Commit 0b84e6ee authored Dec 08, 2021 by Greg Kroah-Hartman

Merge 4.9.292 into android-4.9-q



Changes in 4.9.292
	staging: ion: Prevent incorrect reference counting behavour
	USB: serial: option: add Telit LE910S1 0x9200 composition
	USB: serial: option: add Fibocom FM101-GL variants
	usb: hub: Fix usb enumeration issue due to address0 race
	usb: hub: Fix locking issues with address0_mutex
	binder: fix test regression due to sender_euid change
	ALSA: ctxfi: Fix out-of-range access
	staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
	fuse: fix page stealing
	xen: don't continue xenstore initialization in case of errors
	xen: detect uninitialized xenbus in xenbus_init
	tracing: Fix pid filtering when triggers are attached
	ARM: dts: BCM5301X: Add interrupt properties to GPIO node
	ASoC: topology: Add missing rwsem around snd_ctl_remove() calls
	net: ieee802154: handle iftypes as u32
	NFSv42: Don't fail clone() unless the OP_CLONE operation failed
	ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE
	scsi: mpt3sas: Fix kernel panic during drive powercycle test
	drm/vc4: fix error code in vc4_create_object()
	PM: hibernate: use correct mode for swsusp_close()
	tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited flows
	tracing: Check pid filtering when creating events
	hugetlbfs: flush TLBs correctly after huge_pmd_unshare
	vhost/vsock: fix incorrect used length reported to the guest
	proc/vmcore: fix clearing user buffer by properly using clear_user()
	NFC: add NCI_UNREG flag to eliminate the race
	fuse: release pipe buf after last use
	xen: sync include/xen/interface/io/ring.h with Xen's newest version
	xen/blkfront: read response from backend only once
	xen/blkfront: don't take local copy of a request from the ring page
	xen/blkfront: don't trust the backend response data blindly
	xen/netfront: read response from backend only once
	xen/netfront: don't read data from request on the ring page
	xen/netfront: disentangle tx_skb_freelist
	xen/netfront: don't trust the backend response data blindly
	tty: hvc: replace BUG_ON() with negative return value
	shm: extend forced shm destroy to support objects from several IPC nses
	NFSv42: Fix pagecache invalidation after COPY/CLONE
	hugetlb: take PMD sharing into account when flushing tlb/caches
	net: return correct error code
	platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep
	s390/setup: avoid using memblock_enforce_memory_limit
	thermal: core: Reset previous low and high trip during thermal zone init
	scsi: iscsi: Unblock session then wake up error handler
	ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()
	net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound
	net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock()
	vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
	kprobes: Limit max data_size of the kretprobe instances
	sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
	sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl
	fs: add fget_many() and fput_many()
	fget: check that the fd still exists after getting a ref to it
	natsemi: xtensa: fix section mismatch warnings
	net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
	siphash: use _unaligned version by default
	net/rds: correct socket tunable error in rds_tcp_tune()
	parisc: Fix "make install" on newer debian releases
	vgacon: Propagate console boot parameters before calling `vc_resize'
	tty: serial: msm_serial: Deactivate RX DMA for polling support
	serial: pl011: Add ACPI SBSA UART match id
	serial: core: fix transmit-buffer reset and memleak
	Linux 4.9.292

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: I98a677406cfca6a63fffa4a94e45edbd45fd671a

parents 58fa83d9 575a0d95

Makefile

+1 −1

Original line number	Diff line number	Diff line
		VERSION = 4
		PATCHLEVEL = 9
		SUBLEVEL = 291
		SUBLEVEL = 292
		EXTRAVERSION =
		NAME = Roaring Lionus

arch/arm/boot/dts/bcm5301x.dtsi

+2 −0

Original line number	Diff line number	Diff line
		@@ -234,6 +234,8 @@

		gpio-controller;
		#gpio-cells = <2>;
		interrupt-controller;
		#interrupt-cells = <2>;
		};

		usb2: usb2@21000 {

arch/arm/include/asm/tlb.h

+8 −0

Original line number	Diff line number	Diff line
		@@ -278,6 +278,14 @@ tlb_remove_pmd_tlb_entry(struct mmu_gather tlb, pmd_t pmdp, unsigned long addr
		tlb_add_flush(tlb, addr);
		}

		static inline void
		tlb_flush_pmd_range(struct mmu_gather *tlb, unsigned long address,
		unsigned long size)
		{
		tlb_add_flush(tlb, address);
		tlb_add_flush(tlb, address + size - PMD_SIZE);
		}

		#define pte_free_tlb(tlb, ptep, addr) __pte_free_tlb(tlb, ptep, addr)
		#define pmd_free_tlb(tlb, pmdp, addr) __pmd_free_tlb(tlb, pmdp, addr)
		#define pud_free_tlb(tlb, pudp, addr) pud_free((tlb)->mm, pudp)

arch/arm/mach-socfpga/core.h

+1 −1

Original line number	Diff line number	Diff line
		@@ -48,7 +48,7 @@ extern void __iomem *sdr_ctl_base_addr;
		u32 socfpga_sdram_self_refresh(u32 sdr_base);
		extern unsigned int socfpga_sdram_self_refresh_sz;

		extern char secondary_trampoline, secondary_trampoline_end;
		extern char secondary_trampoline[], secondary_trampoline_end[];

		extern unsigned long socfpga_cpu1start_addr;

arch/arm/mach-socfpga/platsmp.c

+4 −4

Original line number	Diff line number	Diff line
		@@ -31,14 +31,14 @@

		static int socfpga_boot_secondary(unsigned int cpu, struct task_struct *idle)
		{
		int trampoline_size = &secondary_trampoline_end - &secondary_trampoline;
		int trampoline_size = secondary_trampoline_end - secondary_trampoline;

		if (socfpga_cpu1start_addr) {
		/* This will put CPU #1 into reset. */
		writel(RSTMGR_MPUMODRST_CPU1,
		rst_manager_base_addr + SOCFPGA_RSTMGR_MODMPURST);

		memcpy(phys_to_virt(0), &secondary_trampoline, trampoline_size);
		memcpy(phys_to_virt(0), secondary_trampoline, trampoline_size);

		writel(virt_to_phys(secondary_startup),
		sys_manager_base_addr + (socfpga_cpu1start_addr & 0x000000ff));
		@@ -56,12 +56,12 @@ static int socfpga_boot_secondary(unsigned int cpu, struct task_struct *idle)

		static int socfpga_a10_boot_secondary(unsigned int cpu, struct task_struct *idle)
		{
		int trampoline_size = &secondary_trampoline_end - &secondary_trampoline;
		int trampoline_size = secondary_trampoline_end - secondary_trampoline;

		if (socfpga_cpu1start_addr) {
		writel(RSTMGR_MPUMODRST_CPU1, rst_manager_base_addr +
		SOCFPGA_A10_RSTMGR_MODMPURST);
		memcpy(phys_to_virt(0), &secondary_trampoline, trampoline_size);
		memcpy(phys_to_virt(0), secondary_trampoline, trampoline_size);

		writel(virt_to_phys(secondary_startup),
		sys_manager_base_addr + (socfpga_cpu1start_addr & 0x00000fff));