)]}' { "log": [ { "commit": "318c8932ddec5c1c26a4af0f3c053784841c598e", "tree": "601dc97976191b7baa0ba833cd2bda2bf7745b50", "parents": [ "ea5a9eff96fed8252f3a8c94a84959f981a93cae", "166ad0e1e2132ff0cda08b94af8301655fcabbcd" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Dec 07 17:28:38 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Dec 07 17:28:38 2016 -0800" }, "message": "Merge branch \u0027akpm\u0027 (patches from Andrew)\n\nMerge more fixes from Andrew Morton:\n \"3 fixes\"\n\n* emailed patches from Andrew Morton \u003cakpm@linux-foundation.org\u003e:\n kcov: add missing #include \u003clinux/sched.h\u003e\n radix tree test suite: fix compilation\n zram: restrict add/remove attributes to root only\n" }, { "commit": "166ad0e1e2132ff0cda08b94af8301655fcabbcd", "tree": "601dc97976191b7baa0ba833cd2bda2bf7745b50", "parents": [ "53855d10f4567a0577360b6448d52a863929775b" ], "author": { "name": "Kefeng Wang", "email": "wangkefeng.wang@huawei.com", "time": "Wed Dec 07 14:44:36 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Dec 07 17:10:00 2016 -0800" }, "message": "kcov: add missing #include \u003clinux/sched.h\u003e\n\nIn __sanitizer_cov_trace_pc we use task_struct and fields within it, but\nas we haven\u0027t included \u003clinux/sched.h\u003e, it is not guaranteed to be\ndefined. While we usually happen to acquire the definition through a\ntransitive include, this is fragile (and hasn\u0027t been true in the past,\ncausing issues with backports).\n\nInclude \u003clinux/sched.h\u003e to avoid any fragility.\n\n[mark.rutland@arm.com: rewrote changelog]\nLink: http://lkml.kernel.org/r/1481007384-27529-1-git-send-email-wangkefeng.wang@huawei.com\nSigned-off-by: Kefeng Wang \u003cwangkefeng.wang@huawei.com\u003e\nAcked-by: Mark Rutland \u003cmark.rutland@arm.com\u003e\nCc: Dmitry Vyukov \u003cdvyukov@google.com\u003e\nCc: Andrey Ryabinin \u003caryabinin@virtuozzo.com\u003e\nCc: James Morse \u003cjames.morse@arm.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "53855d10f4567a0577360b6448d52a863929775b", "tree": "8297310a66d20b6d01bcef8ad64951963eb6156b", "parents": [ "5c7e9ccd91b90d87029261f8856294ee51934cab" ], "author": { "name": "Matthew Wilcox", "email": "mawilcox@microsoft.com", "time": "Wed Dec 07 14:44:33 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Dec 07 17:10:00 2016 -0800" }, "message": "radix tree test suite: fix compilation\n\nPatch \"lib/radix-tree: Convert to hotplug state machine\" breaks the test\nsuite as it adds a call to cpuhp_setup_state_nocalls() which is not\ncurrently emulated in the test suite. Add it, and delete the emulation\nof the old CPU hotplug mechanism.\n\nLink: http://lkml.kernel.org/r/1480369871-5271-36-git-send-email-mawilcox@linuxonhyperv.com\nSigned-off-by: Matthew Wilcox \u003cmawilcox@microsoft.com\u003e\nTested-by: Kirill A. Shutemov \u003ckirill.shutemov@linux.intel.com\u003e\nCc: Konstantin Khlebnikov \u003ckoct9i@gmail.com\u003e\nCc: Ross Zwisler \u003cross.zwisler@linux.intel.com\u003e\nCc: Matthew Wilcox \u003cmawilcox@microsoft.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "5c7e9ccd91b90d87029261f8856294ee51934cab", "tree": "5bb12cbd8f271f71c1a7141ca7d86916ab92d71a", "parents": [ "ea5a9eff96fed8252f3a8c94a84959f981a93cae" ], "author": { "name": "Sergey Senozhatsky", "email": "sergey.senozhatsky@gmail.com", "time": "Wed Dec 07 14:44:31 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Dec 07 17:10:00 2016 -0800" }, "message": "zram: restrict add/remove attributes to root only\n\nzram hot_add sysfs attribute is a very \u0027special\u0027 attribute - reading\nfrom it creates a new uninitialized zram device. This file, by a\nmistake, can be read by a \u0027normal\u0027 user at the moment, while only root\nmust be able to create a new zram device, therefore hot_add attribute\nmust have S_IRUSR mode, not S_IRUGO.\n\n[akpm@linux-foundation.org: s/sence/sense/, reflow comment to use 80 cols]\nFixes: 6566d1a32bf72 (\"zram: add dynamic device add/remove functionality\")\nLink: http://lkml.kernel.org/r/20161205155845.20129-1-sergey.senozhatsky@gmail.com\nSigned-off-by: Sergey Senozhatsky \u003csergey.senozhatsky@gmail.com\u003e\nReported-by: Steven Allen \u003csteven@stebalien.com\u003e\nAcked-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nCc: Minchan Kim \u003cminchan@kernel.org\u003e\nCc: \u003cstable@vger.kernel.org\u003e [4.2+]\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "ea5a9eff96fed8252f3a8c94a84959f981a93cae", "tree": "4931c77356d62f40401ebb550f635ea488394d17", "parents": [ "68f5503bdc8fc309b62a4f555a048ee50d0495a5", "55f856e640560494518eaf24fe9d2d2089fba71a" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Dec 07 11:39:27 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Dec 07 11:39:27 2016 -0800" }, "message": "Merge branch \u0027x86-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull x86 fixes from Ingo Molnar:\n \"Misc fixes: a core dumping crash fix, a guess-unwinder regression fix,\n plus three build warning fixes\"\n\n* \u0027x86-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n x86/unwind: Fix guess-unwinder regression\n x86/build: Annotate die() with noreturn to fix build warning on clang\n x86/platform/olpc: Fix resume handler build warning\n x86/apic/uv: Silence a shift wrapping warning\n x86/coredump: Always use user_regs_struct for compat_elf_gregset_t\n" }, { "commit": "68f5503bdc8fc309b62a4f555a048ee50d0495a5", "tree": "ce0210db3a8844481aedbbc9aeafce27be3e659c", "parents": [ "bf7f1c7e2fdfe8b5050e8b3eebf111bf2ed1e8c9", "83929cce95251cc77e5659bf493bd424ae0e7a67" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Dec 07 11:35:55 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Dec 07 11:35:55 2016 -0800" }, "message": "Merge branch \u0027sched-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull scheduler fix from Ingo Molnar:\n \"An autogroup nice level adjustment bug fix\"\n\n* \u0027sched-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n sched/autogroup: Fix 64-bit kernel nice level adjustment\n" }, { "commit": "bf7f1c7e2fdfe8b5050e8b3eebf111bf2ed1e8c9", "tree": "a5fee5e9af8289df87ebb5ae89e8369b318499f6", "parents": [ "5b43f97f3f21c42ba738df2797930e32e05d5a25", "8fc31ce8896fc3cea1d79688c8ff950ad4e73afe" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Dec 07 11:32:19 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Dec 07 11:32:19 2016 -0800" }, "message": "Merge branch \u0027perf-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull perf fixes from Ingo Molnar:\n \"A bogus warning fix, a counter width handling fix affecting certain\n machines, plus a oneliner hw-enablement patch for Knights Mill CPUs\"\n\n* \u0027perf-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n perf/core: Remove invalid warning from list_update_cgroup_even()t\n perf/x86: Fix full width counter, counter overflow\n perf/x86/intel: Enable C-state residency events for Knights Mill\n" }, { "commit": "5b43f97f3f21c42ba738df2797930e32e05d5a25", "tree": "8d2b757f710c5bc19e6ddcecfc99f6b6706e9976", "parents": [ "407cf05d46fe59e2becfad3a55387d172f6fd0d0", "f943fe0faf27991d256e10b5a85f175385c64cdc" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Dec 07 11:27:33 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Dec 07 11:27:33 2016 -0800" }, "message": "Merge branch \u0027locking-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull locking fixes from Ingo Molnar:\n \"Two rtmutex race fixes (which miraculously never triggered, that we\n know of), plus two lockdep printk formatting regression fixes\"\n\n* \u0027locking-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n lockdep: Fix report formatting\n locking/rtmutex: Use READ_ONCE() in rt_mutex_owner()\n locking/rtmutex: Prevent dequeue vs. unlock race\n locking/selftest: Fix output since KERN_CONT changes\n" }, { "commit": "407cf05d46fe59e2becfad3a55387d172f6fd0d0", "tree": "1411998aeb0cc2f82d3af353ba0643e342ae4960", "parents": [ "ce779d6b5bbe6a32452a882605d09518cc79e4ba", "69042bf2001b44e81cd86ab11a4637b9d9a14c5a" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Dec 07 10:56:00 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Dec 07 10:56:00 2016 -0800" }, "message": "Merge branch \u0027core-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull objtool fix from Ingo Molnar:\n \"A single late breaking fix for objtool\"\n\n* \u0027core-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n objtool: Fix bytes check of lea\u0027s rex_prefix\n" }, { "commit": "ce779d6b5bbe6a32452a882605d09518cc79e4ba", "tree": "2d8ffb9daaf118e2561cdc73ffa5e5684d91b235", "parents": [ "f27c2f69cc8edc03ea8086f974811b9b45b2f3a5", "c01638f5d919728f565bf8b5e0a6a159642df0d9" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Dec 07 08:45:23 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Dec 07 08:45:23 2016 -0800" }, "message": "Merge branch \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse\n\nPull fuse fix from Miklos Szeredi:\n \"Fix a regression spotted by Jeff Layton\"\n\n* \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/fuse:\n fuse: fix clearing suid, sgid for chown()\n" }, { "commit": "f27c2f69cc8edc03ea8086f974811b9b45b2f3a5", "tree": "ee212b592bc0fcf0f6523d9d664613fdb191b6d9", "parents": [ "a0ac402cfcdc904f9772e1762b3fda112dcc56a0" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Dec 07 08:39:00 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Dec 07 08:39:00 2016 -0800" }, "message": "Revert \"default exported asm symbols to zero\"\n\nThis reverts commit 8ab2ae655bfe384335c5b6b0d6041e0ddce26b00.\n\nI loved that commit because of how it explained what the problem with\nnewer versions of binutils were, but the actual patch itself turns out\nto not work very well.\n\nIt has two problems:\n\n - a zero CRC value isn\u0027t actually right. It happens to work for the\n case where both sides of the equation fail at giving the symbol a\n crc, but there are cases where the users of the exported symbol get\n the right crc (due to seeing the C declarations), but the actual\n exporting itself does not (due to the whole weak asm symbol issue).\n\n So then the module load fails after all - we did have a crc for the\n symbol, but we couldn\u0027t match it with the loaded module.\n\n - it seems that the alpha assembler has special semantics for the\n \u0027.set\u0027 directive, and on alpha it doesn\u0027t actually set the value of\n the specified symbol at all, it is instead used to set various\n assembly modes (eg \".set noat\" and \".set noreorder\").\n\n So using \".set\" to set the symbol value would just cause build\n failures on alpha.\n\nI\u0027m sure we\u0027ll find some other workaround for these issues (hopefully\nthat involves getting rid of modversions entirely some day, but people\nare also talking about just using smarter tools). But for now we\u0027ll\njust fall back on commit faaae2a58143 (\"Re-enable CONFIG_MODVERSIONS in\na slightly weaker form\") that just let\u0027s a missing crc through.\n\nReported-by: Jan Stancek \u003cjstancek@redhat.com\u003e\nReported-by: Philip Müller \u003cphilm@manjaro.org\u003e\nReported-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nCc: Arnd Bergmann \u003carnd@arndb.de\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "a0ac402cfcdc904f9772e1762b3fda112dcc56a0", "tree": "6d4a89d91174c334881d9224bfcf9752ae75c8d3", "parents": [ "bc3913a5378cd0ddefd1dfec6917cc12eb23a946" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Dec 06 16:18:14 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Dec 07 08:23:35 2016 -0800" }, "message": "Don\u0027t feed anything but regular iovec\u0027s to blk_rq_map_user_iov\n\nIn theory we could map other things, but there\u0027s a reason that function\nis called \"user_iov\". Using anything else (like splice can do) just\nconfuses it.\n\nReported-and-tested-by: Johannes Thumshirn \u003cjthumshirn@suse.de\u003e\nCc: Al Viro \u003cviro@ZenIV.linux.org.uk\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "bc3913a5378cd0ddefd1dfec6917cc12eb23a946", "tree": "ce39755a838f5213368793b60fee0a3703d39543", "parents": [ "da1b466fa47a9c1107e3709395778845dc3bbad7", "163117e8d4fd7a235ec48479e31bbda0c74eff56" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Dec 06 09:24:11 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Dec 06 09:24:11 2016 -0800" }, "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/sparc\n\nPull sparc fix from David Miller:\n \"A use-before-NULL-check from Dan Carpenter\"\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/davem/sparc:\n dbri: move dereference after check for NULL\n" }, { "commit": "163117e8d4fd7a235ec48479e31bbda0c74eff56", "tree": "3f5aa5e729a87e0b1fa9f78155442bbe675a75f9", "parents": [ "88abd8249ee8bcebb98c90e890ea5e342db832af" ], "author": { "name": "Dan Carpenter", "email": "dan.carpenter@oracle.com", "time": "Thu Dec 01 08:48:30 2016 +0300" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Dec 06 12:18:22 2016 -0500" }, "message": "dbri: move dereference after check for NULL\n\nWe accidentally introduced a dereference before the NULL check in\nxmit_descs() as part of silencing a GCC warning.\n\nFixes: 16f46050e709 (\"dbri: Fix compiler warning\")\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "da1b466fa47a9c1107e3709395778845dc3bbad7", "tree": "4a9b4795d4bfb2d964058751740a39a7b16a7b2f", "parents": [ "10d20bd25e06b220b1d816228b036e367215dc60", "32f16e142d7acabad68ef27c123d0caf1548aac3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Dec 06 09:06:51 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Dec 06 09:06:51 2016 -0800" }, "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net\n\nPull networking fixes from David Miller:\n\n 1) When dcbnl_cee_fill() fails to be able to push a new netlink\n attribute, it return 0 instead of an error code. From Pan Bian.\n\n 2) Two suffix handling fixes to FIB trie code, from Alexander Duyck.\n\n 3) bnxt_hwrm_stat_ctx_alloc() goes through all the trouble of setting\n and maintaining a return code \u0027rc\u0027 but fails to actually return it.\n Also from Pan Bian.\n\n 4) ping socket ICMP handler needs to validate ICMP header length, from\n Kees Cook.\n\n 5) caif_sktinit_module() has this interesting logic:\n\n int err \u003d sock_register(...);\n if (!err)\n return err;\n return 0;\n\n Just return sock_register()\u0027s return value directly which is the\n only possible correct thing to do.\n\n 6) Two bnx2x driver fixes from Yuval Mintz, return a reasonable\n estimate from get_ringparam() ethtool op when interface is down and\n avoid trying to use UDP port based tunneling on 577xx chips.\n\n 7) Fix ep93xx_eth crash on module unload from Florian Fainelli.\n\n 8) Missing uapi exports, from Stephen Hemminger.\n\n 9) Don\u0027t schedule work from sk_destruct(), because the socket will be\n freed upon return from that function. From Herbert Xu.