)]}' { "log": [ { "commit": "0adb32858b0bddf4ada5f364a84ed60b196dbcda", "tree": "f8bae1feaa568b165612f0c5073268671f3a11ba", "parents": [ "10b84daddbec72c6b440216a69de9a9605127f7a" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Apr 01 14:20:27 2018 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Apr 01 14:20:27 2018 -0700" }, "message": "Linux 4.16\n" }, { "commit": "10b84daddbec72c6b440216a69de9a9605127f7a", "tree": "ec43a84811df259cc8c605e1500b505ba9ff6315", "parents": [ "ad0500ca87894cb44091b24cf6ead02e51576df9", "f67b15037a7a50c57f72e69a6d59941ad90a0f0f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 31 07:59:00 2018 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 31 07:59:00 2018 -1000" }, "message": "Merge branch \u0027perf-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull perf fixes from Ingo Molnar:\n \"Two fixlets\"\n\n* \u0027perf-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n perf/hwbp: Simplify the perf-hwbp code, fix documentation\n perf/x86/intel: Fix linear IP of PEBS real_ip on Haswell and later CPUs\n" }, { "commit": "ad0500ca87894cb44091b24cf6ead02e51576df9", "tree": "1ef2ad95c7e37de7304e65595f35201fdeca338e", "parents": [ "93e04d4ad7c567f87388dd0338df7d8878ab65e9", "bd47a85acd727e27b7283daff557865ad04c59f6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 31 07:50:30 2018 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 31 07:50:30 2018 -1000" }, "message": "Merge branch \u0027x86-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull x86 fixes from Ingo Molnar:\n \"Two UV platform fixes, and a kbuild fix\"\n\n* \u0027x86-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n x86/platform/UV: Fix critical UV MMR address error\n x86/platform/uv/BAU: Add APIC idt entry\n x86/purgatory: Avoid creating stray .\u003cpid\u003e.d files, remove -MD from KBUILD_CFLAGS\n" }, { "commit": "93e04d4ad7c567f87388dd0338df7d8878ab65e9", "tree": "eefa261c2f597ed6a39a5785f76840357a071a12", "parents": [ "b5dbc28762fd3fd40ba76303be0c7f707826f982", "bd6271039ee6f0c9b468148fc2d73e0584af6b4f" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 31 07:26:48 2018 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 31 07:26:48 2018 -1000" }, "message": "Merge branch \u0027x86-pti-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull x86 PTI fixes from Ingo Molnar:\n \"Two fixes: a relatively simple objtool fix that makes Clang built\n kernels work with ORC debug info, plus an alternatives macro fix\"\n\n* \u0027x86-pti-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n x86/alternatives: Fixup alternative_call_2\n objtool: Add Clang support\n" }, { "commit": "b5dbc28762fd3fd40ba76303be0c7f707826f982", "tree": "8f6280bdce7dd17193eb122aa624dbd69266a13c", "parents": [ "a44406ec3d31de773ce50e794900546f22c1cc7b", "28913ee8191adf4bbc01cbfb9ee18cca782ab141" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 30 18:53:57 2018 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 30 18:53:57 2018 -1000" }, "message": "Merge tag \u0027kbuild-fixes-v4.16-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild\n\nPull Kbuild fixes from Masahiro Yamada:\n\n - fix missed rebuild of TRIM_UNUSED_KSYMS\n\n - fix rpm-pkg for GNU tar \u003e\u003d 1.29\n\n - include scripts/dtc/include-prefixes/* to kernel header deb-pkg\n\n - add -no-integrated-as option ealier to fix building with Clang\n\n - fix netfilter Makefile for parallel building\n\n* tag \u0027kbuild-fixes-v4.16-3\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild:\n netfilter: nf_nat_snmp_basic: add correct dependency to Makefile\n kbuild: rpm-pkg: Support GNU tar \u003e\u003d 1.29\n builddeb: Fix header package regarding dtc source links\n kbuild: set no-integrated-as before incl. arch Makefile\n kbuild: make scripts/adjust_autoksyms.sh robust against timestamp races\n" }, { "commit": "a44406ec3d31de773ce50e794900546f22c1cc7b", "tree": "c313035c8c2fc77103e0b34523168e81aa170650", "parents": [ "9dd2326890d89a5179967c947dab2bab34d7ddee", "e81b5e01c14add8395dfba7130f8829206bb507d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 30 18:47:28 2018 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 30 18:47:28 2018 -1000" }, "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net\n\nPull networking fixes from David Miller:\n\n 1) Fix RCU locking in xfrm_local_error(), from Taehee Yoo.\n\n 2) Fix return value assignments and thus error checking in\n iwl_mvm_start_ap_ibss(), from Johannes Berg.\n\n 3) Don\u0027t count header length twice in vti4, from Stefano Brivio.\n\n 4) Fix deadlock in rt6_age_examine_exception, from Eric Dumazet.\n\n 5) Fix out-of-bounds access in nf_sk_lookup_slow{v4,v6}() from Subash\n Abhinov.\n\n 6) Check nladdr size in netlink_connect(), from Alexander Potapenko.\n\n 7) VF representor SQ numbers are 32 not 16 bits, in mlx5 driver, from\n Or Gerlitz.\n\n 8) Out of bounds read in skb_network_protocol(), from Eric Dumazet.\n\n 9) r8169 driver sets driver data pointer after register_netdev() which\n is too late. Fix from Heiner Kallweit.\n\n10) Fix memory leak in mlx4 driver, from Moshe Shemesh.\n\n11) The multi-VLAN decap fix added a regression when dealing with device\n that lack a MAC header, such as tun. Fix from Toshiaki Makita.\n\n12) Fix integer overflow in dynamic interrupt coalescing code. From Tal\n Gilboa.\n\n13) Use after free in vrf code, from David Ahern.\n\n14) IPV6 route leak between VRFs fix, also from David Ahern.\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (81 commits)\n net: mvneta: fix enable of all initialized RXQs\n net/ipv6: Fix route leaking between VRFs\n vrf: Fix use after free and double free in vrf_finish_output\n ipv6: sr: fix seg6 encap performances with TSO enabled\n net/dim: Fix int overflow\n vlan: Fix vlan insertion for packets without ethernet header\n net: Fix untag for vlan packets without ethernet header\n atm: iphase: fix spelling mistake: \"Receiverd\" -\u003e \"Received\"\n vhost: validate log when IOTLB is enabled\n qede: Do not drop rx-checksum invalidated packets.\n hv_netvsc: enable multicast if necessary\n ip_tunnel: Resolve ipsec merge conflict properly.\n lan78xx: Crash in lan78xx_writ_reg (Workqueue: events lan78xx_deferred_multicast_write)\n qede: Fix barrier usage after tx doorbell write.\n vhost: correctly remove wait queue during poll failure\n net/mlx4_core: Fix memory leak while delete slave\u0027s resources\n net/mlx4_en: Fix mixed PFC and Global pause user control requests\n net/smc: use announced length in sock_recvmsg()\n llc: properly handle dev_queue_xmit() return value\n strparser: Fix sign of err codes\n ...\n" }, { "commit": "e81b5e01c14add8395dfba7130f8829206bb507d", "tree": "86489181e1ee33a0dc767d55b67129d7a06ad673", "parents": [ "b6cdbc85234b072340b8923e69f49ec293f905dc" ], "author": { "name": "Yelena Krivosheev", "email": "yelena@marvell.com", "time": "Fri Mar 30 12:05:31 2018 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 30 14:27:47 2018 -0400" }, "message": "net: mvneta: fix enable of all initialized RXQs\n\nIn mvneta_port_up() we enable relevant RX and TX port queues by write\nqueues bit map to an appropriate register.\n\nq_map must be ZERO in the beginning of this process.\n\nSigned-off-by: Yelena Krivosheev \u003cyelena@marvell.com\u003e\nSigned-off-by: Gregory CLEMENT \u003cgregory.clement@bootlin.com\u003e\nAcked-by: Thomas Petazzoni \u003cthomas.petazzoni@bootlin.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b6cdbc85234b072340b8923e69f49ec293f905dc", "tree": "91205c5138a7a724bf5da2e594e9ba9b05310089", "parents": [ "82dd0d2a9a76fc8fa2b18d80b987d455728bf83a" ], "author": { "name": "David Ahern", "email": "dsahern@gmail.com", "time": "Thu Mar 29 17:44:57 2018 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 30 14:23:59 2018 -0400" }, "message": "net/ipv6: Fix route leaking between VRFs\n\nDonald reported that IPv6 route leaking between VRFs is not working.\nThe root cause is the strict argument in the call to rt6_lookup when\nvalidating the nexthop spec.\n\nip6_route_check_nh validates the gateway and device (if given) of a\nroute spec. It in turn could call rt6_lookup (e.g., lookup in a given\ntable did not succeed so it falls back to a full lookup) and if so\nsets the strict argument to 1. That means if the egress device is given,\nthe route lookup needs to return a result with the same device. This\nstrict requirement does not work with VRFs (IPv4 or IPv6) because the\noif in the flow struct is overridden with the index of the VRF device\nto trigger a match on the l3mdev rule and force the lookup to its table.\n\nThe right long term solution is to add an l3mdev index to the flow\nstruct such that the oif is not overridden. That solution will not\nbackport well, so this patch aims for a simpler solution to relax the\nstrict argument if the route spec device is an l3mdev slave. As done\nin other places, use the FLOWI_FLAG_SKIP_NH_OIF to know that the\nRT6_LOOKUP_F_IFACE flag needs to be removed.\n\nFixes: ca254490c8df (\"net: Add VRF support to IPv6 stack\")\nReported-by: Donald Sharp \u003csharpd@cumulusnetworks.com\u003e\nSigned-off-by: David Ahern \u003cdsahern@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "82dd0d2a9a76fc8fa2b18d80b987d455728bf83a", "tree": "7f3f8308095869a157d285eb2bd95b9f2f894c3e", "parents": [ "5807b22c9164a21cd1077a9bc587f0bba361f72d" ], "author": { "name": "David Ahern", "email": "dsahern@gmail.com", "time": "Thu Mar 29 12:49:52 2018 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 30 14:20:23 2018 -0400" }, "message": "vrf: Fix use after free and double free in vrf_finish_output\n\nMiguel reported an skb use after free / double free in vrf_finish_output\nwhen neigh_output returns an error. The vrf driver should return after\nthe call to neigh_output as it takes over the skb on error path as well.\n\nPatch is a simplified version of Miguel\u0027s patch which was written for 4.9,\nand updated to top of tree.\n\nFixes: 8f58336d3f78a (\"net: Add ethernet header for pass through VRF device\")\nSigned-off-by: Miguel Fadon Perlines \u003cmfadon@teldat.com\u003e\nSigned-off-by: David Ahern \u003cdsahern@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "5807b22c9164a21cd1077a9bc587f0bba361f72d", "tree": "094028b3af4651eff263ba249e34946b24fbe0b7", "parents": [ "f97c3dc3c0e8d23a5c4357d182afeef4c67f5c33" ], "author": { "name": "David Lebrun", "email": "dlebrun@google.com", "time": "Thu Mar 29 17:59:36 2018 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 30 14:14:33 2018 -0400" }, "message": "ipv6: sr: fix seg6 encap performances with TSO enabled\n\nEnabling TSO can lead to abysmal performances when using seg6 in\nencap mode, such as with the ixgbe driver. This patch adds a call to\niptunnel_handle_offloads() to remove the encapsulation bit if needed.\n\nBefore:\nroot@comp4-seg6bpf:~# iperf3 -c fc00::55\nConnecting to host fc00::55, port 5201\n[ 4] local fc45::4 port 36592 connected to fc00::55 port 5201\n[ ID] Interval Transfer Bandwidth Retr Cwnd\n[ 4] 0.00-1.00 sec 196 KBytes 1.60 Mbits/sec 47 6.66 KBytes\n[ 4] 1.00-2.00 sec 304 KBytes 2.49 Mbits/sec 100 5.33 KBytes\n[ 4] 2.00-3.00 sec 284 KBytes 2.32 Mbits/sec 92 5.33 KBytes\n\nAfter:\nroot@comp4-seg6bpf:~# iperf3 -c fc00::55\nConnecting to host fc00::55, port 5201\n[ 4] local fc45::4 port 43062 connected to fc00::55 port 5201\n[ ID] Interval Transfer Bandwidth Retr Cwnd\n[ 4] 0.00-1.00 sec 1.03 GBytes 8.89 Gbits/sec 0 743 KBytes\n[ 4] 1.00-2.00 sec 1.03 GBytes 8.87 Gbits/sec 0 743 KBytes\n[ 4] 2.00-3.00 sec 1.03 GBytes 8.87 Gbits/sec 0 743 KBytes\n\nReported-by: Tom Herbert \u003ctom@quantonium.net\u003e\nFixes: 6c8702c60b88 (\"ipv6: sr: add support for SRH encapsulation and injection with lwtunnels\")\nSigned-off-by: David Lebrun \u003cdlebrun@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9dd2326890d89a5179967c947dab2bab34d7ddee", "tree": "05ffa78358492264a468e0d47b36466a3cd63459", "parents": [ "72573481eb7c4397db7eec57d5592efe882a2ab5", "85784f9395987a422fa04263e7c0fb13da11eb5c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 30 07:29:47 2018 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 30 07:29:47 2018 -1000" }, "message": "Merge tag \u0027ceph-for-4.16-rc8\u0027 of git://github.com/ceph/ceph-client\n\nPull ceph fix from Ilya Dryomov:\n \"A fix for a dio-enabled loop on ceph deadlock from Zheng, marked for\n stable\"\n\n* tag \u0027ceph-for-4.16-rc8\u0027 of git://github.com/ceph/ceph-client:\n ceph: only dirty ITER_IOVEC pages for direct read\n" }, { "commit": "72573481eb7c4397db7eec57d5592efe882a2ab5", "tree": "cd8cf8d4e52c3da0ca642b5dc3e95243537c713d", "parents": [ "bd886137a10542b2c61270b187f5be58d8a05937", "17a1079d9c63579d6e392a526405b8888e9ede37" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 30 07:24:14 2018 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 30 07:24:14 2018 -1000" }, "message": "Merge tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/virt/kvm/kvm\n\nPull KVM fixes from Radim Krčmář:\n \"PPC:\n - Fix a bug causing occasional machine check exceptions on POWER8\n hosts (introduced in 4.16-rc1)\n\n x86:\n - Fix a guest crashing regression with nested VMX and restricted\n guest (introduced in 4.16-rc1)\n\n - Fix dependency check for pv tlb flush (the wrong dependency that\n effectively disabled the feature was added in 4.16-rc4, the\n original feature in 4.16-rc1, so it got decent testing)\"\n\n* tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/virt/kvm/kvm:\n KVM: x86: Fix pv tlb flush dependencies\n KVM: nVMX: sync vmcs02 segment regs prior to vmx_set_cr0\n KVM: PPC: Book3S HV: Fix duplication of host SLB entries\n" }, { "commit": "bd886137a10542b2c61270b187f5be58d8a05937", "tree": "7b4fef1d57652f98a7a9abc4b61a937c98c6ac8e", "parents": [ "ef82f598a01b497dd243ba20f704e29efffacb09", "771b7bf05339081019d22452ebcab6929372e13e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 30 07:14:35 2018 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 30 07:14:35 2018 -1000" }, "message": "Merge branch \u0027i2c/for-current\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux\n\nPull i2c fix from Wolfram Sang:\n \"A simple but worthwhile I2C driver fix for 4.16\"\n\n* \u0027i2c/for-current\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux:\n i2c: i2c-stm32f7: fix no check on returned setup\n" }, { "commit": "ef82f598a01b497dd243ba20f704e29efffacb09", "tree": "7d7f82f7879a56d04dff1e5ead056811e53306d1", "parents": [ "c2a9838452a4d71f76103c18c926468a9ea05713", "5607dddbfca774fb38bffadcb077fe03aa4ac5c6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 30 07:11:14 2018 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 30 07:11:14 2018 -1000" }, "message": "Merge tag \u0027sound-4.16\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound\n\nPull sound fixes from Takashi Iwai:\n \"Very small fixes (all one-liners) at this time.\n\n One fix is for a PCM core stuff to correct the mmap behavior on\n non-x86. It doesn\u0027t show on most machines but mostly only for exotic\n non-interleaved formats\"\n\n* tag \u0027sound-4.16\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound:\n ALSA: pcm: potential uninitialized return values\n ALSA: pcm: Use dma_bytes as size parameter in dma_mmap_coherent()\n ALSA: usb-audio: Add native DSD support for TEAC UD-301\n" }, { "commit": "f97c3dc3c0e8d23a5c4357d182afeef4c67f5c33", "tree": "da900e635b115f6653c8bf6878295f0aa1b3443d", "parents": [ "52a9692a43b8cbca179d2dd02e714df6f1197932" ], "author": { "name": "Tal Gilboa", "email": "talgi@mellanox.com", "time": "Thu Mar 29 13:53:52 2018 +0300" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 30 12:56:22 2018 -0400" }, "message": "net/dim: Fix int overflow\n\nWhen calculating difference between samples, the values\nare multiplied by 100. Large values may cause int overflow\nwhen multiplied (usually on first iteration).