  iio: adis_buffer: do not return ints in irq handlers
  tty: nozomi: Fix a resource leak in an error handling function
  writeback: fix obtain a reference to a freeing memcg css
  i40e: Fix error handling in i40e_vsi_open
  vxlan: add missing rcu_read_lock() in neigh_reduce()
  net: ethernet: ezchip: fix error handling
  net: ethernet: ezchip: fix UAF in nps_enet_remove
  net: ethernet: aeroflex: fix UAF in greth_of_remove
  netfilter: nft_exthdr: check for IPv6 packet before further processing
  netlabel: Fix memory leak in netlbl_mgmt_add_common
  ath10k: Fix an error code in ath10k_add_interface()
  brcmsmac: mac80211_if: Fix a resource leak in an error handling path
  wireless: carl9170: fix LEDS build errors & warnings
  drm: qxl: ensure surf.data is ininitialized
  ehea: fix error return code in ehea_restart_qps()
  net: pch_gbe: Propagate error from devm_gpio_request_one()
  ACPI: sysfs: Fix a buffer overrun problem with description_show()
  crypto: nx - Fix RCU warning in nx842_OF_upd_status
  spi: spi-sun6i: Fix chipselect/clock bug
  media: s5p-g2d: Fix a memory leak on ctx->fh.m2m_ctx
  mmc: usdhi6rol0: fix error return code in usdhi6_probe()
  media: siano: Fix out-of-bounds warnings in smscore_load_firmware_family2()
  media: tc358743: Fix error return code in tc358743_probe_of()
  pata_ep93xx: fix deferred probing
  pata_octeon_cf: avoid WARN_ON() in ata_host_activate()
  media: I2C: change 'RST' to "RSET" to fix multiple build errors
  pata_rb532_cf: fix deferred probing
  sata_highbank: fix deferred probing
  crypto: ux500 - Fix error return code in hash_hw_final()
  crypto: ixp4xx - dma_unmap the correct address
  ia64: mca_drv: fix incorrect array size calculation
  platform/x86: toshiba_acpi: Fix missing error code in toshiba_acpi_setup_keyboard()
  ACPI: bus: Call kobject_put() in acpi_init() error path
  random32: Fix implicit truncation warning in prandom_seed_state()
  fs: dlm: cancel work sync othercon
  block_dump: remove block_dump feature in mark_inode_dirty()
  ACPI: processor idle: Fix up C-state latency if not ordered
  regulator: da9052: Ensure enough delay time for .set_voltage_time_sel
  btrfs: disable build on platforms having page size 256K
  media: dvb_net: avoid speculation from net slot
  crypto: shash - avoid comparing pointers to exported functions under CFI
  mmc: via-sdmmc: add a check against NULL pointer dereference
  media: bt8xx: Fix a missing check bug in bt878_probe
  media: v4l2-core: Avoid the dangling pointer in v4l2_fh_release
  crypto: qat - remove unused macro in FW loader
  crypto: qat - check return code of qat_hal_rd_rel_reg()
  media: pvrusb2: fix warning in pvr2_i2c_core_done
  media: cpia2: fix memory leak in cpia2_usb_probe
  crypto: nx - add missing MODULE_DEVICE_TABLE
  spi: omap-100k: Fix the length judgment problem
  spi: spi-topcliff-pch: Fix potential double free in pch_spi_process_messages()
  fuse: check connected before queueing on fpq->io
  seq_buf: Make trace_seq_putmem_hex() support data longer than 8
  ssb: sdio: Don't overwrite const buffer if block_write fails
  ath9k: Fix kernel NULL pointer dereference during ath_reset_internal()
  serial_cs: Add Option International GSM-Ready 56K/ISDN modem
  iio: ltr501: ltr501_read_ps(): add missing endianness conversion
  iio: ltr501: ltr559: fix initialization of LTR501_ALS_CONTR
  iio: ltr501: mark register holding upper 8 bits of ALS_DATA{0,1} and PS_DATA as volatile, too
  s390/cio: dont call css_wait_for_slow_path() inside a lock
  SUNRPC: Should wake up the privileged task firstly.
  SUNRPC: Fix the batch tasks count wraparound.
  ext4: fix avefreec in find_group_orlov
  ext4: remove check for zero nr_to_scan in ext4_es_scan()
  ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit
  ext4: fix kernel infoleak via ext4_extent_header
  btrfs: clear defrag status of a root if starting transaction fails
  ARM: dts: at91: sama5d4: fix pinctrl muxing
  Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl
  iov_iter_fault_in_readable() should do nothing in xarray case
  ntfs: fix validity check for file name attribute
  USB: cdc-acm: blacklist Heimann USB Appset device
  usb: gadget: eem: fix echo command packet response issue
  net: can: ems_usb: fix use-after-free in ems_usb_disconnect()
  Input: usbtouchscreen - fix control-request directions
  media: dvb-usb: fix wrong definition
  ALSA: usb-audio: fix rate on Ozone Z90 USB headset

 Conflicts:
	fs/fs-writeback.c

Change-Id: I0289ec1f34d8d56baf317d7360b17b3fbd1ad164
2021-07-24 19:29:26 +03:00
Michael Bestas
dfe6bc2159 Merge tag 'v4.4.269' into android-msm-wahoo-4.4
This is the 4.4.269 stable release

# gpg: Signature made Sat May 22 11:39:12 2021 EEST
# gpg:                using RSA key 647F28654894E3BD457199BE38DBBDC86092693E
# gpg: Good signature from "Greg Kroah-Hartman <gregkh@kernel.org>" [full]
# gpg: gregkh@kernel.org: Verified 20 signatures in the past 2 hours.  Encrypted
#      0 messages.

# By Colin Ian King (11) and others
# Via Greg Kroah-Hartman
* tag 'v4.4.269':
  Linux 4.4.269
  iio: tsl2583: Fix division by a zero lux_val
  xhci: Do not use GFP_KERNEL in (potentially) atomic context
  ipv6: remove extra dev_hold() for fallback tunnels
  ip6_tunnel: sit: proper dev_{hold|put} in ndo_[un]init methods
  sit: proper dev_{hold|put} in ndo_[un]init methods
  ALSA: hda: generic: change the DAC ctl name for LO+SPK or LO+HP
  um: Mark all kernel symbols as local
  ACPI / hotplug / PCI: Fix reference count leak in enable_slot()
  isdn: capi: fix mismatched prototypes
  cxgb4: Fix the -Wmisleading-indentation warning
  usb: sl811-hcd: improve misleading indentation
  kgdb: fix gcc-11 warning on indentation
  x86/msr: Fix wr/rdmsr_safe_regs_on_cpu() prototypes
  kobject_uevent: remove warning in init_uevent_argv()
  dm ioctl: fix out of bounds array access when no devices
  thermal/core/fair share: Lock the thermal zone while looping over instances
  FDDI: defxx: Make MMIO the configuration default except for EISA
  KVM: x86: Cancel pvclock_gtod_work on module removal
  usb: core: hub: fix race condition about TRSMRCY of resume
  usb: dwc2: Fix gadget DMA unmap direction
  usb: xhci: Increase timeout for HC halt
  usb: fotg210-hcd: Fix an error message
  squashfs: fix divide error in calculate_skip()
  powerpc/64s: Fix crashes when toggling entry flush barrier
  ARC: entry: fix off-by-one error in syscall number validation
  kernel: kexec_file: fix error return code of kexec_calculate_store_digests()
  ksm: fix potential missing rmap_item for stable_node
  drm/radeon: Fix off-by-one power_state index heap overwrite
  sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b
  NFSv4.2 fix handling of sr_eof in SEEK's reply
  pNFS/flexfiles: fix incorrect size check in decode_nfs_fh()
  NFS: Deal correctly with attribute generation counter overflow
  PCI: Release OF node in pci_scan_device()'s error path
  ASoC: rt286: Make RT286_SET_GPIO_* readable and writable
  powerpc/iommu: Annotate nested lock for lockdep
  wl3501_cs: Fix out-of-bounds warnings in wl3501_mgmt_join
  wl3501_cs: Fix out-of-bounds warnings in wl3501_send_pkt
  ASoC: rt286: Generalize support for ALC3263 codec
  sctp: Fix out-of-bounds warning in sctp_process_asconf_param()
  kconfig: nconf: stop endless search loops
  selftests: Set CC to clang in lib.mk if LLVM is set
  cuse: prevent clone
  mac80211: clear the beacon's CRC after channel switch
  ip6_vti: proper dev_{hold|put} in ndo_[un]init methods
  Bluetooth: initialize skb_queue_head at l2cap_chan_create()
  Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default
  ALSA: rme9652: don't disable if not enabled
  ALSA: hdspm: don't disable if not enabled
  ALSA: hdsp: don't disable if not enabled
  net: stmmac: Set FIFO sizes for ipq806x
  tipc: convert dest node's address to network order
  fs: dlm: fix debugfs dump
  sctp: delay auto_asconf init until binding the first addr
  Revert "net/sctp: fix race condition in sctp_destroy_sock"
  kfifo: fix ternary sign extension bugs
  net:nfc:digital: Fix a double free in digital_tg_recv_dep_req
  powerpc/52xx: Fix an invalid ASM expression ('addi' used instead of 'add')
  ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices
  net: davinci_emac: Fix incorrect masking of tx and rx error channel
  vsock/vmci: log once the failed queue pair allocation
  mwl8k: Fix a double Free in mwl8k_probe_hw
  i2c: sh7760: fix IRQ error path
  powerpc/pseries: extract host bridge from pci_bus prior to bus removal
  i2c: sh7760: add IRQ check
  i2c: jz4780: add IRQ check
  i2c: cadence: add IRQ check
  net: thunderx: Fix unintentional sign extension issue
  mt7601u: fix always true expression
  mac80211: bail out if cipher schemes are invalid
  powerpc: iommu: fix build when neither PCI or IBMVIO is set
  ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls
  nfc: pn533: prevent potential memory corruption
  ALSA: core: remove redundant spin_lock pair in snd_card_disconnect
  powerpc/prom: Mark identical_pvr_fixup as __init
  net: lapbether: Prevent racing when checking whether the netif is running
  HID: plantronics: Workaround for double volume key presses
  x86/events/amd/iommu: Fix sysfs type mismatch
  HSI: core: fix resource leaks in hsi_add_client_from_dt()
  scsi: sni_53c710: Add IRQ check
  scsi: sun3x_esp: Add IRQ check
  scsi: jazz_esp: Add IRQ check
  media: dvb-usb-remote: fix dvb_usb_nec_rc_key_to_event type mismatch
  scsi: fcoe: Fix mismatched fcoe_wwn_from_mac declaration
  ata: libahci_platform: fix IRQ check
  sata_mv: add IRQ checks
  pata_ipx4xx_cf: fix IRQ check
  pata_arasan_cf: fix IRQ check
  media: m88rs6000t: avoid potential out-of-bounds reads on arrays
  media: omap4iss: return error code when omap4iss_get() failed
  media: vivid: fix assignment of dev->fbuf_out_flags
  ttyprintk: Add TTY hangup callback.
  tty: fix return value for unsupported ioctls
  USB: cdc-acm: fix unprivileged TIOCCSERIAL
  usb: gadget: r8a66597: Add missing null check on return from platform_get_resource
  crypto: qat - Fix a double free in adf_create_ring
  staging: rtl8192u: Fix potential infinite loop
  crypto: qat - fix error path in adf_isr_resource_alloc()
  mtd: require write permissions for locking and badblock ioctls
  fotg210-udc: Complete OUT requests on short packets
  fotg210-udc: Don't DMA more than the buffer can take
  fotg210-udc: Mask GRP2 interrupts we don't handle
  fotg210-udc: Remove a dubious condition leading to fotg210_done
  fotg210-udc: Fix EP0 IN requests bigger than two packets
  fotg210-udc: Fix DMA on EP0 for length > max packet size
  crypto: qat - don't release uninitialized resources
  usb: gadget: pch_udc: Check for DMA mapping error
  usb: gadget: pch_udc: Check if driver is present before calling ->setup()
  usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits()
  ARM: dts: exynos: correct PMIC interrupt trigger level on Snow
  ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250
  memory: gpmc: fix out of bounds read and dereference on gpmc_cs[]
  usb: gadget: pch_udc: Revert d3cb25a121 completely
  KVM: s390: split kvm_s390_real_to_abs
  ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices
  ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries
  ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries
  ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries
  drm/radeon: fix copy of uninitialized variable back to userspace
  cfg80211: scan: drop entry from hidden_list on overflow
  ipw2x00: potential buffer overflow in libipw_wx_set_encodeext()
  md: md_open returns -EBUSY when entering racing area
  md: factor out a mddev_find_locked helper from mddev_find
  tracing: Restructure trace_clock_global() to never block
  tracing: Map all PIDs to command lines
  tracing: Treat recording comm for idle task as a success
  tracing: Use strlcpy() instead of strcpy() in __trace_find_cmdline()
  misc: vmw_vmci: explicitly initialize vmci_datagram payload
  misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct
  misc: lis3lv02d: Fix false-positive WARN on various HP models
  FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR
  net/nfc: fix use-after-free llcp_sock_bind/connect
  hsr: use netdev_err() instead of WARN_ONCE()
  Bluetooth: verify AMP hci_chan before amp_destroy
  dm space map common: fix division bug in sm_ll_find_free_block()
  dm persistent data: packed struct should have an aligned() attribute too
  usb: gadget/function/f_fs string table fix for multiple languages
  usb: gadget: dummy_hcd: fix gpf in gadget_setup
  ext4: fix error code in ext4_commit_super
  ext4: fix check to prevent false positive report of incorrect used inodes
  ftrace: Handle commands when closing set_ftrace_filter file
  jffs2: check the validity of dstlen in jffs2_zlib_compress()
  powerpc: fix EDEADLOCK redefinition error in uapi/asm/errno.h
  powerpc/eeh: Fix EEH handling for hugepages in ioremap space.
  jffs2: Fix kasan slab-out-of-bounds problem
  openvswitch: fix stack OOB read while fragmenting IPv4 packets
  arm64/vdso: Discard .note.gnu.property sections in vDSO
  ALSA: sb: Fix two use after free in snd_sb_qsound_build
  ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer
  scsi: libfc: Fix a format specifier
  scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO response
  drm/amdgpu: fix NULL pointer dereference
  drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal
  media: gscpa/stv06xx: fix memory leak
  media: dvb-usb: fix memory leak in dvb_usb_adapter_init
  media: i2c: adv7511-v4l2: fix possible use-after-free in adv7511_remove()
  power: supply: s3c_adc_battery: fix possible use-after-free in s3c_adc_bat_remove()
  power: supply: generic-adc-battery: fix possible use-after-free in gab_remove()
  clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return
  media: em28xx: fix memory leak
  media: gspca/sq905.c: fix uninitialized variable
  media: media/saa7164: fix saa7164_encoder_register() memory leak bugs
  media: ite-cir: check for receive overflow
  scsi: target: pscsi: Fix warning in pscsi_complete_cmd()
  btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s
  phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove()
  intel_th: Consistency and off-by-one fix
  spi: omap-100k: Fix reference leak to master
  spi: dln2: Fix reference leak to master
  x86/build: Propagate $(CLANG_FLAGS) to $(REALMODE_FLAGS)
  PCI: PM: Do not read power state in pci_enable_device_flags()
  usb: gadget: uvc: add bInterval checking for HS mode
  staging: wimax/i2400m: fix byte-order issue
  fbdev: zero-fill colormap in fbcmap.c
  mmc: core: Set read only for SD cards with permanent write protect bit
  mmc: core: Do a power cycle when the CMD11 fails
  ecryptfs: fix kernel panic with null dev_name
  ACPI: custom_method: fix a possible memory leak
  ACPI: custom_method: fix potential use-after-free issue
  s390/disassembler: increase ebpf disasm buffer size
  platform/x86: thinkpad_acpi: Correct thermal sensor allocation
  USB: Add reset-resume quirk for WD19's Realtek Hub
  USB: Add LPM quirk for Lenovo ThinkPad USB-C Dock Gen2 Ethernet
  ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX
  iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd()
  net: usb: ax88179_178a: initialize local variables before use
  timerfd: Reject ALARM timerfds without CAP_WAKE_ALARM

 Conflicts:
	drivers/mmc/core/core.c
	drivers/usb/core/hub.c
	kernel/trace/trace.c

Change-Id: If654a926df1053a3dd1334679898ecc983161565
2021-07-24 19:27:53 +03:00
Mike Christie
56f516f885 scsi: iscsi: Add iscsi_cls_conn refcount helpers
[ Upstream commit b1d19e8c92cfb0ded180ef3376c20e130414e067 ]

There are a couple places where we could free the iscsi_cls_conn while it's
still in use. This adds some helpers to get/put a refcount on the struct
and converts an exiting user. Subsequent commits will then use the helpers
to fix 2 bugs in the eh code.

Link: https://lore.kernel.org/r/20210525181821.7617-11-michael.christie@oracle.com
Reviewed-by: Lee Duncan <lduncan@suse.com>
Signed-off-by: Mike Christie <michael.christie@oracle.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-07-20 16:22:41 +02:00
Arnd Bergmann
8b75d208f2 scsi: fcoe: Fix mismatched fcoe_wwn_from_mac declaration
[ Upstream commit 5b11c9d80bde81f6896cc85b23aeaa9502a704ed ]

An old cleanup changed the array size from MAX_ADDR_LEN to unspecified in
the declaration, but now gcc-11 warns about this:

drivers/scsi/fcoe/fcoe_ctlr.c:1972:37: error: argument 1 of type ‘unsigned char[32]’ with mismatched bound [-Werror=array-parameter=]
 1972 | u64 fcoe_wwn_from_mac(unsigned char mac[MAX_ADDR_LEN],
      |                       ~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~
In file included from /git/arm-soc/drivers/scsi/fcoe/fcoe_ctlr.c:33:
include/scsi/libfcoe.h:252:37: note: previously declared as ‘unsigned char[]’
  252 | u64 fcoe_wwn_from_mac(unsigned char mac[], unsigned int, unsigned int);
      |                       ~~~~~~~~~~~~~~^~~~~

Change the type back to what the function definition uses.

Link: https://lore.kernel.org/r/20210322164702.957810-1-arnd@kernel.org
Fixes: fdd78027fd ("[SCSI] fcoe: cleans up libfcoe.h and adds fcoe.h for fcoe module")
Signed-off-by: Arnd Bergmann <arnd@arndb.de>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-05-22 10:38:24 +02:00
Nathan Chancellor
ac306076ac Merge 4.4.247 into android-msm-wahoo-4.4
Changes in 4.4.247: (24 commits)
        btrfs: tree-checker: Enhance chunk checker to validate chunk profile
        btrfs: inode: Verify inode mode to avoid NULL pointer dereference
        HID: cypress: Support Varmilo Keyboards' media hotkeys
        Input: i8042 - allow insmod to succeed on devices without an i8042 controller
        HID: hid-sensor-hub: Fix issue with devices with no report ID
        x86/xen: don't unbind uninitialized lock_kicker_irq
        proc: don't allow async path resolution of /proc/self components
        dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size
        scsi: libiscsi: Fix NOP race condition
        scsi: target: iscsi: Fix cmd abort fabric stop race
        scsi: ufs: Fix race between shutdown and runtime resume flow
        bnxt_en: fix error return code in bnxt_init_board()
        video: hyperv_fb: Fix the cache type when mapping the VRAM
        bnxt_en: Release PCI regions when DMA mask setup fails during probe.
        IB/mthca: fix return value of error branch in mthca_init_cq()
        nfc: s3fwrn5: use signed integer for parsing GPIO numbers
        efivarfs: revert "fix memory leak in efivarfs_create()"
        perf probe: Fix to die_entrypc() returns error correctly
        USB: core: Change %pK for __user pointers to %px
        x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb
        USB: core: add endpoint-blacklist quirk
        USB: core: Fix regression in Hercules audio card
        btrfs: fix lockdep splat when reading qgroup config on mount
        Linux 4.4.247

Signed-off-by: Nathan Chancellor <natechancellor@gmail.com>

Conflicts:
	drivers/scsi/ufs/ufshcd.c
2020-12-02 16:20:34 -07:00
Lee Duncan
dd06960239 scsi: libiscsi: Fix NOP race condition
[ Upstream commit fe0a8a95e7134d0b44cd407bc0085b9ba8d8fe31 ]

iSCSI NOPs are sometimes "lost", mistakenly sent to the user-land iscsid
daemon instead of handled in the kernel, as they should be, resulting in a
message from the daemon like:

  iscsid: Got nop in, but kernel supports nop handling.

This can occur because of the new forward- and back-locks, and the fact
that an iSCSI NOP response can occur before processing of the NOP send is
complete. This can result in "conn->ping_task" being NULL in
iscsi_nop_out_rsp(), when the pointer is actually in the process of being
set.

To work around this, we add a new state to the "ping_task" pointer. In
addition to NULL (not assigned) and a pointer (assigned), we add the state
"being set", which is signaled with an INVALID pointer (using "-1").