\n\n10) Buggy drivers, of which we know there is at least one, can send a\n huge packet into the TCP stack but forget to set the gso_size in the\n SKB, which causes all kinds of problems.\n\n Correct this when it happens, and emit a one-time warning with the\n device name included so that it can be diagnosed more easily.\n\n From Marcelo Ricardo Leitner.\n\n11) virtio-net does DMA off the stack causes hiccups with VMAP_STACK,\n fix from Andy Lutomirski.\n\n12) Fix fec driver compilation with CONFIG_M5272, from Nikita\n Yushchenko.\n\n13) mlx5 fixes from Kamal Heib, Saeed Mahameed, and Mohamad Haj Yahia.\n (erroneously flushing queues on error, module parameter validation,\n etc)\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (34 commits)\n net/mlx5e: Change the SQ/RQ operational state to positive logic\n net/mlx5e: Don\u0027t flush SQ on error\n net/mlx5e: Don\u0027t notify HW when filling the edge of ICO SQ\n net/mlx5: Fix query ISSI flow\n net/mlx5: Remove duplicate pci dev name print\n net/mlx5: Verify module parameters\n net: fec: fix compile with CONFIG_M5272\n be2net: Add DEVSEC privilege to SET_HSW_CONFIG command.\n virtio-net: Fix DMA-from-the-stack in virtnet_set_mac_address()\n tcp: warn on bogus MSS and try to amend it\n uapi glibc compat: fix outer guard of net device flags enum\n net: stmmac: clear reset value of snps, wr_osr_lmt/snps, rd_osr_lmt before writing\n netlink: Do not schedule work from sk_destruct\n uapi: export nf_log.h\n uapi: export tc_skbmod.h\n net: ep93xx_eth: Do not crash unloading module\n bnx2x: Prevent tunnel config for 577xx\n bnx2x: Correct ringparam estimate when DOWN\n isdn: hisax: set error code on failure\n net: bnx2x: fix improper return value\n ...\n" }, { "commit": "10d20bd25e06b220b1d816228b036e367215dc60", "tree": "5f19ca03611e4d35581d102ee64a2e72a4623369", "parents": [ "d9d04527c79f0f7d9186272866526e871ef4ac6f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Dec 05 12:10:29 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Dec 06 08:59:05 2016 -0800" }, "message": "shmem: fix shm fallocate() list corruption\n\nThe shmem hole punching with fallocate(FALLOC_FL_PUNCH_HOLE) does not\nwant to race with generating new pages by faulting them in.\n\nHowever, the wait-queue used to delay the page faulting has a serious\nproblem: the wait queue head (in shmem_fallocate()) is allocated on the\nstack, and the code expects that \"wake_up_all()\" will make sure that all\nthe queue entries are gone before the stack frame is de-allocated.\n\nAnd that is not at all necessarily the case.\n\nYes, a normal wake-up sequence will remove the wait-queue entry that\ncaused the wakeup (see \"autoremove_wake_function()\"), but the key\nwording there is \"that caused the wakeup\". When there are multiple\npossible wakeup sources, the wait queue entry may well stay around.\n\nAnd _particularly_ in a page fault path, we may be faulting in new pages\nfrom user space while we also have other things going on, and there may\nwell be other pending wakeups.\n\nSo despite the \"wake_up_all()\", it\u0027s not at all guaranteed that all list\nentries are removed from the wait queue head on the stack.\n\nFix this by introducing a new wakeup function that removes the list\nentry unconditionally, even if the target process had already woken up\nfor other reasons. Use that \"synchronous\" function to set up the\nwaiters in shmem_fault().\n\nThis problem has never been seen in the wild afaik, but Dave Jones has\nreported it on and off while running trinity. We thought we fixed the\nstack corruption with the blk-mq rq_list locking fix (commit\n7fe311302f7d: \"blk-mq: update hardware and software queues for sleeping\nalloc\"), but it turns out there was _another_ stack corruptor hiding\nin the trinity runs.\n\nVegard Nossum (also running trinity) was able to trigger this one fairly\nconsistently, and made us look once again at the shmem code due to the\nfaults often being in that area.\n\nReported-and-tested-by: Vegard Nossum \u003cvegard.nossum@oracle.com\u003e.\nReported-by: Dave Jones \u003cdavej@codemonkey.org.uk\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "32f16e142d7acabad68ef27c123d0caf1548aac3", "tree": "3dfd05fe193895006dd58375674129bca7952cd6", "parents": [ "f85de6666347c974cdf97b1026180995d912d7d0", "c0f1147d14e4b09018a495c5095094e5707a4f44" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Dec 06 11:44:45 2016 -0500" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Dec 06 11:44:45 2016 -0500" }, "message": "Merge branch \u0027mlx5-fixes\u0027\n\nSaeed Mahameed says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nMellanox 100G mlx5 fixes 2016-12-04\n\nSome bug fixes for mlx5 core and mlx5e driver.\n\nv1-\u003ev2:\n - replace \"uint\" with \"unsigned int\"\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c0f1147d14e4b09018a495c5095094e5707a4f44", "tree": "3dfd05fe193895006dd58375674129bca7952cd6", "parents": [ "3c8591d593a3da9ae8e8342acb1f6ab9ab478e92" ], "author": { "name": "Mohamad Haj Yahia", "email": "mohamad@mellanox.com", "time": "Tue Dec 06 17:32:48 2016 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Dec 06 11:44:45 2016 -0500" }, "message": "net/mlx5e: Change the SQ/RQ operational state to positive logic\n\nWhen using the negative logic (i.e. FLUSH state), after the RQ/SQ reopen\nwe will have a time interval that the RQ/SQ is not really ready and the\nstate indicates that its not in FLUSH state because the initial SQ/RQ struct\nmemory starts as zeros.\nNow we changed the state to indicate if the SQ/RQ is opened and we will\nset the READY state after finishing preparing all the SQ/RQ resources.\n\nFixes: 6e8dd6d6f4bd (\"net/mlx5e: Don\u0027t wait for SQ completions on close\")\nFixes: f2fde18c52a7 (\"net/mlx5e: Don\u0027t wait for RQ completions on close\")\nSigned-off-by: Mohamad Haj Yahia \u003cmohamad@mellanox.com\u003e\nSigned-off-by: Saeed Mahameed \u003csaeedm@mellanox.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3c8591d593a3da9ae8e8342acb1f6ab9ab478e92", "tree": "305fd571f2b5e223cabe1641a94583de9e10c2b5", "parents": [ "b8335d91b472289939e26428dfa88c54aee3b739" ], "author": { "name": "Saeed Mahameed", "email": "saeedm@mellanox.com", "time": "Tue Dec 06 17:32:47 2016 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Dec 06 11:44:44 2016 -0500" }, "message": "net/mlx5e: Don\u0027t flush SQ on error\n\nWe are doing SQ descriptors cleanup in driver.\n\nFixes: 6e8dd6d6f4bd (\"net/mlx5e: Don\u0027t wait for SQ completions on close\")\nSigned-off-by: Saeed Mahameed \u003csaeedm@mellanox.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b8335d91b472289939e26428dfa88c54aee3b739", "tree": "9d59349b6a1aaa172b426bdf52509e2cab8f37e9", "parents": [ "f9c14e46748be9a2adafdb7d216f6cdeb435aadc" ], "author": { "name": "Saeed Mahameed", "email": "saeedm@mellanox.com", "time": "Tue Dec 06 17:32:46 2016 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Dec 06 11:44:44 2016 -0500" }, "message": "net/mlx5e: Don\u0027t notify HW when filling the edge of ICO SQ\n\nWe are going to do this a couple of steps ahead anyway.\n\nFixes: d3c9bc2743dc (\"net/mlx5e: Added ICO SQs\")\nSigned-off-by: Saeed Mahameed \u003csaeedm@mellanox.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f9c14e46748be9a2adafdb7d216f6cdeb435aadc", "tree": "663db6816358ea5c2051e9594d287fea7997617e", "parents": [ "9e5b2fc1d39b3122e2028849d0edc5df1d1a4761" ], "author": { "name": "Kamal Heib", "email": "kamalh@mellanox.com", "time": "Tue Dec 06 17:32:45 2016 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Dec 06 11:44:44 2016 -0500" }, "message": "net/mlx5: Fix query ISSI flow\n\nIn old FWs query ISSI command is not supported and for some of those FWs\nit might fail with status other than \"MLX5_CMD_STAT_BAD_OP_ERR\".\n\nIn such case instead of failing the driver load, we will treat any FW\nstatus other than 0 for Query ISSI FW command as ISSI not supported and\nassume ISSI\u003d0 (most basic driver/FW interface).\n\nIn case of driver syndrom (query ISSI failure by driver) we will fail\ndriver load.\n\nFixes: f62b8bb8f2d3 (\u0027net/mlx5: Extend mlx5_core to support ConnectX-4\nEthernet functionality\u0027)\nSigned-off-by: Kamal Heib \u003ckamalh@mellanox.com\u003e\n\nSigned-off-by: Saeed Mahameed \u003csaeedm@mellanox.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9e5b2fc1d39b3122e2028849d0edc5df1d1a4761", "tree": "356211f6c7e84a755ee1a1a86086097308a434ad", "parents": [ "f663ad98623926b8d7bdef4b4648d10c0229aebe" ], "author": { "name": "Kamal Heib", "email": "kamalh@mellanox.com", "time": "Tue Dec 06 17:32:44 2016 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Dec 06 11:44:43 2016 -0500" }, "message": "net/mlx5: Remove duplicate pci dev name print\n\nRemove duplicate pci dev name printing from mlx5_core_warn/dbg.\n\nFixes: 5a7883989b1c (\u0027net/mlx5_core: Improve mlx5 messages\u0027)\nSigned-off-by: Kamal Heib \u003ckamalh@mellanox.com\u003e\nSigned-off-by: Saeed Mahameed \u003csaeedm@mellanox.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f663ad98623926b8d7bdef4b4648d10c0229aebe", "tree": "33ee3853074e6eca1f2ff0419c4f59d3cfb41dc3", "parents": [ "f85de6666347c974cdf97b1026180995d912d7d0" ], "author": { "name": "Kamal Heib", "email": "kamalh@mellanox.com", "time": "Tue Dec 06 17:32:43 2016 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Dec 06 11:44:43 2016 -0500" }, "message": "net/mlx5: Verify module parameters\n\nVerify the mlx5_core module parameters by making sure that they are in\nthe expected range and if they aren\u0027t restore them to their default\nvalues.\n\nFixes: 9603b61de1ee (\u0027mlx5: Move pci device handling from mlx5_ib to mlx5_core\u0027)\nSigned-off-by: Kamal Heib \u003ckamalh@mellanox.com\u003e\nSigned-off-by: Saeed Mahameed \u003csaeedm@mellanox.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f85de6666347c974cdf97b1026180995d912d7d0", "tree": "305017a75980f4196fb79aef6f4e15b43c1defd7", "parents": [ "d14584d91976c42c7178164665c4959495740939" ], "author": { "name": "Nikita Yushchenko", "email": "nikita.yoush@cogentembedded.com", "time": "Tue Dec 06 09:26:53 2016 +0300" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Dec 06 11:40:15 2016 -0500" }, "message": "net: fec: fix compile with CONFIG_M5272\n\nCommit 80cca775cdc4 (\"net: fec: cache statistics while device is down\")\nintroduced unconditional statistics-related actions.\n\nHowever, when driver is compiled with CONFIG_M5272, staticsics-related\ndefinitions do not exist, which results into build errors.\n\nFix that by adding explicit handling of !defined(CONFIG_M5272) case.\n\nFixes: 80cca775cdc4 (\"net: fec: cache statistics while device is down\")\nSigned-off-by: Nikita Yushchenko \u003cnikita.yoush@cogentembedded.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d14584d91976c42c7178164665c4959495740939", "tree": "89e211e1972074c990d8b67b3a466234dee539c7", "parents": [ "e37e2ff350a321ad9c36b588e76f34fbba305be6" ], "author": { "name": "Venkat Duvvuru", "email": "venkatkumar.duvvuru@broadcom.com", "time": "Tue Dec 06 00:33:50 2016 -0500" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Dec 06 11:39:41 2016 -0500" }, "message": "be2net: Add DEVSEC privilege to SET_HSW_CONFIG command.\n\nOPCODE_COMMON_GET_FN_PRIVILEGES is returning only DEVSEC\nprivilege (Unrestricted Administrative Privilege) for Lancer NIC functions.\nSo, driver is failing SET_HSW_CONFIG command, as DEVSEC privilege was not\nset in the privilege bitmap. This patch fixes the problem by setting DEVSEC\nprivilege in SET_HSW_CONFIG’s privilege bitmap.\n\nSigned-off-by: Venkat Duvvuru \u003cvenkatkumar.duvvuru@broadcom.com\u003e\nSigned-off-by: Suresh Reddy \u003csuresh.reddy@broadcom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e37e2ff350a321ad9c36b588e76f34fbba305be6", "tree": "ea9cc96f7d589fe209cccd7af95047d5e631d423", "parents": [ "dcb17d22e1c2cd72e72190c736349a675362b3bc" ], "author": { "name": "Andy Lutomirski", "email": "luto@kernel.org", "time": "Mon Dec 05 18:10:58 2016 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Dec 06 11:38:43 2016 -0500" }, "message": "virtio-net: Fix DMA-from-the-stack in virtnet_set_mac_address()\n\nWith CONFIG_VMAP_STACK\u003dy, virtnet_set_mac_address() can be passed a\npointer to the stack and it will OOPS. Copy the address to the heap\nto prevent the crash.\n\nCc: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nCc: Jason Wang \u003cjasowang@redhat.com\u003e\nCc: Laura Abbott \u003clabbott@redhat.com\u003e\nReported-by: zbyszek@in.waw.pl\nSigned-off-by: Andy Lutomirski \u003cluto@kernel.org\u003e\nAcked-by: Jason Wang \u003cjasowang@redhat.com\u003e\nAcked-by: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "dcb17d22e1c2cd72e72190c736349a675362b3bc", "tree": "625a1b7ca8f1ef0004a51aa8287653d603b153fb", "parents": [ "efc45154828ae4e49c6b46f59882bfef32697d44" ], "author": { "name": "Marcelo Ricardo Leitner", "email": "marcelo.leitner@gmail.com", "time": "Mon Dec 05 18:37:13 2016 -0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Dec 06 11:01:19 2016 -0500" }, "message": "tcp: warn on bogus MSS and try to amend it\n\nThere have been some reports lately about TCP connection stalls caused\nby NIC drivers that aren\u0027t setting gso_size on aggregated packets on rx\npath. This causes TCP to assume that the MSS is actually the size of the\naggregated packet, which is invalid.\n\nAlthough the proper fix is to be done at each driver, it\u0027s often hard\nand cumbersome for one to debug, come to such root cause and report/fix\nit.\n\nThis patch amends this situation in two ways. First, it adds a warning\non when this situation occurs, so it gives a hint to those trying to\ndebug this. It also limit the maximum probed MSS to the adverised MSS,\nas it should never be any higher than that.\n\nThe result is that the connection may not have the best performance ever\nbut it shouldn\u0027t stall, and the admin will have a hint on what to look\nfor.\n\nTested with virtio by forcing gso_size to 0.\n\nv2: updated msg per David\u0027s suggestion\nv3: use skb_iif to find the interface and also log its name, per Eric\n Dumazet\u0027s suggestion. As the skb may be backlogged and the interface\n gone by then, we need to check if the number still has a meaning.\nv4: use helper tcp_gro_dev_warn() and avoid pr_warn_once inside __once, per\n David\u0027s suggestion\n\nCc: Jonathan Maxwell \u003cjmaxwell37@gmail.com\u003e\nSigned-off-by: Marcelo Ricardo Leitner \u003cmarcelo.leitner@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "efc45154828ae4e49c6b46f59882bfef32697d44", "tree": "4b468a33920c67692b4278658d009fefc2c5ccda", "parents": [ "6b3374cb1c0bd4699ace03d7e0dc14b532e4f52e" ], "author": { "name": "Jonas Gorski", "email": "jonas.gorski@gmail.com", "time": "Sat Dec 03 17:31:45 2016 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Dec 06 10:43:32 2016 -0500" }, "message": "uapi glibc compat: fix outer guard of net device flags enum\n\nFix a wrong condition preventing the higher net device flags\nIFF_LOWER_UP etc to be defined if net/if.h is included before\nlinux/if.h.