)]}'
{
  "log": [
    {
      "commit": "362f6b3329cd8e799a298961b934ac4e839f0a7d",
      "tree": "2de798800b9d7a46db4d3bda667469455de22672",
      "parents": [
        "00709f7f01c3a10252f030f0bdacecbb349d7be4"
      ],
      "author": {
        "name": "Jonathan Cameron",
        "email": "jic23@kernel.org",
        "time": "Mon Mar 28 17:47:01 2016 +0100"
      },
      "committer": {
        "name": "Jonathan Cameron",
        "email": "jic23@kernel.org",
        "time": "Mon Mar 28 17:47:01 2016 +0100"
      },
      "message": "Mass patch of the differences between the parrot code dump and 3.4.11 which it is based upon.\n"
    },
    {
      "commit": "00709f7f01c3a10252f030f0bdacecbb349d7be4",
      "tree": "e34065c6fb9912d86cbe81c955b7125eb0f21598",
      "parents": [
        "e18625cacb8e252e3e4a9dea3db4dbca523276bc"
      ],
      "author": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 15:18:55 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 15:18:55 2012 -0700"
      },
      "message": "Linux 3.4.11\n"
    },
    {
      "commit": "e18625cacb8e252e3e4a9dea3db4dbca523276bc",
      "tree": "de4ab619ddfbc14f4e74d6a917ceddaf39b2b4c4",
      "parents": [
        "af843972724e172827266e91ba326c069c8c088c"
      ],
      "author": {
        "name": "Luca Tettamanti",
        "email": "kronos.it@gmail.com",
        "time": "Tue Aug 21 17:36:28 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:34 2012 -0700"
      },
      "message": "hwmon: (asus_atk0110) Add quirk for Asus M5A78L\n\ncommit 43ca6cb28c871f2fbad10117b0648e5ae3b0f638 upstream.\n\nThe old interface is bugged and reads the wrong sensor when retrieving\nthe reading for the chassis fan (it reads the CPU sensor); the new\ninterface works fine.\n\nReported-by: Göran Uddeborg \u003cgoeran@uddeborg.se\u003e\nTested-by: Göran Uddeborg \u003cgoeran@uddeborg.se\u003e\nSigned-off-by: Luca Tettamanti \u003ckronos.it@gmail.com\u003e\nSigned-off-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "af843972724e172827266e91ba326c069c8c088c",
      "tree": "532784df2f1c8e938f015e9f52c6fe7ae23981e4",
      "parents": [
        "72961d91696071841fa013f11f686eaa7e2d0996"
      ],
      "author": {
        "name": "Mathias Krause",
        "email": "minipli@googlemail.com",
        "time": "Wed Aug 15 11:31:54 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:34 2012 -0700"
      },
      "message": "dccp: check ccid before dereferencing\n\ncommit 276bdb82dedb290511467a5a4fdbe9f0b52dce6f upstream.\n\nccid_hc_rx_getsockopt() and ccid_hc_tx_getsockopt() might be called with\na NULL ccid pointer leading to a NULL pointer dereference. This could\nlead to a privilege escalation if the attacker is able to map page 0 and\nprepare it with a fake ccid_ops pointer.\n\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nCc: Gerrit Renker \u003cgerrit@erg.abdn.ac.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "72961d91696071841fa013f11f686eaa7e2d0996",
      "tree": "31813ab89c9cf0013c067e1525816d271c7ab33f",
      "parents": [
        "bbebafa0d9507206793a05fbeb010eafb1fdb0d0"
      ],
      "author": {
        "name": "Andreas Herrmann",
        "email": "andreas.herrmann3@amd.com",
        "time": "Tue Jul 31 15:41:45 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:34 2012 -0700"
      },
      "message": "x86, microcode, AMD: Fix broken ucode patch size check\n\ncommit 36bf50d7697be18c6bfd0401e037df10bff1e573 upstream.\n\nThis issue was recently observed on an AMD C-50 CPU where a patch of\nmaximum size was applied.\n\nCommit be62adb49294 (\"x86, microcode, AMD: Simplify ucode verification\")\nadded current_size in get_matching_microcode(). This is calculated as\nsize of the ucode patch + 8 (ie. size of the header). Later this is\ncompared against the maximum possible ucode patch size for a CPU family.\nAnd of course this fails if the patch has already maximum size.\n\nSigned-off-by: Andreas Herrmann \u003candreas.herrmann3@amd.com\u003e\nSigned-off-by: Borislav Petkov \u003cborislav.petkov@amd.com\u003e\nLink: http://lkml.kernel.org/r/1344361461-10076-1-git-send-email-bp@amd64.org\nSigned-off-by: H. Peter Anvin \u003chpa@linux.intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "bbebafa0d9507206793a05fbeb010eafb1fdb0d0",
      "tree": "f97c78c97a495081de59374d803bf1e5d2999853",
      "parents": [
        "095ac020be339cad6f158508cc3b9f740c60b53a"
      ],
      "author": {
        "name": "Konrad Rzeszutek Wilk",
        "email": "konrad.wilk@oracle.com",
        "time": "Wed Sep 05 16:35:20 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:33 2012 -0700"
      },
      "message": "xen/pciback: Fix proper FLR steps.\n\ncommit 80ba77dfbce85f2d1be54847de3c866de1b18a9a upstream.\n\nWhen we do FLR and save PCI config we did it in the wrong order.\nThe end result was that if a PCI device was unbind from\nits driver, then binded to xen-pciback, and then back to its\ndriver we would get:\n\n\u003e lspci -s 04:00.0\n04:00.0 Ethernet controller: Intel Corporation 82574L Gigabit Network Connection\n13:42:12 # 4 :~/\n\u003e echo \"0000:04:00.0\" \u003e /sys/bus/pci/drivers/pciback/unbind\n\u003e modprobe e1000e\ne1000e: Intel(R) PRO/1000 Network Driver - 2.0.0-k\ne1000e: Copyright(c) 1999 - 2012 Intel Corporation.\ne1000e 0000:04:00.0: Disabling ASPM L0s L1\ne1000e 0000:04:00.0: enabling device (0000 -\u003e 0002)\nxen: registering gsi 48 triggering 0 polarity 1\nAlready setup the GSI :48\ne1000e 0000:04:00.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode\ne1000e: probe of 0000:04:00.0 failed with error -2\n\nThis fixes it by first saving the PCI configuration space, then\ndoing the FLR.\n\nReported-by: Ren, Yongjie \u003cyongjie.ren@intel.com\u003e\nReported-and-Tested-by: Tobias Geiger \u003ctobias.geiger@vido.info\u003e\nSigned-off-by: Konrad Rzeszutek Wilk \u003ckonrad.wilk@oracle.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "095ac020be339cad6f158508cc3b9f740c60b53a",
      "tree": "c2ef5f1222978026fc4172c1251f3f417fb51765",
      "parents": [
        "9db2bc1e0363bb9401e6407b198463c01f32dd84"
      ],
      "author": {
        "name": "Ronny Hegewald",
        "email": "ronny.hegewald@online.de",
        "time": "Fri Aug 31 09:57:52 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:33 2012 -0700"
      },
      "message": "xen: Use correct masking in xen_swiotlb_alloc_coherent.\n\ncommit b5031ed1be0aa419250557123633453753181643 upstream.\n\nWhen running 32-bit pvops-dom0 and a driver tries to allocate a coherent\nDMA-memory the xen swiotlb-implementation returned memory beyond 4GB.\n\nThe underlaying reason is that if the supplied driver passes in a\nDMA_BIT_MASK(64) ( hwdev-\u003ecoherent_dma_mask is set to 0xffffffffffffffff)\nour dma_mask will be u64 set to 0xffffffffffffffff even if we set it to\nDMA_BIT_MASK(32) previously. Meaning we do not reset the upper bits.\nBy using the dma_alloc_coherent_mask function - it does the proper casting\nand we get 0xfffffffff.\n\nThis caused not working sound on a system with 4 GB and a 64-bit\ncompatible sound-card with sets the DMA-mask to 64bit.\n\nOn bare-metal and the forward-ported xen-dom0 patches from OpenSuse a coherent\nDMA-memory is always allocated inside the 32-bit address-range by calling\ndma_alloc_coherent_mask.\n\nThis patch adds the same functionality to xen swiotlb and is a rebase of the\noriginal patch from Ronny Hegewald which never got upstream b/c the\nunderlaying reason was not understood until now.\n\nThe original email with the original patch is in:\nhttp://old-list-archives.xen.org/archives/html/xen-devel/2010-02/msg00038.html\nthe original thread from where the discussion started is in:\nhttp://old-list-archives.xen.org/archives/html/xen-devel/2010-01/msg00928.html\n\nSigned-off-by: Ronny Hegewald \u003cronny.hegewald@online.de\u003e\nSigned-off-by: Stefano Panella \u003cstefano.panella@citrix.com\u003e\nAcked-By: David Vrabel \u003cdavid.vrabel@citrix.com\u003e\nSigned-off-by: Konrad Rzeszutek Wilk \u003ckonrad.wilk@oracle.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "9db2bc1e0363bb9401e6407b198463c01f32dd84",
      "tree": "76bf494811a3312cd8892a75f41f133f42dc8036",
      "parents": [
        "df0b962e0900ec0b2b93eac2795e3e65cc18052f"
      ],
      "author": {
        "name": "Mel Gorman",
        "email": "mgorman@suse.de",
        "time": "Mon Jul 23 12:16:19 2012 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:33 2012 -0700"
      },
      "message": "PARISC: Redefine ATOMIC_INIT and ATOMIC64_INIT to drop the casts\n\ncommit bba3d8c3b3c0f2123be5bc687d1cddc13437c923 upstream.\n\nThe following build error occured during a parisc build with\nswap-over-NFS patches applied.\n\nnet/core/sock.c:274:36: error: initializer element is not constant\nnet/core/sock.c:274:36: error: (near initialization for \u0027memalloc_socks\u0027)\nnet/core/sock.c:274:36: error: initializer element is not constant\n\nDave Anglin says:\n\u003e Here is the line in sock.i:\n\u003e\n\u003e struct static_key memalloc_socks \u003d ((struct static_key) { .enabled \u003d\n\u003e ((atomic_t) { (0) }) });\n\nThe above line contains two compound literals.  It also uses a designated\ninitializer to initialize the field enabled.  A compound literal is not a\nconstant expression.\n\nThe location of the above statement isn\u0027t fully clear, but if a compound\nliteral occurs outside the body of a function, the initializer list must\nconsist of constant expressions.\n\nReported-by: Fengguang Wu \u003cfengguang.wu@intel.com\u003e\nSigned-off-by: Mel Gorman \u003cmgorman@suse.de\u003e\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "df0b962e0900ec0b2b93eac2795e3e65cc18052f",
      "tree": "9336e47b755a8a6c860aca67e23ba410aa5b7fa1",
      "parents": [
        "ae2e2906541827de51f896e3b035bf3b1c660e73"
      ],
      "author": {
        "name": "Dave Airlie",
        "email": "airlied@redhat.com",
        "time": "Tue Aug 28 21:40:51 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:33 2012 -0700"
      },
      "message": "drm/vmwgfx: add MODULE_DEVICE_TABLE so vmwgfx loads at boot\n\ncommit c4903429a92be60e6fe59868924a65eca4cd1a38 upstream.\n\nThis will cause udev to load vmwgfx instead of waiting for X\nto do it.\n\nReviewed-by: Jakob Bornecrantz \u003cjakob@vmware.com\u003e\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "ae2e2906541827de51f896e3b035bf3b1c660e73",
      "tree": "d83aae835fd213ffdb7d5c5ed575318deebca42a",
      "parents": [
        "7d60f877b38866c5b46162256207891c45057b39"
      ],
      "author": {
        "name": "Dmitry Torokhov",
        "email": "dmitry.torokhov@gmail.com",
        "time": "Tue Aug 21 21:57:15 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:33 2012 -0700"
      },
      "message": "Input: i8042 - add Gigabyte T1005 series netbooks to noloop table\n\ncommit 7b125b94ca16b7e618c6241cb02c4c8060cea5e3 upstream.\n\nThey all define their chassis type as \"Other\" and therefore are not\ncategorized as \"laptops\" by the driver, which tries to perform AUX IRQ\ndelivery test which fails and causes touchpad not working.\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id\u003d42620\nSigned-off-by: Dmitry Torokhov \u003cdmitry.torokhov@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7d60f877b38866c5b46162256207891c45057b39",
      "tree": "f06de1fb5e7f805428a775906cc4a9939c5ca751",
      "parents": [
        "7db3f56f37640c88387dfda6fad1e930d589d0e3"
      ],
      "author": {
        "name": "Alan Stern",
        "email": "stern@rowland.harvard.edu",
        "time": "Thu Aug 23 10:51:55 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:33 2012 -0700"
      },
      "message": "HID: add NOGET quirk for Eaton Ellipse MAX UPS\n\ncommit 67ddbb3e6568fb1820b2cc45b00c50702b114801 upstream.\n\nThis patch (as1603) adds a NOGET quirk for the Eaton Ellipse MAX UPS\ndevice.  (The USB IDs were already present in hid-ids.h, apparently\nunder a different name.)\n\nSigned-off-by: Alan Stern \u003cstern@rowland.harvard.edu\u003e\nReported-by: Laurent Bigonville \u003cl.bigonville@edpnet.be\u003e\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7db3f56f37640c88387dfda6fad1e930d589d0e3",
      "tree": "550bafb4d1ee8cdce8e0b59dbf949c7660e2e238",
      "parents": [
        "f313f5b440c874dbee75922e30736b9069f0a1d1"
      ],
      "author": {
        "name": "James Ralston",
        "email": "james.d.ralston@intel.com",
        "time": "Mon Sep 10 10:14:02 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:33 2012 -0700"
      },
      "message": "i2c-i801: Add Device IDs for Intel Lynx Point-LP PCH\n\ncommit 4a8f1ddde942e232387e6129ce4f4c412e43802f upstream.\n\nAdd the SMBus Device IDs for the Intel Lynx Point-LP PCH.\n\nSigned-off-by: James Ralston \u003cjames.d.ralston@intel.com\u003e\nSigned-off-by: Jean Delvare \u003ckhali@linux-fr.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "f313f5b440c874dbee75922e30736b9069f0a1d1",
      "tree": "bdd3e100ba8c92147ccd9a6569cbfa9f83303099",
      "parents": [
        "b4b55ff702c3551ba39ccec0b1dda9e3b57429be"
      ],
      "author": {
        "name": "Axel Lin",
        "email": "axel.lin@gmail.com",
        "time": "Mon Sep 10 10:14:02 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:32 2012 -0700"
      },
      "message": "i2c-designware: Fix build error if CONFIG_I2C_DESIGNWARE_PLATFORM\u003dy \u0026\u0026 CONFIG_I2C_DESIGNWARE_PCI\u003dy\n\ncommit e68bb91baa0bb9817567bd45d560919e8e26373b upstream.\n\nThis patch adds config I2C_DESIGNWARE_CORE in Kconfig, and let\nI2C_DESIGNWARE_PLATFORM and I2C_DESIGNWARE_PCI select I2C_DESIGNWARE_CORE.\n\nBecause both I2C_DESIGNWARE_PLATFORM and I2C_DESIGNWARE_PCI can be built as\nbuilt-in or module, we also need to export the functions in i2c-designware-core.\n\nThis fixes below build error when CONFIG_I2C_DESIGNWARE_PLATFORM\u003dy \u0026\u0026\nCONFIG_I2C_DESIGNWARE_PCI\u003dy:\n\n  LD      drivers/i2c/busses/built-in.o\ndrivers/i2c/busses/i2c-designware-pci.o: In function `i2c_dw_clear_int\u0027:\ni2c-designware-core.c:(.text+0xa10): multiple definition of `i2c_dw_clear_int\u0027\ndrivers/i2c/busses/i2c-designware-platform.o:i2c-designware-platdrv.c:(.text+0x928): first defined here\ndrivers/i2c/busses/i2c-designware-pci.o: In function `i2c_dw_init\u0027:\ni2c-designware-core.c:(.text+0x178): multiple definition of `i2c_dw_init\u0027\ndrivers/i2c/busses/i2c-designware-platform.o:i2c-designware-platdrv.c:(.text+0x90): first defined here\ndrivers/i2c/busses/i2c-designware-pci.o: In function `dw_readl\u0027:\ni2c-designware-core.c:(.text+0xe8): multiple definition of `dw_readl\u0027\ndrivers/i2c/busses/i2c-designware-platform.o:i2c-designware-platdrv.c:(.text+0x0): first defined here\ndrivers/i2c/busses/i2c-designware-pci.o: In function `i2c_dw_isr\u0027:\ni2c-designware-core.c:(.text+0x724): multiple definition of `i2c_dw_isr\u0027\ndrivers/i2c/busses/i2c-designware-platform.o:i2c-designware-platdrv.c:(.text+0x63c): first defined here\ndrivers/i2c/busses/i2c-designware-pci.o: In function `i2c_dw_xfer\u0027:\ni2c-designware-core.c:(.text+0x4b0): multiple definition of `i2c_dw_xfer\u0027\ndrivers/i2c/busses/i2c-designware-platform.o:i2c-designware-platdrv.c:(.text+0x3c8): first defined here\ndrivers/i2c/busses/i2c-designware-pci.o: In function `i2c_dw_is_enabled\u0027:\ni2c-designware-core.c:(.text+0x9d4): multiple definition of `i2c_dw_is_enabled\u0027\ndrivers/i2c/busses/i2c-designware-platform.o:i2c-designware-platdrv.c:(.text+0x8ec): first defined here\ndrivers/i2c/busses/i2c-designware-pci.o: In function `dw_writel\u0027:\ni2c-designware-core.c:(.text+0x124): multiple definition of `dw_writel\u0027\ndrivers/i2c/busses/i2c-designware-platform.o:i2c-designware-platdrv.c:(.text+0x3c): first defined here\ndrivers/i2c/busses/i2c-designware-pci.o: In function `i2c_dw_xfer_msg\u0027:\ni2c-designware-core.c:(.text+0x2e8): multiple definition of `i2c_dw_xfer_msg\u0027\ndrivers/i2c/busses/i2c-designware-platform.o:i2c-designware-platdrv.c:(.text+0x200): first defined here\ndrivers/i2c/busses/i2c-designware-pci.o: In function `i2c_dw_enable\u0027:\ni2c-designware-core.c:(.text+0x9c8): multiple definition of `i2c_dw_enable\u0027\ndrivers/i2c/busses/i2c-designware-platform.o:i2c-designware-platdrv.c:(.text+0x8e0): first defined here\ndrivers/i2c/busses/i2c-designware-pci.o: In function `i2c_dw_read_comp_param\u0027:\ni2c-designware-core.c:(.text+0xa24): multiple definition of `i2c_dw_read_comp_param\u0027\ndrivers/i2c/busses/i2c-designware-platform.o:i2c-designware-platdrv.c:(.text+0x93c): first defined here\ndrivers/i2c/busses/i2c-designware-pci.o: In function `i2c_dw_disable\u0027:\ni2c-designware-core.c:(.text+0x9dc): multiple definition of `i2c_dw_disable\u0027\ndrivers/i2c/busses/i2c-designware-platform.o:i2c-designware-platdrv.c:(.text+0x8f4): first defined here\ndrivers/i2c/busses/i2c-designware-pci.o: In function `i2c_dw_func\u0027:\ni2c-designware-core.c:(.text+0x710): multiple definition of `i2c_dw_func\u0027\ndrivers/i2c/busses/i2c-designware-platform.o:i2c-designware-platdrv.c:(.text+0x628): first defined here\ndrivers/i2c/busses/i2c-designware-pci.o: In function `i2c_dw_disable_int\u0027:\ni2c-designware-core.c:(.text+0xa18): multiple definition of `i2c_dw_disable_int\u0027\ndrivers/i2c/busses/i2c-designware-platform.o:i2c-designware-platdrv.c:(.text+0x930): first defined here\nmake[3]: *** [drivers/i2c/busses/built-in.o] Error 1\nmake[2]: *** [drivers/i2c/busses] Error 2\nmake[1]: *** [drivers/i2c] Error 2\nmake: *** [drivers] Error 2\n\nSigned-off-by: Axel Lin \u003caxel.lin@gmail.com\u003e\nSigned-off-by: Jean Delvare \u003ckhali@linux-fr.org\u003e\nTested-by: Jiri Slaby \u003cjslaby@suse.cz\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "b4b55ff702c3551ba39ccec0b1dda9e3b57429be",