Link: https://lore.kernel.org/r/20201106193317.16993-1-leeman.duncan@gmail.com
Reviewed-by: Mike Christie <michael.christie@oracle.com>
Signed-off-by: Lee Duncan <lduncan@suse.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-12-02 08:29:28 +01:00
Nathan Chancellor
58adc31dac Merge 4.4.241 into android-msm-wahoo-4.4
Changes in 4.4.241: (113 commits)
        ibmveth: Identify ingress large send packets.
        tipc: fix the skb_unshare() in tipc_buf_append()
        net/ipv4: always honour route mtu during forwarding
        r8169: fix data corruption issue on RTL8402
        ALSA: bebob: potential info leak in hwdep_read()
        mm/kasan: print name of mem[set,cpy,move]() caller in report
        mm/kasan: add API to check memory regions
        compiler.h, kasan: Avoid duplicating __read_once_size_nocheck()
        compiler.h: Add read_word_at_a_time() function.
        lib/strscpy: Shut up KASAN false-positives in strscpy()
        x86/mm/ptdump: Fix soft lockup in page table walker
        net: hdlc: In hdlc_rcv, check to make sure dev is an HDLC device
        net: hdlc_raw_eth: Clear the IFF_TX_SKB_SHARING flag after calling ether_setup
        nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download()
        tcp: fix to update snd_wl1 in bulk receiver fast path
        icmp: randomize the global rate limiter
        cifs: remove bogus debug code
        ima: Don't ignore errors from crypto_shash_update()
        EDAC/i5100: Fix error handling order in i5100_init_one()
        crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call
        media: Revert "media: exynos4-is: Add missed check for pinctrl_lookup_state()"
        media: m5mols: Check function pointer in m5mols_sensor_power
        media: omap3isp: Fix memleak in isp_probe
        crypto: omap-sham - fix digcnt register handling with export/import
        media: tc358743: initialize variable
        media: ti-vpe: Fix a missing check and reference count leak
        ath6kl: prevent potential array overflow in ath6kl_add_new_sta()
        ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb()
        wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680
        mwifiex: Do not use GFP_KERNEL in atomic context
        drm/gma500: fix error check
        scsi: qla4xxx: Fix an error handling path in 'qla4xxx_get_host_stats()'
        scsi: csiostor: Fix wrong return value in csio_hw_prep_fw()
        backlight: sky81452-backlight: Fix refcount imbalance on error
        VMCI: check return value of get_user_pages_fast() for errors
        tty: serial: earlycon dependency
        tty: hvcs: Don't NULL tty->driver_data until hvcs_cleanup()
        pty: do tty_flip_buffer_push without port->lock in pty_write
        drivers/virt/fsl_hypervisor: Fix error handling path
        video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error
        video: fbdev: sis: fix null ptr dereference
        HID: roccat: add bounds checking in kone_sysfs_write_settings()
        ath6kl: wmi: prevent a shift wrapping bug in ath6kl_wmi_delete_pstream_cmd()
        misc: mic: scif: Fix error handling path
        ALSA: seq: oss: Avoid mutex lock for a long-time ioctl
        quota: clear padding in v2r1_mem2diskdqb()
        net: enic: Cure the enic api locking trainwreck
        mfd: sm501: Fix leaks in probe()
        usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well
        nl80211: fix non-split wiphy information
        mwifiex: fix double free
        net: korina: fix kfree of rx/tx descriptor array
        IB/mlx4: Adjust delayed work when a dup is observed
        powerpc/pseries: Fix missing of_node_put() in rng_init()
        powerpc/icp-hv: Fix missing of_node_put() in success path
        mtd: lpddr: fix excessive stack usage with clang
        mtd: mtdoops: Don't write panic data twice
        ARM: 9007/1: l2c: fix prefetch bits init in L2X0_AUX_CTRL using DT values
        powerpc/tau: Use appropriate temperature sample interval
        powerpc/tau: Remove duplicated set_thresholds() call
        powerpc/tau: Disable TAU between measurements
        perf intel-pt: Fix "context_switch event has no tid" error
        kdb: Fix pager search for multi-line strings
        powerpc/perf/hv-gpci: Fix starting index value
        cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_reboot_notifier
        lib/crc32.c: fix trivial typo in preprocessor condition
        vfio/pci: Clear token on bypass registration failure
        Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume()
        Input: ep93xx_keypad - fix handling of platform_get_irq() error
        Input: omap4-keypad - fix handling of platform_get_irq() error
        Input: sun4i-ps2 - fix handling of platform_get_irq() error
        KVM: x86: emulating RDPID failure shall return #UD rather than #GP
        memory: omap-gpmc: Fix a couple off by ones
        memory: fsl-corenet-cf: Fix handling of platform_get_irq() error
        arm64: dts: zynqmp: Remove additional compatible string for i2c IPs
        powerpc/powernv/dump: Fix race while processing OPAL dump
        media: firewire: fix memory leak
        media: ati_remote: sanity check for both endpoints
        media: exynos4-is: Fix several reference count leaks due to pm_runtime_get_sync
        media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync
        media: exynos4-is: Fix a reference count leak
        media: bdisp: Fix runtime PM imbalance on error
        media: media/pci: prevent memory leak in bttv_probe
        media: uvcvideo: Ensure all probed info is returned to v4l2
        mmc: sdio: Check for CISTPL_VERS_1 buffer size
        media: saa7134: avoid a shift overflow
        ntfs: add check for mft record size in superblock
        PM: hibernate: remove the bogus call to get_gendisk() in software_resume()
        scsi: mvumi: Fix error return in mvumi_io_attach()
        scsi: target: core: Add CONTROL field for trace events
        usb: gadget: function: printer: fix use-after-free in __lock_acquire
        udf: Limit sparing table size
        udf: Avoid accessing uninitialized data on failed inode read
        ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs()
        misc: rtsx: Fix memory leak in rtsx_pci_probe
        reiserfs: only call unlock_new_inode() if I_NEW
        xfs: make sure the rt allocator doesn't run off the end
        usb: ohci: Default to per-port over-current protection
        Bluetooth: Only mark socket zapped after unlocking
        scsi: ibmvfc: Fix error return in ibmvfc_probe()
        brcmsmac: fix memory leak in wlc_phy_attach_lcnphy
        rtl8xxxu: prevent potential memory leak
        Fix use after free in get_capset_info callback.
        tty: ipwireless: fix error handling
        ipvs: Fix uninit-value in do_ip_vs_set_ctl()
        reiserfs: Fix memory leak in reiserfs_parse_options()
        brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach
        usb: core: Solve race condition in anchor cleanup functions
        ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n()
        net: korina: cast KSEG0 address to pointer in kfree
        usb: cdc-acm: add quirk to blacklist ETAS ES58X devices
        USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync().
        Linux 4.4.241

Signed-off-by: Nathan Chancellor <natechancellor@gmail.com>
2020-10-29 13:14:11 -07:00
Roman Bolshakov
a8e132b4eb scsi: target: core: Add CONTROL field for trace events
[ Upstream commit 7010645ba7256992818b518163f46bd4cdf8002a ]

trace-cmd report doesn't show events from target subsystem because
scsi_command_size() leaks through event format string:

  [target:target_sequencer_start] function scsi_command_size not defined
  [target:target_cmd_complete] function scsi_command_size not defined

Addition of scsi_command_size() to plugin_scsi.c in trace-cmd doesn't
help because an expression is used inside TP_printk(). trace-cmd event
parser doesn't understand minus sign inside [ ]:

  Error: expected ']' but read '-'

Rather than duplicating kernel code in plugin_scsi.c, provide a dedicated
field for CONTROL byte.

Link: https://lore.kernel.org/r/20200929125957.83069-1-r.bolshakov@yadro.com
Reviewed-by: Mike Christie <michael.christie@oracle.com>
Signed-off-by: Roman Bolshakov <r.bolshakov@yadro.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-10-29 09:03:09 +01:00
Nathan Chancellor
83ee7ecb56 Merge 4.4.215 into android-msm-wahoo-4.4
Changes in 4.4.215: (114 commits)
        x86/vdso: Use RDPID in preference to LSL when available
        KVM: x86: emulate RDPID
        ALSA: hda: Use scnprintf() for printing texts for sysfs/procfs
        ecryptfs: fix a memory leak bug in parse_tag_1_packet()
        ecryptfs: fix a memory leak bug in ecryptfs_init_messaging()
        ALSA: usb-audio: Apply sample rate quirk for Audioengine D1
        ubifs: Fix deadlock in concurrent bulk-read and writepage
        ext4: fix checksum errors with indexed dirs
        Btrfs: fix race between using extent maps and merging them
        btrfs: log message when rw remount is attempted with unclean tree-log
        padata: Remove broken queue flushing
        s390/time: Fix clk type in get_tod_clock
        hwmon: (pmbus/ltc2978) Fix PMBus polling of MFR_COMMON definitions.
        jbd2: move the clearing of b_modified flag to the journal_unmap_buffer()
        jbd2: do not clear the BH_Mapped flag when forgetting a metadata buffer
        btrfs: print message when tree-log replay starts
        scsi: qla2xxx: fix a potential NULL pointer dereference
        Revert "KVM: VMX: Add non-canonical check on writes to RTIT address MSRs"
        drm/gma500: Fixup fbdev stolen size usage evaluation
        brcmfmac: Fix use after free in brcmf_sdio_readframes()
        gianfar: Fix TX timestamping with a stacked DSA driver
        pinctrl: sh-pfc: sh7264: Fix CAN function GPIOs
        media: i2c: mt9v032: fix enum mbus codes and frame sizes
        media: sti: bdisp: fix a possible sleep-in-atomic-context bug in bdisp_device_run()
        efi/x86: Map the entire EFI vendor string before copying it
        MIPS: Loongson: Fix potential NULL dereference in loongson3_platform_init()
        uio: fix a sleep-in-atomic-context bug in uio_dmem_genirq_irqcontrol()
        usb: gadget: udc: fix possible sleep-in-atomic-context bugs in gr_probe()
        nfs: NFS_SWAP should depend on SWAP
        jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal
        tracing: Fix very unlikely race of registering two stat tracers
        ext4, jbd2: ensure panic when aborting with zero errno
        kconfig: fix broken dependency in randconfig-generated .config
        clk: qcom: rcg2: Don't crash if our parent can't be found; return an error
        drm/amdgpu: remove 4 set but not used variable in amdgpu_atombios_get_connector_info_from_object_table
        regulator: rk808: Lower log level on optional GPIOs being not available
        NFC: port100: Convert cpu_to_le16(le16_to_cpu(E1) + E2) to use le16_add_cpu().
        reiserfs: Fix spurious unlock in reiserfs_fill_super() error handling
        ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status
        b43legacy: Fix -Wcast-function-type
        ipw2x00: Fix -Wcast-function-type
        iwlegacy: Fix -Wcast-function-type
        rtlwifi: rtl_pci: Fix -Wcast-function-type
        orinoco: avoid assertion in case of NULL pointer
        ACPICA: Disassembler: create buffer fields in ACPI_PARSE_LOAD_PASS1
        scsi: aic7xxx: Adjust indentation in ahc_find_syncrate
        ARM: dts: r8a7779: Add device node for ARM global timer
        x86/vdso: Provide missing include file
        pinctrl: sh-pfc: sh7269: Fix CAN function GPIOs
        ALSA: sh: Fix compile warning wrt const
        tools lib api fs: Fix gcc9 stringop-truncation compilation error
        usbip: Fix unsafe unaligned pointer usage
        soc/tegra: fuse: Correct straps' address for older Tegra124 device trees
        rcu: Use WRITE_ONCE() for assignments to ->pprev for hlist_nulls
        Input: edt-ft5x06 - work around first register access error
        wan: ixp4xx_hss: fix compile-testing on 64-bit
        ASoC: atmel: fix build error with CONFIG_SND_ATMEL_SOC_DMA=m
        PCI: Don't disable bridge BARs when assigning bus resources
        driver core: Print device when resources present in really_probe()
        drm/nouveau: Fix copy-paste error in nouveau_fence_wait_uevent_handler
        drm/vmwgfx: prevent memory leak in vmw_cmdbuf_res_add
        iommu/arm-smmu-v3: Use WRITE_ONCE() when changing validity of an STE
        scsi: iscsi: Don't destroy session if there are outstanding connections
        cmd64x: potential buffer overflow in cmd64x_program_timings()
        ide: serverworks: potential overflow in svwks_set_pio_mode()
        remoteproc: Initialize rproc_class before use
        s390/ftrace: generate traced function stack frame
        ALSA: hda - Add docking station support for Lenovo Thinkpad T420s
        jbd2: switch to use jbd2_journal_abort() when failed to submit the commit record
        ARM: 8951/1: Fix Kexec compilation issue.
        hostap: Adjust indentation in prism2_hostapd_add_sta
        iwlegacy: ensure loop counter addr does not wrap and cause an infinite loop
        drm/nouveau/disp/nv50-: prevent oops when no channel method map provided
        trigger_next should increase position index
        radeon: insert 10ms sleep in dce5_crtc_load_lut
        ocfs2: fix a NULL pointer dereference when call ocfs2_update_inode_fsync_trans()
        lib/scatterlist.c: adjust indentation in __sg_alloc_table
        reiserfs: prevent NULL pointer dereference in reiserfs_insert_item()
        bcache: explicity type cast in bset_bkey_last()
        irqchip/gic-v3-its: Reference to its_invall_cmd descriptor when building INVALL
        microblaze: Prevent the overflow of the start
        brd: check and limit max_part par
        selinux: ensure we cleanup the internal AVC counters on error in avc_update()
        enic: prevent waking up stopped tx queues over watchdog reset
        floppy: check FDC index for errors before assigning it
        staging: android: ashmem: Disallow ashmem memory from being remapped
        staging: vt6656: fix sign of rx_dbm to bb_pre_ed_rssi.
        usb: uas: fix a plug & unplug racing
        USB: Fix novation SourceControl XL after suspend
        USB: hub: Don't record a connect-change event during reset-resume
        staging: rtl8188eu: Fix potential security hole
        staging: rtl8188eu: Fix potential overuse of kernel memory
        x86/mce/amd: Fix kobject lifetime
        tty: serial: imx: setup the correct sg entry for tx dma
        Revert "ipc,sem: remove uneeded sem_undo_list lock usage in exit_sem()"
        xhci: apply XHCI_PME_STUCK_QUIRK to Intel Comet Lake platforms
        VT_RESIZEX: get rid of field-by-field copyin
        vt: vt_ioctl: fix race in VT_RESIZEX
        KVM: nVMX: Don't emulate instructions in guest mode
        netfilter: xt_bpf: add overflow checks
        ext4: fix a data race in EXT4_I(inode)->i_disksize
        ext4: add cond_resched() to __ext4_find_entry()
        KVM: nVMX: Refactor IO bitmap checks into helper function
        KVM: nVMX: Check IO instruction VM-exit conditions
        KVM: apic: avoid calculating pending eoi from an uninitialized val
        Btrfs: fix btrfs_wait_ordered_range() so that it waits for all ordered extents
        scsi: Revert "RDMA/isert: Fix a recently introduced regression related to logout"
        scsi: Revert "target: iscsi: Wait for all commands to finish before freeing a session"
        ecryptfs: replace BUG_ON with error handling code
        ALSA: rawmidi: Avoid bit fields for state flags
        ALSA: seq: Avoid concurrent access to queue flags
        ALSA: seq: Fix concurrent access to queue current tick/time
        xen: Enable interrupts when calling _cond_resched()
        Linux 4.4.215

Signed-off-by: Nathan Chancellor <natechancellor@gmail.com>

Conflicts:
	drivers/usb/core/quirks.c
2020-03-02 20:27:15 -07:00
Bart Van Assche
fb78ebdfd7 scsi: Revert "target: iscsi: Wait for all commands to finish before freeing a session"
commit 807b9515b7d044cf77df31f1af9d842a76ecd5cb upstream.

Since commit e9d3009cb936 introduced a regression and since the fix for
that regression was not perfect, revert this commit.

Link: https://marc.info/?l=target-devel&m=158157054906195
Cc: Rahul Kundu <rahul.kundu@chelsio.com>
Cc: Mike Marciniszyn <mike.marciniszyn@intel.com>
Cc: Sagi Grimberg <sagi@grimberg.me>
Reported-by: Dakshaja Uppalapati <dakshaja@chelsio.com>
Fixes: e9d3009cb936 ("scsi: target: iscsi: Wait for all commands to finish before freeing a session")
Signed-off-by: Bart Van Assche <bvanassche@acm.org>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-02-28 15:39:17 +01:00
Nathan Chancellor
5988840eb2 Merge 4.4.208 into android-msm-wahoo-4.4
Changes in 4.4.208: (137 commits)
        btrfs: do not leak reloc root if we fail to read the fs root
        btrfs: handle ENOENT in btrfs_uuid_tree_iterate
        ALSA: hda/ca0132 - Keep power on during processing DSP response
        ALSA: hda/ca0132 - Avoid endless loop
        drm: mst: Fix query_payload ack reply struct
        iio: light: bh1750: Resolve compiler warning and make code more readable
        spi: Add call to spi_slave_abort() function when spidev driver is released
        staging: rtl8188eu: fix possible null dereference
        rtlwifi: prevent memory leak in rtl_usb_probe
        IB/iser: bound protection_sg size by data_sg size
        media: am437x-vpfe: Setting STD to current value is not an error
        media: i2c: ov2659: fix s_stream return value
        media: i2c: ov2659: Fix missing 720p register config
        media: ov6650: Fix stored frame format not in sync with hardware
        tools/power/cpupower: Fix initializer override in hsw_ext_cstates
        usb: renesas_usbhs: add suspend event support in gadget mode
        hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled
        regulator: max8907: Fix the usage of uninitialized variable in max8907_regulator_probe()
        media: flexcop-usb: fix NULL-ptr deref in flexcop_usb_transfer_init()
        samples: pktgen: fix proc_cmd command result check logic
        mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring
        media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid pixel format
        media: ti-vpe: vpe: fix a v4l2-compliance failure about frame sequence number
        media: ti-vpe: vpe: Make sure YUYV is set as default format
        extcon: sm5502: Reset registers during initialization
        x86/mm: Use the correct function type for native_set_fixmap()
        perf report: Add warning when libunwind not compiled in
        iio: adc: max1027: Reset the device at probe time
        Bluetooth: hci_core: fix init for HCI_USER_CHANNEL
        drm/gma500: fix memory disclosures due to uninitialized bytes
        x86/ioapic: Prevent inconsistent state when moving an interrupt
        arm64: psci: Reduce the waiting time for cpu_psci_cpu_kill()
        libata: Ensure ata_port probe has completed before detach
        pinctrl: sh-pfc: sh7734: Fix duplicate TCLK1_B
        bnx2x: Fix PF-VF communication over multi-cos queues.
        spi: img-spfi: fix potential double release
        rtlwifi: fix memory leak in rtl92c_set_fw_rsvdpagepkt()
        perf probe: Fix to find range-only function instance
        perf probe: Fix to list probe event with correct line number
        perf probe: Walk function lines in lexical blocks
        perf probe: Fix to probe an inline function which has no entry pc
        perf probe: Fix to show ranges of variables in functions without entry_pc
        perf probe: Fix to show inlined function callsite without entry_pc
        perf probe: Skip overlapped location on searching variables
        perf probe: Return a better scope DIE if there is no best scope
        perf probe: Fix to show calling lines of inlined functions
        perf probe: Skip end-of-sequence and non statement lines
        perf probe: Filter out instances except for inlined subroutine and subprogram
        ath10k: fix get invalid tx rate for Mesh metric
        media: pvrusb2: Fix oops on tear-down when radio support is not present
        media: si470x-i2c: add missed operations in remove
        EDAC/ghes: Fix grain calculation
        spi: pxa2xx: Add missed security checks
        ASoC: rt5677: Mark reg RT5677_PWR_ANLG2 as volatile
        parport: load lowlevel driver if ports not found
        cpufreq: Register drivers only after CPU devices have been registered
        x86/crash: Add a forward declaration of struct kimage
        spi: tegra20-slink: add missed clk_unprepare
        btrfs: don't prematurely free work in end_workqueue_fn()
        iwlwifi: check kasprintf() return value
        fbtft: Make sure string is NULL terminated
        crypto: sun4i-ss - Fix 64-bit size_t warnings on sun4i-ss-hash.c
        crypto: vmx - Avoid weird build failures
        libtraceevent: Fix memory leakage in copy_filter_type
        net: phy: initialise phydev speed and duplex sanely
        Revert "mmc: sdhci: Fix incorrect switch to HS mode"
        usb: xhci: Fix build warning seen with CONFIG_PM=n
        btrfs: do not call synchronize_srcu() in inode_tree_del
        btrfs: return error pointer from alloc_test_extent_buffer
        btrfs: abort transaction after failed inode updates in create_subvol
        Btrfs: fix removal logic of the tree mod log that leads to use-after-free issues
        ALSA: pcm: Avoid possible info leaks from PCM stream buffers
        af_packet: set defaule value for tmo
        fjes: fix missed check in fjes_acpi_add
        mod_devicetable: fix PHY module format
        net: hisilicon: Fix a BUG trigered by wrong bytes_compl
        net: nfc: nci: fix a possible sleep-in-atomic-context bug in nci_uart_tty_receive()
        net: qlogic: Fix error paths in ql_alloc_large_buffers()
        net: usb: lan78xx: Fix suspend/resume PHY register access error
        sctp: fully initialize v4 addr in some functions
        net: dst: Force 4-byte alignment of dst_metrics
        usbip: Fix error path of vhci_recv_ret_submit()
        USB: EHCI: Do not return -EPIPE when hub is disconnected
        platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128 bytes
        staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value
        ext4: check for directory entries too close to block end
        powerpc/irq: fix stack overflow verification
        mmc: sdhci-of-esdhc: fix P2020 errata handling
        perf probe: Fix to show function entry line as probe-able
        scsi: mpt3sas: Fix clear pending bit in ioctl status
        scsi: lpfc: Fix locking on mailbox command completion
        Input: atmel_mxt_ts - disable IRQ across suspend
        iommu/tegra-smmu: Fix page tables in > 4 GiB memory
        scsi: target: compare full CHAP_A Algorithm strings
        scsi: lpfc: Fix SLI3 hba in loop mode not discovering devices
        scsi: csiostor: Don't enable IRQs too early
        powerpc/pseries: Mark accumulate_stolen_time() as notrace
        dma-debug: add a schedule point in debug_dma_dump_mappings()
        clocksource/drivers/asm9260: Add a check for of_clk_get
        powerpc/security/book3s64: Report L1TF status in sysfs
        jbd2: Fix statistics for the number of logged blocks
        scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and WRITE(6)
        scsi: lpfc: Fix duplicate unreg_rpi error in port offline flow
        clk: qcom: Allow constant ratio freq tables for rcg
        irqchip/irq-bcm7038-l1: Enable parent IRQ if necessary
        irqchip: ingenic: Error out if IRQ domain creation failed
        fs/quota: handle overflows of sysctl fs.quota.* and report as unsigned long
        scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences
        scsi: ufs: fix potential bug which ends in system hang
        powerpc/pseries/cmm: Implement release() function for sysfs device
        powerpc/security: Fix wrong message when RFI Flush is disable
        clk: pxa: fix one of the pxa RTC clocks
        bcache: at least try to shrink 1 node in bch_mca_scan()
        HID: Improve Windows Precision Touchpad detection.
        ext4: work around deleting a file with i_nlink == 0 safely
        scsi: pm80xx: Fix for SATA device discovery
        scsi: target: iscsi: Wait for all commands to finish before freeing a session
        gpio: mpc8xxx: Don't overwrite default irq_set_type callback
        scripts/kallsyms: fix definitely-lost memory leak
        cdrom: respect device capabilities during opening action
        perf regs: Make perf_reg_name() return "unknown" instead of NULL
        libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
        s390/cpum_sf: Check for SDBT and SDB consistency
        ocfs2: fix passing zero to 'PTR_ERR' warning
        kernel: sysctl: make drop_caches write-only
        ALSA: hda - Downgrade error message for single-cmd fallback
        Make filldir[64]() verify the directory entry filename is valid
        filldir[64]: remove WARN_ON_ONCE() for bad directory entries
        net: davinci_cpdma: use dma_addr_t for DMA address
        netfilter: ebtables: compat: reject all padding in matches/watchers
        6pack,mkiss: fix possible deadlock
        netfilter: bridge: make sure to pull arp header in br_nf_forward_arp()
        net: icmp: fix data-race in cmp_global_allow()
        hrtimer: Annotate lockless access to timer->state
        mmc: sdhci: Update the tuning failed messages to pr_debug level
        tcp: do not send empty skb from tcp_write_xmit()
        Linux 4.4.208