\n\nThe comment makes it clear the intention was to allow partial\ndefinition with either parts.\n\nThis fixes compilation of userspace programs trying to use\nIFF_LOWER_UP, IFF_DORMANT or IFF_ECHO.\n\nFixes: 4a91cb61bb99 (\"uapi glibc compat: fix compile errors when glibc net/if.h included before linux/if.h\")\nSigned-off-by: Jonas Gorski \u003cjonas.gorski@gmail.com\u003e\nReviewed-by: Mikko Rapeli \u003cmikko.rapeli@iki.fi\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "6b3374cb1c0bd4699ace03d7e0dc14b532e4f52e", "tree": "23b0cfa79b7fedc0e10c42c61a60aac5dbba2371", "parents": [ "ed5d7788a934a4b6d6d025e948ed4da496b4f12e" ], "author": { "name": "Niklas Cassel", "email": "niklas.cassel@axis.com", "time": "Mon Dec 05 18:12:54 2016 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Dec 06 10:33:48 2016 -0500" }, "message": "net: stmmac: clear reset value of snps, wr_osr_lmt/snps, rd_osr_lmt before writing\n\nWR_OSR_LMT and RD_OSR_LMT have a reset value of 1.\nSince the reset value wasn\u0027t cleared before writing, the value in the\nregister would be incorrect if specifying an uneven value for\nsnps,wr_osr_lmt/snps,rd_osr_lmt.\n\nZero is a valid value for the properties, since the databook specifies:\nmaximum outstanding requests \u003d WR_OSR_LMT + 1.\n\nWe do not want to change the behavior for existing users when the\nproperty is missing. Therefore, default to 1 if the property is missing,\nsince that is the same as the reset value.\n\nSigned-off-by: Niklas Cassel \u003cniklas.cassel@axis.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c01638f5d919728f565bf8b5e0a6a159642df0d9", "tree": "3dc341c250252908c912ad167f49d00b2fc2c734", "parents": [ "3e5de27e940d00d8d504dfb96625fb654f641509" ], "author": { "name": "Miklos Szeredi", "email": "mszeredi@redhat.com", "time": "Tue Dec 06 16:18:45 2016 +0100" }, "committer": { "name": "Miklos Szeredi", "email": "mszeredi@redhat.com", "time": "Tue Dec 06 16:18:45 2016 +0100" }, "message": "fuse: fix clearing suid, sgid for chown()\n\nBasically, the pjdfstests set the ownership of a file to 06555, and then\nchowns it (as root) to a new uid/gid. Prior to commit a09f99eddef4 (\"fuse:\nfix killing s[ug]id in setattr\"), fuse would send down a setattr with both\nthe uid/gid change and a new mode. Now, it just sends down the uid/gid\nchange.\n\nTechnically this is NOTABUG, since POSIX doesn\u0027t _require_ that we clear\nthese bits for a privileged process, but Linux (wisely) has done that and I\nthink we don\u0027t want to change that behavior here.\n\nThis is caused by the use of should_remove_suid(), which will always return\n0 when the process has CAP_FSETID.\n\nIn fact we really don\u0027t need to be calling should_remove_suid() at all,\nsince we\u0027ve already been indicated that we should remove the suid, we just\ndon\u0027t want to use a (very) stale mode for that.\n\nThis patch should fix the above as well as simplify the logic.\n\nReported-by: Jeff Layton \u003cjlayton@redhat.com\u003e \nSigned-off-by: Miklos Szeredi \u003cmszeredi@redhat.com\u003e\nFixes: a09f99eddef4 (\"fuse: fix killing s[ug]id in setattr\")\nCc: \u003cstable@vger.kernel.org\u003e\nReviewed-by: Jeff Layton \u003cjlayton@redhat.com\u003e\n" }, { "commit": "f943fe0faf27991d256e10b5a85f175385c64cdc", "tree": "f520d8a04053ee5ab7e628f0dafcecf80b9a1077", "parents": [ "1be5d4fa0af34fb7bafa205aeb59f5c7cc7a089d" ], "author": { "name": "Dmitry Vyukov", "email": "dvyukov@google.com", "time": "Mon Nov 28 15:24:43 2016 +0100" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Tue Dec 06 10:40:08 2016 +0100" }, "message": "lockdep: Fix report formatting\n\nSince commit:\n\n 4bcc595ccd80 (\"printk: reinstate KERN_CONT for printing continuation lines\")\n\nprintk() requires KERN_CONT to continue log messages. Lots of printk()\nin lockdep.c and print_ip_sym() don\u0027t have it. As the result lockdep\nreports are completely messed up.\n\nAdd missing KERN_CONT and inline print_ip_sym() where necessary.\n\nExample of a messed up report:\n\n 0-rc5+ #41 Not tainted\n -------------------------------------------------------\n syz-executor0/5036 is trying to acquire lock:\n (\n rtnl_mutex\n ){+.+.+.}\n , at:\n [\u003cffffffff86b3d6ac\u003e] rtnl_lock+0x1c/0x20\n but task is already holding lock:\n (\n \u0026net-\u003epacket.sklist_lock\n ){+.+...}\n , at:\n [\u003cffffffff873541a6\u003e] packet_diag_dump+0x1a6/0x1920\n which lock already depends on the new lock.\n the existing dependency chain (in reverse order) is:\n -\u003e #3\n (\n \u0026net-\u003epacket.sklist_lock\n +.+...}\n ...\n\nWithout this patch all scripts that parse kernel bug reports are broken.\n\nSigned-off-by: Dmitry Vyukov \u003cdvyukov@google.com\u003e\nSigned-off-by: Peter Zijlstra (Intel) \u003cpeterz@infradead.org\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: andreyknvl@google.com\nCc: aryabinin@virtuozzo.com\nCc: joe@perches.com\nCc: syzkaller@googlegroups.com\nLink: http://lkml.kernel.org/r/1480343083-48731-1-git-send-email-dvyukov@google.com\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\n" }, { "commit": "8fc31ce8896fc3cea1d79688c8ff950ad4e73afe", "tree": "03ad94434b6a460523b500ab89338a407b9574c2", "parents": [ "7f612a7f0bc13a2361a152862435b7941156b6af" ], "author": { "name": "David Carrillo-Cisneros", "email": "davidcc@google.com", "time": "Sun Dec 04 00:46:17 2016 -0800" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Tue Dec 06 09:44:29 2016 +0100" }, "message": "perf/core: Remove invalid warning from list_update_cgroup_even()t\n\nThe warning introduced in commit:\n\n 864c2357ca89 (\"perf/core: Do not set cpuctx-\u003ecgrp for unscheduled cgroups\")\n\nassumed that a cgroup switch always precedes list_del_event. This is\nnot the case. Remove warning.\n\nMake sure that cpuctx-\u003ecgrp is NULL until a cgroup event is sched in\nor ctx-\u003enr_cgroups \u003d\u003d 0.\n\nSigned-off-by: David Carrillo-Cisneros \u003cdavidcc@google.com\u003e\nSigned-off-by: Peter Zijlstra (Intel) \u003cpeterz@infradead.org\u003e\nCc: Alexander Shishkin \u003calexander.shishkin@linux.intel.com\u003e\nCc: Arnaldo Carvalho de Melo \u003cacme@redhat.com\u003e\nCc: Borislav Petkov \u003cbp@suse.de\u003e\nCc: Fenghua Yu \u003cfenghua.yu@intel.com\u003e\nCc: Jiri Olsa \u003cjolsa@redhat.com\u003e\nCc: Kan Liang \u003ckan.liang@intel.com\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Marcelo Tosatti \u003cmtosatti@redhat.com\u003e\nCc: Nilay Vaish \u003cnilayvaish@gmail.com\u003e\nCc: Paul Turner \u003cpjt@google.com\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCc: Ravi V Shankar \u003cravi.v.shankar@intel.com\u003e\nCc: Stephane Eranian \u003ceranian@google.com\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Vegard Nossum \u003cvegard.nossum@gmail.com\u003e\nCc: Vikas Shivappa \u003cvikas.shivappa@linux.intel.com\u003e\nCc: Vince Weaver \u003cvincent.weaver@maine.edu\u003e\nLink: http://lkml.kernel.org/r/1480841177-27299-1-git-send-email-davidcc@google.com\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\n" }, { "commit": "7f612a7f0bc13a2361a152862435b7941156b6af", "tree": "dc5a2c959c6e1900bf90c726fb58730395bfd55e", "parents": [ "1dba23b12f49d7cf3d4504171c62541122b55141" ], "author": { "name": "Peter Zijlstra (Intel)", "email": "peterz@infradead.org", "time": "Tue Nov 29 20:33:28 2016 +0000" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Tue Dec 06 09:44:28 2016 +0100" }, "message": "perf/x86: Fix full width counter, counter overflow\n\nLukasz reported that perf stat counters overflow handling is broken on KNL/SLM.\n\nBoth these parts have full_width_write set, and that does indeed have\na problem. In order to deal with counter wrap, we must sample the\ncounter at at least half the counter period (see also the sampling\ntheorem) such that we can unambiguously reconstruct the count.\n\nHowever commit:\n\n 069e0c3c4058 (\"perf/x86/intel: Support full width counting\")\n\nsets the sampling interval to the full period, not half.\n\nFixing that exposes another issue, in that we must not sign extend the\ndelta value when we shift it right; the counter cannot have\ndecremented after all.\n\nWith both these issues fixed, counter overflow functions correctly\nagain.\n\nReported-by: Lukasz Odzioba \u003clukasz.odzioba@intel.com\u003e\nTested-by: Liang, Kan \u003ckan.liang@intel.com\u003e\nTested-by: Odzioba, Lukasz \u003clukasz.odzioba@intel.com\u003e\nSigned-off-by: Peter Zijlstra (Intel) \u003cpeterz@infradead.org\u003e\nCc: Alexander Shishkin \u003calexander.shishkin@linux.intel.com\u003e\nCc: Arnaldo Carvalho de Melo \u003cacme@redhat.com\u003e\nCc: Jiri Olsa \u003cjolsa@redhat.com\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCc: Stephane Eranian \u003ceranian@google.com\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Vince Weaver \u003cvincent.weaver@maine.edu\u003e\nCc: stable@vger.kernel.org\nFixes: 069e0c3c4058 (\"perf/x86/intel: Support full width counting\")\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\n" }, { "commit": "1dba23b12f49d7cf3d4504171c62541122b55141", "tree": "d9d7b10bd8f16f52717b6e3cffb5a81a4e1af609", "parents": [ "d9d04527c79f0f7d9186272866526e871ef4ac6f" ], "author": { "name": "Piotr Luc", "email": "piotr.luc@intel.com", "time": "Thu Dec 01 01:08:53 2016 +0100" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Tue Dec 06 09:44:27 2016 +0100" }, "message": "perf/x86/intel: Enable C-state residency events for Knights Mill\n\nThe Knights Mill is enough close to Knights Landing so the path reuses\nC-state residency support of the latter.\n\nSigned-off-by: Piotr Luc \u003cpiotr.luc@intel.com\u003e\nSigned-off-by: Peter Zijlstra (Intel) \u003cpeterz@infradead.org\u003e\nCc: Alexander Shishkin \u003calexander.shishkin@linux.intel.com\u003e\nCc: Arnaldo Carvalho de Melo \u003cacme@kernel.org\u003e\nCc: Arnaldo Carvalho de Melo \u003cacme@redhat.com\u003e\nCc: Jiri Olsa \u003cjolsa@redhat.com\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCc: Stephane Eranian \u003ceranian@google.com\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Vince Weaver \u003cvincent.weaver@maine.edu\u003e\nLink: http://lkml.kernel.org/r/20161201000853.18260-1-piotr.luc@intel.com\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\n" }, { "commit": "69042bf2001b44e81cd86ab11a4637b9d9a14c5a", "tree": "742bf7f1676233af8f0a83d673cea7938815de93", "parents": [ "d9d04527c79f0f7d9186272866526e871ef4ac6f" ], "author": { "name": "Jiri Slaby", "email": "jslaby@suse.cz", "time": "Mon Dec 05 11:55:51 2016 +0100" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Tue Dec 06 09:20:59 2016 +0100" }, "message": "objtool: Fix bytes check of lea\u0027s rex_prefix\n\nFor the \"lea %(rsp), %rbp\" case, we check if there is a rex_prefix.\nBut we check \u0027bytes\u0027 which is insn_byte_t[4] in rex_prefix (insn_field\nstructure). Therefore, the check is always true.\n\nInstead, check \u0027nbytes\u0027 which is the right one.\n\nSigned-off-by: Jiri Slaby \u003cjslaby@suse.cz\u003e\nAcked-by: Josh Poimboeuf \u003cjpoimboe@redhat.com\u003e\nCc: Andy Lutomirski \u003cluto@kernel.org\u003e\nCc: Borislav Petkov \u003cbp@alien8.de\u003e\nCc: Brian Gerst \u003cbrgerst@gmail.com\u003e\nCc: Denys Vlasenko \u003cdvlasenk@redhat.com\u003e\nCc: H. Peter Anvin \u003chpa@zytor.com\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nLink: http://lkml.kernel.org/r/20161205105551.25917-1-jslaby@suse.cz\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\n" }, { "commit": "ed5d7788a934a4b6d6d025e948ed4da496b4f12e", "tree": "9f10caf66c776a0ea3d55504e647897408105996", "parents": [ "ffe3bb85c19e1dbf96cc13aad823ae0a8855d066" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Mon Dec 05 15:28:21 2016 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 19:43:42 2016 -0500" }, "message": "netlink: Do not schedule work from sk_destruct\n\nIt is wrong to schedule a work from sk_destruct using the socket\nas the memory reserve because the socket will be freed immediately\nafter the return from sk_destruct.\n\nInstead we should do the deferral prior to sk_free.\n\nThis patch does just that.\n\nFixes: 707693c8a498 (\"netlink: Call cb-\u003edone from a worker thread\")\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nTested-by: Andrey Konovalov \u003candreyknvl@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ffe3bb85c19e1dbf96cc13aad823ae0a8855d066", "tree": "869a9cb35a2799d2f8f4db400a567f3d334e27af", "parents": [ "ad558858295726cb876b78d1c39d471372f1901a" ], "author": { "name": "stephen hemminger", "email": "stephen@networkplumber.org", "time": "Fri Dec 02 14:54:00 2016 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 19:43:02 2016 -0500" }, "message": "uapi: export nf_log.h\n\nFile is in uapi directory but not being copied on\n make install_headers\n\nFixes commit 4ec9c8fbbc22 (\"netfilter: nft_log: complete\nNFTA_LOG_FLAGS attr support\").\n\nSigned-off-by: Stephen Hemminger \u003csthemmin@microsoft.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ad558858295726cb876b78d1c39d471372f1901a", "tree": "ec81d8050d2ebc98cb352bff5bcee8cae2306944", "parents": [ "c823abac17926767fb50175e098f087a6ac684c3" ], "author": { "name": "stephen hemminger", "email": "stephen@networkplumber.org", "time": "Fri Dec 02 14:53:59 2016 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 19:43:02 2016 -0500" }, "message": "uapi: export tc_skbmod.h\n\nFixes commit 735cffe5d800 (\"net_sched: Introduce skbmod action\")\nNot used by iproute2 but maybe in future.\n\nSigned-off-by: Stephen Hemminger \u003csthemmin@microsoft.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c823abac17926767fb50175e098f087a6ac684c3", "tree": "82887ccb88651b5a77598d26a65eb555ab21ae38", "parents": [ "34e0f2c2d82d7d939bfa249672311050b3b537f1" ], "author": { "name": "Florian Fainelli", "email": "f.fainelli@gmail.com", "time": "Sun Dec 04 19:22:05 2016 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 15:35:39 2016 -0500" }, "message": "net: ep93xx_eth: Do not crash unloading module\n\nWhen we unload the ep93xx_eth, whether we have opened the network\ninterface or not, we will either hit a kernel paging request error, or a\nsimple NULL pointer de-reference because:\n\n- if ep93xx_open has been called, we have created a valid DMA mapping\n for ep-\u003edescs, when we call ep93xx_stop, we also call\n ep93xx_free_buffers, ep-\u003edescs now has a stale value\n\n- if ep93xx_open has not been called, we have a NULL pointer for\n ep-\u003edescs, so performing any operation against that address just won\u0027t\n work\n\nFix this by adding a NULL pointer check for ep-\u003edescs which means that\nep93xx_free_buffers() was able to successfully tear down the descriptors\nand free the DMA cookie as well.