      "tree": "3ad28ac491732e607652401e9eefb20d2a3ce55b",
      "parents": [
        "6cbe67f990c723facaeed94e29a1d854dc5930ec"
      ],
      "author": {
        "name": "Miklos Szeredi",
        "email": "mszeredi@suse.cz",
        "time": "Tue Sep 04 18:45:54 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:32 2012 -0700"
      },
      "message": "fuse: fix retrieve length\n\ncommit c9e67d483776d8d2a5f3f70491161b205930ffe1 upstream.\n\nIn some cases fuse_retrieve() would return a short byte count if offset was\nnon-zero.  The data returned was correct, though.\n\nSigned-off-by: Miklos Szeredi \u003cmszeredi@suse.cz\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "6cbe67f990c723facaeed94e29a1d854dc5930ec",
      "tree": "dd429c8da860fb2d84694ed7bc0c514637e6128a",
      "parents": [
        "d027dffcc66f749ee34c74edbd77efaaea573e4d"
      ],
      "author": {
        "name": "Jan Kara",
        "email": "jack@suse.cz",
        "time": "Mon Sep 03 16:50:42 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:32 2012 -0700"
      },
      "message": "ext3: Fix fdatasync() for files with only i_size changes\n\ncommit 156bddd8e505b295540f3ca0e27dda68cb0d49aa upstream.\n\nCode tracking when transaction needs to be committed on fdatasync(2) forgets\nto handle a situation when only inode\u0027s i_size is changed. Thus in such\nsituations fdatasync(2) doesn\u0027t force transaction with new i_size to disk\nand that can result in wrong i_size after a crash.\n\nFix the issue by updating inode\u0027s i_datasync_tid whenever its size is\nupdated.\n\nReported-by: Kristian Nielsen \u003cknielsen@knielsen-hq.org\u003e\nSigned-off-by: Jan Kara \u003cjack@suse.cz\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "d027dffcc66f749ee34c74edbd77efaaea573e4d",
      "tree": "68f4a5b6be19f40bd11b1cbe43efd623f4e775a5",
      "parents": [
        "d3ed1731ba6bca32ac0ac96377cae8fd735e16e6"
      ],
      "author": {
        "name": "Jan Kara",
        "email": "jack@suse.cz",
        "time": "Wed Sep 05 15:48:23 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:32 2012 -0700"
      },
      "message": "udf: Fix data corruption for files in ICB\n\ncommit 9c2fc0de1a6e638fe58c354a463f544f42a90a09 upstream.\n\nWhen a file is stored in ICB (inode), we overwrite part of the file, and\nthe page containing file\u0027s data is not in page cache, we end up corrupting\nfile\u0027s data by overwriting them with zeros. The problem is we use\nsimple_write_begin() which simply zeroes parts of the page which are not\nwritten to. The problem has been introduced by be021ee4 (udf: convert to\nnew aops).\n\nFix the problem by providing a -\u003ewrite_begin function which makes the page\nproperly uptodate.\n\nReported-by: Ian Abbott \u003cabbotti@mev.co.uk\u003e\nSigned-off-by: Jan Kara \u003cjack@suse.cz\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "d3ed1731ba6bca32ac0ac96377cae8fd735e16e6",
      "tree": "d0d470c33b743c71ea39df269bcafe4feffe5b4c",
      "parents": [
        "7a4601c0bfde4ed50c54f30c32c5677e3daec4f9"
      ],
      "author": {
        "name": "James Bottomley",
        "email": "JBottomley@Parallels.com",
        "time": "Wed Jul 25 23:55:55 2012 +0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:32 2012 -0700"
      },
      "message": "SCSI: Fix \u0027Device not ready\u0027 issue on mpt2sas\n\ncommit 14216561e164671ce147458653b1fea06a4ada1e upstream.\n\nThis is a particularly nasty SCSI ATA Translation Layer (SATL) problem.\n\nSAT-2 says (section 8.12.2)\n\n        if the device is in the stopped state as the result of\n        processing a START STOP UNIT command (see 9.11), then the SATL\n        shall terminate the TEST UNIT READY command with CHECK CONDITION\n        status with the sense key set to NOT READY and the additional\n        sense code of LOGICAL UNIT NOT READY, INITIALIZING COMMAND\n        REQUIRED;\n\nmpt2sas internal SATL seems to implement this.  The result is very confusing\nstandby behaviour (using hdparm -y).  If you suspend a drive and then send\nanother command, usually it wakes up.  However, if the next command is a TEST\nUNIT READY, the SATL sees that the drive is suspended and proceeds to follow\nthe SATL rules for this, returning NOT READY to all subsequent commands.  This\nmeans that the ordering of TEST UNIT READY is crucial: if you send TUR and\nthen a command, you get a NOT READY to both back.  If you send a command and\nthen a TUR, you get GOOD status because the preceeding command woke the drive.\n\nThis bit us badly because\n\ncommit 85ef06d1d252f6a2e73b678591ab71caad4667bb\nAuthor: Tejun Heo \u003ctj@kernel.org\u003e\nDate:   Fri Jul 1 16:17:47 2011 +0200\n\n    block: flush MEDIA_CHANGE from drivers on close(2)\n\nChanged our ordering on TEST UNIT READY commands meaning that SATA drives\nconnected to an mpt2sas now suspend and refuse to wake (because the mpt2sas\nSATL sees the suspend *before* the drives get awoken by the next ATA command)\nresulting in lots of failed commands.\n\nThe standard is completely nuts forcing this inconsistent behaviour, but we\nhave to work around it.\n\nThe fix for this is twofold:\n\n   1. Set the allow_restart flag so we wake the drive when we see it has been\n      suspended\n\n   2. Return all TEST UNIT READY status directly to the mid layer without any\n      further error handling which prevents us causing error handling which\n      may offline the device just because of a media check TUR.\n\nReported-by: Matthias Prager \u003clinux@matthiasprager.de\u003e\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7a4601c0bfde4ed50c54f30c32c5677e3daec4f9",
      "tree": "54dcd326a9b53c50fc085940ee0837c8ae36046e",
      "parents": [
        "797efad403c63c9a94a8f78e06ccb3aa5b4980a9"
      ],
      "author": {
        "name": "sreekanth.reddy@lsi.com",
        "email": "sreekanth.reddy@lsi.com",
        "time": "Tue Jul 17 15:57:05 2012 +0530"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:25 2012 -0700"
      },
      "message": "SCSI: mpt2sas: Fix for Driver oops, when loading driver with max_queue_depth command line option to a very small value\n\ncommit 338b131a3269881c7431234855c93c219b0979b6 upstream.\n\nIf the specified max_queue_depth setting is less than the\nexpected number of internal commands, then driver will calculate\nthe queue depth size to a negitive number. This negitive number\nis actually a very large number because variable is unsigned\n16bit integer. So, the driver will ask for a very large amount of\nmemory for message frames and resulting into oops as memory\nallocation routines will not able to handle such a large request.\n\nSo, in order to limit this kind of oops, The driver need to set\nthe max_queue_depth to a scsi mid layer\u0027s can_queue value. Then\nthe overall message frames required for IO is minimum of either\n(max_queue_depth plus internal commands) or the IOC global\ncredits.\n\nSigned-off-by: Sreekanth Reddy \u003csreekanth.reddy@lsi.com\u003e\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "797efad403c63c9a94a8f78e06ccb3aa5b4980a9",
      "tree": "314284c5c8419a8a2424ccb76dff06db27dfedee",
      "parents": [
        "dc0c0a9fc1f7ce1051f144c749f75921085fc869"
      ],
      "author": {
        "name": "Mike Snitzer",
        "email": "snitzer@redhat.com",
        "time": "Thu May 31 15:05:33 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:23 2012 -0700"
      },
      "message": "SCSI: scsi_lib: fix scsi_io_completion\u0027s SG_IO error propagation\n\ncommit 27c419739b67decced4650440829b8d51bef954b upstream.\n\nThe following v3.4-rc1 commit unmasked an existing bug in scsi_io_completion\u0027s\nSG_IO error handling: 47ac56d [SCSI] scsi_error: classify some ILLEGAL_REQUEST\nsense as a permanent TARGET_ERROR\n\nGiven that certain ILLEGAL_REQUEST are now properly categorized as\nTARGET_ERROR the host_byte is being set (before host_byte wasn\u0027t ever\nset for these ILLEGAL_REQUEST).\n\nIn scsi_io_completion, initialize req-\u003eerrors with cmd-\u003eresult _after_\nthe SG_IO block that calls __scsi_error_from_host_byte (which may\nmodify the host_byte).\n\nBefore this fix:\n\n    cdb to send: 12 01 01 00 00 00\nioctl(3, SG_IO, {\u0027S\u0027, SG_DXFER_NONE, cmd[6]\u003d[12, 01, 01, 00, 00, 00],\n    mx_sb_len\u003d32, iovec_count\u003d0, dxfer_len\u003d0, timeout\u003d20000, flags\u003d0,\n    status\u003d02, masked_status\u003d01, sb[19]\u003d[70, 00, 05, 00, 00, 00, 00, 0b,\n    00, 00, 00, 00, 24, 00, 00, 00, 00, 00, 00], host_status\u003d0x10,\n    driver_status\u003d0x8, resid\u003d0, duration\u003d0, info\u003d0x1}) \u003d 0\nSCSI Status: Check Condition\n\nSense Information:\nsense buffer empty\n\nAfter:\n\n    cdb to send: 12 01 01 00 00 00\nioctl(3, SG_IO, {\u0027S\u0027, SG_DXFER_NONE, cmd[6]\u003d[12, 01, 01, 00, 00, 00],\n    mx_sb_len\u003d32, iovec_count\u003d0, dxfer_len\u003d0, timeout\u003d20000, flags\u003d0,\n    status\u003d02, masked_status\u003d01, sb[19]\u003d[70, 00, 05, 00, 00, 00, 00, 0b,\n    00, 00, 00, 00, 24, 00, 00, 00, 00, 00, 00], host_status\u003d0,\n    driver_status\u003d0x8, resid\u003d0, duration\u003d0, info\u003d0x1}) \u003d 0\nSCSI Status: Check Condition\n\nSense Information:\n Fixed format, current;  Sense key: Illegal Request\n Additional sense: Invalid field in cdb\n Raw sense data (in hex):\n        70 00 05 00 00 00 00 0b  00 00 00 00 24 00 00 00\n        00 00 00\n\nReported-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\nTested-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\nSigned-off-by: Mike Snitzer \u003csnitzer@redhat.com\u003e\nReviewed-by: Babu Moger \u003cbabu.moger@netapp.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\n\n"
    },
    {
      "commit": "dc0c0a9fc1f7ce1051f144c749f75921085fc869",
      "tree": "d1d97b92ce5acde590421938ca9383a0ec6e1737",
      "parents": [
        "43da476d7f734a1b55680668246d0237dde4ea57"
      ],
      "author": {
        "name": "Kashyap Desai",
        "email": "Kashyap.Desai@lsi.com",
        "time": "Tue Jul 17 18:20:44 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:23 2012 -0700"
      },
      "message": "SCSI: megaraid_sas: Move poll_aen_lock initializer\n\ncommit bd8d6dd43a77bfd2b8fef5b094b9d6095e169dee upstream.\n\nThe following patch moves the poll_aen_lock initializer from\nmegasas_probe_one() to megasas_init().  This prevents a crash when a user\nloads the driver and tries to issue a poll() system call on the ioctl\ninterface with no adapters present.\n\nSigned-off-by: Kashyap Desai \u003cKashyap.Desai@lsi.com\u003e\nSigned-off-by: Adam Radford \u003caradford@gmail.com\u003e\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "43da476d7f734a1b55680668246d0237dde4ea57",
      "tree": "109cac684c7f88772dcf89779f863730e70907ad",
      "parents": [
        "05d71a5a25da396f76ee942af6682dfaecc73e84"
      ],
      "author": {
        "name": "Mikulas Patocka",
        "email": "mpatocka@redhat.com",
        "time": "Sat Sep 01 12:34:07 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:23 2012 -0700"
      },
      "message": "Fix order of arguments to compat_put_time[spec|val]\n\ncommit ed6fe9d614fc1bca95eb8c0ccd0e92db00ef9d5d upstream.\n\nCommit 644595f89620 (\"compat: Handle COMPAT_USE_64BIT_TIME in\nnet/socket.c\") introduced a bug where the helper functions to take\neither a 64-bit or compat time[spec|val] got the arguments in the wrong\norder, passing the kernel stack pointer off as a user pointer (and vice\nversa).\n\nBecause of the user address range check, that in turn then causes an\nEFAULT due to the user pointer range checking failing for the kernel\naddress.  Incorrectly resuling in a failed system call for 32-bit\nprocesses with a 64-bit kernel.\n\nOn odder architectures like HP-PA (with separate user/kernel address\nspaces), it can be used read kernel memory.\n\nSigned-off-by: Mikulas Patocka \u003cmpatocka@redhat.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "05d71a5a25da396f76ee942af6682dfaecc73e84",
      "tree": "de2b299e87d121de753838be8285f9d1dc7f25e5",
      "parents": [
        "242fa18ad8d4665c151bdd5c34ac34a8e701fff7"
      ],
      "author": {
        "name": "Dave Jones",
        "email": "davej@redhat.com",
        "time": "Thu Sep 06 12:01:00 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:22 2012 -0700"
      },
      "message": "Remove user-triggerable BUG from mpol_to_str\n\ncommit 80de7c3138ee9fd86a98696fd2cf7ad89b995d0a upstream.\n\nTrivially triggerable, found by trinity:\n\n  kernel BUG at mm/mempolicy.c:2546!\n  Process trinity-child2 (pid: 23988, threadinfo ffff88010197e000, task ffff88007821a670)\n  Call Trace:\n    show_numa_map+0xd5/0x450\n    show_pid_numa_map+0x13/0x20\n    traverse+0xf2/0x230\n    seq_read+0x34b/0x3e0\n    vfs_read+0xac/0x180\n    sys_pread64+0xa2/0xc0\n    system_call_fastpath+0x1a/0x1f\n  RIP: mpol_to_str+0x156/0x360\n\nSigned-off-by: Dave Jones \u003cdavej@redhat.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "242fa18ad8d4665c151bdd5c34ac34a8e701fff7",
      "tree": "70ed336dd84ad1e4a1bb710a8e2c4b0ef4027917",
      "parents": [
        "fe83a638356c2a7ea4e429ea5ce627d5001757fe"
      ],
      "author": {
        "name": "Paul Mackerras",
        "email": "paulus@samba.org",
        "time": "Tue Sep 04 18:33:08 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:22 2012 -0700"
      },
      "message": "powerpc: Make sure IPI handlers see data written by IPI senders\n\ncommit 9fb1b36ca1234e64a5d1cc573175303395e3354d upstream.\n\nWe have been observing hangs, both of KVM guest vcpu tasks and more\ngenerally, where a process that is woken doesn\u0027t properly wake up and\ncontinue to run, but instead sticks in TASK_WAKING state.  This\nhappens because the update of rq-\u003ewake_list in ttwu_queue_remote()\nis not ordered with the update of ipi_message in\nsmp_muxed_ipi_message_pass(), and the reading of rq-\u003ewake_list in\nscheduler_ipi() is not ordered with the reading of ipi_message in\nsmp_ipi_demux().  Thus it is possible for the IPI receiver not to see\nthe updated rq-\u003ewake_list and therefore conclude that there is nothing\nfor it to do.\n\nIn order to make sure that anything done before smp_send_reschedule()\nis ordered before anything done in the resulting call to scheduler_ipi(),\nthis adds barriers in smp_muxed_message_pass() and smp_ipi_demux().\nThe barrier in smp_muxed_message_pass() is a full barrier to ensure that\nthere is a full ordering between the smp_send_reschedule() caller and\nscheduler_ipi().  In smp_ipi_demux(), we use xchg() rather than\nxchg_local() because xchg() includes release and acquire barriers.\nUsing xchg() rather than xchg_local() makes sense given that\nipi_message is not just accessed locally.\n\nThis moves the barrier between setting the message and calling the\ncause_ipi() function into the individual cause_ipi implementations.\nMost of them -- those that used outb, out_8 or similar -- already had\na full barrier because out_8 etc. include a sync before the MMIO\nstore.  This adds an explicit barrier in the two remaining cases.\n\nThese changes made no measurable difference to the speed of IPIs as\nmeasured using a simple ping-pong latency test across two CPUs on\ndifferent cores of a POWER7 machine.\n\nThe analysis of the reason why processes were not waking up properly\nis due to Milton Miller.\n\nReported-by: Milton Miller \u003cmiltonm@bga.com\u003e\nSigned-off-by: Paul Mackerras \u003cpaulus@samba.org\u003e\nSigned-off-by: Benjamin Herrenschmidt \u003cbenh@kernel.crashing.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "fe83a638356c2a7ea4e429ea5ce627d5001757fe",