\nFixed by forcing 100 to be of type unsigned long.\n\nFixes: 4c4dbb4a7363 (\"net/mlx5e: Move dynamic interrupt coalescing code to include/linux\")\nSigned-off-by: Tal Gilboa \u003ctalgi@mellanox.com\u003e\nReviewed-by: Andy Gospodarek \u003cgospo@broadcom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "52a9692a43b8cbca179d2dd02e714df6f1197932", "tree": "67df9144cea6262fc7660a1c8cc0556df7bf0a8b", "parents": [ "a9645b273e22662ebea563eae334eb3e4fc6614e", "c769accdf3d8a103940bea2979b65556718567e9" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 30 12:36:28 2018 -0400" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 30 12:36:28 2018 -0400" }, "message": "Merge branch \u0027vlan-fix\u0027\n\nToshiaki Makita says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nFix vlan tag handling for vlan packets without ethernet headers\n\nEric Dumazet reported syzbot found a new bug which leads to underflow of\nsize argument of memmove(), causing crash[1]. This can be triggered by tun\ndevices.\n\nThe underflow happened because skb_vlan_untag() did not expect vlan packets\nwithout ethernet headers, and tun can produce such packets.\nI also checked vlan_insert_inner_tag() and found a similar bug.\n\nThis series fixes these problems.\n\n[1] https://marc.info/?l\u003dlinux-netdev\u0026m\u003d152221753920510\u0026w\u003d2\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c769accdf3d8a103940bea2979b65556718567e9", "tree": "67df9144cea6262fc7660a1c8cc0556df7bf0a8b", "parents": [ "ae4745730cf8e693d354ccd4dbaf59ea440c09a9" ], "author": { "name": "Toshiaki Makita", "email": "makita.toshiaki@lab.ntt.co.jp", "time": "Thu Mar 29 19:05:30 2018 +0900" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 30 12:36:27 2018 -0400" }, "message": "vlan: Fix vlan insertion for packets without ethernet header\n\nIn some situation vlan packets do not have ethernet headers. One example\nis packets from tun devices. Users can specify vlan protocol in tun_pi\nfield instead of IP protocol. When we have a vlan device with reorder_hdr\ndisabled on top of the tun device, such packets from tun devices are\nuntagged in skb_vlan_untag() and vlan headers will be inserted back in\nvlan_insert_inner_tag().\n\nvlan_insert_inner_tag() however did not expect packets without ethernet\nheaders, so in such a case size argument for memmove() underflowed.\n\nWe don\u0027t need to copy headers for packets which do not have preceding\nheaders of vlan headers, so skip memmove() in that case.\nAlso don\u0027t write vlan protocol in skb-\u003edata when it does not have enough\nroom for it.\n\nFixes: cbe7128c4b92 (\"vlan: Fix out of order vlan headers with reorder header off\")\nSigned-off-by: Toshiaki Makita \u003cmakita.toshiaki@lab.ntt.co.jp\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ae4745730cf8e693d354ccd4dbaf59ea440c09a9", "tree": "c2157928759ef68b2a430bba2187cd1aa2eeed1c", "parents": [ "a9645b273e22662ebea563eae334eb3e4fc6614e" ], "author": { "name": "Toshiaki Makita", "email": "makita.toshiaki@lab.ntt.co.jp", "time": "Thu Mar 29 19:05:29 2018 +0900" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 30 12:36:27 2018 -0400" }, "message": "net: Fix untag for vlan packets without ethernet header\n\nIn some situation vlan packets do not have ethernet headers. One example\nis packets from tun devices. Users can specify vlan protocol in tun_pi\nfield instead of IP protocol, and skb_vlan_untag() attempts to untag such\npackets.\n\nskb_vlan_untag() (more precisely, skb_reorder_vlan_header() called by it)\nhowever did not expect packets without ethernet headers, so in such a case\nsize argument for memmove() underflowed and triggered crash.\n\n\u003d\u003d\u003d\u003d\nBUG: unable to handle kernel paging request at ffff8801cccb8000\nIP: __memmove+0x24/0x1a0 arch/x86/lib/memmove_64.S:43\nPGD 9cee067 P4D 9cee067 PUD 1d9401063 PMD 1cccb7063 PTE 2810100028101\nOops: 000b [#1] SMP KASAN\nDumping ftrace buffer:\n (ftrace buffer empty)\nModules linked in:\nCPU: 1 PID: 17663 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #368\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nRIP: 0010:__memmove+0x24/0x1a0 arch/x86/lib/memmove_64.S:43\nRSP: 0018:ffff8801cc046e28 EFLAGS: 00010287\nRAX: ffff8801ccc244c4 RBX: fffffffffffffffe RCX: fffffffffff6c4c2\nRDX: fffffffffffffffe RSI: ffff8801cccb7ffc RDI: ffff8801cccb8000\nRBP: ffff8801cc046e48 R08: ffff8801ccc244be R09: ffffed0039984899\nR10: 0000000000000001 R11: ffffed0039984898 R12: ffff8801ccc244c4\nR13: ffff8801ccc244c0 R14: ffff8801d96b7c06 R15: ffff8801d96b7b40\nFS: 00007febd562d700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: ffff8801cccb8000 CR3: 00000001ccb2f006 CR4: 00000000001606e0\nDR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600\nCall Trace:\n memmove include/linux/string.h:360 [inline]\n skb_reorder_vlan_header net/core/skbuff.c:5031 [inline]\n skb_vlan_untag+0x470/0xc40 net/core/skbuff.c:5061\n __netif_receive_skb_core+0x119c/0x3460 net/core/dev.c:4460\n __netif_receive_skb+0x2c/0x1b0 net/core/dev.c:4627\n netif_receive_skb_internal+0x10b/0x670 net/core/dev.c:4701\n netif_receive_skb+0xae/0x390 net/core/dev.c:4725\n tun_rx_batched.isra.50+0x5ee/0x870 drivers/net/tun.c:1555\n tun_get_user+0x299e/0x3c20 drivers/net/tun.c:1962\n tun_chr_write_iter+0xb9/0x160 drivers/net/tun.c:1990\n call_write_iter include/linux/fs.h:1782 [inline]\n new_sync_write fs/read_write.c:469 [inline]\n __vfs_write+0x684/0x970 fs/read_write.c:482\n vfs_write+0x189/0x510 fs/read_write.c:544\n SYSC_write fs/read_write.c:589 [inline]\n SyS_write+0xef/0x220 fs/read_write.c:581\n do_syscall_64+0x281/0x940 arch/x86/entry/common.c:287\n entry_SYSCALL_64_after_hwframe+0x42/0xb7\nRIP: 0033:0x454879\nRSP: 002b:00007febd562cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001\nRAX: ffffffffffffffda RBX: 00007febd562d6d4 RCX: 0000000000454879\nRDX: 0000000000000157 RSI: 0000000020000180 RDI: 0000000000000014\nRBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff\nR13: 00000000000006b0 R14: 00000000006fc120 R15: 0000000000000000\nCode: 90 90 90 90 90 90 90 48 89 f8 48 83 fa 20 0f 82 03 01 00 00 48 39 fe 7d 0f 49 89 f0 49 01 d0 49 39 f8 0f 8f 9f 00 00 00 48 89 d1 \u003cf3\u003e a4 c3 48 81 fa a8 02 00 00 72 05 40 38 fe 74 3b 48 83 ea 20\nRIP: __memmove+0x24/0x1a0 arch/x86/lib/memmove_64.S:43 RSP: ffff8801cc046e28\nCR2: ffff8801cccb8000\n\u003d\u003d\u003d\u003d\n\nWe don\u0027t need to copy headers for packets which do not have preceding\nheaders of vlan headers, so skip memmove() in that case.\n\nFixes: 4bbb3e0e8239 (\"net: Fix vlan untag for bridge and vlan_dev with reorder_hdr off\")\nReported-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: Toshiaki Makita \u003cmakita.toshiaki@lab.ntt.co.jp\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a9645b273e22662ebea563eae334eb3e4fc6614e", "tree": "45c81fa48d8b731abf52e39098dad3c928cd4468", "parents": [ "74957cbfb7eabe7639a22bd58f45a99bde42fd0c" ], "author": { "name": "Colin Ian King", "email": "colin.king@canonical.com", "time": "Thu Mar 29 00:18:53 2018 +0100" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 30 10:10:04 2018 -0400" }, "message": "atm: iphase: fix spelling mistake: \"Receiverd\" -\u003e \"Received\"\n\nTrivial fix to spelling mistake in message text\n\nSigned-off-by: Colin Ian King \u003ccolin.king@canonical.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "85784f9395987a422fa04263e7c0fb13da11eb5c", "tree": "f8f998acb306c25992468d0a52e9082616b37ea5", "parents": [ "3eb2ce825ea1ad89d20f7a3b5780df850e4be274" ], "author": { "name": "Yan, Zheng", "email": "zyan@redhat.com", "time": "Fri Mar 16 11:22:29 2018 +0800" }, "committer": { "name": "Ilya Dryomov", "email": "idryomov@gmail.com", "time": "Fri Mar 30 11:17:48 2018 +0200" }, "message": "ceph: only dirty ITER_IOVEC pages for direct read\n\nIf a page is already locked, attempting to dirty it leads to a deadlock\nin lock_page(). This is what currently happens to ITER_BVEC pages when\na dio-enabled loop device is backed by ceph:\n\n $ losetup --direct-io /dev/loop0 /mnt/cephfs/img\n $ xfs_io -c \u0027pread 0 4k\u0027 /dev/loop0\n\nFollow other file systems and only dirty ITER_IOVEC pages.\n\nCc: stable@kernel.org\nSigned-off-by: \"Yan, Zheng\" \u003czyan@redhat.com\u003e\nReviewed-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\nSigned-off-by: Ilya Dryomov \u003cidryomov@gmail.com\u003e\n" }, { "commit": "c2a9838452a4d71f76103c18c926468a9ea05713", "tree": "fb576ef0004322e030cd406307169536cfb34bb8", "parents": [ "d89b9f50291a214f9d670594c9fc35483b6d87a4", "da5dadb4f11660ca67580cd4a7420161266d6254" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 29 19:27:12 2018 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 29 19:27:12 2018 -1000" }, "message": "Merge tag \u0027for-4.16/dm-fixes-4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm\n\nPull device mapper fixes from Mike Snitzer:\n\n - Fix a DM multipath regression introduced in a v4.16-rc6 commit:\n restore support for loading, and attaching, scsi_dh modules during\n multipath table load. Otherwise some users may find themselves unable\n to boot, as was reported today:\n\n https://marc.info/?l\u003dlinux-scsi\u0026m\u003d152231276114962\u0026w\u003d2\n\n - Fix a DM core ioctl permission check regression introduced in a\n v4.16-rc5 commit.\n\n* tag \u0027for-4.16/dm-fixes-4\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm:\n dm: fix dropped return code from dm_get_bdev_for_ioctl\n dm mpath: fix support for loading scsi_dh modules during table load\n" }, { "commit": "d89b9f50291a214f9d670594c9fc35483b6d87a4", "tree": "914d2691a3c91008fd06b0326428ab15dde198ff", "parents": [ "ab12762b19ad38d8f4611bbbba16e8562b6a0a98", "84652aefb347297aa08e91e283adf7b18f77c2d5" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 29 19:23:24 2018 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 29 19:23:24 2018 -1000" }, "message": "Merge tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma\n\nPull rdma fixes from Jason Gunthorpe:\n \"It has been fairly silent lately on our -rc front. Big queue of\n patches on the mailing list going to for-next though.\n\n Bug fixes:\n - qedr driver bugfixes causing application hangs, wrong uapi errnos,\n and a race condition\n - three syzkaller found bugfixes in the ucma uapi\n\n Regression fixes for things introduced in 4.16:\n - Crash on error introduced in mlx5 UMR flow\n - Crash on module unload/etc introduced by bad interaction of\n restrack and mlx5 patches this cycle\n - Typo in a two line syzkaller bugfix causing a bad regression\n - Coverity report of nonsense code in hns driver\"\n\n* tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma:\n RDMA/ucma: Introduce safer rdma_addr_size() variants\n RDMA/hns: ensure for-loop actually iterates and free\u0027s buffers\n RDMA/ucma: Check that device exists prior to accessing it\n RDMA/ucma: Check that device is connected prior to access it\n RDMA/rdma_cm: Fix use after free race with process_one_req\n RDMA/qedr: Fix QP state initialization race\n RDMA/qedr: Fix rc initialization on CNQ allocation failure\n RDMA/qedr: fix QP\u0027s ack timeout configuration\n RDMA/ucma: Correct option size check using optlen\n RDMA/restrack: Move restrack_clean to be symmetrical to restrack_init\n IB/mlx5: Don\u0027t clean uninitialized UMR resources\n" }, { "commit": "ab12762b19ad38d8f4611bbbba16e8562b6a0a98", "tree": "5701958bc8b6d349f226c4fdddeee0d2a2beaa8d", "parents": [ "0b412605ef5f5c64b31f19e2910b1d5eba9929c3", "87a73eb5b56fd6e07c8e499fe8608ef2d8912b82" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 29 19:21:29 2018 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Mar 29 19:21:29 2018 -1000" }, "message": "Merge tag \u0027mtd/fixes-for-4.16\u0027 of git://git.infradead.org/linux-mtd\n\nPull MTD fixes from Boris Brezillon:\n \"Two fixes, one in the atmel NAND driver and another one in the\n CFI/JEDEC code.\n\n Summary:\n\n - Fix a bug in Atmel ECC engine driver\n\n - Fix a bug in the CFI/JEDEC driver\"\n\n* tag \u0027mtd/fixes-for-4.16\u0027 of git://git.infradead.org/linux-mtd:\n mtd: jedec_probe: Fix crash in jedec_read_mfr()\n mtd: nand: atmel: Fix get_sectorsize() function\n" }, { "commit": "da5dadb4f11660ca67580cd4a7420161266d6254", "tree": "6dacbd021d8c2d9f494aab81ee8a095fc22664ea", "parents": [ "e457edf0b21c873be827b7c2f6b8e1545485c415" ], "author": { "name": "Mike Snitzer", "email": "snitzer@redhat.com", "time": "Thu Mar 29 23:31:32 2018 -0400" }, "committer": { "name": "Mike Snitzer", "email": "snitzer@redhat.com", "time": "Thu Mar 29 23:31:32 2018 -0400" }, "message": "dm: fix dropped return code from dm_get_bdev_for_ioctl\n\ndm_get_bdev_for_ioctl()\u0027s return of 0 or 1 must be the result from\nprepare_ioctl (1 means the ioctl was issued to a partition, 0 means it\nwasn\u0027t). Unfortunately commit 519049afea (\"dm: use blkdev_get rather\nthan bdgrab when issuing pass-through ioctl\") reused the variable \u0027r\u0027\nto store the return from blkdev_get() that follows prepare_ioctl()\n-- whereby dropping prepare_ioctl()\u0027s result on the floor.\n\nThis can lead to an ioctl or persistent reservation being issued to a\npartition going unnoticed, which implies the extra permission check for\nCAP_SYS_RAWIO is skipped.\n\nFix this by using a different variable to store blkdev_get()\u0027s return.\n\nFixes: 519049afea (\"dm: use blkdev_get rather than bdgrab when issuing pass-through ioctl\")\nReported-by: Alasdair G Kergon \u003cagk@redhat.com\u003e\nSigned-off-by: Mike Snitzer \u003csnitzer@redhat.com\u003e\n" }, { "commit": "74957cbfb7eabe7639a22bd58f45a99bde42fd0c", "tree": "1cd16acb999bea8de6e8b008c1a4819da851b6c3", "parents": [ "d65026c6c62e7d9616c8ceb5a53b68bcdc050525", "e8a4796ee2954db9f7e9b52e5fbc66ef876752f6" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 29 21:49:19 2018 -0400" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 29 21:49:19 2018 -0400" }, "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf\n\nDaniel Borkman says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\npull-request: bpf 2018-03-29\n\nThe following pull-request contains BPF updates for your *net* tree.\n\nThe main changes are:\n\n1) Fix nfp to properly check max insn count while emitting\n instructions in the JIT which was wrongly comparing bytes\n against number of instructions before, from Jakub.\n\n2) Fix for bpftool to avoid usage of hex numbers in JSON\n output since JSON doesn\u0027t accept hex numbers with 0x\n prefix, also from Jakub.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e457edf0b21c873be827b7c2f6b8e1545485c415", "tree": "7c4e9c4264630804c3a9addca82e6183bfa389f7", "parents": [ "8c5c147339d2e201108169327b1f99aa6d57d2cd" ], "author": { "name": "Mike Snitzer", "email": "snitzer@redhat.com", "time": "Thu Mar 29 11:50:10 2018 -0400" }, "committer": { "name": "Mike Snitzer", "email": "snitzer@redhat.com", "time": "Thu Mar 29 17:00:44 2018 -0400" }, "message": "dm mpath: fix support for loading scsi_dh modules during table load\n\nThe ability to have multipath dynamically attach a scsi_dh, that the user\nspecified in the multipath table, was broken by commit e8f74a0f00 (\"dm\nmpath: eliminate need to use scsi_device_from_queue\").\n\nRestore the ability to load, and attach, a particular scsi_dh module if\none is specified (as noticed by checking m-\u003ehw_handler_name).\n\nFixes: e8f74a0f00 (\"dm mpath: eliminate need to use scsi_device_from_queue\")\nReported-by: Paul Mackerras \u003cpaulus@ozlabs.org\u003e\nSigned-off-by: Mike Snitzer \u003csnitzer@redhat.com\u003e\n" }, { "commit": "d65026c6c62e7d9616c8ceb5a53b68bcdc050525", "tree": "dccd59dd04aef986186afb3bb4ff279bebe245b7", "parents": [ "58f101bf87e32753342a6924772c6ebb0fbde24a" ], "author": { "name": "Jason Wang", "email": "jasowang@redhat.com", "time": "Thu Mar 29 16:00:04 2018 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 29 16:22:47 2018 -0400" }, "message": "vhost: validate log when IOTLB is enabled\n\nVq log_base is the userspace address of bitmap which has nothing to do\nwith IOTLB. So it needs to be validated unconditionally otherwise we\nmay try use 0 as log_base which may lead to pin pages that will lead\nunexpected result (e.g trigger BUG_ON() in set_bit_to_user()).