\n\nFixes: 1d22e05df818 (\"[PATCH] Cirrus Logic ep93xx ethernet driver\")\nSigned-off-by: Florian Fainelli \u003cf.fainelli@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "34e0f2c2d82d7d939bfa249672311050b3b537f1", "tree": "4f1b9be82d4a07c7bd7c485d04dc4d8bc944760b", "parents": [ "9a53682b340b97642793271ba095cc9531a7b649", "360d9df2acd9f0b89aabaf16fca08954f113bd4e" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 15:08:40 2016 -0500" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 15:08:40 2016 -0500" }, "message": "Merge branch \u0027bnx2x-fixes\u0027\n\nYuval Mintz says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nbnx2x: fixes series\n\nTwo unrelated fixes for bnx2x - the first one is nice-to-have,\nwhile the other fixes fatal behaviour in older adapters.\n\nPlease consider applying them to `net\u0027.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "360d9df2acd9f0b89aabaf16fca08954f113bd4e", "tree": "4f1b9be82d4a07c7bd7c485d04dc4d8bc944760b", "parents": [ "65870fa77fd7f83d7be4ed924d47ed9e3831f434" ], "author": { "name": "Mintz, Yuval", "email": "Yuval.Mintz@cavium.com", "time": "Sun Dec 04 15:30:18 2016 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 15:08:40 2016 -0500" }, "message": "bnx2x: Prevent tunnel config for 577xx\n\nOnly the 578xx adapters are capable of configuring UDP ports for\nthe purpose of tunnelling - doing the same on 577xx might lead to\na firmware assertion.\nWe\u0027re already not claiming support for any related feature for such\ndevices, but we also need to prevent the configuration of the UDP\nports to the device in this case.\n\nFixes: f34fa14cc033 (\"bnx2x: Add vxlan RSS support\")\nReported-by: Anikina Anna \u003canikina@gmail.com\u003e\nSigned-off-by: Yuval Mintz \u003cYuval.Mintz@cavium.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "65870fa77fd7f83d7be4ed924d47ed9e3831f434", "tree": "b9590fba709353e6a68cc3f31ba07d24737c25cd", "parents": [ "9a53682b340b97642793271ba095cc9531a7b649" ], "author": { "name": "Mintz, Yuval", "email": "Yuval.Mintz@cavium.com", "time": "Sun Dec 04 15:30:17 2016 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 15:08:39 2016 -0500" }, "message": "bnx2x: Correct ringparam estimate when DOWN\n\nUntil interface is up [and assuming ringparams weren\u0027t explicitly\nconfigured] when queried for the size of its rings bnx2x would\nclaim they\u0027re the maximal size by default.\nThat is incorrect as by default the maximal number of buffers would\nbe equally divided between the various rx rings.\n\nThis prevents the user from actually setting the number of elements\non each rx ring to be of maximal size prior to transitioning the\ninterface into up state.\n\nTo fix this, make a rough estimation about the number of buffers.\nIt wouldn\u0027t always be accurate, but it would be much better than\ncurrent estimation and would allow users to increase number of\nbuffers during early initialization of the interface.\n\nReported-by: Seymour, Shane \u003cshane.seymour@hpe.com\u003e\nSigned-off-by: Yuval Mintz \u003cYuval.Mintz@cavium.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9a53682b340b97642793271ba095cc9531a7b649", "tree": "f72523e98bfd2ae3bf01591ee6bf6d29d1c49e75", "parents": [ "005f7e68e74df94c2a676b5a3e98c6fb65aae606" ], "author": { "name": "Pan Bian", "email": "bianpan2016@163.com", "time": "Sun Dec 04 18:43:31 2016 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 15:03:42 2016 -0500" }, "message": "isdn: hisax: set error code on failure\n\nIn function hfc4s8s_probe(), the value of return variable err should be\nnegative on failures. However, when the call to request_region() returns\nNULL, the value of err is 0. This patch fixes the bug, assigning\n\"-EBUSY\" to err on the path that request_region() fails.\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id\u003d188931\n\nSigned-off-by: Pan Bian \u003cbianpan2016@163.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "005f7e68e74df94c2a676b5a3e98c6fb65aae606", "tree": "0a3991f85dcb5dd1adac1fbf4f09c2ea1dd3e996", "parents": [ "0ff18d2d36efad65572990fa7febeb3ebe19da89" ], "author": { "name": "Pan Bian", "email": "bianpan2016@163.com", "time": "Sun Dec 04 18:46:03 2016 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 15:03:34 2016 -0500" }, "message": "net: bnx2x: fix improper return value\n\nMacro BNX2X_ALLOC_AND_SET(arr, lbl, func) calls kmalloc() to allocate\nmemory, and jumps to label \"lbl\" if the allocation fails. Label \"lbl\"\nfirst cleans memory and then returns variable rc. Before calling the\nmacro, the value of variable rc is 0. Because 0 means no error, the\ncallers of bnx2x_init_firmware() may be misled. This patch fixes the bug,\nassigning \"-ENOMEM\" to rc before calling macro NX2X_ALLOC_AND_SET().\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id\u003d189141\n\nSigned-off-by: Pan Bian \u003cbianpan2016@163.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0ff18d2d36efad65572990fa7febeb3ebe19da89", "tree": "ce7a418232fddd07970d141154170161e2a1d67b", "parents": [ "7cf6156633b71743c09a8e56b1f0dedfc4ce6e66" ], "author": { "name": "Pan Bian", "email": "bianpan2016@163.com", "time": "Sun Dec 04 13:53:53 2016 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 14:54:18 2016 -0500" }, "message": "net: ethernet: qlogic: set error code on failure\n\nWhen calling dma_mapping_error(), the value of return variable rc is 0.\nAnd when the call returns an unexpected value, rc is not set to a\nnegative errno. Thus, it will return 0 on the error path, and its\ncallers cannot detect the bug. This patch fixes the bug, assigning\n\"-ENOMEM\" to err.\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id\u003d189041\n\nSigned-off-by: Pan Bian \u003cbianpan2016@163.com\u003e\nAcked-by: Yuval Mintz \u003cYuval.Mintz@cavium.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "7cf6156633b71743c09a8e56b1f0dedfc4ce6e66", "tree": "1bc2fbae1faa65d9f583c81bb6e348b91df6d19f", "parents": [ "8ad3ba934587c8ecbfee13331d859a7849afdfbb" ], "author": { "name": "Pan Bian", "email": "bianpan2016@163.com", "time": "Sun Dec 04 13:45:15 2016 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 14:53:46 2016 -0500" }, "message": "atm: fix improper return value\n\nIt returns variable \"error\" when ioremap_nocache() returns a NULL\npointer. The value of \"error\" is 0 then, which will mislead the callers\nto believe that there is no error. This patch fixes the bug, returning\n\"-ENOMEM\".\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id\u003d189021\n\nSigned-off-by: Pan Bian \u003cbianpan2016@163.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8ad3ba934587c8ecbfee13331d859a7849afdfbb", "tree": "4ec7e0aef86a11e387e7242836f40dfec5063da0", "parents": [ "c79e167c3cba066892542f3dfb5e73b7207e01df" ], "author": { "name": "Pan Bian", "email": "bianpan2016@163.com", "time": "Sun Dec 04 13:27:40 2016 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 14:53:08 2016 -0500" }, "message": "net: irda: set error code on failures\n\nWhen the calls to kzalloc() fail, the value of return variable ret may\nbe 0. 0 means success in this context. This patch fixes the bug,\nassigning \"-ENOMEM\" to ret before calling kzalloc().\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id\u003d188971\n\nSigned-off-by: Pan Bian \u003cbianpan2016@163.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c79e167c3cba066892542f3dfb5e73b7207e01df", "tree": "2688a8e811b47fff31d7c5ed42e814679b52c8f3", "parents": [ "0eab121ef8750a5c8637d51534d5e9143fb0633f" ], "author": { "name": "Pan Bian", "email": "bianpan2016@163.com", "time": "Sun Dec 04 12:15:44 2016 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 14:48:48 2016 -0500" }, "message": "net: caif: remove ineffective check\n\nThe check of the return value of sock_register() is ineffective.\n\"if(!err)\" seems to be a typo. It is better to propagate the error code\nto the callers of caif_sktinit_module(). This patch removes the check\nstatment and directly returns the result of sock_register().\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id\u003d188751\nSigned-off-by: Pan Bian \u003cbianpan2016@163.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0eab121ef8750a5c8637d51534d5e9143fb0633f", "tree": "10cb44c5337e57d21a38430519777431c2df9af9", "parents": [ "4606c9e8c541f97034e53e644129376a6170b8c7" ], "author": { "name": "Kees Cook", "email": "keescook@chromium.org", "time": "Mon Dec 05 10:34:38 2016 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 13:35:38 2016 -0500" }, "message": "net: ping: check minimum size on ICMP header length\n\nPrior to commit c0371da6047a (\"put iov_iter into msghdr\") in v3.19, there\nwas no check that the iovec contained enough bytes for an ICMP header,\nand the read loop would walk across neighboring stack contents. Since the\niov_iter conversion, bad arguments are noticed, but the returned error is\nEFAULT. Returning EINVAL is a clearer error and also solves the problem\nprior to v3.19.\n\nThis was found using trinity with KASAN on v3.18:\n\nBUG: KASAN: stack-out-of-bounds in memcpy_fromiovec+0x60/0x114 at addr ffffffc071077da0\nRead of size 8 by task trinity-c2/9623\npage:ffffffbe034b9a08 count:0 mapcount:0 mapping: (null) index:0x0\nflags: 0x0()\npage dumped because: kasan: bad access detected\nCPU: 0 PID: 9623 Comm: trinity-c2 Tainted: G BU 3.18.0-dirty #15\nHardware name: Google Tegra210 Smaug Rev 1,3+ (DT)\nCall trace:\n[\u003cffffffc000209c98\u003e] dump_backtrace+0x0/0x1ac arch/arm64/kernel/traps.c:90\n[\u003cffffffc000209e54\u003e] show_stack+0x10/0x1c arch/arm64/kernel/traps.c:171\n[\u003c inline \u003e] __dump_stack lib/dump_stack.c:15\n[\u003cffffffc000f18dc4\u003e] dump_stack+0x7c/0xd0 lib/dump_stack.c:50\n[\u003c inline \u003e] print_address_description mm/kasan/report.c:147\n[\u003c inline \u003e] kasan_report_error mm/kasan/report.c:236\n[\u003cffffffc000373dcc\u003e] kasan_report+0x380/0x4b8 mm/kasan/report.c:259\n[\u003c inline \u003e] check_memory_region mm/kasan/kasan.c:264\n[\u003cffffffc00037352c\u003e] __asan_load8+0x20/0x70 mm/kasan/kasan.c:507\n[\u003cffffffc0005b9624\u003e] memcpy_fromiovec+0x5c/0x114 lib/iovec.c:15\n[\u003c inline \u003e] memcpy_from_msg include/linux/skbuff.h:2667\n[\u003cffffffc000ddeba0\u003e] ping_common_sendmsg+0x50/0x108 net/ipv4/ping.c:674\n[\u003cffffffc000dded30\u003e] ping_v4_sendmsg+0xd8/0x698 net/ipv4/ping.c:714\n[\u003cffffffc000dc91dc\u003e] inet_sendmsg+0xe0/0x12c net/ipv4/af_inet.c:749\n[\u003c inline \u003e] __sock_sendmsg_nosec net/socket.c:624\n[\u003c inline \u003e] __sock_sendmsg net/socket.c:632\n[\u003cffffffc000cab61c\u003e] sock_sendmsg+0x124/0x164 net/socket.c:643\n[\u003c inline \u003e] SYSC_sendto net/socket.c:1797\n[\u003cffffffc000cad270\u003e] SyS_sendto+0x178/0x1d8 net/socket.c:1761\n\nCVE-2016-8399\n\nReported-by: Qidan He \u003ci@flanker017.me\u003e\nFixes: c319b4d76b9e (\"net: ipv4: add IPPROTO_ICMP socket kind\")\nCc: stable@vger.kernel.org\nSigned-off-by: Kees Cook \u003ckeescook@chromium.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d9d04527c79f0f7d9186272866526e871ef4ac6f", "tree": "840248bddcaa26def6e2a2e67776f2a07ec1292e", "parents": [ "ef3263e35e26eb1061260131c4d6d579eea21f85", "dadc4a1bb9f0095343ed9dd4f1d9f3825d7b3e45" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Dec 05 10:30:12 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Dec 05 10:30:12 2016 -0800" }, "message": "Merge tag \u0027powerpc-4.9-7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux\n\nPull powerpc fixes from Michael Ellerman:\n \"Four fixes, the first for code we merged this cycle and three that are\n also going to stable:\n\n - On 64-bit Book3E we were not placing the .text section where we\n said we would in the asm.\n\n - We broke building the boot wrapper on some 32-bit toolchains.\n\n - Lazy icache flushing was broken on pre-POWER5 machines.\n\n - One of the error paths in our EEH code would lead to a deadlock.\n\n Thanks to: Andrew Donnellan, Ben Hutchings, Benjamin Herrenschmidt,\n Nicholas Piggin\"\n\n* tag \u0027powerpc-4.9-7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:\n powerpc/64: Fix placement of .text to be immediately following .head.text\n powerpc/eeh: Fix deadlock when PE frozen state can\u0027t be cleared\n powerpc/mm: Fix lazy icache flush on pre-POWER5\n powerpc/boot: Fix build failure in 32-bit boot wrapper\n" }, { "commit": "4606c9e8c541f97034e53e644129376a6170b8c7", "tree": "dadbc5b83a85d7202b93c1c2dbb849a344ba96dd", "parents": [ "51920830d9d0eb617af18dc60443fcd4fb50a533" ], "author": { "name": "Pan Bian", "email": "bianpan2016@163.com", "time": "Sat Dec 03 20:25:45 2016 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 13:27:33 2016 -0500" }, "message": "atm: lanai: set error code when ioremap fails\n\nIn function lanai_dev_open(), when the call to ioremap() fails, the\nvalue of return variable result is 0. 0 means no error in this context.\nThis patch fixes the bug, assigning \"-ENOMEM\" to result when ioremap()\nreturns a NULL pointer.\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id\u003d188791\n\nSigned-off-by: Pan Bian \u003cbianpan2016@163.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "51920830d9d0eb617af18dc60443fcd4fb50a533", "tree": "39c0d78a3843af8ec383be5c34b396fa9fb88b63", "parents": [ "b59589635ff01cc25270360709eeeb5c45c6abb9" ], "author": { "name": "Pan Bian", "email": "bianpan2016@163.com", "time": "Sat Dec 03 19:24:48 2016 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 13:27:15 2016 -0500" }, "message": "net: usb: set error code when usb_alloc_urb fails\n\nIn function lan78xx_probe(), variable ret takes the errno code on\nfailures. However, when the call to usb_alloc_urb() fails, its value\nwill keeps 0. 0 indicates success in the context, which is inconsistent\nwith the execution result. This patch fixes the bug, assigning\n\"-ENOMEM\" to ret when usb_alloc_urb() returns a NULL pointer.\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id\u003d188771\n\nSigned-off-by: Pan Bian \u003cbianpan2016@163.com\u003e\nAcked-by: Woojung Huh \u003cwoojung.huh@microchip.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b59589635ff01cc25270360709eeeb5c45c6abb9", "tree": "ab5c7b39e13735739f41a8a2eb9cc18bcd14ccda", "parents": [ "14dd3e1b970feb125e4f453bc3b0569db5b2069b" ], "author": { "name": "Pan Bian", "email": "bianpan2016@163.com", "time": "Sat Dec 03 19:33:23 2016 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 13:26:22 2016 -0500" }, "message": "net: bridge: set error code on failure\n\nFunction br_sysfs_addbr() does not set error code when the call\nkobject_create_and_add() returns a NULL pointer. It may be better to\nreturn \"-ENOMEM\" when kobject_create_and_add() fails.