Signed-off-by: Nathan Chancellor <natechancellor@gmail.com>

Conflicts:
	arch/arm64/kernel/psci.c
	kernel/time/hrtimer.c
2020-01-05 01:10:58 -07:00
Bart Van Assche
d008481a83 scsi: target: iscsi: Wait for all commands to finish before freeing a session
[ Upstream commit e9d3009cb936bd0faf0719f68d98ad8afb1e613b ]

The iSCSI target driver is the only target driver that does not wait for
ongoing commands to finish before freeing a session. Make the iSCSI target
driver wait for ongoing commands to finish before freeing a session. This
patch fixes the following KASAN complaint:

BUG: KASAN: use-after-free in __lock_acquire+0xb1a/0x2710
Read of size 8 at addr ffff8881154eca70 by task kworker/0:2/247

CPU: 0 PID: 247 Comm: kworker/0:2 Not tainted 5.4.0-rc1-dbg+ #6
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Workqueue: target_completion target_complete_ok_work [target_core_mod]
Call Trace:
 dump_stack+0x8a/0xd6
 print_address_description.constprop.0+0x40/0x60
 __kasan_report.cold+0x1b/0x33
 kasan_report+0x16/0x20
 __asan_load8+0x58/0x90
 __lock_acquire+0xb1a/0x2710
 lock_acquire+0xd3/0x200
 _raw_spin_lock_irqsave+0x43/0x60
 target_release_cmd_kref+0x162/0x7f0 [target_core_mod]
 target_put_sess_cmd+0x2e/0x40 [target_core_mod]
 lio_check_stop_free+0x12/0x20 [iscsi_target_mod]
 transport_cmd_check_stop_to_fabric+0xd8/0xe0 [target_core_mod]
 target_complete_ok_work+0x1b0/0x790 [target_core_mod]
 process_one_work+0x549/0xa40
 worker_thread+0x7a/0x5d0
 kthread+0x1bc/0x210
 ret_from_fork+0x24/0x30

Allocated by task 889:
 save_stack+0x23/0x90
 __kasan_kmalloc.constprop.0+0xcf/0xe0
 kasan_slab_alloc+0x12/0x20
 kmem_cache_alloc+0xf6/0x360
 transport_alloc_session+0x29/0x80 [target_core_mod]
 iscsi_target_login_thread+0xcd6/0x18f0 [iscsi_target_mod]
 kthread+0x1bc/0x210
 ret_from_fork+0x24/0x30

Freed by task 1025:
 save_stack+0x23/0x90
 __kasan_slab_free+0x13a/0x190
 kasan_slab_free+0x12/0x20
 kmem_cache_free+0x146/0x400
 transport_free_session+0x179/0x2f0 [target_core_mod]
 transport_deregister_session+0x130/0x180 [target_core_mod]
 iscsit_close_session+0x12c/0x350 [iscsi_target_mod]
 iscsit_logout_post_handler+0x136/0x380 [iscsi_target_mod]
 iscsit_response_queue+0x8de/0xbe0 [iscsi_target_mod]
 iscsi_target_tx_thread+0x27f/0x370 [iscsi_target_mod]
 kthread+0x1bc/0x210
 ret_from_fork+0x24/0x30

The buggy address belongs to the object at ffff8881154ec9c0
 which belongs to the cache se_sess_cache of size 352
The buggy address is located 176 bytes inside of
 352-byte region [ffff8881154ec9c0, ffff8881154ecb20)
The buggy address belongs to the page:
page:ffffea0004553b00 refcount:1 mapcount:0 mapping:ffff888101755400 index:0x0 compound_mapcount: 0
flags: 0x2fff000000010200(slab|head)
raw: 2fff000000010200 dead000000000100 dead000000000122 ffff888101755400
raw: 0000000000000000 0000000080130013 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected

Memory state around the buggy address:
 ffff8881154ec900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff8881154ec980: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb
>ffff8881154eca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                                             ^
 ffff8881154eca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff8881154ecb00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc

Cc: Mike Christie <mchristi@redhat.com>
Link: https://lore.kernel.org/r/20191113220508.198257-3-bvanassche@acm.org
Reviewed-by: Roman Bolshakov <r.bolshakov@yadro.com>
Signed-off-by: Bart Van Assche <bvanassche@acm.org>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-01-04 13:34:36 +01:00
Nathan Chancellor
788c16d896 Merge 4.4.196 into android-msm-wahoo-4.4
Changes in 4.4.196: (36 commits)
        video: ssd1307fb: Start page range at page_offset
        gpu: drm: radeon: Fix a possible null-pointer dereference in radeon_connector_set_property()
        ipmi_si: Only schedule continuously in the thread in maintenance mode
        clk: qoriq: Fix -Wunused-const-variable
        clk: sirf: Don't reference clk_init_data after registration
        powerpc/rtas: use device model APIs and serialization during LPM
        powerpc/futex: Fix warning: 'oldval' may be used uninitialized in this function
        powerpc/pseries/mobility: use cond_resched when updating device tree
        pinctrl: tegra: Fix write barrier placement in pmx_writel
        vfio_pci: Restore original state on release
        powerpc/64s/exception: machine check use correct cfar for late handler
        powerpc/pseries: correctly track irq state in default idle
        scsi: core: Reduce memory required for SCSI logging
        mfd: intel-lpss: Remove D3cold delay
        ARM: 8898/1: mm: Don't treat faults reported from cache maintenance as writes
        HID: apple: Fix stuck function keys when using FN
        security: smack: Fix possible null-pointer dereferences in smack_socket_sock_rcv_skb()
        fat: work around race with userspace's read via blockdev while mounting
        hypfs: Fix error number left in struct pointer member
        ocfs2: wait for recovering done after direct unlock request
        kmemleak: increase DEBUG_KMEMLEAK_EARLY_LOG_SIZE default to 16K
        ANDROID: binder: remove waitqueue when thread exits.
        ANDROID: binder: synchronize_rcu() when using POLLFREE.
        hso: fix NULL-deref on tty open
        ipv6: drop incoming packets having a v4mapped source address
        net: ipv4: avoid mixed n_redirects and rate_tokens usage
        net: qlogic: Fix memory leak in ql_alloc_large_buffers
        nfc: fix memory leak in llcp_sock_bind()
        sch_dsmark: fix potential NULL deref in dsmark_init()
        xen-netfront: do not use ~0U as error return value for xennet_fill_frags()
        net/rds: Fix error handling in rds_ib_add_one()
        sch_cbq: validate TCA_CBQ_WRROPT to avoid crash
        Smack: Don't ignore other bprm->unsafe flags if LSM_UNSAFE_PTRACE is set
        smack: use GFP_NOFS while holding inode_smack::smk_lock
        NFC: fix attrs checks in netlink interface
        Linux 4.4.196

Signed-off-by: Nathan Chancellor <natechancellor@gmail.com>

Conflicts:
	drivers/android/binder.c
2019-10-07 12:37:12 -07:00
Bart Van Assche
764029c0aa scsi: core: Reduce memory required for SCSI logging
[ Upstream commit dccc96abfb21dc19d69e707c38c8ba439bba7160 ]

The data structure used for log messages is so large that it can cause a
boot failure. Since allocations from that data structure can fail anyway,
use kmalloc() / kfree() instead of that data structure.

See also https://bugzilla.kernel.org/show_bug.cgi?id=204119.
See also commit ded85c193a ("scsi: Implement per-cpu logging buffer") # v4.0.

Reported-by: Jan Palus <jpalus@fastmail.com>
Cc: Christoph Hellwig <hch@lst.de>
Cc: Hannes Reinecke <hare@suse.com>
Cc: Johannes Thumshirn <jthumshirn@suse.de>
Cc: Ming Lei <ming.lei@redhat.com>
Cc: Jan Palus <jpalus@fastmail.com>
Signed-off-by: Bart Van Assche <bvanassche@acm.org>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2019-10-07 21:01:01 +02:00
Nathan Chancellor
c9a29e2bc4 Merge 4.4.190 into android-msm-wahoo-4.4
Changes in 4.4.190: (79 commits)
        usb: iowarrior: fix deadlock on disconnect
        sound: fix a memory leak bug
        x86/mm: Check for pfn instead of page in vmalloc_sync_one()
        x86/mm: Sync also unmappings in vmalloc_sync_all()
        mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy()
        perf db-export: Fix thread__exec_comm()
        usb: yurex: Fix use-after-free in yurex_delete
        can: peak_usb: fix potential double kfree_skb()
        netfilter: nfnetlink: avoid deadlock due to synchronous request_module
        iscsi_ibft: make ISCSI_IBFT dependson ACPI instead of ISCSI_IBFT_FIND
        mac80211: don't warn about CW params when not using them
        hwmon: (nct6775) Fix register address and added missed tolerance for nct6106
        cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init()
        s390/qdio: add sanity checks to the fast-requeue path
        ALSA: compress: Fix regression on compressed capture streams
        ALSA: compress: Prevent bypasses of set_params
        ALSA: compress: Be more restrictive about when a drain is allowed
        perf probe: Avoid calling freeing routine multiple times for same pointer
        ARM: davinci: fix sleep.S build error on ARMv4
        scsi: megaraid_sas: fix panic on loading firmware crashdump
        scsi: ibmvfc: fix WARN_ON during event pool release
        tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop
        perf/core: Fix creating kernel counters for PMUs that override event->cpu
        can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices
        can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices
        hwmon: (nct7802) Fix wrong detection of in4 presence
        ALSA: firewire: fix a memory leak bug
        mac80211: don't WARN on short WMM parameters from AP
        SMB3: Fix deadlock in validate negotiate hits reconnect
        smb3: send CAP_DFS capability during session setup
        mwifiex: fix 802.11n/WPA detection
        scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
        sh: kernel: hw_breakpoint: Fix missing break in switch statement
        usb: gadget: f_midi: fail if set_alt fails to allocate requests
        USB: gadget: f_midi: fixing a possible double-free in f_midi
        mm/memcontrol.c: fix use after free in mem_cgroup_iter()
        ALSA: hda - Fix a memory leak bug
        HID: holtek: test for sanity of intfdata
        HID: hiddev: avoid opening a disconnected device
        HID: hiddev: do cleanup in failure of opening a device
        Input: kbtab - sanity check for endpoint type
        Input: iforce - add sanity checks
        net: usb: pegasus: fix improper read if get_registers() fail
        xen/pciback: remove set but not used variable 'old_state'
        irqchip/irq-imx-gpcv2: Forward irq type to parent
        perf header: Fix divide by zero error if f_header.attr_size==0
        perf header: Fix use of unitialized value warning
        libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
        scsi: hpsa: correct scsi command status issue after reset
        ata: libahci: do not complain in case of deferred probe
        kbuild: modpost: handle KBUILD_EXTRA_SYMBOLS only for external modules
        IB/core: Add mitigation for Spectre V1
        ocfs2: remove set but not used variable 'last_hash'
        asm-generic: fix -Wtype-limits compiler warnings
        staging: comedi: dt3000: Fix signed integer overflow 'divider * base'
        staging: comedi: dt3000: Fix rounding up of timer divisor
        USB: core: Fix races in character device registration and deregistraion
        usb: cdc-acm: make sure a refcount is taken early enough
        USB: serial: option: add D-Link DWM-222 device ID
        USB: serial: option: Add support for ZTE MF871A
        USB: serial: option: add the BroadMobi BM818 card
        USB: serial: option: Add Motorola modem UARTs
        Backport minimal compiler_attributes.h to support GCC 9
        include/linux/module.h: copy __init/__exit attrs to init/cleanup_module
        arm64: compat: Allow single-byte watchpoints on all addresses
        Input: psmouse - fix build error of multiple definition
        asm-generic: default BUG_ON(x) to if(x)BUG()
        scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure
        RDMA: Directly cast the sockaddr union to sockaddr
        IB/mlx5: Make coding style more consistent
        x86/vdso: Remove direct HPET access through the vDSO
        iommu/amd: Move iommu_init_pci() to .init section
        x86/boot: Disable the address-of-packed-member compiler warning
        net/packet: fix race in tpacket_snd()
        xen/netback: Reset nr_frags before freeing skb
        net/mlx5e: Only support tx/rx pause setting for port owner
        sctp: fix the transport error_count check
        bonding: Add vlan tx offload to hw_enc_features
        Linux 4.4.190

Signed-off-by: Nathan Chancellor <natechancellor@gmail.com>

Conflicts:
	sound/core/compress_offload.c
2019-08-25 08:22:16 -07:00
Hannes Reinecke
483b26014f scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure
commit 023358b136d490ca91735ac6490db3741af5a8bd upstream.

Gcc-9 complains for a memset across pointer boundaries, which happens as
the code tries to allocate a flexible array on the stack.  Turns out we
cannot do this without relying on gcc-isms, so with this patch we'll embed
the fc_rport_priv structure into fcoe_rport, can use the normal
'container_of' outcast, and will only have to do a memset over one
structure.

Signed-off-by: Hannes Reinecke <hare@suse.de>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-08-25 10:53:04 +02:00
Nathan Chancellor
20037a92ca Merge 4.4.163 into android-msm-wahoo-4.4
Changes in 4.4.163: (116 commits)
        xfrm: Validate address prefix lengths in the xfrm selector.
        xfrm6: call kfree_skb when skb is toobig
        mac80211: Always report TX status
        cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
        ARM: 8799/1: mm: fix pci_ioremap_io() offset check
        xfrm: validate template mode
        mac80211_hwsim: do not omit multicast announce of first added radio
        Bluetooth: SMP: fix crash in unpairing
        pxa168fb: prepare the clock
        asix: Check for supported Wake-on-LAN modes
        ax88179_178a: Check for supported Wake-on-LAN modes
        lan78xx: Check for supported Wake-on-LAN modes
        sr9800: Check for supported Wake-on-LAN modes
        r8152: Check for supported Wake-on-LAN Modes
        smsc75xx: Check for Wake-on-LAN modes
        smsc95xx: Check for Wake-on-LAN modes
        perf/ring_buffer: Prevent concurent ring buffer access
        net: cxgb3_main: fix a missing-check bug
        KEYS: put keyring if install_session_keyring_to_cred() fails
        ipv6: suppress sparse warnings in IP6_ECN_set_ce()
        net: drop write-only stack variable
        ser_gigaset: use container_of() instead of detour
        tracing: Skip more functions when doing stack tracing of events
        ARM: dts: apq8064: add ahci ports-implemented mask
        x86/mm/pat: Prevent hang during boot when mapping pages
        radix-tree: fix radix_tree_iter_retry() for tagged iterators.
        af_iucv: Move sockaddr length checks to before accessing sa_family in bind and connect handlers
        net/mlx4_en: Resolve dividing by zero in 32-bit system
        ipv6: orphan skbs in reassembly unit
        um: Avoid longjmp/setjmp symbol clashes with libpthread.a
        sched/cgroup: Fix cgroup entity load tracking tear-down
        btrfs: don't create or leak aliased root while cleaning up orphans
        thermal: allow spear-thermal driver to be a module
        thermal: allow u8500-thermal driver to be a module
        tpm: fix: return rc when devm_add_action() fails
        x86/PCI: Mark Broadwell-EP Home Agent 1 as having non-compliant BARs
        aacraid: Start adapter after updating number of MSIX vectors
        perf/core: Don't leak event in the syscall error path
        usbvision: revert commit 588afcc1
        MIPS: Fix FCSR Cause bit handling for correct SIGFPE issue
        ASoC: ak4613: Enable cache usage to fix crashes on resume
        ASoC: wm8940: Enable cache usage to fix crashes on resume
        CIFS: handle guest access errors to Windows shares
        arm64: Fix potential race with hardware DBM in ptep_set_access_flags()
        xfrm: Clear sk_dst_cache when applying per-socket policy.
        scsi: Add STARGET_CREATED_REMOVE state to scsi_target_state
        sparc/pci: Refactor dev_archdata initialization into pci_init_dev_archdata
        sch_red: update backlog as well
        usb-storage: fix bogus hardware error messages for ATA pass-thru devices
        bpf: generally move prog destruction to RCU deferral
        drm/nouveau/fbcon: fix oops without fbdev emulation
        fuse: Dont call set_page_dirty_lock() for ITER_BVEC pages for async_dio
        ixgbevf: Fix handling of NAPI budget when multiple queues are enabled per vector
        net/mlx5e: Fix LRO modify
        net/mlx5e: Correctly handle RSS indirection table when changing number of channels
        ixgbe: fix RSS limit for X550
        ixgbe: Correct X550EM_x revision check
        ALSA: timer: Fix zero-division by continue of uninitialized instance
        vti6: flush x-netns xfrm cache when vti interface is removed
        gro: Allow tunnel stacking in the case of FOU/GUE
        brcmfmac: Fix glom_skb leak in brcmf_sdiod_recv_chain
        l2tp: hold socket before dropping lock in l2tp_ip{, 6}_recv()
        tty: serial: sprd: fix error return code in sprd_probe()
        video: fbdev: pxa3xx_gcu: fix error return code in pxa3xx_gcu_probe()
        sparc64 mm: Fix more TSB sizing issues
        gpu: host1x: fix error return code in host1x_probe()
        sparc64: Fix exception handling in UltraSPARC-III memcpy.
        gpio: msic: fix error return code in platform_msic_gpio_probe()
        usb: imx21-hcd: fix error return code in imx21_probe()
        usb: ehci-omap: fix error return code in ehci_hcd_omap_probe()
        usb: dwc3: omap: fix error return code in dwc3_omap_probe()
        spi/bcm63xx-hspi: fix error return code in bcm63xx_hsspi_probe()
        MIPS: Handle non word sized instructions when examining frame
        spi/bcm63xx: fix error return code in bcm63xx_spi_probe()
        spi: xlp: fix error return code in xlp_spi_probe()
        ASoC: spear: fix error return code in spdif_in_probe()
        PM / devfreq: tegra: fix error return code in tegra_devfreq_probe()
        bonding: avoid defaulting hard_header_len to ETH_HLEN on slave removal
        scsi: aacraid: Fix typo in blink status
        MIPS: microMIPS: Fix decoding of swsp16 instruction
        igb: Remove superfluous reset to PHY and page 0 selection
        MIPS: DEC: Fix an int-handler.S CPU_DADDI_WORKAROUNDS regression
        ARM: dts: imx53-qsb: disable 1.2GHz OPP
        fs/fat/fatent.c: add cond_resched() to fat_count_free_clusters()
        mtd: spi-nor: Add support for is25wp series chips
        perf tools: Disable parallelism for 'make clean'
        bridge: do not add port to router list when receives query with source 0.0.0.0
        net: bridge: remove ipv6 zero address check in mcast queries
        ipv6: mcast: fix a use-after-free in inet6_mc_check
        ipv6/ndisc: Preserve IPv6 control buffer if protocol error handlers are called
        net/ipv6: Fix index counter for unicast addresses in in6_dump_addrs
        net: sched: gred: pass the right attribute to gred_change_table_def()
        net: socket: fix a missing-check bug
        net: stmmac: Fix stmmac_mdio_reset() when building stmmac as modules
        r8169: fix NAPI handling under high load
        sctp: fix race on sctp_id2asoc
        net: drop skb on failure in ip_check_defrag()
        vhost: Fix Spectre V1 vulnerability
        rtnetlink: Disallow FDB configuration for non-Ethernet device
        mremap: properly flush TLB before releasing the page
        crypto: shash - Fix a sleep-in-atomic bug in shash_setkey_unaligned
        ahci: don't ignore result code of ahci_reset_controller()
        cachefiles: fix the race between cachefiles_bury_object() and rmdir(2)
        ptp: fix Spectre v1 vulnerability
        RDMA/ucma: Fix Spectre v1 vulnerability
        IB/ucm: Fix Spectre v1 vulnerability
        cdc-acm: correct counting of UART states in serial state notification
        usb: gadget: storage: Fix Spectre v1 vulnerability
        USB: fix the usbfs flag sanitization for control transfers
        Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15IGM
        sched/fair: Fix throttle_list starvation with low CFS quota
        x86/percpu: Fix this_cpu_read()
        cpuidle: Do not access cpuidle_devices when !CONFIG_CPU_IDLE
        l2tp: hold tunnel socket when handling control frames in l2tp_ip and l2tp_ip6
        x86/time: Correct the attribute on jiffies' definition
        Linux 4.4.163

Signed-off-by: Nathan Chancellor <natechancellor@gmail.com>
2018-11-10 10:32:23 -07:00
Ewan D. Milne
d896b9f298 scsi: Add STARGET_CREATED_REMOVE state to scsi_target_state
[ Upstream commit f9279c968c257ee39b0d7bd2571a4d231a67bcc1 ]

The addition of the STARGET_REMOVE state had the side effect of
introducing a race condition that can cause a crash.

scsi_target_reap_ref_release() checks the starget->state to
see if it still in STARGET_CREATED, and if so, skips calling
transport_remove_device() and device_del(), because the starget->state
is only set to STARGET_RUNNING after scsi_target_add() has called
device_add() and transport_add_device().