      "tree": "e6e5a81bd2d4d17750778ecccd46257add2b2c15",
      "parents": [
        "c68ef2b5cb50b54e7be25f53186ebf20220c6476"
      ],
      "author": {
        "name": "Anton Blanchard",
        "email": "anton@samba.org",
        "time": "Mon Sep 03 16:51:10 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:22 2012 -0700"
      },
      "message": "powerpc: Restore correct DSCR in context switch\n\ncommit 714332858bfd40dcf8f741498336d93875c23aa7 upstream.\n\nDuring a context switch we always restore the per thread DSCR value.\nIf we aren\u0027t doing explicit DSCR management\n(ie thread.dscr_inherit \u003d\u003d 0) and the default DSCR changed while\nthe process has been sleeping we end up with the wrong value.\n\nCheck thread.dscr_inherit and select the default DSCR or per thread\nDSCR as required.\n\nThis was found with the following test case, when running with\nmore threads than CPUs (ie forcing context switching):\n\nhttp://ozlabs.org/~anton/junkcode/dscr_default_test.c\n\nWith the four patches applied I can run a combination of all\ntest cases successfully at the same time:\n\nhttp://ozlabs.org/~anton/junkcode/dscr_default_test.c\nhttp://ozlabs.org/~anton/junkcode/dscr_explicit_test.c\nhttp://ozlabs.org/~anton/junkcode/dscr_inherit_test.c\n\nSigned-off-by: Anton Blanchard \u003canton@samba.org\u003e\nSigned-off-by: Benjamin Herrenschmidt \u003cbenh@kernel.crashing.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "c68ef2b5cb50b54e7be25f53186ebf20220c6476",
      "tree": "d373e4947db60eb93d0be7a022e60529c4b47d31",
      "parents": [
        "59d0622a07571c6344f0e3c71e7a1a71eb8db9e9"
      ],
      "author": {
        "name": "Anton Blanchard",
        "email": "anton@samba.org",
        "time": "Mon Sep 03 16:49:47 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:22 2012 -0700"
      },
      "message": "powerpc: Fix DSCR inheritance in copy_thread()\n\ncommit 1021cb268b3025573c4811f1dee4a11260c4507b upstream.\n\nIf the default DSCR is non zero we set thread.dscr_inherit in\ncopy_thread() meaning the new thread and all its children will ignore\nfuture updates to the default DSCR. This is not intended and is\na change in behaviour that a number of our users have hit.\n\nWe just need to inherit thread.dscr and thread.dscr_inherit from\nthe parent which ends up being much simpler.\n\nThis was found with the following test case:\n\nhttp://ozlabs.org/~anton/junkcode/dscr_default_test.c\n\nSigned-off-by: Anton Blanchard \u003canton@samba.org\u003e\nSigned-off-by: Benjamin Herrenschmidt \u003cbenh@kernel.crashing.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "59d0622a07571c6344f0e3c71e7a1a71eb8db9e9",
      "tree": "b7e27ef692a8a19da9d42d60cd4301394fc8c3bb",
      "parents": [
        "652f43702b224351b790fd9182744d7946d4cdf6"
      ],
      "author": {
        "name": "Anton Blanchard",
        "email": "anton@samba.org",
        "time": "Mon Sep 03 16:48:46 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:22 2012 -0700"
      },
      "message": "powerpc: Keep thread.dscr and thread.dscr_inherit in sync\n\ncommit 00ca0de02f80924dfff6b4f630e1dff3db005e35 upstream.\n\nWhen we update the DSCR either via emulation of mtspr(DSCR) or via\na change to dscr_default in sysfs we don\u0027t update thread.dscr.\nWe will eventually update it at context switch time but there is\na period where thread.dscr is incorrect.\n\nIf we fork at this point we will copy the old value of thread.dscr\ninto the child. To avoid this, always keep thread.dscr in sync with\nreality.\n\nThis issue was found with the following testcase:\n\nhttp://ozlabs.org/~anton/junkcode/dscr_inherit_test.c\n\nSigned-off-by: Anton Blanchard \u003canton@samba.org\u003e\nSigned-off-by: Benjamin Herrenschmidt \u003cbenh@kernel.crashing.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "652f43702b224351b790fd9182744d7946d4cdf6",
      "tree": "417d56cf598b44311b7d4664e7348ae9285c3c37",
      "parents": [
        "a9959bb7e1510edb3326beb354e59da0a6a0dab1"
      ],
      "author": {
        "name": "Anton Blanchard",
        "email": "anton@samba.org",
        "time": "Mon Sep 03 16:47:56 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:22 2012 -0700"
      },
      "message": "powerpc: Update DSCR on all CPUs when writing sysfs dscr_default\n\ncommit 1b6ca2a6fe56e7697d57348646e07df08f43b1bb upstream.\n\nWriting to dscr_default in sysfs doesn\u0027t actually change the DSCR -\nwe rely on a context switch on each CPU to do the work. There is no\nguarantee we will get a context switch in a reasonable amount of time\nso fire off an IPI to force an immediate change.\n\nThis issue was found with the following test case:\n\nhttp://ozlabs.org/~anton/junkcode/dscr_explicit_test.c\n\nSigned-off-by: Anton Blanchard \u003canton@samba.org\u003e\nSigned-off-by: Benjamin Herrenschmidt \u003cbenh@kernel.crashing.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "a9959bb7e1510edb3326beb354e59da0a6a0dab1",
      "tree": "18857cd073bb4010495b9353d064f9de0ad52057",
      "parents": [
        "5750abb9208ee301f0ae9c6c6cb231460feddf0e"
      ],
      "author": {
        "name": "Sven Schnelle",
        "email": "svens@stackframe.org",
        "time": "Fri Aug 17 21:43:43 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:22 2012 -0700"
      },
      "message": "USB: CDC ACM: Fix NULL pointer dereference\n\ncommit 99f347caa4568cb803862730b3b1f1942639523f upstream.\n\nIf a device specifies zero endpoints in its interface descriptor,\nthe kernel oopses in acm_probe(). Even though that\u0027s clearly an\ninvalid descriptor, we should test wether we have all endpoints.\nThis is especially bad as this oops can be triggered by just\nplugging a USB device in.\n\nSigned-off-by: Sven Schnelle \u003csvens@stackframe.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "5750abb9208ee301f0ae9c6c6cb231460feddf0e",
      "tree": "a4bd9f0162051b2683b1c575430b1c8f390dc0fe",
      "parents": [
        "98ad260d991f75b38ac1fbce0a10b4a45799f97b"
      ],
      "author": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Aug 17 17:48:26 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:21 2012 -0700"
      },
      "message": "USB: smsusb: remove __devinit* from the struct usb_device_id table\n\ncommit d04dbd1c0ec17a13326c8f2279399c225836a79f upstream.\n\nThis structure needs to always stick around, even if CONFIG_HOTPLUG\nis disabled, otherwise we can oops when trying to probe a device that\nwas added after the structure is thrown away.\n\nThanks to Fengguang Wu and Bjørn Mork for tracking this issue down.\n\nReported-by: Fengguang Wu \u003cfengguang.wu@intel.com\u003e\nReported-by: Bjørn Mork \u003cbjorn@mork.no\u003e\nCC: Mauro Carvalho Chehab \u003cmchehab@infradead.org\u003e\nCC: Michael Krufky \u003cmkrufky@linuxtv.org\u003e\nCC: Paul Gortmaker \u003cpaul.gortmaker@windriver.com\u003e\nCC: Doron Cohen \u003cdoronc@siano-ms.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "98ad260d991f75b38ac1fbce0a10b4a45799f97b",
      "tree": "597fd710d38642f78ba63a64fa40ffe892376654",
      "parents": [
        "37037e1533d34db1256977fe2363142b8287780b"
      ],
      "author": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Aug 17 17:48:29 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:21 2012 -0700"
      },
      "message": "USB: rtl8187: remove __devinit* from the struct usb_device_id table\n\ncommit a3433179d0822ccfa8e80aa4d1d52843bd2dcc63 upstream.\n\nThis structure needs to always stick around, even if CONFIG_HOTPLUG\nis disabled, otherwise we can oops when trying to probe a device that\nwas added after the structure is thrown away.\n\nThanks to Fengguang Wu and Bjørn Mork for tracking this issue down.\n\nReported-by: Fengguang Wu \u003cfengguang.wu@intel.com\u003e\nReported-by: Bjørn Mork \u003cbjorn@mork.no\u003e\nCC: Herton Ronaldo Krzesinski \u003cherton@canonical.com\u003e\nCC: Hin-Tak Leung \u003chtl10@users.sourceforge.net\u003e\nCC: Larry Finger \u003cLarry.Finger@lwfinger.net\u003e\nCC: \"John W. Linville\" \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "37037e1533d34db1256977fe2363142b8287780b",
      "tree": "d9e8d62b4009199340d8692709e817851bad336a",
      "parents": [
        "3ecad65934b8d33eeab93f2230f6418642013d27"
      ],
      "author": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Aug 17 17:48:28 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:21 2012 -0700"
      },
      "message": "USB: p54usb: remove __devinit* from the struct usb_device_id table\n\ncommit b9c4167cbbafddac3462134013bc15e63e4c53ef upstream.\n\nThis structure needs to always stick around, even if CONFIG_HOTPLUG\nis disabled, otherwise we can oops when trying to probe a device that\nwas added after the structure is thrown away.\n\nThanks to Fengguang Wu and Bjørn Mork for tracking this issue down.\n\nReported-by: Fengguang Wu \u003cfengguang.wu@intel.com\u003e\nReported-by: Bjørn Mork \u003cbjorn@mork.no\u003e\nCC: Christian Lamparter \u003cchunkeey@googlemail.com\u003e\nCC: \"John W. Linville\" \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "3ecad65934b8d33eeab93f2230f6418642013d27",
      "tree": "a9bcc2311233a4bc64c60c2e9353501d734f8ce6",
      "parents": [
        "3c8ac60ddf5f8efaa1b65466fa357954259e387d"
      ],
      "author": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Aug 17 17:48:27 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:21 2012 -0700"
      },
      "message": "USB: jl2005bcd: remove __devinit* from the struct usb_device_id table\n\ncommit ec063351684298e295dc9444d143ddfd6ab02df8 upstream.\n\nThis structure needs to always stick around, even if CONFIG_HOTPLUG\nis disabled, otherwise we can oops when trying to probe a device that\nwas added after the structure is thrown away.\n\nThanks to Fengguang Wu and Bjørn Mork for tracking this issue down.\n\nReported-by: Fengguang Wu \u003cfengguang.wu@intel.com\u003e\nReported-by: Bjørn Mork \u003cbjorn@mork.no\u003e\nCC: Hans de Goede \u003chdegoede@redhat.com\u003e\nCC: Mauro Carvalho Chehab \u003cmchehab@infradead.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "3c8ac60ddf5f8efaa1b65466fa357954259e387d",
      "tree": "c9a5c274e5ed5be46310a42123fb7c67ac51b3b8",
      "parents": [
        "e9497730c0f0b2b15006a869a2d3ed6febce5f1b"
      ],
      "author": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Aug 17 17:48:27 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:21 2012 -0700"
      },
      "message": "USB: spca506: remove __devinit* from the struct usb_device_id table\n\ncommit e694d518886c7afedcdd1732477832b2e32744e4 upstream.\n\nThis structure needs to always stick around, even if CONFIG_HOTPLUG\nis disabled, otherwise we can oops when trying to probe a device that\nwas added after the structure is thrown away.\n\nThanks to Fengguang Wu and Bjørn Mork for tracking this issue down.\n\nReported-by: Fengguang Wu \u003cfengguang.wu@intel.com\u003e\nReported-by: Bjørn Mork \u003cbjorn@mork.no\u003e\nCC: Hans de Goede \u003chdegoede@redhat.com\u003e\nCC: Mauro Carvalho Chehab \u003cmchehab@infradead.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "e9497730c0f0b2b15006a869a2d3ed6febce5f1b",
      "tree": "19ba94f89558bf37d98744647c0ed045565349da",
      "parents": [
        "0522ba5d15022bca061c7c73c811eaed916bb369"
      ],
      "author": {
        "name": "Mike Frysinger",
        "email": "vapier@gentoo.org",
        "time": "Sat Aug 18 16:11:37 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:21 2012 -0700"
      },
      "message": "x32: Use compat shims for {g,s}etsockopt\n\ncommit 515c7af85ed92696c311c53d53cb4898ff32d784 upstream.\n\nSome of the arguments to {g,s}etsockopt are passed in userland pointers.\nIf we try to use the 64bit entry point, we end up sometimes failing.\n\nFor example, dhcpcd doesn\u0027t run in x32:\n\t# dhcpcd eth0\n\tdhcpcd[1979]: version 5.5.6 starting\n\tdhcpcd[1979]: eth0: broadcasting for a lease\n\tdhcpcd[1979]: eth0: open_socket: Invalid argument\n\tdhcpcd[1979]: eth0: send_raw_packet: Bad file descriptor\n\nThe code in particular is getting back EINVAL when doing:\n\tstruct sock_fprog pf;\n\tsetsockopt(s, SOL_SOCKET, SO_ATTACH_FILTER, \u0026pf, sizeof(pf));\n\nDiving into the kernel code, we can see:\ninclude/linux/filter.h:\n\tstruct sock_fprog {\n\t\tunsigned short len;\n\t\tstruct sock_filter __user *filter;\n\t};\n\nnet/core/sock.c:\n\tcase SO_ATTACH_FILTER:\n\t\tret \u003d -EINVAL;\n\t\tif (optlen \u003d\u003d sizeof(struct sock_fprog)) {\n\t\t\tstruct sock_fprog fprog;\n\n\t\t\tret \u003d -EFAULT;\n\t\t\tif (copy_from_user(\u0026fprog, optval, sizeof(fprog)))\n\t\t\t\tbreak;\n\n\t\t\tret \u003d sk_attach_filter(\u0026fprog, sk);\n\t\t}\n\t\tbreak;\n\narch/x86/syscalls/syscall_64.tbl:\n\t54 common setsockopt sys_setsockopt\n\t55 common getsockopt sys_getsockopt\n\nSo for x64, sizeof(sock_fprog) is 16 bytes.  For x86/x32, it\u0027s 8 bytes.\nThis comes down to the pointer being 32bit for x32, which means we need\nto do structure size translation.  But since x32 comes in directly to\nsys_setsockopt, it doesn\u0027t get translated like x86.\n\nAfter changing the syscall table and rebuilding glibc with the new kernel\nheaders, dhcp runs fine in an x32 userland.\n\nOddly, it seems like Linus noted the same thing during the initial port,\nbut I guess that was missed/lost along the way:\n\thttps://lkml.org/lkml/2011/8/26/452\n\n[ hpa: tagging for -stable since this is an ABI fix. ]\n\nBugzilla: https://bugs.gentoo.org/423649\nReported-by: Mads \u003cmads@ab3.no\u003e\nSigned-off-by: Mike Frysinger \u003cvapier@gentoo.org\u003e\nLink: http://lkml.kernel.org/r/1345320697-15713-1-git-send-email-vapier@gentoo.org\nCc: H. J. Lu \u003chjl.tools@gmail.com\u003e\nSigned-off-by: H. Peter Anvin \u003chpa@zytor.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "0522ba5d15022bca061c7c73c811eaed916bb369",
      "tree": "390e674dbf113483a5a9486f5ddd86f9221f1789",
      "parents": [
        "3ad3bc52af22aa08b703c57f494e6d7f9beabe7b"
      ],
      "author": {
        "name": "Aaro Koskinen",
        "email": "aaro.koskinen@iki.fi",
        "time": "Wed Aug 15 01:10:04 2012 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:21 2012 -0700"
      },
      "message": "regulator: twl-regulator: fix up VINTANA1/VINTANA2\n\ncommit 908d6d52928a7f2a4b317aac47542c5fbef43d88 upstream.\n\nIt seems commit 2098e95ce9bb039ff2e7bf836df358d18a176139 (regulator: twl:\nadapt twl-regulator driver to dt) accidentally deleted VINTANA1. Also\nthe same commit defines VINTANA2 twice with TWL4030_ADJUSTABLE_LDO and\nTWL4030_FIXED_LDO. This patch changes the fixed one to be VINTANA1.\n\nI noticed this when auditing my N900 boot logs. I could not notice any\nchange in device behaviour, though, except that the boot logs are now\nlike before:\n\n\t...\n\t[    0.282928] VDAC: 1800 mV normal standby\n\t[    0.284027] VCSI: 1800 mV normal standby\n\t[    0.285400] VINTANA1: 1500 mV normal standby\n\t[    0.286865] VINTANA2: 2750 mV normal standby\n\t[    0.288208] VINTDIG: 1500 mV normal standby\n\t[    0.289978] VSDI_CSI: 1800 mV normal standby\n\t...\n\nSigned-off-by: Aaro Koskinen \u003caaro.koskinen@iki.fi\u003e\nSigned-off-by: Mark Brown \u003cbroonie@opensource.wolfsonmicro.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "3ad3bc52af22aa08b703c57f494e6d7f9beabe7b",
      "tree": "e4c59b4b91f061a289dc08741ba97a2aebb67523",
      "parents": [
        "8d30b9939e38e55035bad49f964ff6a3f671179e"
      ],
      "author": {
        "name": "Alexandre Bounine",
        "email": "alexandre.bounine@idt.com",
        "time": "Tue Aug 21 16:16:12 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:20 2012 -0700"
      },
      "message": "rapidio/tsi721: fix unused variable compiler warning\n\ncommit 9a9a9a7adafe62a34de8b4fb48936c1c5f9bafa5 upstream.\n\nFix unused variable compiler warning when built with CONFIG_RAPIDIO_DEBUG\noption off.\n\nThis patch is applicable to kernel versions starting from v3.2\n\nSigned-off-by: Alexandre Bounine \u003calexandre.bounine@idt.com\u003e\nCc: Matt Porter \u003cmporter@kernel.crashing.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "8d30b9939e38e55035bad49f964ff6a3f671179e",
      "tree": "c2374749e51e15d0b2b8ecda70b79c44f6724acf",
      "parents": [
        "190d60406f1e111bd212e271076bdab9e104ebe6"
      ],
      "author": {
        "name": "Alexandre Bounine",
        "email": "alexandre.bounine@idt.com",
        "time": "Tue Aug 21 16:16:11 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:20 2012 -0700"
      },