\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id\u003d188781\n\nSigned-off-by: Pan Bian \u003cbianpan2016@163.com\u003e\nAcked-by: Stephen Hemminger \u003cstephen@networkplumber.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "14dd3e1b970feb125e4f453bc3b0569db5b2069b", "tree": "f003190ffc7a85ac41566454504b134917847cd7", "parents": [ "89aa8445cd4e8c2556c40d42dd0ceb2cbb96ba78" ], "author": { "name": "Suraj Deshmukh", "email": "surajssd009005@gmail.com", "time": "Sat Dec 03 07:59:26 2016 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 13:25:55 2016 -0500" }, "message": "net: af_mpls.c add space before open parenthesis\n\nAdding space after switch keyword before open\nparenthesis for readability purpose.\n\nThis patch fixes the checkpatch.pl warning:\nspace required before the open parenthesis \u0027(\u0027\n\nSigned-off-by: Suraj Deshmukh \u003csurajssd009005@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "89aa8445cd4e8c2556c40d42dd0ceb2cbb96ba78", "tree": "dd0b8d834d7706e39124d5042c3b12f5ef09cbd0", "parents": [ "2279b752ac5c2d3592fe6fe5610c123c2ee8b37c" ], "author": { "name": "Pan Bian", "email": "bianpan2016@163.com", "time": "Sat Dec 03 17:56:17 2016 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 13:25:38 2016 -0500" }, "message": "netdev: broadcom: propagate error code\n\nFunction bnxt_hwrm_stat_ctx_alloc() always returns 0, even if the call\nto _hwrm_send_message() fails. It may be better to propagate the errors\nto the caller of bnxt_hwrm_stat_ctx_alloc().\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id\u003d188661\n\nSigned-off-by: Pan Bian \u003cbianpan2016@163.com\u003e\nAcked-by: Michael Chan \u003cmichael.chan@broadcom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2279b752ac5c2d3592fe6fe5610c123c2ee8b37c", "tree": "ad093923aaace74a845880a5707e997a4aa64647", "parents": [ "c66ebf2db555c6ed705044eabd2b37dcd546f68b", "a52ca62c4a6771028da9c1de934cdbcd93d54bb4" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 13:15:59 2016 -0500" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 13:15:59 2016 -0500" }, "message": "Merge branch \u0027fib-suffix-length-fixes\u0027\n\nAlexander Duyck says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nIPv4 FIB suffix length fixes\n\nIn reviewing the patch from Robert Shearman and looking over the code I\nrealized there were a few different bugs we were still carrying in the IPv4\nFIB lookup code.\n\nThese two patches are based off of Robert\u0027s original patch, but take things\none step further by splitting them up to address two additional issues I\nfound.\n\nSo first have Robert\u0027s original patch which was addressing the fact that\nus calling update_suffix in resize is expensive when it is called per add.\nTo address that I incorporated the core bit of the patch which was us\ndropping the update_suffix call from resize.\n\nThe first patch in the series does a rename and fix on the push_suffix and\npull_suffix code. Specifically we drop the need to pass a leaf and\nsecondly we fix things so we pull the suffix as long as the value of the\nsuffix in the node is dropping.\n\nThe second patch addresses the original issue reported as well as\noptimizing the code for the fact that update_suffix is only really meant to\ngo through and clean things up when we are decreasing a suffix. I had\noriginally added code for it to somehow cause an increase, but if we push\nthe suffix when a new leaf is added we only ever have to handle pulling\ndown the suffix with update_suffix so I updated the code to reflect that.\n\nAs far as side effects the only ones I think that will be obvious should be\nthe fact that some routes may be able to be found earlier since before we\nrelied on resize to update the suffix lengths, and now we are updating them\nbefore we add or remove the leaf.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a52ca62c4a6771028da9c1de934cdbcd93d54bb4", "tree": "ad093923aaace74a845880a5707e997a4aa64647", "parents": [ "1a239173cccff726b60ac6a9c79ae4a1e26cfa49" ], "author": { "name": "Alexander Duyck", "email": "alexander.h.duyck@intel.com", "time": "Thu Dec 01 07:27:57 2016 -0500" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 13:15:58 2016 -0500" }, "message": "ipv4: Drop suffix update from resize code\n\nIt has been reported that update_suffix can be expensive when it is called\non a large node in which most of the suffix lengths are the same. The time\nrequired to add 200K entries had increased from around 3 seconds to almost\n49 seconds.\n\nIn order to address this we need to move the code for updating the suffix\nout of resize and instead just have it handled in the cases where we are\npushing a node that increases the suffix length, or will decrease the\nsuffix length.\n\nFixes: 5405afd1a306 (\"fib_trie: Add tracking value for suffix length\")\nReported-by: Robert Shearman \u003crshearma@brocade.com\u003e\nSigned-off-by: Alexander Duyck \u003calexander.h.duyck@intel.com\u003e\nReviewed-by: Robert Shearman \u003crshearma@brocade.com\u003e\nTested-by: Robert Shearman \u003crshearma@brocade.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1a239173cccff726b60ac6a9c79ae4a1e26cfa49", "tree": "1d60c464560140c9805472cf17e258a7b0ff28b7", "parents": [ "c66ebf2db555c6ed705044eabd2b37dcd546f68b" ], "author": { "name": "Alexander Duyck", "email": "alexander.h.duyck@intel.com", "time": "Thu Dec 01 07:27:52 2016 -0500" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Dec 05 13:15:58 2016 -0500" }, "message": "ipv4: Drop leaf from suffix pull/push functions\n\nIt wasn\u0027t necessary to pass a leaf in when doing the suffix updates so just\ndrop it. Instead just pass the suffix and work with that.\n\nSince we dropped the leaf there is no need to include that in the name so\nthe names are updated to node_push_suffix and node_pull_suffix.\n\nFinally I noticed that the logic for pulling the suffix length back\nactually had some issues. Specifically it would stop prematurely if there\nwas a longer suffix, but it was not as long as the original suffix. I\nupdated the code to address that in node_pull_suffix.\n\nFixes: 5405afd1a306 (\"fib_trie: Add tracking value for suffix length\")\nSuggested-by: Robert Shearman \u003crshearma@brocade.com\u003e\nSigned-off-by: Alexander Duyck \u003calexander.h.duyck@intel.com\u003e\nReviewed-by: Robert Shearman \u003crshearma@brocade.com\u003e\nTested-by: Robert Shearman \u003crshearma@brocade.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ef3263e35e26eb1061260131c4d6d579eea21f85", "tree": "640cf71ae612ea28b5dd91a2a9d6a005f50a7345", "parents": [ "3e5de27e940d00d8d504dfb96625fb654f641509", "57891633eeef60e732e045731cf20e50ee80acb4" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Dec 05 09:16:10 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Dec 05 09:16:10 2016 -0800" }, "message": "Merge branch \u0027linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6\n\nPull crypto fixes from Herbert Xu:\n \"This fixes the following issues:\n\n - Intermittent build failure in RSA\n\n - Memory corruption in chelsio crypto driver\n\n - Regression in DRBG due to vmalloced stack\"\n\n* \u0027linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:\n crypto: rsa - Add Makefile dependencies to fix parallel builds\n crypto: chcr - Fix memory corruption\n crypto: drbg - prevent invalid SG mappings\n" }, { "commit": "3e5de27e940d00d8d504dfb96625fb654f641509", "tree": "b38dbbb5c36de40798435623d8db8736d9a26bb0", "parents": [ "0cb65c83304a341b9d09678448d7c8b550689531" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Dec 04 12:50:51 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Dec 04 12:50:51 2016 -0800" }, "message": "Linux 4.9-rc8\n" }, { "commit": "c66ebf2db555c6ed705044eabd2b37dcd546f68b", "tree": "bcc603ed251cdf86642b9441b4658fa93f4d9b50", "parents": [ "a38b61009425b3882704270e792a6e743f5d9426" ], "author": { "name": "Pan Bian", "email": "bianpan2016@163.com", "time": "Sat Dec 03 21:49:08 2016 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Dec 03 23:54:25 2016 -0500" }, "message": "net: dcb: set error code on failures\n\nIn function dcbnl_cee_fill(), returns the value of variable err on\nerrors. However, on some error paths (e.g. nla put fails), its value may\nbe 0. It may be better to explicitly set a negative errno to variable\nerr before returning.\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id\u003d188881\n\nSigned-off-by: Pan Bian \u003cbianpan2016@163.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0cb65c83304a341b9d09678448d7c8b550689531", "tree": "ef0c7158b4c065feb39fa59dbeea1d68b5eac2c0", "parents": [ "3c49de52d5647cda8b42c4255cf8a29d1e22eff5", "ab7cd8d83e5dba13027de66f1b008b08b30b71a4" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Dec 03 16:40:21 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Dec 03 16:40:21 2016 -0800" }, "message": "Merge tag \u0027drm-fixes-for-v4.9-rc8\u0027 of git://people.freedesktop.org/~airlied/linux\n\nPull drm fixes from Dave Airlie:\n \"A pretty small pull request: a couple of AMD powerxpress regression\n fixes and a power management fix, a couple of i915 fixes and one hdlcd\n fix, along with one core don\u0027t oops because of incorrect API usage fix\"\n\n* tag \u0027drm-fixes-for-v4.9-rc8\u0027 of git://people.freedesktop.org/~airlied/linux:\n drm/i915: drop the struct_mutex when wedged or trying to reset\n drm/i915: Don\u0027t touch NULL sg on i915_gem_object_get_pages_gtt() error\n drm: Don\u0027t call drm_for_each_crtc with a non-KMS driver\n drm/radeon: fix check for port PM availability\n drm/amdgpu: fix check for port PM availability\n drm/amd/powerplay: initialize the soft_regs offset in struct smu7_hwmgr\n drm: hdlcd: Fix cleanup order\n" }, { "commit": "a38b61009425b3882704270e792a6e743f5d9426", "tree": "d19b50d283f5fb3d0e3d63160aa8ce0981163f36", "parents": [ "8dc0f265d39a3933f4c1f846c7c694f12a2ab88a", "c2d0f48a13e53b4747704c9e692f5e765e52041a" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Dec 03 16:13:27 2016 -0500" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Dec 03 16:13:27 2016 -0500" }, "message": "Merge tag \u0027batadv-net-for-davem-20161202\u0027 of git://git.open-mesh.org/linux-merge\n\nSimon Wunderlich says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nHere is another batman-adv bugfix:\n\n - fix checking for failed allocation of TVLV blocks in TT local data,\n by Sven Eckelmann\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ab7cd8d83e5dba13027de66f1b008b08b30b71a4", "tree": "fa42ffdf943b6585dc06bb30367afb71319e2058", "parents": [ "83fb8b055544a25ceeac34a666a2149331ea94bf", "e411072d5740a49cdc9d0713798c30440757e451" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Sun Dec 04 06:31:26 2016 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Sun Dec 04 06:31:26 2016 +1000" }, "message": "Merge tag \u0027drm-intel-fixes-2016-12-01\u0027 of git://anongit.freedesktop.org/git/drm-intel into drm-fixes\n\n2 intel fixes.\n\n* tag \u0027drm-intel-fixes-2016-12-01\u0027 of git://anongit.freedesktop.org/git/drm-intel:\n drm/i915: drop the struct_mutex when wedged or trying to reset\n drm/i915: Don\u0027t touch NULL sg on i915_gem_object_get_pages_gtt() error\n" }, { "commit": "3c49de52d5647cda8b42c4255cf8a29d1e22eff5", "tree": "51945ac515d7b31c81e79adcd11e78baebeb1daa", "parents": [ "865563924022d8a307ee6dbc6a9ab4fb4d461cce", "bd041733c9f612b66c519e5a8b1a98b05b94ed24" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Dec 02 18:48:11 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Dec 02 18:48:11 2016 -0800" }, "message": "Merge branch \u0027akpm\u0027 (patches from Andrew)\n\nMerge more fixes from Andrew Morton:\n \"2 fixes\"\n\n* emailed patches from Andrew Morton \u003cakpm@linux-foundation.org\u003e:\n mm, vmscan: add cond_resched() into shrink_node_memcg()\n mm: workingset: fix NULL ptr in count_shadow_nodes\n" }, { "commit": "bd041733c9f612b66c519e5a8b1a98b05b94ed24", "tree": "38be7a4d2b223f3b7091fc989191bee25ed29bf9", "parents": [ "20ab67a563f5299c09a234164c372aba5a59add8" ], "author": { "name": "Michal Hocko", "email": "mhocko@suse.com", "time": "Fri Dec 02 17:26:48 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Dec 02 18:48:03 2016 -0800" }, "message": "mm, vmscan: add cond_resched() into shrink_node_memcg()\n\nBoris Zhmurov has reported RCU stalls during the kswapd reclaim:\n\n INFO: rcu_sched detected stalls on CPUs/tasks:\n 23-...: (22 ticks this GP) idle\u003d92f/140000000000000/0 softirq\u003d2638404/2638404 fqs\u003d23\n (detected by 4, t\u003d6389 jiffies, g\u003d786259, c\u003d786258, q\u003d42115)\n Task dump for CPU 23:\n kswapd1 R running task 0 148 2 0x00000008\n Call Trace:\n shrink_node+0xd2/0x2f0\n kswapd+0x2cb/0x6a0\n mem_cgroup_shrink_node+0x160/0x160\n kthread+0xbd/0xe0\n __switch_to+0x1fa/0x5c0\n ret_from_fork+0x1f/0x40\n kthread_create_on_node+0x180/0x180\n\na closer code inspection has shown that we might indeed miss all the\nscheduling points in the reclaim path if no pages can be isolated from\nthe LRU list. This is a pathological case but other reports from Donald\nBuczek have shown that we might indeed hit such a path:\n\n clusterd-989 [009] .... 118023.654491: mm_vmscan_direct_reclaim_end: nr_reclaimed\u003d193\n kswapd1-86 [001] dN.. 118023.987475: mm_vmscan_lru_isolate: isolate_mode\u003d0 classzone\u003d0 order\u003d0 nr_requested\u003d32 nr_scanned\u003d4239830 nr_taken\u003d0 file\u003d1\n kswapd1-86 [001] dN.. 118024.320968: mm_vmscan_lru_isolate: isolate_mode\u003d0 classzone\u003d0 order\u003d0 nr_requested\u003d32 nr_scanned\u003d4239844 nr_taken\u003d0 file\u003d1\n kswapd1-86 [001] dN.. 118024.654375: mm_vmscan_lru_isolate: isolate_mode\u003d0 classzone\u003d0 order\u003d0 nr_requested\u003d32 nr_scanned\u003d4239858 nr_taken\u003d0 file\u003d1\n kswapd1-86 [001] dN.. 118024.987036: mm_vmscan_lru_isolate: isolate_mode\u003d0 classzone\u003d0 order\u003d0 nr_requested\u003d32 nr_scanned\u003d4239872 nr_taken\u003d0 file\u003d1\n kswapd1-86 [001] dN.. 118025.319651: mm_vmscan_lru_isolate: isolate_mode\u003d0 classzone\u003d0 order\u003d0 nr_requested\u003d32 nr_scanned\u003d4239886 nr_taken\u003d0 file\u003d1\n kswapd1-86 [001] dN.. 118025.652248: mm_vmscan_lru_isolate: isolate_mode\u003d0 classzone\u003d0 order\u003d0 nr_requested\u003d32 nr_scanned\u003d4239900 nr_taken\u003d0 file\u003d1\n kswapd1-86 [001] dN.. 118025.984870: mm_vmscan_lru_isolate: isolate_mode\u003d0 classzone\u003d0 order\u003d0 nr_requested\u003d32 nr_scanned\u003d4239914 nr_taken\u003d0 file\u003d1\n [...]