However, if an rport loss occurs while a target is being scanned,
it can happen that scsi_remove_target() will be called while the
starget is still in the STARGET_CREATED state.  In this case, the
starget->state will be set to STARGET_REMOVE, and as a result,
scsi_target_reap_ref_release() will take the wrong path.  The end
result is a panic:

[ 1255.356653] Oops: 0000 [#1] SMP
[ 1255.360154] Modules linked in: x86_pkg_temp_thermal kvm_intel kvm irqbypass crc32c_intel ghash_clmulni_i
[ 1255.393234] CPU: 5 PID: 149 Comm: kworker/u96:4 Tainted: G        W       4.11.0+ #8
[ 1255.401879] Hardware name: Dell Inc. PowerEdge R320/08VT7V, BIOS 2.0.22 11/19/2013
[ 1255.410327] Workqueue: scsi_wq_6 fc_scsi_scan_rport [scsi_transport_fc]
[ 1255.417720] task: ffff88060ca8c8c0 task.stack: ffffc900048a8000
[ 1255.424331] RIP: 0010:kernfs_find_ns+0x13/0xc0
[ 1255.429287] RSP: 0018:ffffc900048abbf0 EFLAGS: 00010246
[ 1255.435123] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 1255.443083] RDX: 0000000000000000 RSI: ffffffff8188d659 RDI: 0000000000000000
[ 1255.451043] RBP: ffffc900048abc10 R08: 0000000000000000 R09: 0000012433fe0025
[ 1255.459005] R10: 0000000025e5a4b5 R11: 0000000025e5a4b5 R12: ffffffff8188d659
[ 1255.466972] R13: 0000000000000000 R14: ffff8805f55e5088 R15: 0000000000000000
[ 1255.474931] FS:  0000000000000000(0000) GS:ffff880616b40000(0000) knlGS:0000000000000000
[ 1255.483959] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1255.490370] CR2: 0000000000000068 CR3: 0000000001c09000 CR4: 00000000000406e0
[ 1255.498332] Call Trace:
[ 1255.501058]  kernfs_find_and_get_ns+0x31/0x60
[ 1255.505916]  sysfs_unmerge_group+0x1d/0x60
[ 1255.510498]  dpm_sysfs_remove+0x22/0x60
[ 1255.514783]  device_del+0xf4/0x2e0
[ 1255.518577]  ? device_remove_file+0x19/0x20
[ 1255.523241]  attribute_container_class_device_del+0x1a/0x20
[ 1255.529457]  transport_remove_classdev+0x4e/0x60
[ 1255.534607]  ? transport_add_class_device+0x40/0x40
[ 1255.540046]  attribute_container_device_trigger+0xb0/0xc0
[ 1255.546069]  transport_remove_device+0x15/0x20
[ 1255.551025]  scsi_target_reap_ref_release+0x25/0x40
[ 1255.556467]  scsi_target_reap+0x2e/0x40
[ 1255.560744]  __scsi_scan_target+0xaa/0x5b0
[ 1255.565312]  scsi_scan_target+0xec/0x100
[ 1255.569689]  fc_scsi_scan_rport+0xb1/0xc0 [scsi_transport_fc]
[ 1255.576099]  process_one_work+0x14b/0x390
[ 1255.580569]  worker_thread+0x4b/0x390
[ 1255.584651]  kthread+0x109/0x140
[ 1255.588251]  ? rescuer_thread+0x330/0x330
[ 1255.592730]  ? kthread_park+0x60/0x60
[ 1255.596815]  ret_from_fork+0x29/0x40
[ 1255.600801] Code: 24 08 48 83 42 40 01 5b 41 5c 5d c3 66 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 66 66 90
[ 1255.621876] RIP: kernfs_find_ns+0x13/0xc0 RSP: ffffc900048abbf0
[ 1255.628479] CR2: 0000000000000068
[ 1255.632756] ---[ end trace 34a69ba0477d036f ]---

Fix this by adding another scsi_target state STARGET_CREATED_REMOVE
to distinguish this case.

Fixes: f05795d3d771 ("scsi: Add intermediate STARGET_REMOVE state to scsi_target_state")
Reported-by: David Jeffery <djeffery@redhat.com>
Signed-off-by: Ewan D. Milne <emilne@redhat.com>
Cc: <stable@vger.kernel.org>
Reviewed-by: Laurence Oberman <loberman@redhat.com>
Tested-by: Laurence Oberman <loberman@redhat.com>
Reviewed-by: Johannes Thumshirn <jthumshirn@suse.de>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2018-11-10 07:41:37 -08:00
Hannes Reinecke
f1fcb9d292 scsi: sg: disable SET_FORCE_LOW_DMA
commit 745dfa0d8ec26b24f3304459ff6e9eacc5c8351b upstream.

The ioctl SET_FORCE_LOW_DMA has never worked since the initial git
check-in, and the respective setting is nowadays handled correctly. So
disable it entirely.

Signed-off-by: Hannes Reinecke <hare@suse.com>
Reviewed-by: Johannes Thumshirn <jthumshirn@suse.de>
Tested-by: Johannes Thumshirn <jthumshirn@suse.de>
Reviewed-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-01-23 19:50:14 +01:00
Nathan Chancellor
e8abf4dcf6 Merge 4.4.106 into android-msm-wahoo-4.4-oreo-mr1
Changes in 4.4.106: (106 commits)
        can: ti_hecc: Fix napi poll return value for repoll
        can: kvaser_usb: free buf in error paths
        can: kvaser_usb: Fix comparison bug in kvaser_usb_read_bulk_callback()
        can: kvaser_usb: ratelimit errors if incomplete messages are received
        can: kvaser_usb: cancel urb on -EPIPE and -EPROTO
        can: ems_usb: cancel urb on -EPIPE and -EPROTO
        can: esd_usb2: cancel urb on -EPIPE and -EPROTO
        can: usb_8dev: cancel urb on -EPIPE and -EPROTO
        virtio: release virtio index when fail to device_register
        hv: kvp: Avoid reading past allocated blocks from KVP file
        isa: Prevent NULL dereference in isa_bus driver callbacks
        scsi: libsas: align sata_device's rps_resp on a cacheline
        efi: Move some sysfs files to be read-only by root
        ASN.1: fix out-of-bounds read when parsing indefinite length item
        ASN.1: check for error from ASN1_OP_END__ACT actions
        X.509: reject invalid BIT STRING for subjectPublicKey
        x86/PCI: Make broadcom_postcore_init() check acpi_disabled
        ALSA: pcm: prevent UAF in snd_pcm_info
        ALSA: seq: Remove spurious WARN_ON() at timer check
        ALSA: usb-audio: Fix out-of-bound error
        ALSA: usb-audio: Add check return value for usb_string()
        iommu/vt-d: Fix scatterlist offset handling
        s390: fix compat system call table
        kdb: Fix handling of kallsyms_symbol_next() return value
        drm: extra printk() wrapper macros
        drm/exynos: gem: Drop NONCONTIG flag for buffers allocated without IOMMU
        media: dvb: i2c transfers over usb cannot be done from stack
        arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
        KVM: VMX: remove I/O port 0x80 bypass on Intel hosts
        arm64: fpsimd: Prevent registers leaking from dead tasks
        ARM: BUG if jumping to usermode address in kernel mode
        ARM: avoid faulting on qemu
        scsi: storvsc: Workaround for virtual DVD SCSI version
        thp: reduce indentation level in change_huge_pmd()
        thp: fix MADV_DONTNEED vs. numa balancing race
        mm: drop unused pmdp_huge_get_and_clear_notify()
        Revert "drm/armada: Fix compile fail"
        Revert "spi: SPI_FSL_DSPI should depend on HAS_DMA"
        Revert "s390/kbuild: enable modversions for symbols exported from asm"
        vti6: Don't report path MTU below IPV6_MIN_MTU.
        ARM: OMAP2+: gpmc-onenand: propagate error on initialization failure
        x86/hpet: Prevent might sleep splat on resume
        selftest/powerpc: Fix false failures for skipped tests
        module: set __jump_table alignment to 8
        ARM: OMAP2+: Fix device node reference counts
        ARM: OMAP2+: Release device node after it is no longer needed.
        gpio: altera: Use handle_level_irq when configured as a level_high
        HID: chicony: Add support for another ASUS Zen AiO keyboard
        usb: gadget: configs: plug memory leak
        USB: gadgetfs: Fix a potential memory leak in 'dev_config()'
        kvm: nVMX: VMCLEAR should not cause the vCPU to shut down
        libata: drop WARN from protocol error in ata_sff_qc_issue()
        workqueue: trigger WARN if queue_delayed_work() is called with NULL @wq
        scsi: lpfc: Fix crash during Hardware error recovery on SLI3 adapters
        irqchip/crossbar: Fix incorrect type of register size
        KVM: nVMX: reset nested_run_pending if the vCPU is going to be reset
        arm: KVM: Survive unknown traps from guests
        arm64: KVM: Survive unknown traps from guests
        spi_ks8995: fix "BUG: key accdaa28 not in .data!"
        bnx2x: prevent crash when accessing PTP with interface down
        bnx2x: fix possible overrun of VFPF multicast addresses array
        bnx2x: do not rollback VF MAC/VLAN filters we did not configure
        ipv6: reorder icmpv6_init() and ip6_mr_init()
        crypto: s5p-sss - Fix completing crypto request in IRQ handler
        i2c: riic: fix restart condition
        zram: set physical queue limits to avoid array out of bounds accesses
        netfilter: don't track fragmented packets
        axonram: Fix gendisk handling
        drm/amd/amdgpu: fix console deadlock if late init failed
        powerpc/powernv/ioda2: Gracefully fail if too many TCE levels requested
        EDAC, i5000, i5400: Fix use of MTR_DRAM_WIDTH macro
        EDAC, i5000, i5400: Fix definition of NRECMEMB register
        kbuild: pkg: use --transform option to prefix paths in tar
        mac80211_hwsim: Fix memory leak in hwsim_new_radio_nl()
        route: also update fnhe_genid when updating a route cache
        route: update fnhe_expires for redirect when the fnhe exists
        lib/genalloc.c: make the avail variable an atomic_long_t
        dynamic-debug-howto: fix optional/omitted ending line number to be LARGE instead of 0
        NFS: Fix a typo in nfs_rename()
        sunrpc: Fix rpc_task_begin trace point
        block: wake up all tasks blocked in get_request()
        sparc64/mm: set fields in deferred pages
        sctp: do not free asoc when it is already dead in sctp_sendmsg
        sctp: use the right sk after waking up from wait_buf sleep
        atm: horizon: Fix irq release error
        jump_label: Invoke jump_label_test() via early_initcall()
        xfrm: Copy policy family in clone_policy
        IB/mlx4: Increase maximal message size under UD QP
        IB/mlx5: Assign send CQ and recv CQ of UMR QP
        afs: Connect up the CB.ProbeUuid
        ipvlan: fix ipv6 outbound device
        audit: ensure that 'audit=1' actually enables audit for PID 1
        ipmi: Stop timers before cleaning up the module
        s390: always save and restore all registers on context switch
        more bio_map_user_iov() leak fixes
        tipc: fix memory leak in tipc_accept_from_sock()
        rds: Fix NULL pointer dereference in __rds_rdma_map
        sit: update frag_off info
        packet: fix crash in fanout_demux_rollover()
        net/packet: fix a race in packet_bind() and packet_notifier()
        Revert "x86/efi: Build our own page table structures"
        Revert "x86/efi: Hoist page table switching code into efi_call_virt()"
        Revert "x86/mm/pat: Ensure cpa->pfn only contains page frame numbers"
        arm: KVM: Fix VTTBR_BADDR_MASK BUG_ON off-by-one
        usb: gadget: ffs: Forbid usb_ep_alloc_request from sleeping
        Linux 4.4.106

Signed-off-by: Nathan Chancellor <natechancellor@gmail.com>

Conflicts:
	arch/arm/include/asm/kvm_arm.h
2017-12-16 08:34:22 -07:00
Huacai Chen
7e0091c295 scsi: libsas: align sata_device's rps_resp on a cacheline
commit c2e8fbf908afd81ad502b567a6639598f92c9b9d upstream.

The rps_resp buffer in ata_device is a DMA target, but it isn't
explicitly cacheline aligned. Due to this, adjacent fields can be
overwritten with stale data from memory on non-coherent architectures.
As a result, the kernel is sometimes unable to communicate with an SATA
device behind a SAS expander.

Fix this by ensuring that the rps_resp buffer is cacheline aligned.

This issue is similar to that fixed by Commit 84bda12af3 ("libata:
align ap->sector_buf") and Commit 4ee34ea3a12396f35b26 ("libata: Align
ata_device's id on a cacheline").

Signed-off-by: Huacai Chen <chenhc@lemote.com>
Signed-off-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2017-12-16 10:33:48 +01:00
Thierry Strudel
ad09c07fbf Merged linux-4.4.60 into android-msm-wahoo-4.4
Linux 4.4.60
    padata: avoid race in reordering
    blk: Ensure users for current->bio_list can see the full list.
    blk: improve order of bio handling in generic_make_request()
    power: reset: at91-poweroff: timely shutdown LPDDR memories
    KVM: kvm_io_bus_unregister_dev() should never fail
    rtc: s35390a: improve irq handling
    rtc: s35390a: implement reset routine as suggested by the reference
    rtc: s35390a: make sure all members in the output are set
    rtc: s35390a: fix reading out alarm
    MIPS: Lantiq: Fix cascaded IRQ setup
    mm, hugetlb: use pte_present() instead of pmd_present() in follow_huge_pmd()
    drm/radeon: Override fpfn for all VRAM placements in radeon_evict_flags
    KVM: x86: clear bus pointer when destroyed
    USB: fix linked-list corruption in rh_call_control()
    tty/serial: atmel: fix TX path in atmel_console_write()
    tty/serial: atmel: fix race condition (TX+DMA)
    ACPI: Do not create a platform_device for IOAPIC/IOxAPIC
    ACPI: Fix incompatibility with mcount-based function graph tracing
    ASoC: atmel-classd: fix audio clock rate
    ALSA: hda - fix a problem for lineout on a Dell AIO machine
    ALSA: seq: Fix race during FIFO resize
    scsi: libsas: fix ata xfer length
    scsi: sg: check length passed to SG_NEXT_CMD_LEN
    scsi: mpt3sas: fix hang on ata passthrough commands
    xen/setup: Don't relocate p2m over existing one
    libceph: force GFP_NOIO for socket allocations
Linux 4.4.59
    sched/rt: Add a missing rescheduling point
    fscrypt: remove broken support for detecting keyring key revocation
    metag/ptrace: Reject partial NT_METAG_RPIPE writes
    metag/ptrace: Provide default TXSTATUS for short NT_PRSTATUS
    metag/ptrace: Preserve previous registers for short regset write
    sparc/ptrace: Preserve previous registers for short regset write
    mips/ptrace: Preserve previous registers for short regset write
    h8300/ptrace: Fix incorrect register transfer count
    c6x/ptrace: Remove useless PTRACE_SETREGSET implementation
    pinctrl: qcom: Don't clear status bit on irq_unmask
    virtio_balloon: init 1st buffer in stats vq
    xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder
    xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL replay_window
    xfrm: policy: init locks early
Linux 4.4.58
    crypto: algif_hash - avoid zero-sized array
    fbcon: Fix vc attr at deinit
    serial: 8250_pci: Detach low-level driver during PCI error recovery
    ACPI / blacklist: Make Dell Latitude 3350 ethernet work
    ACPI / blacklist: add _REV quirks for Dell Precision 5520 and 3520
    uvcvideo: uvc_scan_fallback() for webcams with broken chain
    s390/zcrypt: Introduce CEX6 toleration
    block: allow WRITE_SAME commands with the SG_IO ioctl
    vfio/spapr: Postpone allocation of userspace version of TCE table
    PCI: Do any VF BAR updates before enabling the BARs
    PCI: Ignore BAR updates on virtual functions
    PCI: Update BARs using property bits appropriate for type
    PCI: Don't update VF BARs while VF memory space is enabled
    PCI: Decouple IORESOURCE_ROM_ENABLE and PCI_ROM_ADDRESS_ENABLE
    PCI: Add comments about ROM BAR updating
    PCI: Remove pci_resource_bar() and pci_iov_resource_bar()
    PCI: Separate VF BAR updates from standard BAR updates
    x86/hyperv: Handle unknown NMIs on one CPU when unknown_nmi_panic
    igb: add i211 to i210 PHY workaround
    igb: Workaround for igb i210 firmware issue
    xen: do not re-use pirq number cached in pci device msi msg data
    xfs: clear _XBF_PAGES from buffers when readahead page
    USB: usbtmc: add missing endpoint sanity check
    nl80211: fix dumpit error path RTNL deadlocks
    xfs: fix up xfs_swap_extent_forks inline extent handling
    xfs: don't allow di_size with high bit set
    libceph: don't set weight to IN when OSD is destroyed
    raid10: increment write counter after bio is split
    cpufreq: Restore policy min/max limits on CPU online
    ARM: dts: at91: sama5d2: add dma properties to UART nodes
    ARM: at91: pm: cpu_idle: switch DDR to power-down mode
    iommu/vt-d: Fix NULL pointer dereference in device_to_iommu
    xen/acpi: upload PM state from init-domain to Xen
    mmc: sdhci: Do not disable interrupts while waiting for clock
    ext4: mark inode dirty after converting inline directory
    parport: fix attempt to write duplicate procfiles
    iio: hid-sensor-trigger: Change get poll value function order to avoid sensor properties losing after resume from S3
    iio: adc: ti_am335x_adc: fix fifo overrun recovery
    mmc: ushc: fix NULL-deref at probe
    uwb: hwa-rc: fix NULL-deref at probe
    uwb: i1480-dfu: fix NULL-deref at probe
    usb: hub: Fix crash after failure to read BOS descriptor
    usb: musb: cppi41: don't check early-TX-interrupt for Isoch transfer
    USB: wusbcore: fix NULL-deref at probe
    USB: idmouse: fix NULL-deref at probe
    USB: lvtest: fix NULL-deref at probe
    USB: uss720: fix NULL-deref at probe
    usb-core: Add LINEAR_FRAME_INTR_BINTERVAL USB quirk
    usb: gadget: f_uvc: Fix SuperSpeed companion descriptor's wBytesPerInterval
    ACM gadget: fix endianness in notifications
    USB: serial: qcserial: add Dell DW5811e
    USB: serial: option: add Quectel UC15, UC20, EC21, and EC25 modems
    ALSA: hda - Adding a group of pin definition to fix headset problem
    ALSA: ctxfi: Fix the incorrect check of dma_set_mask() call
    ALSA: seq: Fix racy cell insertions during snd_seq_pool_done()
    Input: sur40 - validate number of endpoints before using them
    Input: kbtab - validate number of endpoints before using them
    Input: cm109 - validate number of endpoints before using them
    Input: yealink - validate number of endpoints before using them
    Input: hanwang - validate number of endpoints before using them
    Input: ims-pcu - validate number of endpoints before using them
    Input: iforce - validate number of endpoints before using them
    Input: i8042 - add noloop quirk for Dell Embedded Box PC 3000
    Input: elan_i2c - add ASUS EeeBook X205TA special touchpad fw
    tcp: initialize icsk_ack.lrcvtime at session start time
    socket, bpf: fix sk_filter use after free in sk_clone_lock
    ipv4: provide stronger user input validation in nl_fib_input()
    net: bcmgenet: remove bcmgenet_internal_phy_setup()
    net/mlx5e: Count LRO packets correctly
    net/mlx5: Increase number of max QPs in default profile
    net: unix: properly re-increment inflight counter of GC discarded candidates
    amd-xgbe: Fix jumbo MTU processing on newer hardware
    net: properly release sk_frag.page
    net: bcmgenet: Do not suspend PHY if Wake-on-LAN is enabled
    net/openvswitch: Set the ipv6 source tunnel key address attribute correctly
 Linux 4.4.57
    ext4: fix fencepost in s_first_meta_bg validation
    percpu: acquire pcpu_lock when updating pcpu_nr_empty_pop_pages
    gfs2: Avoid alignment hole in struct lm_lockname
    isdn/gigaset: fix NULL-deref at probe
    target: Fix VERIFY_16 handling in sbc_parse_cdb
    scsi: libiscsi: add lock around task lists to fix list corruption regression
    scsi: lpfc: Add shutdown method for kexec
    target/pscsi: Fix TYPE_TAPE + TYPE_MEDIMUM_CHANGER export
    md/raid1/10: fix potential deadlock
    powerpc/boot: Fix zImage TOC alignment
    cpufreq: Fix and clean up show_cpuinfo_cur_freq()
    perf/core: Fix event inheritance on fork()
    give up on gcc ilog2() constant optimizations
    kernek/fork.c: allocate idle task for a CPU always on its local node
    hv_netvsc: use skb_get_hash() instead of a homegrown implementation
    tpm_tis: Use devm_free_irq not free_irq
    drm/amdgpu: add missing irq.h include
    s390/pci: fix use after free in dma_init
    KVM: PPC: Book3S PR: Fix illegal opcode emulation
    xen/qspinlock: Don't kick CPU if IRQ is not initialized
    Drivers: hv: avoid vfree() on crash
    Drivers: hv: balloon: don't crash when memory is added in non-sorted order
    pinctrl: cherryview: Do not mask all interrupts in probe
    ACPI / video: skip evaluating _DOD when it does not exist
    cxlflash: Increase cmd_per_lun for better throughput
    crypto: mcryptd - Fix load failure
    crypto: cryptd - Assign statesize properly
    crypto: ghash-clmulni - Fix load failure
    USB: don't free bandwidth_mutex too early
    usb: core: hub: hub_port_init lock controller instead of bus