      "message": "rapidio/tsi721: fix inbound doorbell interrupt handling\n\ncommit 3670e7e12e582c6d67761275d148171feb7a9004 upstream.\n\nMake sure that there is no doorbell messages left behind due to disabled\ninterrupts during inbound doorbell processing.\n\nThe most common case for this bug is loss of rionet JOIN messages in\nsystems with three or more rionet participants and MSI or MSI-X enabled.\nAs result, requests for packet transfers may finish with \"destination\nunreachable\" error message.\n\nThis patch is applicable to kernel versions starting from v3.2.\n\nSigned-off-by: Alexandre Bounine \u003calexandre.bounine@idt.com\u003e\nCc: Matt Porter \u003cmporter@kernel.crashing.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "190d60406f1e111bd212e271076bdab9e104ebe6",
      "tree": "2f1a52e9ac44960821dbcaba4e14dd294a14dbf1",
      "parents": [
        "ebad30a797a5e5093d69e39bc046edab9452fe00"
      ],
      "author": {
        "name": "Jayakrishnan Memana",
        "email": "jayakrishnan.memana@maxim-ic.com",
        "time": "Sun Jul 15 10:54:03 2012 -0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:20 2012 -0700"
      },
      "message": "uvcvideo: Reset the bytesused field when recycling an erroneous buffer\n\ncommit 8a3f0ede2b3f5477122060af1a816c6bbf09fcd2 upstream.\n\nBuffers marked as erroneous are recycled immediately by the driver if\nthe nodrop module parameter isn\u0027t set. The buffer payload size is reset\nto 0, but the buffer bytesused field isn\u0027t. This results in the buffer\nbeing immediately considered as complete, leading to an infinite loop in\ninterrupt context.\n\nFix the problem by resetting the bytesused field when recycling the\nbuffer.\n\nSigned-off-by: Jayakrishnan Memana \u003cjayakrishnan.memana@maxim-ic.com\u003e\nSigned-off-by: Laurent Pinchart \u003claurent.pinchart@ideasonboard.com\u003e\nSigned-off-by: Mauro Carvalho Chehab \u003cmchehab@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "ebad30a797a5e5093d69e39bc046edab9452fe00",
      "tree": "72bb3340190a4b42d2bd302cc706c6b91c1b45a6",
      "parents": [
        "0f342b96d471d48fb151ae9073e58e0510e0a58f"
      ],
      "author": {
        "name": "Stanislaw Gruszka",
        "email": "sgruszka@redhat.com",
        "time": "Wed Aug 08 11:27:15 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:20 2012 -0700"
      },
      "message": "sched: fix divide by zero at {thread_group,task}_times\n\ncommit bea6832cc8c4a0a9a65dd17da6aaa657fe27bc3e upstream.\n\nOn architectures where cputime_t is 64 bit type, is possible to trigger\ndivide by zero on do_div(temp, (__force u32) total) line, if total is a\nnon zero number but has lower 32 bit\u0027s zeroed. Removing casting is not\na good solution since some do_div() implementations do cast to u32\ninternally.\n\nThis problem can be triggered in practice on very long lived processes:\n\n  PID: 2331   TASK: ffff880472814b00  CPU: 2   COMMAND: \"oraagent.bin\"\n   #0 [ffff880472a51b70] machine_kexec at ffffffff8103214b\n   #1 [ffff880472a51bd0] crash_kexec at ffffffff810b91c2\n   #2 [ffff880472a51ca0] oops_end at ffffffff814f0b00\n   #3 [ffff880472a51cd0] die at ffffffff8100f26b\n   #4 [ffff880472a51d00] do_trap at ffffffff814f03f4\n   #5 [ffff880472a51d60] do_divide_error at ffffffff8100cfff\n   #6 [ffff880472a51e00] divide_error at ffffffff8100be7b\n      [exception RIP: thread_group_times+0x56]\n      RIP: ffffffff81056a16  RSP: ffff880472a51eb8  RFLAGS: 00010046\n      RAX: bc3572c9fe12d194  RBX: ffff880874150800  RCX: 0000000110266fad\n      RDX: 0000000000000000  RSI: ffff880472a51eb8  RDI: 001038ae7d9633dc\n      RBP: ffff880472a51ef8   R8: 00000000b10a3a64   R9: ffff880874150800\n      R10: 00007fcba27ab680  R11: 0000000000000202  R12: ffff880472a51f08\n      R13: ffff880472a51f10  R14: 0000000000000000  R15: 0000000000000007\n      ORIG_RAX: ffffffffffffffff  CS: 0010  SS: 0018\n   #7 [ffff880472a51f00] do_sys_times at ffffffff8108845d\n   #8 [ffff880472a51f40] sys_times at ffffffff81088524\n   #9 [ffff880472a51f80] system_call_fastpath at ffffffff8100b0f2\n      RIP: 0000003808caac3a  RSP: 00007fcba27ab6d8  RFLAGS: 00000202\n      RAX: 0000000000000064  RBX: ffffffff8100b0f2  RCX: 0000000000000000\n      RDX: 00007fcba27ab6e0  RSI: 000000000076d58e  RDI: 00007fcba27ab6e0\n      RBP: 00007fcba27ab700   R8: 0000000000000020   R9: 000000000000091b\n      R10: 00007fcba27ab680  R11: 0000000000000202  R12: 00007fff9ca41940\n      R13: 0000000000000000  R14: 00007fcba27ac9c0  R15: 00007fff9ca41940\n      ORIG_RAX: 0000000000000064  CS: 0033  SS: 002b\n\nSigned-off-by: Stanislaw Gruszka \u003csgruszka@redhat.com\u003e\nSigned-off-by: Peter Zijlstra \u003ca.p.zijlstra@chello.nl\u003e\nLink: http://lkml.kernel.org/r/20120808092714.GA3580@redhat.com\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "0f342b96d471d48fb151ae9073e58e0510e0a58f",
      "tree": "58a1e4265c0a36975e487b02027915274ee701bc",
      "parents": [
        "3465c32ced49e3c04b7e280843f1a93ec8de8aff"
      ],
      "author": {
        "name": "Mike Galbraith",
        "email": "efault@gmx.de",
        "time": "Tue Aug 07 05:00:13 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:20 2012 -0700"
      },
      "message": "sched,cgroup: Fix up task_groups list\n\ncommit 35cf4e50b16331def6cfcbee11e49270b6db07f5 upstream.\n\nWith multiple instances of task_groups, for_each_rt_rq() is a noop,\nno task groups having been added to the rt.c list instance.  This\nrenders __enable/disable_runtime() and print_rt_stats() noop, the\nuser (non) visible effect being that rt task groups are missing in\n/proc/sched_debug.\n\nSigned-off-by: Mike Galbraith \u003cefault@gmx.de\u003e\nSigned-off-by: Peter Zijlstra \u003ca.p.zijlstra@chello.nl\u003e\nLink: http://lkml.kernel.org/r/1344308413.6846.7.camel@marge.simpson.net\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "3465c32ced49e3c04b7e280843f1a93ec8de8aff",
      "tree": "6ee84872b4b3e3f1414145c7427e828534ceb1c0",
      "parents": [
        "81d030df8597288a2fd12950aaf0842dbfa0b216"
      ],
      "author": {
        "name": "Hugh Dickins",
        "email": "hughd@google.com",
        "time": "Thu Aug 23 12:17:36 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:20 2012 -0700"
      },
      "message": "block: replace __getblk_slow misfix by grow_dev_page fix\n\ncommit 676ce6d5ca3098339c028d44fe0427d1566a4d2d upstream.\n\nCommit 91f68c89d8f3 (\"block: fix infinite loop in __getblk_slow\")\nis not good: a successful call to grow_buffers() cannot guarantee\nthat the page won\u0027t be reclaimed before the immediate next call to\n__find_get_block(), which is why there was always a loop there.\n\nYesterday I got \"EXT4-fs error (device loop0): __ext4_get_inode_loc:3595:\ninode #19278: block 664: comm cc1: unable to read itable block\" on console,\nwhich pointed to this commit.\n\nI\u0027ve been trying to bisect for weeks, why kbuild-on-ext4-on-loop-on-tmpfs\nsometimes fails from a missing header file, under memory pressure on\nppc G5.  I\u0027ve never seen this on x86, and I\u0027ve never seen it on 3.5-rc7\nitself, despite that commit being in there: bisection pointed to an\nirrelevant pinctrl merge, but hard to tell when failure takes between\n18 minutes and 38 hours (but so far it\u0027s happened quicker on 3.6-rc2).\n\n(I\u0027ve since found such __ext4_get_inode_loc errors in /var/log/messages\nfrom previous weeks: why the message never appeared on console until\nyesterday morning is a mystery for another day.)\n\nRevert 91f68c89d8f3, restoring __getblk_slow() to how it was (plus\na checkpatch nitfix).  Simplify the interface between grow_buffers()\nand grow_dev_page(), and avoid the infinite loop beyond end of device\nby instead checking init_page_buffers()\u0027s end_block there (I presume\nthat\u0027s more efficient than a repeated call to blkdev_max_block()),\nreturning -ENXIO to __getblk_slow() in that case.\n\nAnd remove akpm\u0027s ten-year-old \"__getblk() cannot fail ... weird\"\ncomment, but that is worrying: are all users of __getblk() really\nnow prepared for a NULL bh beyond end of device, or will some oops??\n\nSigned-off-by: Hugh Dickins \u003chughd@google.com\u003e\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "81d030df8597288a2fd12950aaf0842dbfa0b216",
      "tree": "451aa7aca754d26381aa8b0199ef5bcde623961f",
      "parents": [
        "459243191d5ba70a94d74b604b91bf82bb9f0772"
      ],
      "author": {
        "name": "Rafael J. Wysocki",
        "email": "rjw@sisk.pl",
        "time": "Sun Aug 12 23:26:07 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:20 2012 -0700"
      },
      "message": "PCI: EHCI: Fix crash during hibernation on ASUS computers\n\ncommit 0b68c8e2c3afaf9807eb1ebe0ccfb3b809570aa4 upstream.\n\nCommit dbf0e4c (PCI: EHCI: fix crash during suspend on ASUS\ncomputers) added a workaround for an ASUS suspend issue related to\nUSB EHCI and a bug in a number of ASUS BIOSes that attempt to shut\ndown the EHCI controller during system suspend if its PCI command\nregister doesn\u0027t contain 0 at that time.\n\nIt turns out that the same workaround is necessary in the analogous\nhibernation code path, so add it.\n\nReferences: https://bugzilla.kernel.org/show_bug.cgi?id\u003d45811\nReported-and-tested-by: Oleksij Rempel \u003cbug-track@fisher-privat.net\u003e\nSigned-off-by: Rafael J. Wysocki \u003crjw@sisk.pl\u003e\nSigned-off-by: Bjorn Helgaas \u003cbhelgaas@google.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "459243191d5ba70a94d74b604b91bf82bb9f0772",
      "tree": "5921eed681f3ca11f6cb45453d52c4e4376d1fb2",
      "parents": [
        "4500d525ad74c4195cdaf270bcc1f96dd0fd95ed"
      ],
      "author": {
        "name": "Lorenzo Bianconi",
        "email": "lorenzo.bianconi83@gmail.com",
        "time": "Fri Aug 10 11:00:24 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:19 2012 -0700"
      },
      "message": "ath9k: fix decrypt_error initialization in ath_rx_tasklet()\n\ncommit e1352fde5682ab1bdd2a9e5d75c22d1fe210ef77 upstream.\n\nath_rx_tasklet() calls ath9k_rx_skb_preprocess() and ath9k_rx_skb_postprocess()\nin a loop over the received frames. The decrypt_error flag is\ninitialized to false\njust outside ath_rx_tasklet() loop. ath9k_rx_accept(), called by\nath9k_rx_skb_preprocess(),\nonly sets decrypt_error to true and never to false.\nThen ath_rx_tasklet() calls ath9k_rx_skb_postprocess() and passes\ndecrypt_error to it.\nSo, after a decryption error, in ath9k_rx_skb_postprocess(), we can\nhave a leftover value\nfrom another processed frame. In that case, the frame will not be marked with\nRX_FLAG_DECRYPTED even if it is decrypted correctly.\nWhen using CCMP encryption this issue can lead to connection stuck\nbecause of CCMP\nPN corruption and a waste of CPU time since mac80211 tries to decrypt an already\ndeciphered frame with ieee80211_aes_ccm_decrypt.\nFix the issue initializing decrypt_error flag at the begging of the\nath_rx_tasklet() loop.\n\nSigned-off-by: Lorenzo Bianconi \u003clorenzo.bianconi83@gmail.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "4500d525ad74c4195cdaf270bcc1f96dd0fd95ed",
      "tree": "8dba3edb75dd6116ff6c315682ead83466f5c1df",
      "parents": [
        "8b340965ad3da83146684a9b68657374c5a8bfa4"
      ],
      "author": {
        "name": "Alex Deucher",
        "email": "alexander.deucher@amd.com",
        "time": "Mon Aug 20 10:57:22 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:19 2012 -0700"
      },
      "message": "ACPI: export symbol acpi_get_table_with_size\n\ncommit 4f81f986761a7663db7d24d24cd6ae68008f1fc2 upstream.\n\nWe need it in the radeon drm module to fetch\nand verify the vbios image on UEFI systems.\n\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "8b340965ad3da83146684a9b68657374c5a8bfa4",
      "tree": "0b3bf40844bf62608992d941cce98cdc300c85cf",
      "parents": [
        "234c04ccc3c86c1da2f4173fdafb805bb6160380"
      ],
      "author": {
        "name": "Stephen M. Cameron",
        "email": "scameron@beardog.cce.hp.com",
        "time": "Tue Aug 21 16:15:49 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:19 2012 -0700"
      },
      "message": "cciss: fix incorrect scsi status reporting\n\ncommit b0cf0b118c90477d1a6811f2cd2307f6a5578362 upstream.\n\nDelete code which sets SCSI status incorrectly as it\u0027s already been set\ncorrectly above this incorrect code.  The bug was introduced in 2009 by\ncommit b0e15f6db111 (\"cciss: fix typo that causes scsi status to be\nlost.\")\n\nSigned-off-by: Stephen M. Cameron \u003cscameron@beardog.cce.hp.com\u003e\nReported-by: Roel van Meer \u003croel.vanmeer@bokxing.nl\u003e\nTested-by: Roel van Meer \u003croel.vanmeer@bokxing.nl\u003e\nCc: Jens Axboe \u003caxboe@kernel.dk\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "234c04ccc3c86c1da2f4173fdafb805bb6160380",
      "tree": "6d9f9b0d30042c6356d0d2c57b9af9f0d88881e5",
      "parents": [
        "973caa9ec69452d87f65e67019429be5265f2534"
      ],
      "author": {
        "name": "J. Bruce Fields",
        "email": "bfields@redhat.com",
        "time": "Mon Aug 20 16:04:40 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:19 2012 -0700"
      },
      "message": "svcrpc: sends on closed socket should stop immediately\n\ncommit f06f00a24d76e168ecb38d352126fd203937b601 upstream.\n\nsvc_tcp_sendto sets XPT_CLOSE if we fail to transmit the entire reply.\nHowever, the XPT_CLOSE won\u0027t be acted on immediately.  Meanwhile other\nthreads could send further replies before the socket is really shut\ndown.  This can manifest as data corruption: for example, if a truncated\nread reply is followed by another rpc reply, that second reply will look\nto the client like further read data.\n\nSymptoms were data corruption preceded by svc_tcp_sendto logging\nsomething like\n\n\tkernel: rpc-srv/tcp: nfsd: sent only 963696 when sending 1048708 bytes - shutting down socket\n\nReported-by: Malahal Naineni \u003cmalahal@us.ibm.com\u003e\nTested-by: Malahal Naineni \u003cmalahal@us.ibm.com\u003e\nSigned-off-by: J. Bruce Fields \u003cbfields@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "973caa9ec69452d87f65e67019429be5265f2534",
      "tree": "c2fd5a6e895d37f93e9dad62c773481ca251d366",
      "parents": [
        "389aec33837aeaf7e7e3cb31b6f1c6da6b009fb6"
      ],
      "author": {
        "name": "J. Bruce Fields",
        "email": "bfields@redhat.com",
        "time": "Fri Aug 17 17:31:53 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:19 2012 -0700"
      },
      "message": "svcrpc: fix svc_xprt_enqueue/svc_recv busy-looping\n\ncommit d10f27a750312ed5638c876e4bd6aa83664cccd8 upstream.\n\nThe rpc server tries to ensure that there will be room to send a reply\nbefore it receives a request.\n\nIt does this by tracking, in xpt_reserved, an upper bound on the total\nsize of the replies that is has already committed to for the socket.\n\nCurrently it is adding in the estimate for a new reply *before* it\nchecks whether there is space available.  If it finds that there is not\nspace, it then subtracts the estimate back out.\n\nThis may lead the subsequent svc_xprt_enqueue to decide that there is\nspace after all.\n\nThe results is a svc_recv() that will repeatedly return -EAGAIN, causing\nserver threads to loop without doing any actual work.\n\nReported-by: Michael Tokarev \u003cmjt@tls.msk.ru\u003e\nTested-by: Michael Tokarev \u003cmjt@tls.msk.ru\u003e\nSigned-off-by: J. Bruce Fields \u003cbfields@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "389aec33837aeaf7e7e3cb31b6f1c6da6b009fb6",
      "tree": "2c9e3b1b1c7765fe98ebaac5ae61bdba4bdbcd96",
      "parents": [
        "cbd3df71bb6563fe9ab2a16dc57937c0b59c3976"
      ],
      "author": {
        "name": "J. Bruce Fields",
        "email": "bfields@redhat.com",
        "time": "Thu Aug 09 18:12:28 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:19 2012 -0700"
      },
      "message": "svcrpc: fix BUG() in svc_tcp_clear_pages\n\ncommit be1e44441a560c43c136a562d49a1c9623c91197 upstream.\n\nExamination of svc_tcp_clear_pages shows that it assumes sk_tcplen is\nconsistent with sk_pages[] (in particular, sk_pages[n] can\u0027t be NULL if\nsk_tcplen would lead us to expect n pages of data).\n\nsvc_tcp_restore_pages zeroes out sk_pages[] while leaving sk_tcplen.\nThis is OK, since both functions are serialized by XPT_BUSY.  However,\nthat means the inconsistency must be repaired before dropping XPT_BUSY.\n\nTherefore we should be ensuring that svc_tcp_save_pages repairs the\nproblem before exiting svc_tcp_recv_record on error.\n\nSymptoms were a BUG() in svc_tcp_clear_pages.\n\nSigned-off-by: J. Bruce Fields \u003cbfields@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "cbd3df71bb6563fe9ab2a16dc57937c0b59c3976",
      "tree": "7937cd0c335a81fb5b8044f4961d9a1e0dc9564e",
      "parents": [
        "e51f2ce36e978380402105199577cfb807a8ba16"