\n kswapd1-86 [001] dN.. 118084.274403: mm_vmscan_lru_isolate: isolate_mode\u003d0 classzone\u003d0 order\u003d0 nr_requested\u003d32 nr_scanned\u003d4241133 nr_taken\u003d0 file\u003d1\n\nthis is minute long snapshot which didn\u0027t take a single page from the\nLRU. It is not entirely clear why only 1303 pages have been scanned\nduring that time (maybe there was a heavy IRQ activity interfering).\n\nIn any case it looks like we can really hit long periods without\nscheduling on non preemptive kernels so an explicit cond_resched() in\nshrink_node_memcg which is independent on the reclaim operation is due.\n\nLink: http://lkml.kernel.org/r/20161202095841.16648-1-mhocko@kernel.org\nSigned-off-by: Michal Hocko \u003cmhocko@suse.com\u003e\nReported-by: Boris Zhmurov \u003cbb@kernelpanic.ru\u003e\nTested-by: Boris Zhmurov \u003cbb@kernelpanic.ru\u003e\nReported-by: Donald Buczek \u003cbuczek@molgen.mpg.de\u003e\nReported-by: \"Christopher S. Aker\" \u003ccaker@theshore.net\u003e\nReported-by: Paul Menzel \u003cpmenzel@molgen.mpg.de\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "20ab67a563f5299c09a234164c372aba5a59add8", "tree": "319ffd0791411bbe39f64941899a14ca23454cd8", "parents": [ "8dc0f265d39a3933f4c1f846c7c694f12a2ab88a" ], "author": { "name": "Michal Hocko", "email": "mhocko@suse.com", "time": "Fri Dec 02 17:26:45 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Dec 02 18:48:03 2016 -0800" }, "message": "mm: workingset: fix NULL ptr in count_shadow_nodes\n\nCommit 0a6b76dd23fa (\"mm: workingset: make shadow node shrinker memcg\naware\") has made the workingset shadow nodes shrinker memcg aware. The\nimplementation is not correct though because memcg_kmem_enabled() might\nbecome true while we are doing a global reclaim when the sc-\u003ememcg might\nbe NULL which is exactly what Marek has seen:\n\n BUG: unable to handle kernel NULL pointer dereference at 0000000000000400\n IP: [\u003cffffffff8122d520\u003e] mem_cgroup_node_nr_lru_pages+0x20/0x40\n PGD 0\n Oops: 0000 [#1] SMP\n CPU: 0 PID: 60 Comm: kswapd0 Tainted: G O 4.8.10-12.pvops.qubes.x86_64 #1\n task: ffff880011863b00 task.stack: ffff880011868000\n RIP: mem_cgroup_node_nr_lru_pages+0x20/0x40\n RSP: e02b:ffff88001186bc70 EFLAGS: 00010293\n RAX: 0000000000000000 RBX: ffff88001186bd20 RCX: 0000000000000002\n RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000\n RBP: ffff88001186bc70 R08: 28f5c28f5c28f5c3 R09: 0000000000000000\n R10: 0000000000006c34 R11: 0000000000000333 R12: 00000000000001f6\n R13: ffffffff81c6f6a0 R14: 0000000000000000 R15: 0000000000000000\n FS: 0000000000000000(0000) GS:ffff880013c00000(0000) knlGS:ffff880013d00000\n CS: e033 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000000000000400 CR3: 00000000122f2000 CR4: 0000000000042660\n Call Trace:\n count_shadow_nodes+0x9a/0xa0\n shrink_slab.part.42+0x119/0x3e0\n shrink_node+0x22c/0x320\n kswapd+0x32c/0x700\n kthread+0xd8/0xf0\n ret_from_fork+0x1f/0x40\n Code: 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 3b 35 dd eb b1 00 55 48 89 e5 73 2c 89 d2 31 c9 31 c0 4c 63 ce 48 0f a3 ca 73 13 \u003c4a\u003e 8b b4 cf 00 04 00 00 41 89 c8 4a 03 84 c6 80 00 00 00 83 c1\n RIP mem_cgroup_node_nr_lru_pages+0x20/0x40\n RSP \u003cffff88001186bc70\u003e\n CR2: 0000000000000400\n ---[ end trace 100494b9edbdfc4d ]---\n\nThis patch fixes the issue by checking sc-\u003ememcg rather than\nmemcg_kmem_enabled() which is sufficient because shrink_slab makes sure\nthat only memcg aware shrinkers will get non-NULL memcgs and only if\nmemcg_kmem_enabled is true.\n\nFixes: 0a6b76dd23fa (\"mm: workingset: make shadow node shrinker memcg aware\")\nLink: http://lkml.kernel.org/r/20161201132156.21450-1-mhocko@kernel.org\nSigned-off-by: Michal Hocko \u003cmhocko@suse.com\u003e\nReported-by: Marek Marczykowski-Górecki \u003cmarmarek@mimuw.edu.pl\u003e\nTested-by: Marek Marczykowski-Górecki \u003cmarmarek@mimuw.edu.pl\u003e\nAcked-by: Vladimir Davydov \u003cvdavydov.dev@gmail.com\u003e\nAcked-by: Johannes Weiner \u003channes@cmpxchg.org\u003e\nAcked-by: Balbir Singh \u003cbsingharora@gmail.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\t[4.6+]\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "865563924022d8a307ee6dbc6a9ab4fb4d461cce", "tree": "a0e678342d63d30860f81776d4ebe50e6ac51500", "parents": [ "8dc0f265d39a3933f4c1f846c7c694f12a2ab88a" ], "author": { "name": "Nicolas Pitre", "email": "nicolas.pitre@linaro.org", "time": "Fri Dec 02 15:11:50 2016 -0500" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Dec 02 14:46:42 2016 -0800" }, "message": "kbuild: fix building bzImage with CONFIG_TRIM_UNUSED_KSYMS enabled\n\nWhen building a specific target such as bzImage, modules aren\u0027t normally\nbuilt. However if CONFIG_TRIM_UNUSED_KSYMS is enabled, no built modules\nmeans none of the exported symbols are used and therefore they will all\nbe trimmed away from the final kernel. A subsequent \"make modules\" will\nfail because modpost cannot find the needed symbols for those modules in\nthe kernel binary.\n\nLet\u0027s make sure modules are also built whenever CONFIG_TRIM_UNUSED_KSYMS\nis enabled and that the kernel binary is properly rebuilt accordingly.\n\nSigned-off-by: Nicolas Pitre \u003cnico@linaro.org\u003e\nTested-by: Jarod Wilson \u003cjarod@redhat.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "8dc0f265d39a3933f4c1f846c7c694f12a2ab88a", "tree": "39d3463c66250b709faeca23db599adbdb4ce08d", "parents": [ "8bca927f13bc1cebe23a3709af6ce3016400f7ac", "909e481e2467f202b97d42beef246e8829416a85" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Dec 02 13:34:37 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Dec 02 13:34:37 2016 -0800" }, "message": "Merge tag \u0027fixes-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc\n\nPull ARM SoC fixes from Arnd Bergmann:\n \"This should be the last set of bugfixes for arm-soc in v4.9. None of\n these are critical regressions, but it would be nice to still get them\n merged.\n\n - On the Juno platform, the idle latency was described wrong, leading\n to suboptimal cpuidle tuning.\n\n - Also on the same platform, PCI I/O space was set up incorrectly and\n could not work.\n\n - On the sti platform, a syntactically incorrect DT entry caused\n warnings.\n\n - The newly added \u0027gr8\u0027 platform has somewhat confusing file names,\n which we rename for consistency\"\n\n* tag \u0027fixes-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc:\n arm64: dts: juno: fix cluster sleep state entry latency on all SoC versions\n arm64: dts: juno: Correct PCI IO window\n ARM: dts: STiH407-family: fix i2c nodes\n ARM: gr8: Rename the DTSI and relevant DTS\n" }, { "commit": "8bca927f13bc1cebe23a3709af6ce3016400f7ac", "tree": "d602bde61c8dfd26d2716b1c68f04d04a9a6b7d8", "parents": [ "ed8d747fd2b9d9204762ca6ab8c843c72c42cc41", "b98b0bc8c431e3ceb4b26b0dfc8db509518fb290" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Dec 02 11:45:27 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Dec 02 11:45:27 2016 -0800" }, "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net\n\nPull networking fixes from David Miller:\n\n 1) Lots more phydev and probe error path leaks in various drivers by\n Johan Hovold.\n\n 2) Fix race in packet_set_ring(), from Philip Pettersson.\n\n 3) Use after free in dccp_invalid_packet(), from Eric Dumazet.\n\n 4) Signnedness overflow in SO_{SND,RCV}BUFFORCE, also from Eric\n Dumazet.\n\n 5) When tunneling between ipv4 and ipv6 we can be left with the wrong\n skb-\u003eprotocol value as we enter the IPSEC engine and this causes all\n kinds of problems. Set it before the output path does any\n dst_output() calls, from Eli Cooper.\n\n 6) bcmgenet uses wrong device struct pointer in DMA API calls, fix from\n Florian Fainelli.\n\n 7) Various netfilter nat bug fixes from FLorian Westphal.\n\n 8) Fix memory leak in ipvlan_link_new(), from Gao Feng.\n\n 9) Locking fixes, particularly wrt. socket lookups, in l2tp from\n Guillaume Nault.\n\n10) Avoid invoking rhash teardowns in atomic context by moving netlink\n cb-\u003edone() dump completion from a worker thread. Fix from Herbert\n Xu.\n\n11) Buffer refcount problems in tun and macvtap on errors, from Jason\n Wang.\n\n12) We don\u0027t set Kconfig symbol DEFAULT_TCP_CONG properly when the user\n selects BBR. Fix from Julian Wollrath.\n\n13) Fix deadlock in transmit path on altera TSE driver, from Lino\n Sanfilippo.\n\n14) Fix unbalanced reference counting in dsa_switch_tree, from Nikita\n Yushchenko.\n\n15) tc_tunnel_key needs to be properly exported to userspace via uapi,\n fix from Roi Dayan.\n\n16) rds_tcp_init_net() doesn\u0027t unregister notifier in error path, fix\n from Sowmini Varadhan.\n\n17) Stale packet header pointer access after pskb_expand_head() in\n genenve driver, fix from Sabrina Dubroca.\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (103 commits)\n net: avoid signed overflows for SO_{SND|RCV}BUFFORCE\n geneve: avoid use-after-free of skb-\u003edata\n tipc: check minimum bearer MTU\n net: renesas: ravb: unintialized return value\n sh_eth: remove unchecked interrupts for RZ/A1\n net: bcmgenet: Utilize correct struct device for all DMA operations\n NET: usb: qmi_wwan: add support for Telit LE922A PID 0x1040\n cdc_ether: Fix handling connection notification\n ip6_offload: check segs for NULL in ipv6_gso_segment.\n RDS: TCP: unregister_netdevice_notifier() in error path of rds_tcp_init_net\n Revert: \"ip6_tunnel: Update skb-\u003eprotocol to ETH_P_IPV6 in ip6_tnl_xmit()\"\n ipv6: Set skb-\u003eprotocol properly for local output\n ipv4: Set skb-\u003eprotocol properly for local output\n packet: fix race condition in packet_set_ring\n net: ethernet: altera: TSE: do not use tx queue lock in tx completion handler\n net: ethernet: altera: TSE: Remove unneeded dma sync for tx buffers\n net: ethernet: stmmac: fix of-node and fixed-link-phydev leaks\n net: ethernet: stmmac: platform: fix outdated function header\n net: ethernet: stmmac: dwmac-meson8b: fix probe error path\n net: ethernet: stmmac: dwmac-generic: fix probe error path\n ...\n" }, { "commit": "b98b0bc8c431e3ceb4b26b0dfc8db509518fb290", "tree": "1df6d58e0f2c836a2808658830a3425e169645e6", "parents": [ "5b01014759991887b1e450c9def01e58c02ab81b" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Fri Dec 02 09:44:53 2016 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 14:10:14 2016 -0500" }, "message": "net: avoid signed overflows for SO_{SND|RCV}BUFFORCE\n\nCAP_NET_ADMIN users should not be allowed to set negative\nsk_sndbuf or sk_rcvbuf values, as it can lead to various memory\ncorruptions, crashes, OOM...\n\nNote that before commit 82981930125a (\"net: cleanups in\nsock_setsockopt()\"), the bug was even more serious, since SO_SNDBUF\nand SO_RCVBUF were vulnerable.\n\nThis needs to be backported to all known linux kernels.\n\nAgain, many thanks to syzkaller team for discovering this gem.\n\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nReported-by: Andrey Konovalov \u003candreyknvl@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "5b01014759991887b1e450c9def01e58c02ab81b", "tree": "9e8800bb8a3c9b6eb26fc8c224f19b77cb824072", "parents": [ "3de81b758853f0b29c61e246679d20b513c4cfec" ], "author": { "name": "Sabrina Dubroca", "email": "sd@queasysnail.net", "time": "Fri Dec 02 16:49:29 2016 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 14:07:11 2016 -0500" }, "message": "geneve: avoid use-after-free of skb-\u003edata\n\ngeneve{,6}_build_skb can end up doing a pskb_expand_head(), which\nmakes the ip_hdr(skb) reference we stashed earlier stale. Since it\u0027s\nonly needed as an argument to ip_tunnel_ecn_encap(), move this\ndirectly in the function call.\n\nFixes: 08399efc6319 (\"geneve: ensure ECN info is handled properly in all tx/rx paths\")\nSigned-off-by: Sabrina Dubroca \u003csd@queasysnail.net\u003e\nReviewed-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3de81b758853f0b29c61e246679d20b513c4cfec", "tree": "fe4107dc49e976bfeeacd6cae7b18ac8dd179851", "parents": [ "f0d21e894713b43a75bdf2d1b31e587bd5db5341" ], "author": { "name": "Michal Kubeček", "email": "mkubecek@suse.cz", "time": "Fri Dec 02 09:33:41 2016 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 14:03:20 2016 -0500" }, "message": "tipc: check minimum bearer MTU\n\nQian Zhang (张谦) reported a potential socket buffer overflow in\ntipc_msg_build() which is also known as CVE-2016-8632: due to\ninsufficient checks, a buffer overflow can occur if MTU is too short for\neven tipc headers. As anyone can set device MTU in a user/net namespace,\nthis issue can be abused by a regular user.\n\nAs agreed in the discussion on Ben Hutchings\u0027 original patch, we should\ncheck the MTU at the moment a bearer is attached rather than for each\nprocessed packet. We also need to repeat the check when bearer MTU is\nadjusted to new device MTU. UDP case also needs a check to avoid\noverflow when calculating bearer MTU.\n\nFixes: b97bf3fd8f6a (\"[TIPC] Initial merge\")\nSigned-off-by: Michal Kubecek \u003cmkubecek@suse.cz\u003e\nReported-by: Qian Zhang (张谦) \u003czhangqian-c@360.cn\u003e\nAcked-by: Ying Xue \u003cying.xue@windriver.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f0d21e894713b43a75bdf2d1b31e587bd5db5341", "tree": "00bdf05d9139fba688125ece1e2cc592440b1bb7", "parents": [ "50d5aa4cf822887f88841e4d8f8502434af679a9", "f00b534ded60bd0a23c2fa8dec4ece52aa7d235f" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 14:02:13 2016 -0500" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 14:02:13 2016 -0500" }, "message": "Merge tag \u0027linux-can-fixes-for-4.9-20161201\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can\n\nMarc Kleine-Budde says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\npull-request: can 2016-12-02\n\nthis is a pull request for net/master.\n\nThere are two patches by Stephane Grosjean, who adds support for the new\nPCAN-USB X6 USB interface to the pcan_usb driver.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "50d5aa4cf822887f88841e4d8f8502434af679a9", "tree": "85052b9f055108729afaec9f8ed4292fdda59e3d", "parents": [ "33d446dbba4d4d6a77e1e900d434fa99e0f02c86" ], "author": { "name": "Dan Carpenter", "email": "dan.carpenter@oracle.com", "time": "Thu Dec 01 23:57:44 2016 +0300" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 13:59:47 2016 -0500" }, "message": "net: renesas: ravb: unintialized return value\n\nWe want to set the other \"err\" variable here so that we can return it\nlater. My version of GCC misses this issue but I caught it with a\nstatic checker.\n\nFixes: 9f70eb339f52 (\"net: ethernet: renesas: ravb: fix fixed-link phydev leaks\")\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nAcked-by: Sergei Shtylyov \u003csergei.shtylyov@cogentembedded.com\u003e\nReviewed-by: Johan Hovold \u003cjohan@kernel.