\n\nFixes: 6b1e6cc7855b0 (\"vhost: new device IOTLB API\")\nReported-by: syzbot+6304bf97ef436580fede@syzkaller.appspotmail.com\nSigned-off-by: Jason Wang \u003cjasowang@redhat.com\u003e\nAcked-by: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "58f101bf87e32753342a6924772c6ebb0fbde24a", "tree": "2b10c0caac6be96161356df12ada55582bd7fac8", "parents": [ "f03dbb06dc380274e351ca4b1ee1587ed4529e62" ], "author": { "name": "Manish Chopra", "email": "manish.chopra@cavium.com", "time": "Wed Mar 28 03:35:52 2018 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 29 14:32:15 2018 -0400" }, "message": "qede: Do not drop rx-checksum invalidated packets.\n\nToday, driver drops received packets which are indicated as\ninvalid checksum by the device. Instead of dropping such packets,\npass them to the stack with CHECKSUM_NONE indication in skb.\n\nSigned-off-by: Ariel Elior \u003cariel.elior@cavium.com\u003e\nSigned-off-by: Manish Chopra \u003cmanish.chopra@cavium.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "87a73eb5b56fd6e07c8e499fe8608ef2d8912b82", "tree": "3f59cd80398ed0f46b199742c5e905e249c74215", "parents": [ "2b1b1b4ac716fd929a2d221bd4ade62263bed915" ], "author": { "name": "Linus Walleij", "email": "linus.walleij@linaro.org", "time": "Sat Mar 03 23:29:03 2018 +0100" }, "committer": { "name": "Boris Brezillon", "email": "boris.brezillon@bootlin.com", "time": "Thu Mar 29 19:29:06 2018 +0200" }, "message": "mtd: jedec_probe: Fix crash in jedec_read_mfr()\n\nIt turns out that the loop where we read manufacturer\njedec_read_mfd() can under some circumstances get a\nCFI_MFR_CONTINUATION repeatedly, making the loop go\nover all banks and eventually hit the end of the\nmap and crash because of an access violation:\n\nUnable to handle kernel paging request at virtual address c4980000\npgd \u003d (ptrval)\n[c4980000] *pgd\u003d03808811, *pte\u003d00000000, *ppte\u003d00000000\nInternal error: Oops: 7 [#1] PREEMPT ARM\nCPU: 0 PID: 1 Comm: swapper Not tainted 4.16.0-rc1+ #150\nHardware name: Gemini (Device Tree)\nPC is at jedec_probe_chip+0x6ec/0xcd0\nLR is at 0x4\npc : [\u003cc03a2bf4\u003e] lr : [\u003c00000004\u003e] psr: 60000013\nsp : c382dd18 ip : 0000ffff fp : 00000000\nr10: c0626388 r9 : 00020000 r8 : c0626340\nr7 : 00000000 r6 : 00000001 r5 : c3a71afc r4 : c382dd70\nr3 : 00000001 r2 : c4900000 r1 : 00000002 r0 : 00080000\nFlags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none\nControl: 0000397f Table: 00004000 DAC: 00000053\nProcess swapper (pid: 1, stack limit \u003d 0x(ptrval))\n\nFix this by breaking the loop with a return 0 if\nthe offset exceeds the map size.\n\nFixes: 5c9c11e1c47c (\"[MTD] [NOR] Add support for flash chips with ID in bank other than 0\")\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Linus Walleij \u003clinus.walleij@linaro.org\u003e\nSigned-off-by: Boris Brezillon \u003cboris.brezillon@bootlin.com\u003e\n" }, { "commit": "2b1b1b4ac716fd929a2d221bd4ade62263bed915", "tree": "6aeb6b78909ca2bac8a3826a1d1a4d8b1480805b", "parents": [ "3eb2ce825ea1ad89d20f7a3b5780df850e4be274" ], "author": { "name": "Boris Brezillon", "email": "boris.brezillon@bootlin.com", "time": "Tue Mar 27 19:01:58 2018 +0200" }, "committer": { "name": "Boris Brezillon", "email": "boris.brezillon@bootlin.com", "time": "Thu Mar 29 19:29:06 2018 +0200" }, "message": "mtd: nand: atmel: Fix get_sectorsize() function\n\nget_sectorsize() was not using the appropriate macro to extract the\nECC sector size from the config cache, which led to buggy ECC when\nusing 1024 byte sectors.\n\nFixes: f88fc122cc34 (\"mtd: nand: Cleanup/rework the atmel_nand driver\")\nCc: \u003cstable@vger.kernel.org\u003e\nReported-by: Olivier Schonken \u003colivier.schonken@gmail.com\u003e\nSigned-off-by: Boris Brezillon \u003cboris.brezillon@bootlin.com\u003e\nReviewed-by: Richard Weinberger \u003crichard@nod.at\u003e\nAcked-by: Nicolas Ferre \u003cnicolas.ferre@microchip.com\u003e\nTested-by: Olivier Schonken \u003colivier.schonken@gmail.com\u003e\n" }, { "commit": "f03dbb06dc380274e351ca4b1ee1587ed4529e62", "tree": "4eb44328d5d95796eef10bd3c17a25fbb1bde3ba", "parents": [ "5568cdc368c349eee7b5fc48bc956234a0828d71" ], "author": { "name": "Stephen Hemminger", "email": "stephen@networkplumber.org", "time": "Tue Mar 27 11:28:48 2018 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 29 11:45:06 2018 -0400" }, "message": "hv_netvsc: enable multicast if necessary\n\nMy recent change to netvsc drive in how receive flags are handled\nbroke multicast. The Hyper-v/Azure virtual interface there is not a\nmulticast filter list, filtering is only all or none. The driver must\nenable all multicast if any multicast address is present.\n\nFixes: 009f766ca238 (\"hv_netvsc: filter multicast/broadcast\")\nSigned-off-by: Stephen Hemminger \u003csthemmin@microsoft.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "5568cdc368c349eee7b5fc48bc956234a0828d71", "tree": "504f8fa0ce3f02fb51d09fe095849e0cc816a6e6", "parents": [ "2d2d99ec13f62d5d2cecb6169dfdb6bbe05356d0" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 29 11:42:14 2018 -0400" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 29 11:42:14 2018 -0400" }, "message": "ip_tunnel: Resolve ipsec merge conflict properly.\n\nWe want to use dev_set_mtu() regardless of how we calculate\nthe mtu value.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2d2d99ec13f62d5d2cecb6169dfdb6bbe05356d0", "tree": "48c5749ff0cf7fc0ff4434c092a9b16d686578c8", "parents": [ "020295d95e13478ecbbbe2f44398ed4b4edb28df" ], "author": { "name": "Raghuram Chary J", "email": "raghuramchary.jallipalli@microchip.com", "time": "Tue Mar 27 14:51:16 2018 +0530" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 29 11:35:51 2018 -0400" }, "message": "lan78xx: Crash in lan78xx_writ_reg (Workqueue: events lan78xx_deferred_multicast_write)\n\nDescription:\nCrash was reported with syzkaller pointing to lan78xx_write_reg routine.\n\nRoot-cause:\nProper cleanup of workqueues and init/setup routines was not happening\nin failure conditions.\n\nFix:\nHandled the error conditions by cleaning up the queues and init/setup\nroutines.\n\nFixes: 55d7de9de6c3 (\"Microchip\u0027s LAN7800 family USB 2/3 to 10/100/1000 Ethernet device driver\")\nReported-by: Andrey Konovalov \u003candreyknvl@google.com\u003e\nSigned-off-by: Raghuram Chary J \u003craghuramchary.jallipalli@microchip.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "020295d95e13478ecbbbe2f44398ed4b4edb28df", "tree": "a683dd5e1661c6e0a83622f69cfc60afd45133ab", "parents": [ "b9fc828debc8ac2bb21b5819a44d2aea456f1c95", "9a3fb9fb84cc30577c1b012a6a3efda944684291" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 29 10:12:47 2018 -0400" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 29 10:12:47 2018 -0400" }, "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec\n\nSteffen Klassert says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\npull request (net): ipsec 2018-03-29\n\n1) Fix a rcu_read_lock/rcu_read_unlock imbalance\n in the error path of xfrm_local_error().\n From Taehee Yoo.\n\n2) Some VTI MTU fixes. From Stefano Brivio.\n\n3) Fix a too early overwritten skb control buffer\n on xfrm transport mode.\n\nPlease note that this pull request has a merge conflict\nin net/ipv4/ip_tunnel.c.\n\nThe conflict is between\n\ncommit f6cc9c054e77 (\"ip_tunnel: Emit events for post-register MTU changes\")\n\nfrom the net tree and\n\ncommit 24fc79798b8d (\"ip_tunnel: Clamp MTU to bounds on new link\")\n\nfrom the ipsec tree.\n\nIt can be solved as it is currently done in linux-next.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0b412605ef5f5c64b31f19e2910b1d5eba9929c3", "tree": "2053ec8f2e998d298e234c1edd8a1560a8ff80e1", "parents": [ "68b8dffce68e8cae208a891c4833c7a7990bf2c4", "ef55d1538dfb823a4475bd690f78b5edc0d2a6fd" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 28 15:07:23 2018 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 28 15:07:23 2018 -1000" }, "message": "Merge tag \u0027drm-fixes-for-v4.16-rc8\u0027 of git://people.freedesktop.org/~airlied/linux\n\nPull drm fixes from Dave Airlie:\n \"Nothing serious, two amdkfd and two tegra fixes\"\n\n* tag \u0027drm-fixes-for-v4.16-rc8\u0027 of git://people.freedesktop.org/~airlied/linux:\n drm/tegra: dc: Using NULL instead of plain integer\n drm/amdkfd: Deallocate SDMA queues correctly\n drm/amdkfd: Fix scratch memory with HWS enabled\n drm/tegra: dc: Use correct format array for Tegra124\n" }, { "commit": "28913ee8191adf4bbc01cbfb9ee18cca782ab141", "tree": "d66a9f0ecb5b8fd36909e682f0839a1e1d05bcca", "parents": [ "8a6105c4818cdc4a5c6b8a99c98ab7cc43be1ba8" ], "author": { "name": "Masahiro Yamada", "email": "yamada.masahiro@socionext.com", "time": "Thu Mar 29 09:24:28 2018 +0900" }, "committer": { "name": "Masahiro Yamada", "email": "yamada.masahiro@socionext.com", "time": "Thu Mar 29 09:42:32 2018 +0900" }, "message": "netfilter: nf_nat_snmp_basic: add correct dependency to Makefile\n\nnf_nat_snmp_basic_main.c includes a generated header, but the\nnecessary dependency is missing in Makefile. This could cause\nbuild error in parallel building.\n\nRemove a weird line, and add a correct one.\n\nFixes: cc2d58634e0f (\"netfilter: nf_nat_snmp_basic: use asn1 decoder library\")\nReported-by: Stephen Rothwell \u003csfr@canb.auug.org.au\u003e\nSigned-off-by: Masahiro Yamada \u003cyamada.masahiro@socionext.com\u003e\n" }, { "commit": "68b8dffce68e8cae208a891c4833c7a7990bf2c4", "tree": "3e3ccd87d88475a6fe8b31b8e63854b811234be6", "parents": [ "a2601d78b77aacc5dd790f488188f9556f4a9eb2", "18bd49043caa8b272649d4868c29133eb0a3d143" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 28 14:34:55 2018 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 28 14:34:55 2018 -1000" }, "message": "Merge branch \u0027akpm\u0027 (patches from Andrew)\n\nMerge misc fixes from Andrew Morton:\n \"8 fixes\"\n\n* emailed patches from Andrew Morton \u003cakpm@linux-foundation.org\u003e:\n MAINTAINERS: demote ARM port to \"odd fixes\"\n MAINTAINERS: correct rmk\u0027s email address\n mm/kmemleak.c: wait for scan completion before disabling free\n mm/memcontrol.c: fix parameter description mismatch\n mm/vmstat.c: fix vmstat_update() preemption BUG\n mm/page_owner: fix recursion bug after changing skip entries\n ipc/shm.c: add split function to shm_vm_ops\n mm, slab: memcg_link the SLAB\u0027s kmem_cache\n" }, { "commit": "ef55d1538dfb823a4475bd690f78b5edc0d2a6fd", "tree": "ec50f06947491c4914c44daeb3af93ad9c41a79a", "parents": [ "97130968839a2928869a2d25500b5855017aac7d", "ef1b204a7024de1a813a7bf7d68c45fac9b9d1a3" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Thu Mar 29 09:57:09 2018 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Thu Mar 29 09:57:09 2018 +1000" }, "message": "Merge tag \u0027drm/tegra/for-4.16-fixes\u0027 of git://anongit.freedesktop.org/tegra/linux into drm-fixes\n\ndrm/tegra: Fixes for v4.16\n\nThis contains two small fixes, one which fixes a typo that causes a\ncrash with the new framebuffer modifier query support and another that\nfixes a build warning.\n\n* tag \u0027drm/tegra/for-4.16-fixes\u0027 of git://anongit.freedesktop.org/tegra/linux:\n drm/tegra: dc: Using NULL instead of plain integer\n drm/tegra: dc: Use correct format array for Tegra124\n" }, { "commit": "a2601d78b77aacc5dd790f488188f9556f4a9eb2", "tree": "26c9e699a0570edd4018987ee24bfce439a730eb", "parents": [ "616d8cf0fa0bc6528d827b1ef94f657039f3fa5e", "52396500f97c53860164debc7d4f759077853423" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 28 13:54:03 2018 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 28 13:54:03 2018 -1000" }, "message": "Merge tag \u0027powerpc-4.16-6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux\n\nPull powerpc fixes from Michael Ellerman:\n \"Some more powerpc fixes for 4.16. Apologies if this is a bit big at\n rc7, but they\u0027re all reasonably important fixes. None are actually for\n new code, so they aren\u0027t indicative of 4.16 being in bad shape from\n our point of view.\n\n - Fix missing AT_BASE_PLATFORM (in auxv) when we\u0027re using a new\n firmware interface for describing CPU features.\n\n - Fix lost pending interrupts due to a race in our interrupt\n soft-masking code.\n\n - A workaround for a nest MMU bug with TLB invalidations on Power9.\n\n - A workaround for broadcast TLB invalidations on Power9.\n\n - Fix a bug in our instruction SLB miss handler, when handling bad\n addresses (eg. \u003e\u003d TASK_SIZE), which could corrupt non-volatile user\n GPRs.\n\n Thanks to: Aneesh Kumar K.V, Balbir Singh, Benjamin Herrenschmidt,\n Nicholas Piggin\"\n\n* tag \u0027powerpc-4.16-6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:\n powerpc/64s: Fix i-side SLB miss bad address handler saving nonvolatile GPRs\n powerpc/mm: Fixup tlbie vs store ordering issue on POWER9\n powerpc/mm/radix: Move the functions that does the actual tlbie closer\n powerpc/mm/radix: Remove unused code\n powerpc/mm: Workaround Nest MMU bug with TLB invalidations\n powerpc/mm: Add tracking of the number of coprocessors using a context\n powerpc/64s: Fix lost pending interrupt due to race causing lost update to irq_happened\n powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features\n" }, { "commit": "616d8cf0fa0bc6528d827b1ef94f657039f3fa5e", "tree": "6413bc3674673b153a8386fba0560080e1157e2b", "parents": [ "d2b35e0042681791815a2fa90213fd4d21992c56", "bbad2093dfa76f4c3dcc8ab6b89249affe72f851" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 28 13:52:13 2018 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 28 13:52:13 2018 -1000" }, "message": "Merge tag \u0027armsoc-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc\n\nPull ARM SoC fixes from Arnd Bergmann:\n \"Here are are a couple of last-minute fixes for 4.16, mostly for\n regressions. As usual, the majory are device tree changes:\n\n - USB 3 support on rk3399 didn\u0027t work and is being reverted for now\n\n - One fix for an old suspend/resume bug on rk3399\n\n - A few regulator related fixes on Banana Pi M2, and on imx7d-sdb\n\n - A boot regression fix for all Aspeed SoCs failing to find their\n memory\n\n - One more dtc warning fix\n\n The other changes are:\n\n - A few updates to the MAINTAINERS file\n\n - A revert for an incorrect orion5x cleanup\n\n - Two power management fixes for OMAP\"\n\n* tag \u0027armsoc-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc:\n ARM: OMAP: Fix SRAM W+X mapping\n ARM: dts: aspeed: Add default memory node\n mailmap: Update email address for Gregory CLEMENT\n ARM: davinci: fix the GPIO lookup for omapl138-hawk\n MAINTAINERS: Update Tegra IOMMU maintainer\n ARM: dts: imx7d-sdb: Fix regulator-usb-otg2-vbus node name\n ARM: ux500: Fix PMU IRQ regression\n ARM: dts: rockchip: Add missing #sound-dai-cells on rk3288\n Revert \"arm64: dts: rockchip: add usb3-phy otg-port support for rk3399\"\n arm64: dts: rockchip: Fix rk3399-gru-* s2r (pinctrl hogs, wifi reset)\n ARM: OMAP: Fix dmtimer init for omap1\n MAINTAINERS: update email address for Maxime Ripard\n ARM: dts: sun6i: a31s: bpi-m2: add missing regulators\n ARM: dts: sun6i: a31s: bpi-m2: improve pmic properties\n" }, { "commit": "18bd49043caa8b272649d4868c29133eb0a3d143", "tree": "b4f5cd9c5e14029955fa3c17378f4be0bbf84f50", "parents": [ "5b634e8e387372091cad237b6317b26add734555" ], "author": { "name": "Russell King", "email": "rmk+kernel@armlinux.org.uk", "time": "Wed Mar 28 16:01:22 2018 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 28 13:42:06 2018 -1000" }, "message": "MAINTAINERS: demote ARM port to \"odd fixes\"\n\nAs of the start of 2018, I am no longer paid to support the core 32-bit\nARM architecture code. This means that this code is no longer\ncommercially supported, and is now only supported through voluntary\neffort.