      ],
      "author": {
        "name": "Alex Deucher",
        "email": "alexander.deucher@amd.com",
        "time": "Tue Aug 21 09:55:01 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:19 2012 -0700"
      },
      "message": "Revert \"drm/radeon: fix bo creation retry path\"\n\ncommit 676bc2e1e4f9072f7a640d5b7c99ffdf9709a6e7 upstream.\n\nThis reverts commit d1c7871ddb1f588b8eb35affd9ee1a3d5e11cd0c.\n\nttm_bo_init() destroys the BO on failure. So this patch makes\nthe retry path work with freed memory.  This ends up causing\nkernel panics when this path is hit.\n\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "e51f2ce36e978380402105199577cfb807a8ba16",
      "tree": "56b5224da06ef4bcddf43a29fb3d86c0b857700a",
      "parents": [
        "47b8bbd6c2aab324fa57f004f89abb40bb8478be"
      ],
      "author": {
        "name": "Alan Cox",
        "email": "alan@linux.intel.com",
        "time": "Mon Aug 20 14:44:52 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:19 2012 -0700"
      },
      "message": "drm: stop vmgfx driver explosion\n\ncommit f5869a8308f77e3dfdc2e3640842b285aa788ff8 upstream.\n\nIf you do a page flip with no flags set then event is NULL. If event is\nNULL then the vmw_gfx driver likes to go digging into NULL and extracts\nNULL-\u003ebase.file_priv.\n\nOn a modern kernel with NULL mapping protection it\u0027s just another oops,\nwithout it there are some \"intriguing\" possibilities.\n\nWhat it should do is an open question but that for the driver owners to\nsort out.\n\nSigned-off-by: Alan Cox \u003calan@linux.intel.com\u003e\nReviewed-by: Jakob Bornecrantz \u003cjakob@vmware.com\u003e\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "47b8bbd6c2aab324fa57f004f89abb40bb8478be",
      "tree": "537905711303fcaad859a91e7351886ff792fd15",
      "parents": [
        "ae2a5dd19bccd4fa52ee6bb78ad88b960d92c606"
      ],
      "author": {
        "name": "Miklos Szeredi",
        "email": "mszeredi@suse.cz",
        "time": "Wed Aug 15 12:55:22 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:18 2012 -0700"
      },
      "message": "audit: fix refcounting in audit-tree\n\ncommit a2140fc0cb0325bb6384e788edd27b9a568714e2 upstream.\n\nRefcounting of fsnotify_mark in audit tree is broken.  E.g:\n\n                              refcount\ncreate_chunk\n  alloc_chunk                 1\n  fsnotify_add_mark           2\n\nuntag_chunk\n  fsnotify_get_mark           3\n  fsnotify_destroy_mark\n    audit_tree_freeing_mark   2\n  fsnotify_put_mark           1\n  fsnotify_put_mark           0\n  via destroy_list\n    fsnotify_mark_destroy    -1\n\nThis was reported by various people as triggering Oops when stopping auditd.\n\nWe could just remove the put_mark from audit_tree_freeing_mark() but that would\nbreak freeing via inode destruction.  So this patch simply omits a put_mark\nafter calling destroy_mark or adds a get_mark before.\n\nThe additional get_mark is necessary where there\u0027s no other put_mark after\nfsnotify_destroy_mark() since it assumes that the caller is holding a reference\n(or the inode is keeping the mark pinned, not the case here AFAICS).\n\nSigned-off-by: Miklos Szeredi \u003cmszeredi@suse.cz\u003e\nReported-by: Valentin Avram \u003caval13@gmail.com\u003e\nReported-by: Peter Moody \u003cpmoody@google.com\u003e\nAcked-by: Eric Paris \u003ceparis@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "ae2a5dd19bccd4fa52ee6bb78ad88b960d92c606",
      "tree": "dbcdab58454f8d668d393d398623d5934fdc6e4a",
      "parents": [
        "e5cd679ea475fd731686fa3c632c2d30b9d59a6d"
      ],
      "author": {
        "name": "Miklos Szeredi",
        "email": "mszeredi@suse.cz",
        "time": "Wed Aug 15 12:55:22 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:18 2012 -0700"
      },
      "message": "audit: don\u0027t free_chunk() after fsnotify_add_mark()\n\ncommit 0fe33aae0e94b4097dd433c9399e16e17d638cd8 upstream.\n\nDon\u0027t do free_chunk() after fsnotify_add_mark().  That one does a delayed unref\nvia the destroy list and this results in use-after-free.\n\nSigned-off-by: Miklos Szeredi \u003cmszeredi@suse.cz\u003e\nAcked-by: Eric Paris \u003ceparis@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "e5cd679ea475fd731686fa3c632c2d30b9d59a6d",
      "tree": "cba6692e2df869bdb3ff9b072adfb030f6ab8816",
      "parents": [
        "3cf3cfc448c480c86c439ba7c707a7b4f73ba9d9"
      ],
      "author": {
        "name": "bjschuma@gmail.com",
        "email": "bjschuma@gmail.com",
        "time": "Wed Aug 08 13:57:10 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:18 2012 -0700"
      },
      "message": "NFS: Alias the nfs module to nfs4\n\ncommit 425e776d93a7a5070b77d4f458a5bab0f924652c upstream.\n\nThis allows distros to remove the line from their modprobe\nconfiguration.\n\nSigned-off-by: Bryan Schumaker \u003cbjschuma@netapp.com\u003e\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\n[bwh: Backported to 3.2: adjust context]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "3cf3cfc448c480c86c439ba7c707a7b4f73ba9d9",
      "tree": "cf9b205436c7bbd8425fca235cdcd9e37c3e5391",
      "parents": [
        "4a20bce04ec14c74f5b77c73d7d8d476ace74cea"
      ],
      "author": {
        "name": "Szymon Janc",
        "email": "szymon.janc@tieto.com",
        "time": "Thu Jul 19 14:46:08 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:18 2012 -0700"
      },
      "message": "Bluetooth: Fix legacy pairing with some devices\n\ncommit a9ea3ed9b71cc3271dd59e76f65748adcaa76422 upstream.\n\nSome devices e.g. some Android based phones don\u0027t do SDP search before\npairing and cancel legacy pairing when ACL is disconnected.\n\nPIN Code Request event which changes ACL timeout to HCI_PAIRING_TIMEOUT\nis only received after remote user entered PIN.\n\nIn that case no L2CAP is connected so default HCI_DISCONN_TIMEOUT\n(2 seconds) is being used to timeout ACL connection. This results in\nproblems with legacy pairing as remote user has only few seconds to\nenter PIN before ACL is disconnected.\n\nIncrease disconnect timeout for incomming connection to\nHCI_PAIRING_TIMEOUT if SSP is disabled and no linkey exists.\n\nTo avoid keeping ACL alive for too long after SDP search set ACL\ntimeout back to HCI_DISCONN_TIMEOUT when L2CAP is connected.\n\n2012-07-19 13:24:43.413521 \u003c HCI Command: Create Connection (0x01|0x0005) plen 13\n    bdaddr 00:02:72:D6:6A:3F ptype 0xcc18 rswitch 0x01 clkoffset 0x0000\n    Packet type: DM1 DM3 DM5 DH1 DH3 DH5\n2012-07-19 13:24:43.425224 \u003e HCI Event: Command Status (0x0f) plen 4\n    Create Connection (0x01|0x0005) status 0x00 ncmd 1\n2012-07-19 13:24:43.885222 \u003e HCI Event: Role Change (0x12) plen 8\n    status 0x00 bdaddr 00:02:72:D6:6A:3F role 0x01\n    Role: Slave\n2012-07-19 13:24:44.054221 \u003e HCI Event: Connect Complete (0x03) plen 11\n    status 0x00 handle 42 bdaddr 00:02:72:D6:6A:3F type ACL encrypt 0x00\n2012-07-19 13:24:44.054313 \u003c HCI Command: Read Remote Supported Features (0x01|0x001b) plen 2\n    handle 42\n2012-07-19 13:24:44.055176 \u003e HCI Event: Page Scan Repetition Mode Change (0x20) plen 7\n    bdaddr 00:02:72:D6:6A:3F mode 0\n2012-07-19 13:24:44.056217 \u003e HCI Event: Max Slots Change (0x1b) plen 3\n    handle 42 slots 5\n2012-07-19 13:24:44.059218 \u003e HCI Event: Command Status (0x0f) plen 4\n    Read Remote Supported Features (0x01|0x001b) status 0x00 ncmd 0\n2012-07-19 13:24:44.062192 \u003e HCI Event: Command Status (0x0f) plen 4\n    Unknown (0x00|0x0000) status 0x00 ncmd 1\n2012-07-19 13:24:44.067219 \u003e HCI Event: Read Remote Supported Features (0x0b) plen 11\n    status 0x00 handle 42\n    Features: 0xbf 0xfe 0xcf 0xfe 0xdb 0xff 0x7b 0x87\n2012-07-19 13:24:44.067248 \u003c HCI Command: Read Remote Extended Features (0x01|0x001c) plen 3\n    handle 42 page 1\n2012-07-19 13:24:44.071217 \u003e HCI Event: Command Status (0x0f) plen 4\n    Read Remote Extended Features (0x01|0x001c) status 0x00 ncmd 1\n2012-07-19 13:24:44.076218 \u003e HCI Event: Read Remote Extended Features (0x23) plen 13\n    status 0x00 handle 42 page 1 max 1\n    Features: 0x01 0x00 0x00 0x00 0x00 0x00 0x00 0x00\n2012-07-19 13:24:44.076249 \u003c HCI Command: Remote Name Request (0x01|0x0019) plen 10\n    bdaddr 00:02:72:D6:6A:3F mode 2 clkoffset 0x0000\n2012-07-19 13:24:44.081218 \u003e HCI Event: Command Status (0x0f) plen 4\n    Remote Name Request (0x01|0x0019) status 0x00 ncmd 1\n2012-07-19 13:24:44.105214 \u003e HCI Event: Remote Name Req Complete (0x07) plen 255\n    status 0x00 bdaddr 00:02:72:D6:6A:3F name \u0027uw000951-0\u0027\n2012-07-19 13:24:44.105284 \u003c HCI Command: Authentication Requested (0x01|0x0011) plen 2\n    handle 42\n2012-07-19 13:24:44.111207 \u003e HCI Event: Command Status (0x0f) plen 4\n    Authentication Requested (0x01|0x0011) status 0x00 ncmd 1\n2012-07-19 13:24:44.112220 \u003e HCI Event: Link Key Request (0x17) plen 6\n    bdaddr 00:02:72:D6:6A:3F\n2012-07-19 13:24:44.112249 \u003c HCI Command: Link Key Request Negative Reply (0x01|0x000c) plen 6\n    bdaddr 00:02:72:D6:6A:3F\n2012-07-19 13:24:44.115215 \u003e HCI Event: Command Complete (0x0e) plen 10\n    Link Key Request Negative Reply (0x01|0x000c) ncmd 1\n    status 0x00 bdaddr 00:02:72:D6:6A:3F\n2012-07-19 13:24:44.116215 \u003e HCI Event: PIN Code Request (0x16) plen 6\n    bdaddr 00:02:72:D6:6A:3F\n2012-07-19 13:24:48.099184 \u003e HCI Event: Auth Complete (0x06) plen 3\n    status 0x13 handle 42\n    Error: Remote User Terminated Connection\n2012-07-19 13:24:48.179182 \u003e HCI Event: Disconn Complete (0x05) plen 4\n    status 0x00 handle 42 reason 0x13\n    Reason: Remote User Terminated Connection\n\nSigned-off-by: Szymon Janc \u003cszymon.janc@tieto.com\u003e\nAcked-by: Johan Hedberg \u003cjohan.hedberg@intel.com\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "4a20bce04ec14c74f5b77c73d7d8d476ace74cea",
      "tree": "398e58b2c115a384a0d3836f6bd6338c2c642777",
      "parents": [
        "a8b8ad6dcf49c84c7a8633082191c6fd7539c355"
      ],
      "author": {
        "name": "Ram Malovany",
        "email": "ramm@ti.com",
        "time": "Thu Jul 19 10:26:11 2012 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:18 2012 -0700"
      },
      "message": "Bluetooth: Set name_state to unknown when entry name is empty\n\ncommit c3e7c0d90b14a3e7ac091d24cef09efb516d587b upstream.\n\nWhen the name of the given entry is empty , the state needs to be\nupdated accordingly.\n\nSigned-off-by: Ram Malovany \u003cramm@ti.com\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "a8b8ad6dcf49c84c7a8633082191c6fd7539c355",
      "tree": "04b83d3d6fd2d6c2c5fefff150b835d7a315bead",
      "parents": [
        "a431bd57a95921188f61096e5ce29d1b769be118"
      ],
      "author": {
        "name": "Ram Malovany",
        "email": "ramm@ti.com",
        "time": "Thu Jul 19 10:26:10 2012 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:18 2012 -0700"
      },
      "message": "Bluetooth: Fix using a NULL inquiry cache entry\n\ncommit 7cc8380eb10347016d95bf6f9d842c2ae6d12932 upstream.\n\nIf the device was not found in a list of found devices names of which\nare pending.This may happen in a case when HCI Remote Name Request\nwas sent as a part of incoming connection establishment procedure.\nHence there is no need to continue resolving a next name as it will\nbe done upon receiving another Remote Name Request Complete Event.\nThis will fix a kernel crash when trying to use this entry to resolve\nthe next name.\n\nSigned-off-by: Ram Malovany \u003cramm@ti.com\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "a431bd57a95921188f61096e5ce29d1b769be118",
      "tree": "f4fbb606f078679e9f9e918354ddba0b075e4ada",
      "parents": [
        "4c795fe18aa1d2756a82c46ca29d4bfad2704d4d"
      ],
      "author": {
        "name": "Ram Malovany",
        "email": "ramm@ti.com",
        "time": "Thu Jul 19 10:26:09 2012 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:18 2012 -0700"
      },
      "message": "Bluetooth: Fix using NULL inquiry entry\n\ncommit c810089c27e48b816181b454fcc493d19fdbc2ba upstream.\n\nIf entry wasn\u0027t found in the hci_inquiry_cache_lookup_resolve do not\nresolve the name.This will fix a kernel crash when trying to use NULL\npointer.\n\nSigned-off-by: Ram Malovany \u003cramm@ti.com\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "4c795fe18aa1d2756a82c46ca29d4bfad2704d4d",
      "tree": "5dedd17670bf9371dca1cd0e5e389505a82e13b7",
      "parents": [
        "d3078898b6f08028ee5ab8f6e8d12216d7f707ee"
      ],
      "author": {
        "name": "Artem Bityutskiy",
        "email": "artem.bityutskiy@linux.intel.com",
        "time": "Tue Aug 21 21:50:58 2012 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:17 2012 -0700"
      },
      "message": "UBIFS: fix complaints about too small debug buffer size\n\ncommit 65b455b123c7e2b835a0b7148f9bae584f95000e upstream.\n\nWhen debugging is enabled, we use a temporary on-stack buffer for formatting\nthe key strings like \"(11368871, direntry, 0xcd0750)\". The buffer size is\n32 bytes and sometimes it is not enough to fit the key string - e.g., when\ninode numbers are high. This is not fatal, but the key strings are incomplete\nand UBIFS complains like this:\n\n\tUBIFS assert failed in dbg_snprintf_key at 137 (pid 1)\n\nThis is a regression caused by \"515315a UBIFS: fix key printing\".\n\nFix the issue by increasing the buffer to 48 bytes.\n\nReported-by: Michael Hench \u003cmichaelhench@gmail.com\u003e\nSigned-off-by: Artem Bityutskiy \u003cartem.bityutskiy@linux.intel.com\u003e\nTested-by: Michael Hench \u003cmichaelhench@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "d3078898b6f08028ee5ab8f6e8d12216d7f707ee",
      "tree": "de2d47ea2ff2dedc1b142c887ccdcb0c5f7103da",
      "parents": [
        "797d03b980a559cd3312f7df3b41bb265cddcd8b"
      ],
      "author": {
        "name": "Bryan Schumaker",
        "email": "bjschuma@netapp.com",
        "time": "Thu Aug 09 14:05:50 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:16 2012 -0700"
      },
      "message": "NFS: return -ENOKEY when the upcall fails to map the name\n\ncommit 12dfd080556124088ed61a292184947711b46cbe upstream.\n\nThis allows the normal error-paths to handle the error, rather than\nmaking a special call to complete_request_key() just for this instance.\n\nSigned-off-by: Bryan Schumaker \u003cbjschuma@netapp.com\u003e\nTested-by: William Dauchy \u003cwdauchy@gmail.com\u003e\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "797d03b980a559cd3312f7df3b41bb265cddcd8b",
      "tree": "9ec5a190cf5d957a050835e07826dbfe4ed2df3a",
      "parents": [
        "f401b102e87f77b81c041a06f37e3f764ed1a8e7"
      ],
      "author": {
        "name": "Bryan Schumaker",
        "email": "bjschuma@netapp.com",
        "time": "Thu Aug 09 14:05:49 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:16 2012 -0700"
      },
      "message": "NFS: Clear key construction data if the idmap upcall fails\n\ncommit c5066945b7ea346a11424dbeb7830b7d7d00c206 upstream.\n\nidmap_pipe_downcall already clears this field if the upcall succeeds,\nbut if it fails (rpc.idmapd isn\u0027t running) the field will still be set\non the next call triggering a BUG_ON().  This patch tries to handle all\npossible ways that the upcall could fail and clear the idmap key data\nfor each one.\n\nSigned-off-by: Bryan Schumaker \u003cbjschuma@netapp.com\u003e\nTested-by: William Dauchy \u003cwdauchy@gmail.com\u003e\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "f401b102e87f77b81c041a06f37e3f764ed1a8e7",
      "tree": "6af9d9bc08785b67caea597def08efe003c91e81",
      "parents": [
        "c2bf322ed7e21107609d44bc914afba3aed35b85"
      ],
      "author": {
        "name": "Trond Myklebust",
        "email": "Trond.Myklebust@netapp.com",
        "time": "Wed Aug 08 16:03:13 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:16 2012 -0700"
      },
      "message": "NFSv4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done\n\ncommit 47fbf7976e0b7d9dcdd799e2a1baba19064d9631 upstream.\n\nEver since commit 0a57cdac3f (NFSv4.1 send layoutreturn to fence\ndisconnected data server) we\u0027ve been sending layoutreturn calls\nwhile there is potentially still outstanding I/O to the data\nservers. The reason we do this is to avoid races between replayed\nwrites to the MDS and the original writes to the DS.\n\nWhen this happens, the BUG_ON() in nfs4_layoutreturn_done can\nbe triggered because it assumes that we would never call\nlayoutreturn without knowing that all I/O to the DS is\nfinished. The fix is to remove the BUG_ON() now that the\nassumptions behind the test are obsolete.\n\nReported-by: Boaz Harrosh \u003cbharrosh@panasas.com\u003e\nReported-by: Tigran Mkrtchyan \u003ctigran.mkrtchyan@desy.de\u003e\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "c2bf322ed7e21107609d44bc914afba3aed35b85",