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "33d446dbba4d4d6a77e1e900d434fa99e0f02c86", "tree": "acc7fcdf9974c9daad002649333de9c41171b39c", "parents": [ "8c4799ac799665065f9bf1364fd71bf4f7dc6a4a" ], "author": { "name": "Chris Brandt", "email": "chris.brandt@renesas.com", "time": "Thu Dec 01 13:32:14 2016 -0500" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 13:54:50 2016 -0500" }, "message": "sh_eth: remove unchecked interrupts for RZ/A1\n\nWhen streaming a lot of data and the RZ/A1 can\u0027t keep up, some status bits\nwill get set that are not being checked or cleared which cause the\nfollowing messages and the Ethernet driver to stop working. This\npatch fixes that issue.\n\nirq 21: nobody cared (try booting with the \"irqpoll\" option)\nhandlers:\n[\u003cc036b71c\u003e] sh_eth_interrupt\nDisabling IRQ #21\n\nFixes: db893473d313a4ad (\"sh_eth: Add support for r7s72100\")\nSigned-off-by: Chris Brandt \u003cchris.brandt@renesas.com\u003e\nAcked-by: Sergei Shtylyov \u003csergei.shtylyov@cogentembedded.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8c4799ac799665065f9bf1364fd71bf4f7dc6a4a", "tree": "1399a8df3d0b719518a28edcac5c0b53d33859e6", "parents": [ "9bd813da24cd49d749911d7fdc0e9ae9a673d746" ], "author": { "name": "Florian Fainelli", "email": "f.fainelli@gmail.com", "time": "Thu Dec 01 09:45:45 2016 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 13:53:34 2016 -0500" }, "message": "net: bcmgenet: Utilize correct struct device for all DMA operations\n\n__bcmgenet_tx_reclaim() and bcmgenet_free_rx_buffers() are not using the\nsame struct device during unmap that was used for the map operation,\nwhich makes DMA-API debugging warn about it. Fix this by always using\n\u0026priv-\u003epdev-\u003edev throughout the driver, using an identical device\nreference for all map/unmap calls.\n\nFixes: 1c1008c793fa (\"net: bcmgenet: add main driver file\")\nSigned-off-by: Florian Fainelli \u003cf.fainelli@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ed8d747fd2b9d9204762ca6ab8c843c72c42cc41", "tree": "61a60913f493fa69451ed694c96be72735e167ac", "parents": [ "4aa675aaf22790188d6b9c47d3d44570720c0e34" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Dec 02 10:48:50 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Dec 02 10:48:50 2016 -0800" }, "message": "Fix up a couple of field names in the CREDITS file\n\nOzgur Karatas reported that the very first entry in the CREDITS file had\nthe wrong tag for name (M: instead of N: - it happened when moving the\nentry from the MAINTAINERS file, where \u0027M:\u0027 stands for \"Maintainer\").\n\nAnd when I went looking, I found a couple of other cases of wrong\ntagging too.\n\nReported-by: Ozgur Karatas \u003cmueddib@yandex.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "9bd813da24cd49d749911d7fdc0e9ae9a673d746", "tree": "2ecfcad67f62433099f2102ec6bdacba137e1052", "parents": [ "d5c83d0d1d83b3798c71e0c8b7c3624d39c91d88" ], "author": { "name": "Daniele Palmas", "email": "dnlplm@gmail.com", "time": "Thu Dec 01 16:52:05 2016 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 13:42:12 2016 -0500" }, "message": "NET: usb: qmi_wwan: add support for Telit LE922A PID 0x1040\n\nThis patch adds support for PID 0x1040 of Telit LE922A.\n\nThe qmi adapter requires to have DTR set for proper working,\nso QMI_WWAN_QUIRK_DTR has been enabled.\n\nSigned-off-by: Daniele Palmas \u003cdnlplm@gmail.com\u003e\nAcked-by: Bjørn Mork \u003cbjorn@mork.no\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d5c83d0d1d83b3798c71e0c8b7c3624d39c91d88", "tree": "cc8f88ed714afb50bb8132dd80089c1d4676a4a0", "parents": [ "6b6ebb6b01c873d0cfe3449e8a1219ee6e5fc022" ], "author": { "name": "Kristian Evensen", "email": "kristian.evensen@gmail.com", "time": "Thu Dec 01 14:23:17 2016 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 13:40:09 2016 -0500" }, "message": "cdc_ether: Fix handling connection notification\n\nCommit bfe9b9d2df66 (\"cdc_ether: Improve ZTE MF823/831/910 handling\")\nintroduced a work-around in usbnet_cdc_status() for devices that exported\ncdc carrier on twice on connect. Before the commit, this behavior caused\nthe link state to be incorrect. It was assumed that all CDC Ethernet\ndevices would either export this behavior, or send one off and then one on\nnotification (which seems to be the default behavior).\n\nUnfortunately, it turns out multiple devices sends a connection\nnotification multiple times per second (via an interrupt), even when\nconnection state does not change. This has been observed with several\ndifferent USB LAN dongles (at least), for example 13b1:0041 (Linksys).\nAfter bfe9b9d2df66, the link state has been set as down and then up for\neach notification. This has caused a flood of Netlink NEWLINK messages and\nsyslog to be flooded with messages similar to:\n\ncdc_ether 2-1:2.0 eth1: kevent 12 may have been dropped\n\nThis commit fixes the behavior by reverting usbnet_cdc_status() to how it\nwas before bfe9b9d2df66. The work-around has been moved to a separate\nstatus-function which is only called when a known, affect device is\ndetected.\n\nv1-\u003ev2:\n\n* Do not open-code netif_carrier_ok() (thanks Henning Schild).\n* Call netif_carrier_off() instead of usb_link_change(). This prevents\ncalling schedule_work() twice without giving the work queue a chance to be\nprocessed (thanks Bjørn Mork).\n\nFixes: bfe9b9d2df66 (\"cdc_ether: Improve ZTE MF823/831/910 handling\")\nReported-by: Henning Schild \u003chenning.schild@siemens.com\u003e\nSigned-off-by: Kristian Evensen \u003ckristian.evensen@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "6b6ebb6b01c873d0cfe3449e8a1219ee6e5fc022", "tree": "3777f4fe39e94a6165b68c077ffc44642efb2563", "parents": [ "721c7443dcb26bf8c0b4ad317a36c7dfa140f1e4" ], "author": { "name": "Artem Savkov", "email": "asavkov@redhat.com", "time": "Thu Dec 01 14:06:04 2016 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 13:34:58 2016 -0500" }, "message": "ip6_offload: check segs for NULL in ipv6_gso_segment.\n\nsegs needs to be checked for being NULL in ipv6_gso_segment() before calling\nskb_shinfo(segs), otherwise kernel can run into a NULL-pointer dereference:\n\n[ 97.811262] BUG: unable to handle kernel NULL pointer dereference at 00000000000000cc\n[ 97.819112] IP: [\u003cffffffff816e52f9\u003e] ipv6_gso_segment+0x119/0x2f0\n[ 97.825214] PGD 0 [ 97.827047]\n[ 97.828540] Oops: 0000 [#1] SMP\n[ 97.831678] Modules linked in: vhost_net vhost macvtap macvlan nfsv3 rpcsec_gss_krb5\nnfsv4 dns_resolver nfs fscache xt_CHECKSUM iptable_mangle ipt_MASQUERADE nf_nat_masquerade_ipv4\niptable_nat nf_nat_ipv4 nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack\nipt_REJECT nf_reject_ipv4 tun ebtable_filter ebtables ip6table_filter ip6_tables iptable_filter\nbridge stp llc snd_hda_codec_realtek snd_hda_codec_hdmi snd_hda_codec_generic snd_hda_intel\nsnd_hda_codec edac_mce_amd snd_hda_core edac_core snd_hwdep kvm_amd snd_seq kvm snd_seq_device\nsnd_pcm irqbypass snd_timer ppdev parport_serial snd parport_pc k10temp pcspkr soundcore parport\nsp5100_tco shpchp sg wmi i2c_piix4 acpi_cpufreq nfsd auth_rpcgss nfs_acl lockd grace sunrpc\nip_tables xfs libcrc32c sr_mod cdrom sd_mod ata_generic pata_acpi amdkfd amd_iommu_v2 radeon\nbroadcom bcm_phy_lib i2c_algo_bit drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops\nttm ahci serio_raw tg3 firewire_ohci libahci pata_atiixp drm ptp libata firewire_core pps_core\ni2c_core crc_itu_t fjes dm_mirror dm_region_hash dm_log dm_mod\n[ 97.927721] CPU: 1 PID: 3504 Comm: vhost-3495 Not tainted 4.9.0-7.el7.test.x86_64 #1\n[ 97.935457] Hardware name: AMD Snook/Snook, BIOS ESK0726A 07/26/2010\n[ 97.941806] task: ffff880129a1c080 task.stack: ffffc90001bcc000\n[ 97.947720] RIP: 0010:[\u003cffffffff816e52f9\u003e] [\u003cffffffff816e52f9\u003e] ipv6_gso_segment+0x119/0x2f0\n[ 97.956251] RSP: 0018:ffff88012fc43a10 EFLAGS: 00010207\n[ 97.961557] RAX: 0000000000000000 RBX: ffff8801292c8700 RCX: 0000000000000594\n[ 97.968687] RDX: 0000000000000593 RSI: ffff880129a846c0 RDI: 0000000000240000\n[ 97.975814] RBP: ffff88012fc43a68 R08: ffff880129a8404e R09: 0000000000000000\n[ 97.982942] R10: 0000000000000000 R11: ffff880129a84076 R12: 00000020002949b3\n[ 97.990070] R13: ffff88012a580000 R14: 0000000000000000 R15: ffff88012a580000\n[ 97.997198] FS: 0000000000000000(0000) GS:ffff88012fc40000(0000) knlGS:0000000000000000\n[ 98.005280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 98.011021] CR2: 00000000000000cc CR3: 0000000126c5d000 CR4: 00000000000006e0\n[ 98.018149] Stack:\n[ 98.020157] 00000000ffffffff ffff88012fc43ac8 ffffffffa017ad0a 000000000000000e\n[ 98.027584] 0000001300000000 0000000077d59998 ffff8801292c8700 00000020002949b3\n[ 98.035010] ffff88012a580000 0000000000000000 ffff88012a580000 ffff88012fc43a98\n[ 98.042437] Call Trace:\n[ 98.044879] \u003cIRQ\u003e [ 98.046803] [\u003cffffffffa017ad0a\u003e] ? tg3_start_xmit+0x84a/0xd60 [tg3]\n[ 98.053156] [\u003cffffffff815eeee0\u003e] skb_mac_gso_segment+0xb0/0x130\n[ 98.059158] [\u003cffffffff815eefd3\u003e] __skb_gso_segment+0x73/0x110\n[ 98.064985] [\u003cffffffff815ef40d\u003e] validate_xmit_skb+0x12d/0x2b0\n[ 98.070899] [\u003cffffffff815ef5d2\u003e] validate_xmit_skb_list+0x42/0x70\n[ 98.077073] [\u003cffffffff81618560\u003e] sch_direct_xmit+0xd0/0x1b0\n[ 98.082726] [\u003cffffffff815efd86\u003e] __dev_queue_xmit+0x486/0x690\n[ 98.088554] [\u003cffffffff8135c135\u003e] ? cpumask_next_and+0x35/0x50\n[ 98.094380] [\u003cffffffff815effa0\u003e] dev_queue_xmit+0x10/0x20\n[ 98.099863] [\u003cffffffffa09ce057\u003e] br_dev_queue_push_xmit+0xa7/0x170 [bridge]\n[ 98.106907] [\u003cffffffffa09ce161\u003e] br_forward_finish+0x41/0xc0 [bridge]\n[ 98.113430] [\u003cffffffff81627cf2\u003e] ? nf_iterate+0x52/0x60\n[ 98.118735] [\u003cffffffff81627d6b\u003e] ? nf_hook_slow+0x6b/0xc0\n[ 98.124216] [\u003cffffffffa09ce32c\u003e] __br_forward+0x14c/0x1e0 [bridge]\n[ 98.130480] [\u003cffffffffa09ce120\u003e] ? br_dev_queue_push_xmit+0x170/0x170 [bridge]\n[ 98.137785] [\u003cffffffffa09ce4bd\u003e] br_forward+0x9d/0xb0 [bridge]\n[ 98.143701] [\u003cffffffffa09cfbb7\u003e] br_handle_frame_finish+0x267/0x560 [bridge]\n[ 98.150834] [\u003cffffffffa09d0064\u003e] br_handle_frame+0x174/0x2f0 [bridge]\n[ 98.157355] [\u003cffffffff8102fb89\u003e] ? sched_clock+0x9/0x10\n[ 98.162662] [\u003cffffffff810b63b2\u003e] ? sched_clock_cpu+0x72/0xa0\n[ 98.168403] [\u003cffffffff815eccf5\u003e] __netif_receive_skb_core+0x1e5/0xa20\n[ 98.174926] [\u003cffffffff813659f9\u003e] ? timerqueue_add+0x59/0xb0\n[ 98.180580] [\u003cffffffff815ed548\u003e] __netif_receive_skb+0x18/0x60\n[ 98.186494] [\u003cffffffff815ee625\u003e] process_backlog+0x95/0x140\n[ 98.192145] [\u003cffffffff815edccd\u003e] net_rx_action+0x16d/0x380\n[ 98.197713] [\u003cffffffff8170cff1\u003e] __do_softirq+0xd1/0x283\n[ 98.203106] [\u003cffffffff8170b2bc\u003e] do_softirq_own_stack+0x1c/0x30\n[ 98.209107] \u003cEOI\u003e [ 98.211029] [\u003cffffffff8108a5c0\u003e] do_softirq+0x50/0x60\n[ 98.216166] [\u003cffffffff815ec853\u003e] netif_rx_ni+0x33/0x80\n[ 98.221386] [\u003cffffffffa09eeff7\u003e] tun_get_user+0x487/0x7f0 [tun]\n[ 98.227388] [\u003cffffffffa09ef3ab\u003e] tun_sendmsg+0x4b/0x60 [tun]\n[ 98.233129] [\u003cffffffffa0b68932\u003e] handle_tx+0x282/0x540 [vhost_net]\n[ 98.239392] [\u003cffffffffa0b68c25\u003e] handle_tx_kick+0x15/0x20 [vhost_net]\n[ 98.245916] [\u003cffffffffa0abacfe\u003e] vhost_worker+0x9e/0xf0 [vhost]\n[ 98.251919] [\u003cffffffffa0abac60\u003e] ? vhost_umem_alloc+0x40/0x40 [vhost]\n[ 98.258440] [\u003cffffffff81003a47\u003e] ? do_syscall_64+0x67/0x180\n[ 98.264094] [\u003cffffffff810a44d9\u003e] kthread+0xd9/0xf0\n[ 98.268965] [\u003cffffffff810a4400\u003e] ? kthread_park+0x60/0x60\n[ 98.274444] [\u003cffffffff8170a4d5\u003e] ret_from_fork+0x25/0x30\n[ 98.279836] Code: 8b 93 d8 00 00 00 48 2b 93 d0 00 00 00 4c 89 e6 48 89 df 66 89 93 c2 00 00 00 ff 10 48 3d 00 f0 ff ff 49 89 c2 0f 87 52 01 00 00 \u003c41\u003e 8b 92 cc 00 00 00 48 8b 80 d0 00 00 00 44 0f b7 74 10 06 66\n[ 98.299425] RIP [\u003cffffffff816e52f9\u003e] ipv6_gso_segment+0x119/0x2f0\n[ 98.305612] RSP \u003cffff88012fc43a10\u003e\n[ 98.309094] CR2: 00000000000000cc\n[ 98.312406] ---[ end trace 726a2c7a2d2d78d0 ]---\n\nSigned-off-by: Artem Savkov \u003casavkov@redhat.com\u003e\nAcked-by: Eric Dumazet \u003cedumazet@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "721c7443dcb26bf8c0b4ad317a36c7dfa140f1e4", "tree": "a195438c0f89d4b470d136ee34f4c8ebef1a768b", "parents": [ "80d1106aeaf689ab5fdf33020c5fecd269b31c88" ], "author": { "name": "Sowmini Varadhan", "email": "sowmini.varadhan@oracle.com", "time": "Thu Dec 01 04:44:43 2016 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 13:29:26 2016 -0500" }, "message": "RDS: TCP: unregister_netdevice_notifier() in error path of rds_tcp_init_net\n\nIf some error is encountered in rds_tcp_init_net, make sure to\nunregister_netdevice_notifier(), else we could trigger a panic\nlater on, when the modprobe from a netns fails.\n\nSigned-off-by: Sowmini Varadhan \u003csowmini.varadhan@oracle.com\u003e\nAcked-by: Santosh Shilimkar \u003csantosh.shilimkar@oracle.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "80d1106aeaf689ab5fdf33020c5fecd269b31c88", "tree": "9249c06176f0a2b30a484d28f2102225d0d16e32", "parents": [ "b4e479a96fc398ccf83bb1cffb4ffef8631beaf1" ], "author": { "name": "Eli Cooper", "email": "elicooper@gmx.com", "time": "Thu Dec 01 10:05:12 2016 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 12:34:22 2016 -0500" }, "message": "Revert: \"ip6_tunnel: Update skb-\u003eprotocol to ETH_P_IPV6 in ip6_tnl_xmit()\"\n\nThis reverts commit ae148b085876fa771d9ef2c05f85d4b4bf09ce0d\n(\"ip6_tunnel: Update skb-\u003eprotocol to ETH_P_IPV6 in ip6_tnl_xmit()\").\n\nskb-\u003eprotocol is now set in __ip_local_out() and __ip6_local_out() before\ndst_output() is called. It is no longer necessary to do it for each tunnel.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Eli Cooper \u003celicooper@gmx.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b4e479a96fc398ccf83bb1cffb4ffef8631beaf1", "tree": "0b2053915f3aa78279cf87b8f123b17e147c2e7f", "parents": [ "f4180439109aa720774baafdd798b3234ab1a0d2" ], "author": { "name": "Eli Cooper", "email": "elicooper@gmx.com", "time": "Thu Dec 01 10:05:11 2016 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 12:34:22 2016 -0500" }, "message": "ipv6: Set skb-\u003eprotocol properly for local output\n\nWhen xfrm is applied to TSO/GSO packets, it follows this path:\n\n xfrm_output() -\u003e xfrm_output_gso() -\u003e skb_gso_segment()\n\nwhere skb_gso_segment() relies on skb-\u003eprotocol to function properly.\n\nThis patch sets skb-\u003eprotocol to ETH_P_IPV6 before dst_output() is called,\nfixing a bug where GSO packets sent through an ipip6 tunnel are dropped\nwhen xfrm is involved.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Eli Cooper \u003celicooper@gmx.