\n\nI will continue to merge patches as and when able, but this will be at a\nlower priority than before (which means a longer latency.) I have also\nbe scaled back the amount of time spent reading email, so email that is\nintended for my attention needs to make itself plainly obvious, or I\nwill miss it.\n\nIn an attempt to reduce the amount of email Cc\u0027d to me, exclude\narch/arm/boot/dts from the maintainers patterns, but add entries for the\nSolidRun platforms I look after.\n\nLink: http://lkml.kernel.org/r/E1ezkgn-0002fO-52@rmk-PC.armlinux.org.uk\nSigned-off-by: Russell King \u003crmk+kernel@armlinux.org.uk\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "5b634e8e387372091cad237b6317b26add734555", "tree": "ef55581ca6619893c0d2ee32d4085dd6c27eb013", "parents": [ "914b6dfff790544d9b77dfd1723adb3745ec9700" ], "author": { "name": "Russell King", "email": "rmk+kernel@armlinux.org.uk", "time": "Wed Mar 28 16:01:19 2018 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 28 13:42:05 2018 -1000" }, "message": "MAINTAINERS: correct rmk\u0027s email address\n\nCorrect my email address in the MAINTAINTERS file.\n\nLink: http://lkml.kernel.org/r/E1ezkgi-0002fH-01@rmk-PC.armlinux.org.uk\nSigned-off-by: Russell King \u003crmk+kernel@armlinux.org.uk\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "914b6dfff790544d9b77dfd1723adb3745ec9700", "tree": "b82ce8d72d056642a749d72c866be4936cf059cf", "parents": [ "b213b54fbf9d282dc545252313d727f3972be8e0" ], "author": { "name": "Vinayak Menon", "email": "vinmenon@codeaurora.org", "time": "Wed Mar 28 16:01:16 2018 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 28 13:42:05 2018 -1000" }, "message": "mm/kmemleak.c: wait for scan completion before disabling free\n\nA crash is observed when kmemleak_scan accesses the object-\u003epointer,\nlikely due to the following race.\n\n TASK A TASK B TASK C\n kmemleak_write\n (with \"scan\" and\n NOT \"scan\u003don\")\n kmemleak_scan()\n create_object\n kmem_cache_alloc fails\n kmemleak_disable\n kmemleak_do_cleanup\n kmemleak_free_enabled \u003d 0\n kfree\n kmemleak_free bails out\n (kmemleak_free_enabled is 0)\n slub frees object-\u003epointer\n update_checksum\n crash - object-\u003epointer\n freed (DEBUG_PAGEALLOC)\n\nkmemleak_do_cleanup waits for the scan thread to complete, but not for\ndirect call to kmemleak_scan via kmemleak_write. So add a wait for\nkmemleak_scan completion before disabling kmemleak_free, and while at it\nfix the comment on stop_scan_thread.\n\n[vinmenon@codeaurora.org: fix stop_scan_thread comment]\n Link: http://lkml.kernel.org/r/1522219972-22809-1-git-send-email-vinmenon@codeaurora.org\nLink: http://lkml.kernel.org/r/1522063429-18992-1-git-send-email-vinmenon@codeaurora.org\nSigned-off-by: Vinayak Menon \u003cvinmenon@codeaurora.org\u003e\nReviewed-by: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "b213b54fbf9d282dc545252313d727f3972be8e0", "tree": "b7baa913c0e8ff9c3c2f48bc00d5d4bae4f10fab", "parents": [ "c7f26ccfb2c31eb1bf810ba13d044fcf583232db" ], "author": { "name": "Honglei Wang", "email": "honglei.wang@oracle.com", "time": "Wed Mar 28 16:01:12 2018 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 28 13:42:05 2018 -1000" }, "message": "mm/memcontrol.c: fix parameter description mismatch\n\nThere are a couple of places where parameter description and function\nname do not match the actual code. Fix it.\n\nLink: http://lkml.kernel.org/r/1520843448-17347-1-git-send-email-honglei.wang@oracle.com\nSigned-off-by: Honglei Wang \u003chonglei.wang@oracle.com\u003e\nAcked-by: Tejun Heo \u003ctj@kernel.org\u003e\nCc: Johannes Weiner \u003channes@cmpxchg.org\u003e\nCc: Michal Hocko \u003cmhocko@kernel.org\u003e\nCc: Vladimir Davydov \u003cvdavydov.dev@gmail.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "c7f26ccfb2c31eb1bf810ba13d044fcf583232db", "tree": "394207a8faa79d45f9d0a85b9fc90af19d65eca3", "parents": [ "299815a4fba9f3c7a81434dba0072148f1690608" ], "author": { "name": "Steven J. Hill", "email": "steven.hill@cavium.com", "time": "Wed Mar 28 16:01:09 2018 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 28 13:42:05 2018 -1000" }, "message": "mm/vmstat.c: fix vmstat_update() preemption BUG\n\nAttempting to hotplug CPUs with CONFIG_VM_EVENT_COUNTERS enabled can\ncause vmstat_update() to report a BUG due to preemption not being\ndisabled around smp_processor_id().\n\nDiscovered on Ubiquiti EdgeRouter Pro with Cavium Octeon II processor.\n\n BUG: using smp_processor_id() in preemptible [00000000] code:\n kworker/1:1/269\n caller is vmstat_update+0x50/0xa0\n CPU: 0 PID: 269 Comm: kworker/1:1 Not tainted\n 4.16.0-rc4-Cavium-Octeon-00009-gf83bbd5-dirty #1\n Workqueue: mm_percpu_wq vmstat_update\n Call Trace:\n show_stack+0x94/0x128\n dump_stack+0xa4/0xe0\n check_preemption_disabled+0x118/0x120\n vmstat_update+0x50/0xa0\n process_one_work+0x144/0x348\n worker_thread+0x150/0x4b8\n kthread+0x110/0x140\n ret_from_kernel_thread+0x14/0x1c\n\nLink: http://lkml.kernel.org/r/1520881552-25659-1-git-send-email-steven.hill@cavium.com\nSigned-off-by: Steven J. Hill \u003csteven.hill@cavium.com\u003e\nReviewed-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nCc: Tejun Heo \u003chtejun@gmail.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "299815a4fba9f3c7a81434dba0072148f1690608", "tree": "3475fab8b3c15a02296315de07f13ff16f09da50", "parents": [ "3d942ee079b917b24e2a0c5f18d35ac8ec9fee48" ], "author": { "name": "Maninder Singh", "email": "maninder1.s@samsung.com", "time": "Wed Mar 28 16:01:05 2018 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 28 13:42:05 2018 -1000" }, "message": "mm/page_owner: fix recursion bug after changing skip entries\n\nThis patch fixes commit 5f48f0bd4e36 (\"mm, page_owner: skip unnecessary\nstack_trace entries\").\n\nBecause if we skip first two entries then logic of checking count value\nas 2 for recursion is broken and code will go in one depth recursion.\n\nso we need to check only one call of _RET_IP(__set_page_owner) while\nchecking for recursion.\n\nCurrent Backtrace while checking for recursion:-\n\n (save_stack) from (__set_page_owner) // (But recursion returns true here)\n (__set_page_owner) from (get_page_from_freelist)\n (get_page_from_freelist) from (__alloc_pages_nodemask)\n (__alloc_pages_nodemask) from (depot_save_stack)\n (depot_save_stack) from (save_stack) // recursion should return true here\n (save_stack) from (__set_page_owner)\n (__set_page_owner) from (get_page_from_freelist)\n (get_page_from_freelist) from (__alloc_pages_nodemask+)\n (__alloc_pages_nodemask) from (depot_save_stack)\n (depot_save_stack) from (save_stack)\n (save_stack) from (__set_page_owner)\n (__set_page_owner) from (get_page_from_freelist)\n\nCorrect Backtrace with fix:\n\n (save_stack) from (__set_page_owner) // recursion returned true here\n (__set_page_owner) from (get_page_from_freelist)\n (get_page_from_freelist) from (__alloc_pages_nodemask+)\n (__alloc_pages_nodemask) from (depot_save_stack)\n (depot_save_stack) from (save_stack)\n (save_stack) from (__set_page_owner)\n (__set_page_owner) from (get_page_from_freelist)\n\nLink: http://lkml.kernel.org/r/1521607043-34670-1-git-send-email-maninder1.s@samsung.com\nFixes: 5f48f0bd4e36 (\"mm, page_owner: skip unnecessary stack_trace entries\")\nSigned-off-by: Maninder Singh \u003cmaninder1.s@samsung.com\u003e\nSigned-off-by: Vaneet Narang \u003cv.narang@samsung.com\u003e\nAcked-by: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: Michal Hocko \u003cmhocko@suse.com\u003e\nCc: Oscar Salvador \u003cosalvador@techadventures.net\u003e\nCc: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nCc: Ayush Mittal \u003cayush.m@samsung.com\u003e\nCc: Prakash Gupta \u003cguptap@codeaurora.org\u003e\nCc: Vinayak Menon \u003cvinmenon@codeaurora.org\u003e\nCc: Vasyl Gomonovych \u003cgomonovych@gmail.com\u003e\nCc: Amit Sahrawat \u003ca.sahrawat@samsung.com\u003e\nCc: \u003cpankaj.m@samsung.com\u003e\nCc: Vaneet Narang \u003cv.narang@samsung.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "3d942ee079b917b24e2a0c5f18d35ac8ec9fee48", "tree": "4b1e5a9ee4fe3ff1a9c03fd25ab10ae64a9926f1", "parents": [ "880cd276dff17ea29e9a8404275c9502b265afa7" ], "author": { "name": "Mike Kravetz", "email": "mike.kravetz@oracle.com", "time": "Wed Mar 28 16:01:01 2018 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 28 13:42:05 2018 -1000" }, "message": "ipc/shm.c: add split function to shm_vm_ops\n\nIf System V shmget/shmat operations are used to create a hugetlbfs\nbacked mapping, it is possible to munmap part of the mapping and split\nthe underlying vma such that it is not huge page aligned. This will\nuntimately result in the following BUG:\n\n kernel BUG at /build/linux-jWa1Fv/linux-4.15.0/mm/hugetlb.c:3310!\n Oops: Exception in kernel mode, sig: 5 [#1]\n LE SMP NR_CPUS\u003d2048 NUMA PowerNV\n Modules linked in: kcm nfc af_alg caif_socket caif phonet fcrypt\n CPU: 18 PID: 43243 Comm: trinity-subchil Tainted: G C E 4.15.0-10-generic #11-Ubuntu\n NIP: c00000000036e764 LR: c00000000036ee48 CTR: 0000000000000009\n REGS: c000003fbcdcf810 TRAP: 0700 Tainted: G C E (4.15.0-10-generic)\n MSR: 9000000000029033 \u003cSF,HV,EE,ME,IR,DR,RI,LE\u003e CR: 24002222 XER: 20040000\n CFAR: c00000000036ee44 SOFTE: 1\n NIP __unmap_hugepage_range+0xa4/0x760\n LR __unmap_hugepage_range_final+0x28/0x50\n Call Trace:\n 0x7115e4e00000 (unreliable)\n __unmap_hugepage_range_final+0x28/0x50\n unmap_single_vma+0x11c/0x190\n unmap_vmas+0x94/0x140\n exit_mmap+0x9c/0x1d0\n mmput+0xa8/0x1d0\n do_exit+0x360/0xc80\n do_group_exit+0x60/0x100\n SyS_exit_group+0x24/0x30\n system_call+0x58/0x6c\n ---[ end trace ee88f958a1c62605 ]---\n\nThis bug was introduced by commit 31383c6865a5 (\"mm, hugetlbfs:\nintroduce -\u003esplit() to vm_operations_struct\"). A split function was\nadded to vm_operations_struct to determine if a mapping can be split.\nThis was mostly for device-dax and hugetlbfs mappings which have\nspecific alignment constraints.\n\nMappings initiated via shmget/shmat have their original vm_ops\noverwritten with shm_vm_ops. shm_vm_ops functions will call back to the\noriginal vm_ops if needed. Add such a split function to shm_vm_ops.\n\nLink: http://lkml.kernel.org/r/20180321161314.7711-1-mike.kravetz@oracle.com\nFixes: 31383c6865a5 (\"mm, hugetlbfs: introduce -\u003esplit() to vm_operations_struct\")\nSigned-off-by: Mike Kravetz \u003cmike.kravetz@oracle.com\u003e\nReported-by: Laurent Dufour \u003cldufour@linux.vnet.ibm.com\u003e\nReviewed-by: Laurent Dufour \u003cldufour@linux.vnet.ibm.com\u003e\nTested-by: Laurent Dufour \u003cldufour@linux.vnet.ibm.com\u003e\nReviewed-by: Dan Williams \u003cdan.j.williams@intel.com\u003e\nAcked-by: Michal Hocko \u003cmhocko@suse.com\u003e\nCc: Davidlohr Bueso \u003cdave@stgolabs.net\u003e\nCc: Manfred Spraul \u003cmanfred@colorfullife.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "880cd276dff17ea29e9a8404275c9502b265afa7", "tree": "535ad8d555b7ef5ed33f8dc9fdb73ec50d53ed54", "parents": [ "3eb2ce825ea1ad89d20f7a3b5780df850e4be274" ], "author": { "name": "Shakeel Butt", "email": "shakeelb@google.com", "time": "Wed Mar 28 16:00:57 2018 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 28 13:42:05 2018 -1000" }, "message": "mm, slab: memcg_link the SLAB\u0027s kmem_cache\n\nAll the root caches are linked into slab_root_caches which was\nintroduced by the commit 510ded33e075 (\"slab: implement slab_root_caches\nlist\") but it missed to add the SLAB\u0027s kmem_cache.\n\nWhile experimenting with opt-in/opt-out kmem accounting, I noticed\nsystem crashes due to NULL dereference inside cache_from_memcg_idx()\nwhile deferencing kmem_cache.memcg_params.memcg_caches. The upstream\nclean kernel will not see these crashes but SLAB should be consistent\nwith SLUB which does linked its boot caches (kmem_cache_node and\nkmem_cache) into slab_root_caches.\n\nLink: http://lkml.kernel.org/r/20180319210020.60289-1-shakeelb@google.com\nFixes: 510ded33e075c (\"slab: implement slab_root_caches list\")\nSigned-off-by: Shakeel Butt \u003cshakeelb@google.com\u003e\nCc: Tejun Heo \u003ctj@kernel.org\u003e\nCc: Vladimir Davydov \u003cvdavydov.dev@gmail.com\u003e\nCc: Greg Thelen \u003cgthelen@google.com\u003e\nCc: Christoph Lameter \u003ccl@linux.com\u003e\nCc: Pekka Enberg \u003cpenberg@kernel.org\u003e\nCc: David Rientjes \u003crientjes@google.com\u003e\nCc: Joonsoo Kim \u003ciamjoonsoo.kim@lge.com\u003e\nCc: Johannes Weiner \u003channes@cmpxchg.org\u003e\nCc: Michal Hocko \u003cmhocko@kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "84652aefb347297aa08e91e283adf7b18f77c2d5", "tree": "5a9538958172b51acede91f452829623b804a41d", "parents": [ "38759d6175d338fbf9282c8ea2b51f3b7ab9bc98" ], "author": { "name": "Roland Dreier", "email": "roland@purestorage.com", "time": "Wed Mar 28 11:27:22 2018 -0700" }, "committer": { "name": "Jason Gunthorpe", "email": "jgg@mellanox.com", "time": "Wed Mar 28 16:13:36 2018 -0600" }, "message": "RDMA/ucma: Introduce safer rdma_addr_size() variants\n\nThere are several places in the ucma ABI where userspace can pass in a\nsockaddr but set the address family to AF_IB. When that happens,\nrdma_addr_size() will return a size bigger than sizeof struct sockaddr_in6,\nand the ucma kernel code might end up copying past the end of a buffer\nnot sized for a struct sockaddr_ib.\n\nFix this by introducing new variants\n\n int rdma_addr_size_in6(struct sockaddr_in6 *addr);\n int rdma_addr_size_kss(struct __kernel_sockaddr_storage *addr);\n\nthat are type-safe for the types used in the ucma ABI and return 0 if the\nsize computed is bigger than the size of the type passed in. We can use\nthese new variants to check what size userspace has passed in before\ncopying any addresses.\n\nReported-by: \u003csyzbot+6800425d54ed3ed8135d@syzkaller.appspotmail.com\u003e\nSigned-off-by: Roland Dreier \u003croland@purestorage.com\u003e\nSigned-off-by: Jason Gunthorpe \u003cjgg@mellanox.com\u003e\n" }, { "commit": "bd47a85acd727e27b7283daff557865ad04c59f6", "tree": "2c2957ff5572780ca181c0238334675df290cc31", "parents": [ "151ad17fbe5e56afa59709f41980508672c777ce" ], "author": { "name": "mike.travis@hpe.com", "email": "mike.travis@hpe.com", "time": "Wed Mar 28 12:40:11 2018 -0500" }, "committer": { "name": "Thomas Gleixner", "email": "tglx@linutronix.de", "time": "Wed Mar 28 20:19:45 2018 +0200" }, "message": "x86/platform/UV: Fix critical UV MMR address error\n\nA critical error was found testing the fixed UV4 HUB in that an MMR address\nwas found to be incorrect. This causes the virtual address space for\naccessing the MMIOH1 region to be allocated with the incorrect size.\n\nFixes: 673aa20c55a1 (\"x86/platform/UV: Update uv_mmrs.h to prepare for UV4A fixes\")\nSigned-off-by: Mike Travis \u003ctravis@sgi.com\u003e\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Dimitri Sivanich \u003cdimitri.sivanich@hpe.com\u003e\nCc: Russ Anderson \u003cruss.anderson@hpe.com\u003e\nCc: Andrew Banman \u003candrew.banman@hpe.com\u003e\nLink: https://lkml.kernel.org/r/20180328174011.041801248@stormcage.americas.sgi.com\n\n" }, { "commit": "f67b15037a7a50c57f72e69a6d59941ad90a0f0f", "tree": "5aec8a6e17ca80a049efb3b0198fef80a7a69c31", "parents": [ "71eb9ee9596d8df3d5723c3cfc18774c6235e8b1" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Mar 26 15:39:07 2018 -1000" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Wed Mar 28 17:41:50 2018 +0200" }, "message": "perf/hwbp: Simplify the perf-hwbp code, fix documentation\n\nAnnoyingly, modify_user_hw_breakpoint() unnecessarily complicates the\nmodification of a breakpoint - simplify it and remove the pointless\nlocal variables.