      "tree": "f5dcb7ef1087e96640a70de4f94f1436013f71e9",
      "parents": [
        "73b8b9f59d61e0c0e2beaada246f1ed41df0c8fd"
      ],
      "author": {
        "name": "Idan Kedar",
        "email": "idank@tonian.com",
        "time": "Thu Aug 02 11:47:10 2012 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:15 2012 -0700"
      },
      "message": "pnfs: defer release of pages in layoutget\n\ncommit 8554116e17eef055d9dd58a94b3427cb2ad1c317 upstream.\n\nwe have encountered a bug whereby reading a lot of files (copying\nfedora\u0027s /bin) from a pNFS mount and hitting Ctrl+C in the middle caused\na general protection fault in xdr_shrink_bufhead. this function is\ncalled when decoding the response from LAYOUTGET. the decoding is done\nby a worker thread, and the caller of LAYOUTGET waits for the worker\nthread to complete.\n\nhitting Ctrl+C caused the synchronous wait to end and the next thing the\ncaller does is to free the pages, so when the worker thread calls\nxdr_shrink_bufhead, the pages are gone. therefore, the cleanup of these\npages has been moved to nfs4_layoutget_release.\n\nSigned-off-by: Idan Kedar \u003cidank@tonian.com\u003e\nSigned-off-by: Benny Halevy \u003cbhalevy@tonian.com\u003e\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "73b8b9f59d61e0c0e2beaada246f1ed41df0c8fd",
      "tree": "ad77a2ff4b8f219baa3842bb85bd9bae319a4651",
      "parents": [
        "94a6f1787e1f896585a093aa2f45cefbbef80f24"
      ],
      "author": {
        "name": "Trond Myklebust",
        "email": "Trond.Myklebust@netapp.com",
        "time": "Mon Aug 20 12:42:15 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:11 2012 -0700"
      },
      "message": "NFSv3: Ensure that do_proc_get_root() reports errors correctly\n\ncommit 086600430493e04b802bee6e5b3ce0458e4eb77f upstream.\n\nIf the rpc call to NFS3PROC_FSINFO fails, then we need to report that\nerror so that the mount fails. Otherwise we can end up with a\nsuperblock with completely unusable values for block sizes, maxfilesize,\netc.\n\nReported-by: Yuanming Chen \u003chikvision_linux@163.com\u003e\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "94a6f1787e1f896585a093aa2f45cefbbef80f24",
      "tree": "4e72aa0fbebfe8be1a816adeaee45951d60f3d17",
      "parents": [
        "69b9b6d1966c9d2a3c610401eee3491b28e8a935"
      ],
      "author": {
        "name": "Yi Zou",
        "email": "yi.zou@intel.com",
        "time": "Tue Aug 14 16:06:43 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:06 2012 -0700"
      },
      "message": "target: fix NULL pointer dereference bug alloc_page() fails to get memory\n\ncommit d0e27c88d795fb9647153063ec48051fd84e1731 upstream.\n\nI am hitting this bug when the target is low in memory that fails the\nalloc_page() for the newly submitted command. This is a sort of off-by-one\nbug causing NULL pointer dereference in __free_page() since \u0027i\u0027 here is\nreally the counter of total pages that have been successfully allocated here.\n\nSigned-off-by: Yi Zou \u003cyi.zou@intel.com\u003e\nCc: Andy Grover \u003cagrover@redhat.com\u003e\nCc: Nicholas Bellinger \u003cnab@linux-iscsi.org\u003e\nCc: Open-FCoE.org \u003cdevel@open-fcoe.org\u003e\nSigned-off-by: Nicholas Bellinger \u003cnab@linux-iscsi.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "69b9b6d1966c9d2a3c610401eee3491b28e8a935",
      "tree": "498095eaab55a605cb14c6f42578b7690f8d89b1",
      "parents": [
        "c3a0afddee7ed8979b8d14346376848e0a306850"
      ],
      "author": {
        "name": "David Henningsson",
        "email": "david.henningsson@canonical.com",
        "time": "Mon Aug 20 11:17:00 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:06 2012 -0700"
      },
      "message": "ALSA: hda - don\u0027t create dysfunctional mixer controls for ca0132\n\ncommit c41999a23929f30808bae6009d8065052d4d73fd upstream.\n\nIt\u0027s possible that these amps are settable somehow, e g through\nsecret codec verbs, but for now, don\u0027t create the controls (as\nthey won\u0027t be working anyway, and cause errors in amixer).\n\nBugLink: https://bugs.launchpad.net/bugs/1038651\nSigned-off-by: David Henningsson \u003cdavid.henningsson@canonical.com\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "c3a0afddee7ed8979b8d14346376848e0a306850",
      "tree": "592103144c65d727cf562db177b8240eab2ad84c",
      "parents": [
        "5be8fc241c52f469cd8f2c9e4ebd66ce4ab9df34"
      ],
      "author": {
        "name": "Michal Hocko",
        "email": "mhocko@suse.cz",
        "time": "Tue Aug 21 16:15:52 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:06 2012 -0700"
      },
      "message": "mm: hugetlbfs: correctly populate shared pmd\n\ncommit eb48c071464757414538c68a6033c8f8c15196f8 upstream.\n\nEach page mapped in a process\u0027s address space must be correctly\naccounted for in _mapcount.  Normally the rules for this are\nstraightforward but hugetlbfs page table sharing is different.  The page\ntable pages at the PMD level are reference counted while the mapcount\nremains the same.\n\nIf this accounting is wrong, it causes bugs like this one reported by\nLarry Woodman:\n\n  kernel BUG at mm/filemap.c:135!\n  invalid opcode: 0000 [#1] SMP\n  CPU 22\n  Modules linked in: bridge stp llc sunrpc binfmt_misc dcdbas microcode pcspkr acpi_pad acpi]\n  Pid: 18001, comm: mpitest Tainted: G        W    3.3.0+ #4 Dell Inc. PowerEdge R620/07NDJ2\n  RIP: 0010:[\u003cffffffff8112cfed\u003e]  [\u003cffffffff8112cfed\u003e] __delete_from_page_cache+0x15d/0x170\n  Process mpitest (pid: 18001, threadinfo ffff880428972000, task ffff880428b5cc20)\n  Call Trace:\n    delete_from_page_cache+0x40/0x80\n    truncate_hugepages+0x115/0x1f0\n    hugetlbfs_evict_inode+0x18/0x30\n    evict+0x9f/0x1b0\n    iput_final+0xe3/0x1e0\n    iput+0x3e/0x50\n    d_kill+0xf8/0x110\n    dput+0xe2/0x1b0\n    __fput+0x162/0x240\n\nDuring fork(), copy_hugetlb_page_range() detects if huge_pte_alloc()\nshared page tables with the check dst_pte \u003d\u003d src_pte.  The logic is if\nthe PMD page is the same, they must be shared.  This assumes that the\nsharing is between the parent and child.  However, if the sharing is\nwith a different process entirely then this check fails as in this\ndiagram:\n\n  parent\n    |\n    ------------\u003epmd\n                 src_pte----------\u003e data page\n                                        ^\n  other---------\u003epmd--------------------|\n                  ^\n  child-----------|\n                 dst_pte\n\nFor this situation to occur, it must be possible for Parent and Other to\nhave faulted and failed to share page tables with each other.  This is\npossible due to the following style of race.\n\n  PROC A                                          PROC B\n  copy_hugetlb_page_range                         copy_hugetlb_page_range\n    src_pte \u003d\u003d huge_pte_offset                      src_pte \u003d\u003d huge_pte_offset\n    !src_pte so no sharing                          !src_pte so no sharing\n\n  (time passes)\n\n  hugetlb_fault                                   hugetlb_fault\n    huge_pte_alloc                                  huge_pte_alloc\n      huge_pmd_share                                 huge_pmd_share\n        LOCK(i_mmap_mutex)\n        find nothing, no sharing\n        UNLOCK(i_mmap_mutex)\n                                                      LOCK(i_mmap_mutex)\n                                                      find nothing, no sharing\n                                                      UNLOCK(i_mmap_mutex)\n      pmd_alloc                                       pmd_alloc\n      LOCK(instantiation_mutex)\n      fault\n      UNLOCK(instantiation_mutex)\n                                                  LOCK(instantiation_mutex)\n                                                  fault\n                                                  UNLOCK(instantiation_mutex)\n\nThese two processes are not poing to the same data page but are not\nsharing page tables because the opportunity was missed.  When either\nprocess later forks, the src_pte \u003d\u003d dst pte is potentially insufficient.\nAs the check falls through, the wrong PTE information is copied in\n(harmless but wrong) and the mapcount is bumped for a page mapped by a\nshared page table leading to the BUG_ON.\n\nThis patch addresses the issue by moving pmd_alloc into huge_pmd_share\nwhich guarantees that the shared pud is populated in the same critical\nsection as pmd.  This also means that huge_pte_offset test in\nhuge_pmd_share is serialized correctly now which in turn means that the\nsuccess of the sharing will be higher as the racing tasks see the pud\nand pmd populated together.\n\nRace identified and changelog written mostly by Mel Gorman.\n\n{akpm@linux-foundation.org: attempt to make the huge_pmd_share() comment comprehensible, clean up coding style]\nReported-by: Larry Woodman \u003clwoodman@redhat.com\u003e\nTested-by: Larry Woodman \u003clwoodman@redhat.com\u003e\nReviewed-by: Mel Gorman \u003cmgorman@suse.de\u003e\nSigned-off-by: Michal Hocko \u003cmhocko@suse.cz\u003e\nReviewed-by: Rik van Riel \u003criel@redhat.com\u003e\nCc: David Gibson \u003cdavid@gibson.dropbear.id.au\u003e\nCc: Ken Chen \u003ckenchen@google.com\u003e\nCc: Cong Wang \u003cxiyou.wangcong@gmail.com\u003e\nCc: Hillf Danton \u003cdhillf@gmail.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "5be8fc241c52f469cd8f2c9e4ebd66ce4ab9df34",
      "tree": "21e7558992c429e89240b83396580292fad8b611",
      "parents": [
        "660345c4411ec182f2b735c3e19106ea468a9184"
      ],
      "author": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Aug 17 17:48:37 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:06 2012 -0700"
      },
      "message": "USB: winbond: remove __devinit* from the struct usb_device_id table\n\ncommit 43a34695d9cd79c6659f09da6d3b0624f3dd169f upstream.\n\nThis structure needs to always stick around, even if CONFIG_HOTPLUG\nis disabled, otherwise we can oops when trying to probe a device that\nwas added after the structure is thrown away.\n\nThanks to Fengguang Wu and Bjørn Mork for tracking this issue down.\n\nReported-by: Fengguang Wu \u003cfengguang.wu@intel.com\u003e\nReported-by: Bjørn Mork \u003cbjorn@mork.no\u003e\nCC: Pavel Machek \u003cpavel@ucw.cz\u003e\nCC: Paul Gortmaker \u003cpaul.gortmaker@windriver.com\u003e\nCC: \"John W. Linville\" \u003clinville@tuxdriver.com\u003e\nCC: Eliad Peller \u003celiad@wizery.com\u003e\nCC: Devendra Naga \u003cdevendra.aaru@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "660345c4411ec182f2b735c3e19106ea468a9184",
      "tree": "19984742258080973415ccc5358af9eea43fa709",
      "parents": [
        "f998ff53548d95327b6b1543d7b524db26a54d89"
      ],
      "author": {
        "name": "Michael Cree",
        "email": "mcree@orcon.net.nz",
        "time": "Sun Aug 19 14:40:56 2012 +1200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:06 2012 -0700"
      },
      "message": "alpha: Don\u0027t export SOCK_NONBLOCK to user space.\n\ncommit a2fa3ccd7b43665fe14cb562761a6c3d26a1d13f upstream.\n\nCurrently we export SOCK_NONBLOCK to user space but that conflicts with\nthe definition from glibc leading to compilation errors in user programs\n(e.g.  see Debian bug #658460).\n\nThe generic socket.h restricts the definition of SOCK_NONBLOCK to the\nkernel, as does the MIPS specific socket.h, so let\u0027s do the same on\nAlpha.\n\nSigned-off-by: Michael Cree \u003cmcree@orcon.net.nz\u003e\nAcked-by: Matt Turner \u003cmattst88@gmail.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "f998ff53548d95327b6b1543d7b524db26a54d89",
      "tree": "7768e16d0e545d32fcc6d080d1f63265ebfd21cb",
      "parents": [
        "b030a2c4a494ff09a9ca84a3280f6a327dd7a02f"
      ],
      "author": {
        "name": "Mike Frysinger",
        "email": "vapier@gentoo.org",
        "time": "Sun Aug 19 14:41:02 2012 +1200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:06 2012 -0700"
      },
      "message": "alpha: fix fpu.h usage in userspace\n\ncommit 0be421862b857e61964435ffcaa7499cf77a5e5a upstream.\n\nAfter commit ec2212088c42 (\"Disintegrate asm/system.h for Alpha\"), the\nfpu.h header which we install for userland started depending on\nspecial_insns.h which is not installed.\n\nHowever, fpu.h only uses that for __KERNEL__ code, so protect the\ninclusion the same way to avoid build breakage in glibc:\n\n  /usr/include/asm/fpu.h:4:31: fatal error: asm/special_insns.h: No such file or directory\n\nReported-by: Matt Turner \u003cmattst88@gentoo.org\u003e\nSigned-off-by: Mike Frysinger \u003cvapier@gentoo.org\u003e\nSigned-off-by: Michael Cree \u003cmcree@orcon.net.nz\u003e\nAcked-by: Matt Turner \u003cmattst88@gmail.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "b030a2c4a494ff09a9ca84a3280f6a327dd7a02f",
      "tree": "89b9b84fad0e611431dd3028310d1c5bc3c91567",
      "parents": [
        "1e6cec2253d5159a5f4e758114fd3c26a98b00a4"
      ],
      "author": {
        "name": "Miklos Szeredi",
        "email": "mszeredi@suse.cz",
        "time": "Wed Aug 15 13:01:24 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:05 2012 -0700"
      },
      "message": "vfs: canonicalize create mode in build_open_flags()\n\ncommit e68726ff72cf7ba5e7d789857fcd9a75ca573f03 upstream.\n\nUserspace can pass weird create mode in open(2) that we canonicalize to\n\"(mode \u0026 S_IALLUGO) | S_IFREG\" in vfs_create().\n\nThe problem is that we use the uncanonicalized mode before calling vfs_create()\nwith unforseen consequences.\n\nSo do the canonicalization early in build_open_flags().\n\nSigned-off-by: Miklos Szeredi \u003cmszeredi@suse.cz\u003e\nTested-by: Richard W.M. Jones \u003crjones@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "1e6cec2253d5159a5f4e758114fd3c26a98b00a4",
      "tree": "b02ab8d6ae2e4570ed435bacde973f99b3fb4232",
      "parents": [
        "7b6d36dda04aaa8a87576ba5752e988448f88043"
      ],
      "author": {
        "name": "Al Viro",
        "email": "viro@ZenIV.linux.org.uk",
        "time": "Mon Aug 20 15:28:00 2012 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:05 2012 -0700"
      },
      "message": "vfs: missed source of -\u003ef_pos races\n\ncommit 0e665d5d1125f9f4ccff56a75e814f10f88861a2 upstream.\n\ncompat_sys_{read,write}v() need the same \"pass a copy of file-\u003ef_pos\" thing\nas sys_{read,write}{,v}().\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7b6d36dda04aaa8a87576ba5752e988448f88043",
      "tree": "20aa9b897fd90f06169ac53b173b3ea89ac6adce",
      "parents": [
        "73f34fe608cbbba09fa8c74959b7ac5e05973036"
      ],
      "author": {
        "name": "Peter Ujfalusi",
        "email": "peter.ujfalusi@ti.com",
        "time": "Tue Aug 07 15:37:47 2012 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:05 2012 -0700"
      },
      "message": "ASoC: omap-mcbsp: Fix 6pin mux configuration\n\ncommit d0db84e713eaaccea2a435e1625fb3150b335f4a upstream.\n\nThe check for the mux_signal callback was wrong which prevents us to\nconfigure the 6pin port\u0027s FSR/CLKR signal mux.\n\nReported-by: CF Adad \u003ccfadad@rocketmail.com\u003e\nSigned-off-by: Peter Ujfalusi \u003cpeter.ujfalusi@ti.com\u003e\nAcked-by: Jarkko Nikula \u003cjarkko.nikula@bitmer.com\u003e\nSigned-off-by: Mark Brown \u003cbroonie@opensource.wolfsonmicro.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "73f34fe608cbbba09fa8c74959b7ac5e05973036",
      "tree": "4144c5efa51e2431946506f32ea4b59f4dbc8a84",
      "parents": [
        "e78e9b4a7848cc1b52678161cbfaa7530efba251"
      ],
      "author": {
        "name": "Mark Brown",
        "email": "broonie@opensource.wolfsonmicro.com",
        "time": "Thu Aug 16 22:36:04 2012 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:05 2012 -0700"
      },
      "message": "ASoC: wm9712: Fix microphone source selection\n\ncommit ccf795847a38235ee4a56a24129ce75147d6ba8f upstream.\n\nCurrently the microphone input source is not selectable as while there is\na DAPM widget it\u0027s not connected to anything so it won\u0027t be properly\ninstantiated. Add something more correct for the input structure to get\nthings going, even though it\u0027s not hooked into the rest of the routing\nmap and so won\u0027t actually achieve anything except allowing the relevant\nregister bits to be written.\n\nReported-by: Christop Fritz \u003cchf.fritz@googlemail.com\u003e\nSigned-off-by: Mark Brown \u003cbroonie@opensource.wolfsonmicro.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "e78e9b4a7848cc1b52678161cbfaa7530efba251",