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f4180439109aa720774baafdd798b3234ab1a0d2", "tree": "03c8f7784d5e833ef1a917299da4d2a80573e781", "parents": [ "84ac7260236a49c79eede91617700174c2c19b0c" ], "author": { "name": "Eli Cooper", "email": "elicooper@gmx.com", "time": "Thu Dec 01 10:05:10 2016 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 12:34:22 2016 -0500" }, "message": "ipv4: Set skb-\u003eprotocol properly for local output\n\nWhen xfrm is applied to TSO/GSO packets, it follows this path:\n\n xfrm_output() -\u003e xfrm_output_gso() -\u003e skb_gso_segment()\n\nwhere skb_gso_segment() relies on skb-\u003eprotocol to function properly.\n\nThis patch sets skb-\u003eprotocol to ETH_P_IP before dst_output() is called,\nfixing a bug where GSO packets sent through a sit tunnel are dropped\nwhen xfrm is involved.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Eli Cooper \u003celicooper@gmx.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "84ac7260236a49c79eede91617700174c2c19b0c", "tree": "6f3e90bdd39cffbcdec28e6b84314b10e3dc2de3", "parents": [ "2219d5ed77e8bdc2ef1f0b79f34d2cc0be802b25" ], "author": { "name": "Philip Pettersson", "email": "philip.pettersson@gmail.com", "time": "Wed Nov 30 14:55:36 2016 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 12:16:49 2016 -0500" }, "message": "packet: fix race condition in packet_set_ring\n\nWhen packet_set_ring creates a ring buffer it will initialize a\nstruct timer_list if the packet version is TPACKET_V3. This value\ncan then be raced by a different thread calling setsockopt to\nset the version to TPACKET_V1 before packet_set_ring has finished.\n\nThis leads to a use-after-free on a function pointer in the\nstruct timer_list when the socket is closed as the previously\ninitialized timer will not be deleted.\n\nThe bug is fixed by taking lock_sock(sk) in packet_setsockopt when\nchanging the packet version while also taking the lock at the start\nof packet_set_ring.\n\nFixes: f6fb8f100b80 (\"af-packet: TPACKET_V3 flexible buffer implementation.\")\nSigned-off-by: Philip Pettersson \u003cphilip.pettersson@gmail.com\u003e\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "4aa675aaf22790188d6b9c47d3d44570720c0e34", "tree": "3a15721f2dc515cb6e6a0cbf1c9ef85979681b19", "parents": [ "3e52d063d809df58da9be59c67d755c0d1ffa7c8", "a0f1d21c1ccb1da66629627a74059dd7f5ac9c61" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Dec 02 09:15:26 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Dec 02 09:15:26 2016 -0800" }, "message": "Merge tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/virt/kvm/kvm\n\nPull KVM fixes from Radim Krčmář:\n \"All architectures avoid memory corruption in an error path. ARM\n prevents bogus acknowledgement of interrupts\"\n\n* tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/virt/kvm/kvm:\n KVM: use after free in kvm_ioctl_create_device()\n KVM: arm/arm64: vgic: Don\u0027t notify EOI for non-SPIs\n" }, { "commit": "3e52d063d809df58da9be59c67d755c0d1ffa7c8", "tree": "f9a6a8208159f0f120360a6d99a6bef4edb8d1ed", "parents": [ "8ab2ae655bfe384335c5b6b0d6041e0ddce26b00", "dfa2ccc30e6556bd526f54f0e16fc9e5af4293cb" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Dec 02 09:12:44 2016 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Dec 02 09:12:44 2016 -0800" }, "message": "Merge branch \u0027i2c/for-current\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux\n\nPull i2c fix from Wolfram Sang:\n \"Here is the revert for the regression of the i2c-octeon driver I\n mentioned last time. I wished for a bit more feedback, but all people\n working actively on it are in need of this patch, so here it goes\"\n\n* \u0027i2c/for-current\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux:\n Revert \"i2c: octeon: thunderx: Limit register access retries\"\n" }, { "commit": "2219d5ed77e8bdc2ef1f0b79f34d2cc0be802b25", "tree": "d61537ba3843dd29b6ee988f76ace4368adf8ee6", "parents": [ "151a14db228181fb49abaf83e13f3be58ec102c4" ], "author": { "name": "Lino Sanfilippo", "email": "LinoSanfilippo@gmx.de", "time": "Wed Nov 30 23:48:32 2016 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 12:10:25 2016 -0500" }, "message": "net: ethernet: altera: TSE: do not use tx queue lock in tx completion handler\n\nThe driver already uses its private lock for synchronization between xmit\nand xmit completion handler making the additional use of the xmit_lock\nunnecessary.\nFurthermore the driver does not set NETIF_F_LLTX resulting in xmit to be\ncalled with the xmit_lock held and then taking the private lock while xmit\ncompletion handler does the reverse, first take the private lock, then the\nxmit_lock.\nFix these issues by not taking the xmit_lock in the tx completion handler.\n\nSigned-off-by: Lino Sanfilippo \u003cLinoSanfilippo@gmx.de\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "151a14db228181fb49abaf83e13f3be58ec102c4", "tree": "201e0a49903d5f373e65a28c5319681fff309c34", "parents": [ "d262fd12cd03afca40ced117d837fa576a667eab" ], "author": { "name": "Lino Sanfilippo", "email": "LinoSanfilippo@gmx.de", "time": "Wed Nov 30 23:48:31 2016 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 12:10:24 2016 -0500" }, "message": "net: ethernet: altera: TSE: Remove unneeded dma sync for tx buffers\n\nAn explicit dma sync for device directly after mapping as well as an\nexplicit dma sync for cpu directly before unmapping is unnecessary and\ncostly on the hotpath. So remove these calls.\n\nSigned-off-by: Lino Sanfilippo \u003cLinoSanfilippo@gmx.de\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8ab2ae655bfe384335c5b6b0d6041e0ddce26b00", "tree": "1c4f421eea4bfe6473cf22df5e47e7ab9388892a", "parents": [ "4db5e636ddca41f4292359fdb3ac7cc4346a359a" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Fri Dec 02 13:40:27 2016 +0100" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Dec 02 08:51:22 2016 -0800" }, "message": "default exported asm symbols to zero\n\nWith binutils-2.26 and before, a weak missing symbol was kept during the\nfinal link, and a missing CRC for an export would lead to that CRC being\ntreated as zero implicitly. With binutils-2.27, the crc symbol gets\ndropped, and any module trying to use it will fail to load.\n\nThis sets the weak CRC symbol to zero explicitly, making it defined in\nvmlinux, which in turn lets us load the modules referring to that CRC.\n\nThe comment above the __CRC_SYMBOL macro suggests that this was always\nthe intention, although it also seems that all symbols defined in C have\na correct CRC these days, and only the exports that are now done in\nassembly need this.\n\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\nTested-by: Adam Borowski \u003ckilobyte@angband.pl\u003e\nCc: stable@kernel.org\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "909e481e2467f202b97d42beef246e8829416a85", "tree": "a6aeb258e0d0954d9193a6be0a6fc6163df3c3f6", "parents": [ "4c9456df8849204435c4de1849120b916975d75d" ], "author": { "name": "Sudeep Holla", "email": "sudeep.holla@arm.com", "time": "Wed Nov 16 17:31:31 2016 +0000" }, "committer": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Fri Dec 02 17:28:17 2016 +0100" }, "message": "arm64: dts: juno: fix cluster sleep state entry latency on all SoC versions\n\nThe core and the cluster sleep state entry latencies can\u0027t be same as\ncluster sleep involves more work compared to core level e.g. shared\ncache maintenance.\n\nExperiments have shown on an average about 100us more latency for the\ncluster sleep state compared to the core level sleep. This patch fixes\nthe entry latency for the cluster sleep state.\n\nFixes: 28e10a8f3a03 (\"arm64: dts: juno: Add idle-states to device tree\")\nCc: Lorenzo Pieralisi \u003clorenzo.pieralisi@arm.com\u003e\nCc: \"Jon Medhurst (Tixy)\" \u003ctixy@linaro.org\u003e\nReviewed-by: Liviu Dudau \u003cLiviu.Dudau@arm.com\u003e\nSigned-off-by: Sudeep Holla \u003csudeep.holla@arm.com\u003e\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\n" }, { "commit": "d262fd12cd03afca40ced117d837fa576a667eab", "tree": "38bf52c2e8c80c7ff2b09ebf6943734a9d01336e", "parents": [ "6919756caaeaa76dc56287252fb656e3c2d9b4e1", "d2ed0a7755fe14c790f398ae55088d00492ef168" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 10:42:47 2016 -0500" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 10:43:23 2016 -0500" }, "message": "Merge branch \u0027stmmac-probe-error-handling-and-phydev-leaks\u0027\n\nJohan Hovold says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nnet: stmmac: fix probe error handling and phydev leaks\n\nThis series fixes a number of issues with the stmmac-driver probe error\nhandling, which for example left clocks enabled after probe failures.\n\nThe final patch fixes a failure to deregister and free any fixed-link\nPHYs that were registered during probe on probe errors and on driver\nunbind. It also fixes a related of-node leak on late probe errors.\n\nThis series depends on the of_phy_deregister_fixed_link() helper that\nwas just merged to net.\n\nAs mentioned earlier, one staging driver also suffers from a similar\nleak and can be fixed up once the above mentioned helper hits mainline.\n\nNote that these patches have only been compile tested.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nAcked-by: Giuseppe Cavallaro \u003cpeppe.cavallaro@st.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d2ed0a7755fe14c790f398ae55088d00492ef168", "tree": "38bf52c2e8c80c7ff2b09ebf6943734a9d01336e", "parents": [ "661f049be17a3894cb438d46ba5af8e3643aac28" ], "author": { "name": "Johan Hovold", "email": "johan@kernel.org", "time": "Wed Nov 30 15:29:55 2016 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 10:42:47 2016 -0500" }, "message": "net: ethernet: stmmac: fix of-node and fixed-link-phydev leaks\n\nMake sure to deregister and free any fixed-link phy registered during\nprobe on probe errors and on driver unbind by adding a new glue helper\nfunction.\n\nDrop the of-node reference taken in the same path also on late probe\nerrors (and not just on driver unbind) by moving the put from\nstmmac_dvr_remove() to the new helper.\n\nFixes: 277323814e49 (\"stmmac: add fixed-link device-tree support\")\nFixes: 4613b279bee7 (\"ethernet: stmicro: stmmac: add missing of_node_put\nafter calling of_parse_phandle\")\nSigned-off-by: Johan Hovold \u003cjohan@kernel.org\u003e\nAcked-by: Maxime Ripard \u003cmaxime.ripard@free-electrons.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "661f049be17a3894cb438d46ba5af8e3643aac28", "tree": "a38efd5bfc9b19e7811ef86eda95d3ed3766ae71", "parents": [ "5cc70bbcacf6728b598b529a061930d8271adbb5" ], "author": { "name": "Johan Hovold", "email": "johan@kernel.org", "time": "Wed Nov 30 15:29:54 2016 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 10:42:46 2016 -0500" }, "message": "net: ethernet: stmmac: platform: fix outdated function header\n\nFix the OF-helper function header to reflect that the function no longer\nhas a platform-data parameter.\n\nFixes: b0003ead75f3 (\"stmmac: make stmmac_probe_config_dt return the\nplatform data struct\")\nSigned-off-by: Johan Hovold \u003cjohan@kernel.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "5cc70bbcacf6728b598b529a061930d8271adbb5", "tree": "01a774686884d89bd490fcbca20e7db943d58402", "parents": [ "939b20022765bc338b0f72cbf1eed60a907398d7" ], "author": { "name": "Johan Hovold", "email": "johan@kernel.org", "time": "Wed Nov 30 15:29:53 2016 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 10:42:46 2016 -0500" }, "message": "net: ethernet: stmmac: dwmac-meson8b: fix probe error path\n\nMake sure to disable clocks before returning on late probe errors.\n\nFixes: 566e82516253 (\"net: stmmac: add a glue driver for the Amlogic\nMeson 8b / GXBB DWMAC\")\nSigned-off-by: Johan Hovold \u003cjohan@kernel.org\u003e\nAcked-by: Kevin Hilman \u003ckhilman@baylibre.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "939b20022765bc338b0f72cbf1eed60a907398d7", "tree": "577f70e200862f86d96404a44c6331151f558a26", "parents": [ "2d222656db08b8eef3b53b56cf1ce4a90fe8cd78" ], "author": { "name": "Johan Hovold", "email": "johan@kernel.org", "time": "Wed Nov 30 15:29:52 2016 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 10:42:46 2016 -0500" }, "message": "net: ethernet: stmmac: dwmac-generic: fix probe error path\n\nMake sure to call any exit() callback to undo the effect of init()\nbefore returning on late probe errors.\n\nFixes: cf3f047b9af4 (\"stmmac: move hw init in the probe (v2)\")\nSigned-off-by: Johan Hovold \u003cjohan@kernel.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2d222656db08b8eef3b53b56cf1ce4a90fe8cd78", "tree": "c7136d451969a9cdc74340661f05957bfc6b923e", "parents": [ "0a9e22715ee384cf2a714c28f24ce8881b9fd815" ], "author": { "name": "Johan Hovold", "email": "johan@kernel.org", "time": "Wed Nov 30 15:29:51 2016 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 10:42:45 2016 -0500" }, "message": "net: ethernet: stmmac: dwmac-rk: fix probe error path\n\nMake sure to disable runtime PM, power down the PHY, and disable clocks\nbefore returning on late probe errors.\n\nFixes: 27ffefd2d109 (\"stmmac: dwmac-rk: create a new probe function\")\nSigned-off-by: Johan Hovold \u003cjohan@kernel.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0a9e22715ee384cf2a714c28f24ce8881b9fd815", "tree": "469f708cd316b7597562218a4281ba64de329f8c", "parents": [ "50ac64cfc39dad2ba0d8ad553d2d87dfc738cbba" ], "author": { "name": "Johan Hovold", "email": "johan@kernel.org", "time": "Wed Nov 30 15:29:50 2016 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 10:42:45 2016 -0500" }, "message": "net: ethernet: stmmac: dwmac-sti: fix probe error path\n\nMake sure to disable clocks before returning on late probe errors.\n\nFixes: 8387ee21f972 (\"stmmac: dwmac-sti: turn setup callback into a\nprobe function\")\nSigned-off-by: Johan Hovold \u003cjohan@kernel.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "50ac64cfc39dad2ba0d8ad553d2d87dfc738cbba", "tree": "8de0fca290b069bc9c2dbb07b7ee34a946f131e5", "parents": [ "6919756caaeaa76dc56287252fb656e3c2d9b4e1" ], "author": { "name": "Johan Hovold", "email": "johan@kernel.org", "time": "Wed Nov 30 15:29:49 2016 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Dec 02 10:42:45 2016 -0500" }, "message": "net: ethernet: stmmac: dwmac-socfpga: fix use-after-free on probe errors\n\nMake sure to call stmmac_dvr_remove() before returning on late probe\nerrors so that memory is freed, clocks are disabled, and the netdev is\nderegistered before its resources go away.\n\nFixes: 3c201b5a84ed (\"net: stmmac: socfpga: Remove re-registration of\nreset controller\")\nSigned-off-by: Johan Hovold \u003cjohan@kernel.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" } ], "next": "6919756caaeaa76dc56287252fb656e3c2d9b4e1" }