\n\nAlso update the stale Docbook while at it.\n\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nAcked-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nCc: Alexander Shishkin \u003calexander.shishkin@linux.intel.com\u003e\nCc: Andy Lutomirski \u003cluto@kernel.org\u003e\nCc: Arnaldo Carvalho de Melo \u003cacme@redhat.com\u003e\nCc: Frederic Weisbecker \u003cfweisbec@gmail.com\u003e\nCc: Jiri Olsa \u003cjolsa@redhat.com\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCc: Stephane Eranian \u003ceranian@google.com\u003e\nCc: Vince Weaver \u003cvincent.weaver@maine.edu\u003e\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\n" }, { "commit": "ef1b204a7024de1a813a7bf7d68c45fac9b9d1a3", "tree": "3215ccdd61d6c4dbb027082007273880d4c52360", "parents": [ "9a02d3af9ce9fcca751da1d4b5663b7a825d5957" ], "author": { "name": "Wei Yongjun", "email": "weiyongjun1@huawei.com", "time": "Wed Mar 28 12:52:10 2018 +0000" }, "committer": { "name": "Thierry Reding", "email": "treding@nvidia.com", "time": "Wed Mar 28 17:01:13 2018 +0200" }, "message": "drm/tegra: dc: Using NULL instead of plain integer\n\nFixes the following sparse warnings:\n\ndrivers/gpu/drm/tegra/dc.c:2181:69: warning:\n Using plain integer as NULL pointer\n\nSigned-off-by: Wei Yongjun \u003cweiyongjun1@huawei.com\u003e\nSigned-off-by: Thierry Reding \u003ctreding@nvidia.com\u003e\n" }, { "commit": "17a1079d9c63579d6e392a526405b8888e9ede37", "tree": "45a51ab7dd342614895bcaf790ba223744d4d519", "parents": [ "9d1887ef3252a45f4e692525d04e23ce8091c17c" ], "author": { "name": "Wanpeng Li", "email": "wanpengli@tencent.com", "time": "Sat Mar 24 21:18:35 2018 -0700" }, "committer": { "name": "Radim Krčmář", "email": "rkrcmar@redhat.com", "time": "Wed Mar 28 15:53:34 2018 +0200" }, "message": "KVM: x86: Fix pv tlb flush dependencies\n\nPV TLB FLUSH can only be turned on when steal time is enabled.\nThe condition got reversed during conflict resolution.\n\nCc: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\nCc: Radim Krčmář \u003crkrcmar@redhat.com\u003e\nSigned-off-by: Wanpeng Li \u003cwanpengli@tencent.com\u003e\nFixes: 4f2f61fc5071 (\"KVM: X86: Avoid traversing all the cpus for pv tlb flush when steal time is disabled\")\n[Rebased on top of kvm/master and reworded the commit message. - Radim]\nSigned-off-by: Radim Krčmář \u003crkrcmar@redhat.com\u003e\n" }, { "commit": "151ad17fbe5e56afa59709f41980508672c777ce", "tree": "a21ee442806ee774be3c50dd6e2163594c8377f6", "parents": [ "e847f6aaf68f6156a5e9b26afe1a7316b9ab697e" ], "author": { "name": "Andrew Banman", "email": "abanman@hpe.com", "time": "Tue Mar 27 17:09:06 2018 -0500" }, "committer": { "name": "Thomas Gleixner", "email": "tglx@linutronix.de", "time": "Wed Mar 28 10:40:55 2018 +0200" }, "message": "x86/platform/uv/BAU: Add APIC idt entry\n\nBAU uses the old alloc_initr_gate90 method to setup its interrupt. This\nfails silently as the BAU vector is in the range of APIC vectors that are\nregistered to the spurious interrupt handler. As a consequence BAU\nbroadcasts are not handled, and the broadcast source CPU hangs.\n\nUpdate BAU to use new idt structure.\n\nFixes: dc20b2d52653 (\"x86/idt: Move interrupt gate initialization to IDT code\")\nSigned-off-by: Andrew Banman \u003cabanman@hpe.com\u003e\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nAcked-by: Mike Travis \u003cmike.travis@hpe.com\u003e\nCc: Dimitri Sivanich \u003csivanich@hpe.com\u003e\nCc: Russ Anderson \u003crja@hpe.com\u003e\nCc: stable@vger.kernel.org\nCc: \"H. Peter Anvin\" \u003chpa@zytor.com\u003e\nLink: https://lkml.kernel.org/r/1522188546-196177-1-git-send-email-abanman@hpe.com\n\n" }, { "commit": "d2b35e0042681791815a2fa90213fd4d21992c56", "tree": "efee5906ba6730952ddd4852b4eb3675fadfe143", "parents": [ "fd9adc402b3d897709f56914702f243efa434c76", "1b8837b61714c3743fadb3a6bbb57ffd53839e7c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Mar 27 14:28:40 2018 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Mar 27 14:28:40 2018 -1000" }, "message": "Merge branch \u0027fixes\u0027 of git://git.armlinux.org.uk/~rmk/linux-arm\n\nPull ARM fixes from Russell King:\n \"A small number of small fixes for ARM, mostly for some build issues.\n\n One fix for a regression caused by the cpu hotplug conversion from a\n few kernel versions ago\"\n\n* \u0027fixes\u0027 of git://git.armlinux.org.uk/~rmk/linux-arm:\n ARM: 8750/1: deflate_xip_data.sh: minor fixes\n ARM: 8748/1: mm: Define vdso_start, vdso_end as array\n ARM: 8747/1: make CONFIG_DEBUG_WX depend on MMU\n ARM: 8746/1: vfp: Go back to clearing vfp_current_hw_state[]\n" }, { "commit": "fd9adc402b3d897709f56914702f243efa434c76", "tree": "2693099187a137b3fc9609b0af8822d0d07bf29e", "parents": [ "3eb2ce825ea1ad89d20f7a3b5780df850e4be274", "89d0c804392bb962553f23dc4c119d11b6bd1675" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Mar 27 14:11:46 2018 -1000" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Mar 27 14:11:46 2018 -1000" }, "message": "Merge tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi\n\nPull SCSI fixes from James Bottomley:\n \"Two driver fixes (ibmvfc, iscsi_tcp) and a USB fix for devices that\n give the wrong return to Read Capacity and cause a huge log spew.\n\n The remaining five patches all try to fix commit 84676c1f21e8\n (\"genirq/affinity: assign vectors to all possible CPUs\") which broke\n the non-mq I/O path\"\n\n* tag \u0027scsi-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:\n scsi: iscsi_tcp: set BDI_CAP_STABLE_WRITES when data digest enabled\n scsi: sd: Remember that READ CAPACITY(16) succeeded\n scsi: ibmvfc: Avoid unnecessary port relogin\n scsi: virtio_scsi: unify scsi_host_template\n scsi: virtio_scsi: fix IO hang caused by automatic irq vector affinity\n scsi: core: introduce force_blk_mq\n scsi: megaraid_sas: fix selection of reply queue\n scsi: hpsa: fix selection of reply queue\n" }, { "commit": "38759d6175d338fbf9282c8ea2b51f3b7ab9bc98", "tree": "a10f907656d5df8f4fb922e1a53b6e0888b47a95", "parents": [ "c8d3bcbfc5eab3f01cf373d039af725f3b488813" ], "author": { "name": "Colin Ian King", "email": "colin.king@canonical.com", "time": "Mon Mar 26 16:10:18 2018 +0100" }, "committer": { "name": "Jason Gunthorpe", "email": "jgg@mellanox.com", "time": "Tue Mar 27 15:06:34 2018 -0600" }, "message": "RDMA/hns: ensure for-loop actually iterates and free\u0027s buffers\n\nThe current for-loop zeros variable i and only loops once, hence\nnot all the buffers are free\u0027d. Fix this by setting i correctly.\n\nDetected by CoverityScan, CID#1463415 (\"Operands don\u0027t affect result\")\n\nFixes: a5073d6054f7 (\"RDMA/hns: Add eq support of hip08\")\nSigned-off-by: Colin Ian King \u003ccolin.king@canonical.com\u003e\nReviewed-by: Yixian Liu \u003cliuyixian@huawei.com\u003e\nSigned-off-by: Jason Gunthorpe \u003cjgg@mellanox.com\u003e\n" }, { "commit": "c8d3bcbfc5eab3f01cf373d039af725f3b488813", "tree": "15d657b35b72e5d27efa25e618a1eb00c97b71d5", "parents": [ "4b658d1bbc16605330694bb3ef2570c465ef383d" ], "author": { "name": "Leon Romanovsky", "email": "leonro@mellanox.com", "time": "Sun Mar 25 11:39:05 2018 +0300" }, "committer": { "name": "Jason Gunthorpe", "email": "jgg@mellanox.com", "time": "Tue Mar 27 14:10:45 2018 -0600" }, "message": "RDMA/ucma: Check that device exists prior to accessing it\n\nEnsure that device exists prior to accessing its properties.\n\nReported-by: \u003csyzbot+71655d44855ac3e76366@syzkaller.appspotmail.com\u003e\nFixes: 75216638572f (\"RDMA/cma: Export rdma cm interface to userspace\")\nSigned-off-by: Leon Romanovsky \u003cleonro@mellanox.com\u003e\nSigned-off-by: Jason Gunthorpe \u003cjgg@mellanox.com\u003e\n" }, { "commit": "4b658d1bbc16605330694bb3ef2570c465ef383d", "tree": "d8b7a596da47ed23d9b4ee23d7e6ed52aefed049", "parents": [ "9137108cc3d64ade13e753108ec611a0daed16a0" ], "author": { "name": "Leon Romanovsky", "email": "leonro@mellanox.com", "time": "Sun Mar 25 11:23:55 2018 +0300" }, "committer": { "name": "Jason Gunthorpe", "email": "jgg@mellanox.com", "time": "Tue Mar 27 14:10:45 2018 -0600" }, "message": "RDMA/ucma: Check that device is connected prior to access it\n\nAdd missing check that device is connected prior to access it.\n\n[ 55.358652] BUG: KASAN: null-ptr-deref in rdma_init_qp_attr+0x4a/0x2c0\n[ 55.359389] Read of size 8 at addr 00000000000000b0 by task qp/618\n[ 55.360255]\n[ 55.360432] CPU: 1 PID: 618 Comm: qp Not tainted 4.16.0-rc1-00071-gcaf61b1b8b88 #91\n[ 55.361693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.11.0-0-g63451fca13-prebuilt.qemu-project.org 04/01/2014\n[ 55.363264] Call Trace:\n[ 55.363833] dump_stack+0x5c/0x77\n[ 55.364215] kasan_report+0x163/0x380\n[ 55.364610] ? rdma_init_qp_attr+0x4a/0x2c0\n[ 55.365238] rdma_init_qp_attr+0x4a/0x2c0\n[ 55.366410] ucma_init_qp_attr+0x111/0x200\n[ 55.366846] ? ucma_notify+0xf0/0xf0\n[ 55.367405] ? _get_random_bytes+0xea/0x1b0\n[ 55.367846] ? urandom_read+0x2f0/0x2f0\n[ 55.368436] ? kmem_cache_alloc_trace+0xd2/0x1e0\n[ 55.369104] ? refcount_inc_not_zero+0x9/0x60\n[ 55.369583] ? refcount_inc+0x5/0x30\n[ 55.370155] ? rdma_create_id+0x215/0x240\n[ 55.370937] ? _copy_to_user+0x4f/0x60\n[ 55.371620] ? mem_cgroup_commit_charge+0x1f5/0x290\n[ 55.372127] ? _copy_from_user+0x5e/0x90\n[ 55.372720] ucma_write+0x174/0x1f0\n[ 55.373090] ? ucma_close_id+0x40/0x40\n[ 55.373805] ? __lru_cache_add+0xa8/0xd0\n[ 55.374403] __vfs_write+0xc4/0x350\n[ 55.374774] ? kernel_read+0xa0/0xa0\n[ 55.375173] ? fsnotify+0x899/0x8f0\n[ 55.375544] ? fsnotify_unmount_inodes+0x170/0x170\n[ 55.376689] ? __fsnotify_update_child_dentry_flags+0x30/0x30\n[ 55.377522] ? handle_mm_fault+0x174/0x320\n[ 55.378169] vfs_write+0xf7/0x280\n[ 55.378864] SyS_write+0xa1/0x120\n[ 55.379270] ? SyS_read+0x120/0x120\n[ 55.379643] ? mm_fault_error+0x180/0x180\n[ 55.380071] ? task_work_run+0x7d/0xd0\n[ 55.380910] ? __task_pid_nr_ns+0x120/0x140\n[ 55.381366] ? SyS_read+0x120/0x120\n[ 55.381739] do_syscall_64+0xeb/0x250\n[ 55.382143] entry_SYSCALL_64_after_hwframe+0x21/0x86\n[ 55.382841] RIP: 0033:0x7fc2ef803e99\n[ 55.383227] RSP: 002b:00007fffcc5f3be8 EFLAGS: 00000217 ORIG_RAX: 0000000000000001\n[ 55.384173] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc2ef803e99\n[ 55.386145] RDX: 0000000000000057 RSI: 0000000020000080 RDI: 0000000000000003\n[ 55.388418] RBP: 00007fffcc5f3c00 R08: 0000000000000000 R09: 0000000000000000\n[ 55.390542] R10: 0000000000000000 R11: 0000000000000217 R12: 0000000000400480\n[ 55.392916] R13: 00007fffcc5f3cf0 R14: 0000000000000000 R15: 0000000000000000\n[ 55.521088] Code: e5 4d 1e ff 48 89 df 44 0f b6 b3 b8 01 00 00 e8 65 50 1e ff 4c 8b 2b 49\n8d bd b0 00 00 00 e8 56 50 1e ff 41 0f b6 c6 48 c1 e0 04 \u003c49\u003e 03 85 b0 00 00 00 48 8d 78 08\n48 89 04 24 e8 3a 4f 1e ff 48\n[ 55.525980] RIP: rdma_init_qp_attr+0x52/0x2c0 RSP: ffff8801e2c2f9d8\n[ 55.532648] CR2: 00000000000000b0\n[ 55.534396] ---[ end trace 70cee64090251c0b ]---\n\nFixes: 75216638572f (\"RDMA/cma: Export rdma cm interface to userspace\")\nFixes: d541e45500bd (\"IB/core: Convert ah_attr from OPA to IB when copying to user\")\nReported-by: \u003csyzbot+7b62c837c2516f8f38c8@syzkaller.appspotmail.com\u003e\nSigned-off-by: Leon Romanovsky \u003cleonro@mellanox.com\u003e\nSigned-off-by: Jason Gunthorpe \u003cjgg@mellanox.com\u003e\n" }, { "commit": "9137108cc3d64ade13e753108ec611a0daed16a0", "tree": "06442cc68f56bca33987899e3f1b668084a2fea6", "parents": [ "caf61b1b8b88ccf1451f7321a176393797e8d292" ], "author": { "name": "Jason Gunthorpe", "email": "jgg@mellanox.com", "time": "Thu Mar 22 14:04:23 2018 -0600" }, "committer": { "name": "Jason Gunthorpe", "email": "jgg@mellanox.com", "time": "Tue Mar 27 13:19:01 2018 -0600" }, "message": "RDMA/rdma_cm: Fix use after free race with process_one_req\n\nprocess_one_req() can race with rdma_addr_cancel():\n\n CPU0 CPU1\n \u003d\u003d\u003d\u003d \u003d\u003d\u003d\u003d\n process_one_work()\n debug_work_deactivate(work);\n process_one_req()\n rdma_addr_cancel()\n\t mutex_lock(\u0026lock);\n \t\t\t \t set_timeout(\u0026req-\u003ework,..);\n __queue_work()\n\t\t\t\t \t debug_work_activate(work);\n\t mutex_unlock(\u0026lock);\n\n mutex_lock(\u0026lock);\n[..]\n\tlist_del(\u0026req-\u003elist);\n mutex_unlock(\u0026lock);\n[..]\n\n // ODEBUG explodes since the work is still queued.\n kfree(req);\n\nCausing ODEBUG to detect the use after free:\n\nODEBUG: free active (active state 0) object type: work_struct hint: process_one_req+0x0/0x6c0 include/net/dst.h:165\nWARNING: CPU: 0 PID: 79 at lib/debugobjects.c:291 debug_print_object+0x166/0x220 lib/debugobjects.c:288\nkvm: emulating exchange as write\nKernel panic - not syncing: panic_on_warn set ...\n\nCPU: 0 PID: 79 Comm: kworker/u4:3 Not tainted 4.16.0-rc6+ #361\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nWorkqueue: ib_addr process_one_req\nCall Trace:\n __dump_stack lib/dump_stack.c:17 [inline]\n dump_stack+0x194/0x24d lib/dump_stack.c:53\n panic+0x1e4/0x41c kernel/panic.c:183\n __warn+0x1dc/0x200 kernel/panic.c:547\n report_bug+0x1f4/0x2b0 lib/bug.c:186\n fixup_bug.part.11+0x37/0x80 arch/x86/kernel/traps.c:178\n fixup_bug arch/x86/kernel/traps.c:247 [inline]\n do_error_trap+0x2d7/0x3e0 arch/x86/kernel/traps.c:296\n do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:315\n invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:986\nRIP: 0010:debug_print_object+0x166/0x220 lib/debugobjects.c:288\nRSP: 0000:ffff8801d966f210 EFLAGS: 00010086\nRAX: dffffc0000000008 RBX: 0000000000000003 RCX: ffffffff815acd6e\nRDX: 0000000000000000 RSI: 1ffff1003b2cddf2 RDI: 0000000000000000\nRBP: ffff8801d966f250 R08: 0000000000000000 R09: 1ffff1003b2cddc8\nR10: ffffed003b2cde71 R11: ffffffff86f39a98 R12: 0000000000000001\nR13: ffffffff86f15540 R14: ffffffff86408700 R15: ffffffff8147c0a0\n __debug_check_no_obj_freed lib/debugobjects.c:745 [inline]\n debug_check_no_obj_freed+0x662/0xf1f lib/debugobjects.c:774\n kfree+0xc7/0x260 mm/slab.c:3799\n process_one_req+0x2e7/0x6c0 drivers/infiniband/core/addr.c:592\n process_one_work+0xc47/0x1bb0 kernel/workqueue.c:2113\n worker_thread+0x223/0x1990 kernel/workqueue.c:2247\n kthread+0x33c/0x400 kernel/kthread.c:238\n ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:406\n\nFixes: 5fff41e1f89d (\"IB/core: Fix race condition in resolving IP to MAC\")\nReported-by: \u003csyzbot+3b4acab09b6463472d0a@syzkaller.appspotmail.com\u003e\nSigned-off-by: Jason Gunthorpe \u003cjgg@mellanox.com\u003e\n" }, { "commit": "b9fc828debc8ac2bb21b5819a44d2aea456f1c95", "tree": "d354c2be9e3bedb62886a87377efe8d53fbde07d", "parents": [ "dc6455a71c7fc5117977e197f67f71b49f27baba" ], "author": { "name": "Manish Chopra", "email": "manish.chopra@cavium.com", "time": "Tue Mar 27 06:34:41 2018 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 27 13:11:46 2018 -0400" }, "message": "qede: Fix barrier usage after tx doorbell write.\n\nSince commit c5ad119fb6c09b0297446be05bd66602fa564758\n(\"net: sched: pfifo_fast use skb_array\") driver is exposed\nto an issue where it is hitting NULL skbs while handling TX\ncompletions. Driver uses mmiowb() to flush the writes to the\ndoorbell bar which is a write-combined bar, however on x86\nmmiowb() does not flush the write combined buffer.\n\nThis patch fixes this problem by replacing mmiowb() with wmb()\nafter the write combined doorbell write so that writes are\nflushed and synchronized from more than one processor.\n\nV1-\u003eV2:\n-------\nThis patch was marked as \"superseded\" in patchwork.\n(Not really sure for what reason).Resending it as v2.