      "tree": "fcf0063c9403d326165420abefd5dba0b2922ee3",
      "parents": [
        "830cb0da378e5ec143613069faf250b742456021"
      ],
      "author": {
        "name": "Arnd Bergmann",
        "email": "arnd@arndb.de",
        "time": "Thu Aug 16 10:40:40 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:05 2012 -0700"
      },
      "message": "ARM: imx: select CPU_FREQ_TABLE when needed\n\ncommit f637c4c9405e21f44cf0045eaf77eddd3a79ca5a upstream.\n\nThe i.MX cpufreq implementation uses the CPU_FREQ_TABLE helpers,\nso it needs to select that code to be built. This problem has\napparently existed since the i.MX cpufreq code was first merged\nin v2.6.37.\n\nBuilding IMX without CPU_FREQ_TABLE results in:\n\narch/arm/plat-mxc/built-in.o: In function `mxc_cpufreq_exit\u0027:\narch/arm/plat-mxc/cpufreq.c:173: undefined reference to `cpufreq_frequency_table_put_attr\u0027\narch/arm/plat-mxc/built-in.o: In function `mxc_set_target\u0027:\narch/arm/plat-mxc/cpufreq.c:84: undefined reference to `cpufreq_frequency_table_target\u0027\narch/arm/plat-mxc/built-in.o: In function `mxc_verify_speed\u0027:\narch/arm/plat-mxc/cpufreq.c:65: undefined reference to `cpufreq_frequency_table_verify\u0027\narch/arm/plat-mxc/built-in.o: In function `mxc_cpufreq_init\u0027:\narch/arm/plat-mxc/cpufreq.c:154: undefined reference to `cpufreq_frequency_table_cpuinfo\u0027\narch/arm/plat-mxc/cpufreq.c:162: undefined reference to `cpufreq_frequency_table_get_attr\u0027\n\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\nAcked-by: Shawn Guo \u003cshawn.guo@linaro.org\u003e\nCc: Sascha Hauer \u003cs.hauer@pengutronix.de\u003e\nCc: Yong Shen \u003cyong.shen@linaro.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "830cb0da378e5ec143613069faf250b742456021",
      "tree": "c90e8204305d06202e850b411b8914695410e3e9",
      "parents": [
        "47bca6a5021332b17aa5efc2d66af1018af70ba1"
      ],
      "author": {
        "name": "Shawn Guo",
        "email": "shawn.guo@linaro.org",
        "time": "Sat Aug 18 14:27:32 2012 +0800"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:05 2012 -0700"
      },
      "message": "ARM: imx6: spin the cpu until hardware takes it down\n\ncommit c944b0b9354ea06ffb0c8a7178949f1185f9f499 upstream.\n\nThough commit 602bf40 (ARM: imx6: exit coherency when shutting down\na cpu) improves the stability of imx6q cpu hotplug a lot, there are\nstill hangs seen with a more stressful hotplug testing.\n\nIt\u0027s expected that once imx_enable_cpu(cpu, false) is called, the cpu\nwill be taken down by hardware immediately, and the code after that\nwill not get any chance to execute.  However, this is not always the\ncase from the testing.  The cpu could possibly be alive for a few\ncycles before hardware actually takes it down.  So rather than letting\ncpu execute some code that could cause a hang in these cycles, let\u0027s\nmake the cpu spin there and wait for hardware to take it down.\n\nSigned-off-by: Shawn Guo \u003cshawn.guo@linaro.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "47bca6a5021332b17aa5efc2d66af1018af70ba1",
      "tree": "3436df804e82ac19c77465cda9200cdbca6f7f9c",
      "parents": [
        "449daa0ed24c186c7fd014e698f37cbb8aaf7a4c"
      ],
      "author": {
        "name": "Konrad Rzeszutek Wilk",
        "email": "konrad.wilk@oracle.com",
        "time": "Fri Aug 17 16:43:28 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:04 2012 -0700"
      },
      "message": "xen/setup: Fix one-off error when adding for-balloon PFNs to the P2M.\n\ncommit c96aae1f7f393387d160211f60398d58463a7e65 upstream.\n\nWhen we are finished with return PFNs to the hypervisor, then\npopulate it back, and also mark the E820 MMIO and E820 gaps\nas IDENTITY_FRAMEs, we then call P2M to set areas that can\nbe used for ballooning. We were off by one, and ended up\nover-writting a P2M entry that most likely was an IDENTITY_FRAME.\nFor example:\n\n1-1 mapping on 40000-\u003e40200\n1-1 mapping on bc558-\u003ebc5ac\n1-1 mapping on bc5b4-\u003ebc8c5\n1-1 mapping on bc8c6-\u003ebcb7c\n1-1 mapping on bcd00-\u003e100000\nReleased 614 pages of unused memory\nSet 277889 page(s) to 1-1 mapping\nPopulating 40200-40466 pfn range: 614 pages added\n\n\u003d\u003e here we set from 40466 up to bc559 P2M tree to be\nINVALID_P2M_ENTRY. We should have done it up to bc558.\n\nThe end result is that if anybody is trying to construct\na PTE for PFN bc558 they end up with ~PAGE_PRESENT.\n\nReported-by-and-Tested-by: Andre Przywara \u003candre.przywara@amd.com\u003e\nSigned-off-by: Konrad Rzeszutek Wilk \u003ckonrad.wilk@oracle.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "449daa0ed24c186c7fd014e698f37cbb8aaf7a4c",
      "tree": "13db0b624d95f870b4f673a8f13230db5f4f379a",
      "parents": [
        "588d6b125faae8f369352dedaa4632071b93e78e"
      ],
      "author": {
        "name": "Fabio Estevam",
        "email": "festevam@gmail.com",
        "time": "Tue Jul 03 15:33:29 2012 -0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:04 2012 -0700"
      },
      "message": "Revert dma: imx-dma: Fix kernel crash due to missing clock conversion\n\nThis reverts 9ea2c02bafe276e97b592a046ac733610a6d57fd, which was commit\na2367db2ec5e7fc6fe93e221e0fcdee81b053daf upstream.\n\nIt broke the build on 3.4, and was not needed there.\n\nReported-by: Eric Bénard \u003ceric@eukrea.com\u003e\nCc: Javier Martin \u003cjavier.martin@vista-silicon.com\u003e\nCc: Fabio Estevam \u003cfabio.estevam@freescale.com\u003e\nCc: Sascha Hauer \u003cs.hauer@pengutronix.de\u003e\nCc: Vinod Koul \u003cvinod.koul@linux.intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "588d6b125faae8f369352dedaa4632071b93e78e",
      "tree": "948e0cd681cd96fab15a7479d3230098b58c57b6",
      "parents": [
        "cef2cf5590819d565db994008a6bbb9f27dd9b41"
      ],
      "author": {
        "name": "Heiko Stuebner",
        "email": "heiko@sntech.de",
        "time": "Tue Aug 07 19:12:05 2012 +0900"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:04 2012 -0700"
      },
      "message": "ARM: S3C24XX: Fix s3c2410_dma_enqueue parameters\n\ncommit b01858c7806e7e6f6121da2e51c9222fc4d21dc6 upstream.\n\nCommit d670ac019f60 (ARM: SAMSUNG: DMA Cleanup as per sparse) changed the\nprototype of the s3c2410_dma_* functions to use the enum dma_ch instead\nof an generic unsigned int.\n\nIn the s3c24xx dma.c s3c2410_dma_enqueue seems to have been forgotten,\nthe other functions there were changed correctly.\n\nSigned-off-by: Heiko Stuebner \u003cheiko@sntech.de\u003e\nSigned-off-by: Kukjin Kim \u003ckgene.kim@samsung.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "cef2cf5590819d565db994008a6bbb9f27dd9b41",
      "tree": "77de1ff18f51bee0c2ab2f3135f29de27f40b4ca",
      "parents": [
        "8c17041815762b385631d3a680128dca5a9be31b"
      ],
      "author": {
        "name": "Heiko Stuebner",
        "email": "heiko@sntech.de",
        "time": "Tue Aug 07 19:11:33 2012 +0900"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:04 2012 -0700"
      },
      "message": "ARM: S3C24XX: Add missing DMACH_DT_PROP\n\ncommit e1267371eacf2cbcf580e41f9e64a986cdaf5c1d upstream.\n\nCommit 2b90807549 (spi: s3c64xx: add device tree support) requires\nthe DMACH_DT_PROP element in the dma_ch enum. It\u0027s not used on non-DT\nplatforms but has to be present nevertheless.\n\nSo mimic the dummy-add of DMACH_DT_PROP on s3c64xx for s3c24xx\nmachines, to correct the build breakage for the s3c24xx variants\nusing the s3c64xx-spi-driver.\n\nSigned-off-by: Heiko Stuebner \u003cheiko@sntech.de\u003e\nSigned-off-by: Kukjin Kim \u003ckgene.kim@samsung.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "8c17041815762b385631d3a680128dca5a9be31b",
      "tree": "07bf5fd51b4a60fb729592fadf33af78ae8579e8",
      "parents": [
        "88b67cb1f21cf5059bfbbc2bca7a597b9c58c312"
      ],
      "author": {
        "name": "Jon Hunter",
        "email": "jon-hunter@ti.com",
        "time": "Fri Jul 13 15:12:03 2012 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:04 2012 -0700"
      },
      "message": "ARM: OMAP2+: Fix dmtimer set source clock failure\n\ncommit 54f32a35f4d3a653a18a2c8c239f19ae060bd803 upstream.\n\nCalling the dmtimer function omap_dm_timer_set_source() fails if following a\ncall to pm_runtime_put() to disable the timer. For example the following\nsequence would fail to set the parent clock ...\n\n\tomap_dm_timer_stop(gptimer);\n\tomap_dm_timer_set_source(gptimer, OMAP_TIMER_SRC_32_KHZ);\n\nThe following error message would be seen ...\n\nomap_dm_timer_set_source: failed to set timer_32k_ck as parent\n\nThe problem is that, by design, pm_runtime_put() simply decrements the usage\ncount and returns before the timer has actually been disabled. Therefore,\nsetting the parent clock failed because the timer was still active when the\ntrying to set the parent clock. Setting a parent clock will fail if the clock\nyou are setting the parent of has a non-zero usage count. To ensure that this\ndoes not fail use pm_runtime_put_sync() when disabling the timer.\n\nNote that this will not be seen on OMAP1 devices, because these devices do\nnot use the clock framework for dmtimers.\n\nSigned-off-by: Jon Hunter \u003cjon-hunter@ti.com\u003e\nAcked-by: Kevin Hilman \u003ckhilman@ti.com\u003e\nSigned-off-by: Tony Lindgren \u003ctony@atomide.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "88b67cb1f21cf5059bfbbc2bca7a597b9c58c312",
      "tree": "1b084ca74a93de2815199e5e07efb2531a0981ca",
      "parents": [
        "635a2a845fb26b32b179d7cb7cfb288c91f39933"
      ],
      "author": {
        "name": "Will Deacon",
        "email": "will.deacon@arm.com",
        "time": "Fri Aug 10 19:13:36 2012 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:04 2012 -0700"
      },
      "message": "ARM: 7489/1: errata: fix workaround for erratum #720789 on UP systems\n\ncommit 730a8128cd8978467eb1cf546b11014acb57d433 upstream.\n\nCommit 5a783cbc4836 (\"ARM: 7478/1: errata: extend workaround for erratum\n #720789\") added workarounds for erratum #720789 to the range TLB\ninvalidation functions with the observation that the erratum only\naffects SMP platforms. However, when running an SMP_ON_UP kernel on a\nuniprocessor platform we must take care to preserve the ASID as the\nworkaround is not required.\n\nThis patch ensures that we don\u0027t set the ASID to 0 when flushing the TLB\non such a system, preserving the original behaviour with the workaround\ndisabled.\n\nSigned-off-by: Will Deacon \u003cwill.deacon@arm.com\u003e\nSigned-off-by: Russell King \u003crmk+kernel@arm.linux.org.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "635a2a845fb26b32b179d7cb7cfb288c91f39933",
      "tree": "0fcc6ce3b26db4a5749960f8df00db1136153c3e",
      "parents": [
        "aa2e66e8fc1a25b9ff6f6f448a025b3599a90662"
      ],
      "author": {
        "name": "Will Deacon",
        "email": "will.deacon@arm.com",
        "time": "Fri Aug 10 17:51:19 2012 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:04 2012 -0700"
      },
      "message": "ARM: 7488/1: mm: use 5 bits for swapfile type encoding\n\ncommit f5f2025ef3e2cdb593707cbf87378761f17befbe upstream.\n\nPage migration encodes the pfn in the offset field of a swp_entry_t.\nFor LPAE, we support physical addresses of up to 36 bits (due to\nsparsemem limitations with the size of page flags), requiring 24 bits\nto represent a pfn. A further 3 bits are used to encode a swp_entry into\na pte, leaving 5 bits for the type field. Furthermore, the core code\ndefines MAX_SWAPFILES_SHIFT as 5, so the additional type bit does not\nget used.\n\nThis patch reduces the width of the type field to 5 bits, allowing us\nto create up to 31 swapfiles of 64GB each.\n\nReviewed-by: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nSigned-off-by: Will Deacon \u003cwill.deacon@arm.com\u003e\nSigned-off-by: Russell King \u003crmk+kernel@arm.linux.org.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "aa2e66e8fc1a25b9ff6f6f448a025b3599a90662",
      "tree": "83d8c82f5b7f65778e99c14732850160bce17905",
      "parents": [
        "7de4da6fedad1267970c6640e47561c2d38ec0b4"
      ],
      "author": {
        "name": "Will Deacon",
        "email": "will.deacon@arm.com",
        "time": "Fri Aug 10 17:51:18 2012 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:03 2012 -0700"
      },
      "message": "ARM: 7487/1: mm: avoid setting nG bit for user mappings that aren\u0027t present\n\ncommit 47f1204329237a0f8655f5a9f14a38ac81946ca1 upstream.\n\nSwap entries are encoding in ptes such that !pte_present(pte) and\npte_file(pte). The remaining bits of the descriptor are used to identify\nthe swapfile and offset within it to the swap entry.\n\nWhen writing such a pte for a user virtual address, set_pte_at\nunconditionally sets the nG bit, which (in the case of LPAE) will\ncorrupt the swapfile offset and lead to a BUG:\n\n[  140.494067] swap_free: Unused swap offset entry 000763b4\n[  140.509989] BUG: Bad page map in process rs:main Q:Reg  pte:0ec76800 pmd:8f92e003\n\nThis patch fixes the problem by only setting the nG bit for user\nmappings that are actually present.\n\nReviewed-by: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nSigned-off-by: Will Deacon \u003cwill.deacon@arm.com\u003e\nSigned-off-by: Russell King \u003crmk+kernel@arm.linux.org.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7de4da6fedad1267970c6640e47561c2d38ec0b4",
      "tree": "e261e47fd98b8f0b64a8c70130733728d13d2d54",
      "parents": [
        "5ed0dc3c88fd7586d5ea0b615007bbcf1c7cf7ea"
      ],
      "author": {
        "name": "Will Deacon",
        "email": "will.deacon@arm.com",
        "time": "Fri Aug 03 17:24:14 2012 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:03 2012 -0700"
      },
      "message": "ARM: 7483/1: vfp: only advertise VFPv4 in hwcaps if CONFIG_VFPv3 is enabled\n\ncommit 3d9fb0038a9b02febb01efc79a4a5d97f1822a90 upstream.\n\nVFPv4 support depends on the VFPv3 context save/restore code, so only\nadvertise support in the hwcaps if the kernel can actually handle it.\n\nSigned-off-by: Will Deacon \u003cwill.deacon@arm.com\u003e\nSigned-off-by: Russell King \u003crmk+kernel@arm.linux.org.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "5ed0dc3c88fd7586d5ea0b615007bbcf1c7cf7ea",
      "tree": "580f520a9ab3ef99b266196429c07aa242198dc4",
      "parents": [
        "7d79cc4869cd9fdc47736a5fe44c195813cef4cd"
      ],
      "author": {
        "name": "Wang Xingchao",
        "email": "xingchao.wang@intel.com",
        "time": "Mon Aug 13 14:11:10 2012 +0800"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:03 2012 -0700"
      },
      "message": "ALSA: hda - fix Copyright debug message\n\ncommit 088c820b732dbfd515fc66d459d5f5777f79b406 upstream.\n\nAs spec said, 1 indicates no copyright is asserted.\n\nSigned-off-by: Wang Xingchao \u003cxingchao.wang@intel.com\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7d79cc4869cd9fdc47736a5fe44c195813cef4cd",
      "tree": "4f9e6ac839b5e3fdce412cf46703cef3dfde8618",
      "parents": [
        "61fe808721d1b13c811f6d9a2809628e4ef6bf06"
      ],
      "author": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Aug 17 17:48:41 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:03 2012 -0700"
      },
      "message": "USB: emi62: remove __devinit* from the struct usb_device_id table\n\ncommit 83957df21dd94655d2b026e0944a69ff37b83988 upstream.\n\nThis structure needs to always stick around, even if CONFIG_HOTPLUG\nis disabled, otherwise we can oops when trying to probe a device that\nwas added after the structure is thrown away.\n\nThanks to Fengguang Wu and Bjørn Mork for tracking this issue down.\n\nReported-by: Fengguang Wu \u003cfengguang.wu@intel.com\u003e\nReported-by: Bjørn Mork \u003cbjorn@mork.no\u003e\nCC: Paul Gortmaker \u003cpaul.gortmaker@windriver.com\u003e\nCC: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nCC: Felipe Balbi \u003cbalbi@ti.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "61fe808721d1b13c811f6d9a2809628e4ef6bf06",
      "tree": "107a8b255d678bffe7fe8076f97e489086808644",
      "parents": [
        "f95b978981a7d154ba40d14c18e8ed5c694e6124"
      ],
      "author": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Aug 17 17:48:33 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Fri Sep 14 10:00:03 2012 -0700"
      },