Bug: 62730977
Change-Id: Id5edc4c2c4cf300956116a6011eeef04264bb82a
Signed-off-by: Thierry Strudel <tstrudel@google.com>
2017-09-20 14:16:49 -07:00
Thierry Strudel
1bfb0526f6 Merge branch 'android-msm-8998-4.4-common' into android-msm-wahoo-4.4
Conflicts:
	Makefile
	arch/arm64/configs/wahoo_defconfig
	arch/arm64/include/asm/cpufeature.h
	arch/arm64/kernel/sleep.S
	arch/arm64/kernel/vmlinux.lds.S
	arch/arm64/mm/fault.c
	drivers/android/binder.c
	drivers/firmware/efi/arm-init.c
	drivers/firmware/efi/efi.c
	drivers/input/keyboard/gpio_keys.c
	drivers/input/misc/Makefile
	drivers/input/misc/vl53L0/Makefile
	drivers/input/misc/vl53L0/inc/vl53l010_api.h
	drivers/input/misc/vl53L0/inc/vl53l010_device.h
	drivers/input/misc/vl53L0/inc/vl53l010_strings.h
	drivers/input/misc/vl53L0/inc/vl53l010_tuning.h
	drivers/input/misc/vl53L0/inc/vl53l0_api.h
	drivers/input/misc/vl53L0/inc/vl53l0_api_calibration.h
	drivers/input/misc/vl53L0/inc/vl53l0_api_core.h
	drivers/input/misc/vl53L0/inc/vl53l0_api_histogram.h
	drivers/input/misc/vl53L0/inc/vl53l0_api_ranging.h
	drivers/input/misc/vl53L0/inc/vl53l0_api_strings.h
	drivers/input/misc/vl53L0/inc/vl53l0_def.h
	drivers/input/misc/vl53L0/inc/vl53l0_device.h
	drivers/input/misc/vl53L0/inc/vl53l0_interrupt_threshold_settings.h
	drivers/input/misc/vl53L0/inc/vl53l0_platform.h
	drivers/input/misc/vl53L0/inc/vl53l0_platform_log.h
	drivers/input/misc/vl53L0/inc/vl53l0_tuning.h
	drivers/input/misc/vl53L0/inc/vl53l0_types.h
	drivers/input/misc/vl53L0/src/vl53l010_api.c
	drivers/input/misc/vl53L0/src/vl53l010_tuning.c
	drivers/input/misc/vl53L0/src/vl53l0_api.c
	drivers/input/misc/vl53L0/src/vl53l0_api_calibration.c
	drivers/input/misc/vl53L0/src/vl53l0_api_core.c
	drivers/input/misc/vl53L0/src/vl53l0_api_histogram.c
	drivers/input/misc/vl53L0/src/vl53l0_api_ranging.c
	drivers/input/misc/vl53L0/src/vl53l0_api_strings.c
	drivers/input/misc/vl53L0/src/vl53l0_i2c_platform.c
	drivers/input/misc/vl53L0/src/vl53l0_platform.c
	drivers/input/misc/vl53L0/src/vl53l0_port_i2c.c
	drivers/input/misc/vl53L0/stmvl53l0-cci.h
	drivers/input/misc/vl53L0/stmvl53l0-i2c.h
	drivers/input/misc/vl53L0/stmvl53l0.h
	drivers/input/misc/vl53L0/stmvl53l0_module-cci.c
	drivers/input/misc/vl53L0/stmvl53l0_module-i2c.c
	drivers/input/misc/vl53L0/stmvl53l0_module.c
	drivers/input/touchscreen/Makefile
	drivers/leds/leds-qpnp.c
	drivers/media/platform/msm/camera_v2/isp/msm_isp_stats_util.c
	drivers/media/platform/msm/camera_v2/msm.c
	drivers/pinctrl/qcom/pinctrl-msm.c
	drivers/platform/msm/ipa/ipa_v3/ipa_client.c
	drivers/platform/msm/mhi/mhi_ssr.c
	drivers/power/supply/qcom/qpnp-smb2.c
	drivers/power/supply/qcom/smb-lib.c
	drivers/power/supply/qcom/smb-lib.h
	drivers/soc/qcom/icnss.c
	drivers/soc/qcom/qdsp6v2/audio_notifier.c
	drivers/soc/qcom/service-notifier.c
	drivers/video/fbdev/msm/mdss_panel.h
	fs/exec.c
	fs/ext4/inode.c
	fs/ext4/readpage.c
	fs/namei.c
	fs/sdcardfs/derived_perm.c
	fs/sdcardfs/file.c
	fs/sdcardfs/inode.c
	fs/sdcardfs/lookup.c
	fs/sdcardfs/main.c
	fs/sdcardfs/multiuser.h
	fs/sdcardfs/packagelist.c
	fs/sdcardfs/sdcardfs.h
	fs/sdcardfs/super.c
	fs/utimes.c
	include/linux/string.h
	lib/kstrtox.c
	lib/string.c
	net/ipv4/tcp_ipv4.c
	net/unix/af_unix.c
	sound/soc/codecs/wcd934x/wcd934x-mbhc.h
	sound/soc/msm/msm8998.c

Change-Id: I918ebad22a5f81d48be07bd2bc2ac435ed9acb0a
Signed-off-by: Thierry Strudel <tstrudel@google.com>
2017-04-07 12:27:45 -07:00
Chris Leech
246760c61d scsi: libiscsi: add lock around task lists to fix list corruption regression
commit 6f8830f5bbab16e54f261de187f3df4644a5b977 upstream.

There's a rather long standing regression from the commit "libiscsi:
Reduce locking contention in fast path"

Depending on iSCSI target behavior, it's possible to hit the case in
iscsi_complete_task where the task is still on a pending list
(!list_empty(&task->running)).  When that happens the task is removed
from the list while holding the session back_lock, but other task list
modification occur under the frwd_lock.  That leads to linked list
corruption and eventually a panicked system.

Rather than back out the session lock split entirely, in order to try
and keep some of the performance gains this patch adds another lock to
maintain the task lists integrity.

Major enterprise supported kernels have been backing out the lock split
for while now, thanks to the efforts at IBM where a lab setup has the
most reliable reproducer I've seen on this issue.  This patch has been
tested there successfully.

Signed-off-by: Chris Leech <cleech@redhat.com>
Fixes: 659743b02c ("[SCSI] libiscsi: Reduce locking contention in fast path")
Reported-by: Prashantha Subbarao <psubbara@us.ibm.com>
Reviewed-by: Guilherme G. Piccoli <gpiccoli@linux.vnet.ibm.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2017-03-26 12:13:19 +02:00
Blagovest Kolenichev
a4b9c109c2 Merge tag v4.4.55 into branch 'msm-4.4'
refs/heads/tmp-28ec98b:
  Linux 4.4.55
  ext4: don't BUG when truncating encrypted inodes on the orphan list
  dm: flush queued bios when process blocks to avoid deadlock
  nfit, libnvdimm: fix interleave set cookie calculation
  s390/kdump: Use "LINUX" ELF note name instead of "CORE"
  KVM: s390: Fix guest migration for huge guests resulting in panic
  mvsas: fix misleading indentation
  serial: samsung: Continue to work if DMA request fails
  USB: serial: io_ti: fix information leak in completion handler
  USB: serial: io_ti: fix NULL-deref in interrupt callback
  USB: iowarrior: fix NULL-deref in write
  USB: iowarrior: fix NULL-deref at probe
  USB: serial: omninet: fix reference leaks at open
  USB: serial: safe_serial: fix information leak in completion handler
  usb: host: xhci-plat: Fix timeout on removal of hot pluggable xhci controllers
  usb: host: xhci-dbg: HCIVERSION should be a binary number
  usb: gadget: function: f_fs: pass companion descriptor along
  usb: dwc3: gadget: make Set Endpoint Configuration macros safe
  usb: gadget: dummy_hcd: clear usb_gadget region before registration
  powerpc: Emulation support for load/store instructions on LE
  tracing: Add #undef to fix compile error
  MIPS: Netlogic: Fix CP0_EBASE redefinition warnings
  MIPS: DEC: Avoid la pseudo-instruction in delay slots
  mm: memcontrol: avoid unused function warning
  cpmac: remove hopeless #warning
  MIPS: ralink: Remove unused rt*_wdt_reset functions
  MIPS: ralink: Cosmetic change to prom_init().
  mtd: pmcmsp: use kstrndup instead of kmalloc+strncpy
  MIPS: Update lemote2f_defconfig for CPU_FREQ_STAT change
  MIPS: ip22: Fix ip28 build for modern gcc
  MIPS: Update ip27_defconfig for SCSI_DH change
  MIPS: ip27: Disable qlge driver in defconfig
  MIPS: Update defconfigs for NF_CT_PROTO_DCCP/UDPLITE change
  crypto: improve gcc optimization flags for serpent and wp512
  USB: serial: digi_acceleport: fix OOB-event processing
  USB: serial: digi_acceleport: fix OOB data sanity check
  Linux 4.4.54
  drivers: hv: Turn off write permission on the hypercall page
  fat: fix using uninitialized fields of fat_inode/fsinfo_inode
  libceph: use BUG() instead of BUG_ON(1)
  drm/i915/dsi: Do not clear DPOUNIT_CLOCK_GATE_DISABLE from vlv_init_display_clock_gating
  fakelb: fix schedule while atomic
  drm/atomic: fix an error code in mode_fixup()
  drm/ttm: Make sure BOs being swapped out are cacheable
  drm/edid: Add EDID_QUIRK_FORCE_8BPC quirk for Rotel RSX-1058
  drm/ast: Fix AST2400 POST failure without BMC FW or VBIOS
  drm/ast: Call open_key before enable_mmio in POST code
  drm/ast: Fix test for VGA enabled
  drm/amdgpu: add more cases to DCE11 possible crtc mask setup
  mac80211: flush delayed work when entering suspend
  xtensa: move parse_tag_fdt out of #ifdef CONFIG_BLK_DEV_INITRD
  pwm: pca9685: Fix period change with same duty cycle
  nlm: Ensure callback code also checks that the files match
  target: Fix NULL dereference during LUN lookup + active I/O shutdown
  ceph: remove req from unsafe list when unregistering it
  ktest: Fix child exit code processing
  IB/srp: Fix race conditions related to task management
  IB/srp: Avoid that duplicate responses trigger a kernel bug
  IB/IPoIB: Add destination address when re-queue packet
  IB/ipoib: Fix deadlock between rmmod and set_mode
  mnt: Tuck mounts under others instead of creating shadow/side mounts.
  net: mvpp2: fix DMA address calculation in mvpp2_txq_inc_put()
  s390: use correct input data address for setup_randomness
  s390: make setup_randomness work
  s390: TASK_SIZE for kernel threads
  s390/dcssblk: fix device size calculation in dcssblk_direct_access()
  s390/qdio: clear DSCI prior to scanning multiple input queues
  Bluetooth: Add another AR3012 04ca:3018 device
  KVM: VMX: use correct vmcs_read/write for guest segment selector/base
  KVM: s390: Disable dirty log retrieval for UCONTROL guests
  serial: 8250_pci: Add MKS Tenta SCOM-0800 and SCOM-0801 cards
  tty: n_hdlc: get rid of racy n_hdlc.tbuf
  TTY: n_hdlc, fix lockdep false positive
  Linux 4.4.53
  scsi: lpfc: Correct WQ creation for pagesize
  MIPS: IP22: Fix build error due to binutils 2.25 uselessnes.
  MIPS: IP22: Reformat inline assembler code to modern standards.
  powerpc/xmon: Fix data-breakpoint
  dmaengine: ipu: Make sure the interrupt routine checks all interrupts.
  bcma: use (get|put)_device when probing/removing device driver
  md linear: fix a race between linear_add() and linear_congested()
  rtc: sun6i: Switch to the external oscillator
  rtc: sun6i: Add some locking
  NFSv4: fix getacl ERANGE for some ACL buffer sizes
  NFSv4: fix getacl head length estimation
  NFSv4: Fix memory and state leak in _nfs4_open_and_get_state
  nfsd: special case truncates some more
  nfsd: minor nfsd_setattr cleanup
  rtlwifi: rtl8192c-common: Fix "BUG: KASAN:
  rtlwifi: Fix alignment issues
  gfs2: Add missing rcu locking for glock lookup
  rdma_cm: fail iwarp accepts w/o connection params
  RDMA/core: Fix incorrect structure packing for booleans
  Drivers: hv: util: Backup: Fix a rescind processing issue
  Drivers: hv: util: Fcopy: Fix a rescind processing issue
  Drivers: hv: util: kvp: Fix a rescind processing issue
  hv: init percpu_list in hv_synic_alloc()
  hv: allocate synic pages for all present CPUs
  usb: gadget: udc: fsl: Add missing complete function.
  usb: host: xhci: plat: check hcc_params after add hcd
  usb: musb: da8xx: Remove CPPI 3.0 quirk and methods
  w1: ds2490: USB transfer buffers need to be DMAable
  w1: don't leak refcount on slave attach failure in w1_attach_slave_device()
  can: usb_8dev: Fix memory leak of priv->cmd_msg_buffer
  iio: pressure: mpl3115: do not rely on structure field ordering
  iio: pressure: mpl115: do not rely on structure field ordering
  arm/arm64: KVM: Enforce unconditional flush to PoC when mapping to stage-2
  fuse: add missing FR_FORCE
  crypto: testmgr - Pad aes_ccm_enc_tv_template vector
  ath9k: use correct OTP register offsets for the AR9340 and AR9550
  ath9k: fix race condition in enabling/disabling IRQs
  ath5k: drop bogus warning on drv_set_key with unsupported cipher
  target: Fix multi-session dynamic se_node_acl double free OOPs
  target: Obtain se_node_acl->acl_kref during get_initiator_node_acl
  samples/seccomp: fix 64-bit comparison macros
  ext4: return EROFS if device is r/o and journal replay is needed
  ext4: preserve the needs_recovery flag when the journal is aborted
  ext4: fix inline data error paths
  ext4: fix data corruption in data=journal mode
  ext4: trim allocation requests to group size
  ext4: do not polute the extents cache while shifting extents
  ext4: Include forgotten start block on fallocate insert range
  loop: fix LO_FLAGS_PARTSCAN hang
  block/loop: fix race between I/O and set_status
  jbd2: don't leak modified metadata buffers on an aborted journal
  Fix: Disable sys_membarrier when nohz_full is enabled
  sd: get disk reference in sd_check_events()
  scsi: use 'scsi_device_from_queue()' for scsi_dh
  scsi: aacraid: Reorder Adapter status check
  scsi: storvsc: properly set residual data length on errors
  scsi: storvsc: properly handle SRB_ERROR when sense message is present
  scsi: storvsc: use tagged SRB requests if supported by the device
  dm stats: fix a leaked s->histogram_boundaries array
  dm cache: fix corruption seen when using cache > 2TB
  ipc/shm: Fix shmat mmap nil-page protection
  mm: do not access page->mapping directly on page_endio
  mm: vmpressure: fix sending wrong events on underflow
  mm/page_alloc: fix nodes for reclaim in fast path
  iommu/vt-d: Tylersburg isoch identity map check is done too late.
  iommu/vt-d: Fix some macros that are incorrectly specified in intel-iommu
  regulator: Fix regulator_summary for deviceless consumers
  staging: rtl: fix possible NULL pointer dereference
  ALSA: hda - Fix micmute hotkey problem for a lenovo AIO machine
  ALSA: hda - Add subwoofer support for Dell Inspiron 17 7000 Gaming
  ALSA: seq: Fix link corruption by event error handling
  ALSA: ctxfi: Fallback DMA mask to 32bit
  ALSA: timer: Reject user params with too small ticks
  ALSA: hda - fix Lewisburg audio issue
  ALSA: hda/realtek - Cannot adjust speaker's volume on a Dell AIO
  ARM: dts: at91: Enable DMA on sama5d2_xplained console
  ARM: dts: at91: Enable DMA on sama5d4_xplained console
  ARM: at91: define LPDDR types
  media: fix dm1105.c build error
  uvcvideo: Fix a wrong macro
  am437x-vpfe: always assign bpp variable
  MIPS: Handle microMIPS jumps in the same way as MIPS32/MIPS64 jumps
  MIPS: Calculate microMIPS ra properly when unwinding the stack
  MIPS: Fix is_jump_ins() handling of 16b microMIPS instructions
  MIPS: Fix get_frame_info() handling of microMIPS function size
  MIPS: Prevent unaligned accesses during stack unwinding
  MIPS: Clear ISA bit correctly in get_frame_info()
  MIPS: Lantiq: Keep ethernet enabled during boot
  MIPS: OCTEON: Fix copy_from_user fault handling for large buffers
  MIPS: BCM47XX: Fix button inversion for Asus WL-500W
  MIPS: Fix special case in 64 bit IP checksumming.
  samples: move mic/mpssd example code from Documentation
  Linux 4.4.52
  kvm: vmx: ensure VMCS is current while enabling PML
  Revert "usb: chipidea: imx: enable CI_HDRC_SET_NON_ZERO_TTHA"
  rtlwifi: rtl_usb: Fix for URB leaking when doing ifconfig up/down
  block: fix double-free in the failure path of cgwb_bdi_init()
  goldfish: Sanitize the broken interrupt handler
  x86/platform/goldfish: Prevent unconditional loading
  USB: serial: ark3116: fix register-accessor error handling
  USB: serial: opticon: fix CTS retrieval at open
  USB: serial: spcp8x5: fix modem-status handling
  USB: serial: ftdi_sio: fix line-status over-reporting
  USB: serial: ftdi_sio: fix extreme low-latency setting
  USB: serial: ftdi_sio: fix modem-status error handling
  USB: serial: cp210x: add new IDs for GE Bx50v3 boards
  USB: serial: mos7840: fix another NULL-deref at open
  tty: serial: msm: Fix module autoload
  net: socket: fix recvmmsg not returning error from sock_error
  ip: fix IP_CHECKSUM handling
  irda: Fix lockdep annotations in hashbin_delete().
  dccp: fix freeing skb too early for IPV6_RECVPKTINFO
  packet: Do not call fanout_release from atomic contexts
  packet: fix races in fanout_add()
  net/llc: avoid BUG_ON() in skb_orphan()
  blk-mq: really fix plug list flushing for nomerge queues
  rtc: interface: ignore expired timers when enqueuing new timers
  rtlwifi: rtl_usb: Fix missing entry in USB driver's private data
  Linux 4.4.51
  mmc: core: fix multi-bit bus width without high-speed mode
  bcache: Make gc wakeup sane, remove set_task_state()
  ntb_transport: Pick an unused queue
  NTB: ntb_transport: fix debugfs_remove_recursive
  printk: use rcuidle console tracepoint
  ARM: 8658/1: uaccess: fix zeroing of 64-bit get_user()
  futex: Move futex_init() to core_initcall
  drm/dp/mst: fix kernel oops when turning off secondary monitor
  drm/radeon: Use mode h/vdisplay fields to hide out of bounds HW cursor
  Input: elan_i2c - add ELAN0605 to the ACPI table
  Fix missing sanity check in /dev/sg
  scsi: don't BUG_ON() empty DMA transfers
  fuse: fix use after free issue in fuse_dev_do_read()
  siano: make it work again with CONFIG_VMAP_STACK
  vfs: fix uninitialized flags in splice_to_pipe()
  Linux 4.4.50
  l2tp: do not use udp_ioctl()
  ping: fix a null pointer dereference
  packet: round up linear to header len
  net: introduce device min_header_len
  sit: fix a double free on error path
  sctp: avoid BUG_ON on sctp_wait_for_sndbuf
  mlx4: Invoke softirqs after napi_reschedule
  macvtap: read vnet_hdr_size once
  tun: read vnet_hdr_sz once
  tcp: avoid infinite loop in tcp_splice_read()
  ipv6: tcp: add a missing tcp_v6_restore_cb()
  ip6_gre: fix ip6gre_err() invalid reads
  netlabel: out of bound access in cipso_v4_validate()
  ipv4: keep skb->dst around in presence of IP options
  net: use a work queue to defer net_disable_timestamp() work
  tcp: fix 0 divide in __tcp_select_window()
  ipv6: pointer math error in ip6_tnl_parse_tlv_enc_lim()
  ipv6: fix ip6_tnl_parse_tlv_enc_lim()
  can: Fix kernel panic at security_sock_rcv_skb

Conflicts:
	drivers/scsi/sd.c
	drivers/usb/gadget/function/f_fs.c
	drivers/usb/host/xhci-plat.c

CRs-Fixed: 2023471
Change-Id: I396051a8de30271af77b3890d4b19787faa1c31e
Signed-off-by: Blagovest Kolenichev <bkolenichev@codeaurora.org>
2017-03-23 03:22:14 -07:00
Hannes Reinecke
33950b56d2 scsi: use 'scsi_device_from_queue()' for scsi_dh
commit 857de6e00778738dc3d61f75acbac35bdc48e533 upstream.