\n\nSigned-off-by: Ariel Elior \u003cariel.elior@cavium.com\u003e\nSigned-off-by: Manish Chopra \u003cmanish.chopra@cavium.com\u003e\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "dc6455a71c7fc5117977e197f67f71b49f27baba", "tree": "524dca0c836ebcc1f9d2f4e5fbcfd882955a0f6b", "parents": [ "d222a084329f3c0b46ad4ed6d4b074f1d62e2056" ], "author": { "name": "Jason Wang", "email": "jasowang@redhat.com", "time": "Tue Mar 27 20:50:52 2018 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 27 13:03:18 2018 -0400" }, "message": "vhost: correctly remove wait queue during poll failure\n\nWe tried to remove vq poll from wait queue, but do not check whether\nor not it was in a list before. This will lead double free. Fixing\nthis by switching to use vhost_poll_stop() which zeros poll-\u003ewqh after\nremoving poll from waitqueue to make sure it won\u0027t be freed twice.\n\nCc: Darren Kenny \u003cdarren.kenny@oracle.com\u003e\nReported-by: syzbot+c0272972b01b872e604a@syzkaller.appspotmail.com\nFixes: 2b8b328b61c79 (\"vhost_net: handle polling errors when setting backend\")\nSigned-off-by: Jason Wang \u003cjasowang@redhat.com\u003e\nReviewed-by: Darren Kenny \u003cdarren.kenny@oracle.com\u003e\nAcked-by: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8a6105c4818cdc4a5c6b8a99c98ab7cc43be1ba8", "tree": "226997b3fdd9f6f7e026d794d255ac6d1a677614", "parents": [ "f8437520704cfd9cc442a99d73ed708a3cdadaf9" ], "author": { "name": "Jason Gunthorpe", "email": "jgg@mellanox.com", "time": "Fri Mar 23 11:59:36 2018 -0600" }, "committer": { "name": "Masahiro Yamada", "email": "yamada.masahiro@socionext.com", "time": "Wed Mar 28 01:42:17 2018 +0900" }, "message": "kbuild: rpm-pkg: Support GNU tar \u003e\u003d 1.29\n\nThere is a change in how command line parsing is done in this version.\nExcludes and includes are now ordered with the file list. Since\nthe spec file puts the file list before the exclude list it means newer\ntar ignores the excludes and packs all the build output into the\nkernel-devel RPM resulting in a huge package.\n\nSimple argument re-ordering fixes the problem.\n\nSigned-off-by: Jason Gunthorpe \u003cjgg@mellanox.com\u003e\nSigned-off-by: Masahiro Yamada \u003cyamada.masahiro@socionext.com\u003e\n" }, { "commit": "f8437520704cfd9cc442a99d73ed708a3cdadaf9", "tree": "7e0fff9893880b5fcbd0ab59ec223ea7dded8b2b", "parents": [ "0f0e8de334c54c38818a4a5390a39aa09deff5bf" ], "author": { "name": "Jan Kiszka", "email": "jan.kiszka@siemens.com", "time": "Wed Mar 21 13:15:28 2018 +0800" }, "committer": { "name": "Masahiro Yamada", "email": "yamada.masahiro@socionext.com", "time": "Wed Mar 28 01:42:17 2018 +0900" }, "message": "builddeb: Fix header package regarding dtc source links\n\nSince d5d332d3f7e8, a couple of links in scripts/dtc/include-prefixes\nare additionally required in order to build device trees with the header\npackage.\n\nSigned-off-by: Jan Kiszka \u003cjan.kiszka@siemens.com\u003e\nReviewed-by: Riku Voipio \u003criku.voipio@linaro.org\u003e\nSigned-off-by: Masahiro Yamada \u003cyamada.masahiro@socionext.com\u003e\n" }, { "commit": "d222a084329f3c0b46ad4ed6d4b074f1d62e2056", "tree": "c819afdf4691d24fac76deb67dda5a6d7a8fcdfb", "parents": [ "ab6f6dd18ab801fcbbaa05fb5401e91f48778e04", "461d5f1b59490ce0096dfda45e10038c122a7892" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 27 12:02:30 2018 -0400" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 27 12:02:30 2018 -0400" }, "message": "Merge branch \u0027mlx4-misc-fixes-for-4.16\u0027\n\nTariq Toukan says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nmlx4 misc fixes for 4.16\n\nThis patchset contains misc bug fixes from the team\nto the mlx4 Core and Eth drivers.\n\nPatch 1 by Eran fixes a control mix of PFC and Global pauses, please queue it\nto -stable for \u003e\u003d v4.8.\nPatch 2 by Moshe fixes a resource leak in slave\u0027s delete flow, please queue it\nto -stable for \u003e\u003d v4.5.\n\nSeries generated against net commit:\n3c82b372a9f4 net: dsa: mt7530: fix module autoloading for OF platform drivers\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "461d5f1b59490ce0096dfda45e10038c122a7892", "tree": "c819afdf4691d24fac76deb67dda5a6d7a8fcdfb", "parents": [ "6e8814ceb7e8f468659ef9253bd212c07ae19584" ], "author": { "name": "Moshe Shemesh", "email": "moshe@mellanox.com", "time": "Tue Mar 27 14:41:19 2018 +0300" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 27 12:02:30 2018 -0400" }, "message": "net/mlx4_core: Fix memory leak while delete slave\u0027s resources\n\nmlx4_delete_all_resources_for_slave in resource tracker should free all\nmemory allocated for a slave.\nWhile releasing memory of fs_rule, it misses releasing memory of\nfs_rule-\u003emirr_mbox.\n\nFixes: 78efed275117 (\u0027net/mlx4_core: Support mirroring VF DMFS rules on both ports\u0027)\nSigned-off-by: Moshe Shemesh \u003cmoshe@mellanox.com\u003e\nSigned-off-by: Tariq Toukan \u003ctariqt@mellanox.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "6e8814ceb7e8f468659ef9253bd212c07ae19584", "tree": "969970bea901bed43c6901258c0e0ed7f7cdecb9", "parents": [ "ab6f6dd18ab801fcbbaa05fb5401e91f48778e04" ], "author": { "name": "Eran Ben Elisha", "email": "eranbe@mellanox.com", "time": "Tue Mar 27 14:41:18 2018 +0300" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 27 12:02:30 2018 -0400" }, "message": "net/mlx4_en: Fix mixed PFC and Global pause user control requests\n\nGlobal pause and PFC configuration should be mutually exclusive (i.e. only\none of them at most can be set). However, once PFC was turned off,\ndriver automatically turned Global pause on. This is a bug.\n\nFix the driver behaviour to turn off PFC/Global once the user turned the\nother on.\n\nThis also fixed a weird behaviour that at a current time, the profile\nhad both PFC and global pause configuration turned on, which is\nHardware-wise impossible and caused returning false positive indication\nto query tools.\n\nIn addition, fix error code when setting global pause or PFC to change\nmetadata only upon successful change.\n\nAlso, removed useless debug print.\n\nFixes: af7d51852631 (\"net/mlx4_en: Add DCB PFC support through CEE netlink commands\")\nFixes: c27a02cd94d6 (\"mlx4_en: Add driver for Mellanox ConnectX 10GbE NIC\")\nSigned-off-by: Eran Ben Elisha \u003ceranbe@mellanox.com\u003e\nSigned-off-by: Tariq Toukan \u003ctariqt@mellanox.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ab6f6dd18ab801fcbbaa05fb5401e91f48778e04", "tree": "d8b0c9a66ef652d1dca49cd06ed83846fe9816f8", "parents": [ "b85ab56c3f81c5a24b5a5213374f549df06430da" ], "author": { "name": "Ursula Braun", "email": "ubraun@linux.vnet.ibm.com", "time": "Tue Mar 27 10:43:50 2018 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 27 11:59:49 2018 -0400" }, "message": "net/smc: use announced length in sock_recvmsg()\n\nNot every CLC proposal message needs the maximum buffer length.\nDue to the MSG_WAITALL flag, it is important to use the peeked\nreal length when receiving the message.\n\nFixes: d63d271ce2b5ce (\"smc: switch to sock_recvmsg()\")\nSigned-off-by: Ursula Braun \u003cubraun@linux.vnet.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b85ab56c3f81c5a24b5a5213374f549df06430da", "tree": "4580d5ab329020259c744ca5b5accae6997258c9", "parents": [ "2a7fdec98f74cc305c1247cbe67307d504a3223d" ], "author": { "name": "Cong Wang", "email": "xiyou.wangcong@gmail.com", "time": "Mon Mar 26 15:08:33 2018 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 27 11:56:00 2018 -0400" }, "message": "llc: properly handle dev_queue_xmit() return value\n\nllc_conn_send_pdu() pushes the skb into write queue and\ncalls llc_conn_send_pdus() to flush them out. However, the\nstatus of dev_queue_xmit() is not returned to caller,\nin this case, llc_conn_state_process().\n\nllc_conn_state_process() needs hold the skb no matter\nsuccess or failure, because it still uses it after that,\ntherefore we should hold skb before dev_queue_xmit() when\nthat skb is the one being processed by llc_conn_state_process().\n\nFor other callers, they can just pass NULL and ignore\nthe return value as they are.\n\nReported-by: Noam Rathaus \u003cnoamr@beyondsecurity.com\u003e\nSigned-off-by: Cong Wang \u003cxiyou.wangcong@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2a7fdec98f74cc305c1247cbe67307d504a3223d", "tree": "ca2955992a2edbabc8af9169f2c246f829fe7aa8", "parents": [ "cd00edc179863848abab5cc5683de5b7b5f70954", "a117f73dc2430443f23e18367fa545981129c1a6" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 27 11:41:56 2018 -0400" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 27 11:41:56 2018 -0400" }, "message": "Merge tag \u0027mlx5-fixes-2018-03-23\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux\n\nSaeed Mahameed says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nMellanox, mlx5 fixes 2018-03-23\n\nThe following series includes fixes for mlx5 netdev and eswitch.\n\nv1-\u003ev2:\n - Fixed commit message quotation marks in patch #7\n\nFor -stable v4.12\n (\u0027net/mlx5e: Avoid using the ipv6 stub in the TC offload neigh update path\u0027)\n (\u0027net/mlx5e: Fix traffic being dropped on VF representor\u0027)\n\nFor -stable v4.13\n (\u0027net/mlx5e: Fix memory usage issues in offloading TC flows\u0027)\n (\u0027net/mlx5e: Verify coalescing parameters in range\u0027)\n\nFor -stable v4.14\n (\u0027net/mlx5e: Don\u0027t override vport admin link state in switchdev mode\u0027)\n\nFor -stable v4.15\n (\u0027108b2b6d5c02 net/mlx5e: Sync netdev vxlan ports at open\u0027)\n\nPlease pull and let me know if there\u0027s any problem.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "cd00edc179863848abab5cc5683de5b7b5f70954", "tree": "c11ac851909a6456a87b4308b26963fbf0ecd2bf", "parents": [ "734549eb550c0c720bc89e50501f1b1e98cdd841" ], "author": { "name": "Dave Watson", "email": "davejwatson@fb.com", "time": "Mon Mar 26 12:31:21 2018 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 27 11:00:18 2018 -0400" }, "message": "strparser: Fix sign of err codes\n\nstrp_parser_err is called with a negative code everywhere, which then\ncalls abort_parser with a negative code. strp_msg_timeout calls\nabort_parser directly with a positive code. Negate ETIMEDOUT\nto match signed-ness of other calls.\n\nThe default abort_parser callback, strp_abort_strp, sets\nsk-\u003esk_err to err. Also negate the error here so sk_err always\nholds a positive value, as the rest of the net code expects. Currently\na negative sk_err can result in endless loops, or user code that\nthinks it actually sent/received err bytes.\n\nFound while testing net/tls_sw recv path.\n\nFixes: 43a0c6751a322847 (\"strparser: Stream parser for messages\")\nSigned-off-by: Dave Watson \u003cdavejwatson@fb.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "734549eb550c0c720bc89e50501f1b1e98cdd841", "tree": "340340b1f930046b8853d3636747179829204b37", "parents": [ "19c9ea363a244f85f90a424f9936e6d56449e33c" ], "author": { "name": "Craig Dillabaugh", "email": "cdillaba@mojatatu.com", "time": "Mon Mar 26 14:58:32 2018 -0400" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 27 10:59:12 2018 -0400" }, "message": "net sched actions: fix dumping which requires several messages to user space\n\nFixes a bug in the tcf_dump_walker function that can cause some actions\nto not be reported when dumping a large number of actions. This issue\nbecame more aggrevated when cookies feature was added. In particular\nthis issue is manifest when large cookie values are assigned to the\nactions and when enough actions are created that the resulting table\nmust be dumped in multiple batches.\n\nThe number of actions returned in each batch is limited by the total\nnumber of actions and the memory buffer size. With small cookies\nthe numeric limit is reached before the buffer size limit, which avoids\nthe code path triggering this bug. When large cookies are used buffer\nfills before the numeric limit, and the erroneous code path is hit.\n\nFor example after creating 32 csum actions with the cookie\naaaabbbbccccdddd\n\n$ tc actions ls action csum\ntotal acts 26\n\n action order 0: csum (tcp) action continue\n index 1 ref 1 bind 0\n cookie aaaabbbbccccdddd\n\n .....\n\n action order 25: csum (tcp) action continue\n index 26 ref 1 bind 0\n cookie aaaabbbbccccdddd\ntotal acts 6\n\n action order 0: csum (tcp) action continue\n index 28 ref 1 bind 0\n cookie aaaabbbbccccdddd\n\n ......\n\n action order 5: csum (tcp) action continue\n index 32 ref 1 bind 0\n cookie aaaabbbbccccdddd\n\nNote that the action with index 27 is omitted from the report.\n\nFixes: 4b3550ef530c (\"[NET_SCHED]: Use nla_nest_start/nla_nest_end\")\"\nSigned-off-by: Craig Dillabaugh \u003ccdillaba@mojatatu.com\u003e\nAcked-by: Jamal Hadi Salim \u003cjhs@mojatatu.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "19c9ea363a244f85f90a424f9936e6d56449e33c", "tree": "2177ec75f91dd0fe75bf87dbbb20bf50babf5e99", "parents": [ "1dfe82ebd7d8fd43dba9948fdfb31f145014baa0" ], "author": { "name": "Heiner Kallweit", "email": "hkallweit1@gmail.com", "time": "Mon Mar 26 19:19:30 2018 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 27 10:56:04 2018 -0400" }, "message": "r8169: fix setting driver_data after register_netdev\n\npci_set_drvdata() is called only after registering the net_device,\ntherefore we could run into a NPE if one of the functions using\ndriver_data is called before it\u0027s set.\n\nFix this by calling pci_set_drvdata() before registering the\nnet_device.\n\nThis fix is a candidate for stable. As far as I can see the\nbug has been there in kernel version 3.2 already, therefore\nI can\u0027t provide a reference which commit is fixed by it.\n\nThe fix may need small adjustments per kernel version because\ndue to other changes the label which is jumped to if\nregister_netdev() fails has changed over time.\n\nReported-by: David Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Heiner Kallweit \u003chkallweit1@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1dfe82ebd7d8fd43dba9948fdfb31f145014baa0", "tree": "4fe585ba8a96b391b66b3616d400d46c8f5ce590", "parents": [ "d4c4bc11353f3bea6754f7d21e3612c9f32d1d64" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Mon Mar 26 08:08:07 2018 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 27 10:53:27 2018 -0400" }, "message": "net: fix possible out-of-bound read in skb_network_protocol()\n\nskb mac header is not necessarily set at the time skb_network_protocol()\nis called. Use skb-\u003edata instead.\n\nBUG: KASAN: slab-out-of-bounds in skb_network_protocol+0x46b/0x4b0 net/core/dev.c:2739\nRead of size 2 at addr ffff8801b3097a0b by task syz-executor5/14242\n\nCPU: 1 PID: 14242 Comm: syz-executor5 Not tainted 4.16.0-rc6+ #280\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nCall Trace:\n __dump_stack lib/dump_stack.c:17 [inline]\n dump_stack+0x194/0x24d lib/dump_stack.c:53\n print_address_description+0x73/0x250 mm/kasan/report.c:256\n kasan_report_error mm/kasan/report.c:354 [inline]\n kasan_report+0x23c/0x360 mm/kasan/report.c:412\n __asan_report_load_n_noabort+0xf/0x20 mm/kasan/report.c:443\n skb_network_protocol+0x46b/0x4b0 net/core/dev.c:2739\n harmonize_features net/core/dev.c:2924 [inline]\n netif_skb_features+0x509/0x9b0 net/core/dev.c:3011\n validate_xmit_skb+0x81/0xb00 net/core/dev.c:3084\n validate_xmit_skb_list+0xbf/0x120 net/core/dev.c:3142\n packet_direct_xmit+0x117/0x790 net/packet/af_packet.c:256\n packet_snd net/packet/af_packet.c:2944 [inline]\n packet_sendmsg+0x3aed/0x60b0 net/packet/af_packet.c:2969\n sock_sendmsg_nosec net/socket.c:629 [inline]\n sock_sendmsg+0xca/0x110 net/socket.c:639\n ___sys_sendmsg+0x767/0x8b0 net/socket.c:2047\n __sys_sendmsg+0xe5/0x210 net/socket.c:2081\n\nFixes: 19acc327258a (\"gso: Handle Trans-Ether-Bridging protocol in skb_network_protocol()\")\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nCc: Pravin B Shelar \u003cpshelar@ovn.org\u003e\nReported-by: Reported-by: syzbot \u003csyzkaller@googlegroups.