      "message": "USB: vt6656: remove __devinit* from the struct usb_device_id table\n\ncommit 4d088876f24887cd15a29db923f5f37db6a99f21 upstream.\n\nThis structure needs to always stick around, even if CONFIG_HOTPLUG\nis disabled, otherwise we can oops when trying to probe a device that\nwas added after the structure is thrown away.\n\nThanks to Fengguang Wu and Bjørn Mork for tracking this issue down.\n\nReported-by: Fengguang Wu \u003cfengguang.wu@intel.com\u003e\nReported-by: Bjørn Mork \u003cbjorn@mork.no\u003e\nCC: Forest Bond \u003cforest@alittletooquiet.net\u003e\nCC: Marcos Paulo de Souza \u003cmarcos.souza.org@gmail.com\u003e\nCC: \"David S. Miller\" \u003cdavem@davemloft.net\u003e\nCC: Jesper Juhl \u003cjj@chaosbits.net\u003e\nCC: Jiri Pirko \u003cjpirko@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "f95b978981a7d154ba40d14c18e8ed5c694e6124",
      "tree": "63a085eeffaf7eb7cc7bb1ddbe57a078e33ccb58",
      "parents": [
        "e19001248f898e24b4ec08f9f853b49e661328fe"
      ],
      "author": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Aug 26 15:02:10 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Aug 26 15:02:10 2012 -0700"
      },
      "message": "Linux 3.4.10\n"
    },
    {
      "commit": "e19001248f898e24b4ec08f9f853b49e661328fe",
      "tree": "a8a85ccf2ea69a8360700a4da22cb6339d723f09",
      "parents": [
        "4cfb77e8eeddabbca1173a0a704c4065c62c4d05"
      ],
      "author": {
        "name": "Jeongdo Son",
        "email": "sohn9086@gmail.com",
        "time": "Fri Jun 15 02:28:01 2012 +0900"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Aug 26 15:00:45 2012 -0700"
      },
      "message": "rt2x00: Add support for BUFFALO WLI-UC-GNM2 to rt2800usb.\n\ncommit a769f9577232afe2c754606a83aad85127e7052a upstream.\n\nThis is a RT3070 based device.\n\nSigned-off-by: Jeongdo Son \u003csohn9086@gmail.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "4cfb77e8eeddabbca1173a0a704c4065c62c4d05",
      "tree": "06192e73fe8e1a45e6dc1dd61059e5cd9906faa9",
      "parents": [
        "4893ce51af5c2ccdfabf8f7d34dd28cf84a8a06e"
      ],
      "author": {
        "name": "Michael Grzeschik",
        "email": "m.grzeschik@pengutronix.de",
        "time": "Wed Aug 08 11:48:10 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Aug 26 15:00:45 2012 -0700"
      },
      "message": "usb: gadget: u_ether: fix kworker 100% CPU issue with still used interfaces in eth_stop\n\ncommit b1b552a69b8805e7e338074a9e8b670b4a795218 upstream.\n\nThis patch fixes an issue introduced by patch:\n\n    72c973d usb: gadget: add usb_endpoint_descriptor to struct usb_ep\n\nWithout this patch we see a kworker taking 100% CPU, after this sequence:\n\n- Connect gadget to a windows host\n- load g_ether\n- ifconfig up \u003cip\u003e; ifconfig down; ifconfig up\n- ping \u003cwindows host\u003e\n\nThe \"ifconfig down\" results in calling eth_stop(), which will call\nusb_ep_disable() and, if the carrier is still ok, usb_ep_enable():\n\n         usb_ep_disable(link-\u003ein_ep);\n         usb_ep_disable(link-\u003eout_ep);\n         if (netif_carrier_ok(net)) {\n                 usb_ep_enable(link-\u003ein_ep);\n                 usb_ep_enable(link-\u003eout_ep);\n         }\n\nThe ep should stay enabled, but will not, as ep_disable set the desc\npointer to NULL, therefore the subsequent ep_enable will fail. This leads\nto permanent rescheduling of the eth_work() worker as usb_ep_queue()\n(called by the worker) will fail due to the unconfigured endpoint.\n\nWe fix this issue by saving the ep descriptors and re-assign them before\nusb_ep_enable().\n\nCc: Tatyana Brokhman \u003ctlinder@codeaurora.org\u003e\nSigned-off-by: Michael Grzeschik \u003cm.grzeschik@pengutronix.de\u003e\nSigned-off-by: Marc Kleine-Budde \u003cmkl@pengutronix.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "4893ce51af5c2ccdfabf8f7d34dd28cf84a8a06e",
      "tree": "f6ff1894d17decf57b3fbf8486990cd540e6f42c",
      "parents": [
        "d3d31e57513f7f66fe66accd88837e021a1b96b2"
      ],
      "author": {
        "name": "Mark Ferrell",
        "email": "mferrell@uplogix.com",
        "time": "Tue Jul 24 14:15:13 2012 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Aug 26 15:00:44 2012 -0700"
      },
      "message": "usb: serial: mos7840: Fixup mos7840_chars_in_buffer()\n\ncommit 5c263b92f828af6a8cf54041db45ceae5af8f2ab upstream.\n\n * Use the buffer content length as opposed to the total buffer size.  This can\n   be a real problem when using the mos7840 as a usb serial-console as all\n   kernel output is truncated during boot.\n\nSigned-off-by: Mark Ferrell \u003cmferrell@uplogix.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "d3d31e57513f7f66fe66accd88837e021a1b96b2",
      "tree": "02ada795208964cbd233f050de78708c6f0aa407",
      "parents": [
        "7c65b87f22d8a7819879363ef9fc3e6d838925d4"
      ],
      "author": {
        "name": "Ozan Çağlayan",
        "email": "ozancag@gmail.com",
        "time": "Fri Aug 10 17:25:10 2012 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Aug 26 15:00:44 2012 -0700"
      },
      "message": "USB: ftdi_sio: Add VID/PID for Kondo Serial USB\n\ncommit 7724a1edbe463b06d4e7831a41149ba095b16c53 upstream.\n\nThis adds VID/PID for Kondo Kagaku Co. Ltd. Serial USB Adapter\ninterface:\nhttp://www.kondo-robot.com/EN/wp/?cat\u003d28\n\nTested by controlling an RCB3 board using libRCB3.\n\nSigned-off-by: Ozan Çağlayan \u003cozancag@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7c65b87f22d8a7819879363ef9fc3e6d838925d4",
      "tree": "193203935de3e54a386aa1258a7a005b0e75c3d3",
      "parents": [
        "c638628c4aafdd2c6bb555331e5dcb099df7f59c"
      ],
      "author": {
        "name": "Bjørn Mork",
        "email": "bjorn@mork.no",
        "time": "Wed Aug 15 15:43:33 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Aug 26 15:00:44 2012 -0700"
      },
      "message": "USB: option: add ZTE K5006-Z\n\ncommit f1b5c997e68533df1f96dcd3068a231bca495603 upstream.\n\nThe ZTE (Vodafone) K5006-Z use the following\ninterface layout:\n\n00 DIAG\n01 secondary\n02 modem\n03 networkcard\n04 storage\n\nIgnoring interface #3 which is handled by the qmi_wwan\ndriver.\n\nSigned-off-by: Bjørn Mork \u003cbjorn@mork.no\u003e\nCc: Thomas Schäfer \u003ctschaefer@t-online.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "c638628c4aafdd2c6bb555331e5dcb099df7f59c",
      "tree": "96a3666daad5367ceaafa607a8130074a7b5414e",
      "parents": [
        "ddffad3427e2e80fff78d2fc77f21afbba3d11b0"
      ],
      "author": {
        "name": "fangxiaozhi",
        "email": "huananhu@huawei.com",
        "time": "Wed Aug 08 09:24:45 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Aug 26 15:00:44 2012 -0700"
      },
      "message": "USB: support the new interfaces of Huawei Data Card devices in option driver\n\ncommit ee6f827df9107139e8960326e49e1376352ced4d upstream.\n\nIn this patch, we add new declarations into option.c to support the new\ninterfaces of Huawei Data Card devices. And at the same time, remove the\nredundant declarations from option.c.\n\nSigned-off-by: fangxiaozhi \u003chuananhu@huawei.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "ddffad3427e2e80fff78d2fc77f21afbba3d11b0",
      "tree": "c2d2a884e1df0f92eabcd345430d3dd5ff79a28e",
      "parents": [
        "a8e480349f91581d93eff8728fc41cbcd1c3eca1"
      ],
      "author": {
        "name": "Bart Van Assche",
        "email": "bvanassche@acm.org",
        "time": "Tue Aug 14 13:18:53 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Aug 26 15:00:44 2012 -0700"
      },
      "message": "IB/srp: Fix a race condition\n\ncommit 220329916c72ee3d54ae7262b215a050f04a18fc upstream.\n\nAvoid a crash caused by the scmnd-\u003escsi_done(scmnd) call in\nsrp_process_rsp() being invoked with scsi_done \u003d\u003d NULL.  This can\nhappen if a reply is received during or after a command abort.\n\nReported-by: Joseph Glanville \u003cjoseph.glanville@orionvm.com.au\u003e\nReference: http://marc.info/?l\u003dlinux-rdma\u0026m\u003d134314367801595\nAcked-by: David Dillow \u003cdillowda@ornl.gov\u003e\nSigned-off-by: Bart Van Assche \u003cbvanassche@acm.org\u003e\nSigned-off-by: Roland Dreier \u003croland@purestorage.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "a8e480349f91581d93eff8728fc41cbcd1c3eca1",
      "tree": "90dce029675ff127769cdfb0c0fa580aa4b92e9c",
      "parents": [
        "952227d5c4d522502b7b815b16be6e991bbaeaed"
      ],
      "author": {
        "name": "Jason Wessel",
        "email": "jason.wessel@windriver.com",
        "time": "Sun Aug 12 07:16:43 2012 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Aug 26 15:00:43 2012 -0700"
      },
      "message": "pmac_zilog,kdb: Fix console poll hook to return instead of loop\n\ncommit 38f8eefccf3a23c4058a570fa2938a4f553cf8e0 upstream.\n\nkdb \u003c-\u003e kgdb transitioning does not work properly with this UART\ndriver because the get character routine loops indefinitely as opposed\nto returning NO_POLL_CHAR per the expectation of the KDB I/O driver\nAPI.\n\nThe symptom is a kernel hang when trying to switch debug modes.\n\nSigned-off-by: Jason Wessel \u003cjason.wessel@windriver.com\u003e\nCc: Alan Cox \u003calan@linux.intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "952227d5c4d522502b7b815b16be6e991bbaeaed",
      "tree": "89ffbc3abe99e861e2e6e06c3e8dcdb1901cb7df",
      "parents": [
        "1aac2e73a8af6ce1cd6e938967dd17e2c8d38994"
      ],
      "author": {
        "name": "Gustavo Padovan",
        "email": "gustavo.padovan@collabora.co.uk",
        "time": "Tue Jul 10 19:10:06 2012 -0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Aug 26 15:00:43 2012 -0700"
      },
      "message": "USB: add USB_VENDOR_AND_INTERFACE_INFO() macro\n\ncommit d81a5d1956731c453b85c141458d4ff5d6cc5366 upstream.\n\nA lot of Broadcom Bluetooth devices provides vendor specific interface\nclass and we are getting flooded by patches adding new device support.\nThis change will help us enable support for any other Broadcom with vendor\nspecific device that arrives in the future.\n\nOnly the product id changes for those devices, so this macro would be\nperfect for us:\n\n{ USB_VENDOR_AND_INTERFACE_INFO(0x0a5c, 0xff, 0x01, 0x01) }\n\nSigned-off-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Gustavo Padovan \u003cgustavo.padovan@collabora.co.uk\u003e\nAcked-by: Henrik Rydberg \u003crydberg@bitmath.se\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "1aac2e73a8af6ce1cd6e938967dd17e2c8d38994",
      "tree": "c30a4ef1e35f0247cf958f0466f124497623967e",
      "parents": [
        "0adf7a085fae52b18202a95722fc05d644fa7a42"
      ],
      "author": {
        "name": "Sarah Sharp",
        "email": "sarah.a.sharp@linux.intel.com",
        "time": "Thu Jul 26 12:03:59 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Aug 26 15:00:43 2012 -0700"
      },
      "message": "xhci: Fix bug after deq ptr set to link TRB.\n\ncommit 50d0206fcaea3e736f912fd5b00ec6233fb4ce44 upstream.\n\nThis patch fixes a particularly nasty bug that was revealed by the ring\nexpansion patches.  The bug has been present since the very beginning of\nthe xHCI driver history, and could have caused general protection faults\nfrom bad memory accesses.\n\nThe first thing to note is that a Set TR Dequeue Pointer command can\nmove the dequeue pointer to a link TRB, if the canceled or stalled\ntransfer TD ended just before a link TRB.  The function to increment the\ndequeue pointer, inc_deq, was written before cancellation and stall\nsupport was added.  It assumed that the dequeue pointer could never\npoint to a link TRB.  It would unconditionally increment the dequeue\npointer at the start of the function, check if the pointer was now on a\nlink TRB, and move it to the top of the next segment if so.\n\nThis means that if a Set TR Dequeue Point command moved the dequeue\npointer to a link TRB, a subsequent call to inc_deq() would move the\npointer off the segment and into la-la-land.  It would then read from\nthat memory to determine if it was a link TRB.  Other functions would\noften call inc_deq() until the dequeue pointer matched some other\npointer, which means this function would quite happily read all of\nsystem memory before wrapping around to the right pointer value.\n\nOften, there would be another endpoint segment from a different ring\nallocated from the same DMA pool, which would be contiguous to the\nsegment inc_deq just stepped off of.  inc_deq would eventually find the\nlink TRB in that segment, and blindly move the dequeue pointer back to\nthe top of the correct ring segment.\n\nThe only reason the original code worked at all is because there was\nonly one ring segment.  With the ring expansion patches, the dequeue\npointer would eventually wrap into place, but the dequeue segment would\nbe out-of-sync.  On the second TD after the dequeue pointer was moved to\na link TRB, trb_in_td() would fail (because the dequeue pointer and\ndequeue segment were out-of-sync), and this message would appear:\n\nERROR Transfer event TRB DMA ptr not part of current TD\n\nThis fixes bugzilla entry 4333 (option-based modem unhappy on USB 3.0\nport: \"Transfer event TRB DMA ptr not part of current TD\", \"rejecting\nI/O to offline device\"),\n\n\thttps://bugzilla.kernel.org/show_bug.cgi?id\u003d43333\n\nand possibly other general protection fault bugs as well.\n\nThis patch should be backported to kernels as old as 2.6.31.  A separate\npatch will be created for kernels older than 3.4, since inc_deq was\nmodified in 3.4 and this patch will not apply.\n\nSigned-off-by: Sarah Sharp \u003csarah.a.sharp@linux.intel.com\u003e\nTested-by: James Ettle \u003ctheholyettlz@googlemail.com\u003e\nTested-by: Matthew Hall \u003cmhall@mhcomputing.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "0adf7a085fae52b18202a95722fc05d644fa7a42",
      "tree": "0c9667a1cee82130aafa4a83c75b34dd5ef6deec",
      "parents": [
        "ebd311e08218713c46f6894648084c84c48e220d"
      ],
      "author": {
        "name": "Sarah Sharp",
        "email": "sarah.a.sharp@linux.intel.com",
        "time": "Mon Jul 23 18:59:30 2012 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Aug 26 15:00:43 2012 -0700"
      },
      "message": "xhci: Switch PPT ports to EHCI on shutdown.\n\ncommit e95829f474f0db3a4d940cae1423783edd966027 upstream.\n\nThe Intel desktop boards DH77EB and DH77DF have a hardware issue that\ncan be worked around by BIOS.  If the USB ports are switched to xHCI on\nshutdown, the xHCI host will send a spurious interrupt, which will wake\nthe system.  Some BIOS will work around this, but not all.\n\nThe bug can be avoided if the USB ports are switched back to EHCI on\nshutdown.  The Intel Windows driver switches the ports back to EHCI, so\nchange the Linux xHCI driver to do the same.\n\nUnfortunately, we can\u0027t tell the two effected boards apart from other\nworking motherboards, because the vendors will change the DMI strings\nfor the DH77EB and DH77DF boards to their own custom names.  One example\nis Compulab\u0027s mini-desktop, the Intense-PC.  Instead, key off the\nPanther Point xHCI host PCI vendor and device ID, and switch the ports\nover for all PPT xHCI hosts.\n\nThe only impact this will have on non-effected boards is to add a couple\nhundred milliseconds delay on boot when the BIOS has to switch the ports\nover from EHCI to xHCI.\n\nThis patch should be backported to kernels as old as 3.0, that contain\nthe commit 69e848c2090aebba5698a1620604c7dccb448684 \"Intel xhci: Support\nEHCI/xHCI port switching.\"\n\nSigned-off-by: Sarah Sharp \u003csarah.a.sharp@linux.intel.com\u003e\nReported-by: Denis Turischev \u003cdenis@compulab.co.il\u003e\nTested-by: Denis Turischev \u003cdenis@compulab.co.il\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "ebd311e08218713c46f6894648084c84c48e220d",
      "tree": "92e9b9c7807aa54337361a69f96f9ff13a618555",
      "parents": [
        "40c293d87cc9a6e4b0b8e54cd8faabf9fa4bbb95"
      ],
      "author": {
        "name": "Sarah Sharp",
        "email": "sarah.a.sharp@linux.intel.com",
        "time": "Mon Jul 23 16:06:08 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Aug 26 15:00:43 2012 -0700"
      },
      "message": "xhci: Increase reset timeout for Renesas 720201 host.\n\ncommit 22ceac191211cf6688b1bf6ecd93c8b6bf80ed9b upstream.\n\nThe NEC/Renesas 720201 xHCI host controller does not complete its reset\nwithin 250 milliseconds.  In fact, it takes about 9 seconds to reset the\nhost controller, and 1 second for the host to be ready for doorbell\nrings.  Extend the reset and CNR polling timeout to 10 seconds each.\n\nThis patch should be backported to kernels as old as 2.6.31, that\ncontain the commit 66d4eadd8d067269ea8fead1a50fe87c2979a80d \"USB: xhci:\nBIOS handoff and HW initialization.\"\n\nSigned-off-by: Sarah Sharp \u003csarah.a.sharp@linux.intel.com\u003e\nReported-by: Edwin Klein Mentink \u003ce.kleinmentink@zonnet.nl\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    }
  ],
  "next": "40c293d87cc9a6e4b0b8e54cd8faabf9fa4bbb95"
}