The device handler needs to check if a given queue belongs to a scsi
device; only then does it make sense to attach a device handler.

[mkp: dropped flags]

Signed-off-by: Hannes Reinecke <hare@suse.com>
Reviewed-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2017-03-12 06:37:26 +01:00
Eric Biggers
cecd3c8a04 block: expose inline encryption support through a request queue flag
Define a request queue flag QUEUE_FLAG_INLINECRYPT to indicate that the
underlying block device supports inline encryption, and enable it in the
ufs-qcom driver (via an intermediate flag on the Scsi_Host) when the ICE
support is compiled in and the ICE hardware has been detected.
Filesystems will be able to use this flag to decide whether they should
allow the use of inline encryption.

(Of course, this comes with the important caveat that there isn't yet a
proper API to actually *use* inline encryption, besides PFK and
dm-req-crypt, but that's arguably a separate issue.  Also, note that we
can't simply make PFK depend on SCSI_UFS_QCOM_ICE because the
dependencies already go in the opposite direction: SCSI_UFS_QCOM_ICE
depends on CRYPTO_DEV_QCOM_ICE which depends on PFK, plus it really
would be SCSI_UFS_QCOM_ICE *or* MMC_SDHCI_MSM_ICE that is needed,
depending on the hardware.)

Change-Id: Ie1bb4cf9ece21e1ba7e9b4298031df2a2fe7e94b
Bug: 33042316
Signed-off-by: Eric Biggers <ebiggers@google.com>
2017-02-14 17:26:14 -08:00
Runmin Wang
9cc5c789d9 Merge remote-tracking branch 'msm4.4/tmp-da9a92f' into msm-4.4
* origin/tmp-da9a92f:
  arm64: kaslr: increase randomization granularity
  arm64: relocatable: deal with physically misaligned kernel images
  arm64: don't map TEXT_OFFSET bytes below the kernel if we can avoid it
  arm64: kernel: replace early 64-bit literal loads with move-immediates
  arm64: introduce mov_q macro to move a constant into a 64-bit register
  arm64: kernel: perform relocation processing from ID map
  arm64: kernel: use literal for relocated address of __secondary_switched
  arm64: kernel: don't export local symbols from head.S
  arm64: simplify kernel segment mapping granularity
  arm64: cover the .head.text section in the .text segment mapping
  arm64: move early boot code to the .init segment
  arm64: use 'segment' rather than 'chunk' to describe mapped kernel regions
  arm64: mm: Mark .rodata as RO
  Linux 4.4.16
  ovl: verify upper dentry before unlink and rename
  drm/i915: Revert DisplayPort fast link training feature
  tmpfs: fix regression hang in fallocate undo
  tmpfs: don't undo fallocate past its last page
  crypto: qat - make qat_asym_algs.o depend on asn1 headers
  xen/acpi: allow xen-acpi-processor driver to load on Xen 4.7
  File names with trailing period or space need special case conversion
  cifs: dynamic allocation of ntlmssp blob
  Fix reconnect to not defer smb3 session reconnect long after socket reconnect
  53c700: fix BUG on untagged commands
  s390: fix test_fp_ctl inline assembly contraints
  scsi: fix race between simultaneous decrements of ->host_failed
  ovl: verify upper dentry in ovl_remove_and_whiteout()
  ovl: Copy up underlying inode's ->i_mode to overlay inode
  ARM: mvebu: fix HW I/O coherency related deadlocks
  ARM: dts: armada-38x: fix MBUS_ID for crypto SRAM on Armada 385 Linksys
  ARM: sunxi/dt: make the CHIP inherit from allwinner,sun5i-a13
  ALSA: hda: add AMD Stoney PCI ID with proper driver caps
  ALSA: hda - fix use-after-free after module unload
  ALSA: ctl: Stop notification after disconnection
  ALSA: pcm: Free chmap at PCM free callback, too
  ALSA: hda/realtek - add new pin definition in alc225 pin quirk table
  ALSA: hda - fix read before array start
  ALSA: hda - Add PCI ID for Kabylake-H
  ALSA: hda/realtek: Add Lenovo L460 to docking unit fixup
  ALSA: timer: Fix negative queue usage by racy accesses
  ALSA: echoaudio: Fix memory allocation
  ALSA: au88x0: Fix calculation in vortex_wtdma_bufshift()
  ALSA: hda / realtek - add two more Thinkpad IDs (5050,5053) for tpt460 fixup
  ALSA: hda - Fix the headset mic jack detection on Dell machine
  ALSA: dummy: Fix a use-after-free at closing
  hwmon: (dell-smm) Cache fan_type() calls and change fan detection
  hwmon: (dell-smm) Disallow fan_type() calls on broken machines
  hwmon: (dell-smm) Restrict fan control and serial number to CAP_SYS_ADMIN by default
  tty/vt/keyboard: fix OOB access in do_compute_shiftstate()
  tty: vt: Fix soft lockup in fbcon cursor blink timer.
  iio:ad7266: Fix probe deferral for vref
  iio:ad7266: Fix support for optional regulators
  iio:ad7266: Fix broken regulator error handling
  iio: accel: kxsd9: fix the usage of spi_w8r8()
  staging: iio: accel: fix error check
  iio: hudmidity: hdc100x: fix incorrect shifting and scaling
  iio: humidity: hdc100x: fix IIO_TEMP channel reporting
  iio: humidity: hdc100x: correct humidity integration time mask
  iio: proximity: as3935: fix buffer stack trashing
  iio: proximity: as3935: remove triggered buffer processing
  iio: proximity: as3935: correct IIO_CHAN_INFO_RAW output
  iio: light apds9960: Add the missing dev.parent
  iio:st_pressure: fix sampling gains (bring inline with ABI)
  iio: Fix error handling in iio_trigger_attach_poll_func
  xen/balloon: Fix declared-but-not-defined warning
  perf/x86: Fix undefined shift on 32-bit kernels
  memory: omap-gpmc: Fix omap gpmc EXTRADELAY timing
  drm/vmwgfx: Fix error paths when mapping framebuffer
  drm/vmwgfx: Delay pinning fbdev framebuffer until after mode set
  drm/vmwgfx: Check pin count before attempting to move a buffer
  drm/vmwgfx: Work around mode set failure in 2D VMs
  drm/vmwgfx: Add an option to change assumed FB bpp
  drm/ttm: Make ttm_bo_mem_compat available
  drm: atmel-hlcdc: actually disable scaling when no scaling is required
  drm: make drm_atomic_set_mode_prop_for_crtc() more reliable
  drm: add missing drm_mode_set_crtcinfo call
  drm/i915: Update CDCLK_FREQ register on BDW after changing cdclk frequency
  drm/i915: Update ifdeffery for mutex->owner
  drm/i915: Refresh cached DP port register value on resume
  drm/i915/ilk: Don't disable SSC source if it's in use
  drm/nouveau/disp/sor/gf119: select correct sor when poking training pattern
  drm/nouveau: fix for disabled fbdev emulation
  drm/nouveau/fbcon: fix out-of-bounds memory accesses
  drm/nouveau/gr/gf100-: update sm error decoding from gk20a nvgpu headers
  drm/nouveau/disp/sor/gf119: both links use the same training register
  virtio_balloon: fix PFN format for virtio-1
  drm/dp/mst: Always clear proposed vcpi table for port.
  drm/amdkfd: destroy dbgmgr in notifier release
  drm/amdkfd: unbind only existing processes
  ubi: Make recover_peb power cut aware
  drm/amdgpu/gfx7: fix broken condition check
  drm/radeon: fix asic initialization for virtualized environments
  btrfs: account for non-CoW'd blocks in btrfs_abort_transaction
  percpu: fix synchronization between synchronous map extension and chunk destruction
  percpu: fix synchronization between chunk->map_extend_work and chunk destruction
  af_unix: fix hard linked sockets on overlay
  vfs: add d_real_inode() helper
  arm64: Rework valid_user_regs
  ipmi: Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg()
  drm/mgag200: Black screen fix for G200e rev 4
  iommu/amd: Fix unity mapping initialization race
  iommu/vt-d: Enable QI on all IOMMUs before setting root entry
  iommu/arm-smmu: Wire up map_sg for arm-smmu-v3
  base: make module_create_drivers_dir race-free
  tracing: Handle NULL formats in hold_module_trace_bprintk_format()
  HID: multitouch: enable palm rejection for Windows Precision Touchpad
  HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands
  HID: elo: kill not flush the work
  KVM: nVMX: VMX instructions: fix segment checks when L1 is in long mode.
  kvm: Fix irq route entries exceeding KVM_MAX_IRQ_ROUTES
  KEYS: potential uninitialized variable
  ARCv2: LLSC: software backoff is NOT needed starting HS2.1c
  ARCv2: Check for LL-SC livelock only if LLSC is enabled
  ipv6: Fix mem leak in rt6i_pcpu
  cdc_ncm: workaround for EM7455 "silent" data interface
  net_sched: fix mirrored packets checksum
  packet: Use symmetric hash for PACKET_FANOUT_HASH.
  sched/fair: Fix cfs_rq avg tracking underflow
  UBIFS: Implement ->migratepage()
  mm: Export migrate_page_move_mapping and migrate_page_copy
  MIPS: KVM: Fix modular KVM under QEMU
  ARM: 8579/1: mm: Fix definition of pmd_mknotpresent
  ARM: 8578/1: mm: ensure pmd_present only checks the valid bit
  ARM: imx6ul: Fix Micrel PHY mask
  NFS: Fix another OPEN_DOWNGRADE bug
  make nfs_atomic_open() call d_drop() on all ->open_context() errors.
  nfsd: check permissions when setting ACLs
  posix_acl: Add set_posix_acl
  nfsd: Extend the mutex holding region around in nfsd4_process_open2()
  nfsd: Always lock state exclusively.
  nfsd4/rpc: move backchannel create logic into rpc code
  writeback: use higher precision calculation in domain_dirty_limits()
  thermal: cpu_cooling: fix improper order during initialization
  uvc: Forward compat ioctls to their handlers directly
  Revert "gpiolib: Split GPIO flags parsing and GPIO configuration"
  x86/amd_nb: Fix boot crash on non-AMD systems
  kprobes/x86: Clear TF bit in fault on single-stepping
  x86, build: copy ldlinux.c32 to image.iso
  locking/static_key: Fix concurrent static_key_slow_inc()
  locking/qspinlock: Fix spin_unlock_wait() some more
  locking/ww_mutex: Report recursive ww_mutex locking early
  of: irq: fix of_irq_get[_byname]() kernel-doc
  of: fix autoloading due to broken modalias with no 'compatible'
  mnt: If fs_fully_visible fails call put_filesystem.
  mnt: Account for MS_RDONLY in fs_fully_visible
  mnt: fs_fully_visible test the proper mount for MNT_LOCKED
  usb: common: otg-fsm: add license to usb-otg-fsm
  USB: EHCI: declare hostpc register as zero-length array
  usb: dwc2: fix regression on big-endian PowerPC/ARM systems
  powerpc/tm: Always reclaim in start_thread() for exec() class syscalls
  powerpc/pseries: Fix IBM_ARCH_VEC_NRCORES_OFFSET since POWER8NVL was added
  powerpc/pseries: Fix PCI config address for DDW
  powerpc/iommu: Remove the dependency on EEH struct in DDW mechanism
  IB/mlx4: Properly initialize GRH TClass and FlowLabel in AHs
  IB/cm: Fix a recently introduced locking bug
  EDAC, sb_edac: Fix rank lookup on Broadwell
  mac80211: Fix mesh estab_plinks counting in STA removal case
  mac80211_hwsim: Add missing check for HWSIM_ATTR_SIGNAL
  mac80211: mesh: flush mesh paths unconditionally
  mac80211: fix fast_tx header alignment
  Linux 4.4.15
  usb: dwc3: exynos: Fix deferred probing storm.
  usb: host: ehci-tegra: Grab the correct UTMI pads reset
  usb: gadget: fix spinlock dead lock in gadgetfs
  USB: mos7720: delete parport
  xhci: Fix handling timeouted commands on hosts in weird states.
  USB: xhci: Add broken streams quirk for Frescologic device id 1009
  usb: xhci-plat: properly handle probe deferral for devm_clk_get()
  xhci: Cleanup only when releasing primary hcd
  usb: musb: host: correct cppi dma channel for isoch transfer
  usb: musb: Ensure rx reinit occurs for shared_fifo endpoints
  usb: musb: Stop bulk endpoint while queue is rotated
  usb: musb: only restore devctl when session was set in backup
  usb: quirks: Add no-lpm quirk for Acer C120 LED Projector
  usb: quirks: Fix sorting
  USB: uas: Fix slave queue_depth not being set
  crypto: user - re-add size check for CRYPTO_MSG_GETALG
  crypto: ux500 - memmove the right size
  crypto: vmx - Increase priority of aes-cbc cipher
  AX.25: Close socket connection on session completion
  bpf: try harder on clones when writing into skb
  net: alx: Work around the DMA RX overflow issue
  net: macb: fix default configuration for GMAC on AT91
  neigh: Explicitly declare RCU-bh read side critical section in neigh_xmit()
  bpf, perf: delay release of BPF prog after grace period
  sock_diag: do not broadcast raw socket destruction
  Bridge: Fix ipv6 mc snooping if bridge has no ipv6 address
  ipmr/ip6mr: Initialize the last assert time of mfc entries.
  netem: fix a use after free
  esp: Fix ESN generation under UDP encapsulation
  sit: correct IP protocol used in ipip6_err
  net: Don't forget pr_fmt on net_dbg_ratelimited for CONFIG_DYNAMIC_DEBUG
  net_sched: fix pfifo_head_drop behavior vs backlog
  sdcardfs: Truncate packages_gid.list on overflow
  UPSTREAM: cdc_ncm: do not call usbnet_link_change from cdc_ncm_bind
  BACKPORT: proc: add /proc/<pid>/timerslack_ns interface
  BACKPORT: timer: convert timer_slack_ns from unsigned long to u64
  netfilter: xt_quota2: make quota2_log work well
  Revert "usb: gadget: prevent change of Host MAC address of 'usb0' interface"
  BACKPORT: PM / sleep: Go direct_complete if driver has no callbacks
  ANDROID: base-cfg: enable UID_CPUTIME
  UPSTREAM: USB: usbfs: fix potential infoleak in devio
  UPSTREAM: ALSA: timer: Fix leak in events via snd_timer_user_ccallback
  UPSTREAM: ALSA: timer: Fix leak in events via snd_timer_user_tinterrupt
  UPSTREAM: ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS
  ANDROID: configs: remove unused configs
  ANDROID: cpu: send KOBJ_ONLINE event when enabling cpus
  ANDROID: dm verity fec: initialize recursion level
  ANDROID: dm verity fec: fix RS block calculation
  Linux 4.4.14
  netfilter: x_tables: introduce and use xt_copy_counters_from_user
  netfilter: x_tables: do compat validation via translate_table
  netfilter: x_tables: xt_compat_match_from_user doesn't need a retval
  netfilter: ip6_tables: simplify translate_compat_table args
  netfilter: ip_tables: simplify translate_compat_table args
  netfilter: arp_tables: simplify translate_compat_table args
  netfilter: x_tables: don't reject valid target size on some architectures
  netfilter: x_tables: validate all offsets and sizes in a rule
  netfilter: x_tables: check for bogus target offset
  netfilter: x_tables: check standard target size too
  netfilter: x_tables: add compat version of xt_check_entry_offsets
  netfilter: x_tables: assert minimum target size
  netfilter: x_tables: kill check_entry helper
  netfilter: x_tables: add and use xt_check_entry_offsets
  netfilter: x_tables: validate targets of jumps
  netfilter: x_tables: don't move to non-existent next rule
  drm/core: Do not preserve framebuffer on rmfb, v4.
  crypto: qat - fix adf_ctl_drv.c:undefined reference to adf_init_pf_wq
  netfilter: x_tables: fix unconditional helper
  netfilter: x_tables: make sure e->next_offset covers remaining blob size
  netfilter: x_tables: validate e->target_offset early
  MIPS: Fix 64k page support for 32 bit kernels.
  sparc64: Fix return from trap window fill crashes.
  sparc: Harden signal return frame checks.
  sparc64: Take ctx_alloc_lock properly in hugetlb_setup().
  sparc64: Reduce TLB flushes during hugepte changes
  sparc/PCI: Fix for panic while enabling SR-IOV
  sparc64: Fix sparc64_set_context stack handling.
  sparc64: Fix numa node distance initialization
  sparc64: Fix bootup regressions on some Kconfig combinations.
  sparc: Fix system call tracing register handling.
  fix d_walk()/non-delayed __d_free() race
  sched: panic on corrupted stack end
  proc: prevent stacking filesystems on top
  x86/entry/traps: Don't force in_interrupt() to return true in IST handlers
  wext: Fix 32 bit iwpriv compatibility issue with 64 bit Kernel
  ecryptfs: forbid opening files without mmap handler
  memcg: add RCU locking around css_for_each_descendant_pre() in memcg_offline_kmem()
  parisc: Fix pagefault crash in unaligned __get_user() call
  pinctrl: mediatek: fix dual-edge code defect
  powerpc/pseries: Add POWER8NVL support to ibm,client-architecture-support call
  powerpc: Use privileged SPR number for MMCR2
  powerpc: Fix definition of SIAR and SDAR registers
  powerpc/pseries/eeh: Handle RTAS delay requests in configure_bridge
  arm64: mm: always take dirty state from new pte in ptep_set_access_flags
  arm64: Provide "model name" in /proc/cpuinfo for PER_LINUX32 tasks
  crypto: ccp - Fix AES XTS error for request sizes above 4096
  crypto: public_key: select CRYPTO_AKCIPHER
  irqchip/gic-v3: Fix ICC_SGI1R_EL1.INTID decoding mask
  s390/bpf: reduce maximum program size to 64 KB
  s390/bpf: fix recache skb->data/hlen for skb_vlan_push/pop
  gpio: bcm-kona: fix bcm_kona_gpio_reset() warnings
  ARM: fix PTRACE_SETVFPREGS on SMP systems
  ALSA: hda/realtek: Add T560 docking unit fixup
  ALSA: hda/realtek - Add support for new codecs ALC700/ALC701/ALC703
  ALSA: hda/realtek - ALC256 speaker noise issue
  ALSA: hda - Fix headset mic detection problem for Dell machine
  ALSA: hda - Add PCI ID for Kabylake
  KVM: irqfd: fix NULL pointer dereference in kvm_irq_map_gsi
  KVM: x86: fix OOPS after invalid KVM_SET_DEBUGREGS
  vxlan, gre, geneve: Set a large MTU on ovs-created tunnel devices
  geneve: Relax MTU constraints
  vxlan: Relax MTU constraints
  ipv6: Skip XFRM lookup if dst_entry in socket cache is valid
  l2tp: fix configuration passed to setup_udp_tunnel_sock()
  bridge: Don't insert unnecessary local fdb entry on changing mac address
  tcp: record TLP and ER timer stats in v6 stats
  vxlan: Accept user specified MTU value when create new vxlan link
  team: don't call netdev_change_features under team->lock
  sfc: on MC reset, clear PIO buffer linkage in TXQs
  bpf, inode: disallow userns mounts
  uapi glibc compat: fix compilation when !__USE_MISC in glibc
  udp: prevent skbs lingering in tunnel socket queues
  bpf: Use mount_nodev not mount_ns to mount the bpf filesystem
  tuntap: correctly wake up process during uninit
  switchdev: pass pointer to fib_info instead of copy
  tipc: fix nametable publication field in nl compat
  netlink: Fix dump skb leak/double free
  tipc: check nl sock before parsing nested attributes
  scsi: Add QEMU CD-ROM to VPD Inquiry Blacklist
  scsi_lib: correctly retry failed zero length REQ_TYPE_FS commands
  cs-etm: associating output packet with CPU they executed on
  cs-etm: removing unecessary structure field
  cs-etm: account for each trace buffer in the queue
  cs-etm: avoid casting variable
  perf tools: fixing Makefile problems
  perf tools: new naming convention for openCSD
  perf scripts: Add python scripts for CoreSight traces
  perf tools: decoding capailitity for CoreSight traces
  perf symbols: Check before overwriting build_id
  perf tools: pushing driver configuration down to the kernel
  perf tools: add infrastructure for PMU specific configuration
  coresight: etm-perf: incorporating sink definition from the cmd line
  coresight: adding sink parameter to function coresight_build_path()
  perf: passing struct perf_event to function setup_aux()
  perf/core: adding PMU driver specific configuration
  perf tools: adding coresight etm PMU record capabilities
  perf tools: making coresight PMU listable
  coresight: tmc: implementing TMC-ETR AUX space API
  coresight: Add support for Juno platform
  coresight: Handle build path error
  coresight: Fix erroneous memset in tmc_read_unprepare_etr
  coresight: Fix tmc_read_unprepare_etr
  coresight: Fix NULL pointer dereference in _coresight_build_path
  ANDROID: dm verity fec: add missing release from fec_ktype
  ANDROID: dm verity fec: limit error correction recursion
  ANDROID: restrict access to perf events
  FROMLIST: security,perf: Allow further restriction of perf_event_open
  BACKPORT: perf tools: Document the perf sysctls
  Revert "armv6 dcc tty driver"
  Revert "arm: dcc_tty: fix armv6 dcc tty build failure"
  ARM64: Ignore Image-dtb from git point of view
  arm64: add option to build Image-dtb
  ANDROID: usb: gadget: f_midi: set fi->f to NULL when free f_midi function
  Linux 4.4.13
  xfs: handle dquot buffer readahead in log recovery correctly