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d4c4bc11353f3bea6754f7d21e3612c9f32d1d64", "tree": "c702d56cab509c5d7e6b9e69f6ae75d33fdb6410", "parents": [ "d7785b59e7521fe618c8f1bf54e14c916e2c7393" ], "author": { "name": "Giuseppe Lippolis", "email": "giu.lippolis@gmail.com", "time": "Mon Mar 26 16:34:39 2018 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 27 10:51:10 2018 -0400" }, "message": "net-usb: add qmi_wwan if on lte modem wistron neweb d18q1\n\nThis modem is embedded on dlink dwr-921 router.\n The oem configuration states:\n\n T: Bus\u003d02 Lev\u003d01 Prnt\u003d01 Port\u003d00 Cnt\u003d01 Dev#\u003d 2 Spd\u003d480 MxCh\u003d 0\n D: Ver\u003d 2.00 Cls\u003d00(\u003eifc ) Sub\u003d00 Prot\u003d00 MxPS\u003d64 #Cfgs\u003d 1\n P: Vendor\u003d1435 ProdID\u003d0918 Rev\u003d 2.32\n S: Manufacturer\u003dAndroid\n S: Product\u003dAndroid\n S: SerialNumber\u003d0123456789ABCDEF\n C:* #Ifs\u003d 7 Cfg#\u003d 1 Atr\u003d80 MxPwr\u003d500mA\n I:* If#\u003d 0 Alt\u003d 0 #EPs\u003d 2 Cls\u003dff(vend.) Sub\u003dff Prot\u003dff Driver\u003doption\n E: Ad\u003d81(I) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d0ms\n E: Ad\u003d01(O) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d0ms\n I:* If#\u003d 1 Alt\u003d 0 #EPs\u003d 2 Cls\u003dff(vend.) Sub\u003d42 Prot\u003d01 Driver\u003d(none)\n E: Ad\u003d82(I) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d0ms\n E: Ad\u003d02(O) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d0ms\n I:* If#\u003d 2 Alt\u003d 0 #EPs\u003d 3 Cls\u003dff(vend.) Sub\u003d00 Prot\u003d00 Driver\u003doption\n E: Ad\u003d84(I) Atr\u003d03(Int.) MxPS\u003d 64 Ivl\u003d32ms\n E: Ad\u003d83(I) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d0ms\n E: Ad\u003d03(O) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d0ms\n I:* If#\u003d 3 Alt\u003d 0 #EPs\u003d 3 Cls\u003dff(vend.) Sub\u003dff Prot\u003dff Driver\u003dqmi_wwan\n E: Ad\u003d86(I) Atr\u003d03(Int.) MxPS\u003d 64 Ivl\u003d32ms\n E: Ad\u003d85(I) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d0ms\n E: Ad\u003d04(O) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d0ms\n I:* If#\u003d 4 Alt\u003d 0 #EPs\u003d 3 Cls\u003dff(vend.) Sub\u003dff Prot\u003dff Driver\u003dqmi_wwan\n E: Ad\u003d88(I) Atr\u003d03(Int.) MxPS\u003d 64 Ivl\u003d32ms\n E: Ad\u003d87(I) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d0ms\n E: Ad\u003d05(O) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d0ms\n I:* If#\u003d 5 Alt\u003d 0 #EPs\u003d 3 Cls\u003dff(vend.) Sub\u003dff Prot\u003dff Driver\u003dqmi_wwan\n E: Ad\u003d8a(I) Atr\u003d03(Int.) MxPS\u003d 64 Ivl\u003d32ms\n E: Ad\u003d89(I) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d0ms\n E: Ad\u003d06(O) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d0ms\n I:* If#\u003d 6 Alt\u003d 0 #EPs\u003d 2 Cls\u003d08(stor.) Sub\u003d06 Prot\u003d50 Driver\u003d(none)\n E: Ad\u003d8b(I) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d0ms\n E: Ad\u003d07(O) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d125us\n\nTested on openwrt distribution\n\nSigned-off-by: Giuseppe Lippolis \u003cgiu.lippolis@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d7785b59e7521fe618c8f1bf54e14c916e2c7393", "tree": "f02ff3347441da99248d8bb62adbf047a4033bce", "parents": [ "3c82b372a9f44aa224b8d5106ff6f1ad516fa8a8", "a752c0a4524889cdc0765925258fd1fd72344100" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 27 10:40:19 2018 -0400" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 27 10:40:19 2018 -0400" }, "message": "Merge tag \u0027batadv-net-for-davem-20180326\u0027 of git://git.open-mesh.org/linux-merge\n\nSimon Wunderlich says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nHere are some batman-adv bugfixes:\n\n - fix multicast-via-unicast transmissions for AP isolation and gateway\n extension, by Linus Luessing (2 patches)\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "5607dddbfca774fb38bffadcb077fe03aa4ac5c6", "tree": "9401e09e47c8398b1c9d302399fe339161cda506", "parents": [ "9066ae7ff5d89c0b5daa271e2d573540097a94fa" ], "author": { "name": "Dan Carpenter", "email": "dan.carpenter@oracle.com", "time": "Tue Mar 27 16:07:52 2018 +0300" }, "committer": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Tue Mar 27 15:20:19 2018 +0200" }, "message": "ALSA: pcm: potential uninitialized return values\n\nSmatch complains that \"tmp\" can be uninitialized if we do a zero size\nwrite.\n\nFixes: 02a5d6925cd3 (\"ALSA: pcm: Avoid potential races between OSS ioctls and read/write\")\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\n" }, { "commit": "bbad2093dfa76f4c3dcc8ab6b89249affe72f851", "tree": "5e5373816ff0a7dfc28cf02e533ce59fbc9de1bf", "parents": [ "66f3731f39970ad670ddba02cfb32740911d5da6", "0a815fc929e62f54a22a09e10e18f038e6d63c39" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Tue Mar 27 13:12:10 2018 +0200" }, "committer": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Tue Mar 27 13:12:10 2018 +0200" }, "message": "Merge tag \u0027sunxi-fixes-for-4.16\u0027 of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/sunxi/linux into fixes\n\nPull \"Allwinner Fixes for 4.16\" from Maxime Ripard:\n\nThe first and second patches fix the regulator support for the Bananapi M2\nboard.\n\nThe last one updates my email address in MAINTAINERS.\n\n* tag \u0027sunxi-fixes-for-4.16\u0027 of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/sunxi/linux:\n MAINTAINERS: update email address for Maxime Ripard\n ARM: dts: sun6i: a31s: bpi-m2: add missing regulators\n ARM: dts: sun6i: a31s: bpi-m2: improve pmic properties\n" }, { "commit": "66f3731f39970ad670ddba02cfb32740911d5da6", "tree": "a38281240f7b1c99141af6be3947fa5da1e6de75", "parents": [ "c27a2cbe3d450cb67812959d7359137ff6d488d9", "eb85a355c3afd9379f5953cfe2df73632d14c884" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Tue Mar 27 13:11:21 2018 +0200" }, "committer": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Tue Mar 27 13:11:21 2018 +0200" }, "message": "Merge tag \u0027omap-for-v4.16/sram-fix-signed\u0027 of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap into fixes\n\nPull \"Two fixes for omap variants for v4.16-rc cycle\" from Tony Lindgren:\n\nFix insecure W+X mapping warning for SRAM for omaps that\ndon\u0027t yet use drivers/misc/*sram*.c code. An earlier attempt\nat fixing this turned out to cause problems with PM on omap3,\nthis version works with PM on omap3.\n\nAlso fix dmtimer probe for omap16xx devices that was noticed\nwith the pending dmtimer move to drivers. It seems this has\nbeen broken for a while and is a non-critical for booting.\nIt is needed for PM on omap16xx though.\n\n* tag \u0027omap-for-v4.16/sram-fix-signed\u0027 of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap:\n ARM: OMAP: Fix SRAM W+X mapping\n ARM: OMAP: Fix dmtimer init for omap1\n" }, { "commit": "c27a2cbe3d450cb67812959d7359137ff6d488d9", "tree": "b0d4583a41d164884f0642a2cd5fa38071f17abb", "parents": [ "9bdc00a5c16f5d5306756afdbe2811be4061c945", "601ff7edc748213fc6d4d7c1ded6467edbd1f1c2" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Tue Mar 27 13:09:09 2018 +0200" }, "committer": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Tue Mar 27 13:09:09 2018 +0200" }, "message": "Merge tag \u0027tegra-for-4.17-misc\u0027 of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/tegra/linux into fixes\n\nPull \"ARM: tegra: Miscellaneous changes for v4.17-rc1\" from Thierry Reding:\n\nThis contains a single patch to update the MAINTAINERS entry for the\nTegra SMMU driver.\n\n* tag \u0027tegra-for-4.17-misc\u0027 of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/tegra/linux:\n MAINTAINERS: Update Tegra IOMMU maintainer\n" }, { "commit": "bd6271039ee6f0c9b468148fc2d73e0584af6b4f", "tree": "a99a7ff2769c63c7060aac99ad38a2637f88aef1", "parents": [ "3c1f05835cbf9fdfe60b81c718d82ceb94b6c55e" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Sun Jan 14 15:05:04 2018 +0300" }, "committer": { "name": "Thomas Gleixner", "email": "tglx@linutronix.de", "time": "Tue Mar 27 09:47:53 2018 +0200" }, "message": "x86/alternatives: Fixup alternative_call_2\n\nThe following pattern fails to compile while the same pattern\nwith alternative_call() does:\n\n\tif (...)\n\t\talternative_call_2(...);\n\telse\n\t\talternative_call_2(...);\n\nas it expands into\n\n\tif (...)\n\t{\n\t};\t\u003c\u003d\u003d\u003d\n\telse\n\t{\n\t};\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nAcked-by: Borislav Petkov \u003cbp@suse.de\u003e\nLink: https://lkml.kernel.org/r/20180114120504.GA11368@avx2\n\n" }, { "commit": "97130968839a2928869a2d25500b5855017aac7d", "tree": "a8fcc40a7c56f1c1627b00f510cff7cae03204c2", "parents": [ "3eb2ce825ea1ad89d20f7a3b5780df850e4be274", "72a01d231dcb22a276209c7a924a8cd475fbaa9b" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Tue Mar 27 17:39:50 2018 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Tue Mar 27 17:39:50 2018 +1000" }, "message": "Merge tag \u0027drm-amdkfd-fixes-2018-03-25\u0027 of git://people.freedesktop.org/~gabbayo/linux into drm-fixes\n\n- Programming VMID correctly for scratch memory with HWS\n- deallocating SDMA queues correctly in various situations\n\n* tag \u0027drm-amdkfd-fixes-2018-03-25\u0027 of git://people.freedesktop.org/~gabbayo/linux:\n drm/amdkfd: Deallocate SDMA queues correctly\n drm/amdkfd: Fix scratch memory with HWS enabled\n" }, { "commit": "71eb9ee9596d8df3d5723c3cfc18774c6235e8b1", "tree": "a07b40919cbebaba378fa52f3a6a564845f205df", "parents": [ "3eb2ce825ea1ad89d20f7a3b5780df850e4be274" ], "author": { "name": "Stephane Eranian", "email": "eranian@google.com", "time": "Fri Mar 23 00:01:47 2018 -0700" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Tue Mar 27 08:27:27 2018 +0200" }, "message": "perf/x86/intel: Fix linear IP of PEBS real_ip on Haswell and later CPUs\n\nthis patch fix a bug in how the pebs-\u003ereal_ip is handled in the PEBS\nhandler. real_ip only exists in Haswell and later processor. It is\nactually the eventing IP, i.e., where the event occurred. As opposed\nto the pebs-\u003eip which is the PEBS interrupt IP which is always off\nby one.\n\nThe problem is that the real_ip just like the IP needs to be fixed up\nbecause PEBS does not record all the machine state registers, and\nin particular the code segement (cs). This is why we have the set_linear_ip()\nfunction. The problem was that set_linear_ip() was only used on the pebs-\u003eip\nand not the pebs-\u003ereal_ip.\n\nWe have profiles which ran into invalid callstacks because of this.\nHere is an example:\n\n ..... 0: ffffffffffffff80 recent entry, marker kernel v\n ..... 1: 000000000040044d \u003c\u003d user address in kernel space!\n ..... 2: fffffffffffffe00 marker enter user v\n ..... 3: 000000000040044d\n ..... 4: 00000000004004b6 oldest entry\n\nDebugging output in get_perf_callchain():\n\n [ 857.769909] CALLCHAIN: CPU8 ip\u003d40044d regs-\u003ecs\u003d10 user_mode(regs)\u003d0\n\nThe problem is that the kernel entry in 1: points to a user level\naddress. How can that be?\n\nThe reason is that with PEBS sampling the instruction that caused the event\nto occur and the instruction where the CPU was when the interrupt was posted\nmay be far apart. And sometime during that time window, the privilege level may\nchange. This happens, for instance, when the PEBS sample is taken close to a\nkernel entry point. Here PEBS, eventing IP (real_ip) captured a user level\ninstruction. But by the time the PMU interrupt fired, the processor had already\nentered kernel space. This is why the debug output shows a user address with\nuser_mode() false.\n\nThe problem comes from PEBS not recording the code segment (cs) register.\nThe register is used in x86_64 to determine if executing in kernel vs user\nspace. This is okay because the kernel has a software workaround called\nset_linear_ip(). But the issue in setup_pebs_sample_data() is that\nset_linear_ip() is never called on the real_ip value when it is available\n(Haswell and later) and precise_ip \u003e 1.\n\nThis patch fixes this problem and eliminates the callchain discrepancy.\n\nThe patch restructures the code around set_linear_ip() to minimize the number\nof times the IP has to be set.\n\nSigned-off-by: Stephane Eranian \u003ceranian@google.com\u003e\nCc: Alexander Shishkin \u003calexander.shishkin@linux.intel.com\u003e\nCc: Arnaldo Carvalho de Melo \u003cacme@redhat.com\u003e\nCc: Jiri Olsa \u003cjolsa@redhat.com\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Vince Weaver \u003cvincent.weaver@maine.edu\u003e\nCc: kan.liang@intel.com\nLink: http://lkml.kernel.org/r/1521788507-10231-1-git-send-email-eranian@google.com\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\n" }, { "commit": "3c1f05835cbf9fdfe60b81c718d82ceb94b6c55e", "tree": "b554c520676ffc32a1c8c2dc3e77f200b6a27816", "parents": [ "d8ba61ba58c88d5207c1ba2f7d9a2280e7d03be9" ], "author": { "name": "Josh Poimboeuf", "email": "jpoimboe@redhat.com", "time": "Thu Mar 22 13:00:37 2018 -0500" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Tue Mar 27 08:21:29 2018 +0200" }, "message": "objtool: Add Clang support\n\nSince the ORC unwinder was made the default on x86_64, Clang-built\ndefconfig kernels have triggered some new objtool warnings:\n\n drivers/gpu/drm/i915/i915_gpu_error.o: warning: objtool: i915_error_printf()+0x6c: return with modified stack frame\n drivers/gpu/drm/i915/intel_display.o: warning: objtool: pipe_config_err()+0xa6: return with modified stack frame\n\nThe problem is that objtool has never seen clang-built binaries before.\n\nShockingly enough, objtool is apparently able to follow the code flow\nmostly fine, except for one instruction sequence. Instead of a LEAVE\ninstruction, clang restores RSP and RBP the long way:\n\n 67c: 48 89 ec mov %rbp,%rsp\n 67f: 5d pop %rbp\n\nTeach objtool about this new code sequence.\n\nReported-and-test-by: Matthias Kaehlcke \u003cmka@chromium.org\u003e\nSigned-off-by: Josh Poimboeuf \u003cjpoimboe@redhat.com\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Matthias Kaehlcke \u003cmka@chromium.org\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nLink: http://lkml.kernel.org/r/fce88ce81c356eedcae7f00ed349cfaddb3363cc.1521741586.git.jpoimboe@redhat.com\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\n" }, { "commit": "a117f73dc2430443f23e18367fa545981129c1a6", "tree": "44fdfd016ee58bc825b5c8c52f65d730eda9b2c8", "parents": [ "423c9db29943cfc43e3a408192e9efa4178af6a1" ], "author": { "name": "Shahar Klein", "email": "shahark@mellanox.com", "time": "Tue Mar 20 14:44:40 2018 +0200" }, "committer": { "name": "Saeed Mahameed", "email": "saeedm@mellanox.com", "time": "Mon Mar 26 13:59:08 2018 -0700" }, "message": "net/mlx5e: Sync netdev vxlan ports at open\n\nWhen mlx5_core is loaded it is expected to sync ports\nwith all vxlan devices so it can support vxlan encap/decap.\nThis is done via udp_tunnel_get_rx_info(). Currently this\ncall is set in mlx5e_nic_enable() and if the netdev is not in\nNETREG_REGISTERED state it will not be called.\n\nNormally on load the netdev state is not NETREG_REGISTERED\nso udp_tunnel_get_rx_info() will not be called.\n\nMoving udp_tunnel_get_rx_info() to mlx5e_open() so\nit will be called on netdev UP event and allow encap/decap.\n\nFixes: 610e89e05c3f (\"net/mlx5e: Don\u0027t sync netdev state when not registered\")\nSigned-off-by: Shahar Klein \u003cshahark@mellanox.com\u003e\nReviewed-by: Roi Dayan \u003croid@mellanox.com\u003e\nSigned-off-by: Saeed Mahameed \u003csaeedm@mellanox.com\u003e\n" }, { "commit": "423c9db29943cfc43e3a408192e9efa4178af6a1", "tree": "50f6c81a73a24b91a913e72db8145e046afe8cf9", "parents": [ "af1607c37d9d85a66fbcf43b7f11bf3d94b9bb69" ], "author": { "name": "Or Gerlitz", "email": "ogerlitz@mellanox.com", "time": "Tue Mar 13 21:43:43 2018 +0200" }, "committer": { "name": "Saeed Mahameed", "email": "saeedm@mellanox.com", "time": "Mon Mar 26 13:58:48 2018 -0700" }, "message": "net/mlx5e: Avoid using the ipv6 stub in the TC offload neigh update path\n\nCurrently we use the global ipv6_stub var to access the ipv6 global\nnd table. This practice gets us to troubles when the stub is only partially\nset e.g when ipv6 is loaded under the disabled policy. In this case, as of commit\n343d60aada5a (\"ipv6: change ipv6_stub_impl.ipv6_dst_lookup to take net argument\")\nthe stub is not null, but stub-\u003end_tbl is and we crash.