  xfs: print name of verifier if it fails
  xfs: skip stale inodes in xfs_iflush_cluster
  xfs: fix inode validity check in xfs_iflush_cluster
  xfs: xfs_iflush_cluster fails to abort on error
  xfs: Don't wrap growfs AGFL indexes
  xfs: disallow rw remount on fs with unknown ro-compat features
  gcov: disable tree-loop-im to reduce stack usage
  scripts/package/Makefile: rpmbuild add support of RPMOPTS
  dma-debug: avoid spinlock recursion when disabling dma-debug
  PM / sleep: Handle failures in device_suspend_late() consistently
  ext4: silence UBSAN in ext4_mb_init()
  ext4: address UBSAN warning in mb_find_order_for_block()
  ext4: fix oops on corrupted filesystem
  ext4: clean up error handling when orphan list is corrupted
  ext4: fix hang when processing corrupted orphaned inode list
  drm/imx: Match imx-ipuv3-crtc components using device node in platform data
  drm/i915: Don't leave old junk in ilk active watermarks on readout
  drm/atomic: Verify connector->funcs != NULL when clearing states
  drm/fb_helper: Fix references to dev->mode_config.num_connector
  drm/i915/fbdev: Fix num_connector references in intel_fb_initial_config()
  drm/amdgpu: Fix hdmi deep color support.
  drm/amdgpu: use drm_mode_vrefresh() rather than mode->vrefresh
  drm/vmwgfx: Fix order of operation
  drm/vmwgfx: use vmw_cmd_dx_cid_check for query commands.
  drm/vmwgfx: Enable SVGA_3D_CMD_DX_SET_PREDICATION
  drm/gma500: Fix possible out of bounds read
  sunrpc: fix stripping of padded MIC tokens
  xen: use same main loop for counting and remapping pages
  xen/events: Don't move disabled irqs
  powerpc/eeh: Restore initial state in eeh_pe_reset_and_recover()
  Revert "powerpc/eeh: Fix crash in eeh_add_device_early() on Cell"
  powerpc/eeh: Don't report error in eeh_pe_reset_and_recover()
  powerpc/book3s64: Fix branching to OOL handlers in relocatable kernel
  pipe: limit the per-user amount of pages allocated in pipes
  QE-UART: add "fsl,t1040-ucc-uart" to of_device_id
  wait/ptrace: assume __WALL if the child is traced
  mm: use phys_addr_t for reserve_bootmem_region() arguments
  media: v4l2-compat-ioctl32: fix missing reserved field copy in put_v4l2_create32
  PCI: Disable all BAR sizing for devices with non-compliant BARs
  pinctrl: exynos5440: Use off-stack memory for pinctrl_gpio_range
  clk: bcm2835: divider value has to be 1 or more
  clk: bcm2835: pll_off should only update CM_PLL_ANARST
  clk: at91: fix check of clk_register() returned value
  clk: bcm2835: Fix PLL poweron
  cpuidle: Fix cpuidle_state_is_coupled() argument in cpuidle_enter()
  cpuidle: Indicate when a device has been unregistered
  PM / Runtime: Fix error path in pm_runtime_force_resume()
  mfd: intel_soc_pmic_core: Terminate panel control GPIO lookup table correctly
  mfd: intel-lpss: Save register context on suspend
  hwmon: (ads7828) Enable internal reference
  aacraid: Fix for KDUMP driver hang
  aacraid: Fix for aac_command_thread hang
  aacraid: Relinquish CPU during timeout wait
  rtlwifi: pci: use dev_kfree_skb_irq instead of kfree_skb in rtl_pci_reset_trx_ring
  rtlwifi: Fix logic error in enter/exit power-save mode
  rtlwifi: btcoexist: Implement antenna selection
  rtlwifi: rtl8723be: Add antenna select module parameter
  hwrng: exynos - Fix unbalanced PM runtime put on timeout error path
  ath5k: Change led pin configuration for compaq c700 laptop
  ath10k: fix kernel panic, move arvifs list head init before htt init
  ath10k: fix rx_channel during hw reconfigure
  ath10k: fix firmware assert in monitor mode
  ath10k: fix debugfs pktlog_filter write
  ath9k: Fix LED polarity for some Mini PCI AR9220 MB92 cards.
  ath9k: Add a module parameter to invert LED polarity.
  ARM: dts: imx35: restore existing used clock enumeration
  ARM: dts: exynos: Add interrupt line to MAX8997 PMIC on exynos4210-trats
  ARM: dts: at91: fix typo in sama5d2 PIN_PD24 description
  ARM: mvebu: fix GPIO config on the Linksys boards
  Input: uinput - handle compat ioctl for UI_SET_PHYS
  ASoC: ak4642: Enable cache usage to fix crashes on resume
  affs: fix remount failure when there are no options changed
  MIPS: VDSO: Build with `-fno-strict-aliasing'
  MIPS: lib: Mark intrinsics notrace
  MIPS: Build microMIPS VDSO for microMIPS kernels
  MIPS: Fix sigreturn via VDSO on microMIPS kernel
  MIPS: ptrace: Prevent writes to read-only FCSR bits
  MIPS: ptrace: Fix FP context restoration FCSR regression
  MIPS: Disable preemption during prctl(PR_SET_FP_MODE, ...)
  MIPS: Prevent "restoration" of MSA context in non-MSA kernels
  MIPS: Fix MSA ld_*/st_* asm macros to use PTR_ADDU
  MIPS: Use copy_s.fmt rather than copy_u.fmt
  MIPS: Loongson-3: Reserve 32MB for RS780E integrated GPU
  MIPS: Reserve nosave data for hibernation
  MIPS: ath79: make bootconsole wait for both THRE and TEMT
  MIPS: Sync icache & dcache in set_pte_at
  MIPS: Handle highmem pages in __update_cache
  MIPS: Flush highmem pages in __flush_dcache_page
  MIPS: Fix watchpoint restoration
  MIPS: Fix uapi include in exported asm/siginfo.h
  MIPS: Fix siginfo.h to use strict posix types
  MIPS: Avoid using unwind_stack() with usermode
  MIPS: Don't unwind to user mode with EVA
  MIPS: MSA: Fix a link error on `_init_msa_upper' with older GCC
  MIPS: math-emu: Fix jalr emulation when rd == $0
  MIPS64: R6: R2 emulation bugfix
  coresight: etb10: adjust read pointer only when needed
  coresight: configuring ETF in FIFO mode when acting as link
  coresight: tmc: implementing TMC-ETF AUX space API
  coresight: moving struct cs_buffers to header file
  coresight: tmc: keep track of memory width
  coresight: tmc: make sysFS and Perf mode mutually exclusive
  coresight: tmc: dump system memory content only when needed
  coresight: tmc: adding mode of operation for link/sinks
  coresight: tmc: getting rid of multiple read access
  coresight: tmc: allocating memory when needed
  coresight: tmc: making prepare/unprepare functions generic
  coresight: tmc: splitting driver in ETB/ETF and ETR components
  coresight: tmc: cleaning up header file
  coresight: tmc: introducing new header file
  coresight: tmc: clearly define number of transfers per burst
  coresight: tmc: re-implementing tmc_read_prepare/unprepare() functions
  coresight: tmc: waiting for TMCReady bit before programming
  coresight: tmc: modifying naming convention
  coresight: tmc: adding sysFS management entries
  coresight: etm4x: add tracer ID for A72 Maia processor.
  coresight: etb10: fixing the right amount of words to read
  coresight: stm: adding driver for CoreSight STM component
  coresight: adding path for STM device
  coresight: etm4x: modify q_support type
  coresight: no need to do the forced type conversion
  coresight: removing gratuitous boot time log messages
  coresight: etb10: splitting sysFS "status" entry
  coresight: moving coresight_simple_func() to header file
  coresight: etm4x: implementing the perf PMU API
  coresight: etm4x: implementing user/kernel mode tracing
  coresight: etm4x: moving etm_drvdata::enable to atomic field
  coresight: etm4x: unlocking tracers in default arch init
  coresight: etm4x: splitting etmv4 default configuration
  coresight: etm4x: splitting struct etmv4_drvdata
  coresight: etm4x: adding config and traceid registers
  coresight: etm4x: moving sysFS entries to a dedicated file
  stm class: Support devices that override software assigned masters
  stm class: Remove unnecessary pointer increment
  stm class: Fix stm device initialization order
  stm class: Do not leak the chrdev in error path
  stm class: Remove a pointless line
  stm class: stm_heartbeat: Make nr_devs parameter read-only
  stm class: dummy_stm: Make nr_dummies parameter read-only
  MAINTAINERS: Add a git tree for the stm class
  perf/ring_buffer: Document AUX API usage
  perf/core: Free AUX pages in unmap path
  perf/ring_buffer: Refuse to begin AUX transaction after rb->aux_mmap_count drops
  perf auxtrace: Add perf_evlist pointer to *info_priv_size()
  perf session: Simplify tool stubs
  perf inject: Hit all DSOs for AUX data in JIT and other cases
  perf tools: tracepoint_error() can receive e=NULL, robustify it
  perf evlist: Make perf_evlist__open() open evsels with their cpus and threads (like perf record does)
  perf evsel: Introduce disable() method
  perf cpumap: Auto initialize cpu__max_{node,cpu}
  drivers/hwtracing: make coresight-etm-perf.c explicitly non-modular
  drivers/hwtracing: make coresight-* explicitly non-modular
  coresight: introducing a global trace ID function
  coresight: etm-perf: new PMU driver for ETM tracers
  coresight: etb10: implementing AUX API
  coresight: etb10: adding operation mode for sink->enable()
  coresight: etb10: moving to local atomic operations
  coresight: etm3x: implementing perf_enable/disable() API
  coresight: etm3x: implementing user/kernel mode tracing
  coresight: etm3x: consolidating initial config
  coresight: etm3x: changing default trace configuration
  coresight: etm3x: set progbit to stop trace collection
  coresight: etm3x: adding operation mode for etm_enable()
  coresight: etm3x: splitting struct etm_drvdata
  coresight: etm3x: unlocking tracers in default arch init
  coresight: etm3x: moving sysFS entries to dedicated file
  coresight: etm3x: moving etm_readl/writel to header file
  coresight: moving PM runtime operations to core framework
  coresight: add API to get sink from path
  coresight: associating path with session rather than tracer
  coresight: etm4x: Check every parameter used by dma_xx_coherent.
  coresight: "DEVICE_ATTR_RO" should defined as static.
  coresight: implementing 'cpu_id()' API
  coresight: removing bind/unbind options from sysfs
  coresight: remove csdev's link from topology
  coresight: release reference taken by 'bus_find_device()'
  coresight: coresight_unregister() function cleanup
  coresight: fixing lockdep error
  coresight: fixing indentation problem
  coresight: Fix a typo in Kconfig
  coresight: checking for NULL string in coresight_name_match()
  perf/core: Disable the event on a truncated AUX record
  perf/core: Don't leak event in the syscall error path
  perf/core: Fix perf_sched_count derailment
  stm class: dummy_stm: Add link callback for fault injection
  stm class: Plug stm device's unlink callback
  stm class: Fix a race in unlinking
  stm class: Fix unbalanced module/device refcounting
  stm class: Guard output assignment against concurrency
  stm class: Fix unlocking braino in the error path
  stm class: Add heartbeat stm source device
  stm class: dummy_stm: Create multiple devices
  stm class: Support devices with multiple instances
  stm class: Use driver's packet callback return value
  stm class: Prevent user-controllable allocations
  stm class: Fix link list locking
  stm class: Fix locking in unbinding policy path
  stm class: Select CONFIG_SRCU
  stm class: Hide STM-specific options if STM is disabled
  perf: Synchronously free aux pages in case of allocation failure
  Linux 4.4.12
  kbuild: move -Wunused-const-variable to W=1 warning level
  Revert "scsi: fix soft lockup in scsi_remove_target() on module removal"
  scsi: Add intermediate STARGET_REMOVE state to scsi_target_state
  hpfs: implement the show_options method
  hpfs: fix remount failure when there are no options changed
  UBI: Fix static volume checks when Fastmap is used
  SIGNAL: Move generic copy_siginfo() to signal.h
  thunderbolt: Fix double free of drom buffer
  IB/srp: Fix a debug kernel crash
  ALSA: hda - Fix headset mic detection problem for one Dell machine
  ALSA: hda/realtek - Add support for ALC295/ALC3254
  ALSA: hda - Fix headphone noise on Dell XPS 13 9360
  ALSA: hda/realtek - New codecs support for ALC234/ALC274/ALC294
  mcb: Fixed bar number assignment for the gdd
  clk: bcm2835: add locking to pll*_on/off methods
  locking,qspinlock: Fix spin_is_locked() and spin_unlock_wait()
  serial: samsung: Reorder the sequence of clock control when call s3c24xx_serial_set_termios()
  serial: 8250_mid: recognize interrupt source in handler
  serial: 8250_mid: use proper bar for DNV platform
  serial: 8250_pci: fix divide error bug if baud rate is 0
  Fix OpenSSH pty regression on close
  tty/serial: atmel: fix hardware handshake selection
  TTY: n_gsm, fix false positive WARN_ON
  tty: vt, return error when con_startup fails
  xen/x86: actually allocate legacy interrupts on PV guests
  KVM: x86: mask CPUID(0xD,0x1).EAX against host value
  MIPS: KVM: Fix timer IRQ race when writing CP0_Compare
  MIPS: KVM: Fix timer IRQ race when freezing timer
  KVM: x86: fix ordering of cr0 initialization code in vmx_cpu_reset
  KVM: MTRR: remove MSR 0x2f8
  staging: comedi: das1800: fix possible NULL dereference
  usb: gadget: udc: core: Fix argument of dev_err() in usb_gadget_map_request()
  USB: leave LPM alone if possible when binding/unbinding interface drivers
  usb: misc: usbtest: fix pattern tests for scatterlists.
  usb: f_mass_storage: test whether thread is running before starting another
  usb: gadget: f_fs: Fix EFAULT generation for async read operations
  USB: serial: option: add even more ZTE device ids
  USB: serial: option: add more ZTE device ids
  USB: serial: option: add support for Cinterion PH8 and AHxx
  USB: serial: io_edgeport: fix memory leaks in probe error path
  USB: serial: io_edgeport: fix memory leaks in attach error path
  USB: serial: quatech2: fix use-after-free in probe error path
  USB: serial: keyspan: fix use-after-free in probe error path
  USB: serial: mxuport: fix use-after-free in probe error path
  mei: bus: call mei_cl_read_start under device lock
  mei: amthif: discard not read messages
  mei: fix NULL dereferencing during FW initiated disconnection
  Bluetooth: vhci: Fix race at creating hci device
  Bluetooth: vhci: purge unhandled skbs
  Bluetooth: vhci: fix open_timeout vs. hdev race
  mmc: sdhci-pci: Remove MMC_CAP_BUS_WIDTH_TEST for Intel controllers
  mmc: longer timeout for long read time quirk
  dell-rbtn: Ignore ACPI notifications if device is suspended
  ACPI / osi: Fix an issue that acpi_osi=!* cannot disable ACPICA internal strings
  mmc: sdhci-acpi: Remove MMC_CAP_BUS_WIDTH_TEST for Intel controllers
  mmc: mmc: Fix partition switch timeout for some eMMCs
  can: fix handling of unmodifiable configuration options
  irqchip/gic-v3: Configure all interrupts as non-secure Group-1
  irqchip/gic: Ensure ordering between read of INTACK and shared data
  Input: pwm-beeper - fix - scheduling while atomic
  mfd: omap-usb-tll: Fix scheduling while atomic BUG
  sched/loadavg: Fix loadavg artifacts on fully idle and on fully loaded systems
  clk: qcom: msm8916: Fix crypto clock flags
  crypto: sun4i-ss - Replace spinlock_bh by spin_lock_irq{save|restore}
  crypto: talitos - fix ahash algorithms registration
  crypto: caam - fix caam_jr_alloc() ret code
  ring-buffer: Prevent overflow of size in ring_buffer_resize()
  ring-buffer: Use long for nr_pages to avoid overflow failures
  asix: Fix offset calculation in asix_rx_fixup() causing slow transmissions
  fs/cifs: correctly to anonymous authentication for the NTLM(v2) authentication
  fs/cifs: correctly to anonymous authentication for the NTLM(v1) authentication
  fs/cifs: correctly to anonymous authentication for the LANMAN authentication
  fs/cifs: correctly to anonymous authentication via NTLMSSP
  remove directory incorrectly tries to set delete on close on non-empty directories
  kvm: arm64: Fix EC field in inject_abt64
  arm/arm64: KVM: Enforce Break-Before-Make on Stage-2 page tables
  arm64: cpuinfo: Missing NULL terminator in compat_hwcap_str
  arm64: Implement pmdp_set_access_flags() for hardware AF/DBM
  arm64: Implement ptep_set_access_flags() for hardware AF/DBM
  arm64: Ensure pmd_present() returns false after pmd_mknotpresent()
  arm64: Fix typo in the pmdp_huge_get_and_clear() definition
  ext4: iterate over buffer heads correctly in move_extent_per_page()
  perf test: Fix build of BPF and LLVM on older glibc libraries
  perf/core: Fix perf_event_open() vs. execve() race
  perf/x86/intel/pt: Generate PMI in the STOP region as well
  Btrfs: don't use src fd for printk
  UPSTREAM: mac80211: fix "warning: ‘target_metric’ may be used uninitialized"
  Revert "drivers: power: use 'current' instead of 'get_current()'"
  cpufreq: interactive: drop cpufreq_{get,put}_global_kobject func calls
  Revert "cpufreq: interactive: build fixes for 4.4"
  xt_qtaguid: Fix panic caused by processing non-full socket.
  fiq_debugger: Add fiq_debugger.disable option
  UPSTREAM: procfs: fixes pthread cross-thread naming if !PR_DUMPABLE
  FROMLIST: wlcore: Disable filtering in AP role
  Revert "drivers: power: Add watchdog timer to catch drivers which lockup during suspend."
  fiq_debugger: Add option to apply uart overlay by FIQ_DEBUGGER_UART_OVERLAY
  Revert "Recreate asm/mach/mmc.h include file"
  Revert "ARM: Add 'card_present' state to mmc_platfrom_data"
  usb: dual-role: make stub functions inline
  Revert "mmc: Add status IRQ and status callback function to mmc platform data"
  quick selinux support for tracefs
  Revert "hid-multitouch: Filter collections by application usage."
  Revert "HID: steelseries: validate output report details"
  xt_qtaguid: Fix panic caused by synack processing
  Revert "mm: vmscan: Add a debug file for shrinkers"
  Revert "SELinux: Enable setting security contexts on rootfs inodes."
  Revert "SELinux: build fix for 4.1"
  fuse: Add support for d_canonical_path
  vfs: change d_canonical_path to take two paths
  android: recommended.cfg: remove CONFIG_UID_STAT
  netfilter: xt_qtaguid: seq_printf fixes
  Revert "misc: uidstat: Adding uid stat driver to collect network statistics."
  Revert "net: activity_stats: Add statistics for network transmission activity"
  Revert "net: activity_stats: Stop using obsolete create_proc_read_entry api"
  Revert "misc: uidstat: avoid create_stat() race and blockage."
  Revert "misc: uidstat: Remove use of obsolete create_proc_read_entry api"
  Revert "misc seq_printf fixes for 4.4"
  Revert "misc: uid_stat: Include linux/atomic.h instead of asm/atomic.h"
  Revert "net: socket ioctl to reset connections matching local address"
  Revert "net: fix iterating over hashtable in tcp_nuke_addr()"
  Revert "net: fix crash in tcp_nuke_addr()"
  Revert "Don't kill IPv4 sockets when killing IPv6 sockets was requested."
  Revert "tcp: Fix IPV6 module build errors"
  android: base-cfg: remove CONFIG_SWITCH
  Revert "switch: switch class and GPIO drivers."
  Revert "drivers: switch: remove S_IWUSR from dev_attr"
  ANDROID: base-cfg: enable CONFIG_IP_NF_NAT
  BACKPORT: selinux: restrict kernel module loading
  android: base-cfg: enable CONFIG_QUOTA

Conflicts:
	Documentation/sysctl/kernel.txt
	drivers/cpufreq/cpufreq_interactive.c
	drivers/hwtracing/coresight/Kconfig
	drivers/hwtracing/coresight/Makefile
	drivers/hwtracing/coresight/coresight-etm4x.c
	drivers/hwtracing/coresight/coresight-etm4x.h
	drivers/hwtracing/coresight/coresight-priv.h
	drivers/hwtracing/coresight/coresight-stm.c
	drivers/hwtracing/coresight/coresight-tmc.c
	drivers/mmc/core/core.c
	include/linux/coresight-stm.h
	include/linux/coresight.h
	include/linux/msm_mdp.h
	include/uapi/linux/coresight-stm.h
	kernel/events/core.c
	kernel/sched/fair.c
	net/Makefile
	net/ipv4/netfilter/arp_tables.c
	net/ipv4/netfilter/ip_tables.c
	net/ipv4/tcp.c
	net/ipv6/netfilter/ip6_tables.c
	net/netfilter/xt_quota2.c
	sound/core/pcm.c

Change-Id: I17aa0002815014e9bddc47e67769a53c15768a99
Signed-off-by: Runmin Wang <runminw@codeaurora.org>
2016-10-28 10:48:35 -07:00
Johannes Thumshirn
210588c034 scsi: Add intermediate STARGET_REMOVE state to scsi_target_state
commit f05795d3d771f30a7bdc3a138bf714b06d42aa95 upstream.