\n\nAs we can access the ipv6 nd_tbl directly, the fix is just to avoid the\nreference through the stub. There is one place in the code where we\nissue ipv6 route lookup and keep doing it through the stub, but that\nmentioned commit makes sure we get -EAFNOSUPPORT from the stack.\n\nFixes: 232c001398ae (\"net/mlx5e: Add support to neighbour update flow\")\nSigned-off-by: Or Gerlitz \u003cogerlitz@mellanox.com\u003e\nReviewed-by: Aviv Heller \u003cavivh@mellanox.com\u003e\nSigned-off-by: Saeed Mahameed \u003csaeedm@mellanox.com\u003e\n" }, { "commit": "af1607c37d9d85a66fbcf43b7f11bf3d94b9bb69", "tree": "d5ef16d5368c382f762506f00ba76ac1af35e361", "parents": [ "4246f698dd58e3c6246fa919ef0b0a1d29a57e4a" ], "author": { "name": "Jianbo Liu", "email": "jianbol@mellanox.com", "time": "Thu Mar 08 09:20:55 2018 +0000" }, "committer": { "name": "Saeed Mahameed", "email": "saeedm@mellanox.com", "time": "Mon Mar 26 13:58:15 2018 -0700" }, "message": "net/mlx5e: Fix memory usage issues in offloading TC flows\n\nFor NIC flows, the parsed attributes are not freed when we exit\nsuccessfully from mlx5e_configure_flower().\n\nThere is possible double free for eswitch flows. If error is returned\nfrom rhashtable_insert_fast(), the parse attrs will be freed in\nmlx5e_tc_del_flow(), but they will be freed again before exiting\nmlx5e_configure_flower().\n\nTo fix both issues we do the following:\n(1) change the condition that determines if to issue the free call to\n check if this flow is NIC flow, or it does not have encap action.\n(2) reorder the code such that that the check and free calls are done\n before we attempt to add into the hash table.\n\nFixes: 232c001398ae (\u0027net/mlx5e: Add support to neighbour update flow\u0027)\nSigned-off-by: Jianbo Liu \u003cjianbol@mellanox.com\u003e\nReviewed-by: Or Gerlitz \u003cogerlitz@mellanox.com\u003e\nReviewed-by: Roi Dayan \u003croid@mellanox.com\u003e\nSigned-off-by: Saeed Mahameed \u003csaeedm@mellanox.com\u003e\n" }, { "commit": "4246f698dd58e3c6246fa919ef0b0a1d29a57e4a", "tree": "daeaa5e6027bdf110dc27177239398ee7b005957", "parents": [ "b392a2078b5e0094ff38aa0c9d2a31b3f607d4ef" ], "author": { "name": "Roi Dayan", "email": "roid@mellanox.com", "time": "Wed Feb 28 12:56:42 2018 +0200" }, "committer": { "name": "Saeed Mahameed", "email": "saeedm@mellanox.com", "time": "Mon Mar 26 13:58:15 2018 -0700" }, "message": "net/mlx5e: Fix traffic being dropped on VF representor\n\nIncrease representor netdev RQ size to avoid dropped packets.\nThe current size (two) is just too small to keep up with\nconventional slow path traffic patterns.\nAlso match the SQ size to the RQ size.\n\nFixes: cb67b832921c (\"net/mlx5e: Introduce SRIOV VF representors\")\nSigned-off-by: Roi Dayan \u003croid@mellanox.com\u003e\nReviewed-by: Paul Blakey \u003cpaulb@mellanox.com\u003e\nReviewed-by: Or Gerlitz \u003cogerlitz@mellanox.com\u003e\nSigned-off-by: Saeed Mahameed \u003csaeedm@mellanox.com\u003e\n" }, { "commit": "b392a2078b5e0094ff38aa0c9d2a31b3f607d4ef", "tree": "65942abe7e55a0bc77fdff8f523b678d1efd3c4d", "parents": [ "f125376b06bcc57dfb0216ac8d6ec6d5dcf81025" ], "author": { "name": "Moshe Shemesh", "email": "moshe@mellanox.com", "time": "Thu Feb 15 12:41:48 2018 +0200" }, "committer": { "name": "Saeed Mahameed", "email": "saeedm@mellanox.com", "time": "Mon Mar 26 13:58:15 2018 -0700" }, "message": "net/mlx5e: Verify coalescing parameters in range\n\nAdd check of coalescing parameters received through ethtool are within\nrange of values supported by the HW.\nDriver gets the coalescing rx/tx-usecs and rx/tx-frames as set by the\nusers through ethtool. The ethtool support up to 32 bit value for each.\nHowever, mlx5 modify cq limits the coalescing time parameter to 12 bit\nand coalescing frames parameters to 16 bits.\nReturn out of range error if user tries to set these parameters to\nhigher values.\n\nFixes: f62b8bb8f2d3 (\u0027net/mlx5: Extend mlx5_core to support ConnectX-4 Ethernet functionality\u0027)\nSigned-off-by: Moshe Shemesh \u003cmoshe@mellanox.com\u003e\nSigned-off-by: Saeed Mahameed \u003csaeedm@mellanox.com\u003e\n" }, { "commit": "f125376b06bcc57dfb0216ac8d6ec6d5dcf81025", "tree": "63c1ad7d36d691a764a5e56b92beaa8192270d33", "parents": [ "5ecadff0b6cfb52ba5d1bd07c6372acea5418c39" ], "author": { "name": "Or Gerlitz", "email": "ogerlitz@mellanox.com", "time": "Thu Feb 15 12:39:55 2018 +0200" }, "committer": { "name": "Saeed Mahameed", "email": "saeedm@mellanox.com", "time": "Mon Mar 26 13:58:15 2018 -0700" }, "message": "net/mlx5: Make eswitch support to depend on switchdev\n\nAdd dependancy for switchdev to be congfigured as any user-space control\nplane SW is expected to use the HW switchdev ID to locate the representors\nrelated to VFs of a certain PF and apply SW/offloaded switching on them.\n\nFixes: e80541ecabd5 (\u0027net/mlx5: Add CONFIG_MLX5_ESWITCH Kconfig\u0027)\nSigned-off-by: Or Gerlitz \u003cogerlitz@mellanox.com\u003e\nReviewed-by: Mark Bloch \u003cmarkb@mellanox.com\u003e\nSigned-off-by: Saeed Mahameed \u003csaeedm@mellanox.com\u003e\n" }, { "commit": "5ecadff0b6cfb52ba5d1bd07c6372acea5418c39", "tree": "76365bb7d3d65f15a073932144a71c5b6f68f830", "parents": [ "84c9c8f2ac3c22924d30643894fcf7597c633d3e" ], "author": { "name": "Or Gerlitz", "email": "ogerlitz@mellanox.com", "time": "Tue Feb 13 13:43:39 2018 +0200" }, "committer": { "name": "Saeed Mahameed", "email": "saeedm@mellanox.com", "time": "Mon Mar 26 13:58:15 2018 -0700" }, "message": "net/mlx5e: Use 32 bits to store VF representor SQ number\n\nSQs are 32 and not 16 bits, hence it\u0027s wrong to use only 16 bits to\nstore the sq number for which are going to set steering rule, fix that.\n\nFixes: cb67b832921c (\u0027net/mlx5e: Introduce SRIOV VF representors\u0027)\nSigned-off-by: Or Gerlitz \u003cogerlitz@mellanox.com\u003e\nReviewed-by: Mark Bloch \u003cmarkb@mellanox.com\u003e\nSigned-off-by: Saeed Mahameed \u003csaeedm@mellanox.com\u003e\n" }, { "commit": "84c9c8f2ac3c22924d30643894fcf7597c633d3e", "tree": "c3025635c0c3b61388e1b24daf8ca3e315bb9798", "parents": [ "3c82b372a9f44aa224b8d5106ff6f1ad516fa8a8" ], "author": { "name": "Jianbo Liu", "email": "jianbol@mellanox.com", "time": "Fri Mar 02 02:09:08 2018 +0000" }, "committer": { "name": "Saeed Mahameed", "email": "saeedm@mellanox.com", "time": "Mon Mar 26 13:58:15 2018 -0700" }, "message": "net/mlx5e: Don\u0027t override vport admin link state in switchdev mode\n\nThe vport admin original link state will be re-applied after returning\nback to legacy mode, it is not right to change the admin link state value\nwhen in switchdev mode.\n\nUse direct vport commands to alter logical vport state in netdev\nrepresentor open/close flows rather than the administrative eswitch API.\n\nFixes: 20a1ea674783 (\u0027net/mlx5e: Support VF vport link state control for SRIOV switchdev mode\u0027)\nSigned-off-by: Jianbo Liu \u003cjianbol@mellanox.com\u003e\nReviewed-by: Roi Dayan \u003croid@mellanox.com\u003e\nReviewed-by: Or Gerlitz \u003cogerlitz@mellanox.com\u003e\nSigned-off-by: Saeed Mahameed \u003csaeedm@mellanox.com\u003e\n" }, { "commit": "3c82b372a9f44aa224b8d5106ff6f1ad516fa8a8", "tree": "234f5d4775eb3adf915f7420bd9e58f7ce8d3793", "parents": [ "1c82c9e1f2ba9f32ac41012b91abddd639010f7a" ], "author": { "name": "Sean Wang", "email": "sean.wang@mediatek.com", "time": "Mon Mar 26 18:07:10 2018 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 26 13:09:42 2018 -0400" }, "message": "net: dsa: mt7530: fix module autoloading for OF platform drivers\n\nIt\u0027s required to create a modules.alias via MODULE_DEVICE_TABLE helper\nfor the OF platform driver. Otherwise, module autoloading cannot work.\n\nSigned-off-by: Sean Wang \u003csean.wang@mediatek.com\u003e\nReviewed-by: Andrew Lunn \u003candrew@lunn.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1c82c9e1f2ba9f32ac41012b91abddd639010f7a", "tree": "538b156048cb41b404b0b7556806b888805e7cae", "parents": [ "aaa3149bbee9ba9b4e6f0bd6e3e7d191edeae942" ], "author": { "name": "Sean Wang", "email": "sean.wang@mediatek.com", "time": "Mon Mar 26 18:07:09 2018 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 26 13:09:41 2018 -0400" }, "message": "net: dsa: mt7530: remove redundant MODULE_ALIAS entries\n\nMODULE_ALIAS exports information to allow the module to be auto-loaded at\nboot for the drivers registered using legacy platform registration.\n\nHowever, currently the driver is always used by DT-only platform,\nMODULE_ALIAS is redundant and should be removed properly.\n\nSigned-off-by: Sean Wang \u003csean.wang@mediatek.com\u003e\nReviewed-by: Andrew Lunn \u003candrew@lunn.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "aaa3149bbee9ba9b4e6f0bd6e3e7d191edeae942", "tree": "83b2fdd2611348cfcb83b5253e94c5c8edd2fb6f", "parents": [ "f3d801baf118c9d452ee7c278df16880c892e669" ], "author": { "name": "Jason Wang", "email": "jasowang@redhat.com", "time": "Mon Mar 26 16:10:23 2018 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 26 12:59:01 2018 -0400" }, "message": "vhost_net: add missing lock nesting notation\n\nWe try to hold TX virtqueue mutex in vhost_net_rx_peek_head_len()\nafter RX virtqueue mutex is held in handle_rx(). This requires an\nappropriate lock nesting notation to calm down deadlock detector.\n\nFixes: 0308813724606 (\"vhost_net: basic polling support\")\nReported-by: syzbot+7f073540b1384a614e09@syzkaller.appspotmail.com\nSigned-off-by: Jason Wang \u003cjasowang@redhat.com\u003e\nAcked-by: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f3d801baf118c9d452ee7c278df16880c892e669", "tree": "cb8a380a7f2541a8f5120bed436cb9aa6f231be9", "parents": [ "982cf3b3999d39a2eaca0a65542df33c19b5d814" ], "author": { "name": "Torsten Hilbrich", "email": "torsten.hilbrich@secunet.com", "time": "Mon Mar 26 07:19:57 2018 +0200" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 26 12:54:59 2018 -0400" }, "message": "net/usb/qmi_wwan.c: Add USB id for lt4120 modem\n\nThis is needed to support the modem found in HP EliteBook 820 G3.\n\nSigned-off-by: Torsten Hilbrich \u003ctorsten.hilbrich@secunet.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "982cf3b3999d39a2eaca0a65542df33c19b5d814", "tree": "36d984cbe955ff04323c64fa4032c16809f2daa7", "parents": [ "e49c78f4aa1d3985226a61edcd48dc002227581f" ], "author": { "name": "Xin Long", "email": "lucien.xin@gmail.com", "time": "Mon Mar 26 01:25:06 2018 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 26 12:51:45 2018 -0400" }, "message": "team: move dev_mc_sync after master_upper_dev_link in team_port_add\n\nThe same fix as in \u0027bonding: move dev_mc_sync after master_upper_dev_link\nin bond_enslave\u0027 is needed for team driver.\n\nThe panic can be reproduced easily:\n\n ip link add team1 type team\n ip link set team1 up\n ip link add link team1 vlan1 type vlan id 80\n ip link set vlan1 master team1\n\nFixes: cb41c997d444 (\"team: team should sync the port\u0027s uc/mc addrs when add a port\")\nSigned-off-by: Xin Long \u003clucien.xin@gmail.com\u003e\nAcked-by: Jiri Pirko \u003cjiri@mellanox.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e49c78f4aa1d3985226a61edcd48dc002227581f", "tree": "92874b623663faa0b49a6f7497aa1b3c410d8784", "parents": [ "eb82a994479245a79647d302f9b4eb8e7c9d7ca6", "9f5a90c107741b864398f4ac0014711a8c1d8474" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 26 12:51:06 2018 -0400" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 26 12:51:06 2018 -0400" }, "message": "Merge branch \u0027bond-hwaddr-sync-fixes\u0027\n\nXin Long says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nbonding: a bunch of fixes for dev hwaddr sync in bond_enslave\n\nThis patchset is mainly to fix a crash when adding vlan as slave of\nbond which is also the parent link in patch 2/3, and also fix some\nerr process problems in bond_enslave in patch 1/3 and 3/3.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9f5a90c107741b864398f4ac0014711a8c1d8474", "tree": "92874b623663faa0b49a6f7497aa1b3c410d8784", "parents": [ "ae42cc62a9f07f1f6979054ed92606b9c30f4a2e" ], "author": { "name": "Xin Long", "email": "lucien.xin@gmail.com", "time": "Mon Mar 26 01:16:47 2018 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 26 12:51:06 2018 -0400" }, "message": "bonding: process the err returned by dev_set_allmulti properly in bond_enslave\n\nWhen dev_set_promiscuity(1) succeeds but dev_set_allmulti(1) fails,\ndev_set_promiscuity(-1) should be done before going to the err path.\nOtherwise, dev-\u003epromiscuity will leak.\n\nFixes: 7e1a1ac1fbaa (\"bonding: Check return of dev_set_promiscuity/allmulti\")\nSigned-off-by: Xin Long \u003clucien.xin@gmail.com\u003e\nAcked-by: Andy Gospodarek \u003candy@greyhouse.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ae42cc62a9f07f1f6979054ed92606b9c30f4a2e", "tree": "01a68bd811a25483f2fef432180cd26a94084678", "parents": [ "5c78f6bfae2b10ff70e21d343e64584ea6280c26" ], "author": { "name": "Xin Long", "email": "lucien.xin@gmail.com", "time": "Mon Mar 26 01:16:46 2018 +0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 26 12:51:05 2018 -0400" }, "message": "bonding: move dev_mc_sync after master_upper_dev_link in bond_enslave\n\nBeniamino found a crash when adding vlan as slave of bond which is also\nthe parent link:\n\n ip link add bond1 type bond\n ip link set bond1 up\n ip link add link bond1 vlan1 type vlan id 80\n ip link set vlan1 master bond1\n\nThe call trace is as below:\n\n [\u003cffffffffa850842a\u003e] queued_spin_lock_slowpath+0xb/0xf\n [\u003cffffffffa8515680\u003e] _raw_spin_lock+0x20/0x30\n [\u003cffffffffa83f6f07\u003e] dev_mc_sync+0x37/0x80\n [\u003cffffffffc08687dc\u003e] vlan_dev_set_rx_mode+0x1c/0x30 [8021q]\n [\u003cffffffffa83efd2a\u003e] __dev_set_rx_mode+0x5a/0xa0\n [\u003cffffffffa83f7138\u003e] dev_mc_sync_multiple+0x78/0x80\n [\u003cffffffffc084127c\u003e] bond_enslave+0x67c/0x1190 [bonding]\n [\u003cffffffffa8401909\u003e] do_setlink+0x9c9/0xe50\n [\u003cffffffffa8403bf2\u003e] rtnl_newlink+0x522/0x880\n [\u003cffffffffa8403ff7\u003e] rtnetlink_rcv_msg+0xa7/0x260\n [\u003cffffffffa8424ecb\u003e] netlink_rcv_skb+0xab/0xc0\n [\u003cffffffffa83fe498\u003e] rtnetlink_rcv+0x28/0x30\n [\u003cffffffffa8424850\u003e] netlink_unicast+0x170/0x210\n [\u003cffffffffa8424bf8\u003e] netlink_sendmsg+0x308/0x420\n [\u003cffffffffa83cc396\u003e] sock_sendmsg+0xb6/0xf0\n\nThis is actually a dead lock caused by sync slave hwaddr from master when\nthe master is the slave\u0027s \u0027slave\u0027. This dead loop check is actually done\nby netdev_master_upper_dev_link. However, Commit 1f718f0f4f97 (\"bonding:\npopulate neighbour\u0027s private on enslave\") moved it after dev_mc_sync.\n\nThis patch is to fix it by moving dev_mc_sync after master_upper_dev_link,\nso that this loop check would be earlier than dev_mc_sync. It also moves\nif (mode \u003d\u003d BOND_MODE_8023AD) into if (!bond_uses_primary) clause as an\nimprovement.\n\nNote team driver also has this issue, I will fix it in another patch.\n\nFixes: 1f718f0f4f97 (\"bonding: populate neighbour\u0027s private on enslave\")\nReported-by: Beniamino Galvani \u003cbgalvani@redhat.com\u003e\nSigned-off-by: Xin Long \u003clucien.xin@gmail.com\u003e\nAcked-by: Andy Gospodarek \u003candy@greyhouse.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" } ], "next": "5c78f6bfae2b10ff70e21d343e64584ea6280c26" }