Add intermediate STARGET_REMOVE state to scsi_target_state to avoid
running into the BUG_ON() in scsi_target_reap(). The STARGET_REMOVE
state is only valid in the path from scsi_remove_target() to
scsi_target_destroy() indicating this target is going to be removed.

This re-fixes the problem introduced in commits bc3f02a795 ("[SCSI]
scsi_remove_target: fix softlockup regression on hot remove") and
4099819356 ("scsi: restart list search after unlock in
scsi_remove_target") in a more comprehensive way.

[mkp: Included James' fix for scsi_target_destroy()]

Signed-off-by: Johannes Thumshirn <jthumshirn@suse.de>
Fixes: 4099819356
Reported-by: Sergey Senozhatsky <sergey.senozhatsky@gmail.com>
Tested-by: Sergey Senozhatsky <sergey.senozhatsky@gmail.com>
Reviewed-by: Ewan D. Milne <emilne@redhat.com>
Reviewed-by: Hannes Reinecke <hare@suse.com>
Reviewed-by: James Bottomley <jejb@linux.vnet.ibm.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2016-06-01 12:15:54 -07:00
Matt Wagantall
914f992d79 scsi: include device.h in scsi.h
scsi.h reference 'struct device', the definition for which is not
included. Most users of this header compile because struct device
happens to be defined before scsi.h is included. Less-fortunate
drivers encounter:

 linux/include/scsi/scsi.h:565:49: warning: 'struct device'
 declared inside parameter list

Change-Id: I6352b0fc1d1ab296e500f6007b0b20be3b85a1f9
Signed-off-by: Matt Wagantall <mattw@codeaurora.org>
[venkatg@codeaurora.org: resolved trivial merge conflict]
Signed-off-by: Venkat Gopalakrishnan <venkatg@codeaurora.org>
2016-03-22 11:01:03 -07:00
Abhimanyu Kapur
ccca370b3b UAPI: scsi: move ioctl related information
The ioctl information should be in header files that expose it
to userspace.

Change-Id: Iabf1e53a1357c2ce22ecdc8dc0270377759effc8
Signed-off-by: Krishna Konda <kkonda@codeaurora.org>
Signed-off-by: Abhimanyu Kapur <abhimany@codeaurora.org>
[venkatg@codeaurora.org: resolved trivial merge conflicts]
Signed-off-by: Venkat Gopalakrishnan <venkatg@codeaurora.org>
2016-03-22 11:01:02 -07:00
Abhimanyu Kapur
afa03abaad UAPI: scsi: move the scsi ioctl related files
The scsi ioctl related files are meant to be used from
userspace and hence should be in the appropriate include/uapi
directory.

Change-Id: Id6b14f353284a9ddac0d58b6b90e17561e2645aa
Signed-off-by: Krishna Konda <kkonda@codeaurora.org>
Signed-off-by: Abhimanyu Kapur <abhimany@codeaurora.org>
2016-03-22 11:01:01 -07:00
Sujit Reddy Thumma
c6b82e8bca scsi: Allow auto suspend override by low-level driver
Until now the scsi mid-layer forbids runtime suspend till userspace
enables it. This is mainly to quarantine some disks with broken
runtime power management or have high latencies executing suspend
resume callbacks. If the userspace doesn't enable the runtime suspend
the underlying hardware will be always on even when it is not doing
any useful work and thus wasting power.

Some low-level drivers for the controllers can efficiently use runtime
power management to reduce power consumption and improve battery life.
Allow runtime suspend parameters override within the LLD itself
instead of waiting for userspace to control the power management.

Change-Id: I03e96a89d19c174deeb5bd4f94136c77073eb009
Signed-off-by: Sujit Reddy Thumma <sthumma@codeaurora.org>
[subhashj@codeaurora.org: resolved trivial merge conflicts]
Signed-off-by: Subhash Jadavani <subhashj@codeaurora.org>
2016-03-22 11:00:55 -07:00
Maya Erez
36c183b743 scsi: Adjust DBD setting in mode sense for caching mode page per LLD
Host sends MODE_SENSE_10 with caching mode page, to check if the device
supports the cache feature.
Some LLD standards requires DBD field to be set to 1.

This patch allows LLD to define the setting of DBD if required.

Change-Id: I7f6c0ff6613516c3ef49aacc0679b96b8bd9ccc8
Signed-off-by: Maya Erez <merez@codeaurora.org>
[mattw@codeaurora.org: resolved a trivial context conflict in
Scsi_Host struct definition]
Signed-off-by: Matt Wagantall <mattw@codeaurora.org>
[subhashj@codeaurora.org: resolved trivial merge conflicts]
Signed-off-by: Subhash Jadavani <subhashj@codeaurora.org>
2016-03-22 11:00:53 -07:00
Dolev Raviv
279fdf9c3a test-iosched: ufs_test: fix gendisk usage in test
Adding a new access api for gendisk without using scsi private
headers.
This patch fixes multiple errors:
1. Relative include path in ufs_test.c to <../sd.h>
2. Allowing suspend after first test run.

Change-Id: I152d34667ab63790b643abb55111fc5b67c90ac9
Signed-off-by: Dolev Raviv <draviv@codeaurora.org>
[merez@codeaurora.org: fix trivial conflicts in ufs_test.c]
Signed-off-by: Maya Erez <merez@codeaurora.org>
[venkatg@codeaurora.org: resolved trivial merge conflicts,
use scsi_disk_get instead of __scsi_disk_get]
Signed-off-by: Venkat Gopalakrishnan <venkatg@codeaurora.org>
2016-03-22 10:59:20 -07:00
Dolev Raviv
b045711fdc scsi: ufs: created UFS unit-tests framework
Created a new UFS block device test framework.
This test includes:
- Basic read after write command
- Random buffer length
- Ability to run test multiple times

Change-Id: I06fe7bf7d325037d6039a4acfdfb9c2c8960a435
Signed-off-by: Dolev Raviv <draviv@codeaurora.org>
Signed-off-by: Maya Erez <merez@codeaurora.org>
Signed-off-by: Venkat Gopalakrishnan <venkatg@codeaurora.org>
2016-03-22 10:55:20 -07:00
James Bottomley
be9e2f775f Merge branch 'mkp-fixes' into fixes 2015-12-03 09:32:33 -08:00
Vitaly Kuznetsov
a35bb4458e scsi: report 'INQUIRY result too short' once per host
Some host adapters (e.g. Hyper-V storvsc) are known for not respecting
the SPC-2/3/4 requirement for 'INQUIRY data (see table ...) shall
contain at least 36 bytes'. As a result we get tons on 'scsi 0:7:1:1:
scsi scan: INQUIRY result too short (5), using 36' messages on
console. This can be problematic for slow consoles. Introduce
short_inquiry flag in struct Scsi_Host to print the message once per
host.

Signed-off-by: Vitaly Kuznetsov <vkuznets@redhat.com>
Reviewed-by: Christoph Hellwig <hch@lst.de>
Reviewed-by: Hannes Reinecke <hare@suse.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
2015-11-19 12:12:16 -05:00
Christoph Hellwig
64d513ac31 scsi: use host wide tags by default
This patch changes the !blk-mq path to the same defaults as the blk-mq
I/O path by always enabling block tagging, and always using host wide
tags.  We've had blk-mq available for a few releases so bugs with
this mode should have been ironed out, and this ensures we get better
coverage of over tagging setup over different configs.

Signed-off-by: Christoph Hellwig <hch@lst.de>
Acked-by: Jens Axboe <axboe@kernel.dk>
Reviewed-by: Hannes Reinecke <hare@suse.de>
Signed-off-by: James Bottomley <JBottomley@Odin.com>
2015-11-09 17:11:57 -08:00
Linus Torvalds
05c78081d2 Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending
Pull SCSI target updates from Nicholas Bellinger:
 "Here are the outstanding target-pending updates for v4.3-rc1.

  Mostly bug-fixes and minor changes this round.  The fallout from the
  big v4.2-rc1 RCU conversion have (thus far) been minimal.

  The highlights this round include:

   - Move sense handling routines into scsi_common code (Sagi)

   - Return ABORTED_COMMAND sense key for PI errors (Sagi)

   - Add tpg_enabled_sendtargets attribute for disabled iscsi-target
     discovery (David)

   - Shrink target struct se_cmd by rearranging fields (Roland)

   - Drop iSCSI use of mutex around max_cmd_sn increment (Roland)

   - Replace iSCSI __kernel_sockaddr_storage with sockaddr_storage (Andy +
     Chris)

   - Honor fabric max_data_sg_nents I/O transfer limit (Arun + Himanshu +
     nab)

   - Fix EXTENDED_COPY >= v4.1 regression OOPsen (Alex + nab)"

* 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending: (37 commits)
  target: use stringify.h instead of own definition
  target/user: Fix UFLAG_UNKNOWN_OP handling
  target: Remove no-op conditional
  target/user: Remove unused variable
  target: Fix max_cmd_sn increment w/o cmdsn mutex regressions
  target: Attach EXTENDED_COPY local I/O descriptors to xcopy_pt_sess
  target/qla2xxx: Honor max_data_sg_nents I/O transfer limit
  target/iscsi: Replace __kernel_sockaddr_storage with sockaddr_storage
  target/iscsi: Replace conn->login_ip with login_sockaddr
  target/iscsi: Keep local_ip as the actual sockaddr
  target/iscsi: Fix np_ip bracket issue by removing np_ip
  target: Drop iSCSI use of mutex around max_cmd_sn increment
  qla2xxx: Update tcm_qla2xxx module description to 24xx+
  iscsi-target: Add tpg_enabled_sendtargets for disabled discovery
  drivers: target: Drop unlikely before IS_ERR(_OR_NULL)
  target: check DPO/FUA usage for COMPARE AND WRITE
  target: Shrink struct se_cmd by rearranging fields
  target: Remove cmd->se_ordered_id (unused except debug log lines)
  target: add support for START_STOP_UNIT SCSI opcode
  target: improve unsupported opcode message
  ...
2015-09-11 19:00:42 -07:00
Linus Torvalds
8e78b7dc93 Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi
Pull second round of SCSI updates from James Bottomley:
 "There's one late arriving patch here (added today), fixing a build
  issue which the scsi_dh patch set in here uncovered.  Other than that,
  everything has been incubated in -next and the checkers for a week.

  The major pieces of this patch are a set patches facilitating better
  integration between scsi and scsi_dh (the device handling layer used
  by multi-path; all the dm parts are acked by Mike Snitzer).

  This also includes driver updates for mp3sas, scsi_debug and an
  assortment of bug fixes"

* tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi: (50 commits)
  scsi_dh: fix randconfig build error
  scsi: fix scsi_error_handler vs. scsi_host_dev_release race
  fcoe: Convert use of __constant_htons to htons
  mpt2sas: setpci reset kernel oops fix
  pm80xx: Don't override ts->stat on IO_OPEN_CNX_ERROR_HW_RESOURCE_BUSY
  lpfc: Fix possible use-after-free and double free in lpfc_mbx_cmpl_rdp_page_a2()
  bfa: Fix incorrect de-reference of pointer
  bfa: Fix indentation
  scsi_transport_sas: Remove check for SAS expander when querying bay/enclosure IDs.
  scsi_debug: resp_request: remove unused variable
  scsi_debug: fix REPORT LUNS Well Known LU
  scsi_debug: schedule_resp fix input variable check
  scsi_debug: make dump_sector static
  scsi_debug: vfree is null safe so drop the check
  scsi_debug: use SCSI_W_LUN_REPORT_LUNS instead of SAM2_WLUN_REPORT_LUNS;
  scsi_debug: define pr_fmt() for consistent logging
  mpt2sas: Refcount fw_events and fix unsafe list usage
  mpt2sas: Refcount sas_device objects and fix unsafe list usage
  scsi_dh: return SCSI_DH_NOTCONN in scsi_dh_activate()
  scsi_dh: don't allow to detach device handlers at runtime
  ...
2015-09-11 18:15:18 -07:00
Linus Torvalds
df910390e2 Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi
Pull first round of SCSI updates from James Bottomley:
 "This includes one new driver: cxlflash plus the usual grab bag of
  updates for the major drivers: qla2xxx, ipr, storvsc, pm80xx, hptiop,
  plus a few assorted fixes.

  There's another tranch coming, but I want to incubate it another few
  days in the checkers, plus it includes a mpt2sas separated lifetime
  fix, which Avago won't get done testing until Friday"

* tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi: (85 commits)
  aic94xx: set an error code on failure
  storvsc: Set the error code correctly in failure conditions
  storvsc: Allow write_same when host is windows 10
  storvsc: use storage protocol version to determine storage capabilities
  storvsc: use correct defaults for values determined by protocol negotiation
  storvsc: Untangle the storage protocol negotiation from the vmbus protocol negotiation.
  storvsc: Use a single value to track protocol versions
  storvsc: Rather than look for sets of specific protocol versions, make decisions based on ranges.
  cxlflash: Remove unused variable from queuecommand
  cxlflash: shift wrapping bug in afu_link_reset()
  cxlflash: off by one bug in cxlflash_show_port_status()
  cxlflash: Virtual LUN support
  cxlflash: Superpipe support
  cxlflash: Base error recovery support
  qla2xxx: Update driver version to 8.07.00.26-k
  qla2xxx: Add pci device id 0x2261.
  qla2xxx: Fix missing device login retries.
  qla2xxx: do not clear slot in outstanding cmd array
  qla2xxx: Remove decrement of sp reference count in abort handler.
  qla2xxx: Add support to show MPI and PEP FW version for ISP27xx.
  ...
2015-09-02 12:22:54 -07:00
Christoph Hellwig
ee14c674e8 scsi_dh: kill struct scsi_dh_data
Add a ->handler and a ->handler_data field to struct scsi_device and kill
this indirection.  Also move struct scsi_device_handler to scsi_dh.h so that
changes to it don't require rebuilding every SCSI LLDD.

Signed-off-by: Christoph Hellwig <hch@lst.de>
Reviewed-by: Martin K. Petersen <martin.petersen@oracle.com>
Reviewed-by: Hannes Reinecke <hare@suse.de>
Signed-off-by: James Bottomley <JBottomley@Odin.com>
2015-08-28 13:14:57 -07:00
Christoph Hellwig
d95dbff2a4 scsi_dh: move device matching to the core code
Add a single list of devices that need non-ALUA device handlers to the core
scsi_dh code so that we can autoload the modules for them at probe time.

While this is a little ugly in terms of architecture it actually
significantly simplifies the code in addition to the new autoloading
functionality.

Signed-off-by: Christoph Hellwig <hch@lst.de>
Reviewed-by: Martin K. Petersen <martin.petersen@oracle.com>
Reviewed-by: Hannes Reinecke <hare@suse.de>
Acked-by: Mike Snitzer <snitzer@redhat.com>
Signed-off-by: James Bottomley <JBottomley@Odin.com>
2015-08-28 13:14:56 -07:00
Christoph Hellwig
086b91d052 scsi_dh: integrate into the core SCSI code
Stop building scsi_dh as a separate module and integrate it fully into the
core SCSI code with explicit callouts at bus scan time.  For now the
callouts are placed at the same point as the old bus notifiers were called,
but in the future we will be able to look at ALUA INQUIRY data earlier on.

Note that this also means that the device handler modules need to be loaded
by the time we scan the bus.  The next patches will add support for
autoloading device handlers at bus scan time to make sure they are always
loaded if they are enabled in the kernel config.

Signed-off-by: Christoph Hellwig <hch@lst.de>
Reviewed-by: Martin K. Petersen <martin.petersen@oracle.com>
Reviewed-by: Hannes Reinecke <hare@suse.de>
Acked-by: Mike Snitzer <snitzer@redhat.com>
Signed-off-by: James Bottomley <JBottomley@Odin.com>
2015-08-28 13:14:56 -07:00
Christoph Hellwig
566079c849 dm-mpath, scsi_dh: request scsi_dh modules in scsi_dh, not dm-mpath
This way we can reused the same code any attachment method, not just those
requested from dm-mpath.

[jejb: fixup checkpatch error]
Signed-off-by: Christoph Hellwig <hch@lst.de>
Reviewed-by: Martin K. Petersen <martin.petersen@oracle.com>
Reviewed-by: Hannes Reinecke <hare@suse.de>
Acked-by: Mike Snitzer <snitzer@redhat.com>
Signed-off-by: James Bottomley <JBottomley@Odin.com>
2015-08-28 13:14:55 -07:00
Christoph Hellwig
1bab0de027 dm-mpath, scsi_dh: don't let dm detach device handlers
While allowing dm-mpath to attach device handlers is a functionality we need
for backwards compatibility reason there is no reason to reference count
them and detach them if dm-mpath stops using the device for some reason.

If the device handler works for the given device it can just stay attached,
and we can take the retain_hw_handler codepath.

Signed-off-by: Christoph Hellwig <hch@lst.de>
Acked-by: Mike Snitzer <snitzer@redhat.com>
Acked-by: Hannes Reinecke <hare@Suse.de>
Signed-off-by: James Bottomley <JBottomley@Odin.com>
2015-08-28 13:14:54 -07:00
Hannes Reinecke
14c3e677df scsi: Add ALUA state change UA handling
Log the ALUA state change unit attention correctly with
the message log and emit an event to allow user-space
tools to react to it.

Signed-off-by: Hannes Reinecke <hare@suse.de>
Reviewed-by: Ewan D. Milne <emilne@redhat.com>
Reviewed-by: Bart Van Assche <bart.vanassche@sandisk.com>
Signed-off-by: James Bottomley <JBottomley@Odin.com>
2015-08-26 07:19:57 -07:00
Linus Torvalds
4e7fca0d0a Merge branch 'for-4.2-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/libata
Pull libata fixes from Tejun Heo:
 "Three minor device-specific fixes and revert of NCQ autosense added
  during this -rc1.

  It turned out that NCQ autosense as currently implemented interferes
  with the usual error handling behavior.  It will be revisited in the
  near future"

* 'for-4.2-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/libata:
  ata: ahci_brcmstb: Fix misuse of IS_ENABLED
  sata_sx4: Check return code from pdc20621_i2c_read()
  Revert "libata: Implement NCQ autosense"
  Revert "libata: Implement support for sense data reporting"
  Revert "libata-eh: Set 'information' field for autosense"
  ata: ahci_brcmstb: Fix warnings with CONFIG_PM_SLEEP=n
2015-08-17 16:20:45 -07:00
Tejun Heo
fe16d4f202 Revert "libata-eh: Set 'information' field for autosense"
This reverts commit a1524f226a.

As implemented, ACS-4 sense reporting for ATA devices bypasses error
diagnosis and handling in libata degrading EH behavior significantly.
Revert the related changes for now.

Signed-off-by: Tejun Heo <tj@kernel.org>
Cc: Hannes Reinecke <hare@suse.de>
Cc: stable@vger.kernel.org #v4.1+
2015-08-03 11:41:33 -04:00